harden(security): remove dev-mode fail-open auth — fail-closed everywhere + dev-token + regression gate #2291

Merged

core-devops merged 2 commits from harden/no-fail-open-auth into main 2026-06-05 08:34:28 +00:00

Conversation 0 Commits 2 Files Changed 21

+872 -387

core-devops commented 2026-06-05 07:44:04 +00:00

Member

Copy Link

Copy Source

Summary

CTO directive: "nothing should be fail-open." This removes the dev-mode fail-open auth hatch so AdminAuth / WorkspaceAuth (and the discovery caller) always require a real credential — fail-CLOSED in every environment, dev included — fixes local dev to stay authenticated (not open), and adds a regression gate so fail-open can't return.

Fail-open call-sites removed (workspace-server)

File:func	What it used to allow
internal/middleware/wsauth_middleware.go · WorkspaceAuth	bearer-less /workspaces/:id/* request passed when MOLECULE_ENV=dev + ADMIN_TOKEN unset (isDevModeFailOpen())
internal/middleware/wsauth_middleware.go · AdminAuth (Tier-1)	bearer-less admin route passed on a fresh install (no live tokens + no ADMIN_TOKEN) — the C4 /org/import pre-empt hole
internal/middleware/wsauth_middleware.go · AdminAuth (Tier-1b)	bearer-less admin route passed once tokens existed, when MOLECULE_ENV=dev + ADMIN_TOKEN unset (isDevModeFailOpen())
internal/handlers/discovery.go · validateDiscoveryCaller	bearer-less discovery/peers request allowed when MOLECULE_ENV=dev + ADMIN_TOKEN unset (IsDevModeFailOpen())

The isDevModeFailOpen() / IsDevModeFailOpen() helper is deleted. Its two legitimately non-auth uses (rate-limit relaxation in ratelimit.go, loopback bind default in cmd/server) now key on a new NON-security isLocalDevEnv() predicate (MOLECULE_ENV only, decoupled from ADMIN_TOKEN). CanvasOrBearer's cosmetic-only behaviour (PUT /canvas/viewport) is unchanged and verified to be the only route it guards.

Result: no code path lets an admin/workspace-protected endpoint through without a real credential. HasAnyLiveTokenGlobal is still probed in AdminAuth so a datastore outage returns a structured 503 (not a silent pass).

Dev path — authenticated, not open

scripts/dev-start.sh now provisions a deterministic ADMIN_TOKEN into .env and exports the matching NEXT_PUBLIC_ADMIN_TOKEN, so the dev Canvas sends a real bearer (canvas/src/lib/api.ts already attaches it; next.config.ts matched-pair guard). Docs updated: .env.example, docs/quickstart.md, docs/architecture/overview.md.

Regression gate

internal/middleware/no_fail_open_test.go:

• TestAdminAuth_NoFailOpen_UnderOldHatchConditions + TestWorkspaceAuth_NoFailOpen_UnderOldHatchConditions — assert 401 under the EXACT old-hatch conditions (ADMIN_TOKEN unset + MOLECULE_ENV=dev/development × hasLive 0/1).
• TestNoFailOpenAuthHelperReexists — source-guard forbidding the isDevModeFailOpen(-style helper from re-appearing.

RED-against-old proof: temporarily restored the hatch branches → both gate tests + all converted fail-closed tests flipped to FAIL; reverted → all GREEN. Converted the stale fail-open assertions in wsauth_middleware_test.go, discovery_test.go, security_regression_685_686_687_688_test.go, devmode_test.go, bind_test.go.

Other fail-open patterns audited

• CanvasOrBearer (no-token lazy-bootstrap + fail-open-on-DB-error) — retained: cosmetic route only (PUT /canvas/viewport), zero data/security impact. Flagged for follow-up.
• validateDiscoveryCaller fail-open-on-DB-error — retained: documented availability tradeoff on a low-sensitivity endpoint already gated by CanCommunicate. Flagged for follow-up.

Verify

• go build ./... ✓
• go vet ./internal/middleware/ ./cmd/server/ ./internal/handlers/ ✓
• full module go test ./... → 46 ok / 0 FAIL

Scope

Untouched per the #2286 boundary: .gitea/workflows/e2e-api.yml, tests/e2e/*.sh. NOTE: the advisory-only tests/e2e/test_dev_mode.sh still asserts the old fail-open behaviour — it lives under the #2286-owned tests/e2e/*.sh path and needs a follow-up there.

