forced-red harness used the PRODUCTION mountpoint and its cleanup trap umount+rmdir'd it - recovered, no data loss, needs mechanical isolation

OPS-261 agent-ops Backlog high

~/.claude/file-history/ mints versioned plaintext copies of every edited dotenv - 24 credential copies on venus, named by no hygiene rule in the fleet

OPS-253 agent-ops Backlog high

eq backend unbuilt: hub.mjs has no /eq_* routes + no elazar_questions table — eq CLI POSTs to non-existent endpoints (/eq_ls returns not_found). chat-duo Pending panel reads elazar_questions, so no Elazar question can ever surface. Implement hub-side /eq_add /eq_ls /eq_show /eq_answer /eq_dismiss /eq_stale + elazar_questions schema per eq-spec.md

OPS-49 agent-ops Backlog high

monitor-context-cc DOES NOT EXIST and owns 33 open rows (7 p1, 1 inProgress) - while its actuator still compacts the whole host and global CLAUDE.md tells every agent to send objections to it

OPS-244 agent-ops Backlog high

kpi.pensanta.com: a plain sortable agent table over Postgres - nothing fancy, and it replaces the current page

OPS-224 agent-ops Backlog high

ONE telemetry lane: keep Postgres agent_telemetry, retire the sqlite/kpi-t pipeline and the ccusage lane - and edit the CLAUDE.md rule FIRST or it regrows

OPS-223 agent-ops Backlog high

gitcommit.sh --only ADDS paths instead of RESTRICTING the commit to them, so the fleet strict-repo rule does not deliver what it promises

OPS-222 agent-ops Backlog high

Plugin hygiene v2 - rollout completion (lezama + deferred items)

OPS-58 agent-ops Backlog high

└─ Plugin hygiene v2 - lezama host portion: telegram uninstall + host-global lean flip + movilba per-agent enables (see parent 459)

OPS-59 agent-ops Backlog high

Remote-cluster Supabase creds in shared ltm.md - attribution leak, VENUS-350 sibling of OPS-191

OPS-209 agent-ops Backlog high

whey /data-venus: adopt lezama's .automount shape, or route to the mount-unit owner

OPS-201 agent-ops Backlog high

getpage.py: fetch a URL past UA-checking WAFs and emit html/txt/md/yaml (replaces cancelled getmethaturl API)

OPS-193 agent-ops Backlog high

└─ Global CLAUDE.md: one-line pointer to getpage.py (blocked on OPS-193 shipping)

OPS-194 agent-ops Backlog

PII in PM-triage NOTIFY payloads (venus+pluto), live since Jun/Jul, needs Elazar policy call

OPS-192 agent-ops Backlog high

gitpush.sh split by stack: retire the 2408-line monolith, per-stack scripts, bump-after-gate, deploy health poll

OPS-173 agent-ops Backlog high

└─ gitpush-prestage-abort-test.sh: absorb_policy_handshake's branch has not run since gitpush.sh v5.0, warning 7x per run into nothing

OPS-279 agent-ops Backlog

└─ Flip GITPUSH_RETIRED on by default: the cross-host cutover the stub rehearses

OPS-278 agent-ops Backlog

Shared mutable state: agents contend over the same files with no isolation (sh.git checkout, CLAUDE.md, commons, pm/)

OPS-156 agent-ops Backlog high

└─ sh.git: ~/.local/bin becomes a deployed versioned artifact, not a live editable checkout

OPS-158 agent-ops Backlog high

└─ sh.git: one working tree per agent (worktree or clone), branch per change - decide and implement

OPS-157 agent-ops Backlog high

└─ 4be883c deleted 11 files under an auto-commit message; 1 proven collateral, 1 more in the same class

OPS-282 agent-ops Backlog

└─ sh.git ~/.local/bin on lezama: same parent shape, evidenced version-string collision 2026-08-30

