2026-03-12 - 2026-09-12
Overview
44 Releases published by 1 user
Published
v0.1.46
Published
v0.1.45
Published
v0.1.44
Published
v0.1.43
Published
v0.1.42
Published
v0.1.41
Published
v0.1.40
Published
v0.1.39
Published
v0.1.38
Published
v0.1.37
Published
v0.1.36
Published
v0.1.35
Published
v0.1.34
Published
v0.1.33
Published
v0.1.32
Published
v0.1.31
Published
v0.1.30
Published
v0.1.29
Published
v0.1.28
Published
v0.1.27
Published
v0.1.26
Published
v0.1.25
Published
v0.1.24
Published
v0.1.23
Published
v0.1.22
Published
v0.1.21
Published
v0.1.20
Published
v0.1.19
Published
v0.1.18
Published
v0.1.17
Published
v0.1.16
Published
v0.1.15
Published
v0.1.14
Published
v0.1.13
Published
v0.1.12
Published
v0.1.11
Published
v0.1.8
Published
v0.1.7
Published
v0.1.6
Published
v0.1.4
Published
v0.1.3
Published
v0.1.2
Published
v0.1.1
Published
v0.1.0
297 Issues closed from 1 user
Closed
#298 [Integrity review] Implement 2026-09-08 data-integrity and performance findings
Closed
#293 [Usability] Shared drag-and-drop side-rail layout editor and collapsed grouping
Closed
#294 [Bug] DataGrid action-column visibility and responsive dialog sizing
Closed
#295 [Usability] Consistent action placement, table cards, help discovery and module loading
Closed
#296 [Security / performance] Workspace review and verified hardening — September 2026
Closed
#283 [Feature] Hide package topology behind stable product surfaces
Closed
#284 [Task] Enforce German-reference localization and contextual-help coverage
Closed
#214 [Feature] Configuration package for permit-to-payment workflows
Closed
#292 [Contract] Expose stable semantic-documentation subjects from modules
Closed
#291 [Feature] Add accessible custom appearance overrides and exchange
Closed
#290 [Feature] Add governed tenant and system appearance defaults
Closed
#246 [Feature] Customize theming from palettes to full appearance controls
Closed
#266 [Feature] Configurable side rail ordering by system, tenant, and user preference
Closed
#220 [Feature] Collaboration suite integration strategy
Closed
#269 [Security] Upgrade React Router past RSC CSRF advisory
Closed
#265 [Feature] General configuration export and import
Closed
#286 [Debt] Make the broad Core discovery suite independent of optional module state
Closed
#285 [Feature] Provide task-local quick actions with governed return context
Closed
#264 [Feature] Aggregated statistics should drill down to their underlying data where useful
Closed
#289 Complete semantic actions for pages, workspaces, and panes
Closed
#288 Enforce semantic page archetypes and action-state rules
Closed
#287 Define and enforce semantic page action-bar layouts
Closed
#59 [Feature] Add full DSAR search/export/delete workflow while respecting immutable evidence obligations
Closed
#267 Password fields: add generator action and overlay
Closed
#278 [Feature] Controlled one-time production administrator enrollment
Closed
#282 [Task] Enforce tenant module entitlements across non-request execution paths
Closed
#225 Guided layered UI/UX overhaul for admin and configuration surfaces
Closed
#34 [Task] Server update from WebUI only after CLI backup/restore is proven
Closed
#281 [Debt] Adopt the recovery ledger for module lifecycle and installer effects
Closed
#24 [Feature] Add queue/worker checks covering task publishing, worker startup, retry behavior, stale worker detection, and graceful shutdown
Closed
#30 [Feature] Add monitoring dashboard for queue depth, worker health, storage use, failed/unknown jobs, backup status, and system health
Closed
#205 [Feature] Coordinate bulk individualized invitation send across campaign, mail, and calendar
Closed
#280 [Feature] Define shared institutional-context and governed reference primitives
Closed
#279 [Feature] Add validated module architecture and provider authority declarations
Closed
#224 [Feature] Platform theming system and visual appearance controls
Closed
#29 [Feature] Add backup/restore procedure and restore drill
Closed
#31 [Feature] Extend dashboard with deeper operational metrics once queue, worker, storage, backup, and system-health metrics are stable
Closed
#23 [Feature] Add storage persistence checks for managed files, generated EML/report artifacts, audit-relevant blobs, and backup/restore boundaries
Closed
#216 [Feature] Recurring datasource and data-transformation workflows
Closed
#139 [Task] Operations governance dashboard
Closed
#39 [Debt] Define and implement a DataGrid column sizing contract with min width, preferred percentage/fraction width, max width, and initial layout that respects min/max without de...
Closed
#27 [Feature] Add UI/admin visibility for worker enabled/running/stale queue states
Closed
#138 [Task] Destructive tenant erasure orchestration
Closed
#136 [Task] Evidence bundle verifier
Closed
#137 [Task] Policy impact analysis
Closed
#132 [Task] Cross-module reporting
Closed
#12 [Task] Review broader backend-at-rest encryption needs beyond mail secrets
Closed
#11 [Task] Design encryption key rotation and backup recovery
Closed
#37 [Feature] Allow module configuration so behavior can be controlled through settings
Closed
#134 [Task] Data catalogue
Closed
#105 [Feature] Keep only shell-level admin layout and module aggregation in kernel/core WebUI
Closed
#276 [Feature] Establish generic ownership transfer and recovery-authority workflow
Closed
#277 [Feature] Establish platform optimistic concurrency and conflict-reconciliation contract
Closed
#40 [Debt] Remove legacy compatibility code only after migration/export compatibility requirements are explicit
Closed
#10 [Feature] Add structured log/audit/report redaction regression tests
Closed
#3 [Task] Optimize governance role-template sync for large tenant counts by bulk-loading tenant validation and materialized group/role rows per template instead of querying per ten...
