Issues

Allow the locked tiny-keccak CC0 license in the workspace dependency policy

daxis-io/arco#432 · opened

on Sep 13, 2026

Bound Unity Catalog Delta history scans on read, commit, and backfill paths

daxis-io/arco#427 · opened

on Sep 12, 2026

1

Authorize Unity Catalog Delta reads and mutations with table privileges

daxis-io/arco#426 · opened

on Sep 12, 2026

1

Make pinned state-store backend and model pass API Clippy policy

daxis-io/arco#425 · opened

on Sep 11, 2026

2

Add Arco-owned managed Delta allocation API with approved analytical root and stable provisioning fingerprint

daxis-io/arco#424 · opened

on Sep 11, 2026

7

Python worker never sends heartbeats, so anti-entropy force-fails every task running longer than ~330s

daxis-io/arco#367 · opened

on Jul 30, 2026

Gate 5 sole-writer IAM invariant is covered only by #[ignore]d, feature-gated tests behind a CI step that silent...

daxis-io/arco#366 · opened

on Jul 30, 2026

python/arco/tests/integration/test_e2e.py is never executed by any CI workflow

daxis-io/arco#365 · opened

on Jul 30, 2026

Terraform auto-enables ARCO_DEBUG on the deployed dev service, turning off all token auth in favor of client-sup...

daxis-io/arco#364 · opened

on Jul 30, 2026

Task-token HS256 signing secret injected as plaintext Cloud Run env var, with a live dev value committed to the ...

daxis-io/arco#363 · opened

on Jul 30, 2026

No production component ever publishes the metastore storage-governance projection, so credential vending can on...

daxis-io/arco#362 · opened

on Jul 30, 2026

2

Delta commit coordination splits _delta_log across two roots: UC facade uses legacy `tables/{id}` while arco-api...

daxis-io/arco#361 · opened

on Jul 30, 2026

8

Stale-marker takeover can cache a 409 Failed idempotency marker for a commit that actually landed

daxis-io/arco#360 · opened

on Jul 30, 2026

Client-supplied Iceberg table location is never constrained to the tenant/workspace prefix and is echoed back as...

daxis-io/arco#358 · opened

on Jul 30, 2026

Repair automation defaults to destructive enforce/Full mode with no environment variable set

daxis-io/arco#357 · opened

on Jul 30, 2026

1

Signed-URL minting hands out raw commits.parquet, defeating the system.catalog.commits private-column projection

daxis-io/arco#354 · opened

on Jul 30, 2026

Root transaction lock is written to the unscoped backend, serializing every tenant's root commits on one bucket-...

daxis-io/arco#353 · opened

on Jul 30, 2026

Root child idempotency keys are string-concatenated into the same namespace as caller-supplied Idempotency-Key h...

daxis-io/arco#352 · opened

on Jul 30, 2026

Orchestration repair path accepts a mismatched request body and silently discards the new request's events while...

daxis-io/arco#351 · opened

on Jul 30, 2026

Sweeper redispatch generates a fresh Cloud Task name per invocation, defeating dedup and running the same attemp...

daxis-io/arco#346 · opened

on Jul 30, 2026

L0 deltas carry no tombstones, so every row deletion performed during a fold is silently undone on the next stat...

daxis-io/arco#345 · opened

on Jul 30, 2026

create_namespace / register_table idempotency never reserves the entity, so a successful create is permanently c...

daxis-io/arco#342 · opened

on Jul 30, 2026

No retention for terminal runs and tasks: every compaction loads and rewrites all-time orchestration state (reopens #255)

daxis-io/arco#341 · opened

on Jul 30, 2026

get_run_logs concatenates every log object for a run into one in-memory String with no size, count, or pagination bound

daxis-io/arco#340 · opened

on Jul 30, 2026

Partition key never reaches the worker: partitioned tasks execute unpartitioned while the catalog records the partition as materialized

daxis-io/arco#339 · opened

on Jul 30, 2026

Navigation Menu

Repository navigation

Issues

Allow the locked tiny-keccak CC0 license in the workspace dependency policy

Bound Unity Catalog Delta history scans on read, commit, and backfill paths

Authorize Unity Catalog Delta reads and mutations with table privileges

Make pinned state-store backend and model pass API Clippy policy

Add Arco-owned managed Delta allocation API with approved analytical root and stable provisioning fingerprint

Python worker never sends heartbeats, so anti-entropy force-fails every task running longer than ~330s

Gate 5 sole-writer IAM invariant is covered only by #[ignore]d, feature-gated tests behind a CI step that silent...

python/arco/tests/integration/test_e2e.py is never executed by any CI workflow

Terraform auto-enables ARCO_DEBUG on the deployed dev service, turning off all token auth in favor of client-sup...

Task-token HS256 signing secret injected as plaintext Cloud Run env var, with a live dev value committed to the ...

No production component ever publishes the metastore storage-governance projection, so credential vending can on...

Delta commit coordination splits _delta_log across two roots: UC facade uses legacy `tables/{id}` while arco-api...

Stale-marker takeover can cache a 409 Failed idempotency marker for a commit that actually landed

Client-supplied Iceberg table location is never constrained to the tenant/workspace prefix and is echoed back as...

Repair automation defaults to destructive enforce/Full mode with no environment variable set

Signed-URL minting hands out raw commits.parquet, defeating the system.catalog.commits private-column projection

Root transaction lock is written to the unscoped backend, serializing every tenant's root commits on one bucket-...

Root child idempotency keys are string-concatenated into the same namespace as caller-supplied Idempotency-Key h...

Orchestration repair path accepts a mismatched request body and silently discards the new request's events while...

Sweeper redispatch generates a fresh Cloud Task name per invocation, defeating dedup and running the same attemp...

L0 deltas carry no tombstones, so every row deletion performed during a fold is silently undone on the next stat...

create_namespace / register_table idempotency never reserves the entity, so a successful create is permanently c...

No retention for terminal runs and tasks: every compaction loads and rewrites all-time orchestration state (reopens #255)

get_run_logs concatenates every log object for a run into one in-memory String with no size, count, or pagination bound

Partition key never reaches the worker: partitioned tasks execute unpartitioned while the catalog records the partition as materialized