[GH-ISSUE #3582] [Tracker] Ready to close or merge: issues and pull requests (October 2026) #1330

Open
opened 2026-10-16 21:04:22 +00:00 by bsakaguchi · 5 comments
Owner

Originally created by @CassieFox23 on GitHub (Oct 14, 2026).
Original GitHub issue: https://github.com/morluto/rea/issues/3582

Type: Tracker Status: Active Audit Ecosystem: REA

TL;DR: This tracker lists what may be ready to close or merge. There is no rush.

Edit (21 Oct): it now covers issues and approved pull requests too. The data is from main 7fdf7a5b7 at 19:23 UTC.

What's here

Many open issues and pull requests are already done on main, or approved. They stay open, so the queue looks longer than it is. This list gathers them in one place. Each line comes from a main commit or a GitHub review. Nothing here asks for speed.

Last refreshed: 10:29 PM UTC on 2 November 2026.

Ready now

  • A collaborator says main fixes it (1): #4226

The full lists and how each was checked are below.

Ready to close or merge

Each box below may be ready to close or merge. Tick a box once it is closed, merged or confirmed.

Issues named by a fix on main

Refs (17). A main commit names these with Refs, which can mean partial work. Each needs a check before it closes. Trackers, roadmaps and design issues are left out.

Refs list
  • #487 Improve Ghidra AArch64 jump-table recovery, in 3749ccec4 (11 Oct)
  • #829 Unify local-artifact vs live-DOM vs source-map URL policies, in c1d000247 (8 Oct)
  • #1587 Improve task-centered REA onboarding and recovery in Codex skills, in 2653b194b (10 Oct)
  • #1741 Add PowerPC (32-bit big-endian) native analysis through Ghidra, with a GameCube/Wii DOL follow-up, in cab78de50 (24 Oct)
  • #2156 docs: correct documentation drift and simplify English guides, in ae412654d (12 Oct)
  • #2498 Semantic member-mutation traversal takes 84 s and 1.2 GB on pdf.js's 462 KB openjpeg_nowasm_fallback.js, in 0c6c571a0 (13 Oct)
  • #3056 Windows + IDA headless: analysis hangs for minutes and ends in cleanup_incomplete; the same supervisor driven directly answers in 2.4s, in b6e6d7cd1 (22 Oct)
  • #3133 test(perf): measure supported qlog summaries and retained event views, in 4e716b060 (20 Oct)
  • #3813 perf: CLI startup and doctor catalog digests make clientProfileLifecycle time out on CI, in c61c108b5 (15 Oct)
  • #4089 Connected browser scenarios can clear caller-owned platform emulation through CDP detach, in 921fa03fc (15 Oct)
  • #4282 Linux Electron capture cannot verify owned lineage: Chromium processes do not expose REA_PROCESS_RUN_ID in /proc//environ, in 5a77acfbc (16 Oct)
  • #4322 Linux exit race reports an exited owned process as a token mismatch, in 49e67aa1d (19 Oct)
  • #4987 Let analyze-javascript-application select sources by folder or glob, in e5965adb2 (24 Oct)
  • #5273 MCP tool calls backgrounded by the client after 120 s fail with "missing required resultType" (protocol 2026-07-28), in 4eaf3a117 (20 Oct)
  • #5861 Default tools/list schema profile is ~813 KB (~259K tokens); compact cuts it to ~196 KB but is off by default and still 66K context, in aa51e4343 (21 Oct)
  • #6038 test(package): retain registry proxy failures and stop updater helpers, in 0f0963064 (22 Oct)
  • #6090 Decompile every function (or a filtered set) to a directory and return only a manifest, in a91412aaf (23 Oct)

Issues a collaborator says main fixes

Said fixed (1). A collaborator said main already fixes these. They are still open. Each line links the comment.

  • #4226 Hopper pre-handshake startup failure causes repeated cleanup errors while session reports idle, fixed in 0e1f0bf2d per kaoru0822-kitauji (comment, 17 Oct)

Pull requests whose issue has closed

Its issue already closed (30). These open pull requests fix an issue that has since closed. A maintainer may want to close or merge them.