Closed
#6 [Feature] Add session/device listing and revocation UI
Closed
#261 [Task] Add pagination and windowing for large address and calendar views
Closed
#275 [Performance] Split and budget the full-product WebUI entry bundle
Closed
#274 [Performance] Add bounded provider-side search for cross-module reference selectors
Closed
#273 [Performance] Batch tenant-summary providers across tenant list pages
Closed
#38 [Debt] Revisit the fragile DataGrid fill-column/buffer resize issue later with focused tests
Closed
#260 [Debt] Add safe auth principal caching with explicit invalidation
Closed
#262 [Debt] Optimize dev-server reload behavior with many enabled modules
Closed
#270 [Security] Add a durable transactional event bridge for automation triggers
Closed
#187 [Feature] Define project management module and OpenProject API integration
Closed
#133 [Task] Permission-aware search
Closed
#259 [Debt] Add DB query timing and batch auth principal resolution
Closed
#272 [UX] Replace raw cross-module references with typed searchable selectors
Closed
#271 [Feature] Define versioned view-addressable UI surface and effective-view runtime contracts
Closed
#188 [Feature] Define govoplan-datasources module
Closed
#189 [Feature] Define govoplan-dataflow module
Closed
#268 [Test] Prove destructive retirement transaction atomicity on PostgreSQL
Closed
#263 [Bug] DataGrid filters must apply to the full result set, not only the current page
Closed
#135 [Task] Compliance workspace
Closed
#258 [Task] Split auth session check from full user bootstrap
Closed
#245 [Debt] Refactor high-complexity core installer/configuration/runtime functions
Closed
#257 [Audit] Refactor core installer, catalog, and runtime validation complexity hotspots
Closed
#254 [Security audit] Harden module installer subprocess command provenance
Closed
#253 [Security audit] Centralize safe HTTP(S) fetch and URL validation in core
Closed
#255 [Security audit] Replace silent core exception handling with narrow logging
Closed
#256 [Security audit] Document safe SQLAlchemy text usage in migration helpers
Closed
#250 [Debt] Define shared platform API schema primitives across access, admin, policy, and tenancy
Closed
#252 [Debt] Define shared SQLAlchemy change-tracking helpers for modules
Closed
#249 [Debt] Centralize repeated WebUI API client request helpers
Closed
#251 [Debt] Provide shared module runtime proxy helper for modules
Closed
#247 [Feature] Notification settings and preferences surface
Closed
#248 [Feature] Emit notifications for core module installer queue lifecycle
Closed
#242 [Security] Review dynamic module import trust boundary
Closed
#240 [Security] Review dynamic SQL text findings and add safe identifier helpers
Closed
#239 [Security] Centralize outbound URL policy for core fetches and health checks
Closed
#232 [Security] Harden module installer shell command hooks
Closed
#238 [Security] Harden release-doctor shell command execution
Closed
#241 [Supply-chain] Pin Gitea workflow actions to immutable revisions
Closed
#244 [Security] Lock audit toolbox dependencies flagged by OSV
Closed
#237 [Security] Harden installer shell hook execution and command trust boundary
Closed
#243 [Security] Fix audit report capture and duplicate-scan noise
Closed
#235 [Security] Reject wildcard CORS with credentials at runtime
Closed
#236 [Security] Broaden audit/config secret redaction key matching
Closed
#234 [Security] Stop persisting UI API keys in localStorage
Closed
#233 [Security] Redact installer run-record secrets
Closed
#223 [Task] Define release migration squashing and baseline workflow
Closed
#165 [Feature] Define tenant deletion and module cleanup/veto contract
Closed
#86 [Feature] Add delete-veto orchestration through module providers
Closed
#231 [Feature] Target-state module update planner
Closed
#14 [Task] Consider backend-provided exact policy source metadata for "which specific scope caused this value"
Closed
#13 [Task] Surface governance source path more explicitly in tenant details and other admin panels
Closed
#16 [Task] Define inheritance/delegation constraints explicitly: may use, must use, may override, may not override, may merge, may delegate
Closed
#15 [Feature] Add impact analysis before delete, disable, unshare, policy changes, and cascading changes
Closed
#32 [Task] LDAP/OIDC/SAML provisioning; OIDC likely first
Closed
#35 [Task] WebUI-driven update/rollback with backup and rollback guardrails
Closed
#33 [Task] Catch error mail address
Closed
#81 [Feature] Ensure core-only startup still works enough to show shell/health, but access is required for authenticated product use
Closed
#85 [Feature] Define tenant lifecycle events: created, suspended, resumed, deletion requested, erasure completed
Closed
#91 [Feature] Add policy simulation before destructive/limiting changes
Closed
#96 [Task] Introduce outbox table and dispatcher for production-safe event delivery
Closed
#95 [Task] Separate command bus from event bus
Closed
#79 [Feature] Move login/session/admin access UI into access/admin module contributions
Closed
#77 [Feature] Move access permissions and default role templates into the access manifest
Closed
#97 [Feature] Move audit log storage/query/export into audit module
Closed
#78 [Feature] Move access migrations into the access module migration registration
Closed
#70 [Feature] Move or clearly mark these as kernel-stable contracts:
Closed
#131 [Feature] Add IDM/LDAP/OIDC/SAML/SCIM provisioning
Closed
#130 [Feature] Add XRechnung workflow
Closed
#129 [Feature] Add ERP/finance connector
Closed
#128 [Feature] Add DMS/eAkte connector
Closed
#127 [Feature] Add XÖV validation/mapping module
Closed
#126 [Feature] Add FIT-Connect connector
Closed
#125 [Feature] Build govoplan-connectors registry and connector runtime
Closed
#124 [Task] Link existing files/mail/campaign to cases
Closed
#123 [Feature] Add govoplan-recipients / govoplan-address-book
Closed
#122 [Feature] Add govoplan-templates
Closed
#121 [Feature] Add govoplan-forms
Closed
#120 [Feature] Extract/generalize reusable workflow/review patterns into govoplan-workflow
Closed
#119 [Feature] Create govoplan-tasks concept and MVP
Closed
#118 [Feature] Create govoplan-cases concept and MVP
Closed
#89 [Feature] Move delegation ceilings and "more restrictive only" validation into policy
Closed
#88 [Feature] Move hierarchical policy evaluation into policy
Closed
#60 [Task] Decide early self-hosted installer packaging approach: Compose-first script, CLI wizard, generated .env plus runbook, or a staged combination
Closed
#25 [Feature] Add scripts/docs for starting, stopping, resetting, and seeding the production-like dev stack without replacing the minimal dev workflow
Closed
#21 [Feature] Add configuration validation that fails early with actionable messages when required production-like settings are missing
Closed
#20 [Feature] Add .env.example, generated config templates, or a config bootstrap command so new installs are configured intentionally instead of only cloned
Closed
#5 [Task] Check and re-check module boundaries: mail code in campaign and files, file code in mail and campaign, and campaign code in mail and file; also, check against core so cor...
