Issues · ScopeCreep-zip/open-sesame · GitHub

Labels Milestones New issue

feat(cli): sesame status --doctor — security posture, health check, and observability endpoint

#20

· usrbinkat opened

on Mar 24, 2026

Test coverage: core-fuzzy has no fuzzy match scoring tests (only frecency)

#19

· usrbinkat opened

on Mar 23, 2026

Test coverage: daemon-clipboard (3 tests), daemon-snippets (3 tests), daemon-input (5 tests) minimal coverage

#18

· usrbinkat opened

on Mar 23, 2026

Test coverage: no end-to-end IPC secret round-trip test

#17

· usrbinkat opened

on Mar 23, 2026

Test coverage: no Landlock/seccomp policy correctness tests

#16

· usrbinkat opened

on Mar 23, 2026

Test coverage: daemon-profile has zero unit tests (IPC bus host, key rotation, profile dispatch)

#15

· usrbinkat opened

on Mar 23, 2026

Security: Argon2id 19 MiB working memory allocated on unprotected heap during key derivation

#14

· usrbinkat opened

on Mar 23, 2026

Security: SIGKILL/OOM kill bypasses volatile zeroing in Drop

#11

· usrbinkat opened

on Mar 23, 2026

Security: memfd_secret unavailable fallback degrades to mmap with direct-map exposure

#10

· usrbinkat opened

on Mar 23, 2026

Security: Serde Visitor visit_byte_buf fallback creates heap copy for non-postcard deserializers

#9

· usrbinkat opened

on Mar 23, 2026

Security: SecureBytes::new(Vec<u8>) retains heap exposure window for external API returns

#8

· usrbinkat opened

on Mar 23, 2026

Security: SSH agent library heap buffer not zeroized after signature

#7

· usrbinkat opened

on Mar 23, 2026