Joseph Spiker

spikerj commented on issue spikerj/spikersoft-issues#483

2026-07-22 02:58:16 +00:00

[Bug][Infra] InfluxDB rejecting a client every ~10s ("authorization not found") — stale/missing token on a poller

Board-sweep status (2026-07-22): token out of git (infra #46) + deploy fails-closed on missing token (#79). REMAINING: provision a VALID influxdb2 token and verify the Traefik metrics-push…

spikerj commented on issue spikerj/spikersoft-issues#538

2026-07-22 02:58:16 +00:00

[Infra][Network] LAN traffic to *.spikersoft.com NAT-hairpins through the UDM — local DNS records + direct Gitea→MinIO path

Board-sweep status (2026-07-22): partial mitigations merged (Gitea→MinIO direct overlay path infra #70; CI pull resilience #276). REMAINING: the headline — LAN-local DNS for *.spikersoft.com on…

spikerj commented on issue spikerj/spikersoft-issues#521

2026-07-22 02:58:16 +00:00

[Infra][Registry] Gitea upstream-image mirror (skopeo → mirror/* org) + incremental stack repointing

Board-sweep status (2026-07-22): mirror workflow + hardening merged (infra #51/#59) but the mirror is still EMPTY (needs re-dispatch), and the incremental stack-repointing half has zero commits.

spikerj commented on issue spikerj/spikersoft-issues#489

2026-07-22 02:58:16 +00:00

[Bug][Backend] Missing reference data on prod — GeoLite2-City.mmdb + postal-code dataset absent, features degraded

Board-sweep status (2026-07-22): Postal half Healthy in prod (07-13); GeoIP half merged (self-provision #253 + scheduler stack). REMAINING: gated on #540's scheduler actually deploying + the…

spikerj commented on issue spikerj/spikersoft-issues#411

2026-07-22 02:58:15 +00:00

[Reliability][Go-live] Eliminate availability bombs — Redis scans/flush, MongoClient-per-message, GPU ledger, poison requeue

Board-sweep status (2026-07-22): items 1+2 merged (SCAN* removed #122; singleton MongoClient #111). REMAINING: item 3 GPU-ledger persistence + item 4 poison-message DLQ in LeaseManagerService.

spikerj commented on issue spikerj/spikersoft-issues#412

2026-07-22 02:58:15 +00:00

[Correctness][Go-live] Repair or gate non-functional features (Trellis 3D, decompiler, phone lookup)

Board-sweep status (2026-07-22): decompiler real (#143), phone-lookup honest failure (#140), Trellis TZ crash fixed (#142). REMAINING: Trellis repair-vs-retire decision (CI is dispatch-only) +…

spikerj commented on issue spikerj/spikersoft-issues#415

2026-07-22 02:58:15 +00:00

[Security][Go-live] Add authorization FallbackPolicy; lock down anonymous-by-omission API endpoints

Board-sweep status (2026-07-22): six+ controller lockdowns + webhook HMACs merged. REMAINING: the HEADLINE item — no FallbackPolicy in SpikerSoft.Api Authentication (grep-verified absent).

spikerj commented on issue spikerj/spikersoft-issues#426

2026-07-22 02:58:15 +00:00

art_pipe local dev: migrate to a CUDA 13 driver so default torch builds work

Board-sweep status (2026-07-22): mitigation shipped (cu128 torch pin in the bootstrap script, backend #106). REMAINING: the actual dev-box CUDA-13 driver migration (ops).

spikerj commented on issue spikerj/spikersoft-issues#460

2026-07-22 02:58:15 +00:00

art_pipe observability: install OpenTelemetry into model venvs so worker spans (#430) actually export (#428)

Board-sweep status (2026-07-22): implementation merged (spikersoft-artpipe #9 — OTel into venvs, opt-in). REMAINING: acceptance only — re-bootstrap venvs on the GPU host + verify one end-to-end…

spikerj commented on issue spikerj/spikersoft-issues#482

2026-07-22 02:58:15 +00:00

[Bug][Infra] Keycloak Postgres TOAST corruption (pg_toast_2619 / pg_statistic) — ClearExpiredEvents failing, events not purged

