Issues

• hard: add key versioning and an online rotation path for the contact-vault encryption key (CONTACT_VAULT_KEY)

  enhancementhardsecurity
  scout-off/scout-off-frontend#1472 · Filter by author Petah1 opened on Oct 16, 2026
  2

• hard: Next.js API off-chain stores are per-instance SQLite files, which lose or fork data on serverless deployments

  bugconfighardrefactor
  scout-off/scout-off-frontend#1471 · Filter by author Petah1 opened on Oct 16, 2026
  2

• hard: make SSE Last-Event-ID replay cursor-exact instead of filtering the 200 newest events by the first topic only

  bughardindexer
  scout-off/scout-off-frontend#1470 · Filter by author Petah1 opened on Oct 16, 2026
  2

• hard: fan out live SSE events across indexer replicas with Postgres LISTEN/NOTIFY

  enhancementhardindexerperf
  scout-off/scout-off-frontend#1469 · Filter by author Petah1 opened on Oct 16, 2026
  1

• hard: in Postgres replica mode the indexer serves /stream and /players from an empty local SQLite store

  bughardindexer
  scout-off/scout-off-frontend#1468 · Filter by author Petah1 opened on Oct 16, 2026
  1

• hard: refresh-token rotation has no reuse detection or absolute lifetime, so a stolen refresh cookie can extend a session forever

  authhardsecurity
  scout-off/scout-off-frontend#1292 · Filter by author Petah1 opened on Sep 23, 2026
  5

• hard: the messaging UI (ChatThread, ReportBlockControls) is built but never mounted, so users have no route to messages

  feathardmessagingux
  scout-off/scout-off-frontend#1291 · Filter by author Petah1 opened on Sep 23, 2026
  1

• hard: implement the chat and moderation backend (/threads, /moderation/blocks, /moderation/reports) that lib/messaging expects

  feathardmessagingsecurity
  scout-off/scout-off-frontend#1290 · Filter by author Petah1 opened on Sep 23, 2026
  1

• hard: build the backend search endpoint behind /api/players/search, which currently proxies to a route that doesn't exist

  bugfeathardperfscout
  scout-off/scout-off-frontend#1289 · Filter by author Petah1 opened on Sep 23, 2026
  1

• hard: implement the backend scout endpoints (/scouts/:id, /contacts, /stats) that the scout public profile depends on

  bugfeathardscout
  scout-off/scout-off-frontend#1288 · Filter by author Petah1 opened on Sep 23, 2026
  1

• hard: implement the missing backend player endpoints that lib/api.ts already calls (/players/:id, comments, archive, backup-wallet)

  bugfeathardplayer
  scout-off/scout-off-frontend#1287 · Filter by author Petah1 opened on Sep 23, 2026
  1

• hard: the Express backend (server/) has no authentication, so any client can approve or reject milestone submissions and act as any wallet

  authbughardsecurity
  scout-off/scout-off-frontend#1286 · Filter by author Petah1 opened on Sep 23, 2026
  1

• hard: /api/admin/automated-moderation-log accepts anonymous writes and serves moderation data to anyone

  adminbughardmessagingsecurity
  scout-off/scout-off-frontend#1285 · Filter by author Petah1 opened on Sep 23, 2026
  1

• hard: /api/ipfs/superseded is unauthenticated, so anyone can schedule any player's live media for Pinata unpinning

  bughardplayersecurity
  scout-off/scout-off-frontend#1284 · Filter by author Petah1 opened on Sep 23, 2026
  2

• hard: build a unified cross-cutting alerting system for critical platform events instead of each admin surface only showing state live in-app

  adminenhancementhardsecurity
  scout-off/scout-off-frontend#1189 · Filter by author Petah1 opened on Aug 24, 2026
  3

  

• hard: design and build a validator trust/reputation score beyond a raw milestone-approval count

  enhancementhardvalidator
  scout-off/scout-off-frontend#1182 · Filter by author Petah1 opened on Aug 24, 2026
  2

  

• easy: add unit test coverage for components/SessionExpiryWarning.tsx

  easytestui
  scout-off/scout-off-frontend#1090 · Filter by author Petah1 opened on Aug 24, 2026
  5

• easy: add unit test coverage for components/ProgressBar.tsx

  easytestui
  scout-off/scout-off-frontend#1089 · Filter by author Petah1 opened on Aug 24, 2026
  1

• easy: add unit test coverage for components/A11yDevAudit.tsx

  easytestui
  scout-off/scout-off-frontend#1088 · Filter by author Petah1 opened on Aug 24, 2026
  4

• easy: add unit test coverage for lib/watchlistClient.ts

  easytest
  scout-off/scout-off-frontend#1087 · Filter by author Petah1 opened on Aug 24, 2026
  5

• easy: add unit test coverage for lib/savedSearchClient.ts

  easytest
  scout-off/scout-off-frontend#1086 · Filter by author Petah1 opened on Aug 24, 2026
  4

• easy: add unit test coverage for lib/adminAuth.ts

  easytest
  scout-off/scout-off-frontend#1074 · Filter by author Petah1 opened on Aug 24, 2026
  1

• easy: add unit test coverage for lib/adminAudit.ts

  easytest
  scout-off/scout-off-frontend#1073 · Filter by author Petah1 opened on Aug 24, 2026
  2

• easy: add unit test coverage for lib/adminAuditClient.ts

  easytest
  scout-off/scout-off-frontend#1072 · Filter by author Petah1 opened on Aug 24, 2026
  1

• easy: add unit test coverage for hooks/useValidatorPendingQueue.ts

  easyhookstest
  scout-off/scout-off-frontend#1071 · Filter by author Petah1 opened on Aug 24, 2026
  1