Issues

• [archtest] TLS-TEST-MATERIAL-FUNNEL-01 在 develop 报红（#2461 deviceidentity 铸证未入 sanctioned，nightly-only）

  area-authbacklogcx-2pri-p2type-bug
  ghbvf/gocell#2499 · Filter by author ghbvf opened on Jun 20, 2026

• [gRPC][PII] 4xx errcode PublicDetails 含 subjectID 经 #2482 进入 gRPC ErrorInfo.Metadata wire

  area-authbacklogcx-2pri-p2type-bug
  ghbvf/gocell#2498 · Filter by author ghbvf opened on Jun 20, 2026

• [authz] examples contract 测试在 contract 层未触发 owner-scoped 授权门（403 覆盖）

  area-authbacklogcx-2pri-p2type-test
  ghbvf/gocell#2496 · Filter by author ghbvf opened on Jun 20, 2026

• celltls 最小权限 guard 在默认/monolith 拓扑下不生效 — Tier3 重构 deployment topology 模型 (#2297 F2)

  area-authbacklogcx-3pri-p1type-arch-opt
  ghbvf/gocell#2492 · Filter by author ghbvf opened on Jun 20, 2026

• [GEN-TS] Decide generated-ts ownership: develop artifact vs npm SDK vs release-only

  area-toolingbacklogcx-2pri-p2type-arch-opt
  ghbvf/gocell#2491 · Filter by author ghbvf opened on Jun 20, 2026

• [archtest] 实现 CELLTLS-CROSSBIND-WIRING / -MATERIAL-RESOLVE funnel（ADR 声明未落地的 Medium 守卫）

  area-toolingbacklogcx-2pri-p1type-debt
  ghbvf/gocell#2489 · Filter by author ghbvf opened on Jun 19, 2026

• [authz] identitymanage status 字段级守卫 role 字面量 → PDP/obligation 同源

  area-authbacklogcx-2pri-p3type-debt
  ghbvf/gocell#2488 · Filter by author ghbvf opened on Jun 19, 2026

• [authz] auditcore list query-param 自读免除 contract-derived 迁移（#2355 续波 PR-B）

  area-authbacklogcx-3pri-p3type-refactor
  ghbvf/gocell#2487 · Filter by author ghbvf opened on Jun 19, 2026

• [authz] examples（devicecell/ordercell）HTTP 授权 contract-derived 迁移（#2355 续波 PR-A）

  area-authbacklogcx-2pri-p2type-refactor
  ghbvf/gocell#2486 · Filter by author ghbvf opened on Jun 19, 2026

• [gRPC][obs] RateLimit-deny / CircuitBreaker-open 专属 metric + 可归因日志

  area-observabilitybacklogcx-2pri-p3type-feat
  ghbvf/gocell#2485 · Filter by author ghbvf opened on Jun 19, 2026

• [gRPC][docs] 补 gRPC 运维 runbook（TLS/bind 失败/drain/always-on :9095 triage）

  area-httpbacklogcx-1pri-p3type-doc
  ghbvf/gocell#2484 · Filter by author ghbvf opened on Jun 19, 2026

• [auth][triage] gRPC auth interceptor slog 直接记录 principal.Subject（PII 未脱敏，pre-existing）

  area-authbacklogcx-1pri-p2type-bug
  ghbvf/gocell#2483 · Filter by author ghbvf opened on Jun 19, 2026

• [gRPC] 4xx errcode PublicDetails 未带到 google.rpc.Status.Details（wire 详情 HTTP/gRPC 不对等）

  area-crossbacklogcx-2pri-p2type-feat
  ghbvf/gocell#2482 · Filter by author ghbvf opened on Jun 19, 2026

• [303] registrycore corebundle composition: PG store/cursor/tx + 真实 readyz + submit/read baseline grant（topology resolver）

  area-httpbacklogcx-3pri-p1type-feat
  ghbvf/gocell#2477 · Filter by author ghbvf opened on Jun 19, 2026

• auditcore: http.audit.get.v1 path param id 缺 MustRejectPathParam 覆盖（CONTRACT-PATH-QUERY-COVERAGE-01 nightly 红）

  area-observabilitybacklogcx-1pri-p2type-test
  ghbvf/gocell#2473 · Filter by author ghbvf opened on Jun 19, 2026

• [deviceidentity] http.devicecompliance.v1 用 query-param deviceId（owner-scoped gate anti-pattern，同 #2426 F1）

  area-authbacklogcx-1pri-p2type-refactor
  ghbvf/gocell#2472 · Filter by author ghbvf opened on Jun 19, 2026

• [archtest] EST-ENROLL-AUTH-BOUNDARY-01 mandatory prong 精确锁 Verify 调用站点

  area-toolingbacklogcx-1pri-p3type-debt
  ghbvf/gocell#2469 · Filter by author ghbvf opened on Jun 19, 2026

• [deviceidentity] device-mTLS listener 生产化：真实 server cert / TLS 终止代理

  area-authbacklogcx-2pri-p3type-feat
  ghbvf/gocell#2468 · Filter by author ghbvf opened on Jun 19, 2026

• [deviceidentity] DeviceMTLSListener 无 readyz probe

  area-observabilitybacklogcx-2pri-p3type-feat
  ghbvf/gocell#2467 · Filter by author ghbvf opened on Jun 19, 2026

• [deviceidentity] /cacerts 公开端点无应用层限速

  area-httpbacklogcx-1pri-p3type-debt
  ghbvf/gocell#2466 · Filter by author ghbvf opened on Jun 19, 2026

• [authz] AuthorizeAs(device:enroll) 决策不进 auth_pdp_decision_total

  area-observabilitybacklogcx-2pri-p2type-debt
  ghbvf/gocell#2465 · Filter by author ghbvf opened on Jun 19, 2026

• [deviceidentity] enroll enrollment-credential jti 一次性/重放消费未实现

  area-authbacklogcx-2pri-p1type-feat
  ghbvf/gocell#2464 · Filter by author ghbvf opened on Jun 19, 2026

• [303-US7 follow-up] registry:approve/reject/retire baseline 规则 closed-set freeze 硬化

  area-authbacklogcx-2pri-p2type-test
  ghbvf/gocell#2463 · Filter by author ghbvf opened on Jun 19, 2026

• flaky: TestRelay_SanitizesError_InLastError — relay last_error 在 -race CI 偶发超 EventuallyDefault

  area-eventingbacklogcx-2pri-p2type-test
  ghbvf/gocell#2462 · Filter by author ghbvf opened on Jun 19, 2026

• [1878-H] archtest batch-2: conditional-rule scan-dir 参数化（先验证价值）

  area-toolingbacklogcx-3pri-p2type-refactor
  ghbvf/gocell#2459 · Filter by author ghbvf opened on Jun 19, 2026