Issues

• [security/medium] MCP tools/call returns raw exception strings to clients — path/credential leak

  backlog-skillcat:securityeffort:sphase-2sev:medium
  LucasSantana-Dev/hitgate#69 · Filter by author LucasSantana-Dev opened on Jun 27, 2026

• [bug/high] ragcore modules import sibling config via sys.path hack instead of ragcore.config

  backlog-skillcat:bugeffort:mphase-1sev:high
  LucasSantana-Dev/hitgate#68 · Filter by author LucasSantana-Dev opened on Jun 27, 2026

• [ci/medium] eval.yml runs test_determinism standalone then re-runs it inside pytest tests/

  backlog-skillcat:cieffort:xsphase-2sev:medium
  LucasSantana-Dev/hitgate#67 · Filter by author LucasSantana-Dev opened on Jun 27, 2026

• [ci/medium] publish.yml pins pypa/gh-action-pypi-publish to floating @release/v1 tag

  backlog-skillcat:cieffort:xsphase-2sev:medium
  LucasSantana-Dev/hitgate#66 · Filter by author LucasSantana-Dev opened on Jun 27, 2026

• [ci/medium] check.sh writes to hardcoded /tmp paths — concurrent overwrites

  backlog-skillcat:cieffort:xsphase-2sev:medium
  LucasSantana-Dev/hitgate#65 · Filter by author LucasSantana-Dev opened on Jun 27, 2026

• [bug/medium] llamaindex_retriever annotation references unimported Sequence/Mapping

  backlog-skillcat:bugeffort:xsphase-2sev:medium
  LucasSantana-Dev/hitgate#64 · Filter by author LucasSantana-Dev opened on Jun 27, 2026

• [docs/high] CONTRIBUTING.md and regenerate-baseline.sh reference old repo name evidence-first-rag

  backlog-skillcat:docseffort:xsphase-1sev:high
  LucasSantana-Dev/hitgate#63 · Filter by author LucasSantana-Dev opened on Jun 27, 2026

• [docs/high] ARCHITECTURE.md references eval/ paths renamed to hitgate/ in ADR-0007

  backlog-skillcat:docseffort:xsphase-1sev:high
  LucasSantana-Dev/hitgate#62 · Filter by author LucasSantana-Dev opened on Jun 27, 2026

• [DIAGNOSTIC] nDCG / graded-relevance as a dashboard metric (not a gate)

  circularity-caveatdeferred:ADR-0037effort:m
  LucasSantana-Dev/hitgate#51 · Filter by author LucasSantana-Dev opened on Jun 22, 2026
  1

• [DIAGNOSTIC] Difficulty-tier segmentation of Hit@K (instrumentation only)

  circularity-caveatdeferred:ADR-0037effort:s
  LucasSantana-Dev/hitgate#50 · Filter by author LucasSantana-Dev opened on Jun 22, 2026
  1

• [DIAGNOSTIC] Surface existing contamination-audit overlap in the standard report

  circularity-caveatdeferred:ADR-0037effort:s
  LucasSantana-Dev/hitgate#49 · Filter by author LucasSantana-Dev opened on Jun 22, 2026
  1

• [CALIBRATE] PPI gap-estimation against a small labeled anchor set

  circularity-caveatdeferred:ADR-0037effort:m
  LucasSantana-Dev/hitgate#47 · Filter by author LucasSantana-Dev opened on Jun 22, 2026
  1

• [HARDEN] Natural-language query naturalization in generate.py

  circularity-caveatdeferred:ADR-0037effort:m
  LucasSantana-Dev/hitgate#46 · Filter by author LucasSantana-Dev opened on Jun 22, 2026
  1

• [ESCAPE] Optional labeled-holdout channel: --validate-against + two-channel report

  circularity-caveatdeferred:ADR-0037effort:m
  LucasSantana-Dev/hitgate#45 · Filter by author LucasSantana-Dev opened on Jun 22, 2026
  1