Issues

• Test targets omit prerequisites, so stale binaries can pass -- and silently invalidate mutation testing

  priority/p2scope/mediumtype/bugworkstream/testing
  jsavin/Frontier#901 · Filter by author jsavin opened on Aug 16, 2026

• Headless appleEvent () raises an empty error that escapes UserTalk try blocks

  jsavin/Frontier#900 · Filter by author jsavin opened on Aug 16, 2026

• startup_script_execution.yaml Test 7 is vacuous: string(@adr) returns the address path, not script source

  jsavin/Frontier#899 · Filter by author jsavin opened on Aug 16, 2026

• Signed-overflow UB in db.c block-size computation (ctbytes - variance) with on-disk operands

  priority/p2scope/quick-wintype/bugworkstream/database-architecture
  jsavin/Frontier#898 · Filter by author jsavin opened on Aug 16, 2026

• flinmemory is a false positive for mbar externals in headless builds; dereferencing variabledata segfaults

  priority/p1scope/mediumtype/bugworkstream/runtime-core
  jsavin/Frontier#896 · Filter by author jsavin opened on Aug 16, 2026

• sys.unixShellCommand can exec a host GUI browser past the #891 headless openUrl guard -- decision needed

  priority/p2scope/mediumstatus/decision-neededtype/securityworkstream/runtime-core
  jsavin/Frontier#894 · Filter by author jsavin opened on Aug 16, 2026

• Duplicated sys verb implementations across linked/unlinked TUs (openUrl, unixShellCommand) -- wrong-file edits silently no-op

  priority/p1scope/mediumtype/refactorworkstream/runtime-core
  jsavin/Frontier#893 · Filter by author jsavin opened on Aug 16, 2026

• 14 scripts carry cosmetic brace-injection damage (};//, comments swallowed); compile but outline degraded

  priority/p2scope/mediumtype/bugworkstream/database-architecture
  jsavin/Frontier#890 · Filter by author jsavin opened on Aug 11, 2026

• Virgin.root stored-data oddities require explicit migration policy (malformed nodes, placeholders, control-byte names, exotic types)

  priority/p2scope/mediumtype/choreworkstream/database-architecture
  jsavin/Frontier#889 · Filter by author jsavin opened on Aug 11, 2026

• file.writeWholeFile append flag TRUNCATES instead of appending; silent data loss

  priority/p1scope/quick-wintype/bugworkstream/runtime-core
  jsavin/Frontier#888 · Filter by author jsavin opened on Aug 11, 2026

• string() coercion on list-type value HARD-ABORTS interpreter (exit 1, uncontainable); blocks --export-root

  priority/p1scope/mediumtype/bugworkstream/runtime-core
  jsavin/Frontier#887 · Filter by author jsavin opened on Aug 11, 2026

• Headless link -undefined dynamic_lookup allows undefined symbols, crashes at first call (Mac-only folderfrompath example)

  priority/p2scope/mediumtype/bugworkstream/build-tooling
  jsavin/Frontier#884 · Filter by author jsavin opened on Aug 11, 2026

• Parser/scanner divergence: CR-spanning single-quote character constants; fail-open, low practical impact

  priority/p2scope/quick-wintype/bugworkstream/runtime-core
  jsavin/Frontier#883 · Filter by author jsavin opened on Aug 11, 2026

• 6 verbs have no headless kernel implementation (quickTime.*, string.nthChar); misclassified as broken in #879

  priority/p2scope/mediumtype/featureworkstream/runtime-core
  jsavin/Frontier#882 · Filter by author jsavin opened on Aug 11, 2026
  2

• Test YAML runner writes UTF-8, mangles UserTalk 0xC7 marker; source of #866 false encoding-trap diagnosis

  priority/p2scope/quick-wintype/bugworkstream/testing
  jsavin/Frontier#880 · Filter by author jsavin opened on Aug 11, 2026

• 12 Virgin.root scripts genuinely broken in DB (fail to compile in place); webBrowser.openURL + cleanRoot block #855

  priority/p1scope/mediumtype/bugworkstream/runtime-core
  jsavin/Frontier#879 · Filter by author jsavin opened on Aug 11, 2026
  2

• 65 Virgin.root scripts fail round-trip idempotence (string->newScriptObject); latent normalization divergence

  priority/p2scope/mediumtype/bugworkstream/database-architecture
  jsavin/Frontier#878 · Filter by author jsavin opened on Aug 11, 2026
  1

• databases/Frontier.root is stale (pre-#621, doubled-brace corruption); source of #866 false diagnosis

  priority/p1scope/quick-wintype/bugworkstream/database-architecture
  jsavin/Frontier#877 · Filter by author jsavin opened on Aug 11, 2026

• Frontier.getSubFolder(): no path normalization, reachable with user-influenced input from admin site; creates folders at traversal targets

  jsavin/Frontier#876 · Filter by author jsavin opened on Aug 11, 2026

• system.menus.buildSuitesSubmenu sets target with no error-path restore; stale context if throws

  priority/p2scope/quick-wintype/bugworkstream/runtime-core
  jsavin/Frontier#874 · Filter by author jsavin opened on Aug 11, 2026

• #849 startup guards silently lose error messages; log.add writes nowhere on stock headless install

  priority/p2scope/quick-wintype/bugworkstream/runtime-core
  jsavin/Frontier#873 · Filter by author jsavin opened on Aug 11, 2026

• startupScript unguarded init chain leaves startingUp=true on failure; webserver hang window survives #849 partial guards

  priority/p2scope/mediumtype/bugworkstream/runtime-core
  jsavin/Frontier#872 · Filter by author jsavin opened on Aug 11, 2026

• mainResponder builtInError page has reflected-XSS (unescaped error text) and information disclosure

  priority/p2scope/mediumtype/securityworkstream/runtime-core
  jsavin/Frontier#871 · Filter by author jsavin opened on Aug 11, 2026

• setupFrontier renders 500 (empty-bserror internal_error) during first run — failing step inside render path not yet isolated

  priority/p1scope/mediumtype/bugworkstream/runtime-core
  jsavin/Frontier#870 · Filter by author jsavin opened on Aug 11, 2026
  1

• verify_virgin_root_sync.sh covers only Virgin.root, not guest-DB mirrors; silent drift accumulates

  priority/p1scope/mediumtype/choreworkstream/testing
  jsavin/Frontier#869 · Filter by author jsavin opened on Aug 11, 2026