  • #2185 show non-interactive setup results in a terminal (issue #2164 closed 12 Oct)
  • #2771 keep unreported Java bitness unknown (issue #2532 closed 14 Oct)
  • #2868 drop the remaining exclusivity claim from push guidance (issue #2602 closed 13 Oct)
  • #3760 name the missing native artifact and its recovery path on source checkouts (issue #3501 closed 14 Oct)
  • #4028 narrow WorkBuddy/CodeBuddy 11133 guidance to full override (issue #2999 closed 26 Oct)
  • #4038 preserve command status after complete pipe reads (issue #3894 closed 24 Oct)
  • #4224 preserve uncertainty for omitted initiator URLs (#4211) (issue #4211 closed 24 Oct)
  • #4429 isolate empty Swift conformance names (issue #4368 closed 24 Oct)
  • #4536 treat exact location-only moves as unchanged (issue #4520 closed 18 Oct)
  • #4572 keep the raw query and fragment on unresolved ESM paths (issue #3916 closed 23 Oct)
  • #4716 bound alias-cycle call-target and returned-reference expansion (issue #4348 closed 19 Oct)
  • #5022 retry and classify registry read failures (issue #4998 closed 18 Oct)
  • #5180 treat an EPERM launcher spawn as not executable (issue #5177 closed 24 Oct)
  • #5254 exact arm64e.x1 slice names and mach-o-universal format (issue #5191 closed 26 Oct)
  • #5296 preserve observed command failures before cancellation (issue #5292 closed 20 Oct)
  • #5303 keep var reads before their declarator unknown (issue #5302 closed 24 Oct)
  • #5323 check advertised defaults against every input group (issue #5322 closed 24 Oct)
  • #5539 keep inferior-tty verification for read-only queries (issue #5099 closed 24 Oct)
  • #5544 reject invalid token-window bounds (issue #5532 closed 24 Oct)
  • #5597 stop offering overwrite for outputs that never overwrite (issue #5408 closed 24 Oct)
  • #5755 keep ELF layout independent of pwntools kernel probes (issues #5715, #5716, #5717 and #5718 closed 24 Oct)
  • #6190 include slotless accesses in property traces (issue #6189 closed 24 Oct)
  • #6296 protect web execution duration schema and argv bounds (issue #6290 closed 24 Oct)
  • #6383 repair dead anchors and unambiguous documentation errors (issue #6731 closed 26 Oct)
  • #6856 reject blank function names (issue #6824 closed 24 Oct)
  • #7867 exclude HTTP credentials from failed command observations (issue #7812 closed 28 Oct)
  • #8022 honor sensitive inputs across captured terminal projections (issue #7782 closed 28 Oct)
  • #8262 name the missing closure for inline investigation Evidence (issue #8237 closed 31 Oct)
  • #8519 preserve dynamic export visibility (issue #8517 closed 2 Nov)
  • #8653 guide retained cleanup before opening another target (#8353) (issue #8353 closed 2 Nov)
Closed (16)
  • #2961 bound scenario retention and loopback admission, landed in f6905719c; closed 21 Oct without merging
  • #4655 preserve device and file error identity, covered by #4643 in 8307ea371; closed 21 Oct without merging
  • #2108 classify native readiness failures by stage, landed in d4bd65c53; closed 18 Oct, superseded by 80de3145e
  • #2695 retain upstream tool error diagnostics, landed in d4bd65c53; closed 18 Oct, superseded by 80de3145e
  • #2864 declare binary session prerequisite process effects, landed in 80de3145e; closed 18 Oct, superseded by 80de3145e
  • #2875 handle empty symbol batches in swift-demangle parser, landed in 55dd21a5e; closed 18 Oct, superseded by 55dd21a5e
  • #3035 stop overflowing the stack on large module factories, landed in b58adafa4; closed 18 Oct, superseded by b58adafa4
  • #4365 stop reporting a named-versus-unnamed reference endpoint as a change, covered by #4210 in 92dadf933; closed 19 Oct without merging
  • #4023 keep Vite dependency slots after a spread unknown, landed in d8199ab6a; merged 21 Oct
  • #4024 reject repeated byte-string keys in Solidity metadata, landed in 8fe8622e0; merged 21 Oct
  • #4405 validate direct protocol enumeration input, landed in 414ad52b2; merged 21 Oct
  • #4416 reject unfinished CIL prefix chains, landed in ca2ca1614; merged 21 Oct
  • #5910 Limit errors omit adjustment controls and leave hard-coded ceilings unexplained, named in 2947a7750; closed 21 Oct
  • #5741 inspect-plist aborts a JSON-decodable NUL string when a large integer triggers XML probing, fixed in d672cc239; closed 24 Oct
  • #4558 firmwareIntegration publication cleanup-retry tests fail deterministically since 2d163c12, fixed in 5eaef92e5; closed 24 Oct
  • #2872 redact normalized HAR numeric values, landed in f6905719c; closed 23 Oct without merging
How it's built
  • Fix on main: a script found every open pull request named as #N in a main commit since 9 Oct. I read each one and checked how much of it is on main at 8f7d12e30. Partial matches and other mentions are left out.
  • Approved and reviewed: GitHub's review state, checks and merge state for every open pull request, read on 21 Oct.
  • Issues: every #N in main commit messages since 1 Oct. Fixes or Closes count as Closes. Refs counts as Refs.

If something's wrong

Comment on this issue and name the line. I will fix the list.

Every open tracker in the repo, so you can get to any of them from here.

Bugs and duplicates
  • #3537: Open bugs, by subsystem (matbrgz)
  • #4330: Duplicate issues, in clusters (matbrgz)
  • #5653: New issues by area, pointing at #4330 for duplicates (CassieFox23)
Features and roadmap
  • #3796: Feature requests, by area (CassieFox23)
  • #2383: Support for the top 100 languages (matbrgz)
  • #2357: Static file and crash report work (matbrgz)
  • #3714 to #3719: six RFC epics on formats and bytecode (matbrgz)
  • #4027: Browser, Electron and JS work (N0zoM1z0)
  • #32: The main roadmap (morluto)
  • #48: The Evidence v2 epic (morluto)
  • #2039: The roadmap in plain words, a discussion (CassieFox23)
Docs
  • #3795: Open docs issues and PRs (CassieFox23)
Pull requests
  • #3582: Ready to close or merge, issues and PRs (this one, CassieFox23)
  • #5654: Open PRs with conflicts or red CI (CassieFox23)
Show and tell
  • #1435: Linux setup notes and test queue, a discussion (CassieFox23)

