We contribute to open-source projects we use and rely on, without charging for it. It is one way we give back to the communities that give us good tools — and a genuine way we keep our own skills sharp against real codebases, real maintainers, and real review standards, not just our own.
Last updated: 2026-09-27
This page shows exactly where each contribution stands — nothing is presented as accepted or delivered until a maintainer has actually merged it. That is the same evidence-based standard we hold our paid delivery work to, and it is deliberately unpolished: a genuine open pull request and a closed one that did not land both count as real, verifiable work, and we show both.
Submitted and currently with the project's maintainers. Not yet merged.
Forward-ports the run-bound completion-evidence gate onto the current decomposed kanban modules, preserving fail-closed worker identity checks and a read-only delegation status surface.
12 files changed · +1143 / -15 · opened 20 Sept 2026
Adds a fail-closed profile-identity check before a multiplexed secret scope can be merged, preventing credentials resolved for one profile from being added to another profile's live scope.
16 files changed · +163 / -24 · opened 18 Sept 2026
Adds a write-only handoff document tool for preparing human-reviewed session handovers, with path confinement, write guards, overwrite controls, and regression coverage.
3 files changed · +552 / -0 · opened 17 Sept 2026
Corrects the saved lead-text meta key, restores the excerpt fallback, and carries the lead text through to the event hero without overwriting the description field.
5 files changed · +108 / -8 · opened 17 Sept 2026
Makes the SearXNG HTTP search request timeout configurable instead of fixed, while preserving the existing 15-second default and validating invalid values.
6 files changed · +230 / -4 · opened 13 Sept 2026
Keeps an existing MCP OAuth refresh token when a non-rotating provider omits it from a refresh response, with the safeguard scoped to refresh flows rather than fresh grants.
7 files changed · +183 / -5 · opened 13 Sept 2026
Surfaces the owning project name directly in the desktop session list, so users working across multiple projects can tell sessions apart at a glance.
6 files changed · +190 / -6 · opened 1 Sept 2026
Still open on GitHub, but replaced by a newer contribution that carries the work forward.
Real, tested contributions that were closed without merging. We show these too — they are still genuine evidence of the work, even where a maintainer chose a different direction or the timing didn't fit.
Introduced run-bound completion evidence and a read-only delegation status surface. This PR was closed without merging; the work continued in the current forward-port, #117070.
10 files changed · +2071 / -26 · opened 3 Sept 2026, closed 23 Sept 2026
Documented the real security boundary of the Bot Screen dock debug port and added a regression test for its unauthenticated loopback TCP transport.
2 files changed · +91 / -0 · opened 13 Sept 2026, closed 19 Sept 2026
Addressed resolved-home path reporting and credential resolution in hermes send. The maintainer closed this PR, merged a partial salvage separately in #114864, and the remaining profile-identity hardening continued in #115339.
16 files changed · +243 / -38 · opened 17 Sept 2026, closed 18 Sept 2026
Made the gateway retry a failed full-text-search index rebuild after its cooldown instead of abandoning rebuild attempts for the rest of the process lifetime.
6 files changed · +149 / -16 · opened 17 Sept 2026, closed 18 Sept 2026
Added a confirmation step before selecting a terminal backend that still needs setup, including the specific missing requirement when available.
8 files changed · +136 / -11 · opened 17 Sept 2026, closed 18 Sept 2026
Clarified that AGENT_BROWSER_PROFILE accepts absolute paths only. This PR was closed after the overlapping maintainer change in #113438 merged.
3 files changed · +26 / -2 · opened 16 Sept 2026, closed 18 Sept 2026
Proposed failing closed when EncryptedSerializer encounters an unencrypted checkpoint row, so plaintext rows cannot bypass authenticated decryption. The PR was closed by the repository assignment gate before review.
3 files changed · +182 / -10 · opened 17 Sept 2026, closed 17 Sept 2026
Fixed the async auxiliary-client rebuild dropping the keyless OpenCode Free header override, which caused video analysis to return 401 while related vision calls appeared to work.
2 files changed · +102 / -5 · opened 13 Sept 2026, closed 13 Sept 2026
Fixed a case where the desktop app's scheduling ticker was not recognized as a live heartbeat source, which could make scheduled jobs appear stalled.
3 files changed · +278 / -53 · opened 29 Aug 2026, closed 30 Aug 2026
Removed a hidden dependency on one profile's optional review skill, so automatic kanban review guidance remains available across profiles.
16 files changed · +207 / -55 · opened 29 Aug 2026, closed 30 Aug 2026
Documented which WhatsApp chat identifiers the bridge handles or filters, including the distinction between groups, broadcasts, newsletters, and Cloud API direct-message support.
2 files changed · +16 / -2 · opened 31 Aug 2026, closed 31 Aug 2026
Added repository-reference validation for Markdown links and declared shared resources, with aggregate error reporting, tests, and standard validation integration.
4 files changed · +344 / -0 · opened 31 Aug 2026, closed 31 Aug 2026
This list is limited and honest by design. More lands here as we contribute more — including, when they happen, real merges we can point to directly.