Issues

• Confirming an externalProcessor forces an App Privacy collection declaration that may be false

  MissingLayer-BV/ShipLayer#22 · Filter by author canongun opened on Aug 21, 2026

• Exact-match on override finding id is untested; unmatched overrides are silent

  MissingLayer-BV/ShipLayer#20 · Filter by author canongun opened on Aug 21, 2026

• Purchase override intersects against a user-controlled evidence set

  MissingLayer-BV/ShipLayer#19 · Filter by author canongun opened on Aug 21, 2026

• Four instructions dropped rather than moved in the PR #15 SKILL.md rewrite

  MissingLayer-BV/ShipLayer#17 · Filter by author canongun opened on Aug 21, 2026

• No test asserts that literals in skills/** validate against the schema

  MissingLayer-BV/ShipLayer#16 · Filter by author canongun opened on Aug 21, 2026

• Hard-coded price detector: known evasions

  MissingLayer-BV/ShipLayer#14 · Filter by author canongun opened on Aug 21, 2026

• Closure-body leak in the literal-name Button { } label: { } path

  MissingLayer-BV/ShipLayer#13 · Filter by author canongun opened on Aug 21, 2026

• purchase.unavailable-source false-blocks a switch-case retry shape

  MissingLayer-BV/ShipLayer#12 · Filter by author canongun opened on Aug 21, 2026
  1

• ai-sharing.consent-action-language is defeatable by declaration padding

  MissingLayer-BV/ShipLayer#11 · Filter by author canongun opened on Aug 21, 2026

• localizedPriceSource is pinned to a const, so its gate is dead code

  MissingLayer-BV/ShipLayer#10 · Filter by author canongun opened on Aug 21, 2026