🤖 Generated with Claude Code (Sonnet 5.5, verified by Opus 5.5) 🦊

Originally created by @CassieFox23 on GitHub (Oct 14, 2026). Original GitHub issue: https://github.com/morluto/rea/issues/3582 [![Type: Tracker](https://img.shields.io/badge/type-tracker-purple.svg?style=flat-square)](https://github.com/morluto/rea) [![Status: Active Audit](https://img.shields.io/badge/status-active_audit-blue.svg?style=flat-square)](https://github.com/morluto/rea) [![Ecosystem: REA](https://img.shields.io/badge/ecosystem-morluto%2Frea-8A2BE2.svg?style=flat-square)](https://github.com/morluto/rea) **TL;DR:** This tracker lists what may be ready to close or merge. There is no rush. **Edit (21 Oct):** it now covers issues and approved pull requests too. The data is from main 7fdf7a5b7 at 19:23 UTC. ### What's here Many open issues and pull requests are already done on main, or approved. They stay open, so the queue looks longer than it is. This list gathers them in one place. Each line comes from a main commit or a GitHub review. Nothing here asks for speed. Last refreshed: 10:29 PM UTC on 2 November 2026. ### Ready now - **A collaborator says main fixes it (1):** #4226 The full lists and how each was checked are below. ### Ready to close or merge Each box below may be ready to close or merge. Tick a box once it is closed, merged or confirmed. #### Issues named by a fix on main **Refs (17).** A main commit names these with Refs, which can mean partial work. Each needs a check before it closes. Trackers, roadmaps and design issues are left out. <details> <summary>Refs list</summary> - [ ] #487 Improve Ghidra AArch64 jump-table recovery, in 3749ccec4 (11 Oct) - [ ] #829 Unify local-artifact vs live-DOM vs source-map URL policies, in c1d000247 (8 Oct) - [ ] #1587 Improve task-centered REA onboarding and recovery in Codex skills, in 2653b194b (10 Oct) - [ ] #1741 Add PowerPC (32-bit big-endian) native analysis through Ghidra, with a GameCube/Wii DOL follow-up, in cab78de50 (24 Oct) - [ ] #2156 docs: correct documentation drift and simplify English guides, in ae412654d (12 Oct) - [ ] #2498 Semantic member-mutation traversal takes 84 s and 1.2 GB on pdf.js's 462 KB openjpeg_nowasm_fallback.js, in 0c6c571a0 (13 Oct) - [ ] #3056 Windows + IDA headless: analysis hangs for minutes and ends in cleanup_incomplete; the same supervisor driven directly answers in 2.4s, in b6e6d7cd1 (22 Oct) - [ ] #3133 test(perf): measure supported qlog summaries and retained event views, in 4e716b060 (20 Oct) - [ ] #3813 perf: CLI startup and doctor catalog digests make clientProfileLifecycle time out on CI, in c61c108b5 (15 Oct) - [ ] #4089 Connected browser scenarios can clear caller-owned platform emulation through CDP detach, in 921fa03fc (15 Oct) - [ ] #4282 Linux Electron capture cannot verify owned lineage: Chromium processes do not expose REA_PROCESS_RUN_ID in /proc/<pid>/environ, in 5a77acfbc (16 Oct) - [ ] #4322 Linux exit race reports an exited owned process as a token mismatch, in 49e67aa1d (19 Oct) - [ ] #4987 Let analyze-javascript-application select sources by folder or glob, in e5965adb2 (24 Oct) - [ ] #5273 MCP tool calls backgrounded by the client after 120 s fail with "missing required resultType" (protocol 2026-07-28), in 4eaf3a117 (20 Oct) - [ ] #5861 Default tools/list schema profile is ~813 KB (~259K tokens); compact cuts it to ~196 KB but is off by default and still 66K context, in aa51e4343 (21 Oct) - [ ] #6038 test(package): retain registry proxy failures and stop updater helpers, in 0f0963064 (22 Oct) - [ ] #6090 Decompile every function (or a filtered set) to a directory and return only a manifest, in a91412aaf (23 Oct) </details> #### Issues a collaborator says main fixes **Said fixed (1).** A collaborator said main already fixes these. They are still open. Each line links the comment. - [ ] #4226 Hopper pre-handshake startup failure causes repeated cleanup errors while session reports idle, fixed in 0e1f0bf2d per kaoru0822-kitauji ([comment](https://github.com/morluto/rea/issues/4226#issuecomment-6233223795), 17 Oct) #### Pull requests whose issue has closed **Its issue already closed (30).** These open pull requests fix an issue that has since closed. A maintainer may want to close or merge them. - [ ] #2185 show non-interactive setup results in a terminal (issue #2164 closed 12 Oct) - [ ] #2771 keep unreported Java bitness unknown (issue #2532 closed 14 Oct) - [ ] #2868 drop the remaining exclusivity claim from push guidance (issue #2602 closed 13 Oct) - [ ] #3760 name the missing native artifact and its recovery path on source checkouts (issue #3501 closed 14 Oct) - [ ] #4028 narrow WorkBuddy/CodeBuddy 11133 guidance to full override (issue #2999 closed 26 Oct) - [ ] #4038 preserve command status after complete pipe reads (issue #3894 closed 24 Oct) - [ ] #4224 preserve uncertainty for omitted initiator URLs (#4211) (issue #4211 closed 24 Oct) - [ ] #4429 isolate empty Swift conformance names (issue #4368 closed 24 Oct) - [ ] #4536 treat exact location-only moves as unchanged (issue #4520 closed 18 Oct) - [ ] #4572 keep the raw query and fragment on unresolved ESM paths (issue #3916 closed 23 Oct) - [ ] #4716 bound alias-cycle call-target and returned-reference expansion (issue #4348 closed 19 Oct) - [ ] #5022 retry and classify registry read failures (issue #4998 closed 18 Oct) - [ ] #5180 treat an EPERM launcher