Issues

• Role sync for all role types (VIP, followers, subscribers/members, custom roles) with per-role off / one-way / bi-directional mode

  enhancementtype:feature
  penguintechinc/waddles#1297 · Filter by author PenguinzTech opened on Nov 12, 2026 · v3.2.x

• Data plane reads config/keys/identity from read-only DB replica — remove hub-api from the hot path

  component:backendcomponent:databasecomponent:infraenhancement
  penguintechinc/waddles#1296 · Filter by author PenguinzTech opened on Nov 12, 2026 · v3.3.x

• Granular community moderator scopes per platform (what mods can and can't do on each platform)

  component:authtype:feature
  penguintechinc/waddles#1279 · Filter by author PenguinzTech opened on Nov 12, 2026 · v3.2.x

• Role sync v2: Waddles→platform engine, inbound platform facts, per-binding direction + mod-sync opt-in

  component:backendsize:xltype:feature
  penguintechinc/waddles#1277 · Filter by author PenguinzTech opened on Nov 12, 2026 · v3.1.x
  1

• Identity linking: handle deauthorized/deleted platform accounts

  component:authtype:feature
  penguintechinc/waddles#1276 · Filter by author PenguinzTech opened on Nov 12, 2026 · v3.1.x

• Identity linking: verified-email storage + email-primary auto-link (fix email squatting)

  component:authpriority:hightype:security
  penguintechinc/waddles#1275 · Filter by author PenguinzTech opened on Nov 12, 2026 · v3.1.x

• Allow channel moderators to bind/request channels

  component:authcomponent:backendpriority:mediumtype:feature
  penguintechinc/waddles#1273 · Filter by author PenguinzTech opened on Nov 12, 2026 · v3.1.x
  2

• Kick OAuth account linking (ownership proof for Kick channel bindings)

  component:authcomponent:backendpriority:mediumtype:feature
  penguintechinc/waddles#1272 · Filter by author PenguinzTech opened on Nov 12, 2026 · v3.1.x

• Auto-translate: community default language with library-first detection/translation, AI only for disputes

  component:backendtype:feature
  penguintechinc/waddles#1269 · Filter by author PenguinzTech opened on Nov 12, 2026 · v3.2.x
  3

• Replace defusedxml (no release since 2021) in SAML parsing

  priority:lowsecuritytech-debt
  penguintechinc/waddles#1268 · Filter by author PenguinzTech opened on Nov 12, 2026 · v3.3.x

• Localization: i18n for webui, bot command replies and bundle SDK

  enhancementpriority:medium
  penguintechinc/waddles#1267 · Filter by author PenguinzTech opened on Nov 12, 2026 · v3.1.x

• Bundle outbound destinations: typed WIT interface + connection-UUID family permission (edge-reshape Chunk 2 B1)

  component:backendtype:feature
  penguintechinc/waddles#1266 · Filter by author PenguinzTech opened on Nov 12, 2026 · v3.1.x

• [v3.1.x] Run T12 executor sharding benchmark on dal2alpha after Phase 1 deploys

  component:infratype:chore
  penguintechinc/waddles#1263 · Filter by author PenguinzTech opened on Nov 12, 2026 · v3.1.x

• [v3.1.x] Wire FLAG_WADDLES_DISABLE_AOT_PRECOMPILE executor kill switch to PostHog

  component:backendtype:chore
  penguintechinc/waddles#1262 · Filter by author PenguinzTech opened on Nov 12, 2026 · v3.1.x

• [v3.1.x] Kata isolation for AOT precompile compile step (REQUIRED before beta)

  component:infrapriority:hightype:security
  penguintechinc/waddles#1261 · Filter by author PenguinzTech opened on Nov 12, 2026 · v3.1.x

• [v3.1.x] Startup WARN/fail on mismatched DEK sources between svc-ingest and svc-process

  component:backendtype:chore
  penguintechinc/waddles#1260 · Filter by author PenguinzTech opened on Nov 12, 2026 · v3.1.x

• [v3.1.x] DEK rotation: invalidate cached keys on rotation

  component:backendtype:feature
  penguintechinc/waddles#1259 · Filter by author PenguinzTech opened on Nov 12, 2026 · v3.1.x

• [v3.1.x] Audit svc-ingest Valkey writes and outbound gRPC for per-tenant encryption; add plaintext-write test

  component:backendtype:security
  penguintechinc/waddles#1258 · Filter by author PenguinzTech opened on Nov 12, 2026 · v3.1.x

• [v3.1.x] DEK broker: per-caller rate limit, anomalous-fetch alerting, audit dashboard

  component:backendtype:security
  penguintechinc/waddles#1257 · Filter by author PenguinzTech opened on Nov 12, 2026 · v3.1.x

• [Security] Verify Discord guild ownership at pairing time (prevent guild squatting)

  enhancementsecurity
  penguintechinc/waddles#1244 · Filter by author PenguinzTech opened on Nov 12, 2026 · v3.0.x

• [Feature] Enforce reputation soft-ban in economy/game/payout app bundles (is_soft_banned)

  enhancement
  penguintechinc/waddles#1240 · Filter by author PenguinzTech opened on Nov 12, 2026 · v3.1.x

• [Feature] Reputation anti-brigading: per-community ±100 tenant cap + ban disputes (tenant + community)

  enhancement
  penguintechinc/waddles#1235 · Filter by author PenguinzTech opened on Nov 12, 2026 · v3.1.x
  1

• [Feature] Per-tenant registration controls (signup on/off + allowed email domains)

  component:apicomponent:authcomponent:frontendenhancement
  penguintechinc/waddles#1228 · Filter by author PenguinzTech opened on Nov 11, 2026 · v3.1.x
  1

• [Bug] Webui advertises ~40 hub-api endpoints that don't exist (Node->Python port gaps)

  bugcomponent:apicomponent:frontend
  penguintechinc/waddles#1226 · Filter by author PenguinzTech opened on Nov 11, 2026 · v3.0.x

• [Bug] Realtime community chat: no /socket.io server after Node->Python port (implement realtime transport in hub-api)

  bugcomponent:backendcomponent:frontend
  penguintechinc/waddles#1217 · Filter by author PenguinzTech opened on Nov 11, 2026 · v3.0.x