Back to milestones

Q4/26

Open

Due by December 31, 2026

•Last updated Oct 27, 2026

50% complete

Dead inputSum accumulation in ValidateTransferActionTokenTypes: value-conservation check documented but not performed
Task
LFDT-Panurus/panurus#2426 · opened on Sep 29, 2026 · Q4/26
Dead inputSum accumulation in ValidateTransferActionTokenTypes: value-conservation check documented but not performed
Unread
#2427 opened Sep 29, 2026 · Updated Oct 26, 2026
28
identity: areMe converts storage errors into false-negative ownership answers
LFDT-Panurus/panurus#2319 · opened on Aug 26, 2026 · Q4/26
db/kvs: hashicorp Vault backend ignores context and swallows errors into false-negative existence checks
Bug
LFDT-Panurus/panurus#2037 · opened on Jul 30, 2026 · Q4/26
CI: share the Go build cache across jobs to avoid cold recompilation
Task
LFDT-Panurus/panurus#2343 · opened on Aug 31, 2026 · Q4/26
Observability, Alerting, and Automated Throttle Escalation [LOW]
Task
LFDT-Panurus/panurus#1643 · opened on May 3, 2026 · Q4/26
1
Bound All Work Triggered by a Single Token Selection Request [HIGH]
Task
LFDT-Panurus/panurus#1641 · opened on May 3, 2026 · Q4/26
1
request approval: check if the request was already approved
Unread
#2430 opened Sep 29, 2026 · Updated Oct 19, 2026
12
limit the number of tokens a transaction retrieves and locks
Unread
#1707 opened May 14, 2026 · Updated Oct 26, 2026Draft
64
Re-enable commented-out integration test matrix entries in tests.yml
Task
LFDT-Panurus/panurus#1945 · opened on Jul 17, 2026 · Q4/26
2
tokens service: rework PruneInvalidUnspentTokens
Task
LFDT-Panurus/panurus#988 · opened on Mar 18, 2025 · Q4/26
4
Bound remaining unlimited storage reads and inputs (materialized queries, IN-clause expansion, opaque keystore writes) [MED]
Feature
LFDT-Panurus/panurus#1984 · opened on Jul 23, 2026 · Q4/26
ttx: require explicit wallet selection in business operations
LFDT-Panurus/panurus#2014 · opened on Jul 29, 2026 · Q4/26
Token selection is amount-blind, and lock acquisition is serial and pinned to the vault database
Feature
LFDT-Panurus/panurus#2017 · opened on Jul 30, 2026 · Q4/26
Transaction records cannot represent an action spending tokens of multiple enrollment IDs
LFDT-Panurus/panurus#2242 · opened on Aug 17, 2026 · Q4/26
1
TMSProvider holds its provider-wide write lock across public parameters resolution, so one hung ledger fetch blocks every TMS on the node
Bug
LFDT-Panurus/panurus#2306 · opened on Aug 25, 2026 · Q4/26
Index HasTokenForIdentity without a btree over owner_identity (BYTEA too large for Postgres)
LFDT-Panurus/panurus#1911 · opened on Jul 14, 2026 · Q4/26
identity: hot-path allocation and redundant-work bundle across signer/verifier resolution
Task
LFDT-Panurus/panurus#2075 · opened on Jul 30, 2026 · Q4/26
Support an optional versioned policy reference on token outputs
LFDT-Panurus/panurus#2104 · opened on Aug 3, 2026 · Q4/26
4
tokens: misc low-severity findings (unique-key guard that still notifies, nil-deref constructor, unchecked type assertion)
Bug
LFDT-Panurus/panurus#2187 · opened on Aug 11, 2026 · Q4/26
2
Ledger drift checks: walkTransactions' offset pagination is unstable under concurrent writes
LFDT-Panurus/panurus#2431 · opened on Sep 30, 2026 · Q4/26
Ledger drift checks: CheckLocalCompleteness re-parses full transaction history every sweep
LFDT-Panurus/panurus#2425 · opened on Sep 29, 2026 · Q4/26
gocognit split: cmd/* tooling modules
LFDT-Panurus/panurus#2389 · opened on Sep 16, 2026 · Q4/26
2
gocognit split: integration module
LFDT-Panurus/panurus#2388 · opened on Sep 16, 2026 · Q4/26
gocognit split: token/services misc (tokens, auditor, certifier, interop/htlc, driver)
LFDT-Panurus/panurus#2387 · opened on Sep 16, 2026 · Q4/26