OPS-169 agent-ops Backlog

└─ maintainer registry: 4.1MB uncheckpointed WAL, ~30 hand-made backups with orphan sidecars, no verified backup rail

OPS-168 agent-ops Backlog

└─ jobreg.tsv: 5 agents across 3 hosts write one shared file in sh.git

OPS-167 agent-ops Backlog

└─ whey: ~/.claude/*.md symlinks share OPS-157/158 sh.git shape

OPS-166 agent-ops Backlog

└─ Survey whey for shared-mutable-file contention between agents (incl. CLAUDE.md, commons .md, pm/)

OPS-160 agent-ops Backlog

└─ systemd --user unit dir on lezama: shared namespace, no collision evidenced, ownership already lives in maintainer registry

OPS-170 agent-ops Backlog low

Agent name parsing: forbid dashes inside role/project (single-token parts only)

OPS-72 agent-ops Backlog high

backup-whey.service: NOPASSWD sudo for cryptsetup+mount in /etc/sudoers.d/backup-whey (failing since run #23 2026-05-08T14:22 - sudo prompts for rob pw under systemd no-tty); owner: os-whey-cc-w

OPS-32 agent-ops Backlog high

memory-budget over-budget warning: route shared-file footprint breaches to project PM with escalation chain

OPS-57 agent-ops Backlog high

lezama host-dark recurrence: root-cause + harden against full-dark (2nd occurrence; died 2026-06-01 18:03 ART, clean cliff)

OPS-80 agent-ops Backlog high

└─ Validate the installed recovery software (failed twice): identify unit, check prior-boot status+journal (fired/tried/failed?), confirm dead-kernel/power is below userland scope; validate reverse-tunnel health EXTERNALLY from whey, never trust the ssh_r_active self-report flag

OPS-82 agent-ops Backlog high

└─ Reboot forensics: journalctl -b -1 -k (panic trace=crash / empty=power loss) + full -b -1 (OOM?), dmesg|tail-50, df -h, last -x reboot, smartctl -a

OPS-81 agent-ops Backlog high

Global PreToolUse enforcement hook: deny non-llmmsg-srv-team agents Edit/Write to /opt/llmmsg-srv/{hub,bridge,scripts/lib}/** + deny Bash curl/http to hub privileged endpoints (extend existing PATH-script-block hook). Elazar approved ship - recurring: agents edit hub code/curl API instead of MCP tools.

OPS-79 agent-ops Backlog high

dbcaba backup gaps: dev backup targets wrong db + gdrive backup-mirror broke 2026-05-16 (dbcaba has no auto-backup today)

OPS-76 agent-ops Backlog high

Sensitive-files backup to backupYes LUKS USB (whey-state-backup.sh) — maintainer nw-whey-cc. DONE: restarted timer (dead since 06-17 reboot, 9d gap) + added ~/.local/bin/.llmmsg-env+.agent-name coverage (v1.1.0, verified). OPEN/Elazar: exclude ltm.md from gdrive leg (holds creds); mars.env NOPASSWD read-rule; off-whey LUKS keyfile+passphrase (SPOF).

OPS-25 agent-ops Backlog high

scrp- convention migration: fleet-wide rename + aro:hosts-status creation (coordinated pass, bin-whey-cc coordinates)

OPS-21 agent-ops Backlog high

cc-context-monitor path-B/wind-down DM mis-targeting: db-mars-cc remediation delivered to nw-venus-cc

OPS-9 agent-ops Backlog high

attach-tmux.sh nests tmux/stacks extra login shell on switch-client path (recurring, 'fixed 5x')

OPS-10 agent-ops Backlog high

Recover lost 2026-05-26 evolutiva-commons patch: §Shared MD Flow + §Versioning + §Boundaries B1/B4/B5 — check llmmsg message DB for original content

OPS-12 agent-ops Backlog high

Vercel MCP connection lost project scope - Class-A PTD build/runtime log reads are unavailable fleet-wide

