Issues

• inbox-bubble: a 404 not_claimed tenant still gets the generic「try again」line — map it to errorNotClaimed like the form coral

  CVERInc/tile#187 · Filter by author cverorg opened on Oct 23, 2026

• site-wide embed slot: add locale-isolation and no-key baseline fixtures (codex r1 P3 ×2 on #179)

  CVERInc/tile#182 · Filter by author cverorg opened on Oct 22, 2026

• ci: build the Mac app on every push

  CVERInc/tile#132 · Filter by author cverorg opened on Oct 14, 2026

• Label=href 解析從最後一個 = 切開：帶 query 參數的網址會被切壞，靜默產出垃圾連結（footer-cols／header-cta／sidebar-nav 共 6 處）

  CVERInc/tile#92 · Filter by author cverorg opened on Sep 30, 2026

• build/stage：blog／pagetile／assets 用 fs.cp 原樣保留 symlink，建置機檔案可能被發佈（P2）；core web-host openLink 無 scheme 白名單等 P3×5

  CVERInc/tile#91 · Filter by author cverorg opened on Sep 30, 2026

• cardtile：javascript: 原樣進 href（三個 sink，已驗證）、accent 注入 <style>（P2×2）；put_asset mime 換行注入 cell

  CVERInc/tile#90 · Filter by author cverorg opened on Sep 30, 2026

• square-shop 內嵌 worker：inbox 轉送無 Origin／大小限制（影響 reef#1301 修法）、page_url 可偽造、SSR 取數丟訪客脈絡、付費內容放行沿用公開快取標頭（P2×4）

  CVERInc/tile#89 · Filter by author cverorg opened on Sep 30, 2026

• sitetile：cssUrlString 漏 form feed 可注入 CSS（Chromium 實測）、頁面 frontmatter 覆寫全站 chrome（P2×2）；embed 無角色閘門（設計題）

  CVERInc/tile#88 · Filter by author cverorg opened on Sep 30, 2026

• 站台 Worker /__reef/inbox 轉送端：帶簽名轉送身分＋訪客 IP（reef #1301 合約，每站衍生 key）

  CVERInc/tile#87 · Filter by author cverorg opened on Sep 29, 2026

• renderer：頁面 image: 不進 og:image fallback（分享無縮圖）；cell-list 只剝第一個項目符號

  CVERInc/tile#86 · Filter by author cverorg opened on Sep 29, 2026

• Re-review of #79/#81/#83: settle loop never retries in a browser, completion-page reload clears the cart, orphan poller after unmount

  CVERInc/tile#84 · Filter by author cverorg opened on Sep 29, 2026
  2

• packages/build: follow-ups from the three review rounds of #11

  CVERInc/tile#16 · Filter by author cverorg opened on Sep 6, 2026

• cssmd: links — the ordering hazard is the design question

  CVERInc/tile#2 · Filter by author cverorg opened on Jul 29, 2026