Joseph Spiker

spikerj commented on issue spikerj/spikersoft-issues#415

2026-07-22 02:58:15 +00:00

[Security][Go-live] Add authorization FallbackPolicy; lock down anonymous-by-omission API endpoints

Board-sweep status (2026-07-22): six+ controller lockdowns + webhook HMACs merged. REMAINING: the HEADLINE item — no FallbackPolicy in SpikerSoft.Api Authentication (grep-verified absent).

spikerj commented on issue spikerj/spikersoft-issues#460

2026-07-22 02:58:15 +00:00

art_pipe observability: install OpenTelemetry into model venvs so worker spans (#430) actually export (#428)

Board-sweep status (2026-07-22): implementation merged (spikersoft-artpipe #9 — OTel into venvs, opt-in). REMAINING: acceptance only — re-bootstrap venvs on the GPU host + verify one end-to-end…

spikerj commented on issue spikerj/spikersoft-issues#426

2026-07-22 02:58:15 +00:00

art_pipe local dev: migrate to a CUDA 13 driver so default torch builds work

Board-sweep status (2026-07-22): mitigation shipped (cu128 torch pin in the bootstrap script, backend #106). REMAINING: the actual dev-box CUDA-13 driver migration (ops).

spikerj commented on issue spikerj/spikersoft-issues#482

2026-07-22 02:58:15 +00:00

[Bug][Infra] Keycloak Postgres TOAST corruption (pg_toast_2619 / pg_statistic) — ClearExpiredEvents failing, events not purged

Board-sweep status (2026-07-22): recovery RUNBOOK merged (infra #49). REMAINING: the actual TOAST repair + ClearExpiredEvents verification — an unexecuted ops procedure.

spikerj commented on issue spikerj/spikersoft-issues#405

2026-07-22 02:58:14 +00:00

[Security][Go-live] Sandbox untrusted student code execution (C#/Python/JS)

Board-sweep status (2026-07-22): core sandbox NOT built (07-17 audit stands); only blast-radius mitigation landed (#546 scoped codeexec AppRole). REMAINING: the actual wasmtime-style sandbox for…

spikerj commented on issue spikerj/spikersoft-issues#409

2026-07-22 02:58:14 +00:00

[Security][Frontend][Go-live] Remove EPUB sanitizer bypass & harden client-side XSS sinks

Board-sweep status (2026-07-22): item 1 merged (EPUB DOMPurify, angular #148). REMAINING: the new-Function node + the other DOM-XSS / keycloak-admin sinks.

spikerj commented on issue spikerj/spikersoft-issues#407

2026-07-22 02:58:14 +00:00

[Security][Go-live] Remove unauthenticated infra control planes (Docker 2375, GameServer JWT, MCP)

Board-sweep status (2026-07-22): items 1+2 merged+verified (Docker 2375 removed #162; GameServer JWKS #158). REMAINING: item 3 — SpikerSoft.AI.MCPServer/Program.cs still has NO inbound authN…

spikerj closed issue spikerj/spikersoft-issues#551

2026-07-22 02:57:52 +00:00

[Bug][Infra][Jaeger] jaeger_elasticsearch crash-loops (0/1) — ES 7.17.0 image started against a data volume written by ES 8.11.0, restarting every ~30s

spikerj commented on issue spikerj/spikersoft-issues#518

2026-07-22 02:57:52 +00:00

[ArtPipe] Baked images Phase 2: stood-down residents blender/sdxl/triposr, hunyuan deferred (epic #515)

Board-sweep verified complete: stack swaps + finals merged (backend #251 + infra #53); all Phase 2 images exist in the registry (incl. first sdxllightning push) and the stood-down stacks at…

spikerj closed issue spikerj/spikersoft-issues#518

2026-07-22 02:57:52 +00:00

[ArtPipe] Baked images Phase 2: stood-down residents blender/sdxl/triposr, hunyuan deferred (epic #515)

spikerj commented on issue spikerj/spikersoft-issues#551

2026-07-22 02:57:52 +00:00

[Bug][Infra][Jaeger] jaeger_elasticsearch crash-loops (0/1) — ES 7.17.0 image started against a data volume written by ES 8.11.0, restarting every ~30s

Board-sweep closing on merged evidence: ES pinned 8.11.0 to match the data volume (infra #66) AND jaeger v2 given --config so ES storage is actually used instead of silent in-memory (infra #76 —…

spikerj commented on issue spikerj/spikersoft-issues#556

2026-07-22 02:57:52 +00:00

[Bug][Backend][Infra] tiles.spikersoft.com has no backing service — API status/health canary fetches a terrain tile every few minutes and 404s 100% of the time

Board-sweep verified complete: TileServerGL healthcheck no longer probes when unconfigured and honors Degraded without 503ing (backend #274, tree-verified; docs retired in infra #77). Note:…

spikerj closed issue spikerj/spikersoft-issues#556

2026-07-22 02:57:52 +00:00

[Bug][Backend][Infra] tiles.spikersoft.com has no backing service — API status/health canary fetches a terrain tile every few minutes and 404s 100% of the time

spikerj commented on issue spikerj/spikersoft-issues#481

2026-07-22 02:57:51 +00:00

[Bug][Infra] jaeger_elasticsearch down ~24h on SERVER (exit 1) — MaxAttempts exhausted, tracing backend offline

Board-sweep closing as superseded: the restart-policy stopgap merged (infra #30) and the actual root cause (ES version/data-path mismatch) was fixed under #551 (ES 8.11.0 pin + jaeger v2…

spikerj closed issue spikerj/spikersoft-issues#517

2026-07-22 02:57:51 +00:00

[ArtPipe] Baked images Phase 1: SafetyCheck pilot image + cutover, incl. #486 fault isolation (epic #515)

spikerj commented on issue spikerj/spikersoft-issues#517

2026-07-22 02:57:51 +00:00

[ArtPipe] Baked images Phase 1: SafetyCheck pilot image + cutover, incl. #486 fault isolation (epic #515)

Board-sweep closing: cutover merged (infra #52) and the ticket's own comment confirms DEPLOYED 1/1 on the 4090 — a node without the checkout, killing the #501 failure mode — with soak started…

spikerj closed issue spikerj/spikersoft-issues#513

2026-07-22 02:57:51 +00:00

[Bug][Infra][Deploy] docker-monitor: new correctly-named stack exits 0 on startup (stuck 0/1) + duplicate misspelled 'spiekersoft-docker-monitor' stack running in parallel

spikerj commented on issue spikerj/spikersoft-issues#513

2026-07-22 02:57:51 +00:00

[Bug][Infra][Deploy] docker-monitor: new correctly-named stack exits 0 on startup (stuck 0/1) + duplicate misspelled 'spiekersoft-docker-monitor' stack running in parallel

Board-sweep closing on merged evidence: root cause fixed (IDockerClient DI, #245), guarded by CI smoke (#255/#307), canonical stack name pinned (infra). Residual: deleting the misspelled duplicate…

spikerj closed issue spikerj/spikersoft-issues#486

2026-07-22 02:57:51 +00:00

[Bug][Prod] SafetyCheck art-pipe resident worker missing 'torch' → ArtPipeProcessor host crash-loops (24x)

spikerj commented on issue spikerj/spikersoft-issues#486

2026-07-22 02:57:51 +00:00

[Bug][Prod] SafetyCheck art-pipe resident worker missing 'torch' → ArtPipeProcessor host crash-loops (24x)

Board-sweep closing on merged evidence: reliability half in backend #232 (consumer retry + lease-holder wait); the missing-torch half is fixed definitionally by the baked SafetyCheck image cutover…