Closed
#50 [Task] Replace direct cross-module SQL lookups with provider/event contracts
Closed
#82 [Feature] Move tenant registry, tenant settings, tenant lifecycle, tenant switching, and tenant deletion orchestration into tenancy
Closed
#63 Move platform admin services and models into owning modules
Closed
#62 [Task] Move legacy admin handler, service, and model ownership out of the access compatibility implementation into access, tenancy, policy, audit, and core settings modules
Closed
#92 [Feature] Move mail/retention effective policy display onto shared policy components
Closed
#87 [Feature] Add tenant lifecycle tests with files/mail/campaign installed and absent
Closed
#98 [Feature] Add event producers for access, tenancy, policy, files, mail, and campaign actions
Closed
#104 [Feature] Move audit admin pages to audit module
Closed
#103 [Feature] Move policy admin pages to policy module
Closed
#99 [Feature] Add evidence bundle export as a later audit capability
Closed
#93 [Feature] Add regression tests for non-viable lower-level options being hidden or disabled
Closed
#90 [Feature] Add explain endpoints and UI component contract for policy source paths
Closed
#94 [Feature] Define typed PlatformEvent envelope with actor, tenant, subject, resource, correlation, causation, classification, and payload
Closed
#101 [Feature] Move access admin pages to access module
Closed
#102 [Feature] Move tenant admin pages to tenancy module
Closed
#107 [Feature] Add WebUI module permutation builds
Closed
#100 [Feature] Define admin route/nav contribution contract
Closed
#227 Codify interface ethics as a product-wide UI doctrine
Closed
#69 [Task] Mark DataGrid work as explicitly deferred
Closed
#75 [Feature] Move accounts, authentication, sessions, API keys, groups, memberships, roles, role assignments, and principal resolution into access
Closed
#164 [Task] Separate tenant lifecycle from membership/roles
Closed
#162 [Task] Inventory tenant model and tenant setting usage
Closed
#84 [Feature] Define TenantResolver and tenant-context protocols in the kernel
Closed
#83 [Feature] Keep memberships and role assignments in access
Closed
#80 [Feature] Define PrincipalResolver and related protocols in the kernel
Closed
#49 [Task] Replace feature-module direct user/group/tenant model imports
Closed
#52 [Task] Remove transitional boundary checker allowlist entries as each contract lands
Closed
#74 [Feature] Add manifest schema/versioning
Closed
#73 [Feature] Add OpenAPI/route collision validation
Closed
#66 [Feature] Add dependency-boundary checks that forbid direct optional module imports
Closed
#230 Unify tree and explorer navigation components across docs, mail, and files
Closed
#229 Finish MessageDisplayPanel consolidation for mail and campaign previews
Closed
#228 Centralize policy table and policy section components in core WebUI
Closed
#68 [Feature] Keep generated WebUI/test artifacts ignored
Closed
#4 [Bug] UI lists often start at index 2, why?
Closed
#222 [Feature] Platform-wide conditional GET and delta API foundation
Closed
#226 [Task] Remediate Python dependency vulnerabilities from 2026-07-09 audit
Closed
#109 [Feature] Add manifest schema tests
Closed
#106 [Feature] Add module permutation backend startup tests
Closed
#67 [Feature] Keep module-matrix tests for core-only, files-only, mail-only, campaign-only, campaign+files, campaign+mail, full product
Closed
#71 [Feature] Add contract tests for manifests, route aggregation, migration registration, and capability discovery
Closed
#116 [Task] Module-matrix CI
Closed
#9 [Task] Run and record Python dependency vulnerability audit such as pip-audit
Closed
#7 [Feature] Add dependency vulnerability audit tooling in CI or documented local workflow
Closed
#8 [Task] Run and record frontend npm audit --omit=dev
Closed
#185 [Task] Which future module comes first after platform cleanup: cases, workflow, or connectors?
Closed
#110 [Feature] Add compatibility import tests until old paths are removed
Closed
#76 [Feature] Keep compatibility imports under govoplan_core.access.* temporarily with deprecation warnings
Closed
#72 [Feature] Add a documented deprecation policy for kernel API changes
Closed
#64 [Feature] Document current module contract as the compatibility baseline
Closed
#65 [Feature] Define which APIs are stable kernel contracts and which are temporary compatibility paths
Closed
#117 [Task] Compatibility/deprecation plan
Closed
#111 [Task] Kernel contract freeze
Closed
#183 [Task] Should admin be one platform module or split across access/tenancy/policy/audit?
Closed
#182 [Task] Should tenants be extracted before policy, or after access but before policy?
Closed
#181 [Task] Is access required for any useful product startup, or should kernel-only expose only health/shell/config pages?
Closed
#180 [Task] Should govoplan-core be renamed conceptually to govoplan-kernel, while keeping package compatibility for now?
Closed
#179 [Task] Write govoplan-idm concept
Closed
#178 [Task] Write govoplan-audit concept
Closed
#177 [Task] Write govoplan-policy concept
Closed
#115 [Task] Audit extraction
Closed
#114 [Task] Policy extraction
Closed
#113 [Task] Tenancy extraction
Closed
#112 [Task] Access extraction
Closed
#215 [Docs] Public-sector integration landscape catalogue
Closed
#198 [Feature] Propose govoplan-dataflow module for pipelines, BI, and source publication
Closed
#197 [Feature] Propose govoplan-datasources module for database, CSV, and file-backed source catalogs
Closed
#195 [Feature] Define OpenDesk stack integration profile
Closed
#196 [Feature] Decide whether GovOPlaN needs a govoplan-projects module or only an OpenProject connector
Closed
#194 [Feature] Define forms module and workflow handoff
Closed
#192 [Feature] Define sources/RSS consume-publish module
Closed
#193 [Feature] Define calendar, Terminplaner, and Terminbuchung module
Closed
#186 [Task] Refine GovOPlaN public-sector module and integration roadmap
Closed
#190 [Feature] Define templates and reporting module boundary
Closed
#221 Persist user UI settings and wire Settings > Interface
Closed
#55 [Task] Decide: Which table names must remain stable for painless migrations?