OPS-293 agent-ops Backlog

Does pluto's .gitpush-pre.sh read ONLY_PATHS? The v5.6 producer shipped fleet-wide; the consumer is per-repo and unchecked

OPS-290 agent-ops Backlog

Generalise terra's atomic migration-stem claim engine into sh.git with per-repo config

OPS-289 agent-ops Backlog

file-history minting is only stoppable host-wide: no per-path exclusion exists, and a file's FIRST snapshot is exempt from eviction forever

OPS-283 agent-ops Backlog

Add retention/pruning to backup-gdrive-to-hdd (backupYes disk)

OPS-276 agent-ops Backlog

backup-whey-to-ssd.sh: ledger success field does not cover teardown/release_mount outcome

OPS-259 agent-ops Backlog

in-place edits to the live PATH checkout: rule violated twice in a day by its own author - needs a mechanism, not stronger wording

OPS-256 agent-ops Backlog

jobreg: 15 rows fleet-wide are sense=review, so 15 timers are unmonitored - lezama is 9 of 23

OPS-255 agent-ops Backlog

└─ interval_min is the wrong model for a calendar-restricted timer

OPS-263 agent-ops Backlog

└─ OPS-255 sub-item: whey 8 jobreg drift items (6 unregistered, 2 orphaned)

OPS-260 agent-ops Backlog low

whey-seat guard checks that a grant exists, never that it covers the row - existence is not scope

OPS-251 agent-ops Backlog

wi close writes TWO completed events per invocation, and closing an already-done row appends a third - OPS-221 has 3

OPS-243 agent-ops Backlog

A relaunched cc session can come up BLOCKED on the dev-channels picker - a wave verified by session count reports success on a dead pane

OPS-242 agent-ops Backlog

cc.sh /exit kills tmux session outright, not just the claude process

OPS-237 agent-ops Backlog

statusline 'shim vX' reads package.json on disk, not the running shim, so every agent displays current while 22 of 26 run stale code

OPS-235 agent-ops Backlog

jobreg-registry-reconcile adjudications file degrades to zero suppression silently, so previously-ruled items return as fresh findings

OPS-230 agent-ops Backlog

Codex usage feed is STALE, not missing - repair the collector cadence so codex is tracked alongside claude

OPS-225 agent-ops Backlog

jobreg per-host split: confirm v2.0 check output on venus + lezama, then delete jobreg.tsv from sh.git with a read-back on all three

OPS-220 agent-ops Backlog

Read-only git history primitive for sh.git (git-history-deleted.sh)

OPS-219 agent-ops Backlog

Venus Postgres records the failure side of a credential change and nothing of the change itself: log_statement=none, log_connections=off, track_commit_timestamp=off

OPS-217 agent-ops Backlog

long-lived cc session authenticates with a pre-rotation telemetry credential and spools silently

OPS-216 agent-ops Backlog

5653 metrics-spool rows from 2026-07-02/03 are unwritable under the per-agent role - needs a grant-or-discard decision, and nobody owns it

OPS-215 agent-ops Backlog

wi rename is last-writer-wins AND does not log the old title: removing a dangerous instruction from an item destroys the evidence of it

OPS-212 agent-ops Backlog

gitpush.sh: an aborted AHEAD_ACK gate leaves the version bump COMMITTED, so a burned version becomes a real commit that publishes nothing

OPS-208 agent-ops Backlog

Registry capability claims live in prose, so nothing can query or age them

OPS-206 agent-ops Backlog

gpc_secret_gate matches only KEYWORD=value, so a plaintext password inside a scheme://user:pass@host URI is invisible to it

OPS-205 agent-ops Backlog

gitpush.sh Markdown-Only test scopes to the commit it creates, not to the range it publishes

OPS-204 agent-ops Backlog

Add a timestamp to the automated -ca inbox nudge text (both pokers)