spawn as not executable (issue #5177 closed 24 Oct) - [ ] #5254 exact arm64e.x1 slice names and mach-o-universal format (issue #5191 closed 26 Oct) - [ ] #5296 preserve observed command failures before cancellation (issue #5292 closed 20 Oct) - [ ] #5303 keep var reads before their declarator unknown (issue #5302 closed 24 Oct) - [ ] #5323 check advertised defaults against every input group (issue #5322 closed 24 Oct) - [ ] #5539 keep inferior-tty verification for read-only queries (issue #5099 closed 24 Oct) - [ ] #5544 reject invalid token-window bounds (issue #5532 closed 24 Oct) - [ ] #5597 stop offering overwrite for outputs that never overwrite (issue #5408 closed 24 Oct) - [ ] #5755 keep ELF layout independent of pwntools kernel probes (issues #5715, #5716, #5717 and #5718 closed 24 Oct) - [ ] #6190 include slotless accesses in property traces (issue #6189 closed 24 Oct) - [ ] #6296 protect web execution duration schema and argv bounds (issue #6290 closed 24 Oct) - [ ] #6383 repair dead anchors and unambiguous documentation errors (issue #6731 closed 26 Oct) - [ ] #6856 reject blank function names (issue #6824 closed 24 Oct) - [ ] #7867 exclude HTTP credentials from failed command observations (issue #7812 closed 28 Oct) - [ ] #8022 honor sensitive inputs across captured terminal projections (issue #7782 closed 28 Oct) - [ ] #8262 name the missing closure for inline investigation Evidence (issue #8237 closed 31 Oct) - [ ] #8519 preserve dynamic export visibility (issue #8517 closed 2 Nov) - [ ] #8653 guide retained cleanup before opening another target (#8353) (issue #8353 closed 2 Nov) <details> <summary>Closed (16)</summary> - [x] #2961 bound scenario retention and loopback admission, landed in f6905719c; closed 21 Oct without merging - [x] #4655 preserve device and file error identity, covered by #4643 in 8307ea371; closed 21 Oct without merging - [x] #2108 classify native readiness failures by stage, landed in d4bd65c53; closed 18 Oct, superseded by 80de3145e - [x] #2695 retain upstream tool error diagnostics, landed in d4bd65c53; closed 18 Oct, superseded by 80de3145e - [x] #2864 declare binary session prerequisite process effects, landed in 80de3145e; closed 18 Oct, superseded by 80de3145e - [x] #2875 handle empty symbol batches in swift-demangle parser, landed in 55dd21a5e; closed 18 Oct, superseded by 55dd21a5e - [x] #3035 stop overflowing the stack on large module factories, landed in b58adafa4; closed 18 Oct, superseded by b58adafa4 - [x] #4365 stop reporting a named-versus-unnamed reference endpoint as a change, covered by #4210 in 92dadf933; closed 19 Oct without merging - [x] #4023 keep Vite dependency slots after a spread unknown, landed in d8199ab6a; merged 21 Oct - [x] #4024 reject repeated byte-string keys in Solidity metadata, landed in 8fe8622e0; merged 21 Oct - [x] #4405 validate direct protocol enumeration input, landed in 414ad52b2; merged 21 Oct - [x] #4416 reject unfinished CIL prefix chains, landed in ca2ca1614; merged 21 Oct - [x] #5910 Limit errors omit adjustment controls and leave hard-coded ceilings unexplained, named in 2947a7750; closed 21 Oct - [x] #5741 inspect-plist aborts a JSON-decodable NUL string when a large integer triggers XML probing, fixed in d672cc239; closed 24 Oct - [x] #4558 firmwareIntegration publication cleanup-retry tests fail deterministically since 2d163c12, fixed in 5eaef92e5; closed 24 Oct - [x] #2872 redact normalized HAR numeric values, landed in f6905719c; closed 23 Oct without merging </details> <details> <summary>How it's built</summary> - **Fix on main:** a script found every open pull request named as `#N` in a main commit since 9 Oct. I read each one and checked how much of it is on main at 8f7d12e30. Partial matches and other mentions are left out. - **Approved and reviewed:** GitHub's review state, checks and merge state for every open pull request, read on 21 Oct. - **Issues:** every `#N` in main commit messages since 1 Oct. Fixes or Closes count as Closes. Refs counts as Refs. </details> ### If something's wrong Comment on this issue and name the line. I will fix the list. ### Related trackers Every open tracker in the repo, so you can get to any of them from here. <details> <summary>Bugs and duplicates</summary> - #3537: Open bugs, by subsystem (matbrgz) - #4330: Duplicate issues, in clusters (matbrgz) - #5653: New issues by area, pointing at #4330 for duplicates (CassieFox23) </details> <details> <summary>Features and roadmap</summary> - #3796: Feature requests, by area (CassieFox23) - #2383: Support for the top 100 languages (matbrgz) - #2357: Static file and crash report work (matbrgz) - #3714 to #3719: six RFC epics on formats and bytecode (matbrgz) - #4027: Browser, Electron and JS work (N0zoM1z0) - #32: The main roadmap (morluto) - #48: The Evidence v2 epic (morluto) - #2039: The roadmap in plain words, a discussion (CassieFox23) </details> <details> <summary>Docs</summary> - #3795: Open docs issues and PRs (CassieFox23) </details> <details> <summary>Pull requests</summary> - #3582: Ready to close or merge, issues and PRs (this one, CassieFox23) - #5654: Open PRs with conflicts or red CI (CassieFox23) </details> <details> <summary>Show and tell</summary> - #1435: Linux setup notes and test queue, a discussion (CassieFox23) </details> 🤖 Generated with Claude Code (Sonnet 5.5, verified by Opus 5.5) 🦊
Author
Owner

