Issues

• cloud-api: unbounded HTTP method label in request metrics

  helmcode/nan#172 · Filter by author sre-helmcode opened on Oct 11, 2026
  

• cloud-api deploy hangs: platform-api-migrate Job stuck terminating with argocd hook-finalizer

  helmcode/nan#171 · Filter by author sre-helmcode opened on Oct 11, 2026
  

• SECURITY: cloud-api (platform-api) ServiceAccounts are cluster-admin equivalent; dev can act on prod

  helmcode/nan#170 · Filter by author sre-helmcode opened on Oct 11, 2026
  

• Platform tokens follow-ups: edge reject on inference routes, per-IP limiter, revoke on sign-out-all

  helmcode/nan#167 · Filter by author sre-helmcode opened on Oct 10, 2026
  2

  

• Platform tokens (Settings → Tokens): platform API access without inference

  helmcode/nan#166 · Filter by author sre-helmcode opened on Oct 10, 2026
  

• Vault auto-unseal (future improvement)

  helmcode/nan#164 · Filter by author sre-helmcode opened on Oct 10, 2026
  

• Automations Phase 2: member Vault, automations, webhooks, schedules, approval mode

  helmcode/nan#163 · Filter by author sre-helmcode opened on Oct 10, 2026
  

• Automations Phase 1: runs on workspaces (nan-run, concurrency, API + SSE, CLI, UI history)

  helmcode/nan#162 · Filter by author sre-helmcode opened on Oct 10, 2026
  

• Automations Phase 0: Vault Raft snapshots to R2 + restore drill + Transit benchmark

  helmcode/nan#161 · Filter by author sre-helmcode opened on Oct 10, 2026
  

• Agent Automations (epic): run agents in workspaces via API, CLI, webhooks and schedules

  helmcode/nan#160 · Filter by author sre-helmcode opened on Oct 10, 2026
  

• Workspaces: auto-stop idle free workspaces (post-launch)

  helmcode/nan#154 · Filter by author sre-helmcode opened on Oct 7, 2026
  

• Spaces: members must not receive a kubeconfig / see Kubernetes

  helmcode/nan#150 · Filter by author sre-helmcode opened on Oct 4, 2026
  

• nan-devops: harden the base-image staleness workflow and protect main

  helmcode/nan#148 · Filter by author sre-helmcode opened on Oct 4, 2026
  

• Workspace backups: non-blocking hardening from the #130 reviews

  helmcode/nan#147 · Filter by author sre-helmcode opened on Oct 4, 2026
  

• nan-vmd: memory/pids cgroup for the e2fsprogs sandbox

  helmcode/nan#146 · Filter by author sre-helmcode opened on Oct 4, 2026
  

• nan-vm-operator: disable backup policy on unknown/orphan instances after repo deletion

  helmcode/nan#145 · Filter by author sre-helmcode opened on Oct 2, 2026
  

• Workspaces: remaining work before opening to all members (post pre-rollout review 2026-09-30..10-02)

  helmcode/nan#139 · Filter by author sre-helmcode opened on Oct 2, 2026
  

• networking: new space pods get ECONNREFUSED to marketplace databases for ~15-20s after start (kube-router source sync lag)

  bug
  helmcode/nan#135 · Filter by author sre-helmcode opened on Sep 30, 2026
  1

  

• infra(etcd): quorum has a 24ms voter (nan-eu001) — raft agreement latency degrades the API server

  enhancement
  helmcode/nan#134 · Filter by author sre-helmcode opened on Sep 30, 2026
  1

  

• Product model: workspace (VM) and inference as independent products; VM-only signup

  helmcode/nan#132 · Filter by author sre-helmcode opened on Sep 30, 2026
  

• Billing: USD to EUR migration flow for members who buy workspaces

  helmcode/nan#131 · Filter by author sre-helmcode opened on Sep 30, 2026
  

• Workspaces: 7-day backup add-on (paid) with verified restore

  helmcode/nan#130 · Filter by author sre-helmcode opened on Sep 30, 2026
  1

  

• Responses API over WebSocket (/v1/responses upgrade) bypasses every usage-hook scrub

  helmcode/nan#129 · Filter by author sre-helmcode opened on Sep 30, 2026
  

• Chat completions: Novita returns sla_metrics per chunk and provider_specific_fields (upstream discriminator)

  helmcode/nan#128 · Filter by author sre-helmcode opened on Sep 30, 2026
  

• Repoint nan-system-dev platform-api at litellm-test and rotate the prod LiteLLM master key

  helmcode/nan#127 · Filter by author sre-helmcode opened on Sep 30, 2026