Do NOT merge — for review.

🤖 Generated with Claude Code

## Summary CTO directive: **"nothing should be fail-open."** This removes the dev-mode fail-open auth hatch so `AdminAuth` / `WorkspaceAuth` (and the discovery caller) **always require a real credential — fail-CLOSED in every environment, dev included** — fixes local dev to stay **authenticated** (not open), and adds a regression gate so fail-open can't return. ## Fail-open call-sites removed (`workspace-server`) | File:func | What it used to allow | |---|---| | `internal/middleware/wsauth_middleware.go` · `WorkspaceAuth` | bearer-less `/workspaces/:id/*` request passed when `MOLECULE_ENV=dev` + `ADMIN_TOKEN` unset (`isDevModeFailOpen()`) | | `internal/middleware/wsauth_middleware.go` · `AdminAuth` (Tier-1) | bearer-less admin route passed on a fresh install (no live tokens + no `ADMIN_TOKEN`) — the C4 `/org/import` pre-empt hole | | `internal/middleware/wsauth_middleware.go` · `AdminAuth` (Tier-1b) | bearer-less admin route passed once tokens existed, when `MOLECULE_ENV=dev` + `ADMIN_TOKEN` unset (`isDevModeFailOpen()`) | | `internal/handlers/discovery.go` · `validateDiscoveryCaller` | bearer-less discovery/peers request allowed when `MOLECULE_ENV=dev` + `ADMIN_TOKEN` unset (`IsDevModeFailOpen()`) | The `isDevModeFailOpen()` / `IsDevModeFailOpen()` helper is **deleted**. Its two legitimately *non-auth* uses (rate-limit relaxation in `ratelimit.go`, loopback bind default in `cmd/server`) now key on a new **NON-security** `isLocalDevEnv()` predicate (`MOLECULE_ENV` only, decoupled from `ADMIN_TOKEN`). `CanvasOrBearer`'s cosmetic-only behaviour (`PUT /canvas/viewport`) is unchanged and verified to be the *only* route it guards. Result: **no code path lets an admin/workspace-protected endpoint through without a real credential.** `HasAnyLiveTokenGlobal` is still probed in `AdminAuth` so a datastore outage returns a structured 503 (not a silent pass). ## Dev path — authenticated, not open `scripts/dev-start.sh` now provisions a deterministic `ADMIN_TOKEN` into `.env` and exports the matching `NEXT_PUBLIC_ADMIN_TOKEN`, so the dev Canvas sends a real bearer (`canvas/src/lib/api.ts` already attaches it; `next.config.ts` matched-pair guard). Docs updated: `.env.example`, `docs/quickstart.md`, `docs/architecture/overview.md`. ## Regression gate `internal/middleware/no_fail_open_test.go`: - `TestAdminAuth_NoFailOpen_UnderOldHatchConditions` + `TestWorkspaceAuth_NoFailOpen_UnderOldHatchConditions` — assert 401 under the EXACT old-hatch conditions (`ADMIN_TOKEN` unset + `MOLECULE_ENV=dev/development` × hasLive 0/1). - `TestNoFailOpenAuthHelperReexists` — source-guard forbidding the `isDevModeFailOpen(`-style helper from re-appearing. **RED-against-old proof:** temporarily restored the hatch branches → both gate tests + all converted fail-closed tests flipped to FAIL; reverted → all GREEN. Converted the stale fail-open assertions in `wsauth_middleware_test.go`, `discovery_test.go`, `security_regression_685_686_687_688_test.go`, `devmode_test.go`, `bind_test.go`. ## Other fail-open patterns audited - `CanvasOrBearer` (no-token lazy-bootstrap + fail-open-on-DB-error) — **retained**: cosmetic route only (`PUT /canvas/viewport`), zero data/security impact. Flagged for follow-up. - `validateDiscoveryCaller` fail-open-on-DB-error — **retained**: documented availability tradeoff on a low-sensitivity endpoint already gated by `CanCommunicate`. Flagged for follow-up. ## Verify - `go build ./...` ✓ - `go vet ./internal/middleware/ ./cmd/server/ ./internal/handlers/` ✓ - full module `go test ./...` → **46 ok / 0 FAIL** ## Scope Untouched per the #2286 boundary: `.gitea/workflows/e2e-api.yml`, `tests/e2e/*.sh`. NOTE: the advisory-only `tests/e2e/test_dev_mode.sh` still asserts the old fail-open behaviour — it lives under the #2286-owned `tests/e2e/*.sh` path and needs a follow-up there. Do NOT merge — for review. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

