Issues

• MAC and KDF hashes are fixed at SHA-256 (policy binding, root signature, ECDH-HKDF): no CNSA-conformant TDF

  opentdf/platform#4271 · Filter by author darkhonor opened on Oct 31, 2026

• Support named-profile reloads within an in-memory profiler

  opentdf/platform#4269 · Filter by author jrschumacher opened on Oct 30, 2026

• Allow safe retry after a partially completed profile-driver migration

  opentdf/platform#4268 · Filter by author jrschumacher opened on Oct 30, 2026

• sdk: Reader.Obligations drops Init errors when obligations are present

  opentdf/platform#4267 · Filter by author mustyantsev opened on Oct 30, 2026

• docs: fix recipe indentation in README Makefile example

  documentationgood first issue
  opentdf/platform#4210 · Filter by author eugenioenko opened on Oct 9, 2026

• docs: link Go workspace version from README prerequisites

  documentationgood first issue
  opentdf/platform#4209 · Filter by author eugenioenko opened on Oct 9, 2026

• docs: correct service directory path in README

  documentationgood first issue
  opentdf/platform#4208 · Filter by author eugenioenko opened on Oct 9, 2026
  1

• sdk: TDF reader panics and permissive validation on malformed archives (v0.34.0)

  opentdf/platform#4202 · Filter by author bnrobinson93 opened on Oct 8, 2026

• feat(auth): make access token validation failures actionable for deployers

  comp:middleware:authenhancementneeds triage
  opentdf/platform#4172 · Filter by author pflynn-virtru opened on Oct 6, 2026
  1

• Support extensible otdfctl configuration for downstream consumers

  opentdf/platform#4132 · Filter by author jrschumacher opened on Oct 2, 2026

• Add opt-in analytics sink for otdfctl command outcomes

  opentdf/platform#4133 · Filter by author jrschumacher opened on Oct 2, 2026

• otdfctl decrypt can emit partial stdout before a later segment fails

  opentdf/platform#4119 · Filter by author marythought opened on Sep 29, 2026

• Add a CLI health command for container health checks

  opentdf/platform#4105 · Filter by author mmaudet opened on Sep 27, 2026

• sdk: payload entry name is hardcoded to 0.payload; the spec's payload.url is never read

  opentdf/platform#4065 · Filter by author pflynn-virtru opened on Sep 16, 2026

• sdk: TDF reader trusts the unauthenticated manifest spec version to pick integrity digest encoding

  opentdf/platform#4059 · Filter by author pflynn-virtru opened on Sep 16, 2026
  1

• refactor(auth): share verification primitives between middleware and KAS

  opentdf/platform#4004 · Filter by author jrschumacher opened on Sep 7, 2026

• design(core): define caller, service, and delegated authority for internal calls

  opentdf/platform#4003 · Filter by author jrschumacher opened on Sep 7, 2026
  1

• test(core): define registration, well-known, and mixed-version SDK compatibility

  opentdf/platform#4002 · Filter by author jrschumacher opened on Sep 6, 2026

• feat(authz): expose entitlement cache refresh freshness and failure state

  opentdf/platform#4001 · Filter by author jrschumacher opened on Sep 6, 2026
  1

• test(core): lock down /healthz liveness and readiness compatibility

  opentdf/platform#4000 · Filter by author jrschumacher opened on Sep 6, 2026

• test(core): characterize config precedence, reload scope, and partial activation

  opentdf/platform#3999 · Filter by author jrschumacher opened on Sep 6, 2026

• test(core): verify authenticated audit principal across SDK, IPC, and remote hops

  opentdf/platform#3998 · Filter by author jrschumacher opened on Sep 6, 2026

• feat(core): add an additive error-return service registration path

  opentdf/platform#3997 · Filter by author jrschumacher opened on Sep 6, 2026

• Roadmap to OpenTDF v1

  opentdf/platform#3996 · Filter by author jrschumacher opened on Sep 6, 2026

• feat(core): introduce experimental IPC v2 while preserving SDK contracts

  opentdf/platform#3995 · Filter by author jrschumacher opened on Sep 6, 2026