Issues

• docs/design: frame derived identity as multi-attestation; propose it as a SPIRE selector for enrolled agent principals

  aflock-ai/aflock#200 · Filter by author manzil-infinity180 opened on Sep 2, 2026

• arch: align aflock tokens and identity with IETF AIMS (draft-klrc-aiagent-auth)

  aflock-ai/aflock#199 · Filter by author manzil-infinity180 opened on Sep 2, 2026
  1

• feat(usage): optional wire-interception proxy for complete, real-time, subscription-accurate accounting + enforcement

  architecturedeferredenhancementepic
  aflock-ai/aflock#157 · Filter by author manzil-infinity180 opened on Jun 3, 2026
  2

• fix(usage): transcript-derived cost is a lower bound even under API key (background model calls omitted)

  bug
  aflock-ai/aflock#156 · Filter by author manzil-infinity180 opened on Jun 3, 2026

• fix(usage): Opus 4.5+ priced at pre-4.5 rates → ~3x cost overcount

  bugmedium
  aflock-ai/aflock#155 · Filter by author manzil-infinity180 opened on Jun 3, 2026

• fix(limits): pre-flight fail-fast — abort BEFORE the tool call, not after (paper §4.2)

  bugpaper-90paper-gap
  aflock-ai/aflock#153 · Filter by author manzil-infinity180 opened on May 28, 2026 · Road to First Release

• docs/verify: session merkle is built over aflock ActionRecords, not Claude JSONL (paper §4.4 wording vs implementation)

  documentationpaper-95paper-gap
  aflock-ai/aflock#152 · Filter by author manzil-infinity180 opened on May 28, 2026 · Road to First Release

• fix(state): subagent spend not rolled up to parent until SubagentStop — parent fail-fast can be exceeded mid-flight (paper §5 invariant #2)

  bughookpaper-90paper-gap
  aflock-ai/aflock#135 · Filter by author manzil-infinity180 opened on May 23, 2026 · Road to First Release
  4

• feat(metrics): warn on subscription mode, enforce maxSpendUSD / maxTokensIn under API key

  enhancementpaper-85
  aflock-ai/aflock#111 · Filter by author manzil-infinity180 opened on May 16, 2026 · Road to First Release
  1

  

• security: aflock enforcement bypassable via claude-code general-purpose subagent (native Bash/Write)

  paper-95securityv.imp
  aflock-ai/aflock#100 · Filter by author manzil-infinity180 opened on May 7, 2026 · Road to First Release
  2

  

• feat: implement token/cost/turn tracking via Claude Code session JSONL

  aflock-ai/aflock#96 · Filter by author manzil-infinity180 opened on May 6, 2026
  1

  

• Support additional AI agents beyond Claude Code (MCP-first, native adapters where possible)

  aflock-ai/aflock#87 · Filter by author manzil-infinity180 opened on Apr 22, 2026
  

• fix: MCP-mode metrics never populated — fail-fast limits (maxSpendUSD, maxTokensIn) cannot fire

  bugpaper-85paper-gap
  aflock-ai/aflock#72 · Filter by author manzil-infinity180 opened on Apr 21, 2026 · Road to First Release

• docs: update paper and website to accurately reflect current security properties

  documentationpaper-95paper-gapv.imp
  aflock-ai/aflock#65 · Filter by author manzil-infinity180 opened on Apr 5, 2026 · Road to First Release
  1

• arch: Rekor transparency log integration for non-repudiation

  architecturedeferredenhancementpaper-gap
  aflock-ai/aflock#64 · Filter by author manzil-infinity180 opened on Apr 5, 2026
  2

• arch: dedicated signing service for true key separation

  architectureenhancementpaper-90paper-gapv.imp
  aflock-ai/aflock#62 · Filter by author manzil-infinity180 opened on Apr 5, 2026 · Road to First Release
  3

• fix: ephemeral JWT keys are unverifiable after process exit — no external audit trail

  bugdeferredpaper-95security
  aflock-ai/aflock#45 · Filter by author manzil-infinity180 opened on Mar 22, 2026
  2

• feat: embed grant scopes in JWT claims for per-request grant enforcement

  deferredenhancementpaper-95
  aflock-ai/aflock#44 · Filter by author manzil-infinity180 opened on Mar 22, 2026
  2

• feat: move JWT auth from _token parameter to HTTP Authorization header

  deferredenhancement
  aflock-ai/aflock#43 · Filter by author manzil-infinity180 opened on Mar 22, 2026
  2

• feat: JWT token refresh, rotation, and revocation

  deferredenhancementsecurity
  aflock-ai/aflock#41 · Filter by author manzil-infinity180 opened on Mar 22, 2026
  2

• feat: implement gRPC evaluators for custom verification logic

  deferredenhancementverification
  aflock-ai/aflock#21 · Filter by author manzil-infinity180 opened on Mar 10, 2026
  2