Issues

• Appliance rootfs Trivy gate red: golang.org/x/net CVE-2026-78661 in cosign and Compose binaries

  needs-triage
  p2pool-starter-stack/pithead#3931 · Filter by author pithead-developer opened on Nov 7, 2026

• Trivy gate red on tor image: musl-utils CVE-2026-107891 (HIGH, fixed upstream)

  p2pool-starter-stack/pithead#3929 · Filter by author pithead-developer opened on Nov 7, 2026

• Trivy gate red on every image: apt CVE-2026-109518 (HIGH, fixed upstream)

  p2pool-starter-stack/pithead#3923 · Filter by author pithead-developer opened on Nov 6, 2026 · maintenance & gates
  3

• Revision drift falsely reports a hand-edit when a RigForge upgrade re-bases config_meta.revision

  blockedbugneeds-triage
  p2pool-starter-stack/pithead#3915 · Filter by author pithead-developer opened on Nov 3, 2026
  1

• Lifecycle phase fails 'reset recovery applies its synthetic fixture' on develop-v2.1.0

  blocked
  p2pool-starter-stack/pithead#3913 · Filter by author pithead-developer opened on Nov 3, 2026
  5

• KVM: add a real-appliance upgrade scenario to the release battery and rerun it on the exact published SHA

  appliancetesting
  p2pool-starter-stack/pithead#3911 · Filter by author pithead-developer opened on Nov 2, 2026 · maintenance & gates
  2

• A rolled-back update leaves config.json stamped by the newer version, so the old version blocks saving

  appliancebug
  p2pool-starter-stack/pithead#3910 · Filter by author pithead-developer opened on Nov 2, 2026 · v2.0.3
  1

• Dashboard asks for a second reboot while the new slot is verifying, which rolls back a healthy update

  applianceblockedbug
  p2pool-starter-stack/pithead#3909 · Filter by author pithead-developer opened on Nov 2, 2026 · v2.0.3
  1

• Define the complete Pithead behavior-to-gate proof manifest

  enhancement
  p2pool-starter-stack/pithead#3891 · Filter by author pithead-developer opened on Nov 2, 2026 · maintenance & gates
  4

• Replace measured appliance startup sleeps with observable readiness

  enhancement
  p2pool-starter-stack/pithead#3890 · Filter by author pithead-developer opened on Nov 2, 2026 · maintenance & gates
  3

• Balance Shell shards behind a required complete-result aggregate

  enhancement
  p2pool-starter-stack/pithead#3889 · Filter by author pithead-developer opened on Nov 2, 2026 · maintenance & gates
  3

• Reuse verified CI inputs while regenerating exact-source outputs

  enhancement
  p2pool-starter-stack/pithead#3888 · Filter by author pithead-developer opened on Nov 2, 2026 · maintenance & gates
  3

• Document and verify the complete concurrent release phase join

  enhancement
  p2pool-starter-stack/pithead#3887 · Filter by author pithead-developer opened on Nov 2, 2026 · maintenance & gates
  3

• Preflight lifecycle fixtures and fix a reproduced integration failure

  enhancement
  p2pool-starter-stack/pithead#3886 · Filter by author pithead-developer opened on Nov 2, 2026 · maintenance & gates
  4

• Data recovery can authorize a reformat when temporary directory allocation fails

  bug
  p2pool-starter-stack/pithead#3885 · Filter by author pithead-developer opened on Nov 2, 2026 · v2.0.3
  3

• Apply can publish a stale payout wallet after waiting for the mutation lock

  blockedbug
  p2pool-starter-stack/pithead#3884 · Filter by author pithead-developer opened on Nov 2, 2026 · v2.0.3
  4

• Retrying an interrupted wallet apply can succeed without updating mining services

  blockedbug
  p2pool-starter-stack/pithead#3883 · Filter by author pithead-developer opened on Nov 2, 2026 · v2.0.3
  4

• Anonymous wizard status returns detailed setup failure context

  bugsecurity
  p2pool-starter-stack/pithead#3881 · Filter by author pithead-developer opened on Nov 2, 2026 · v2.0.3
  3

• Setup logs the plaintext stratum credential to the persistent journal

  blockedbugsecurity
  p2pool-starter-stack/pithead#3880 · Filter by author pithead-developer opened on Nov 2, 2026 · v2.0.3
  4

• Five unauthenticated failures can terminate the shared setup wizard

  blockedbugsecurity
  p2pool-starter-stack/pithead#3879 · Filter by author pithead-developer opened on Nov 2, 2026 · v2.0.3
  4

• OS update activates the candidate before persisting migration protection

  blockedbug
  p2pool-starter-stack/pithead#3878 · Filter by author pithead-developer opened on Nov 2, 2026 · v2.0.3
  4

• Backup can omit the live database after an unapplied data path edit

  blockedbug
  p2pool-starter-stack/pithead#3877 · Filter by author pithead-developer opened on Nov 2, 2026 · v2.0.3
  4

• Restore can replay a stale destination WAL over the archived database

  bug
  p2pool-starter-stack/pithead#3876 · Filter by author pithead-developer opened on Nov 2, 2026 · v2.0.3
  3

• Canceling a wallet apply still replaces the live Tari secret sidecar

  blockedbug
  p2pool-starter-stack/pithead#3875 · Filter by author pithead-developer opened on Nov 2, 2026 · v2.0.3
  4

• Payout history and scan cursors mix receipts from different wallet identities

  blockedbug
  p2pool-starter-stack/pithead#3874 · Filter by author pithead-developer opened on Nov 2, 2026 · v2.0.3
  4