Issues

• transport.a2a_adapter / a2a_sdk / hardware_acceptance: unvalidated message/metadata types, empty parent_record_hash, unsafe float-to-int coercion, and duplicate JSON keys

  needs-review:MEDIUM
  agentrust-io/ca2a#286 · Filter by author drk-ram opened on Oct 25, 2026
  1

• challenge / trace_binding: boolean ttl_seconds/now/iat bypasses, unvalidated challenge secret/expiry_str, and empty credential_id in emit_dag

  needs-review:MEDIUM
  agentrust-io/ca2a#285 · Filter by author drk-ram opened on Oct 25, 2026
  1

• ca2a_runtime.response: PendingResponse accepts boolean timeout, ResponseProducer.finish does not validate status/body invariants, and AuthenticatedPeerError drops error detail

  needs-review:MEDIUM
  agentrust-io/ca2a#284 · Filter by author drk-ram opened on Oct 25, 2026
  1

• ca2a_verify.tdx / ca2a_verify.sev_snp: verify_tdx_quote does not check quote.version == 4 and verify_tdx_quote / verify_sev_snp_report do not validate expected digest lengths

  needs-review:MEDIUM
  agentrust-io/ca2a#283 · Filter by author drk-ram opened on Oct 25, 2026
  1

• tee.tpm / ca2a_verify.tpm: TpmQuote.parse ignores trailing bytes, _chain_from_leaf reads AIA URLs without a byte cap, and verify_tpm_report does not check report.platform

  needs-review:MEDIUM
  agentrust-io/ca2a#282 · Filter by author drk-ram opened on Oct 25, 2026
  1

• fix(delegation,attestation): enforce RFC 8785 safe-integer bounds and canonical lowercase hex on HolderProof and CallerPossession

  needs-review:MEDIUM
  agentrust-io/ca2a#274 · Filter by author drk-ram opened on Oct 23, 2026
  1

• fix(transport): enforce canonical base64url in b64url_decode and reject non-string fields in parse_channel_offer

  needs-review:MEDIUM
  agentrust-io/ca2a#271 · Filter by author drk-ram opened on Oct 23, 2026
  1

• fix(config,tdx): reject bool max_delegation_depth, non-mapping attestation config, and trailing/empty TDX quote containers

  needs-review:MEDIUM
  agentrust-io/ca2a#273 · Filter by author drk-ram opened on Oct 23, 2026
  1

• fix(cli,transport): reject duplicate JSON keys, non-finite constants, and non-string coercion in CLI and HTTP transport

  needs-review:MEDIUM
  agentrust-io/ca2a#272 · Filter by author drk-ram opened on Oct 23, 2026
  1

• fix(verify,runtime): reject private JWK members, non-canonical base64url, lone surrogates, duplicate JSON keys, and future revocation snapshots

  needs-review:MEDIUM
  agentrust-io/ca2a#267 · Filter by author drk-ram opened on Oct 23, 2026
  5

• verify_chain: judge revocation by snapshot membership while windows are judged at at_time

  enhancementneeds-review:HIGH
  agentrust-io/ca2a#263 · Filter by author ogasurfproject-jpg opened on Oct 20, 2026
  4

• Should delegated authority depend on execution lineage? (PIC, #168)

  agentrust-io/ca2a#222 · Filter by author imran-siddique opened on Oct 1, 2026
  1

  

• design: correction-aware supersession for delegated authority and pending action evidence

  enhancement
  agentrust-io/ca2a#129 · Filter by author Evalbound opened on Aug 21, 2026
  3

  

• Scope proposal: financial mandate evidence for delegated limits, in-flight revocation, and decision receipts

  enhancement
  agentrust-io/ca2a#109 · Filter by author amyli1996 opened on Aug 13, 2026
  8

  

• tracker: complete confidential-hardware conformance and release assurance decision

  attestationenhancementtier-3
  agentrust-io/ca2a#47 · Filter by author imran-siddique opened on Jul 10, 2026
  7

  

• test(conformance): finish ACTION historical validity-window replay cases

  help wanted
  agentrust-io/ca2a#36 · Filter by author carloshvp opened on Jul 4, 2026
  15