@CassieFox23 commented on GitHub (Oct 14, 2026):

The same 8 pull requests, unfolded so they are easy to scan. Each one was open when I posted this, and its fix is already on main. Ones that closed are in the closed list.

  • #2108 classify native readiness failures by stage, landed in d4bd65c53
  • #2644 distinguish runtime processes from argument text, landed in 599a8ee11
  • #2695 retain upstream tool error diagnostics, landed in d4bd65c53
  • #2864 declare binary session prerequisite process effects, landed in 80de3145e
  • #2872 redact normalized HAR numeric values, landed in f6905719c
  • #2875 handle empty symbol batches in swift-demangle parser, landed in 55dd21a5e
  • #2961 bound scenario retention and loopback admission, landed in f6905719c
  • #3035 stop overflowing the stack on large module factories, landed in b58adafa4

🤖 Generated with Claude Code (Opus 5.5) 🦊

<!-- gh-comment-id:6173970675 --> @CassieFox23 commented on GitHub (Oct 14, 2026): The same 8 pull requests, unfolded so they are easy to scan. Each one was open when I posted this, and its fix is already on main. Ones that closed are in [the closed list](https://github.com/morluto/rea/issues/3582#issuecomment-6179499522). - [ ] #2108 classify native readiness failures by stage, landed in d4bd65c53 - [ ] #2644 distinguish runtime processes from argument text, landed in 599a8ee11 - [ ] #2695 retain upstream tool error diagnostics, landed in d4bd65c53 - [ ] #2864 declare binary session prerequisite process effects, landed in 80de3145e - [ ] #2872 redact normalized HAR numeric values, landed in f6905719c - [ ] #2875 handle empty symbol batches in swift-demangle parser, landed in 55dd21a5e - [ ] #2961 bound scenario retention and loopback admission, landed in f6905719c - [ ] #3035 stop overflowing the stack on large module factories, landed in b58adafa4 🤖 Generated with Claude Code (Opus 5.5) 🦊
Author
Owner

@CassieFox23 commented on GitHub (Oct 14, 2026):

More for this tracker. Each one was open when it was added. Ones that closed are in the closed list.

Pull requests main covers in its own way (1). Main wrote the change differently, but it does what the pull request does. I compared the code and the tests.

  • #2919 fix(mips)!: refuse uninspected GNU ABI attributes, covered by d4bd65c53

Round 2 (8). Landed means at least half of the pull request's added lines are on main, or nothing is left to merge. Covered means main made the same change in its own way.

area: build (1)

  • #2731 retain build info in later ELF data segments, landed in 55dd21a5e (one tool description sentence is left)

area: cli (1)

  • #3107 clarify handled cancellation exit statuses, covered by 7d885d632

area: native (1)

  • #3011 release a Spotlight not-found launch from the signed helper, covered by 4acda94b7 (only tests are left)

area: runtime (3)

  • #2839 classify malformed screenshot payloads as protocol errors, landed in bffdd9105
  • #2879 honor SIGINT/SIGTERM in browser and JS-runtime commands, covered by f6905719c (only tests are left)
  • #2893 report cancellation after cleanup and source-map abort, covered by ad9e22d05 (only tests are left)

area: tests (2)

  • #2314 exercise ASAR header admission boundaries, landed in ec271121e
  • #2801 grade Notes export facts and track fixture changes, landed in 80de3145e

Round 3 (1). Main covers it in its own way.

  • #3071 fix type errors in four tests and the Android result schema, covered by 6e25cc3c7 and ec271121e (casts in JadxAnalysis.ts and a moved function are left; a collaborator says main needs neither)

Taken off (1). #2868: its author showed main still lacks its class comment fix and two tests. Thanks, CodesWithRobi.

Issues. All 18 issues listed here before are now closed.

I left out issues that are only partly done. I also left out two where the fix was not tested on the real tool yet. If one of these is wrong, please say so and I will take it off.

How I checked, round 2 (main at fffb07419)

I scored every open pull request that is not a draft. For each one, I counted how many added lines are already in the same file on main. Then I read the pull request, its comments and the main commits. Where main made the change its own way, I compared the code and the tests. I only read code. I did not build or run anything. Pull requests with code still to merge are left out. So are test-only pull requests, because their tests are not on main. Four listed ones have only tests or a comment left, and their line says so. Main was at fffb07419 on 2026-10-14.
If a pull request is listed by mistake, please say so. I will fix the list.

How I checked, round 3 (main at d69acc345)

I scored 101 open pull requests that are not drafts. Some were new. Some had new commits. The rest scored 30% or more last round. For each one, I counted how many added lines are already in the same file on main. Then I read the best matches, their comments and the main commits. Where main made the change its own way, I compared the code and the tests. I only read code. I did not build or run anything. Pull requests with code still to merge are left out. A share can be misleading. One Greek translation shares many lines. Those lines are English text. It is left out. Main was at d69acc345 on 2026-10-14.
If a pull request is listed by mistake, please say so. I will fix the list.

