v1.8.4

Issues

• [P3][licensing-ux] msg FeatureTierBlocked sugere 'set effective_tier', mas é ignorado em enforced (a runtime audita 'no effect') — remediação enganosa

  P3
  Bug

  DataBoar/data-boar#932 · Filter by author FabioLeitao opened on Jun 17, 2026 · v1.8.4
  2

  

• [P2][security][lab-op] pi3b com (ALL) NOPASSWD: ALL — viola o contrato narrow-sudoers do lab-op

  P2
  Bug

  DataBoar/data-boar#959 · Filter by author FabioLeitao opened on Jun 19, 2026 · v1.8.4
  

• [P2][maestro][observability] Logs estruturados ao vivo (lnav) + status centralizado — zero falha silenciosa (pós-1.7.4, NÃO-blocker)

  P2
  Feature

  DataBoar/data-boar#967 · Filter by author FabioLeitao opened on Jun 21, 2026 · v1.8.4
  

• [P1][maestro][completão] Collect entrega dirs VAZIOS apesar de [SUCCESS] — audit_trail não chega (falha SILENCIOSA, 26 findings não confirmados)

  P1
  Bug

  DataBoar/data-boar#968 · Filter by author FabioLeitao opened on Jun 21, 2026 · v1.8.4
  4

  

• [P1][security] Supply-chain Layer 3 (agente/editor: Cursor/Electron) + Layer 4 (detecção: canary tokens) — estende ADR-0074

  P1
  Feature

  DataBoar/data-boar#989 · Filter by author FabioLeitao opened on Jun 21, 2026 · v1.8.4
  1

  

• [P2][demo][build] scripts/demo.ps1 (paridade Windows) + fix CLI-drift do --headless

  P2
  Bug

  DataBoar/data-boar#1006 · Filter by author FabioLeitao opened on Jun 22, 2026 · v1.8.4
  

• [P3][audit][detection] piicatcher gap analysis — VERIFIED: 4 gaps + 2 parciais · 2 cobertos · 1 inconclusivo

  P3
  Task

  DataBoar/data-boar#1049 · Filter by author FabioLeitao opened on Jun 27, 2026 · v1.8.4
  

• [P3][audit][detection] Presidio (Carrion Crow) — 4 learnings acionáveis: decision_process provenance (PRIO) · DICOM gap · salted-hash · batch API contract

  P3
  Task

  DataBoar/data-boar#1054 · Filter by author FabioLeitao opened on Jun 29, 2026 · v1.8.4
  1

  

• [H1][compliance][expansion] Cobertura compliance/sensitive-discovery — Fase 2: completar jurisdições privacy GLOBAIS + abrir eixo SETORIAL/industry-standard (config-first, zero-code)

  Feature

  DataBoar/data-boar#1055 · Filter by author FabioLeitao opened on Jun 29, 2026 · v1.8.4
  1

  

• security-ops: avaliar Pipelock (egress firewall) pras sessões autônomas de agente com PAT no ambiente

  no-code-yetP2security
  Task

  DataBoar/data-boar#1068 · Filter by author FabioLeitao opened on Jun 30, 2026 · v1.8.4
  

• feat(detection): hierarchical norm_tag + Data-Subject axis (hybrid #1071 slice 1, closes #1069)

  domain:LGPDenhancementP2
  Feature

  DataBoar/data-boar#1074 · Filter by author FabioLeitao opened on Jun 30, 2026 · v1.8.4
  

• feat(detection): optional Data-Use axis (purpose/finalidade, hybrid #1071 slice 2)

  domain:LGPDenhancementP2
  Feature

  DataBoar/data-boar#1075 · Filter by author FabioLeitao opened on Jun 30, 2026 · v1.8.4
  1

  

• feat(export): Fideslang data_category export adapter (hybrid #1071 slice 3, W-novo-1)

  domain:LGPDenhancementP3
  Feature

  DataBoar/data-boar#1076 · Filter by author FabioLeitao opened on Jun 30, 2026 · v1.8.4
  

