All issues

Search results

DID: default getDidResolver() allows plain HTTP did:web fetches to loopback hosts (localhost, 127.0.0.1, 0.0.0.0)

Status: Open.

#223 In agentcommercekit/ack;

· byfor8 opened on Sep 21, 2026

ACK-ID: signed A2A messages carry no aud claim and verifyA2ASignedMessage ignores its did option

Status: Open.

#224 In agentcommercekit/ack;

· byfor8 opened on Sep 21, 2026

ACK-Pay: signed payment request tokens never expire (expiresAt is never enforced)

Status: Open.

#222 In agentcommercekit/ack;

· byfor8 opened on Sep 21, 2026

bug(ack-pay): paymentOptionSchema accepts an empty network string

Status: Open.

#219 In agentcommercekit/ack;

· kutluhaneth46 opened on Sep 18, 2026

Standing payment authority through intermediate and leaf grants

Status: Open.

#218 In agentcommercekit/ack;

· EfeDurmaz16 opened on Sep 17, 2026

Dispute evidence for agent payments (ext-disputes)

Status: Open.

#217 In agentcommercekit/ack;

· ak68a opened on Sep 16, 2026

bug(ack-id): controllerClaimSchema accepts empty id and controller strings

Status: Open.

#207 In agentcommercekit/ack;

· kutluhaneth46 opened on Sep 7, 2026

bug(ack-pay): paymentRequest.serviceCallback rejects DID URIs despite docs and sibling fields

Status: Open.

#205 In agentcommercekit/ack;

· kutluhaneth46 opened on Sep 7, 2026

fix(ack-pay): bind payment receipt issuer to the selected payment option receiptService

Status: Open.

#192 In agentcommercekit/ack;

· Kewe63 opened on Sep 2, 2026

fix(did): validate OIDC discovery jwks_uri targets during did:jwks resolution

Status: Open.

#191 In agentcommercekit/ack;

· Kewe63 opened on Sep 2, 2026

[Bug]: A2A response handshakes return request nonce instead of fresh reply nonce

Status: Open.

#174 In agentcommercekit/ack;

· Kewe63 opened on Aug 23, 2026

Integration example: verify third-party listings before an agent acts or pays

Status: Open.

#170 In agentcommercekit/ack;

· mattskowron-dev opened on Aug 18, 2026