Search results

marmot-app: subscribe_timeline_messages / subscribe_chats / subscribe_chat_list / subscribe_group_state run their initial SQLCipher snapshot read synchronously on the caller thread, while sibling subscribe_messages offloads via blocking_app_task (distinct sites; follow-up to #740/#762)

LOW

performancePerformance issuePerformance issue

Status: Open.

#802 In marmot-protocol/mdk;

· erskingardner opened on Jul 9, 2026

incident-replay: recover_fork computes source_epoch + 1 unchecked — panics (debug) / silently wraps (release) on an adversarial or corrupt Goggles export

bugSomething isn't workingSomething isn't working

LOW

Status: Open.

#801 In marmot-protocol/mdk;

· erskingardner opened on Jul 9, 2026

marmot-markdown: block-level link-reference-definition label has no length cap, unlike every sibling label scanner — accepts spec-invalid >999-char labels

bugSomething isn't workingSomething isn't working

LOW

Status: Open.

#800 In marmot-protocol/mdk;

· erskingardner opened on Jul 9, 2026

storage-sqlite: one undecodable app_events.tags_json row permanently poisons a group's entire timeline rebuild (no self-heal), unlike the search/unread paths which tolerate it (sibling of #769)

bugSomething isn't workingSomething isn't working

LOW

Status: Open.

#799 In marmot-protocol/mdk;

· erskingardner opened on Jul 9, 2026

storage-sqlite: SqliteSharedStorage::open creates the shared-cache parent directory at the process umask, bypassing fs-private restrictive-by-construction (sibling of #776, distinct from the closed #347)

LOW

security

Status: Open.

#798 In marmot-protocol/mdk;

· erskingardner opened on Jul 9, 2026

transport-quic-broker: publish hot path runs a full O(max_rooms) room sweep + total-backlog recompute under the single global BrokerStateInner mutex on every forwarded record

LOW

performancePerformance issuePerformance issue

Status: Open.

#797 In marmot-protocol/mdk;

· erskingardner opened on Jul 9, 2026

marmot-app: forensic audit-log upload HTTP client follows redirects with the default policy and applies no dial-safety, unlike every other outbound client in the crate

LOW

security

Status: Open.

#796 In marmot-protocol/mdk;

· erskingardner opened on Jul 9, 2026

transport-nostr-adapter: relay sync-timing telemetry + initial-sync gate key the same relay under two different RelayIndex values (verbatim start endpoint vs RelayUrl-canonicalized inbound endpoint) — EOSE/first-event silently dropped, subscription_synced never reaches true

bugSomething isn't workingSomething isn't working

MEDIUM

performancePerformance issuePerformance issue

Status: Open.

#795 In marmot-protocol/mdk;

· erskingardner opened on Jul 9, 2026

cgka-engine: direct-ingest inbound commit mirrors the Marmot group record + self-cap cache OUTSIDE the merge transaction — a crash/SQLITE_BUSY between them permanently desyncs the record from MLS state

bugSomething isn't workingSomething isn't working

MEDIUM

Status: Open.

#794 In marmot-protocol/mdk;

· erskingardner opened on Jul 9, 2026

opencode: session UX v1 — product outline

Status: Open.

#792 In marmot-protocol/mdk;

· Datawav opened on Jul 8, 2026

transport-nostr-peeler: PeeledMessage.group_id is populated with the 32-byte transport routing id wrapped in a GroupId, conflating the two id spaces the invariant separates (latent)

bugSomething isn't workingSomething isn't working

LOW

Status: Open.

#788 In marmot-protocol/mdk;

· erskingardner opened on Jul 8, 2026

transport-quic-stream: agent-text-stream record AEAD has no per-session salt — re-publishing to the same anchor within an epoch reuses the ChaCha20-Poly1305 (key, nonce) pair

bugSomething isn't workingSomething isn't working

MEDIUM

security

Status: Open.

#787 In marmot-protocol/mdk;

· erskingardner opened on Jul 8, 2026