crenshawdev/cadence-archived

v3.5.3

New issue

The review path gets honest bounds and real validation. One validator and one transport cap in review-provider.mjs, plus the reviewer-arm bound asymmetry: the cross-model arm is bounded by the host Bash timeout, the default claude-subagent arm by nothing.

-

100% Completed

risk-check status proves the detector ran, never that the blocking fire happened

external-review

#205 by john was closed 2026-08-18 09:37:46 +00:00

The parallel execute path runs no risk check, no risk_surface fire and no status call

external-review

#204 by john was closed 2026-08-18 09:37:46 +00:00

Recall goes blind at every milestone close: the corpus reads only live phase dirs

#203 by john was closed 2026-08-18 09:37:46 +00:00

Prose surfaces are budgeted to the byte; the live context window is budgeted by nothing

#202 by john was closed 2026-08-18 09:37:45 +00:00

max_plan_tasks was set against context risk alone, never against cold-prefix cost

#201 by john was closed 2026-08-18 00:23:34 +00:00

TRN-01 in the other direction: bulk tool output has no file transport and no register

#200 by john was closed 2026-08-18 09:37:45 +00:00

trace close discards the tool-call count, which is the actual cost multiplier

#199 by john was closed 2026-08-18 09:37:45 +00:00

The trace does not price a run: join burnrate instead of rebuilding token accounting

#198 by john was closed 2026-08-18 00:23:34 +00:00

Workflow branches on a timeout the dispatch seam cannot produce, and the default reviewer is the only unbounded arm

external-review

#168 by john was closed 2026-08-18 09:37:44 +00:00

Provider response body is accumulated unbounded

external-review

#143 by john was closed 2026-08-18 09:37:44 +00:00

validateFindings accepts line <= 0, empty strings and unknown keys

external-review

#141 by john was closed 2026-08-18 09:37:44 +00:00