Awards exceed the 10,000,000 cap once campaign and streak multipliers apply

k22h ago

#3931

Award grants (showcase approval, admin award points) skip campaign/streak multipliers

k1d ago

#3932

Disable the inbox notification email ("You have received a notification in Swamp Club")

k1d ago

#3930

Add LinkedIn as a login provider

1d ago

#3929

Showcase reward backfill can double-pay 5,000,000 points when replicas start together

1d ago

#3928

auth login leaves auth.json apiKey empty and stores the key only in ~/.config/swamp/api-key, which the auth gate never reads

11d ago

#3430

swamp-club.com serves every response uncompressed

11d ago

#3406

CLI companion to #3396: private-source collectives can score repository-verified 14/14 in extension quality

s12d ago

#3102

Replayable state fragments: Git-reviewable desired state for resources changed by model methods

6d ago

#1545

Use whoami entitlement to explain private-extension push refusals

s20d ago

#2826

Top-level swamp init never earns repo-init quest or tier credit

s24d ago

#2828

Docs: telemetry reference — the envelope we send and our redaction policy

k25d ago

#2831

Telemetry opt-out scope: one user-level setting that disables telemetry everywhere

s25d ago

#2830

Telemetry: mark paths where errors are built so redaction needs no guessing

s26d ago

#2835

Combat log: batch the extension visibility lookup into one query

k26d ago

#2817

CLI telemetry redaction: user values still transmitted (errorMessage, workflowContext, init path, history args, private types) while command words are over-redacted

k26d ago

#2565

Maximum call stack size exceeded once a resource passes ~129k versions (Math.max(...versions) in the data repository)

s29d ago

#2193

worker connect --ca-cert is not applied to the data plane; dispatches fail with 'fetch failed' unless DENO_CERT is set

z1mo ago

#2192

Ephemeral worker fleets accumulate worker records and token bindings that are never reaped

s1mo ago

#2191

Expired enrollment token cannot be re-minted unless a worker was connected when it expired

s1mo ago

#2232

Billing telemetry: surface scheduled cancellations (cancelAtPeriodEnd) and emit subscription_canceled reliably

1mo ago

#2195

access token mint: support --server so worker server tokens can be minted remotely

s1mo ago

#2196

Workload identity (Kubernetes ServiceAccount / OIDC) for worker enrollment

1mo ago

#2147

Feed grant projection stamps a site route that does not exist

1mo ago

#2027

Retire or rebuild /admin/nurture once the epic lands — it is a gate, and gates are single-use

1mo ago

#2012

feat(nurture): /admin/nurture — who would get what, and why

k1mo ago

#2011

feat(nurture): the nurture_send ledger and the dry-run projector, with the cold-start seal

k1mo ago

#2010

feat(nurture): batch cohort reads — account-grain identification that carries its evidence

k1mo ago

#2009

feat(nurture): the flow catalog and the qualification contract (pure domain)

k1mo ago

#2025

harness-marketing-funnel posts {batch:[...]} to /ingest, which is not a batch — every run silently measures zero

1mo ago

#2024

feat(cli): swamp inbox — read swamp-club notifications without leaving the terminal

1mo ago

#2023

feat(cli): tell operatives they have swamp-club notifications waiting

1mo ago

#2022

feat(api): a cheap unread-notification count for API-key clients

1mo ago

#2021

feat(nurture): deliver to the swamp-club inbox on the same dedupe decision as email

1mo ago

#2020

feat(nurture): arm needs-help-after-a-failed-run (NEEDS HELP)

kBlocked1mo ago

#2019

feat(nurture): arm model-usage-without-workflows (BUILDING PRODUCT FEATURES)

kBlocked1mo ago

#2018

feat(nurture): arm no-activation-after-30-days (ARRIVED, NEVER RAN)

kBlocked1mo ago

#2017

feat(nurture): arm reactivation-after-7-days (DRIFTED)

kBlocked1mo ago

#2016

feat(nurture): arm the first flow — extension published, email only, verified in prod

kBlocked1mo ago

#2015

feat(nurture): the six nurture email templates, previewed before anything sends

k1mo ago

#2014

feat(nurture): an outbound transport that reports its outcome, and per-channel send status

k1mo ago

#2013

feat(nurture): suppression — opt-out, address-grain frequency caps, one-click unsubscribe

k1mo ago

#2008

Epic: Product nurture — lifecycle identification, dedupe-safe delivery, and operator control (email, inbox, CLI)

1mo ago

#2001

SSO: SAML assertion attributes are never logged or persisted — cannot tell whether the IdP sent groups

k1d ago

#1819

IdP group memberships go stale indefinitely — user.idpGroups is only written by the SSO login hook

s1mo ago

← Back to list

01Issue

FeatureShippedSwamp ClubPublic

Assigneesstack72

Relationships

#2077 Block temporary email services on signup

Opened by keeb · 9/9/2026· Shipped 10/19/2026

Disallow signup with disposable email addresses (e.g., liondapt.com, temp-mail.org, etc.). Current enforcement: none — test account 'testing' signed up with [REDACTED-EMAIL] on 2026-09-09. Suggestion: validate domain against a public blocklist of known temp email providers at account creation time.

