Issues

• security: finish MCP confinement and CLI gateway routing after #346

  google/capsem#353 · Filter by author ebursztein opened on Oct 14, 2026

• fix(service): return HTTP 400 on invalid characters in exact=true file paths instead of silently stripping them

  google/capsem#351 · Filter by author tholop opened on Oct 14, 2026

• perf(logger): remove periodic disk-flush stalls from HTTP completion

  google/capsem#350 · Filter by author ebursztein opened on Oct 13, 2026
  1

• feat(config): expose network concurrency limit

  google/capsem#349 · Filter by author ebursztein opened on Oct 13, 2026

• perf: investigate cold debug-image unpack deadline under native VM load

  google/capsem#348 · Filter by author ebursztein opened on Oct 9, 2026
  1

• CLI: route VM operations through the authenticated gateway

  google/capsem#347 · Filter by author ebursztein opened on Oct 9, 2026

• SDK: simplify decoded command output in TypeScript and Rust

  google/capsem#345 · Filter by author ebursztein opened on Oct 9, 2026

• SDK: connect to local Capsem without manual gateway URL or token setup

  google/capsem#344 · Filter by author ebursztein opened on Oct 9, 2026

• Decide the long-term credential storage model across desktop and service deployments

  google/capsem#343 · Filter by author ebursztein opened on Oct 8, 2026

• Integrate and qualify Inspect AI on current 0.7 (Pierre handoff)

  google/capsem#342 · Filter by author ebursztein opened on Oct 7, 2026
  1

  

• perf: improve default VM create-to-first-exec time below the current 3-second allowance

  google/capsem#335 · Filter by author ebursztein opened on Oct 6, 2026
  2

• Release commands depend on the developer checkout while they run

  google/capsem#334 · Filter by author ebursztein opened on Oct 6, 2026

• 0.7 release: reuse verified macOS Cargo tool artifacts

  google/capsem#333 · Filter by author ebursztein opened on Oct 6, 2026

• 0.7 images: require exact OCI runtime qualification before publication

  google/capsem#332 · Filter by author ebursztein opened on Oct 6, 2026

• 0.7 release: bound queued publications and finalize against fresh channel state

  google/capsem#331 · Filter by author ebursztein opened on Oct 6, 2026

• 0.7 gate: isolate immutable build outputs before concurrent producers

  google/capsem#330 · Filter by author ebursztein opened on Oct 6, 2026

• 0.7 gate: replace sibling-unsafe compiler-cache reaping before concurrency

  google/capsem#329 · Filter by author ebursztein opened on Oct 6, 2026

• 0.7 cache: reserve transient growth against actual filesystem headroom

  google/capsem#328 · Filter by author ebursztein opened on Oct 6, 2026

• 0.7 gate: attribute startup admission and hosted watch wall time

  google/capsem#327 · Filter by author ebursztein opened on Oct 6, 2026

• 0.7 release: require the updated running service cohort in transition proof

  google/capsem#326 · Filter by author ebursztein opened on Oct 6, 2026

• 0.7 release: prove supported installed schema transitions before dispatch

  google/capsem#325 · Filter by author ebursztein opened on Oct 6, 2026

• 0.7 release: exercise activation and recovery on controlled staging

  google/capsem#324 · Filter by author ebursztein opened on Oct 6, 2026

• 0.7 release: replay native arm64 package acceptance before dispatch

  google/capsem#323 · Filter by author ebursztein opened on Oct 6, 2026

• 0.7 release: validate notarization readiness before expensive qualification

  google/capsem#322 · Filter by author ebursztein opened on Oct 6, 2026

• 0.7 release acceleration: isolated sprint checkpoint and restart handoff

  google/capsem#320 · Filter by author ebursztein opened on Oct 6, 2026