Search results

The operator layer holds its state in process memory — a job survives that, a publisher does not

priority::high

type::task

Status: Open.

#122 In thelabmd/UST-Protocol;

· thelabmd opened on Aug 1, 2026

diarium: the generated rules say nothing about secrets — and an entry cannot be unwritten

type::task

Status: Open.

#121 In thelabmd/UST-Protocol;

· thelabmd opened on Aug 1, 2026

A profile declares its discovery surfaces but not its anchoring substrates — so one silent leg is indistinguishable from a dark publisher

priority::high

type::task

Status: Open.

#120 In thelabmd/UST-Protocol;

· thelabmd opened on Jul 31, 2026

web-signer duplicates the canonical form instead of building on ust-light — three copies, one of them self-declared byte-identical

assurance-gate

priority::high

type::task

Status: Open.

#119 In thelabmd/UST-Protocol;

· thelabmd opened on Jul 31, 2026

·  

Tools & surfaces — MCP · CLI · web-signer · connectors

Independent regrade of our CI assurance map — the half of the self-audit its author cannot do

assurance-gate

help wantedExtra attention is neededExtra attention is needed

priority::high

self-auditWe audited our own instrument — distinct from an external or red-team passWe audited our own instrument — distinct from an external or red-team pass

Status: Open.

#113 In thelabmd/UST-Protocol;

· thelabmd opened on Jul 30, 2026

·  

Audits

Drive down the two pinned assurance residuals — 53 checks unproven, 48 spec sections untraced

assurance-gate

priority::medium

self-auditWe audited our own instrument — distinct from an external or red-team passWe audited our own instrument — distinct from an external or red-team pass

type::task

Status: Open.

#91 In thelabmd/UST-Protocol;

· thelabmd opened on Jul 25, 2026

·  

Reference checker (L1) — the independent TCB

Decompose the combine-core into clean layered packages (offline verify / resolve / quorum / producer)

securitySecurity finding / hardeningSecurity finding / hardening

type::task

Status: Open.

#88 In thelabmd/UST-Protocol;

· thelabmd opened on Jul 18, 2026

·  

1.0.0 final

npm Trusted Publishing (OIDC) — tokenless publish + automatic provenance

operator

securitySecurity finding / hardeningSecurity finding / hardening

type::task

Status: Open.

#87 In thelabmd/UST-Protocol;

· thelabmd opened on Jul 18, 2026

·  

Tools & surfaces — MCP · CLI · web-signer · connectors

Surfaces — MCP + CLI + web-signer + connectors (shipped; keep in lockstep, expand)

type::task

Status: Open.

#86 In thelabmd/UST-Protocol;

· thelabmd opened on Jul 18, 2026

·  

Tools & surfaces — MCP · CLI · web-signer · connectors

Chain layer — based_on provenance, derivation composition, cross-publisher linking

type::task

Status: Open.

#85 In thelabmd/UST-Protocol;

· thelabmd opened on Jul 18, 2026

·  

Chains — state linked by provenance

Formal model — machine-checked theorems (converges with L2 Lean)

assurance-gate

type::task

Status: Open.

#84 In thelabmd/UST-Protocol;

· thelabmd opened on Jul 18, 2026

·  

L2 — machine-checked soundness (Lean 4)

Formal model — independent human / expert peer review

assurance-gate

help wantedExtra attention is neededExtra attention is needed

type::task

Status: Open.

#83 In thelabmd/UST-Protocol;

· thelabmd opened on Jul 18, 2026

·  

Audits