Back to milestones

R2026.4

Open

No due date

•Last updated Oct 23, 2026

11% complete

Reconcile schema drift between prod, migrations, and models
Chore
VariantEffect/mavedb-api#829 · opened on Aug 7, 2026 · R2026.4
1
Split database roles into owner, migrate, worker and api
Chore
VariantEffect/mavedb-api#827 · opened on Aug 7, 2026 · R2026.4
1
Work out which tables need RLS policies, and what they'll cost
Spike
VariantEffect/mavedb-api#832 · opened on Aug 7, 2026 · R2026.4
1
Write RLS policies for every guarded table as migrations
Chore
VariantEffect/mavedb-api#809 · opened on Aug 7, 2026 · R2026.4
Fail CI and startup when RLS can be bypassed or isn't enforcing
Chore
VariantEffect/mavedb-api#824 · opened on Aug 7, 2026 · R2026.4
Pilot: enable RLS on score_calibrations in staging
Chore
VariantEffect/mavedb-api#825 · opened on Aug 7, 2026 · R2026.4
Enable RLS on every guarded table
Chore
VariantEffect/mavedb-api#878 · opened on Sep 24, 2026 · R2026.4
Handle rows hidden by RLS on the write path
Chore
VariantEffect/mavedb-api#879 · opened on Sep 24, 2026 · R2026.4
Map RLS permission errors to client responses without leaking row data
Chore
VariantEffect/mavedb-api#880 · opened on Sep 24, 2026 · R2026.4
ClinVar control refresh can freeze the worker on a row lock
Bug
VariantEffect/mavedb-api#882 · opened on Sep 24, 2026 · R2026.4
Worker outbound calls have no timeout
Bug
VariantEffect/mavedb-api#883 · opened on Sep 24, 2026 · R2026.4
Run tests and local development under the production database roles
Chore
VariantEffect/mavedb-api#834 · opened on Aug 7, 2026 · R2026.4
Tell Postgres who is asking, on every transaction in a request
Chore
VariantEffect/mavedb-api#823 · opened on Aug 7, 2026 · R2026.4
Canary test and route completeness tripwire for permission leaks
Chore
VariantEffect/mavedb-api#810 · opened on Aug 7, 2026 · R2026.4
Count where the Python read filters disagree with RLS
Chore
VariantEffect/mavedb-api#835 · opened on Aug 7, 2026 · R2026.4
Propagate score set and experiment contributors to parent records
Feature
VariantEffect/mavedb-api#564 · opened on Nov 5, 2025 · R2026.4
Look up named entities with one get-or-404 helper, then check the action
Chore
VariantEffect/mavedb-api#816 · opened on Aug 7, 2026 · R2026.4
Add a lineage parameter so every listing handles superseded score sets the same way
Feature
VariantEffect/mavedb-api#705 · opened on Apr 13, 2026 · R2026.4
Make score set creation atomic so failed creation does not leave superseding drafts behind
Bug
VariantEffect/mavedb-api#759 · opened on May 27, 2026 · R2026.4
Stream /scores & /counts CSV responses (no row cap)
Feature
VariantEffect/mavedb-api#770 · opened on Jun 15, 2026 · R2026.4
Score set page 504s for score sets with about 500k variants
Bug
VariantEffect/mavedb-api#451 · opened on Jun 3, 2025 · R2026.4
Hoist per-row namespace resolution and batch the ClinVar fetch in CSV export
Chore
VariantEffect/mavedb-api#845 · opened on Aug 13, 2026 · R2026.4
Stream the public dump's NDJSON files into the archive
Feature
VariantEffect/mavedb-api#192 · opened on Apr 29, 2024 · R2026.4
1
Pre-resolve functional classification membership on the VA-Spec and NDJSON routes
Task
VariantEffect/mavedb-api#657 · opened on Feb 13, 2026 · R2026.4
CSV export returns 500 when a column is named accession or the variant is deleted mid-request
Bug
VariantEffect/mavedb-api#844 · opened on Aug 13, 2026 · R2026.4