OPS-202 agent-ops Backlog

Upgrade whey (HP 240 G8) hardware: RAM to 2x16GB, SATA SSD to NVMe, WLAN/BT card if compatible

OPS-200 agent-ops Backlog

Idle -cc agents have no wake path: both nudges gate on -ca

OPS-198 agent-ops Backlog

Retune the KPI large-ARO drift flag: it fires on normal traffic

OPS-199 agent-ops Backlog

flock -n guards exit silently on a stale holder: no detector, no failing unit

OPS-197 agent-ops Backlog

maintainer registry: 47 active seats name agents with no hub presence

OPS-196 agent-ops Backlog

maintainer-registry: registry_writer attributes writes to the wrong agent

OPS-195 agent-ops Backlog

shared-write: ~/.codex/config.toml has no isolation, one confirmed collision this session

OPS-163 agent-ops Backlog ↳ OPS-159

Sweep: exit codes and status values that are documented and consumed but never emitted (found via hub-db-backup exit 7)

OPS-162 agent-ops Backlog

Retire nw-lezama-cc identity

OPS-155 agent-ops Backlog ↳ KPI-45

bin-lezama canonical naming decision

OPS-154 agent-ops Backlog ↳ KPI-45

back up /usr/local/share/doc/whey/*.md (timer audit + ccs-log-rotate removal docs) - not covered by any existing backup job

OPS-151 agent-ops Backlog

whey cron/systemd timer audit: review all not-yet-analyzed jobs

OPS-141 agent-ops Backlog

└─ Audit evolutiva-restore-drill@{mars,pluto,venus,enamel}.timer

OPS-145 agent-ops Backlog

└─ Audit gdrive-mount-health.timer + backup-gdrive-to-hdd.timer interaction

OPS-143 agent-ops Backlog

└─ Audit backup family: backup-whey, whey-state-backup(-weekly), backup-gdrive-to-hdd, api-images-backup, evolutiva-backup@{mars,pluto,venus,enamel}, venus-backup-pull-(daily|weekly)

OPS-142 agent-ops Backlog

└─ Audit sys-check.timer + context-monitor-whey.timer output/value

OPS-148 agent-ops Backlog low

└─ Audit ccusage-daily-kpi.timer + claude-usage-watch.timer resource cost vs value

OPS-147 agent-ops Backlog low

└─ Audit rkhunter-scan-whey.timer output + purge dead stock rkhunter cron files

OPS-146 agent-ops Backlog low

└─ Audit fwupd-refresh.timer vs system-update.sh firmware step

OPS-144 agent-ops Backlog low

└─ Decide on cosmetic rkhunter cron.daily/weekly cleanup + apt-daily mask follow-through

OPS-150 agent-ops Backlog someday

└─ Verify e2scrub_all.timer, fstrim.timer, plocate-updatedb.timer, dpkg-db-backup.timer, logrotate.timer are actually succeeding

OPS-149 agent-ops Backlog someday

Agent subprocess spawning: harness paths closed, OS/detached paths still open on venus

OPS-140 agent-ops Backlog

context-monitor: confirm compacts from the jsonl compact_boundary, not from send-keys rc

OPS-135 agent-ops Backlog

ccs bare-name fix: end-to-end fresh-spawn proof still unrun on lezama

OPS-132 agent-ops Backlog

cumulative_usage() lacks the id-dedup token-usage-collect.sh has: my cumulative token numbers overcount streamed turns

OPS-117 agent-ops Backlog

Scheduled security-scan ownership (rkhunter/clamav) + fleet-wide systemd/cron job registry with heartbeat monitoring on venus

OPS-97 agent-ops Backlog

bwi git-sync dead since 2026-05-06: decide whey-only policy vs resume DB commits+pushes to GitHub; venus agents routing through whey meanwhile

OPS-65 agent-ops Backlog

Normalize agent names + folder/.aro/.agent-name layout: fix hyphenated project-names in cc-names, KEEP host suffix -w/-v/-l (it identifies cross-host agents, e.g. proxy-<proj>-cc-w); rename coder->coder01/coderhelp->coder02/db->db01/db2->db02 via claude-mv per-project (agent-driven, not manual); build drift-normalizer script. whey+venus now, lezama later.

