Issues

• Referential integrity: another user's hidden draft blocks a RESTRICT delete

  bugtriage
  ConductionNL/openregister#4709 · Filter by author rjzondervan opened on Oct 20, 2026
  1

  

• Drafts: personal data in a draft is not found by a data-subject request, and a removed draft's audit values remain

  bugtriage
  ConductionNL/openregister#4708 · Filter by author rjzondervan opened on Oct 20, 2026
  1

  

• Deferred listeners: an oversized deferred entry or webhook payload is dropped, not delivered

  bugtriage
  ConductionNL/openregister#4707 · Filter by author rjzondervan opened on Oct 20, 2026
  1

  

• Example sets: remove deletes the set's organisation without checking whether objects outside the set use it

  bugtriage
  ConductionNL/openregister#4706 · Filter by author rjzondervan opened on Oct 20, 2026
  1

  

• Facet labels: the distributed label cache is shared across callers and bypasses the per-caller read check

  bugtriage
  ConductionNL/openregister#4705 · Filter by author rjzondervan opened on Oct 20, 2026
  1

  

• Review policy: does a file without an owning object keep the open instance default?

  bugtriage
  ConductionNL/openregister#4692 · Filter by author WilcoLouwerse opened on Oct 19, 2026
  1

  

• Case flows: where a case-bound flow without a schedule trigger declares the identity it runs as

  bugtriage
  ConductionNL/openregister#4691 · Filter by author WilcoLouwerse opened on Oct 19, 2026
  1

  

• Bulk writer lets a _-named schema property overwrite metadata columns

  bugtriage
  ConductionNL/openregister#4668 · Filter by author rjzondervan opened on Oct 16, 2026
  1

  

• Tree fields returns writeOnly, property-restricted and encrypted values raw

  bugtriage
  ConductionNL/openregister#4667 · Filter by author rjzondervan opened on Oct 16, 2026
  1

  

• /api/audit-trails/readable shows other users' draft contents

  bugtriage
  ConductionNL/openregister#4666 · Filter by author rjzondervan opened on Oct 16, 2026
  1

  

• Bulk delete ignores every draft rule: others' drafts deleted, soft-deleted, no draft.removed

  bugtriage
  ConductionNL/openregister#4665 · Filter by author rjzondervan opened on Oct 16, 2026
  1

  

• A form payload's id picks the uuid, and a scoped draft save then writes over any draft with RBAC off

  bugtriage
  ConductionNL/openregister#4664 · Filter by author rjzondervan opened on Oct 16, 2026
  1

  

• A shipped flow whose x-openregister-flows declaration changed is not republished on re-import; runs keep the old version

  bugtriage
  ConductionNL/openregister#4654 · Filter by author WilcoLouwerse opened on Oct 15, 2026
  2

  

• Credential broker: allow-rules match a query-truncated path, while the outbound call uses the raw path

  bugsecuritytriage
  ConductionNL/openregister#4653 · Filter by author WilcoLouwerse opened on Oct 15, 2026
  1

  

• Credential broker: a successful brokered call leaves no record, although the spec promises "an audit of every use"

  securitytriage
  ConductionNL/openregister#4652 · Filter by author WilcoLouwerse opened on Oct 15, 2026
  1

  

• Search with _includeDeleted=true never returns soft-deleted objects: the JSON _deleted column is parsed as a date

  bugtriage
  ConductionNL/openregister#4599 · Filter by author WilcoLouwerse opened on Oct 12, 2026
  1

  

• Creating an object fails with lifecycle-invalid-value when the body has an empty file property

  bugtriage
  ConductionNL/openregister#4598 · Filter by author WilcoLouwerse opened on Oct 12, 2026
  1

  

• Standing delegation on the task performer model: route a person's tasks in a scope to a stand-in for a period

  triage
  ConductionNL/openregister#4527 · Filter by author rubenvdlinde opened on Oct 9, 2026
  1

  

• The personal credential wallet creates credentials no app may use and offers no way to allow one

  triage
  ConductionNL/openregister#4517 · Filter by author WilcoLouwerse opened on Oct 9, 2026
  1

  

• Verify HS256/384/512 consumer tokens through web-token, as RS/PS already are

  triage
  ConductionNL/openregister#4491 · Filter by author WilcoLouwerse opened on Oct 8, 2026
  1

  

• MCP: schema-derived _search tool with no declared filters emits filters.properties: [] (array) — clients reject the tool

  triage
  ConductionNL/openregister#4479 · Filter by author alex-di-96 opened on Oct 8, 2026
  1

  

• MCP: expired session answers HTTP 200 instead of 404, and sessions expire 1 h after initialize even when active

  triage
  ConductionNL/openregister#4478 · Filter by author alex-di-96 opened on Oct 8, 2026
  1

  

• Translatable property is wrapped again on every partial update ({"nl":"{\"nl\":\"X\"}"})

  triage
  ConductionNL/openregister#4477 · Filter by author alex-di-96 opened on Oct 8, 2026
  1

  

• MCP field report: what a sales team's AI assistant needed on top of the built-in tools (proposals)

  triage
  ConductionNL/openregister#4476 · Filter by author alex-di-96 opened on Oct 8, 2026
  1

  

• The unsubscribe line in external mail has no Dutch translation

  bugtriage
  ConductionNL/openregister#4475 · Filter by author rubenvdlinde opened on Oct 8, 2026
  1