Closed
#191 [Task] Build public-sector software integration catalogue
Closed
#36 [Feature] Make modules installable, activatable, deactivatable, and uninstallable via the admin interface, including migration and rollback constraints
Closed
#18 [Feature] Add a production-realistic dev profile with Postgres, Redis, Celery worker(s), persistent file/blob storage, and explicit module configuration
Closed
#57 [Task] Decide: Should audit move before policy provenance, or after access/tenancy are split?
Closed
#58 [Task] Decide: How long should core keep compatibility route paths for existing clients?
Closed
#54 [Task] Decide: Should tenant models move with access first, or should govoplan-tenancy be created before moving live models?
Closed
#53 [Task] Decide: Is govoplan-access required for any authenticated deployment, while core-only remains a diagnostics/settings shell?
Closed
#56 [Task] Decide: Should secret encryption remain a kernel primitive or become an access-owned capability?
Closed
#43 [Task] Access extraction Stage 3: Move Live Models And Migrations
Closed
#217 [Feature] Scalability profiles and autoscaling readiness
Closed
#219 [Docs] Hardware sizing matrix and requirements calculator
Closed
#108 [Feature] Add migration registration tests
Closed
#207 PostgreSQL runtime migration and backup/restore policy
Closed
#22 [Task] Run migrations and smoke checks against Postgres in the production-like dev profile, not only SQLite
Closed
#206 [Docs] Personalize user documentation by enabled modules and unavailable capabilities
Closed
#184 [Task] Which event transport is the first production target: DB outbox only, Redis/Celery, or pluggable dispatch?
Closed
#176 [Task] Write govoplan-connectors concept
Closed
#175 [Task] Write govoplan-workflow concept
Closed
#174 [Task] Write govoplan-cases concept
Closed
#28 [Task] Publish deployment/operator documentation from the verified production-like dev profile
Closed
#26 [Task] Draft installer/deployment flow: configure, migrate, create first admin/tenant, enable modules, start web/worker services, and verify health
Closed
#19 [Task] Define the install/runtime configuration contract: database URL, broker/result backend, storage backend/root or object-store credentials, secret/encryption keys, module e...
Closed
#47 [Task] Access extraction Stage 7: Remove Compatibility Debt
Closed
#46 [Task] Access extraction Stage 6: Decouple Feature Modules
Closed
#51 [Task] Move access admin WebUI pages to module route contributions
Closed
#48 [Task] Move auth/session/API-key routes behind access module manifest
Closed
#45 [Task] Access extraction Stage 5: Move Admin And WebUI Contributions
Closed
#44 [Task] Access extraction Stage 4: Move Auth Routes And Dependencies
Closed
#42 [Task] Access extraction Stage 2: Create govoplan-access
Closed
#41 [Task] Access extraction Stage 1: Contract Definitions
Closed
#17 [Task] Keep minimal dev mode supported and documented: SQLite, filesystem storage, and no Redis/Celery unless explicitly enabled
Closed
#2 [Task] Resolve release/version metadata mismatch: source project versions report 0.1.3, while module manifests still report 0.1.2; focused checks fail until these are reconc...
Closed
#213 [Docs] Government operations backbone reference model
Closed
#218 [Feature] Fully UI-managed configuration with safety controls
Closed
#208 [Feature] Configuration package import/export and signed preconfiguration catalogs
Closed
#209 [Task] Harden remote module catalog trust state and replay validation
Closed
#211 [Feature] Add license entitlement diagnostics and issuance workflow hooks
Closed
#212 [Task] Add installer daemon rollback drill and production runbook coverage
Closed
#204 [Feature] Design signed remote WebUI bundle loading for true hot frontend installs
Closed
#210 [Task] Add artifact digest, SBOM, and provenance verification to module installer
Closed
#156 [Feature] Add UI tests for blocked/disallowed lower-level policy choices
Closed
#155 [Feature] Define frontend effective-policy component contract
Closed
#154 [Feature] Define backend explain endpoint shape
Closed
#153 [Feature] Define policy source path format
Closed
#152 [Feature] Define shared PolicyDecision
Closed
#151 [Task] Inventory current mail, retention, RBAC, delegation, and governance policy logic
Closed
#140 [Task] Write a concise kernel responsibility statement in MODULE_ARCHITECTURE.md
Closed
#145 [Feature] Keep compatibility imports documented before extraction begins
Closed
#144 [Feature] Add manifest schema/version validation
Closed
#142 [Feature] Add a dependency-boundary test or lint script
Closed
#141 [Feature] Add "kernel must not own product semantics" as an architecture rule
Closed
#147 [Task] Identify which imports belong to future govoplan-access
Closed
#146 [Task] Inventory all current govoplan_core.access, auth, user, account, group, API key, role, and permission imports
Closed
#143 [Feature] Add backend startup tests for supported module permutations
Closed
#149 [Feature] Define access module manifest target
Closed
#148 [Feature] Define PrincipalResolver protocol in kernel
Closed
#157 [Feature] Define typed event envelope
Closed
#166 [Task] Inventory admin pages by owning future module
Closed
#150 [Feature] Create extraction checklist for models, migrations, routes, services, WebUI pages, and tests
Closed
#169 [Feature] Keep module-specific admin panels in owning modules
Closed
#167 [Feature] Define admin route contribution contract
Closed
#168 [Feature] Move generic admin layout into core WebUI
Closed
#173 [Feature] Keep mailbox, mail policy, mail credential inheritance, and file storage behavior covered by focused tests
Closed
#172 [Feature] Ensure mail does not require campaign
Closed
#171 [Feature] Ensure files does not require campaign
Closed
#170 [Feature] Ensure campaign uses files/mail only through capabilities/metadata/API boundaries
Closed
#163 [Feature] Define TenantResolver protocol
Closed
#161 [Task] Identify domain events from access, tenancy, policy, files, mail, campaign
Closed
#160 [Feature] Define audit module MVP boundaries
Closed
#159 [Feature] Add correlation/causation ID support
Closed
#158 [Task] Decide command bus versus event bus API shape
Closed
#203 [Feature] Add post-install activation checklist and status for Admin > Modules
Closed
#200 [Feature] Add module/core compatibility metadata and installer version preflight
Closed
#201 [Feature] Add module uninstall guard providers for data, migrations, workers, and schedulers
Closed
#202 [Feature] Add supervised installer watchdog with health-check rollback
Closed
#199 [Task] Create and publish govoplan-scheduling repository
Closed
#61 Split platform admin routes into module contributions
Closed
#1 [Task] Wire core auth compatibility through access capabilities
301 Issues created by 1 user
Opened
#1 [Task] Wire core auth compatibility through access capabilities
Opened
#2 [Task] Resolve release/version metadata mismatch: source project versions report 0.1.3, while module manifests still report 0.1.2; focused checks fail until these are reconc...
