See PHI873, which opens a discussion around broader authentication and signatures.

See PHI908 (et al?) which would like a maximum filesize limit for hosted repositories.

See PHI885, which requests timeouts on git fetch during working copy construction.

the message is sent from inside applyFinalEffects(), which is still inside the transaction

See PHI970, which identifies an issue with containerPHID not being populated correctly on a subset of buildables.

See PHI943. The bin/repository thaw --promote operation and/or the version bumping after a write can currently misbehave in the presence of disabled nodes with larger versions. When we increment the version, we should bump it past the largest version of any node, not just any enabled node.