• feat(ops): avaliar Litestream para disaster recovery do SQLite local (integrity_anchor/findings/build-digest) — Comensal de DR

  enhancementno-code-yetP2
  Task

  DataBoar/data-boar#1077 · Filter by author FabioLeitao opened on Jun 30, 2026 · v1.8.4
  2

  

• security/research: ReDoS guard L1 (#829) é heurística sintática — gap estrutural p/ L2/L3 não-confiável (#865); fortalecer testes + decisão→ADR

  enhancementno-code-yetP3security
  Task

  DataBoar/data-boar#1081 · Filter by author FabioLeitao opened on Jun 30, 2026 · v1.8.4
  1

  

• security/research: Wasmtime (capability-sandbox) reservado p/ plugin de 3º NÃO-confiável do #865 — NÃO p/ sidecar first-party (IPC #695 já resolve)

  enhancementno-code-yetP3security
  Task

  DataBoar/data-boar#1082 · Filter by author FabioLeitao opened on Jun 30, 2026 · v1.8.4
  1

  

• feat/audit(detection): access_exposure_flag — cruzar finding de alta-sensibilidade com permissão excessiva já lida no scan (priorização de risco, sem UEBA)

  enhancementno-code-yetP2
  Feature

  DataBoar/data-boar#1083 · Filter by author FabioLeitao opened on Jun 30, 2026 · v1.8.4
  2

  

• feat/audit(dsar): DSAR busca-por-titular — localizar dado de UM titular por busca exata (não entity-resolution); metadata-first privacy-safe vs value-level opt-in

  domain:LGPDenhancementno-code-yetP2
  Feature

  DataBoar/data-boar#1084 · Filter by author FabioLeitao opened on Jun 30, 2026 · v1.8.4
  2

  

• [P2][feat][trust] --explain / dry-run do scan-plan — mostrar O QUE/ONDE vai escanear + custo ANTES de tocar no dado

  P2
  Feature

  DataBoar/data-boar#1099 · Filter by author FabioLeitao opened on Jun 30, 2026 · v1.8.4
  

• [security][P3] ReDoS guard L1: cobrir alternância ambígua ((a|a)*) na heurística + fixar regex-runtime não-confiável no escopo L2/L3 (#865)

  P3
  Bug

  DataBoar/data-boar#1114 · Filter by author FabioLeitao opened on Jul 1, 2026 · v1.8.4
  

• fix(gate): alinhar GATE_TRAILER_RE (attest) ao tripwire — mesmos verbos Gate-*-Approved-By + ':' via fonte única

  Bug

  DataBoar/data-boar#1115 · Filter by author FabioLeitao opened on Jul 1, 2026 · v1.8.4
  

• [P1][feat][ux] post3: default config.yaml (path "~", OS-flexível) + --web usa default + targets no dashBOARd

  P1
  Feature

  DataBoar/data-boar#1129 · Filter by author FabioLeitao opened on Jul 2, 2026 · v1.8.4
  

• [P3][security] api/routes.py: gate de /docs /redoc /openapi.json quando require_api_key off

  P3
  Bug

  DataBoar/data-boar#1136 · Filter by author FabioLeitao opened on Jul 3, 2026 · v1.8.4
  

• [P3][security] strict_ssrf opt-in: guard de faixas internas (RFC1918/link-local/loopback) para URLs de egress (notify.py, token_url)

  P3
  Feature

  DataBoar/data-boar#1139 · Filter by author FabioLeitao opened on Jul 3, 2026 · v1.8.4
  

• [P3][security] api/webauthn_routes.py: HTTP 400 ecoa string de exceção da lib — retornar detail genérico, logar server-side

  P3
  Bug

  DataBoar/data-boar#1141 · Filter by author FabioLeitao opened on Jul 3, 2026 · v1.8.4
  1