core-devops referenced this issue from a commit 2026-06-05 08:18:23 +00:00

harden(security): eliminate the two RETAINED fail-open paths (CanvasOrBearer + discovery)

core-devops added 2 commits 2026-06-05 08:18:23 +00:00

harden(security): remove dev-mode fail-open auth — fail-closed everywhere + dev-token + regression gate ... 3747fe2f49

CTO directive: "nothing should be fail-open." Remove the dev-mode fail-open
auth hatch so AdminAuth/WorkspaceAuth (and the discovery caller) ALWAYS
require a real credential — fail-CLOSED in every environment, dev included —
fix local dev to stay AUTHENTICATED (not open), and add a regression gate so
fail-open cannot return.

Removed fail-open call-sites (workspace-server):
- internal/middleware/wsauth_middleware.go WorkspaceAuth — deleted the
  isDevModeFailOpen() short-circuit that let a bearer-less /workspaces/:id/*
  request through when MOLECULE_ENV=dev + ADMIN_TOKEN unset.
- internal/middleware/wsauth_middleware.go AdminAuth — deleted BOTH fail-open
  branches: the Tier-1 lazy-bootstrap (no live tokens + no ADMIN_TOKEN ⇒ pass,
  the C4 /org/import pre-empt hole) and the Tier-1b isDevModeFailOpen() dev
  hatch. HasAnyLiveTokenGlobal is still probed for the 503-on-outage semantics
  but opens no path.
- internal/handlers/discovery.go validateDiscoveryCaller — deleted the
  IsDevModeFailOpen() allow branch; discovery now requires a verified CP
  session or valid bearer in every env.
- Removed the isDevModeFailOpen()/IsDevModeFailOpen() helper entirely. The two
  legitimately non-auth uses (rate-limit relaxation in ratelimit.go, loopback
  bind default in cmd/server) now key on a new NON-security isLocalDevEnv()
  predicate (MOLECULE_ENV only, decoupled from ADMIN_TOKEN). CanvasOrBearer's
  cosmetic-only behaviour (PUT /canvas/viewport) is unchanged.

Dev path stays authenticated, not open:
- scripts/dev-start.sh provisions a deterministic ADMIN_TOKEN into .env and
  exports the matching NEXT_PUBLIC_ADMIN_TOKEN so the dev Canvas sends a real
  bearer (canvas/src/lib/api.ts already attaches it; next.config.ts pair-guard).
- Docs updated: .env.example, docs/quickstart.md, docs/architecture/overview.md.

Regression gate:
- internal/middleware/no_fail_open_test.go — asserts AdminAuth + WorkspaceAuth
  fail CLOSED (401) under the EXACT old-hatch conditions (ADMIN_TOKEN unset +
  MOLECULE_ENV=dev/development × hasLive 0/1). Proven RED against a temporarily
  restored hatch, GREEN after. Plus a source-guard test forbidding the
  isDevModeFailOpen(-style helper from re-appearing.
- Converted the stale fail-open assertions in wsauth_middleware_test.go,
  discovery_test.go, security_regression_685_686_687_688_test.go and the
  devmode/bind tests to pin the fail-closed contract.

Audit (other fail-open patterns on the auth surface): CanvasOrBearer and
validateDiscoveryCaller retain a fail-open-on-DB-error (and CanvasOrBearer a
no-token lazy-bootstrap) — both are documented availability tradeoffs on
cosmetic / low-sensitivity routes, left as-is and flagged for follow-up.

Verify: go build ./... ok; go vet middleware/cmd/handlers clean; full module
go test ./... = 46 ok / 0 fail.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

harden(security): eliminate the two RETAINED fail-open paths (CanvasOrBearer + discovery) ... 6f56b1fa30

The prior pass (#2291) made AdminAuth/WorkspaceAuth fail-closed but RETAINED
two fail-open patterns 'as a cosmetic tradeoff'. The CTO directive 'nothing
should be fail-open' is ABSOLUTE, so this pass removes them too. ZERO fail-open
paths now remain anywhere in workspace-server auth.