Opened
#3 [Task] Optimize governance role-template sync for large tenant counts by bulk-loading tenant validation and materialized group/role rows per template instead of querying per ten...
Opened
#4 [Bug] UI lists often start at index 2, why?
Opened
#5 [Task] Check and re-check module boundaries: mail code in campaign and files, file code in mail and campaign, and campaign code in mail and file; also, check against core so cor...
Opened
#6 [Feature] Add session/device listing and revocation UI
Opened
#7 [Feature] Add dependency vulnerability audit tooling in CI or documented local workflow
Opened
#8 [Task] Run and record frontend npm audit --omit=dev
Opened
#9 [Task] Run and record Python dependency vulnerability audit such as pip-audit
Opened
#10 [Feature] Add structured log/audit/report redaction regression tests
Opened
#11 [Task] Design encryption key rotation and backup recovery
Opened
#12 [Task] Review broader backend-at-rest encryption needs beyond mail secrets
Opened
#13 [Task] Surface governance source path more explicitly in tenant details and other admin panels
Opened
#14 [Task] Consider backend-provided exact policy source metadata for "which specific scope caused this value"
Opened
#15 [Feature] Add impact analysis before delete, disable, unshare, policy changes, and cascading changes
Opened
#16 [Task] Define inheritance/delegation constraints explicitly: may use, must use, may override, may not override, may merge, may delegate
Opened
#17 [Task] Keep minimal dev mode supported and documented: SQLite, filesystem storage, and no Redis/Celery unless explicitly enabled
Opened
#18 [Feature] Add a production-realistic dev profile with Postgres, Redis, Celery worker(s), persistent file/blob storage, and explicit module configuration
Opened
#19 [Task] Define the install/runtime configuration contract: database URL, broker/result backend, storage backend/root or object-store credentials, secret/encryption keys, module e...
Opened
#20 [Feature] Add .env.example, generated config templates, or a config bootstrap command so new installs are configured intentionally instead of only cloned
Opened
#21 [Feature] Add configuration validation that fails early with actionable messages when required production-like settings are missing
Opened
#22 [Task] Run migrations and smoke checks against Postgres in the production-like dev profile, not only SQLite
Opened
#23 [Feature] Add storage persistence checks for managed files, generated EML/report artifacts, audit-relevant blobs, and backup/restore boundaries
Opened
#24 [Feature] Add queue/worker checks covering task publishing, worker startup, retry behavior, stale worker detection, and graceful shutdown
Opened
#25 [Feature] Add scripts/docs for starting, stopping, resetting, and seeding the production-like dev stack without replacing the minimal dev workflow
Opened
#26 [Task] Draft installer/deployment flow: configure, migrate, create first admin/tenant, enable modules, start web/worker services, and verify health
Opened
#27 [Feature] Add UI/admin visibility for worker enabled/running/stale queue states
Opened
#28 [Task] Publish deployment/operator documentation from the verified production-like dev profile
Opened
#29 [Feature] Add backup/restore procedure and restore drill
Opened
#30 [Feature] Add monitoring dashboard for queue depth, worker health, storage use, failed/unknown jobs, backup status, and system health
Opened
#31 [Feature] Extend dashboard with deeper operational metrics once queue, worker, storage, backup, and system-health metrics are stable
Opened
#32 [Task] LDAP/OIDC/SAML provisioning; OIDC likely first
Opened
#33 [Task] Catch error mail address
Opened
#34 [Task] Server update from WebUI only after CLI backup/restore is proven
Opened
#35 [Task] WebUI-driven update/rollback with backup and rollback guardrails
Opened
#36 [Feature] Make modules installable, activatable, deactivatable, and uninstallable via the admin interface, including migration and rollback constraints
Opened
#37 [Feature] Allow module configuration so behavior can be controlled through settings
Opened
#38 [Debt] Revisit the fragile DataGrid fill-column/buffer resize issue later with focused tests
Opened
#39 [Debt] Define and implement a DataGrid column sizing contract with min width, preferred percentage/fraction width, max width, and initial layout that respects min/max without de...
Opened
#40 [Debt] Remove legacy compatibility code only after migration/export compatibility requirements are explicit
Opened
#41 [Task] Access extraction Stage 1: Contract Definitions
Opened
#42 [Task] Access extraction Stage 2: Create govoplan-access
Opened
#43 [Task] Access extraction Stage 3: Move Live Models And Migrations
Opened
#44 [Task] Access extraction Stage 4: Move Auth Routes And Dependencies
Opened
#45 [Task] Access extraction Stage 5: Move Admin And WebUI Contributions
Opened
#46 [Task] Access extraction Stage 6: Decouple Feature Modules
Opened
#47 [Task] Access extraction Stage 7: Remove Compatibility Debt
Opened
#48 [Task] Move auth/session/API-key routes behind access module manifest
Opened
#49 [Task] Replace feature-module direct user/group/tenant model imports
Opened
#50 [Task] Replace direct cross-module SQL lookups with provider/event contracts
Opened
#51 [Task] Move access admin WebUI pages to module route contributions
Opened
#52 [Task] Remove transitional boundary checker allowlist entries as each contract lands
Opened
#53 [Task] Decide: Is govoplan-access required for any authenticated deployment, while core-only remains a diagnostics/settings shell?
Opened
#54 [Task] Decide: Should tenant models move with access first, or should govoplan-tenancy be created before moving live models?
Opened
#55 [Task] Decide: Which table names must remain stable for painless migrations?
Opened
#56 [Task] Decide: Should secret encryption remain a kernel primitive or become an access-owned capability?
