Contribution records credited to Bordeaux Metropole

Orchestra Workflow Engine

• Access, tenancy and credential boundaries the audit found open
  Mon, 09/21/2026 - 20:10
• No Workflows link in the Orchestra admin menu: the workflow list is reachable only by clicking the section title
  Mon, 09/21/2026 - 19:28
• Payment: a second checkout can open while the first is still live
  Mon, 09/21/2026 - 16:45
• Engine correctness, and the tests that did not pin it
  Mon, 09/21/2026 - 14:25
• Task surfaces: an unnamed bulk checkbox, bypassed guards, and lists that go stale
  Mon, 09/21/2026 - 14:10
• Cacheability and cost on paths that pay for nothing
  Mon, 09/21/2026 - 13:10
• Two tests assert on the text of a shipped file instead of on what the code does
  Mon, 09/21/2026 - 12:02
• Bring the documentation and the docblocks back in line with the code
  Mon, 09/21/2026 - 10:46
• Two recorded audit events cannot be switched off on the audit trail settings form
  Mon, 09/21/2026 - 10:33
• The redirect interaction never reaches its off-site destination: core answers the plain RedirectResponse with a 400
  Mon, 09/21/2026 - 09:32
• The deadline providers refuse nothing in the modeler: their settings validation reads a key the subform state cannot answer
  Mon, 09/21/2026 - 09:14
• A stale whole-entity token save() after a snapshot read can resurrect a token a concurrent worker already consumed
  Mon, 09/21/2026 - 08:35
• Describe the states the code can actually reach
  Sun, 09/20/2026 - 21:00
• Raise an incident for a parked step whose audience has emptied
  Sun, 09/20/2026 - 20:30
• Announce a guarded state transition, so cascades react to the change itself
  Sun, 09/20/2026 - 20:00
• Declare what the views handlers read, so the shipped views can be cached without going stale
  Sun, 09/20/2026 - 19:05
• Declare the current-step column's cacheability, and invalidate the tags at every guarded write
  Sun, 09/20/2026 - 17:40
• Take the metrics generator back to one version, and leave test files out of the architecture surface
  Sun, 09/20/2026 - 17:26
• Restore the ECA token bag by value, so an eca_event node gives back what it found under the names it borrows
  Sun, 09/20/2026 - 17:05
• Use the one metrics generator and the one job every module now shares
  Sun, 09/20/2026 - 12:40
• Prose, dead code and naming sweep from the pre-beta audit
  Sun, 09/20/2026 - 11:00
• Release a task whose holder can no longer act on it
  Sun, 09/20/2026 - 08:05
• Let the metrics job fail when the page is stale, and refresh the page it watched drift by 9,283 lines
  Sun, 09/20/2026 - 07:27
• Resolve a step's audience before parking, and raise an incident when it finds nobody
  Sat, 09/19/2026 - 22:30
• Warn when a second tenant exists with no tenant resolver installed
  Sat, 09/19/2026 - 21:45
• Write the module's own prose in American English
  Sat, 09/19/2026 - 21:19
• Add, edit and delete tenants from the Tenants list
  Sat, 09/19/2026 - 21:05
• Drop the tests that scan source files instead of exercising code, and retranslate two French strings
  Sat, 09/19/2026 - 20:56
• Take out the two upgrade paths: a pre-1.0 alpha is reinstalled, not upgraded
  Sat, 09/19/2026 - 20:00
• Extract the tests' recording logger into a shared trait
  Sat, 09/19/2026 - 19:55
• Measure the contrast of every stylesheet this project ships, and darken the one that reads under it
  Sat, 09/19/2026 - 18:51
• Assorted correctness and robustness findings from the pre-beta audit
  Sat, 09/19/2026 - 18:10
• Request limits warn about the state most sites should be in, and name their settings pages without linking them
  Sat, 09/19/2026 - 17:34
• Machine-name columns that lead twenty-seven index positions are stored as if they could hold any character
  Sat, 09/19/2026 - 13:09
• Let a plugin decide how two sites name the same person
  Sat, 09/19/2026 - 12:20
• Let a subprocess node choose who its child run belongs to
  Sat, 09/19/2026 - 09:52
• Let a stand-in read the run behind the work they cover
  Sat, 09/19/2026 - 08:08
• Replace the deprecated xpath() test helper with a form that works on both supported core versions
  Fri, 09/18/2026 - 21:10
• Scope the per-step participation read to the acting tenant, as the run-wide one already is
  Fri, 09/18/2026 - 20:00
• Say where a plugin subform's validation error goes, so the next one does not name it
  Fri, 09/18/2026 - 19:28
• Add an Orchestra Group submodule that staffs tasks from group membership
  Fri, 09/18/2026 - 18:38
• Set the interaction plugins' validation errors on the element so they reach the field
  Fri, 09/18/2026 - 17:10
• The same string has a different French in different catalogs, and the last import wins
  Fri, 09/18/2026 - 17:10
• Let a caller name the run it starts over the API, and a subprocess step name its child
  Fri, 09/18/2026 - 16:49
• Tests whose assertions do not pin the behaviour they name
  Fri, 09/18/2026 - 16:35
• Labels that only shipped configuration carries are never checked, and 24 of them are untranslated
  Fri, 09/18/2026 - 15:20
• Interfaces and docblocks that promise what the code does not do
  Fri, 09/18/2026 - 14:35
• Attribute a remote child run to the person who started the parent, by carrying their login
  Fri, 09/18/2026 - 13:03
• Per-viewer output rendered without the cacheability it depends on
  Fri, 09/18/2026 - 12:00
• Strings that cannot be translated, and the check that misses them
  Fri, 09/18/2026 - 10:45