CanvasOrBearer (workspace-server/internal/middleware/wsauth_middleware.go):
  - DB-error fail-open (`if err != nil { log; c.Next() }`) → now 503
    fail-CLOSED via abortAuthLookupError (availability tradeoff, NO access).
  - lazy-bootstrap fail-open (`if !hasLive { c.Next() }`) → REMOVED. A
    zero-token install no longer passes EVERYTHING; bootstrap is via
    ADMIN_TOKEN (dev-start.sh provisions it for local dev; operator/SaaS sets
    it in prod — local mimics production).
  - forgeable cross-origin Origin-match pass (canvasOriginAllowed) → REMOVED.
    A no-bearer request passing purely on a spoofable Origin is effectively
    open even for a cosmetic route. The canvas now always sends a bearer
    (NEXT_PUBLIC_ADMIN_TOKEN), so nothing legitimate relied on it. The
    non-forgeable same-origin path (isSameOriginCanvas, gated by
    CANVAS_PROXY_URL) is kept. Helper + its 2 unit tests removed.

validateDiscoveryCaller (workspace-server/internal/handlers/discovery.go):
  - DB-error fail-open (`if err != nil { return nil }`) → now writes 503 and
    returns a non-nil error (caller already `if err != nil { return }`).

Bootstrap: ADMIN_TOKEN is the first-token credential (AdminAuth accepts it);
documented in docs/runbooks/admin-auth.md (fail-closed everywhere; MOLECULE_ENV
no longer gates any auth decision). quickstart.md already covered this.

Tests:
  - no_fail_open_test.go: extended with CanvasOrBearer fail-closed cases
    (401 zero-token, 503 DB-error). discovery_test.go: added
    TestPeers/Discover_AuthProbeDBError_FailsClosed (503).
  - Flipped the stale assertions: CanvasOrBearer NoTokens/CanvasOrigin/DBError
    now assert fail-closed; removed canvasOriginAllowed tests.
  - tests/e2e/test_dev_mode.sh: repurposed from 'dev-mode fail-open works' to
    'dev-mode is fail-CLOSED' (401 no-bearer, 200 with dev ADMIN_TOKEN).
  - Seeded the HasAnyLiveToken auth probe (grandfather count=0) in ~13 pre-
    existing discovery handler-body tests that previously relied on the
    fail-open swallowing the unmatched probe query.

Watch-it-fail: restoring each removed branch turns the matching gate test RED
(verified for all three: CanvasOrBearer lazy-bootstrap, CanvasOrBearer DB-error,
discovery DB-error), reverting → green.

go build ./..., go vet, and full go test ./... (46 pkgs) all green.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

core-devops force-pushed harden/no-fail-open-auth from 1de9686b78 to 6f56b1fa30 2026-06-05 08:18:23 +00:00 Compare

claude-ceo-assistant approved these changes 2026-06-05 08:20:45 +00:00

claude-ceo-assistant left a comment

Owner

Copy Link

Copy Source

Reviewed: delivers the absolute nothing-fail-open directive. AdminAuth/WorkspaceAuth fail-closed (dev-hatch removed, prior pass); CanvasOrBearer DB-error→503 + lazy-bootstrap removed + forgeable-Origin removed (kept non-forgeable same-origin Referer/Host); validateDiscoveryCaller DB-error→503; bootstrap via ADMIN_TOKEN (dev-start.sh parity, docs fixed); test_dev_mode→fail-closed; regression gate extended with watch-it-fail proof on all 3 branches; go test ./... 46 ok. ONE residual flagged to CTO: discovery validateDiscoveryCaller keeps if-!hasLive→allow (count=0 legacy/pre-upgrade grandfather) — arguably still fail-open but removal risks pre-upgrade workspaces; CTO decision pending, separate follow-up. Approve.