Board-sweep status (2026-07-22): recovery RUNBOOK merged (infra #49). REMAINING: the actual TOAST repair + ClearExpiredEvents verification — an unexecuted ops procedure.

spikerj commented on issue spikerj/spikersoft-issues#409

2026-07-22 02:58:14 +00:00

[Security][Frontend][Go-live] Remove EPUB sanitizer bypass & harden client-side XSS sinks

Board-sweep status (2026-07-22): item 1 merged (EPUB DOMPurify, angular #148). REMAINING: the new-Function node + the other DOM-XSS / keycloak-admin sinks.

spikerj commented on issue spikerj/spikersoft-issues#405

2026-07-22 02:58:14 +00:00

[Security][Go-live] Sandbox untrusted student code execution (C#/Python/JS)

Board-sweep status (2026-07-22): core sandbox NOT built (07-17 audit stands); only blast-radius mitigation landed (#546 scoped codeexec AppRole). REMAINING: the actual wasmtime-style sandbox for…

spikerj commented on issue spikerj/spikersoft-issues#407

2026-07-22 02:58:14 +00:00

[Security][Go-live] Remove unauthenticated infra control planes (Docker 2375, GameServer JWT, MCP)

Board-sweep status (2026-07-22): items 1+2 merged+verified (Docker 2375 removed #162; GameServer JWKS #158). REMAINING: item 3 — SpikerSoft.AI.MCPServer/Program.cs still has NO inbound authN…

spikerj commented on issue spikerj/spikersoft-issues#551

2026-07-22 02:57:52 +00:00

[Bug][Infra][Jaeger] jaeger_elasticsearch crash-loops (0/1) — ES 7.17.0 image started against a data volume written by ES 8.11.0, restarting every ~30s

Board-sweep closing on merged evidence: ES pinned 8.11.0 to match the data volume (infra #66) AND jaeger v2 given --config so ES storage is actually used instead of silent in-memory (infra #76 —…

spikerj closed issue spikerj/spikersoft-issues#518

2026-07-22 02:57:52 +00:00

[ArtPipe] Baked images Phase 2: stood-down residents blender/sdxl/triposr, hunyuan deferred (epic #515)

spikerj closed issue spikerj/spikersoft-issues#556

2026-07-22 02:57:52 +00:00

[Bug][Backend][Infra] tiles.spikersoft.com has no backing service — API status/health canary fetches a terrain tile every few minutes and 404s 100% of the time

spikerj commented on issue spikerj/spikersoft-issues#556

2026-07-22 02:57:52 +00:00

[Bug][Backend][Infra] tiles.spikersoft.com has no backing service — API status/health canary fetches a terrain tile every few minutes and 404s 100% of the time

Board-sweep verified complete: TileServerGL healthcheck no longer probes when unconfigured and honors Degraded without 503ing (backend #274, tree-verified; docs retired in infra #77). Note:…

spikerj commented on issue spikerj/spikersoft-issues#518

2026-07-22 02:57:52 +00:00

[ArtPipe] Baked images Phase 2: stood-down residents blender/sdxl/triposr, hunyuan deferred (epic #515)

Board-sweep verified complete: stack swaps + finals merged (backend #251 + infra #53); all Phase 2 images exist in the registry (incl. first sdxllightning push) and the stood-down stacks at…

spikerj closed issue spikerj/spikersoft-issues#551

2026-07-22 02:57:52 +00:00

[Bug][Infra][Jaeger] jaeger_elasticsearch crash-loops (0/1) — ES 7.17.0 image started against a data volume written by ES 8.11.0, restarting every ~30s

spikerj closed issue spikerj/spikersoft-issues#517

2026-07-22 02:57:51 +00:00

[ArtPipe] Baked images Phase 1: SafetyCheck pilot image + cutover, incl. #486 fault isolation (epic #515)