Issues

• fix(deps): adopt reviewed cloud-commitments-go purchase safeguards

  effort/simpact/fewpriority/p2severity/mediumtriagedtype/bugurgency/this-sprint
  LeanerCloud/cloud-commitments-mcp#35 · Filter by author cristim opened on Sep 29, 2026

• docs(audit): README and NewServer comment overstate what the purchase audit log records

  LeanerCloud/cloud-commitments-mcp#27 · Filter by author cristim opened on Sep 28, 2026

• sec(scripts): audit unanchored .gitallowed placeholder entries and DSN detector coverage (#1972 follow-up)

  effort/simpact/internalpriority/p3severity/lowtriagedtype/securityurgency/eventually
  LeanerCloud/cloud-commitments-mcp#24 · Filter by author cristim opened on Sep 28, 2026

• chore(ci): medium/low findings from the 2026-07-28 full review [mcp part]

  effort/limpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  LeanerCloud/cloud-commitments-mcp#23 · Filter by author cristim opened on Sep 27, 2026

• ci: single-source the gosec pin across ci.yml, pre-commit.yml, Makefile and gosec-hook.sh [mcp part]

  effort/xsimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  LeanerCloud/cloud-commitments-mcp#22 · Filter by author cristim opened on Sep 27, 2026

• HYG-09: CHANGELOG.md is a stale, cross-repo-copied shared file [mcp part]

  effort/mimpact/internalpriority/p3severity/lowtriagedtype/docsurgency/eventually
  LeanerCloud/cloud-commitments-mcp#20 · Filter by author cristim opened on Sep 27, 2026

• chore(tests): split Go test files above the 500-line ceiling [mcp part]

  effort/limpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  LeanerCloud/cloud-commitments-mcp#18 · Filter by author cristim opened on Sep 27, 2026

• HYG: Replace 24 pre-existing em-dashes in CLAUDE.md (project rule) [mcp part]

  effort/simpact/internalpriority/p3severity/lowtriagedtype/docsurgency/eventually
  LeanerCloud/cloud-commitments-mcp#17 · Filter by author cristim opened on Sep 27, 2026

• ci: pre-commit gosec hook, CI and Makefile enforce DIFFERENT gosec rule sets [mcp part]

  effort/simpact/internalpriority/p2severity/mediumtriagedtype/choreurgency/this-quarter
  LeanerCloud/cloud-commitments-mcp#16 · Filter by author cristim opened on Sep 27, 2026

• HYG-08: CONTRIBUTING.md lists out-of-scope contribution areas [mcp part]

  effort/simpact/internalpriority/p3severity/lowtriagedtype/docsurgency/eventually
  LeanerCloud/cloud-commitments-mcp#15 · Filter by author cristim opened on Sep 27, 2026

• chore(tests): finish t.Parallel() adoption sweep across remaining packages [mcp part]

  effort/limpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  LeanerCloud/cloud-commitments-mcp#14 · Filter by author cristim opened on Sep 27, 2026

• sec: gitleaks .gitleaksignore has invalid/dead fingerprints; pre-commit test-exclusion gap [mcp part]

  bugeffort/xsimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  LeanerCloud/cloud-commitments-mcp#13 · Filter by author cristim opened on Sep 27, 2026

• lint: complete fieldalignment cleanup and re-enable the linter [mcp part]

  effort/mimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/this-quarter
  LeanerCloud/cloud-commitments-mcp#12 · Filter by author cristim opened on Sep 27, 2026

• HYG-06: .gitignore gaps for Makefile-produced root artifacts [mcp part]

  effort/xsimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  LeanerCloud/cloud-commitments-mcp#11 · Filter by author cristim opened on Sep 27, 2026

• chore(pre-commit): set default_install_hook_types so install arms both stages [mcp part]

  effort/xsimpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  LeanerCloud/cloud-commitments-mcp#10 · Filter by author cristim opened on Sep 27, 2026

• Configure release environment reviewers + v* tag-protection ruleset

  effort/xsimpact/internalpriority/p2severity/mediumtriagedtype/choretype/securityurgency/this-sprint
  LeanerCloud/cloud-commitments-mcp#3 · Filter by author cristim opened on Sep 27, 2026

• chore: prune monorepo residue left by the split (docs, pre-commit, CI)

  effort/simpact/internalpriority/p3severity/lowtriagedtype/choreurgency/eventually
  LeanerCloud/cloud-commitments-mcp#2 · Filter by author cristim opened on Sep 27, 2026

• sec(ci): v* tag pushes are unrestricted and trigger the cudly-mcp release/publish pipeline unapproved

  effort/mimpact/internalpriority/p2severity/hightriagedtype/securityurgency/this-quarter
  LeanerCloud/cloud-commitments-mcp#9 · Filter by author cristim opened on Aug 27, 2026

• feat(mcp): store/distribution readiness -- release machinery, MCPB bundle, Codex CLI docs

  effort/limpact/internalpriority/p2severity/lowtriagedtype/featurgency/this-sprint
  LeanerCloud/cloud-commitments-mcp#8 · Filter by author cristim opened on Aug 25, 2026
  1

• feat(gcp): let real CUD purchases resolve the target project without a per-call gcp_project_id

  effort/mimpact/manypriority/p3severity/lowtriagedtype/featurgency/eventually
  LeanerCloud/cloud-commitments-mcp#6 · Filter by author cristim opened on Jul 27, 2026
  1

• feat(mcp): expose offering_class (standard vs convertible) on EC2 RI purchase tool

  effort/simpact/fewpriority/p3severity/lowtriagedtype/featurgency/eventually
  LeanerCloud/cloud-commitments-mcp#5 · Filter by author cristim opened on Jul 25, 2026