Issues

• perf(backend): per-key GetItem verification in bulk deletes (_verify_order_keys_deleted, _verify_campaign_deleted)

  enhancement
  dmeiser/kernelworx#776 · Filter by author dmeiser opened on Oct 17, 2026

• perf(backend): full accounts-table scan in admin name search (_scan_accounts_matches)

  enhancement
  dmeiser/kernelworx#775 · Filter by author dmeiser opened on Oct 17, 2026

• refactor(backend): centralize the dual Lambda/test import fallback (~2 dozen blocks)

  enhancement
  dmeiser/kernelworx#774 · Filter by author dmeiser opened on Oct 17, 2026

• refactor(backend): split admin_operations.py (1838 lines, multiple concerns)

  enhancement
  dmeiser/kernelworx#773 · Filter by author dmeiser opened on Oct 17, 2026

• fix(backend): _parse_product_price accepts non-finite Decimal values (Infinity/inf)

  bug
  dmeiser/kernelworx#772 · Filter by author dmeiser opened on Oct 17, 2026

• fix(backend): _parse_product_price accepts non-finite Decimal values (Infinity/inf)

  bug
  dmeiser/kernelworx#771 · Filter by author dmeiser opened on Oct 17, 2026

• feat(public-orders): dev SES identity and order-confirmation mailer

  dmeiser/kernelworx#769 · Filter by author dmeiser opened on Oct 17, 2026

• AGENTS.md pre-token mfa claim drift: TOTP-only vs the three accepted MFA types

  dmeiser/kernelworx#767 · Filter by author dmeiser opened on Oct 16, 2026

• Python runtime posture is three-way (>=3.14, python3.14 runtime, uv resolves 3.15)

  dmeiser/kernelworx#768 · Filter by author dmeiser opened on Oct 16, 2026

• Unresolved TODOs remain in the e2e page objects

  dmeiser/kernelworx#766 · Filter by author dmeiser opened on Oct 16, 2026

• deletion_cascade.py filters campaignId then verifies it unconditionally

  dmeiser/kernelworx#765 · Filter by author dmeiser opened on Oct 16, 2026

• og:image / twitter:image point to /og-image.png, which doesn't exist

  dmeiser/kernelworx#764 · Filter by author dmeiser opened on Oct 16, 2026

• CSP connect-src lists api.kernelworx.app / api.dev.kernelworx.app hosts that don't resolve

  dmeiser/kernelworx#763 · Filter by author dmeiser opened on Oct 16, 2026

• report_generation.py:159 comment falsely claims AppError is re-raised

  dmeiser/kernelworx#762 · Filter by author dmeiser opened on Oct 16, 2026

• test_coverage_fillers.py is named for the coverage gate rather than its behavior

  dmeiser/kernelworx#761 · Filter by author dmeiser opened on Oct 16, 2026

• .github/codeql/codeql-config.yml is dead config with no CodeQL workflow

  dmeiser/kernelworx#760 · Filter by author dmeiser opened on Oct 16, 2026

• No shellcheck gate for the 11 deploy/recovery shell scripts

  dmeiser/kernelworx#759 · Filter by author dmeiser opened on Oct 16, 2026

• 70 of 148 JS resolver files have no same-named test

  dmeiser/kernelworx#758 · Filter by author dmeiser opened on Oct 16, 2026

• _scan_accounts_matches bounds scanned_count by returned items, not evaluated items

  dmeiser/kernelworx#757 · Filter by author dmeiser opened on Oct 16, 2026

• Dependency advisories are unmanaged (23 frontend + werkzeug; no Dependabot/audit gate)

  dmeiser/kernelworx#756 · Filter by author dmeiser opened on Oct 16, 2026

• kernelworx-logo-rotating.svg still embeds the pre-#689 logo.svg href and renders blank

  dmeiser/kernelworx#755 · Filter by author dmeiser opened on Oct 16, 2026

• Disable-MFA re-authentication is client-side only, not a real control (#664)

  dmeiser/kernelworx#754 · Filter by author dmeiser opened on Oct 16, 2026

• Adopt Cognito step-up authentication (ACR/AMR claims) for sensitive operations

  enhancement
  dmeiser/kernelworx#753 · Filter by author dmeiser opened on Oct 16, 2026

• Stale comments in frontend/index.html and tofu/application referencing removed resources and old configurations

  dmeiser/kernelworx#752 · Filter by author dmeiser opened on Oct 16, 2026

• @types/qrcode in production dependencies, unused passkeyCount/mfaEnabled props, and dead reportFormat variable

  dmeiser/kernelworx#751 · Filter by author dmeiser opened on Oct 16, 2026