Issues

• [live_ui] build_render_assigns hardcodes __changed__: %{} — slot comprehensions don't re-evaluate on widget update

  The-Metagraph/ash_ui#160 · Filter by author ty13r opened on Jun 14, 2026

• [P3][Tier-2] LiveUIAdapter in-repo fallback interpolates attributes unescaped (audit B8)

  The-Metagraph/ash_ui#157 · Filter by author ty13r opened on May 28, 2026

• [P3][Tier-1] IUR adapter prop-fallback leaks internal attributes into props (audit B7)

  The-Metagraph/ash_ui#156 · Filter by author ty13r opened on May 28, 2026

• [P3][Tier-2] authorize? defaults to not is_nil(actor) — unsafe for non-LiveView callers (audit B6)

  The-Metagraph/ash_ui#155 · Filter by author ty13r opened on May 28, 2026

• [P2][Tier-1] ActionBinding.check_authorization is authentication-presence only (audit B5)

  The-Metagraph/ash_ui#154 · Filter by author ty13r opened on May 28, 2026
  2

• [P2][Tier-2] LiveUIAdapter.render routes through dev-only LiveUi.Tooling (audit B4)

  The-Metagraph/ash_ui#153 · Filter by author ty13r opened on May 28, 2026

• [P2][Tier-2] Bidirectional write path skips binding-level write authorization (audit B3)

  The-Metagraph/ash_ui#152 · Filter by author ty13r opened on May 28, 2026

• [P2][Tier-1] Authorization fails open: rescue->:ok / error->true in policy runtime (audit B2)

  The-Metagraph/ash_ui#151 · Filter by author ty13r opened on May 28, 2026

• [P1][Tier-2] Anonymous actor bypasses all resource policies (full CRUD) (audit B1)

  The-Metagraph/ash_ui#150 · Filter by author ty13r opened on May 28, 2026
  1

• Authority.create/2: support explicit :name opt for screen lookup

  The-Metagraph/ash_ui#143 · Filter by author ty13r opened on May 20, 2026
  1

• IUR hydration: expand_list_repeat doesn't expand repeat-marked children for :artifact_row or custom:* widget types

  The-Metagraph/ash_ui#114 · Filter by author ty13r opened on May 18, 2026
  2