Issues

• MCP redirects leak authentication headers and bypass destination egress guard

  PrismorSec/prismor#778 · Filter by author Madhumasa84 opened on Oct 26, 2026
  1

• HTTP raw-event callers can spoof trusted surfaces to bypass required end-user identity

  PrismorSec/prismor#746 · Filter by author Madhumasa84 opened on Oct 23, 2026

• Tag-rule blocks have no one-case allow; every way out widens the guard or needs a new session

  area:runtimebug
  PrismorSec/prismor#661 · Filter by author Ar9av opened on Oct 19, 2026

• Inert context: heredoc-to-file bodies, for-loop word lists and prismor check arguments still block

  PrismorSec/prismor#596 · Filter by author Ar9av opened on Oct 7, 2026

• staged-execution warns on almost every write-then-run workflow

  PrismorSec/prismor#594 · Filter by author Ar9av opened on Oct 7, 2026

• Tag-sequence rules re-fire on every later call in a session

  PrismorSec/prismor#593 · Filter by author Ar9av opened on Oct 7, 2026
  1

• Per-tool contracts: declare what a tool's output does to the session, and what a call requires of it

  area:runtimeenhancementroadmap
  PrismorSec/prismor#532 · Filter by author Ar9av opened on Sep 28, 2026

• Egress allowlist should auto-populate values from previous network requests

  PrismorSec/prismor#510 · Filter by author delta-porygon opened on Sep 26, 2026
  6

• Programmable workspace policies (.prismor/policies/*.py) and shareable policy packs

  area:runtimeenhancementroadmap
  PrismorSec/prismor#491 · Filter by author Ar9av opened on Sep 24, 2026

• Opt-in developer-workflow guardrails: git history loss, live infra, releases, runaway processes, agent loops

  area:runtimeenhancement
  PrismorSec/prismor#490 · Filter by author Ar9av opened on Sep 24, 2026

• prismor status reports hooks as installed without checking they can run: add a hook self-test (doctor)

  area:integrationsarea:runtimeenhancement
  PrismorSec/prismor#489 · Filter by author Ar9av opened on Sep 24, 2026

• Gateway plugins (OpenClaw/Hermes/OpenCode) block the event loop with execSync and fail open silently on timeout

  area:integrationsbugperformance
  PrismorSec/prismor#488 · Filter by author Ar9av opened on Sep 24, 2026

• Evidence-carrying per-agent enforcement matrix + daily live-CLI canary to catch hook schema drift

  area:ciarea:integrationsarea:testsenhancement
  PrismorSec/prismor#482 · Filter by author Ar9av opened on Sep 24, 2026

• Install turn-end (Stop) hooks and add an instruct verdict — the E2BIG reason for skipping Stop does not hold

  area:integrationsarea:runtimeenhancement
  PrismorSec/prismor#480 · Filter by author Ar9av opened on Sep 24, 2026

• perf: evaluate hooks in a warm fork-server daemon (hookd)

  area:runtimeenhancementperformance
  PrismorSec/prismor#479 · Filter by author Ar9av opened on Sep 24, 2026

• Classification of categories in prismor replay and dashboard

  area:dashboardenhancementhelp wanted
  PrismorSec/prismor#404 · Filter by author delta-porygon opened on Sep 13, 2026
  1

• Have a clear difference between prismor enterprise and OSS when installed to avoid conflicting policies

  area:deploymentarea:runtimebugdocumentationhelp wanted
  PrismorSec/prismor#403 · Filter by author delta-porygon opened on Sep 13, 2026
  1

• Prismor is blind to container execution: host-absolute hook paths, and cloaking that degrades open

  area:deploymentarea:runtimeenhancementhelp wantedroadmapsecurity
  PrismorSec/prismor#387 · Filter by author Ar9av opened on Sep 9, 2026
  1

• Decision legibility: a developer should be able to tell why an agent was allowed, blocked, or escalated in seconds

  area:dashboardarea:runtimeenhancementhelp wantedroadmap
  PrismorSec/prismor#358 · Filter by author delta-porygon opened on Sep 5, 2026

• feat(discover): inventory the browser WebMCP surface

  area:integrationsarea:runtimeenhancementhelp wanted
  PrismorSec/prismor#339 · Filter by author Ar9av opened on Sep 1, 2026

• Harden OSS CI: CodeQL, Scorecard, dependabot, dependency scanning

  area:cienhancementgood first issuehelp wantedsecurity
  PrismorSec/prismor#282 · Filter by author Ar9av opened on Aug 12, 2026

• Agent-to-agent governance with consent escalation broker

  area:runtimeenhancementhelp wantedroadmap
  PrismorSec/prismor#276 · Filter by author Ar9av opened on Aug 12, 2026

• Zero standing privileges with DPoP-bound ephemeral tokens

  area:runtimeenhancementhelp wantedroadmapsecurity
  PrismorSec/prismor#275 · Filter by author Ar9av opened on Aug 12, 2026

• Support OPA/Rego policies alongside YAML

  area:runtimeenhancementhelp wantedroadmap
  PrismorSec/prismor#274 · Filter by author Ar9av opened on Aug 12, 2026

• MCP per-tool budget enforcement and tool-call circuit breakers

  area:mcpenhancementhelp wantedroadmap
  PrismorSec/prismor#273 · Filter by author Ar9av opened on Aug 12, 2026