Covers everything shipped since the #007 handoff: the json/csv kinds, .xlsx conversion, public sharing, syntax highlighting/table styling, and the #008-#012 fixes. Prioritizes round-3 probe suggestions by risk, with sharing (the new unauthenticated surface) and the #010 quota race (no automated coverage) called out as the highest-value targets. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| 001-csrf-behind-reverse-proxy.md | ||
| 002-env-example-not-actually-loaded.md | ||
| 003-model-max-length-silently-unenforced.md | ||
| 004-html-fragment-content-not-validated-server-side.md | ||
| 005-patch-silently-mishandles-invalid-input.md | ||
| 006-failed-post-still-evicts-artifacts.md | ||
| 007-handover-to-llm-test-2026-09-02.md | ||
| 008-source-fields-untyped-and-mangled.md | ||
| 009-content-shape-check-false-positive-in-script-strings.md | ||
| 010-concurrent-posts-race-past-quota.md | ||
| 011-vetted-cdn-snippets-for-html-full.md | ||
| 012-posting-script-missing-json-csv-support.md | ||
| 013-handover-to-llm-test-round-2.md | ||
| README.md | ||
Issues
One file per issue: NNN-short-slug.md, numbered sequentially. Each file
has a title, status (Open / Fixed / By design), description, and resolution
once closed.