Issues

• [Bug] gemini-enterprise: gem4gov says Knowledge Graph must be disabled for FedRAMP High, IL4, and IL5, but leaves Private Knowledge Graph on

  BugFramework - FedRAMP HighFramework - FedRAMP ModerateFramework - IL4Framework - IL5Gemini - EnterpriseGemini - GovernmentLevel of Effort - LowPriority - MediumScope - BlueprintScope - Fast
  Bug

  google/stellar-engine#402 · Filter by author JohnHales opened on Nov 5, 2026

• [Documentation] gemini-enterprise: access_end_hour is inclusive, so a window documented as 9 AM - 5 PM stays open through 5:59 PM

  DocumentationGemini - EnterpriseLevel of Effort - LowPriority - LowScope - BlueprintScope - Module
  google/stellar-engine#401 · Filter by author JohnHales opened on Nov 5, 2026

• [Feature Request] Add YAML folder and project factory stage with Day-2 GitOps policy change management

  EnhancementFramework - FedRAMP HighFramework - FedRAMP ModerateFramework - IL4Framework - IL5Level of Effort - HighPriority - MediumScope - FastScope - ModuleSecurity
  Feature

  google/stellar-engine#400 · Filter by author aghassemlouei opened on Nov 5, 2026

• [Feature Request] Support GCP-native Zero Trust access and tag-based microsegmentation across FAST networking and security

  EnhancementFramework - FedRAMP HighFramework - FedRAMP ModerateFramework - IL4Framework - IL5Level of Effort - HighPriority - MediumScope - BlueprintScope - FastScope - ModuleSecurity
  Feature

  google/stellar-engine#399 · Filter by author aghassemlouei opened on Nov 5, 2026

• [Documentation] docs/ddg.md: the header and Variables tables use inline HTML, which Google Docs now shows as raw text

  DocumentationLevel of Effort - LowPriority - Low
  Task

  google/stellar-engine#397 · Filter by author JohnHales opened on Nov 3, 2026

• [Bug] 2-networking-a-fedramp: the NVA return routes still omit the proxy-only subnets, so traffic from a regional managed load balancer's proxies cannot get replies from the internet

  BugFramework - FedRAMP HighFramework - FedRAMP ModerateGemini - EnterpriseLevel of Effort - LowPriority - HighScope - BlueprintScope - FastScope - Module
  Bug

  google/stellar-engine#396 · Filter by author JohnHales opened on Nov 3, 2026

• [Feature Request] Gemini Enterprise CMEK index pre-warming, companion seed data store, declarative CmekConfig, and readiness probe

  EnhancementGemini - EnterpriseGemini - GovernmentLevel of Effort - MediumPriority - HighScope - BlueprintScope - Fast
  Feature

  google/stellar-engine#390 · Filter by author aghassemlouei opened on Oct 31, 2026
  

• [Feature Request] Support regulated and non-regulated multi-tenancy within a single GCP Organization

  EnhancementLevel of Effort - HighPriority - MediumScope - Fast
  Feature

  google/stellar-engine#388 · Filter by author johnlakeee opened on Oct 30, 2026
  

• [Documentation] 0-bootstrap: document Google producer organization ID inline for compute.restrictVpcPeering

  DocumentationLevel of Effort - LowPriority - LowScope - Fast
  Task

  google/stellar-engine#385 · Filter by author aghassemlouei opened on Oct 29, 2026
  1

• [Enhancement] blueprints/il5, fedramp-high: scope project-wide IAM bindings to resources, wire CMEK, and restrict firewall targets

  EnhancementFramework - FedRAMP HighFramework - IL5Level of Effort - MediumPriority - MediumScope - BlueprintSecurity
  Feature

  google/stellar-engine#374 · Filter by author aghassemlouei opened on Oct 28, 2026

• [Bug] blueprints/il5, fedramp-high: fix broken Terraform references, service account ID length limits, and GitLab HTTP listener

  BugFramework - FedRAMP HighFramework - IL5Level of Effort - MediumPriority - HighScope - BlueprintSecurity
  Bug

  google/stellar-engine#373 · Filter by author aghassemlouei opened on Oct 28, 2026

• [Bug] modules/access-context-manager, beyondcorp: evaluate all access level conditions and enforce endpoint verification

