#2072
repo upgrade/init hardcode absolute swamp binary path in hook commands, breaking cross-machine portability
#2036
Document env.* namespace for model-instance globalArguments (host-portable config)
#1801
Datastore config should support vault expressions or env var references for tokens
#1697
Add native support for the Pi coding harness
#1825
access token mint: plaintext secret never surfaced to user, vault read-secret cannot access _token-secrets
#1828
serve: catalog backfill indexes only session-local data, data query returns wrong results for pre-existing entries
#1827
data search: full filesystem walk on every call, bypasses catalog index
#1684
swamp serve OOMs on repos with 2000+ model definitions
#1702
Redaction regex boundary bug: label_base64 secrets with an unrecognized label pass through unredacted (e.g. swamp_ API keys)
#1700
User token page (/u/<user>) shows only "swamp_..." for every API key, making leaked-key identification impossible
#1674
Feature: user-configurable redaction rules (.swamp/redaction.yaml)
#1365
Collective management API for extension-based automation
#1042
Collective leaderboard: activity metrics aggregated by identity group
#1641
Quality rubric + push gate for version upgrade chain correctness
#1596
Explore: CLI binary update integrity lacks independent verification
#1595
Explore: reconcile quality rubric's dormant provenance factor
#1594
Explore: pull-time signature verification for extensions
#1593
Explore: transparency-log integration (Rekor) for extension signatures
#1592
Explore: publish-time artifact signing for extensions (cosign keyless)
#1401
Expose resource attributes in DataHandle for workflow report stepExecutions
#1439
.swamp.yaml rewritten with quote style change + lastSkillMigrationWarning on read-only operations
#1402
--quiet mode does not suppress in-process extension logger output
#1400
Expose workflow inputs in WorkflowReportContext
#1377
Kiro CLI v3 permissions: no capability covers disclose_context (skill loading)
#1354
Quest page: all leaderboard usernames show 'Swamp Baby' title
#1237
provisioner.provision fails with 'Cannot read properties of undefined (reading trim)' at method_execution_service.ts:852
#1172
No retention/prune for .swamp/workflow-runs and .swamp/outputs
#1195
Re-publish of an existing extension succeeds but latestVersion/pull never advances to it
#1190
Genesis Pass tier 14 (Halogen Saint) shows claimed 260 XP before its own threshold, contradicting the same page's progress tracker
#1173
swamp workflow history search OOMs on workflows with large run history
#1185
extension pull fails permanently when a pinned exact-version dependency is removed from the registry
#1075
Add swamp straitjacket: opt-in, binary-shipped agent guardrail hooks
#945
Add associative info to user profiles: collective membership + collaborative contributions
#883
Extension skill should explicitly prohibit bare 'zod' imports (scorer sandbox fails)
#852
Global skills should auto-sync when binary version advances
#882
serve: V8 out-of-memory crash during catalog init on large repos (regression from #841)
#871
Model method execution overhead: 10s+ per trivial operation, global lock prevents concurrency
#841
serve startup time regression: synchronous catalog init delays WebSocket listener by ~4.5 minutes
#520
Per-model LockTimeoutError at 60s causes cascading failures under concurrent access
#657
`extension quality` false-positive bare-import detection on string literal "flexible"
#505
extension quality fails to resolve bare specifiers — contradicts fmt no-import-prefix rule
#526
swamp-extension adversarial review skill needs mandatory mechanical verification checklist
#521
Workflow engine resolves extension methods against base type, ignoring extension-registered methods
#500
Enforce adversarial review gate before extension push
#495
vault annotate --url fails with query params on @swamp/aws-sm
#493
workflow approve/resume cannot find suspended run when using S3 datastore
#494
datastore compact VACUUM fails with ERR_SQLITE_ERROR
#498
Report type filtering in report search
#497
extension search: empty results from CLI despite known extensions
#496
workflow approve/resume cannot find suspended runs
#458
swamp data gc does not remove physical version directories from disk
#433
Direct execution @type prefix fails for repo-local extension model types
#236
Extension ecosystem: shared utility library, version sync tooling, and HTTP resilience patterns
#329
Add 'swamp issue comment' command for updating existing issues
#328
Close #327 — fixed in 20260511.160514.0-sha.9d03b09a
#327
Nested workflow task fails with 'Bad resource ID' when workflowIdOrName uses @collective/ prefix
#294
forEach self.* in modelIdOrName not resolved in runtime execution path
#279
Resolve self.* expressions in modelIdOrName during forEach expansion
#239
extension quality/fmt fail on pulled extensions (path mismatch)
#238
vault: add read-secret CLI command for agent-driven secret retrieval
#241
performance degrades significantly with large SQLite catalog
#240
summarise: timeout/hang on repos with many workflow runs
#235
Agentic CLI improvements: --json stdout isolation, array inputs, and --repo-dir consistency
#234
data delete fails with "Directory not empty (os error 39)" when concurrent writes are active
#237
data query: stepName and jobName fields always empty in CEL results
#242
redmine extension: adopt state machine patterns from @magistr for agent-driven workflows
#172
Support multi-agent repo initialization (multiple --tool targets)
#173
swamp repo init --tool kiro does not create .kiro/settings/cli.json
#111
Add skills extension type for bundling agent/human guidance documents
#92