All issues

Search results

auth-simple: duplicate app keys differing in case silently shadow the tighter entry, and a backend migration moves policy authority with no observable signal

Status: Open.

#1301 In Dstack-TEE/dstack;

· kvinwang opened on Sep 20, 2026

contracts: DstackKms.initialize accepts a zero appImplementation, which docs/specification.md §3.1 says must revert

Status: Open.

#1300 In Dstack-TEE/dstack;

· kvinwang opened on Sep 20, 2026

contracts: setKmsQuote and setKmsEventlog are the only owner mutations that emit no event, so the published KMS evidence can be rewritten silently

Status: Open.

#1299 In Dstack-TEE/dstack;

· kvinwang opened on Sep 20, 2026

contracts: the three DstackKms allowlist setters still accept bytes32(0), and #1268's OS-image fix depends on allowedOsImages[0] being false

Status: Open.

#1298 In Dstack-TEE/dstack;

· kvinwang opened on Sep 20, 2026

contracts: the documented app upgrade is add-only, so the withdrawn compose hash stays bootable with identical keys

P0Highest priority: review or decide before anything else in the audit batchHighest priority: review or decide before anything else in the audit batch

Status: Open.

#1297 In Dstack-TEE/dstack;

· kvinwang opened on Sep 20, 2026

GCP TDX image identity rests on one lane: MRTD/RTMR0-2 are never compared, and PCR7/PCR12 are not quoted although AWS NitroTPM binds both

Status: Open.

#1296 In Dstack-TEE/dstack;

· kvinwang opened on Sep 20, 2026

dstack-mr diagnose lists RTMR0 ACPI inputs the generator does not consume (hpet, host_share_mode) and omits two it does

Status: Open.

#1295 In Dstack-TEE/dstack;

· kvinwang opened on Sep 20, 2026

validate_v2_preimages is documented as binding RTMR replay to displayed fields, but inspects the event list that is not replayed

Status: Open.

#1294 In Dstack-TEE/dstack;

· kvinwang opened on Sep 20, 2026

contracts: an app can never be deregistered, so the KMS owner's only revocation lever is the global OS-image allowlist

Status: Open.

#1293 In Dstack-TEE/dstack;

· kvinwang opened on Sep 20, 2026

Verifier result contract is not platform-uniform: the same fields mean different things on each TEE variant, and nothing tells the relying party

Status: Open.

#1292 In Dstack-TEE/dstack;

· kvinwang opened on Sep 20, 2026

The os-image-hash RTMR3 event records the key provider's answer, is emitted only on the KMS path, and has no reader

Status: Open.

#1291 In Dstack-TEE/dstack;

· kvinwang opened on Sep 20, 2026

contracts: removeDevice is inert while allowAnyDevice is true, and both the mapping and the audit event report a revocation that changed no decision

P0Highest priority: review or decide before anything else in the audit batchHighest priority: review or decide before anything else in the audit batch

Status: Open.

#1290 In Dstack-TEE/dstack;

· kvinwang opened on Sep 20, 2026