Issues

• check-migration is a required check but path-filtered, so PRs outside the filter cannot merge

  freenet/ghostkeys#57 · Filter by author sanity opened on Oct 28, 2026

• Fold crates-io/ghostkey-common back into common/ at the next delegate re-key

  freenet/ghostkeys#56 · Filter by author sanity opened on Oct 28, 2026

• README still documents "allow once / always allow", which the delegate no longer offers

  freenet/ghostkeys#54 · Filter by author sanity opened on Oct 28, 2026

• README: verifiers must pin requestor; VerifySignedMessage returns it but cannot check it

  freenet/ghostkeys#53 · Filter by author sanity opened on Oct 28, 2026

• One pending-prompt slot per delegate: any app can make another app's prompt fail

  freenet/ghostkeys#52 · Filter by author sanity opened on Oct 28, 2026

• Per-recipient unlinkable presentations: batch issuance and a scoped nullifier

  freenet/ghostkeys#51 · Filter by author sanity opened on Oct 28, 2026

• no user-facing way to revoke an app's access: RevokePermission exists but nothing calls it

  freenet/ghostkeys#49 · Filter by author sanity opened on Sep 6, 2026

• Web-container version is minutes-since-epoch, so two publishes in one minute fork the UI permanently

  freenet/ghostkeys#38 · Filter by author sanity opened on Aug 25, 2026
  1

• check-migration and record-migration hash a WASM they don't build, so a bare cargo build silently yields the wrong delegate key

  freenet/ghostkeys#34 · Filter by author sanity opened on Aug 11, 2026
  1

• Audit legacy_delegates.toml against the delegate actually deployed on the network

  freenet/ghostkeys#31 · Filter by author sanity opened on Aug 9, 2026
  1

• Vault UI has no way to actually revoke a granted app's ghostkey access

  freenet/ghostkeys#25 · Filter by author sanity opened on Aug 5, 2026
  1

• Permission prompts don't validate UserInputResponse.request_id against the pending prompt

  freenet/ghostkeys#24 · Filter by author sanity opened on Aug 5, 2026
  2