Issues

• feature: run Claude Managed Agents tool execution in MOCA sandboxes, with Cortex as the worker's egress/credential/audit proxy

  rossoctl/moca#813 · Filter by author mrsabath opened on Nov 13, 2026

• control-plane: POST /v1/sandboxes answers 500 for a sandbox that exists when its provenance append fails

  rossoctl/moca#806 · Filter by author webchang opened on Nov 13, 2026
  

• vmpool: TestDeferredReapOpensTheGateAtTheBarrierNotAfterTheReap fails intermittently (the test's select races two ready channels)

  rossoctl/moca#805 · Filter by author webchang opened on Nov 13, 2026
  

• harness: turn-registry's 'renew never settles' test fails intermittently at the lease boundary (abort lands at leaseMs)

  rossoctl/moca#801 · Filter by author webchang opened on Nov 13, 2026
  1

  

• egress: connect_tunnel_idle_deadline fails intermittently in CI (conn_cap on the second CONNECT)

  rossoctl/moca#783 · Filter by author webchang opened on Nov 12, 2026
  

• feature: Self service and docs around sbx sandbox egress

  enhancement
  rossoctl/moca#779 · Filter by author esnible opened on Nov 12, 2026

• SBX0: count sandbox TTL as idle time, not from creation

  enhancement
  Feature

  rossoctl/moca#770 · Filter by author pdettori opened on Nov 12, 2026

• Let a benchmark turn off prompt and gateway caching for repeatable turns (a question)

  rossoctl/moca#754 · Filter by author webchang opened on Nov 12, 2026
  

• Let admins set template quotas per subject, and reject a registered build after the fact

  rossoctl/moca#748 · Filter by author webchang opened on Nov 12, 2026
  

• Let users create sandbox templates self-serve, gated by a machine-checked policy

  rossoctl/moca#737 · Filter by author webchang opened on Nov 12, 2026
  

• Let a Moca Pi session choose a sandbox template

  rossoctl/moca#731 · Filter by author webchang opened on Nov 12, 2026
  

• Retry a command refused before it started; exit 75 when out of retries

  rossoctl/moca#728 · Filter by author webchang opened on Nov 12, 2026
  1

  

• ghostunnel TLS sidecars log a handshake error every 5 s from the TCP probe

  rossoctl/moca#724 · Filter by author webchang opened on Nov 12, 2026
  

• SH_IDENTITY_PROVIDER: a mistyped variable name is silently ignored

  rossoctl/moca#723 · Filter by author webchang opened on Nov 12, 2026
  

• Lease mode (#706) isn't reachable through the API yet: what's the plan for the control-plane part?

  rossoctl/moca#722 · Filter by author webchang opened on Nov 12, 2026
  

• build-snapshot.sh: check_lease_support logs nothing on success

  rossoctl/moca#721 · Filter by author webchang opened on Nov 12, 2026
  

• Deploy shell tests stop on macOS (BSD sed in #701's OIDC cases; two bash 3.2 stops)

  rossoctl/moca#720 · Filter by author webchang opened on Nov 12, 2026
  2

  

• oidc: bound outstanding login starts per source, not just in total

  rossoctl/moca#716 · Filter by author galmasi opened on Nov 11, 2026

• microvm worker: "busy: queue full" refusals are unlogged, and a burst of more than 16 refusals or aborts drops the relay connection

  rossoctl/moca#705 · Filter by author pdettori opened on Nov 10, 2026

• mocactl: login failures hide the control plane and the API error; no way to capture failure details

  enhancement
  rossoctl/moca#700 · Filter by author esnible opened on Nov 9, 2026

• Epic: P6 async fan-out — replace the KEDA leaf-worker (Archetype A) removed by #691

  enhancement
  rossoctl/moca#686 · Filter by author pdettori opened on Nov 5, 2026
  1

  

• Decide deliberately: should up's agent-config files be pushed to the sandbox? (gitignoring them in #677 changed it by side effect)

  question
  rossoctl/moca#683 · Filter by author mrsabath opened on Nov 3, 2026

• SBX0.2b egress credentials: deferred follow-ups

  rossoctl/moca#653 · Filter by author pdettori opened on Oct 28, 2026

• remote-worker: vmpool test follow-ups from the #647 review (host-memory no-eviction, single-batch eviction, parser seams)

  rossoctl/moca#649 · Filter by author pdettori opened on Oct 28, 2026

• Give moca-provisioner a read-only Redis ACL user

  rossoctl/moca#626 · Filter by author moonlight16 opened on Oct 27, 2026