Issues

• best-peer door: the token answer holds the key once, in access_token, never in its mcp block

  windlet-01
  behavioralstate/spec#147 · Filter by author cameronpyne-smith opened on Oct 27, 2026
  

• BEST spec: the token answer holds the credential once, in access_token, and the mcp block names its place

  best-spec
  behavioralstate/spec#146 · Filter by author cameronpyne-smith opened on Oct 27, 2026
  

• Windlet node security: an order pulls, runs and removes its image by digest, so the owner's tags are never touched

  windlet-01
  behavioralstate/spec#145 · Filter by author cameronpyne-smith opened on Oct 27, 2026
  1

  

• Windlet registry: an image registry partitioned by account, pushed with the account's key and pulled by the node for that account's orders alone

  windlet-01
  behavioralstate/spec#144 · Filter by author riccardone opened on Oct 27, 2026
  

• Windlet admin: a Profile page with the administrator's own agent key and Revoke

  windlet-01
  behavioralstate/spec#143 · Filter by author cameronpyne-smith opened on Oct 26, 2026
  

• Windlet API: the token answer holds the key once, never again in its mcp block

  windlet-01
  behavioralstate/spec#142 · Filter by author cameronpyne-smith opened on Oct 26, 2026
  

• Windlet node: a host setup a host owner can follow, and a job memory default that takes orders

  bugwindlet-01
  behavioralstate/spec#141 · Filter by author cameronpyne-smith opened on Oct 26, 2026
  1

  

• Windlet node security: a non-root user inside the job's container, whatever the host's Docker settings

  windlet-01
  behavioralstate/spec#140 · Filter by author cameronpyne-smith opened on Oct 26, 2026
  1

  

• Windlet node security: bounded reads from the platform - the stream's buffer, error bodies and order ids

  windlet-01
  behavioralstate/spec#139 · Filter by author cameronpyne-smith opened on Oct 26, 2026
  1

  

• Windlet node security: the disk limit counts what lands on disk - extracted size, the floor held during the pull

  windlet-01
  behavioralstate/spec#138 · Filter by author cameronpyne-smith opened on Oct 26, 2026
  1

  

• Windlet node security: images never from loopback, private or link-local registries, trusted registries by default and a host's own list

  windlet-01
  behavioralstate/spec#137 · Filter by author cameronpyne-smith opened on Oct 26, 2026
  1

  

• Windlet ops logs: every component's lines, backend and edge, in one schema with correlation, causation, tenant, actor and component, on the telemetry store

  windlet-01
  behavioralstate/spec#136 · Filter by author riccardone opened on Oct 25, 2026

• Windlet MIG: sizes sold on MIG instances - best fit placement, a menu in memory not cards, a split card shown as one

  windlet-01
  behavioralstate/spec#135 · Filter by author riccardone opened on Oct 25, 2026

• Windlet node upgrades: a host installs the node once and it upgrades itself, signed, between orders, with a way back

  windlet-01
  behavioralstate/spec#134 · Filter by author riccardone opened on Oct 25, 2026
  1

• best-peer runtime: follow a container's output from its first byte, and bound the engine's copy

  windlet-01
  behavioralstate/spec#133 · Filter by author riccardone opened on Oct 25, 2026
  1

  

• Windlet host memory shared: a node is never placed more orders than its host memory gives their sizes

  windlet-01
  behavioralstate/spec#131 · Filter by author riccardone opened on Oct 25, 2026
  3

  

• Windlet real platform 4: fleet machines rented on demand and released when idle - Verda first, no machine started by hand

  windlet-01
  behavioralstate/spec#130 · Filter by author riccardone opened on Oct 25, 2026

• Windlet real platform 3: platform-owned nodes - the owner adds them from an admin UI, a node enrols itself, renters see only sizes and orders

  windlet-01
  behavioralstate/spec#129 · Filter by author riccardone opened on Oct 25, 2026
  8

  

• Windlet real platform 2: the market as a component - orders, nodes, placement and usage recorded, with no simulated capacity

  windlet-01
  behavioralstate/spec#127 · Filter by author riccardone opened on Oct 24, 2026
  2

  

• Windlet real platform 1: accounts, keys and the device flow from Windlet.Accounting and the Synchroniser, in place of the API's in-memory platform

  windlet-01
  behavioralstate/spec#126 · Filter by author riccardone opened on Oct 24, 2026
  1

  

• Windlet synchroniser: the change stream for agents beside SignalR for the UI, as Sudio's (left out of the carve)

  windlet-01
  behavioralstate/spec#124 · Filter by author riccardone opened on Oct 23, 2026
  1

  

• Windlet accounting: identities as individuals or organisations, an organisation a tenant of its own with its people, its bill and its own keys (owner's call)

  windlet-01
  behavioralstate/spec#123 · Filter by author riccardone opened on Oct 23, 2026
  4

  

• Runtime door 33: members read off the request - a workspace door asks every member its state, one after another, inside admission

  windlet-02
  behavioralstate/spec#122 · Filter by author cameronpyne-smith opened on Oct 22, 2026

• Windlet API spike: the platform's services - a public surface and an authenticated surface, colocated with the UI, serving whatever the UI needs, from real nodes or not

  windlet-01
  behavioralstate/spec#121 · Filter by author riccardone opened on Oct 22, 2026
  3

  

• best-validate checks the obligations 0.9.18 states: conformance items 12 and 13 and Root Manifest Rule 8

  behavioralstate/spec#119 · Filter by author riccardone opened on Oct 22, 2026