🤖 Generated with Claude Code (Sonnet 5.5, verified by Opus 5.5) 🦊

<!-- gh-comment-id:6174286213 --> @CassieFox23 commented on GitHub (Oct 14, 2026): More for this tracker. Each one was open when it was added. Ones that closed are in [the closed list](https://github.com/morluto/rea/issues/3582#issuecomment-6179499522). **Pull requests main covers in its own way (1).** Main wrote the change differently, but it does what the pull request does. I compared the code and the tests. - [ ] #2919 fix(mips)!: refuse uninspected GNU ABI attributes, covered by d4bd65c53 **Round 2 (8).** **Landed** means at least half of the pull request's added lines are on main, or nothing is left to merge. **Covered** means main made the same change in its own way. **area: build (1)** - [ ] #2731 retain build info in later ELF data segments, landed in 55dd21a5e (one tool description sentence is left) **area: cli (1)** - [ ] #3107 clarify handled cancellation exit statuses, covered by 7d885d632 **area: native (1)** - [ ] #3011 release a Spotlight not-found launch from the signed helper, covered by 4acda94b7 (only tests are left) **area: runtime (3)** - [ ] #2839 classify malformed screenshot payloads as protocol errors, landed in bffdd9105 - [ ] #2879 honor SIGINT/SIGTERM in browser and JS-runtime commands, covered by f6905719c (only tests are left) - [ ] #2893 report cancellation after cleanup and source-map abort, covered by ad9e22d05 (only tests are left) **area: tests (2)** - [ ] #2314 exercise ASAR header admission boundaries, landed in ec271121e - [ ] #2801 grade Notes export facts and track fixture changes, landed in 80de3145e **Round 3 (1).** Main covers it in its own way. - [ ] #3071 fix type errors in four tests and the Android result schema, covered by 6e25cc3c7 and ec271121e (casts in JadxAnalysis.ts and a moved function are left; a collaborator says main needs neither) **Taken off (1).** #2868: its author showed main still lacks its class comment fix and two tests. Thanks, CodesWithRobi. **Issues.** All 18 issues listed here before are now closed. I left out issues that are only partly done. I also left out two where the fix was not tested on the real tool yet. If one of these is wrong, please say so and I will take it off. <details> <summary>How I checked, round 2 (main at fffb07419)</summary> I scored every open pull request that is not a draft. For each one, I counted how many added lines are already in the same file on main. Then I read the pull request, its comments and the main commits. Where main made the change its own way, I compared the code and the tests. I only read code. I did not build or run anything. Pull requests with code still to merge are left out. So are test-only pull requests, because their tests are not on main. Four listed ones have only tests or a comment left, and their line says so. Main was at fffb07419 on 2026-10-14. If a pull request is listed by mistake, please say so. I will fix the list. </details> <details> <summary>How I checked, round 3 (main at d69acc345)</summary> I scored 101 open pull requests that are not drafts. Some were new. Some had new commits. The rest scored 30% or more last round. For each one, I counted how many added lines are already in the same file on main. Then I read the best matches, their comments and the main commits. Where main made the change its own way, I compared the code and the tests. I only read code. I did not build or run anything. Pull requests with code still to merge are left out. A share can be misleading. One Greek translation shares many lines. Those lines are English text. It is left out. Main was at d69acc345 on 2026-10-14. If a pull request is listed by mistake, please say so. I will fix the list. </details> 🤖 Generated with Claude Code (Sonnet 5.5, verified by Opus 5.5) 🦊
Author
Owner

@CassieFox23 commented on GitHub (Oct 14, 2026):

Closed since these lists went up (49). Each one was open when it was listed on this tracker. They are kept here as a record, ticked.

Pull requests (31)

  • #2637 compare concurrent scenario network events by their request step, not, landed in f6905719c
  • #2642 report present non-JavaScript require targets as unavailable, landed in b58adafa4
  • #2696 name the instruction when a truncated CIL body ends, covered by 97268f40e (#2704); its author says #2704 supersedes it
  • #2769 validate registration overrides with runtime semantics, landed in ec56c1da0
  • #2828 cover Swift decoder rejection and capacity branches, landed in d4bd65c53 (closed without a merge: its branch had no changes left)
  • #2836 refuse unreadable navigation selections before success, landed in 80de3145e
  • #2851 route OpenAI model fixture requests by pathname, landed in 4d4631ac9
  • #2867 bound language definition reads before allocation, landed in d4bd65c53 (later test-only push)
  • #2880 stop legacy string paging against fake-paginated upstream, landed in d4bd65c53
  • #2881 classify member assignment targets as property writes, landed in 04672f2b9
  • #2896 classify configured multi-segment generated paths, landed in ec271121e
  • #2928 fix(process): count one unreadable child once during cleanup, covered by 599a8ee11
  • #2929 attribute a different trace verdict to its failing dimensions, landed in 599a8ee11
  • #2931 fix(process): retain withheld-process observations on cleanu, covered by 599a8ee11
  • #2940 report inline HTML scripts that analysis skips, landed in b58adafa4
  • #2945 tell callers to reopen after the provider exits, landed in d4bd65c53
  • #2965 reuse capture-local text normalization matchers, landed in 599a8ee11
  • #2968 fix(javascript): omit dynamic key names from structural fing, covered by b58adafa4
  • #2970 preflight OpenStep plist value nesting, landed in 55dd21a5e
  • #2979 validate empty version requests and unreported installed versions, landed in ec56c1da0
  • #2998 fix(adb): read window focus from the displays section on And, covered by d4bd65c53
  • #3077 report adb, apktool, and jeb readiness, covered by e5deb832c and a8887a9a8
  • #3078 retain directive literals in semantic function fingerprints, landed in 639685195
  • #3264 align retained cleanup fixture with emitted stdout, covered by 1341e8c83
  • #3265 classify cancellation during file admission, landed in 2daeff4b2
  • #3271 classify malformed adb --extra as invalid input, covered by 45d5e8014
  • #3278 report missing ASAR companions as unavailable, covered by 7e5cffa2a and 322506d0c
  • #3298 fix(javascript): honor node-ID seed matching options, covered by 44c9d2924
  • #3319 ignore untrusted workspace settings, landed in aade9bbcb
  • #3409 rename the Cutter command JSON option, covered by 45d5e8014 (main chose the name --json-output)
  • #3412 correct signature attach guidance, covered by 57a23f0a2

Issues (18)