Opened
#57 [Task] Decide: Should audit move before policy provenance, or after access/tenancy are split?
Opened
#58 [Task] Decide: How long should core keep compatibility route paths for existing clients?
Opened
#59 [Feature] Add full DSAR search/export/delete workflow while respecting immutable evidence obligations
Opened
#60 [Task] Decide early self-hosted installer packaging approach: Compose-first script, CLI wizard, generated .env plus runbook, or a staged combination
Opened
#61 Split platform admin routes into module contributions
Opened
#62 [Task] Move legacy admin handler, service, and model ownership out of the access compatibility implementation into access, tenancy, policy, audit, and core settings modules
Opened
#63 Move platform admin services and models into owning modules
Opened
#64 [Feature] Document current module contract as the compatibility baseline
Opened
#65 [Feature] Define which APIs are stable kernel contracts and which are temporary compatibility paths
Opened
#66 [Feature] Add dependency-boundary checks that forbid direct optional module imports
Opened
#67 [Feature] Keep module-matrix tests for core-only, files-only, mail-only, campaign-only, campaign+files, campaign+mail, full product
Opened
#68 [Feature] Keep generated WebUI/test artifacts ignored
Opened
#69 [Task] Mark DataGrid work as explicitly deferred
Opened
#70 [Feature] Move or clearly mark these as kernel-stable contracts:
Opened
#71 [Feature] Add contract tests for manifests, route aggregation, migration registration, and capability discovery
Opened
#72 [Feature] Add a documented deprecation policy for kernel API changes
Opened
#73 [Feature] Add OpenAPI/route collision validation
Opened
#74 [Feature] Add manifest schema/versioning
Opened
#75 [Feature] Move accounts, authentication, sessions, API keys, groups, memberships, roles, role assignments, and principal resolution into access
Opened
#76 [Feature] Keep compatibility imports under govoplan_core.access.* temporarily with deprecation warnings
Opened
#77 [Feature] Move access permissions and default role templates into the access manifest
Opened
#78 [Feature] Move access migrations into the access module migration registration
Opened
#79 [Feature] Move login/session/admin access UI into access/admin module contributions
Opened
#80 [Feature] Define PrincipalResolver and related protocols in the kernel
Opened
#81 [Feature] Ensure core-only startup still works enough to show shell/health, but access is required for authenticated product use
Opened
#82 [Feature] Move tenant registry, tenant settings, tenant lifecycle, tenant switching, and tenant deletion orchestration into tenancy
Opened
#83 [Feature] Keep memberships and role assignments in access
Opened
#84 [Feature] Define TenantResolver and tenant-context protocols in the kernel
Opened
#85 [Feature] Define tenant lifecycle events: created, suspended, resumed, deletion requested, erasure completed
Opened
#86 [Feature] Add delete-veto orchestration through module providers
Opened
#87 [Feature] Add tenant lifecycle tests with files/mail/campaign installed and absent
Opened
#88 [Feature] Move hierarchical policy evaluation into policy
Opened
#89 [Feature] Move delegation ceilings and "more restrictive only" validation into policy
Opened
#90 [Feature] Add explain endpoints and UI component contract for policy source paths
Opened
#91 [Feature] Add policy simulation before destructive/limiting changes
Opened
#92 [Feature] Move mail/retention effective policy display onto shared policy components
Opened
#93 [Feature] Add regression tests for non-viable lower-level options being hidden or disabled
Opened
#94 [Feature] Define typed PlatformEvent envelope with actor, tenant, subject, resource, correlation, causation, classification, and payload
Opened
#95 [Task] Separate command bus from event bus
Opened
#96 [Task] Introduce outbox table and dispatcher for production-safe event delivery
Opened
#97 [Feature] Move audit log storage/query/export into audit module
Opened
#98 [Feature] Add event producers for access, tenancy, policy, files, mail, and campaign actions
Opened
#99 [Feature] Add evidence bundle export as a later audit capability
Opened
#100 [Feature] Define admin route/nav contribution contract
Opened
#101 [Feature] Move access admin pages to access module
Opened
#102 [Feature] Move tenant admin pages to tenancy module
Opened
#103 [Feature] Move policy admin pages to policy module
Opened
#104 [Feature] Move audit admin pages to audit module
Opened
#105 [Feature] Keep only shell-level admin layout and module aggregation in kernel/core WebUI
Opened
#106 [Feature] Add module permutation backend startup tests
Opened
#107 [Feature] Add WebUI module permutation builds
Opened
#108 [Feature] Add migration registration tests
Opened
#109 [Feature] Add manifest schema tests
Opened
#110 [Feature] Add compatibility import tests until old paths are removed
Opened
#111 [Task] Kernel contract freeze
Opened
#112 [Task] Access extraction
Opened
#113 [Task] Tenancy extraction
Opened
#114 [Task] Policy extraction
Opened
#115 [Task] Audit extraction
Opened
#116 [Task] Module-matrix CI
Opened
#117 [Task] Compatibility/deprecation plan
Opened
#118 [Feature] Create govoplan-cases concept and MVP
Opened
#119 [Feature] Create govoplan-tasks concept and MVP
Opened
#120 [Feature] Extract/generalize reusable workflow/review patterns into govoplan-workflow
Opened
#121 [Feature] Add govoplan-forms
Opened
#122 [Feature] Add govoplan-templates
Opened
#123 [Feature] Add govoplan-recipients / govoplan-address-book
Opened
#124 [Task] Link existing files/mail/campaign to cases
Opened
#125 [Feature] Build govoplan-connectors registry and connector runtime
Opened
#126 [Feature] Add FIT-Connect connector
Opened
#127 [Feature] Add XÖV validation/mapping module
Opened
#128 [Feature] Add DMS/eAkte connector
Opened
#129 [Feature] Add ERP/finance connector
Opened
#130 [Feature] Add XRechnung workflow
Opened
#131 [Feature] Add IDM/LDAP/OIDC/SAML/SCIM provisioning
Opened
#132 [Task] Cross-module reporting
Opened
#133 [Task] Permission-aware search
Opened
#134 [Task] Data catalogue
Opened
#135 [Task] Compliance workspace
Opened
#136 [Task] Evidence bundle verifier
Opened
#137 [Task] Policy impact analysis
Opened
#138 [Task] Destructive tenant erasure orchestration
Opened
#139 [Task] Operations governance dashboard
Opened
#140 [Task] Write a concise kernel responsibility statement in MODULE_ARCHITECTURE.md
