Issues

• fix: mint the stack's secrets on first start, and let the console create the first admin

  next-patch
  hyperi-io/dfe-engine#1034 · Filter by author catinspace-au opened on Oct 29, 2026

• Hunt alert destinations: runners read them from the secrets backend, not the engine's volume

  next-patch
  hyperi-io/dfe-engine#1029 · Filter by author catinspace-au opened on Oct 29, 2026

• Synthetic syslog stream for make demo, replacing the looped fixture replay

  enhancementnext-patch
  hyperi-io/dfe-engine#998 · Filter by author catinspace-au opened on Oct 26, 2026

• fix: the nightly full tier flakes on the shared ClickHouse schema lease

  next-patch
  hyperi-io/dfe-engine#996 · Filter by author catinspace-au opened on Oct 26, 2026
  1

• fix: archive-on with no archiver in the docker single-grpc case (waits on dfe-docker#322)

  next-patch
  hyperi-io/dfe-engine#988 · Filter by author catinspace-au opened on Oct 26, 2026
  2

• Fence a system-bound scoped grant to its own group's orgs in authorize()

  next-patch
  hyperi-io/dfe-engine#980 · Filter by author catinspace-au opened on Oct 25, 2026

• 2.1 to 2.2 migration: likely a professional-services engagement

  next-patch
  hyperi-io/dfe-engine#959 · Filter by author catinspace-au opened on Oct 22, 2026

• Engine MCP and API rework for 2.2.2 (SpecCli, /mcp, router migration, typed UI client)

  next-patch
  hyperi-io/dfe-engine#958 · Filter by author catinspace-au opened on Oct 22, 2026

• 2.2.2: HA and load balancing for the control plane and consoles (dfe-engine, dfe-hyperdx, hunts, dfe-ui)

  next-patch
  hyperi-io/dfe-engine#957 · Filter by author catinspace-au opened on Oct 22, 2026

• an exported source carries no transform program: store programs with the source

  next-patch
  Feature

  hyperi-io/dfe-engine#938 · Filter by author catinspace-au opened on Oct 21, 2026
  3

• stranded _load deletion: describe the writer's real group, and hold if it rejoins mid-pass

  next-patch
  Bug

  hyperi-io/dfe-engine#936 · Filter by author catinspace-au opened on Oct 21, 2026

• Manage Karpenter disruption windows and posture from the engine API and dfe-ui

  next-minor
  Feature

  hyperi-io/dfe-engine#924 · Filter by author catinspace-au opened on Oct 18, 2026

• XDR: ship sigma end to end in 2.2.2 (import, author, map, propagate, test)

  next-patch
  Task

  hyperi-io/dfe-engine#887 · Filter by author catinspace-au opened on Oct 14, 2026
  1

• The engine writes config keys the loader, receiver and transform-vrl drop unread

  next-patch
  Bug

  hyperi-io/dfe-engine#886 · Filter by author catinspace-au opened on Oct 14, 2026

• Sweep the ch/groups secrets orphaned before group users were cleaned up

  next-patch
  Task

  hyperi-io/dfe-engine#872 · Filter by author catinspace-au opened on Oct 14, 2026
  1

• Adaptive hunt schedule smoothing: drift rate-hunt phases to flatten ClickHouse load

  backlognext-minor
  Task

  hyperi-io/dfe-engine#864 · Filter by author catinspace-au opened on Oct 14, 2026
  1

• apps_sync_error never sees Argo refuse an Application

  next-patch
  Feature

  hyperi-io/dfe-engine#856 · Filter by author catinspace-au opened on Oct 13, 2026

• chore: move the keda-shim console tests off monkeypatch

  next-patch
  Task

  hyperi-io/dfe-engine#854 · Filter by author catinspace-au opened on Oct 13, 2026

• OIDC: pre-create external accounts with their provider instead of binding a pre-listed name to the first IdP

  next-patch
  Feature

  hyperi-io/dfe-engine#815 · Filter by author catinspace-au opened on Oct 11, 2026

• Changing a deployed source's table engine needs a table rebuild

  next-minor
  Feature

  hyperi-io/dfe-engine#752 · Filter by author catinspace-au opened on Oct 6, 2026

• Dev/test cost saver: idle and scheduled shutdown for the expensive services

  next-minor
  Feature

  hyperi-io/dfe-engine#748 · Filter by author catinspace-au opened on Oct 6, 2026

• hyperdx and culvert show 'not reporting': nothing scrapes them, and the telemetry name doesn't match

  next-patch
  Bug

  hyperi-io/dfe-engine#672 · Filter by author catinspace-au opened on Sep 30, 2026
  2

• fix: rotate the jwt signing key without logging everyone out (post-GA)

  next-patch
  Feature

  hyperi-io/dfe-engine#670 · Filter by author catinspace-au opened on Sep 30, 2026
  1

• Work out which fields each OIDC provider type needs, and validate them in the provider API

  next-patch
  Task

  hyperi-io/dfe-engine#651 · Filter by author kazmosahebi opened on Sep 29, 2026
  4

  

• Noisy-rule guard after GA: override, admin thresholds, daily budgets

  next-minor
  Feature

  hyperi-io/dfe-engine#624 · Filter by author catinspace-au opened on Sep 29, 2026
  3