  BugFramework - FedRAMP HighFramework - IL5Level of Effort - LowPriority - MediumScope - ModuleSecurity
  Bug

  google/stellar-engine#372 · Filter by author aghassemlouei opened on Oct 28, 2026

• [Bug] fast/stages-aw/3-security, scripts: fix cross-env KMS admin grant, VPC-SC dry-run status, and script input handling

  BugFramework - FedRAMP HighFramework - IL5Level of Effort - LowPriority - HighScope - FastSecurity
  Bug

  google/stellar-engine#371 · Filter by author aghassemlouei opened on Oct 28, 2026

• [Bug] fast/stages-aw/2-networking: fix spoke host_project_ids output, PSC project reference, and NGFW template settings

  BugFramework - FedRAMP HighFramework - IL5Level of Effort - LowPriority - HighScope - FastSecurity
  Bug

  google/stellar-engine#370 · Filter by author aghassemlouei opened on Oct 28, 2026

• [Bug] fast/stages-aw/0-bootstrap, 1-resman: fix custom firewall constraint bypass, state bucket CMEK, and tenant folder IAM

  BugFramework - FedRAMP HighFramework - IL5Level of Effort - LowPriority - HighScope - FastSecurity
  Bug

  google/stellar-engine#369 · Filter by author aghassemlouei opened on Oct 28, 2026

• [Feature Request] Fix the tflint recommended preset findings and enforce the full preset

  EnhancementLevel of Effort - MediumPriority - LowScope - BlueprintScope - FastScope - Module
  Feature

  google/stellar-engine#321 · Filter by author digitalresistor opened on Oct 20, 2026

• [Feature Request] Replace modules/cloud-run-v2-se with the upstream cloud-run-v2 module

  EnhancementFramework - FedRAMP HighLevel of Effort - LowPriority - LowScope - BlueprintScope - Module
  Feature

  google/stellar-engine#320 · Filter by author digitalresistor opened on Oct 20, 2026

• [Feature Request] Sync the repository tooling under tools/ from upstream Cloud Foundation Fabric

  DocumentationEnhancementLevel of Effort - MediumPriority - MediumScope - Module
  Feature

  google/stellar-engine#319 · Filter by author digitalresistor opened on Oct 20, 2026
  1

• [Feature Request] Sync the modules from upstream Cloud Foundation Fabric and keep them current

  DocumentationEnhancementLevel of Effort - HighPriority - MediumScope - Module
  Feature

  google/stellar-engine#308 · Filter by author digitalresistor opened on Oct 20, 2026

• [Feature Request] stellar CLI for validated, guided deployments of the DDG stages

  EnhancementLevel of Effort - HighPriority - MediumScope - Fast
  Feature

  google/stellar-engine#306 · Filter by author digitalresistor opened on Oct 20, 2026

• [Feature Request] No research blueprint family — the README names universities as a target audience, every blueprint is FedRAMP High, FedRAMP Moderate or IL5

  EnhancementLevel of Effort - HighPriority - LowScope - Blueprint
  Feature

  google/stellar-engine#239 · Filter by author WandLZhang opened on Sep 13, 2026
  4

  

• [Feature Request] Remove Source Repo references and modules and replace with SSM

  EnhancementLevel of Effort - HighPriority - MediumScope - BlueprintScope - FastScope - Module
  Feature

  google/stellar-engine#198 · Filter by author Calvin-Cheng1 opened on Aug 20, 2026
  2

  

• [Feature Request] No FedRAMP Moderate blueprint family — the platform supports FRM but every workload blueprint is still FedRAMP High or IL5 only

  EnhancementFramework - FedRAMP ModerateLevel of Effort - HighPriority - MediumScope - Blueprint
  Feature

  google/stellar-engine#192 · Filter by author JohnHales opened on Aug 17, 2026

• [Feature Request] Create a blueprint for SCC Notifications for NIST 800_53 R5 Controls in Security Command Center

  EnhancementLevel of Effort - MediumPriority - LowScope - BlueprintSecurity
  Feature

  google/stellar-engine#188 · Filter by author woodham1 opened on Aug 12, 2026

• [Feature Request] Automated Enforcement of Sharing Artifacts

  EnhancementLevel of Effort - MediumPriority - LowProject ManagementScope - BlueprintScope - FastSecurity
  Feature

  google/stellar-engine#80 · Filter by author aghassemlouei opened on Jun 1, 2026