Issues

• Kubelet API accepts unauthenticated clients (exec into any pod)

  cocoonstack/vk-cocoon#128 · Filter by author CMGS opened on Sep 30, 2026

• observability: resume-path evidence lookups are uncounted and a busy-create give-up emits no event

  cocoonstack/vk-cocoon#124 · Filter by author CMGS opened on Sep 29, 2026

• lifecycle: a late DHCP lease never lifts the ip-wait Failed

  cocoonstack/vk-cocoon#123 · Filter by author CMGS opened on Sep 29, 2026

• Record accepted startup-recovery risk: shared Pod annotation access

  cocoonstack/vk-cocoon#115 · Filter by author CMGS opened on Sep 27, 2026

• packaging: CapabilityBoundingSet=CAP_NET_RAW cannot run the cocoon/cocoon-macos children it execs

  cocoonstack/vk-cocoon#82 · Filter by author CMGS opened on Aug 30, 2026

• Restore registry snapshots directly to staging without tar import

  enhancement
  cocoonstack/vk-cocoon#64 · Filter by author CMGS opened on Aug 3, 2026