Opened
#141 [Feature] Add "kernel must not own product semantics" as an architecture rule
Opened
#142 [Feature] Add a dependency-boundary test or lint script
Opened
#143 [Feature] Add backend startup tests for supported module permutations
Opened
#144 [Feature] Add manifest schema/version validation
Opened
#145 [Feature] Keep compatibility imports documented before extraction begins
Opened
#146 [Task] Inventory all current govoplan_core.access, auth, user, account, group, API key, role, and permission imports
Opened
#147 [Task] Identify which imports belong to future govoplan-access
Opened
#148 [Feature] Define PrincipalResolver protocol in kernel
Opened
#149 [Feature] Define access module manifest target
Opened
#150 [Feature] Create extraction checklist for models, migrations, routes, services, WebUI pages, and tests
Opened
#151 [Task] Inventory current mail, retention, RBAC, delegation, and governance policy logic
Opened
#152 [Feature] Define shared PolicyDecision
Opened
#153 [Feature] Define policy source path format
Opened
#154 [Feature] Define backend explain endpoint shape
Opened
#155 [Feature] Define frontend effective-policy component contract
Opened
#156 [Feature] Add UI tests for blocked/disallowed lower-level policy choices
Opened
#157 [Feature] Define typed event envelope
Opened
#158 [Task] Decide command bus versus event bus API shape
Opened
#159 [Feature] Add correlation/causation ID support
Opened
#160 [Feature] Define audit module MVP boundaries
Opened
#161 [Task] Identify domain events from access, tenancy, policy, files, mail, campaign
Opened
#162 [Task] Inventory tenant model and tenant setting usage
Opened
#163 [Feature] Define TenantResolver protocol
Opened
#164 [Task] Separate tenant lifecycle from membership/roles
Opened
#165 [Feature] Define tenant deletion and module cleanup/veto contract
Opened
#166 [Task] Inventory admin pages by owning future module
Opened
#167 [Feature] Define admin route contribution contract
Opened
#168 [Feature] Move generic admin layout into core WebUI
Opened
#169 [Feature] Keep module-specific admin panels in owning modules
Opened
#170 [Feature] Ensure campaign uses files/mail only through capabilities/metadata/API boundaries
Opened
#171 [Feature] Ensure files does not require campaign
Opened
#172 [Feature] Ensure mail does not require campaign
Opened
#173 [Feature] Keep mailbox, mail policy, mail credential inheritance, and file storage behavior covered by focused tests
Opened
#174 [Task] Write govoplan-cases concept
Opened
#175 [Task] Write govoplan-workflow concept
Opened
#176 [Task] Write govoplan-connectors concept
Opened
#177 [Task] Write govoplan-policy concept
Opened
#178 [Task] Write govoplan-audit concept
Opened
#179 [Task] Write govoplan-idm concept
Opened
#180 [Task] Should govoplan-core be renamed conceptually to govoplan-kernel, while keeping package compatibility for now?
Opened
#181 [Task] Is access required for any useful product startup, or should kernel-only expose only health/shell/config pages?
Opened
#182 [Task] Should tenants be extracted before policy, or after access but before policy?
Opened
#183 [Task] Should admin be one platform module or split across access/tenancy/policy/audit?
Opened
#184 [Task] Which event transport is the first production target: DB outbox only, Redis/Celery, or pluggable dispatch?
Opened
#185 [Task] Which future module comes first after platform cleanup: cases, workflow, or connectors?
Opened
#186 [Task] Refine GovOPlaN public-sector module and integration roadmap
Opened
#187 [Feature] Define project management module and OpenProject API integration
Opened
#188 [Feature] Define govoplan-datasources module
Opened
#189 [Feature] Define govoplan-dataflow module
Opened
#190 [Feature] Define templates and reporting module boundary
Opened
#191 [Task] Build public-sector software integration catalogue
Opened
#192 [Feature] Define sources/RSS consume-publish module
Opened
#193 [Feature] Define calendar, Terminplaner, and Terminbuchung module
Opened
#194 [Feature] Define forms module and workflow handoff
Opened
#195 [Feature] Define OpenDesk stack integration profile
Opened
#196 [Feature] Decide whether GovOPlaN needs a govoplan-projects module or only an OpenProject connector
Opened
#197 [Feature] Propose govoplan-datasources module for database, CSV, and file-backed source catalogs
Opened
#198 [Feature] Propose govoplan-dataflow module for pipelines, BI, and source publication
Opened
#199 [Task] Create and publish govoplan-scheduling repository
Opened
#200 [Feature] Add module/core compatibility metadata and installer version preflight
Opened
#201 [Feature] Add module uninstall guard providers for data, migrations, workers, and schedulers
Opened
#202 [Feature] Add supervised installer watchdog with health-check rollback
Opened
#203 [Feature] Add post-install activation checklist and status for Admin > Modules
Opened
#204 [Feature] Design signed remote WebUI bundle loading for true hot frontend installs
Opened
#205 [Feature] Coordinate bulk individualized invitation send across campaign, mail, and calendar
Opened
#206 [Docs] Personalize user documentation by enabled modules and unavailable capabilities
Opened
#207 PostgreSQL runtime migration and backup/restore policy
Opened
#208 [Feature] Configuration package import/export and signed preconfiguration catalogs
Opened
#209 [Task] Harden remote module catalog trust state and replay validation
Opened
#210 [Task] Add artifact digest, SBOM, and provenance verification to module installer
Opened
#211 [Feature] Add license entitlement diagnostics and issuance workflow hooks
Opened
#212 [Task] Add installer daemon rollback drill and production runbook coverage
Opened
#213 [Docs] Government operations backbone reference model
Opened
#214 [Feature] Configuration package for permit-to-payment workflows
Opened
#215 [Docs] Public-sector integration landscape catalogue
Opened
#216 [Feature] Recurring datasource and data-transformation workflows
Opened
#217 [Feature] Scalability profiles and autoscaling readiness
Opened
#218 [Feature] Fully UI-managed configuration with safety controls
Opened
#219 [Docs] Hardware sizing matrix and requirements calculator
Opened
#220 [Feature] Collaboration suite integration strategy
Opened
#221 Persist user UI settings and wire Settings > Interface
Opened
#222 [Feature] Platform-wide conditional GET and delta API foundation
