April 17, 2026

[julietshen]

We're having our bi-weekly virtual working group call this Friday at 1830–1930 UTC!

• Google Meet
• #osprey in the ROOST Discord
• Discord event series

Proposed discussion topics:

• Outstanding PRs
• Osprey issue triage (vulnerabilities and feature work)
• Interesting features to upstream
• Adopter questions/topics
• Any additional contributor topics
• Please feel to comment below with any additional agenda items or discussion topics! See you there!

[julietshen]

Belated notes:

• Osprey issues and vulnerabilities
  • Dependabot CVEs
    • Discussed the risk of automatic updates and clarified that the Osprey team reviews each dependabot flag to assess whether an update is needed
  • Open PRs
    • Need to break down the scope of druid abstraction into smaller issues (ie. clickhouse PR)
    • Vinay Rao to create more corresponding issues and a doc providing more context
      • Need to make changes so UDFs/etc don’t assume Druid is downstream
      • Pluggable interface with no assumptions of what’s downstream
      • Plugging in whatever you want (ie. Clickhouse)
• Potential features to upstream / roadmap
  • Shadow mode for rules needs time to think through how it would work
    • Need to think about stateful services and how backtesting would work
  • UI work (rules management in the UI - be able to see rules that are firing + dormant without going to github. Eventually be able to author)
    • LLM-powered chat with Osprey to do complex investigations, flag anomalies and suggested rules
  • A plugin system already works, could add another layer that lets people plug in an LLM of their choice
• Challenges in upstreaming or making contributions may include the lack of a test environment
  • Part of our SDLC is building out a test suite for ROOST’s projects
  • Could use Jetstream (already JSON formatted) as the data source for testing