Issues

• Feature request for java/maven: a grant that injects credentials for private artifact repositories

  majorcontext/moat#494 · Filter by author ignat-tw opened on Nov 10, 2026

• run: a VolumeCreate failure skips cleanupDaemonRun, holding a serial claim for 30 minutes

  runtime
  majorcontext/moat#468 · Filter by author dpup opened on Sep 24, 2026

• serial: back-to-back runs on one device can hit an unexplainable TIOCEXCL failure

  runtime
  majorcontext/moat#467 · Filter by author dpup opened on Sep 24, 2026

• serial: a refused connection writes an audit row and a jsonl line, unbounded

  audit
  majorcontext/moat#466 · Filter by author dpup opened on Sep 24, 2026

• serial: session events are emitted while s.mu is held, stalling the device pump

  runtime
  majorcontext/moat#465 · Filter by author dpup opened on Sep 24, 2026

• claude-review exits success without waiting for its finder agents

  tests
  majorcontext/moat#464 · Filter by author dpup opened on Sep 24, 2026

• network.host: allow-list is not enforced for raw TCP (non-proxy-path) traffic — host services reachable regardless of config

  proxyruntime
  Bug

  majorcontext/moat#461 · Filter by author dpup opened on Sep 4, 2026

• bug(daemon): compressed response bodies are corrupted in network.jsonl

  majorcontext/moat#460 · Filter by author dpup opened on Sep 3, 2026

• Show --profile in use in footer

  cli
  Feature

  majorcontext/moat#440 · Filter by author dpup opened on Jul 17, 2026

• Flaky: TestDockerExecInteractive fails on first CI run (exit 126), passes on re-run

  tests
  Bug

  majorcontext/moat#405 · Filter by author dpup opened on Jun 25, 2026

• Composable, shareable moat.yaml configs via extends (inheritance)

  configuration
  Feature

  majorcontext/moat#399 · Filter by author dpup opened on Jun 23, 2026

• Working-directory snapshots with interactive rollback

  runtime
  Feature

  majorcontext/moat#398 · Filter by author dpup opened on Jun 23, 2026

• Filesystem-state attestation: prove what a run changed on disk (pre/post Merkle root)

  audithelp wanted
  Feature

  majorcontext/moat#397 · Filter by author dpup opened on Jun 23, 2026
  1

• Add OS-native kernel sandboxing (Landlock/Seatbelt): in-container defense-in-depth + lightweight local mode

  help wantedruntime
  Feature

  majorcontext/moat#396 · Filter by author dpup opened on Jun 23, 2026
  2

• run stdout not consistently streamed to the terminal inline (only reliable via moat logs)

  cliruntime
  Bug

  majorcontext/moat#375 · Filter by author dpup opened on Jun 16, 2026

• In moat grant list and moat grant show, track when the token was last used

  credentials
  Feature

  majorcontext/moat#368 · Filter by author dpup opened on Jun 3, 2026

• Move orphan-network reaper to daemon process

  runtime
  Feature

  majorcontext/moat#341 · Filter by author dpup opened on Apr 25, 2026

• refactor: replace moat-init.sh with compiled Go init binary

  runtime
  Task

  majorcontext/moat#340 · Filter by author dpup opened on Apr 25, 2026

• proxy: firewall exec-attach race — fast containers exit before iptables rules apply

  bugproxy
  Bug

  majorcontext/moat#318 · Filter by author dpup opened on Apr 15, 2026

• gatekeeper: support credential refresh for rotating secrets

  credentials
  Bug

  majorcontext/moat#300 · Filter by author dpup opened on Apr 2, 2026

• Support for alternative coding agents?

  agentshelp wanted
  Feature

  majorcontext/moat#298 · Filter by author joonas opened on Apr 1, 2026
  1

• 1M context window is not available when running Claude in moat

  agentsquestion
  Bug

  majorcontext/moat#287 · Filter by author abezzub-dr opened on Mar 25, 2026
  6

• Ability to specify a pre-built custom image instead of building one

  help wantedruntime
  Feature

  majorcontext/moat#258 · Filter by author joonas opened on Mar 18, 2026
  6

• Inject a built-in 'moat' skill into containers for docs, bug reporting, and permission help

  agentscli
  Feature

  majorcontext/moat#244 · Filter by author ternarybits opened on Mar 17, 2026

• Non-interactive runs should be fire-and-forget by default, add -f for blocking+streaming

  cliruntime
  Feature

  majorcontext/moat#197 · Filter by author dpup opened on Mar 3, 2026
  3