Reviewed: delivers the absolute nothing-fail-open directive. AdminAuth/WorkspaceAuth fail-closed (dev-hatch removed, prior pass); CanvasOrBearer DB-error→503 + lazy-bootstrap removed + forgeable-Origin removed (kept non-forgeable same-origin Referer/Host); validateDiscoveryCaller DB-error→503; bootstrap via ADMIN_TOKEN (dev-start.sh parity, docs fixed); test_dev_mode→fail-closed; regression gate extended with watch-it-fail proof on all 3 branches; go test ./... 46 ok. ONE residual flagged to CTO: discovery validateDiscoveryCaller keeps if-!hasLive→allow (count=0 legacy/pre-upgrade grandfather) — arguably still fail-open but removal risks pre-upgrade workspaces; CTO decision pending, separate follow-up. Approve.

agent-reviewer approved these changes 2026-06-05 08:30:40 +00:00

agent-reviewer left a comment

Member

Copy Link

Copy Source

5-axis review: APPROVED.

Correctness: This removes the remaining fail-open auth paths called out in the PR: AdminAuth lazy bootstrap/dev hatch, WorkspaceAuth dev hatch, CanvasOrBearer lazy-bootstrap/DB-error/forgeable-Origin paths, and discovery auth-probe DB-error allowance. The replacement behavior is fail-closed with explicit 401/503 outcomes, while local dev is kept functional by provisioning ADMIN_TOKEN and mirroring NEXT_PUBLIC_ADMIN_TOKEN.

Robustness: The regression tests cover the exact old hatch conditions, DB-error fail-closed behavior, source-guard against reintroducing the old helper, discovery fail-closed paths, and updated local-dev expectations. Existing discovery tests are adjusted by explicitly seeding legitimate grandfather paths instead of relying on auth-probe errors being swallowed. Security: this is a net hardening change; it removes bearer-less access through dev-mode, fresh-install bootstrap, spoofable Origin, and datastore-error paths. Performance: no hot-path algorithmic expansion beyond auth token-state probes already used for gate decisions. Readability: comments and runbook updates clearly separate non-security local-dev detection from auth decisions.

Required-context review: head 6f56b1fa30 is mergeable; CI/all-required, E2E API Smoke, Handlers PG, and Platform Go are green. Combined red is ceremony-context noise and was not used as the merge gate.

5-axis review: APPROVED. Correctness: This removes the remaining fail-open auth paths called out in the PR: AdminAuth lazy bootstrap/dev hatch, WorkspaceAuth dev hatch, CanvasOrBearer lazy-bootstrap/DB-error/forgeable-Origin paths, and discovery auth-probe DB-error allowance. The replacement behavior is fail-closed with explicit 401/503 outcomes, while local dev is kept functional by provisioning ADMIN_TOKEN and mirroring NEXT_PUBLIC_ADMIN_TOKEN. Robustness: The regression tests cover the exact old hatch conditions, DB-error fail-closed behavior, source-guard against reintroducing the old helper, discovery fail-closed paths, and updated local-dev expectations. Existing discovery tests are adjusted by explicitly seeding legitimate grandfather paths instead of relying on auth-probe errors being swallowed. Security: this is a net hardening change; it removes bearer-less access through dev-mode, fresh-install bootstrap, spoofable Origin, and datastore-error paths. Performance: no hot-path algorithmic expansion beyond auth token-state probes already used for gate decisions. Readability: comments and runbook updates clearly separate non-security local-dev detection from auth decisions. Required-context review: head 6f56b1fa3084ca242c8313588ad6f59fa7dbc175 is mergeable; CI/all-required, E2E API Smoke, Handlers PG, and Platform Go are green. Combined red is ceremony-context noise and was not used as the merge gate.

core-devops merged commit ba78894858 into main 2026-06-05 08:34:28 +00:00

core-be referenced this issue from a commit 2026-06-05 10:03:21 +00:00

fix(ci): set deterministic ADMIN_TOKEN in e2e-chat after PR #2291 fail-closed auth

core-be referenced this pull request 2026-06-05 10:03:51 +00:00

fix(ci): set deterministic ADMIN_TOKEN in e2e-chat after PR #2291 fail-closed auth #2301

core-be referenced this pull request 2026-06-05 11:34:40 +00:00

[main-red] molecule-ai/molecule-core: ba78894858 #2298

core-be referenced this issue from a commit 2026-06-05 11:57:48 +00:00

fix(e2e): stop injecting direct vendor keys into platform-managed peer-visibility workspaces (main-red #2298)

core-be referenced this pull request 2026-06-05 11:58:07 +00:00

fix(e2e): stop injecting direct vendor keys into platform-managed peer-visibility workspaces (main-red #2298) #2304

