osiris · Issues· 45 open

/api/ai/overview has no rate limiting, unlike sibling analyze/briefing endpoints — shared Gemini key pool exhaustion

Nominatim integration likely breaches public usage policy and risks service blocking

https://github.com/simplifaisoul/osiris/issues/372

https://github.com/simplifaisoul/osiris/issues/372

map.

[Regression] Tor exit-node check still uses substring matching — #159 was closed Completed without any code change

[Regression] Country-risk index still uses substring country-code matching — #160 was closed Completed without any code change

[Regression] /api/health still always reports operational — #151 was closed Completed without any code change

[High] SCM Supplier Risk Overlay's fire and conflict signals are dead in every real deployment (hardcoded loopback URL)

[High] Conflict-zone events are plotted at fabricated coordinates derived from a hardcoded zone anchor, not the article's location

[Medium] Intel identifier sanitizer corrupts Unicode names and IPv6 addresses before lookup

[Medium] Intel resolver caches provider failures as successful empty entity graphs for 24 hours

[Medium] Intel sanctions refresh replaces a populated index with an unvalidated empty/malformed CSV result

[Medium] Default Compose deployment requires an undeclared external umami_default network

[Medium] SDK SSE stream leaks timers on disconnect and silently truncates the entity feed at 500