  • #1783 [Bug] Ghidra provider times out on a 1.85 MB Swift/ObjC arm6, fixed in 9878bb729
  • #3172 [Bug] Passive capture comparison treats missing redirect res, fixed in 2b60e097f
  • #3173 [Bug] Scenario comparison loses network-content recovery gui, fixed in 2b60e097f
  • #3189 [Bug] Node-ID feature seeds ignore substring and case-insens, fixed in 44c9d2924
  • #3190 [Bug] Route tracing matches generated endpoint labels for ab, fixed in 44c9d2924
  • #3192 [Bug] Ambiguous runtime script candidates receive false abse, fixed in 5e79d468e
  • #3196 [Bug] Electron bridge paths lose conditions from preceding e, fixed in 503109995
  • #3197 [Bug] SIGINT during target file admission reports UNKNOWN in, fixed in 2daeff4b2
  • #3199 [Bug] Managed member comparison remaps methods with unequal , fixed in 3f6b5755b
  • #3201 [Bug] Managed/native verification reports missing module ide, fixed in 3f6b5755b
  • #3202 [Bug] Zero TypeDef list starts produce contradictory member , fixed in 3f6b5755b
  • #3206 [Bug] Malformed settings in an untrusted Gemini workspace ma, fixed in aade9bbcb
  • #3208 [Bug] Unqualified doctor checks report a canonical client sk, fixed in ba33c706d
  • #3216 [Bug] Bundle comparison reports changed without an inline de, fixed in 030c47732
  • #3219 [Bug] Non-canonical Evidence bundles are reported as unreada, fixed in 3a34ad37b
  • #3238 Process capture fails when an observed file parent becomes a, fixed in e67c3642c
  • #3261 JavaScript identifier default exports lose stable callable r, fixed in dae1e5538
  • #3273 SAZ metadata accepts contradictory XML encoding declarations, fixed in 1250aaedd

🤖 Generated with Claude Code (Sonnet 5.5, verified by Opus 5.5) 🦊

<!-- gh-comment-id:6179499522 --> @CassieFox23 commented on GitHub (Oct 14, 2026): **Closed since these lists went up (49).** Each one was open when it was listed on this tracker. They are kept here as a record, ticked. **Pull requests (31)** - [x] #2637 compare concurrent scenario network events by their request step, not, landed in f6905719c - [x] #2642 report present non-JavaScript require targets as unavailable, landed in b58adafa4 - [x] #2696 name the instruction when a truncated CIL body ends, covered by 97268f40e (#2704); its author says #2704 supersedes it - [x] #2769 validate registration overrides with runtime semantics, landed in ec56c1da0 - [x] #2828 cover Swift decoder rejection and capacity branches, landed in d4bd65c53 (closed without a merge: its branch had no changes left) - [x] #2836 refuse unreadable navigation selections before success, landed in 80de3145e - [x] #2851 route OpenAI model fixture requests by pathname, landed in 4d4631ac9 - [x] #2867 bound language definition reads before allocation, landed in d4bd65c53 (later test-only push) - [x] #2880 stop legacy string paging against fake-paginated upstream, landed in d4bd65c53 - [x] #2881 classify member assignment targets as property writes, landed in 04672f2b9 - [x] #2896 classify configured multi-segment generated paths, landed in ec271121e - [x] #2928 fix(process): count one unreadable child once during cleanup, covered by 599a8ee11 - [x] #2929 attribute a different trace verdict to its failing dimensions, landed in 599a8ee11 - [x] #2931 fix(process): retain withheld-process observations on cleanu, covered by 599a8ee11 - [x] #2940 report inline HTML scripts that analysis skips, landed in b58adafa4 - [x] #2945 tell callers to reopen after the provider exits, landed in d4bd65c53 - [x] #2965 reuse capture-local text normalization matchers, landed in 599a8ee11 - [x] #2968 fix(javascript): omit dynamic key names from structural fing, covered by b58adafa4 - [x] #2970 preflight OpenStep plist value nesting, landed in 55dd21a5e - [x] #2979 validate empty version requests and unreported installed versions, landed in ec56c1da0 - [x] #2998 fix(adb): read window focus from the displays section on And, covered by d4bd65c53 - [x] #3077 report adb, apktool, and jeb readiness, covered by e5deb832c and a8887a9a8 - [x] #3078 retain directive literals in semantic function fingerprints, landed in 639685195 - [x] #3264 align retained cleanup fixture with emitted stdout, covered by 1341e8c83 - [x] #3265 classify cancellation during file admission, landed in 2daeff4b2 - [x] #3271 classify malformed adb --extra as invalid input, covered by 45d5e8014 - [x] #3278 report missing ASAR companions as unavailable, covered by 7e5cffa2a and 322506d0c - [x] #3298 fix(javascript): honor node-ID seed matching options, covered by 44c9d2924 - [x] #3319 ignore untrusted workspace settings, landed in aade9bbcb - [x] #3409 rename the Cutter command JSON option, covered by 45d5e8014 (main chose the name --json-output) - [x] #3412 correct signature attach guidance, covered by 57a23f0a2 **Issues (18)** - [x] #1783 [Bug] Ghidra provider times out on a 1.85 MB Swift/ObjC arm6, fixed in 9878bb729 - [x] #3172 [Bug] Passive capture comparison treats missing redirect res, fixed in 2b60e097f - [x] #3173 [Bug] Scenario comparison loses network-content recovery gui, fixed in 2b60e097f - [x] #3189 [Bug] Node-ID feature seeds ignore substring and case-insens, fixed in 44c9d2924 - [x] #3190 [Bug] Route tracing matches generated endpoint labels for ab, fixed in 44c9d2924 - [x] #3192 [Bug] Ambiguous runtime script candidates receive false abse, fixed in 5e79d468e - [x] #3196 [Bug] Electron bridge paths lose conditions from preceding e, fixed in 503109995 - [x] #3197 [Bug] SIGINT during target file admission reports UNKNOWN in, fixed in 2daeff4b2 - [x] #3199 [Bug] Managed member comparison remaps methods with unequal , fixed in 3f6b5755b - [x] #3201 [Bug] Managed/native verification reports missing module ide, fixed in 3f6b5755b - [x] #3202 [Bug] Zero TypeDef list starts produce contradictory member , fixed in 3f6b5755b - [x] #3206 [Bug] Malformed settings in an untrusted Gemini workspace ma, fixed in aade9bbcb - [x] #3208 [Bug] Unqualified doctor checks report a canonical client sk, fixed in ba33c706d - [x] #3216 [Bug] Bundle comparison reports changed without an inline de, fixed in 030c47732 - [x] #3219 [Bug] Non-canonical Evidence bundles are reported as unreada, fixed in 3a34ad37b - [x] #3238 Process capture fails when an observed file parent becomes a, fixed in e67c3642c - [x] #3261 JavaScript identifier default exports lose stable callable r, fixed in dae1e5538 - [x] #3273 SAZ metadata accepts contradictory XML encoding declarations, fixed in 1250aaedd 🤖 Generated with Claude Code (Sonnet 5.5, verified by Opus 5.5) 🦊
bsakaguchi changed title from [GH-ISSUE #3582] [Tracker] Open pull requests whose fix already landed on main (October 2026) to [GH-ISSUE #3582] [Tracker] Ready to close or merge: issues and pull requests (October 2026) 2026-10-31 00:30:37 +00:00
Author
Owner