OPS-86 agent-ops Backlog

pull cc-memory-sweep.sh v1.2 (sh.git 20ce2fe) onto whey + lezama

OPS-71 agent-ops Backlog

memlint-cron.sh: replace email escalation with llmmsg DM to host maintainer (nw-{host}-cc)

OPS-70 agent-ops Backlog

Review evolutiva backup policy + space (2h/30d/gdrive, ~1.75GB steady-state; context: WI #509)

OPS-69 agent-ops Backlog

memory-lint compute_footprint over-walks CLAUDE.md chain - ignores claudeMdExcludes

OPS-61 agent-ops Backlog

bisync watchdog: alert when gdrive-bisync.service fails > 2 consecutive runs

OPS-74 agent-ops Backlog

memory-lint scope bug: gitpush pre-hook runs memory-lint.sh with no arg → scans ALL ~/.claude/projects/*/memory dirs → one project's memory hygiene blocks every other project's pushes. Cross-project DoS. Fix: scope to current-project memory dir only (resolve from PWD or .agent-name). Surfaced 2026-05-17 by coder-mars-cc-29923 blocked on llmmsg-srv-cc's dirty memory dir.

OPS-40 agent-ops Backlog

└─ memory-lint A/B/D/E: gitpush-pre.sh per-project scope (arg, not glob) + non-blocking warn-only + drop §11 heading-dup from per-push + never touch CLAUDE.md. Mars+pluto+venus .gitpush-pre.sh mirror. Ratified by Elazar -30088.

OPS-42 agent-ops Backlog high

Fleet audit: every agent's cwd has local .agent-name matching registered name

OPS-73 agent-ops Backlog

Stale /compact cron jobs: agents leave CronCreate one-shots from prior sessions (shows as 361d scheduled task on exit). Investigate root cause and implement reliable cleanup — auto-purge stale crons on session start or prevent duplicate creation. Reported repeatedly; needs durable fix.

OPS-93 agent-ops Backlog

Fleet model audit: many agents still pinned Opus 4.7; move to default-tracks-latest (verify default=Opus 4.8 + future models) or pin Opus 4.8; review model choice per agent by role

OPS-8 agent-ops Backlog

db-size-monitor blind to /var/lib: add to scan roots (currently /home/rob /opt /srv /rtshared). The llmmsg-srv hub DB (/var/lib/llmmsg-srv/v2.sqlite 38M live + llmmsg.sqlite 30M dead-v1) never appears in size snapshots - exactly the DB Elazar worries about. Also surfaces probe-table growth (host_probes 32k rows) for retention review.

OPS-1 agent-ops Backlog

Migrate all whey-hosted maintenance/monitoring to venus: systemd timers, cron jobs, push/pull scripts, and any monitoring that currently runs on whey (bin-whey-cc / nw-whey-cc lanes) must move to venus equivalents. Whey is not 24/7 and must not be depended on for scheduled or continuous ops. Audit all whey services, identify venus gaps, migrate lane by lane. bin-whey-cc becomes contributor/reviewer only; venus agents own runtime.

OPS-94 agent-ops Backlog

attach-tmux.sh: list OFFLINE agents too; selecting one launches its ccs session and attaches you to it

OPS-7 agent-ops Backlog

db-mba-l/CLAUDE.md: live PROD svc_nextjs password in tracked git file. No rotation (Elazar 2026-06-29). When revisited: git history rewrite or rotation. Also de-bloat 23.6k schema doc → move to docs/ read-on-demand.

