Issues

• [Dream Cycle 2026-10-21] flywheel-promotion: canon() collapses NaN/Infinity/-Infinity/null, defeating sealedFieldsAuthentic's tamper check (evaluated) + evals-verticals,bench scan

  benchdream-cycleevals-verticalsflywheel-promotionresearch
  ruvnet/metaharness#422 · Filter by author ruvnet opened on Oct 21, 2026

• [Dream Cycle 2026-10-20] generator-genome: CLI silently scaffolds on 23 reserved-looking words instead of erroring + router,turn-credit scan

  dream-cyclegenerator-genomeresearchrouterturn-credit
  ruvnet/metaharness#420 · Filter by author ruvnet opened on Oct 20, 2026

• [Dream Cycle 2026-10-19] host-adapters: close @metaharness/sdk's validation asymmetry (defineHarness description, tool/mcpServer kebab-case + collisions) + kernel,sdk scan

  dream-cyclehost-adapterskernelresearchsdk
  ruvnet/metaharness#418 · Filter by author ruvnet opened on Oct 19, 2026

• [Dream Cycle 2026-10-18] security-adversarial: scaffolder never emits ADR-022's default-deny mcp-policy.json + sbom,policy scan

  dream-cyclepolicyresearchsbomsecurity-adversarial
  ruvnet/metaharness#413 · Filter by author ruvnet opened on Oct 18, 2026

• [Dream Cycle 2026-10-17] darwin-evolution: learn's --max-cost NaN-bypass across 5 SWE-bench solver scripts + weight-eft,learn scan

  ruvnet/metaharness#409 · Filter by author ruvnet opened on Oct 17, 2026

• CI blocked by Candle 0.8 dependency on yanked zip 1.x

  ruvnet/metaharness#408 · Filter by author ruvnet opened on Oct 16, 2026

• [Dream Cycle 2026-10-16] flywheel-promotion: canon() unbounded recursion lets a crafted payload crash verifyReplayBundle/verifyMultiGenerationEvidence + evals-verticals,bench scan

  benchdream-cycleevals-verticalsflywheel-promotionresearch
  ruvnet/metaharness#405 · Filter by author ruvnet opened on Oct 16, 2026

• [Dream Cycle 2026-10-15] generator-genome: compileConfidence trusted unverified test manifests + router,turn-credit scan

  dream-cyclegenerator-genomeresearchrouterturn-credit
  ruvnet/metaharness#403 · Filter by author ruvnet opened on Oct 15, 2026

• [Dream Cycle 2026-10-14] host-adapters: kernel-js exports map missing ./self-evolution + ./package.json, breaks harness diag's ADR-028 skew check + kernel,sdk scan

  dream-cyclehost-adapterskernelresearchsdk
  ruvnet/metaharness#401 · Filter by author ruvnet opened on Oct 14, 2026

• [Dream Cycle 2026-10-13] security-adversarial: threat-model.ts verdict ignores scan.worst severity rollup + sbom,policy scan

  dream-cyclepolicyresearchsbomsecurity-adversarial
  ruvnet/metaharness#399 · Filter by author ruvnet opened on Oct 13, 2026

• Generated claude-code harness (0.4.17): invalid plugin manifest passes harness doctor; commands, skills and agents never load

  ruvnet/metaharness#398 · Filter by author DamienStevens opened on Oct 12, 2026

• [Dream Cycle 2026-10-12] darwin-evolution: Tier-1 mock-sandbox's memoryThreshold extracted but never consumed (fitness-blind surface) + weight-eft,learn scan

  ruvnet/metaharness#396 · Filter by author ruvnet opened on Oct 12, 2026

• [Dream Cycle 2026-10-11] flywheel-promotion: sign IndependentReviewPacket (ADR-317) + evals-verticals, bench scan

  benchdream-cycleevals-verticalsflywheel-promotionresearch
  ruvnet/metaharness#391 · Filter by author ruvnet opened on Oct 11, 2026

• [Dream Cycle 2026-10-10] generator-genome: apps/web-ui's recommendPlan() can never report mcp: 'off' (sibling of #374) + router,turn-credit scan

  dream-cyclegenerator-genomeresearchrouterturn-credit
  ruvnet/metaharness#389 · Filter by author ruvnet opened on Oct 10, 2026

• [Dream Cycle 2026-10-09] host-adapters: close SessionLog.append()/fork() TOCTOU race (kernel) + kernel,sdk scan

  ruvnet/metaharness#385 · Filter by author ruvnet opened on Oct 9, 2026

• Block Darwin submission gate: synthetic promotion, fitness mismatch, unvalidated evidence and budget refunds

  ruvnet/metaharness#384 · Filter by author ruvnet opened on Oct 9, 2026
  1

• apps/web-ui: 2 unpatched high-severity advisories (sharp, @huggingface/transformers) failing audit-deps-aggregate

  dependenciessecurity
  ruvnet/metaharness#382 · Filter by author ruvnet opened on Oct 8, 2026

• [Dream Cycle 2026-10-08] security-adversarial: main's own Security CI has been red on 3 real production CVEs (grpc-js, MCP SDK OAuth confused-deputy, proxy-addr) + sbom,policy scan

  dream-cyclepolicyresearchsbomsecurity-adversarial
  ruvnet/metaharness#380 · Filter by author ruvnet opened on Oct 8, 2026

• [Dream Cycle 2026-10-07] darwin-evolution: Tier-2 sandbox's own "tool ordering shapes behaviour" claim was false — toolPolicy mutations were measurement-invisible + weight-eft,learn scan

  darwin-evolutiondream-cyclelearnresearchweight-eft
  ruvnet/metaharness#378 · Filter by author ruvnet opened on Oct 7, 2026

• [Dream Cycle 2026-10-06] flywheel-promotion: verifyReplayBundle has no trusted-signer allowlist (closes ADR-274's disclosed gap) + evals-verticals,bench scan

  benchdream-cycleevals-verticalsflywheel-promotionresearch
  ruvnet/metaharness#376 · Filter by author ruvnet opened on Oct 6, 2026

• [Dream Cycle 2026-10-05] generator-genome: recommendPlan() can never report mcp: 'off' + router,turn-credit scan

  dream-cyclegenerator-genomeresearchrouterturn-credit
  ruvnet/metaharness#374 · Filter by author ruvnet opened on Oct 5, 2026

• [Dream Cycle 2026-10-03] security-adversarial: budget-watchdog.mjs NaN-bypass of the real-money SIGTERM kill-switch + sbom,policy scan

  dream-cyclepolicyresearchsbomsecurity-adversarial
  ruvnet/metaharness#372 · Filter by author ruvnet opened on Oct 3, 2026

• [Dream Cycle 2026-10-02] darwin-evolution: 4th BLOCKED_CONTENT_PATTERNS bypass, round-1 REJECTED by critic, round-2 fixed

  darwin-evolutiondream-cyclelearnresearchweight-eft
  ruvnet/metaharness#370 · Filter by author ruvnet opened on Oct 2, 2026

• [Dream Cycle 2026-10-01] flywheel-promotion: verifyMultiGenerationEvidence's frozen thresholds were float-noise-nondeterministic at the boundary + evals-verticals,bench scan

  benchdream-cycleevals-verticalsflywheel-promotionresearch
  ruvnet/metaharness#367 · Filter by author ruvnet opened on Oct 1, 2026

• [Dream Cycle 2026-09-30] generator-genome: defineHarness() silent tool/mcpServer collision gap closed + router,turn-credit scan

  dream-cyclegenerator-genomeresearchrouterturn-credit
  ruvnet/metaharness#365 · Filter by author ruvnet opened on Sep 30, 2026