Issues

• Share one Finding type across the enforcement and audit logs, with a derived identity

  enhancementneeds-triage
  gemaraproj/gemara#534 · Filter by author jpower432 opened on Oct 27, 2026

• [Proposal] Promote Policy to stable

  enhancementneeds-triage
  gemaraproj/gemara#529 · Filter by author jpower432 opened on Oct 26, 2026

• Treat OSCAL as the canonical serialization where an OSCAL model exists

  enhancementneeds-triage
  gemaraproj/gemara#514 · Filter by author mraml opened on Oct 7, 2026
  1

• RACI should go further

  bug
  gemaraproj/gemara#508 · Filter by author robmoffat opened on Sep 30, 2026
  1

• Environment requirements for evaluation methods

  enhancement
  gemaraproj/gemara#502 · Filter by author astrogilda opened on Sep 25, 2026
  3

• Publish JSON Schema release asset and notify downstream repositories

  automationenhancementhelp wanted
  gemaraproj/gemara#500 · Filter by author jpower432 opened on Sep 17, 2026
  2

  

• AssessmentFinding.log references a non-existent EvaluationLog entry

  bug
  gemaraproj/gemara#499 · Filter by author jpower432 opened on Sep 17, 2026
  2

  

• Preserve CUE-only semantic constraints in generated OpenAPI

  bug
  gemaraproj/gemara#498 · Filter by author jpower432 opened on Sep 17, 2026
  1

  

• Define or retire unanchored confidence-level values

  question
  gemaraproj/gemara#497 · Filter by author jpower432 opened on Sep 17, 2026 · Breaking Changes / Deprecation Under Consideration

• Define a record for validating assessment methods

  enhancement
  gemaraproj/gemara#496 · Filter by author jpower432 opened on Sep 17, 2026
  

• Record the executor for each AssessmentLog

  enhancement
  gemaraproj/gemara#495 · Filter by author jpower432 opened on Sep 17, 2026
  

• Define a log correlation model for multi-source evaluation

  enhancement
  gemaraproj/gemara#494 · Filter by author jpower432 opened on Sep 16, 2026

• Let a control import assessment requirements from another catalog instead of restating them

  enhancement
  gemaraproj/gemara#492 · Filter by author eddie-knight opened on Sep 16, 2026

• #Evidence cannot record who produced the payload or how it was obtained

  enhancement
  gemaraproj/gemara#491 · Filter by author jpower432 opened on Sep 15, 2026

• Define interoperable evidence digest semantics

  question
  gemaraproj/gemara#490 · Filter by author jpower432 opened on Sep 15, 2026
  1

• Attribution and coverage gaps that break under challenge and at scale

  enhancement
  gemaraproj/gemara#488 · Filter by author trevor-vaughan opened on Sep 14, 2026
  13

• Gemara + in-toto: audit-layer attestation and trust boundaries

  gemaraproj/gemara#486 · Filter by author jpower432 opened on Sep 12, 2026
  1

  

• EvaluationLog cannot record which accepted verification method produced a result

  enhancement
  gemaraproj/gemara#485 · Filter by author jpower432 opened on Sep 12, 2026
  2

• Add media-type and size to EvidenceMapping for large referenced evidence

  gemaraproj/gemara#472 · Filter by author trevor-vaughan opened on Sep 1, 2026
  4

  

• Bind evidence retention to the policies that require it

  enhancement
  gemaraproj/gemara#471 · Filter by author trevor-vaughan opened on Sep 1, 2026
  3

• Add optional FAIR-style quantification to #Risk (Layer 3)

  Stale
  gemaraproj/gemara#456 · Filter by author xnasusx opened on Aug 10, 2026
  6

• Customizing Import Applicability Levels

  enhancementStale
  gemaraproj/gemara#436 · Filter by author eddie-knight opened on Jul 10, 2026
  5

• Modeling AI-agent threats as a Gemara threat catalogue: capability granularity and a small slice to validate

  gemaraproj/gemara#422 · Filter by author eeee2345 opened on Jun 13, 2026
  5

• [Question] Should we support Capability Profiles?

  questionStale
  gemaraproj/gemara#419 · Filter by author jpower432 opened on Jun 11, 2026
  5

• Create a MIGRATION.md

  documentationStale
  Task

  gemaraproj/gemara#372 · Filter by author jpower432 opened on Mar 27, 2026 · Post v1 Documentation
  2