OPS-95 agent-ops Backlog

whey↔lezama global ~/.claude/CLAUDE.md §-level reconcile: lezama missing entire sections whey has (was missing ## Collaborate — added 2026-06-14; also lacks Permission, Communication, others). Audit all 3 hosts' global CLAUDE.md section sets, decide canonical fleet-neutral set, mirror missing sections per-host. Surfaced during the log-review-autonomy global-line rollout.

OPS-14 agent-ops Backlog

cc-context-monitor.timer on venus stalls intermittently (Trigger: n/a, no next fire scheduled) after normal runs — causes ~45min gaps in scrp-context_monitor-venus heartbeat, false DOWN alerts from whey. Observed 4x on 2026-06-21. Root cause unknown (systemd timer drift? service runtime overrun? OnCalendar+Persistent interaction?). Needs bin-whey-cc investigation.

OPS-23 agent-ops Backlog

venus: align scrp- units to bs-mqmr47bwkk4 naming convention

OPS-22 agent-ops Backlog

Rename whey monitor units to bs-mqmr47bwkk4 convention: ctx-monitor-whey.{timer,service}, sender scrp-ctx_monitor-whey, target aro:hosts-status

OPS-24 agent-ops Backlog

Audit odaia agent roster — 15 cwds under ~/Documents/personal/odaia looks too many; consolidate, then properly scope google-workspace MCP per surviving agent (currently re-added to all 15 per-project as a stopgap 2026-06-05).

OPS-90 agent-ops Backlog

Fleet google-workspace real-usage sweep on venus+lezama: grep each host's transcripts for actual mcp__google-workspace__ tool_use (not installs/mentions); add per-project where used. whey done: odaia(heavy), pluto-pm(light), nw-whey(1 gmail).

OPS-91 agent-ops Backlog

scrp-monitor-agent-idle.sh: why= is the shell's own re-derivation, not the classifier's reason - emit the upstream reason as an additional field

OPS-274 agent-ops Backlog low

CLAUDE.md credits scrp-monitor-agent-idle.sh --verbose with a cap meter it does not have: the value is the host statusline, absent on whey

OPS-273 agent-ops Backlog low

A .agent-name declares cc=scrp-journal-digest-venus - the harness KEY says agent while the NAME says script; the file has two consumers with opposite subjects

OPS-271 agent-ops Backlog low

DECISION FOR ELAZAR: adopt unlock(successor:@next) for the push gate, or keep the plain release

OPS-269 agent-ops Backlog low

Fix two stale hub.mjs lock_events comments: the 317-rows figure and the :930 KPI-view claim

OPS-258 agent-ops Backlog low

wi event has no 'correction' eventType, so corrections land under whatever type each author picks

OPS-248 agent-ops Backlog low

llmmsg-srv notify path: drop to= from the notification meta object (~20.4 chars/msg) - decide on reversibility, there is no in-band render check

OPS-232 agent-ops Backlog low ↳ OPS-228

llmmsg-srv drain/register path carries no redelivery marker although priorNotifiedId is in-process at drain time - a re-served message reads as fresh traffic

OPS-236 agent-ops Backlog low ↳ OPS-228

hub: no drained_at timestamp, so stub-to-drain latency is unmeasurable - add one column to cursors

OPS-233 agent-ops Backlog low ↳ OPS-228

scrp-pane-tail.sh - one trimmed pane-read primitive, because the grep everyone reaches for saves nothing and the borders are the payload

OPS-231 agent-ops Backlog low

same shared-checkout shape as sh.git exists at /opt/llmmsg-srv, but already mitigated (strict+hunk-gate) — evidence for OPS-157/158

OPS-165 agent-ops Backlog low ↳ OPS-159

shared-write: maintainer-agents.sqlite has convention-only write protection, no OS/app-level gate

OPS-164 agent-ops Backlog low ↳ OPS-159

cc alias in ~/.local/bin shadows /usr/bin/cc (C compiler) fleet-wide

OPS-131 agent-ops Backlog low