Issues

• §3 / §5: ODIS should state where identity, decision, and credential components MUST NOT live relative to the agent

  cosai-oasis/ws4-odis#32 · Filter by author SnikSec opened on Oct 6, 2026

• L3-08 / 8.1 Safety / CC-01: Independent enforcement should require independent administration and off-host evidence

  cosai-oasis/ws4-odis#31 · Filter by author SnikSec opened on Oct 6, 2026

• L1-12 / 6.4: No rule for runtime-risk signal source unavailability or staleness

  cosai-oasis/ws4-odis#30 · Filter by author SnikSec opened on Oct 6, 2026

• 6.3 / L2-06: Monotonic attenuation cannot express a helper that holds authority the requester lacks

  cosai-oasis/ws4-odis#29 · Filter by author SnikSec opened on Oct 6, 2026

• 6.2 / 6.3 / L2-14: agent_id is asserted in the runtime credential rather than resolved through registration

  cosai-oasis/ws4-odis#28 · Filter by author SnikSec opened on Oct 6, 2026

• 6.2: Joining the dots from the Agent Runtime Credential Descriptor to an implementation

  cosai-oasis/ws4-odis#27 · Filter by author strideynet opened on Oct 6, 2026
  1

• ODIS-L1-02: Move Software Attestation requirement to Extended profile

  cosai-oasis/ws4-odis#26 · Filter by author strideynet opened on Oct 6, 2026
  1

• # §5.3 / L3-04, L3-05: Core requirements act on "sessions", but ODIS never defines a session or gives it an identifier

  router
  cosai-oasis/ws4-odis#25 · Filter by author terylt opened on Sep 30, 2026
  1

• §6.4 / L3-06: The policy decision response does not say what must happen when a decision cannot be enforced

  router
  cosai-oasis/ws4-odis#24 · Filter by author terylt opened on Sep 25, 2026
  6

• §5.3 / L3-02, L3-08: Core enforcement at the Tool Invocation boundary is not clearly defined

  router
  cosai-oasis/ws4-odis#23 · Filter by author terylt opened on Sep 24, 2026
  2

• §6.2 / §6.3: record_digest and attenuation_profile_ref need a named digest input

  bridge
  cosai-oasis/ws4-odis#22 · Filter by author imran-siddique opened on Sep 21, 2026
  2

• Where Agent Manifest, Agent Credentials and TRACE attach to ODIS objects

  passport
  cosai-oasis/ws4-odis#21 · Filter by author imran-siddique opened on Sep 21, 2026
  2

• Evidence requirements for independent cross-domain appraisal (ODIS-L1-11)

  passport
  cosai-oasis/ws4-odis#20 · Filter by author rithikha opened on Sep 18, 2026
  1

• Agent access requirements for proof-of-possession authentication (ODIS_L1-09)

  passport
  cosai-oasis/ws4-odis#19 · Filter by author rithikha opened on Sep 18, 2026

• Defining "identities" credential/evidence format for software artifacts (ODIS-L1-08)

  passport
  cosai-oasis/ws4-odis#18 · Filter by author rithikha opened on Sep 18, 2026
  1

• Registration architecture and holder-key revocation across federated systems (ODIS-L1-06)

  passport
  cosai-oasis/ws4-odis#17 · Filter by author rithikha opened on Sep 18, 2026
  1

• Clarifing identity persistence and credential validity across agent lifecycle changes (ODIS-L1-05)

  passport
  cosai-oasis/ws4-odis#16 · Filter by author rithikha opened on Sep 18, 2026
  6

• Binding approved software to the running agent instance (ODIS-L1-02/03)

  passport
  cosai-oasis/ws4-odis#15 · Filter by author rithikha opened on Sep 18, 2026
  5

• Does ODIS accept Agent Runtime Credentials that are available to an agent and model?

  passport
  cosai-oasis/ws4-odis#14 · Filter by author adeinega opened on Sep 17, 2026
  3

• Section 7.2 deployment patterns don't cover managed enterprise endpoints running unmodifiable third-party agent harnesses

  passportrouter
  cosai-oasis/ws4-odis#13 · Filter by author rohitratri opened on Sep 14, 2026
  3

• §6.3 / L3-07: Define task-purpose lineage invariant across cascaded delegation

  bridge
  cosai-oasis/ws4-odis#12 · Filter by author RavindraAnnam opened on Sep 13, 2026

• mise run install bypasses uv.lock and fresh clone fails mise run check

  cosai-oasis/ws4-odis#7 · Filter by author wangchauyan opened on Aug 24, 2026

• §6.1 / §6.2: Add agent_id uniqueness constraint — shared execution roles do not satisfy the requirement

  passport
  cosai-oasis/ws4-odis#6 · Filter by author szh opened on Aug 4, 2026
  2

• §6.2 / §3.1: Add verification_method and verifiability metadata for platform-provisioned credentials

  passport
  cosai-oasis/ws4-odis#5 · Filter by author szh opened on Aug 4, 2026
  1

• Making the ODIS Contract Harness vendor-neutral

  documentationenhancement
  Feature

  cosai-oasis/ws4-odis#2 · Filter by author santosomar opened on Jul 21, 2026
  3