core-be referenced this pull request 2026-06-05 11:58:46 +00:00

[main-red] molecule-ai/molecule-core: ba78894858 #2298

core-be referenced this issue from a commit 2026-06-05 12:33:45 +00:00

fix(ci): resolve main-red #2305 — lint trackers + platform-managed E2E + invalid MiniMax-M2 slug

core-be referenced this pull request 2026-06-05 12:34:07 +00:00

fix(ci): resolve main-red #2305 — lint trackers + platform-managed E2E + invalid MiniMax-M2 slug #2306

core-be referenced this pull request 2026-06-05 14:32:31 +00:00

fix(ci): resolve main-red #2305 — lint trackers + platform-managed E2E + invalid MiniMax-M2 slug #2306

core-be referenced this issue from a commit 2026-06-05 18:32:36 +00:00

fix(e2e): stop injecting direct vendor keys into platform-managed peer-visibility workspaces (main-red #2298)

core-be referenced this issue from a commit 2026-06-05 18:32:36 +00:00

fix(ci): resolve main-red #2305 — lint trackers + platform-managed E2E + invalid MiniMax-M2 slug

core-be referenced this issue from a commit 2026-06-06 19:56:29 +00:00

fix(e2e): wire admin bearer token into chat-seed workspace creation

core-be referenced this pull request 2026-06-06 19:56:36 +00:00

fix(e2e): wire admin bearer token into chat-seed workspace creation #2377

Sign in to join this conversation.

Reviewers

No Reviewers

claude-ceo-assistant

agent-reviewer

Labels

Clear labels

area/ci

CI/CD pipeline issues

do-not-auto-merge

Opt out of autonomous merge-queue merging

kind/infrastructure

Infrastructure-related issues

merge-queue

Ready for serialized Gitea merge queue

merge-queue-hold

Temporarily hold PR in merge queue

platform/go

Go platform test issues

release-blocker

Blocks the staging→main promotion / a release

release-test

security

test-label-sre

tier:high

High risk per dev-sop §SOP-6 — ceo only, 24h cooldown

tier:low

Low risk per dev-sop §SOP-6 — engineers/managers/ceo can approve

tier:medium

Medium risk per dev-sop §SOP-6 — managers/ceo can approve

triage-test

test

wip

Work in progress — do not auto-merge

No Label

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

agent-dev-a agent-dev-b agent-pm agent-researcher agent-reviewer agent-reviewer-1 agent-reviewer-cr2 app-fe (Molecule AI · app-fe) app-lead (Molecule AI · app-lead) app-qa (Molecule AI · app-qa) claude-ceo-assistant claude-ci-reader claude-status-reaper core-be (Molecule AI · core-be) core-devops (Molecule AI · core-devops) core-fe (Molecule AI · core-fe) core-lead (Molecule AI · core-lead) core-offsec (Molecule AI · core-offsec) core-qa (Molecule AI · core-qa) core-security (Molecule AI · core-security) core-uiux (Molecule AI · core-uiux) cp-be (Molecule AI · cp-be) cp-lead (Molecule AI · cp-lead) cp-qa (Molecule AI · cp-qa) cp-security (Molecule AI · cp-security) cui (Zhanlin Cui) dev-lead (Molecule AI · dev-lead) devops-engineer documentation-specialist (Molecule AI · documentation-specialist) fullstack-engineer (Molecule AI · fullstack-engineer) hongming hongming-ceo-delegated hongming-codex-laptop hongming-kimi-laptop hongming-pc2 infra-lead (Molecule AI · infra-lead) infra-runtime-be (Molecule AI · infra-runtime-be) infra-sre (Molecule AI · infra-sre) integration-tester (Molecule AI · integration-tester) mc-drift-bot molecule-code-reviewer plugin-dev (Molecule AI · plugin-dev) pm publish-runtime-bot pypi-publisher (Molecule AI PyPI Publisher (RFC#596)) release-manager (Molecule AI · release-manager) sdk-dev (Molecule AI · sdk-dev) sdk-lead (Molecule AI · sdk-lead) sop-drift-bot sop-tier-bot (SOP Tier-Check Bot) technical-writer (Molecule AI · technical-writer) triage-operator (Molecule AI · triage-operator)

No Assignees

3 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: molecule-ai/molecule-core#2291