Opened
#223 [Task] Define release migration squashing and baseline workflow
Opened
#224 [Feature] Platform theming system and visual appearance controls
Opened
#225 Guided layered UI/UX overhaul for admin and configuration surfaces
Opened
#226 [Task] Remediate Python dependency vulnerabilities from 2026-07-09 audit
Opened
#227 Codify interface ethics as a product-wide UI doctrine
Opened
#228 Centralize policy table and policy section components in core WebUI
Opened
#229 Finish MessageDisplayPanel consolidation for mail and campaign previews
Opened
#230 Unify tree and explorer navigation components across docs, mail, and files
Opened
#231 [Feature] Target-state module update planner
Opened
#232 [Security] Harden module installer shell command hooks
Opened
#235 [Security] Reject wildcard CORS with credentials at runtime
Opened
#233 [Security] Redact installer run-record secrets
Opened
#234 [Security] Stop persisting UI API keys in localStorage
Opened
#236 [Security] Broaden audit/config secret redaction key matching
Opened
#237 [Security] Harden installer shell hook execution and command trust boundary
Opened
#238 [Security] Harden release-doctor shell command execution
Opened
#239 [Security] Centralize outbound URL policy for core fetches and health checks
Opened
#240 [Security] Review dynamic SQL text findings and add safe identifier helpers
Opened
#241 [Supply-chain] Pin Gitea workflow actions to immutable revisions
Opened
#242 [Security] Review dynamic module import trust boundary
Opened
#243 [Security] Fix audit report capture and duplicate-scan noise
Opened
#244 [Security] Lock audit toolbox dependencies flagged by OSV
Opened
#245 [Debt] Refactor high-complexity core installer/configuration/runtime functions
Opened
#246 [Feature] Customize theming from palettes to full appearance controls
Opened
#247 [Feature] Notification settings and preferences surface
Opened
#248 [Feature] Emit notifications for core module installer queue lifecycle
Opened
#249 [Debt] Centralize repeated WebUI API client request helpers
Opened
#250 [Debt] Define shared platform API schema primitives across access, admin, policy, and tenancy
Opened
#251 [Debt] Provide shared module runtime proxy helper for modules
Opened
#252 [Debt] Define shared SQLAlchemy change-tracking helpers for modules
Opened
#253 [Security audit] Centralize safe HTTP(S) fetch and URL validation in core
Opened
#254 [Security audit] Harden module installer subprocess command provenance
Opened
#255 [Security audit] Replace silent core exception handling with narrow logging
Opened
#256 [Security audit] Document safe SQLAlchemy text usage in migration helpers
Opened
#257 [Audit] Refactor core installer, catalog, and runtime validation complexity hotspots
Opened
#262 [Debt] Optimize dev-server reload behavior with many enabled modules
Opened
#261 [Task] Add pagination and windowing for large address and calendar views
Opened
#260 [Debt] Add safe auth principal caching with explicit invalidation
Opened
#259 [Debt] Add DB query timing and batch auth principal resolution
Opened
#258 [Task] Split auth session check from full user bootstrap
Opened
#263 [Bug] DataGrid filters must apply to the full result set, not only the current page
Opened
#264 [Feature] Aggregated statistics should drill down to their underlying data where useful
Opened
#265 [Feature] General configuration export and import
Opened
#266 [Feature] Configurable side rail ordering by system, tenant, and user preference
Opened
#267 Password fields: add generator action and overlay
Opened
#268 [Test] Prove destructive retirement transaction atomicity on PostgreSQL
Opened
#269 [Security] Upgrade React Router past RSC CSRF advisory
Opened
#270 [Security] Add a durable transactional event bridge for automation triggers
Opened
#271 [Feature] Define versioned view-addressable UI surface and effective-view runtime contracts
Opened
#272 [UX] Replace raw cross-module references with typed searchable selectors
Opened
#273 [Performance] Batch tenant-summary providers across tenant list pages
Opened
#274 [Performance] Add bounded provider-side search for cross-module reference selectors
Opened
#275 [Performance] Split and budget the full-product WebUI entry bundle
Opened
#277 [Feature] Establish platform optimistic concurrency and conflict-reconciliation contract
Opened
#276 [Feature] Establish generic ownership transfer and recovery-authority workflow
Opened
#278 [Feature] Controlled one-time production administrator enrollment
Opened
#279 [Feature] Add validated module architecture and provider authority declarations
Opened
#280 [Feature] Define shared institutional-context and governed reference primitives
Opened
#281 [Debt] Adopt the recovery ledger for module lifecycle and installer effects
Opened
#282 [Task] Enforce tenant module entitlements across non-request execution paths
Opened
#284 [Task] Enforce German-reference localization and contextual-help coverage
Opened
#283 [Feature] Hide package topology behind stable product surfaces
Opened
#285 [Feature] Provide task-local quick actions with governed return context
Opened
#286 [Debt] Make the broad Core discovery suite independent of optional module state
Opened
#287 Define and enforce semantic page action-bar layouts
Opened
#288 Enforce semantic page archetypes and action-state rules
Opened
#289 Complete semantic actions for pages, workspaces, and panes
Opened
#291 [Feature] Add accessible custom appearance overrides and exchange
Opened
#290 [Feature] Add governed tenant and system appearance defaults
Opened
#292 [Contract] Expose stable semantic-documentation subjects from modules
Opened
#293 [Usability] Shared drag-and-drop side-rail layout editor and collapsed grouping
Opened
#294 [Bug] DataGrid action-column visibility and responsive dialog sizing
Opened
#295 [Usability] Consistent action placement, table cards, help discovery and module loading
Opened
#296 [Security / performance] Workspace review and verified hardening — September 2026
Opened
#297 [Security follow-up] Isolate untrusted parsing and reference execution with hard resource limits
Opened
#298 [Integrity review] Implement 2026-09-08 data-integrity and performance findings
Opened
#299 Verify integrity release against real mail and storage providers
Opened
#300 Unify rail grouping, table-card edges, and editor exit actions
Opened
#301 [UI review] Core / shared shell: visual and interaction conformance