Zach Daniel / Ash Project

Ash relationship parent(...) filter degrades to an IS NULL match when the parent field is unresolved, leaking scoped records

Ash.Actions.Aggregate authorizes an aggregate under one action but computes it under another

Ash.Policy.Authorizer returns records denied by a runtime read policy to any actor

Ash.update_many/4 atomic path skips resource policy authorization, allowing updates to forbidden records

ETS and Mnesia data layers overwrite an existing record on create instead of enforcing primary-key uniqueness

Ash.Reactor change step fails open, skipping a change when its where guard raises

Ash.Actions.Read.AsyncLimiter busy-spins a scheduler while awaiting slow async reads

Ash.Filter.Runtime materializes a combinatorial cross-product over to-many relationships, exhausting memory

Ash.Type.Union with :map_with_tag does not force the tag on dump, enabling tag confusion

Ash.Type ignores outer array constraints on nested {:array, {:array, type}} inputs