M2: Security & Isolation

New Issue

User-scoped queries on all data paths — memory, conversations, agents, Valkey keys

-

100% Completed

0 Open 8 Closed

Label

Show archived labels Use alt + click/enter to exclude labels

All labels No label

bug

fleet-enhancement

Project

All projects No project

Author

All users

Assignee

Assigned to nobody Assigned to anybody

code-be-01 (Mosaic fleet seat code-be-01) code-be-02 (Mosaic fleet seat code-be-02) code-infra-01 (Mosaic fleet seat code-infra-01) fargo fred gate-merge-01 (Mosaic fleet seat gate-merge-01) happy jason.woltje (Jason Woltje) merge-gate ops-01 (Mosaic fleet seat ops-01) ops-02 (Mosaic fleet seat ops-02) ops-03 (Mosaic fleet seat ops-03) ops-ci-01 (Mosaic fleet seat ops-ci-01) ops-deploy-01 (Mosaic fleet seat ops-deploy-01) pepper rev-code-01 rev-code-02 rev-security-01 rev-security-02 rev-security-03 (Mosaic fleet seat rev-security-03) sanity scooby (Scooby) scrappy shaggy tiny velma veronica (Mosaic fleet seat veronica) vision woodpecker

Sort

Newest Oldest Most recently updated Least recently updated Most commented Least commented Nearest due date Farthest due date

M2-008: Audit Valkey keys — no cross-user enumeration

#239

by jason.woltje was closed 2026-03-21 20:45:56 +00:00

M2-007: Integration test — cross-user isolation

#238

by jason.woltje was closed 2026-03-21 21:16:52 +00:00

M2-006: Audit AgentsRepo — findAccessible scope

#237

by jason.woltje was closed 2026-03-21 20:34:49 +00:00

M2-005: Audit ConversationsRepo — ownership checks

#236

by jason.woltje was closed 2026-03-21 20:34:49 +00:00

M2-004: Audit agent memory tools — scope to session user

#235

by jason.woltje was closed 2026-03-21 20:19:27 +00:00

M2-003: Audit PreferencesRepo — verify userId filtering

#234

by jason.woltje was closed 2026-03-21 20:19:26 +00:00

M2-002: Audit InsightsRepo — userId filter on findByUser, decayOldInsights

#233

by jason.woltje was closed 2026-03-21 20:34:49 +00:00

M2-001: Audit InsightsRepo — add userId to searchByEmbedding()

#232

by jason.woltje was closed 2026-03-21 20:34:48 +00:00