02Bog Flow

Shipped

10/19/2026, 8:51:42 PM

Click a lifecycle step above to view its details.

03Sludge Pulse

stack72 assigned stack7210/19/2026, 6:42:31 PM

Awards exceed the 10,000,000 cap once campaign and streak multipliers apply

Award grants (showcase approval, admin award points) skip campaign/streak multipliers

Disable the inbox notification email ("You have received a notification in Swamp Club")

Add LinkedIn as a login provider

Showcase reward backfill can double-pay 5,000,000 points when replicas start together

Showcase editor: caption counter is not announced to screen readers

Profile showcase read: approved list sorts on review.reviewedAt in memory

Showcase countByStatus: $match live statuses before the $group

Showcase admin queues: index-serve the updatedAt sort on approved/rejected

Block temporary email services on signup

auth login leaves auth.json apiKey empty and stores the key only in ~/.config/swamp/api-key, which the auth gate never reads

swamp-club.com serves every response uncompressed

CLI companion to #3396: private-source collectives can score repository-verified 14/14 in extension quality

Replayable state fragments: Git-reviewable desired state for resources changed by model methods

Use whoami entitlement to explain private-extension push refusals

Top-level swamp init never earns repo-init quest or tier credit

Docs: telemetry reference — the envelope we send and our redaction policy

Telemetry opt-out scope: one user-level setting that disables telemetry everywhere

Telemetry: mark paths where errors are built so redaction needs no guessing

Combat log: batch the extension visibility lookup into one query

CLI telemetry redaction: user values still transmitted (errorMessage, workflowContext, init path, history args, private types) while command words are over-redacted

Maximum call stack size exceeded once a resource passes ~129k versions (Math.max(...versions) in the data repository)

worker connect --ca-cert is not applied to the data plane; dispatches fail with 'fetch failed' unless DENO_CERT is set

Ephemeral worker fleets accumulate worker records and token bindings that are never reaped

Expired enrollment token cannot be re-minted unless a worker was connected when it expired

Billing telemetry: surface scheduled cancellations (cancelAtPeriodEnd) and emit subscription_canceled reliably

access token mint: support --server so worker server tokens can be minted remotely

Workload identity (Kubernetes ServiceAccount / OIDC) for worker enrollment

Feed grant projection stamps a site route that does not exist

Retire or rebuild /admin/nurture once the epic lands — it is a gate, and gates are single-use

feat(nurture): /admin/nurture — who would get what, and why

feat(nurture): the nurture_send ledger and the dry-run projector, with the cold-start seal

feat(nurture): batch cohort reads — account-grain identification that carries its evidence

feat(nurture): the flow catalog and the qualification contract (pure domain)

harness-marketing-funnel posts {batch:[...]} to /ingest, which is not a batch — every run silently measures zero

feat(cli): swamp inbox — read swamp-club notifications without leaving the terminal

feat(cli): tell operatives they have swamp-club notifications waiting

feat(api): a cheap unread-notification count for API-key clients

feat(nurture): deliver to the swamp-club inbox on the same dedupe decision as email

feat(nurture): arm needs-help-after-a-failed-run (NEEDS HELP)

feat(nurture): arm model-usage-without-workflows (BUILDING PRODUCT FEATURES)

feat(nurture): arm no-activation-after-30-days (ARRIVED, NEVER RAN)

feat(nurture): arm reactivation-after-7-days (DRIFTED)

feat(nurture): arm the first flow — extension published, email only, verified in prod

feat(nurture): the six nurture email templates, previewed before anything sends

feat(nurture): an outbound transport that reports its outcome, and per-channel send status

feat(nurture): suppression — opt-out, address-grain frequency caps, one-click unsubscribe

Epic: Product nurture — lifecycle identification, dedupe-safe delivery, and operator control (email, inbox, CLI)

SSO: SAML assertion attributes are never logged or persisted — cannot tell whether the IdP sent groups

IdP group memberships go stale indefinitely — user.idpGroups is only written by the SSO login hook

Relationships

#2077 Block temporary email services on signup

Shipped