Issues

• Re-running sysknife-setup while the daemon runs fails with ETXTBSY and can leave mismatched binaries

  bugeasy
  lacs-project/sysknife#563 · Filter by author vladimirrott opened on Oct 1, 2026
  1

• sysknife-setup's .gitignore check is a substring match, so a comment naming .mcp.json hides the API-key warning

  bugeasy
  lacs-project/sysknife#562 · Filter by author vladimirrott opened on Oct 1, 2026
  1

• --dry-run exits 0 for a plan that breaks --max-risk or that this distro cannot run

  bugeasy
  lacs-project/sysknife#561 · Filter by author vladimirrott opened on Oct 1, 2026
  1

• README says the CLI's approval gate is sysknife approve; the CLI approves in-process after its own prompt

  documentationeasy
  lacs-project/sysknife#560 · Filter by author vladimirrott opened on Oct 1, 2026
  1

• SetSshdOption reports success while an earlier sshd_config.d drop-in overrides the value it wrote

  bugmedium
  lacs-project/sysknife#559 · Filter by author vladimirrott opened on Oct 1, 2026
  1

• On Postgres the daemon anchors the audit chain but every reader reports the anchor unsupported and exits 2

  bugmedium
  lacs-project/sysknife#558 · Filter by author vladimirrott opened on Oct 1, 2026
  1

• audit checkpoint resolves the store with default_database_path, so on a packaged install it anchors the wrong chain

  bugeasy
  lacs-project/sysknife#557 · Filter by author vladimirrott opened on Oct 1, 2026
  1

• MCP audit tools disagree with the CLI: doctor says intact over an erased store, verify hides a broken check

  bugeasy
  lacs-project/sysknife#556 · Filter by author vladimirrott opened on Oct 1, 2026
  1

• ci-local.sh says PASS and exits 0 when cargo-nextest is missing, after running zero Rust tests

  bugeasy
  lacs-project/sysknife#555 · Filter by author vladimirrott opened on Oct 1, 2026
  1

• Re-running a failed release job fails at gh release create, though the upload step says re-runs work

  bugeasy
  lacs-project/sysknife#554 · Filter by author vladimirrott opened on Oct 1, 2026
  1

• release.yml publishes for any v*.*.* tag without checking the commit is on main or that CI passed

  bugeasy
  lacs-project/sysknife#553 · Filter by author vladimirrott opened on Oct 1, 2026
  1

• Tool output reaches the LLM provider with no secret screen, though admission says credentials must not

  bugmedium
  lacs-project/sysknife#552 · Filter by author vladimirrott opened on Oct 1, 2026
  1

• The prompt says the daemon rejects unknown param keys; nothing does, so a wrong optional key is ignored

  bugmedium
  lacs-project/sysknife#551 · Filter by author vladimirrott opened on Oct 1, 2026
  1

• audit verify exits 1 on an untampered SQLite store holding a canceled, swept or running job, and never says why

  bugmedium
  lacs-project/sysknife#550 · Filter by author vladimirrott opened on Oct 1, 2026
  1

• make install puts the sudoers grants in place before the helpers they name, and make check is weaker than CI

  bugeasy
  lacs-project/sysknife#549 · Filter by author vladimirrott opened on Oct 1, 2026
  1

• check_no_secrets.sh has no pattern for xAI, DeepSeek or Mistral keys and misses two OpenAI key shapes

  bugeasy
  lacs-project/sysknife#548 · Filter by author vladimirrott opened on Oct 1, 2026
  1

• verify-action-pins.sh skips any action whose comment ends in (branch), not only the one it was meant for

  bugeasy
  lacs-project/sysknife#547 · Filter by author vladimirrott opened on Oct 1, 2026
  1

• A daemon refusal at preview time mid-run exits 3 "planning failed" after earlier steps executed

  bugeasy
  lacs-project/sysknife#546 · Filter by author vladimirrott opened on Oct 1, 2026
  1

• sysknife approve ignores --dry-run, --max-risk and --non-interactive and mints a receipt anyway

  bugeasy
  lacs-project/sysknife#545 · Filter by author vladimirrott opened on Oct 1, 2026
  1

• sysknife_execute drops the results of steps that already ran when a later step hits a transport error

  bugeasy
  lacs-project/sysknife#544 · Filter by author vladimirrott opened on Oct 1, 2026
  1

• Intent admission matches substrings, so "disk-full", "/etc/passwd" and "password aging" are refused as secrets

  bugeasy
  lacs-project/sysknife#543 · Filter by author vladimirrott opened on Oct 1, 2026
  1

• --step-by-step skips the plan-level risk gate, so --max-risk refuses only after earlier steps ran

  bugeasy
  lacs-project/sysknife#542 · Filter by author vladimirrott opened on Oct 1, 2026
  1

• Post-release manual steps for v0.24.0

  lacs-project/sysknife#532 · Filter by author github-actions opened on Sep 29, 2026
  

• Post-release manual steps for v0.23.0

  lacs-project/sysknife#525 · Filter by author github-actions opened on Sep 28, 2026
  

• The lockfile pins a yanked chacha20, so a fresh resolve does not reproduce the shipped build

  bugclaimedhelp wanted
  lacs-project/sysknife#524 · Filter by author vladimirrott opened on Sep 28, 2026
  3