Issues

• nbd-client: boot Pin/Get do not wait out oracle Unavailable (asymmetry with #116 runtime path)

  EnclaviaIO/enclavia#118 · Filter by author portal-wheatley opened on Sep 4, 2026

• chain: no downgrade protection — an upgrade to an old image is indistinguishable from an upgrade

  EnclaviaIO/enclavia#111 · Filter by author portal-wheatley opened on Aug 12, 2026

• secrets-init: authenticate and encrypt the per-enclave secrets payload to the enclave's attestation

  EnclaviaIO/enclavia#110 · Filter by author portal-wheatley opened on Aug 12, 2026

• egress: hostname allowlist is only as strong as cleartext DNS transiting the host

  EnclaviaIO/enclavia#109 · Filter by author portal-wheatley opened on Aug 12, 2026

• builder: pin the LUKS data offset (or full LUKS2 header digest) into the measured enclave config

  EnclaviaIO/enclavia#108 · Filter by author portal-wheatley opened on Aug 12, 2026

• Real-vs-mock KMS transport is chosen by an env var with a plaintext (mock) default

  EnclaviaIO/enclavia#100 · Filter by author prusnak opened on Aug 7, 2026
  2

• Anti-rollback protection is opt-in and fails open when SYNCHRONIZER_ENABLED is unset

  EnclaviaIO/enclavia#99 · Filter by author prusnak opened on Aug 7, 2026
  1

• Signed responses: verify hosted-proxy responses end-to-end with an in-enclave signing key + attestation

  EnclaviaIO/enclavia#58 · Filter by author portal-wheatley opened on Jul 1, 2026

• client SDK: box tungstenite::Error so Error fits under result_large_err

  EnclaviaIO/enclavia#9 · Filter by author portal-wheatley opened on May 19, 2026

• Epic: Language bindings for the client (Python, Java via uniffi; JS/WASM via wasm-bindgen)

  enhancement
  EnclaviaIO/enclavia#7 · Filter by author portal-wheatley opened on May 19, 2026
  1

• Wire UDP support into enclavia-egress (currently TCP-only)

  EnclaviaIO/enclavia#1 · Filter by author portal-wheatley opened on May 18, 2026