@morluto commented on GitHub (Oct 18, 2026):

Reconciled the current PR heads against main. Closed #2108, #2695, #2864, #2875 and #3035 with landed-commit explanations; checked those entries above.

Keeping this tracker open: #2872 still carries a Qlog numeric-redaction change, and #2961 retains additional retention/handshake changes. A merged original fix or a high added-line match is insufficient to discard those residual contributions. Their remaining Actions checks are included in this pass.

The same pass closed 49 fixed/duplicate/completed issues and 27 superseded PRs, each with its own source/verification explanation. No new local tests or provider reproduction were run for these closures.

Actions follow-up

  • Approved 760 waiting Actions runs, using current PR heads; retried 83 failed/cancelled runs once. Requested cancellation of three now-obsolete queued runs on subsequently closed PRs.
  • At the maintainer's explicit request, re-enabled the manually disabled PR readiness workflow and dispatched 522 outstanding checks. Existing successful checks at the same head were retained. Human declarations were not filled or changed.
  • Requested full qualification for 19 PRs with no CI; all still have base-branch conflicts and no qualification run. Each received an explanation requesting conflict resolution.
  • These requests are queued/running checks, not a claim that CI or author readiness passes.
  • Reverified all 49 issue closures and 27 unmerged superseded-PR closures through GitHub. The 6.7 MCP Registry blocker #4998 is also resolved: original qualified publication run now succeeds and public metadata matches the immutable release tag.
<!-- gh-comment-id:6256053454 --> @morluto commented on GitHub (Oct 18, 2026): <!-- rea-backlog-reconciliation-2026-10-19-tracker --> Reconciled the current PR heads against main. Closed #2108, #2695, #2864, #2875 and #3035 with landed-commit explanations; checked those entries above. Keeping this tracker open: #2872 still carries a Qlog numeric-redaction change, and #2961 retains additional retention/handshake changes. A merged original fix or a high added-line match is insufficient to discard those residual contributions. Their remaining Actions checks are included in this pass. The same pass closed 49 fixed/duplicate/completed issues and 27 superseded PRs, each with its own source/verification explanation. No new local tests or provider reproduction were run for these closures. <!-- rea-backlog-actions-final-2026-10-19 --> ### Actions follow-up - Approved 760 waiting Actions runs, using current PR heads; retried 83 failed/cancelled runs once. Requested cancellation of three now-obsolete queued runs on subsequently closed PRs. - At the maintainer's explicit request, re-enabled the manually disabled PR readiness workflow and dispatched 522 outstanding checks. Existing successful checks at the same head were retained. Human declarations were not filled or changed. - Requested full qualification for 19 PRs with no CI; all still have base-branch conflicts and no qualification run. Each received an explanation requesting conflict resolution. - These requests are queued/running checks, not a claim that CI or author readiness passes. - Reverified all 49 issue closures and 27 unmerged superseded-PR closures through GitHub. The 6.7 MCP Registry blocker #4998 is also resolved: original qualified publication run now succeeds and public metadata matches the immutable release tag.
Author
Owner

@CassieFox23 commented on GitHub (Oct 18, 2026):

Edit: I retested both. #2872's leftover change is a refactor, and main already redacts the same way (results). The code from #2961 is all on main, and only a docs note is left (results).

Thanks for the big cleanup, morluto. I updated my lists here to match it.

Your note says no local tests ran for these closures. Six of them now have a record. Each one passes on main 559af3d3f:

🤖 Generated with Claude Code (Opus 5.5) 🦊

<!-- gh-comment-id:6256731804 --> @CassieFox23 commented on GitHub (Oct 18, 2026): **Edit:** I retested both. #2872's leftover change is a refactor, and main already redacts the same way ([results](https://github.com/morluto/rea/pull/2872#issuecomment-6256985935)). The code from #2961 is all on main, and only a docs note is left ([results](https://github.com/morluto/rea/pull/2961#issuecomment-6256989655)). Thanks for the big cleanup, morluto. I updated my lists here to match it. Your note says no local tests ran for these closures. Six of them now have a record. Each one passes on main 559af3d3f: - [#3426](https://github.com/morluto/rea/pull/3426#issuecomment-6254045787) - [#3462](https://github.com/morluto/rea/pull/3462#issuecomment-6256681462) - [#3504](https://github.com/morluto/rea/pull/3504#issuecomment-6256684436) - [#3505](https://github.com/morluto/rea/pull/3505#issuecomment-6256687292) - [#3627](https://github.com/morluto/rea/pull/3627#issuecomment-6256690235) - [#3830](https://github.com/morluto/rea/pull/3830#issuecomment-6256693004) 🤖 Generated with Claude Code (Opus 5.5) 🦊
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
morluto/rea#1330
No description provided.