Distribution splits
Intentionally in-repo until a separate distribution channel (PyPI for the client SDK, a hosted leaderboard for the benchmark) is authorized.Operator-enabled features (by design, not gaps)
Code-complete and deliberately dormant until an operator enables them. These are lazy-load / feature-gate designs, not TODOs.Genuinely open code-side items
Graduated since W10 close (for the record)
Everything below was listed as a residual at W10 close and has since shipped — see the changelog for dates and details:- Real cosign
sign-blobsigning on provenance bundles (placeholder removed) - Stuck-
processingoutbox row reaper (/api/v1/cron/outbox-reaper) - Multi-input / multi-output ONNX models with per-input dtypes
- ONNX out-of-band blob store (file:// and s3://) replacing the JSON-column cap
- LIME + counterfactual auto-run from
/api/v1/fairness/evaluate - Multi-stage four-eyes approvals (
approval_request_stages+ stage state machine) - Negotiation apply-mode and multi-turn sessions wired into
/recommendand dedicated routes - Lagrangian cross-offer constraints (CRUD API + realtime pipeline wiring)
- Bandit arm sampling on realtime
/recommend(banditArmIndexin responses) - Slack webhook for nightly negotiation-eval failures
kaireon_outbox_pending_countPrometheus gauge- Cross-offer dual-loader consolidation (2026-07-03: the batch loader read a row shape the API never wrote — API-created constraints silently never applied on batch; single canonical loader now serves both paths)