Venus-consolidation: unified service on host venus for Vercel/Supabase background work

EVO-86 evolutiva Backlog high

Minimize non-actionable PM DMs at the ALERTER (not just app-side rows). Each alert DM = a PM turn = tokens (Elazar 2026-06-29). Scanner-probe silencing cut the warn ROWS fleet-wide (PLUTO-450/453/454 + mars/venus), but the applog/errscan digest still DMs each PM per tick incl non-actionable warn/info lines. RULE: alerter DMs a PM ONLY on level=error/fatal OR a genuinely NEW/unseen signature; NEVER re-DM known silent-tier (info/security) scanner shapes or recurring-benign signatures. Two legs: (1) shared errscan digest (owner bin-whey-cc, ~L244/L309 PM-digest render + the source view predicate) suppress non-error/non-novel; (2) per-project applog-pull digest (each PM's project) same predicate. Fleet-wide; all 3 PMs align in aro:evolutiva-management. Distinct from EVO-46 (count mislabel) though same render path.

EVO-47 evolutiva Backlog high

Fleet CR + client-questions surface (replace Google Sheets/Docs for client change-requests and our questions-to-client)

EVO-83 evolutiva In progress high

Push staged appEvents-standard + retired-identifiers commons edits once objection window closes (hub 07:58 / 10:58 UTC 2026-07-30)

EVO-85 evolutiva Backlog high

Account access-state (Activa/Desactivada), no-soft-delete-for-inactivity

EVO-81 evolutiva Backlog high

Supabase supautils force-grants PUBLIC EXECUTE on new public objects: fleet REVOKE-explicit standing pattern + live-exposure sweep

EVO-71 evolutiva Backlog high

SOP support-ticket API: full CRUD + private stakeholder comments + notify-list, per app

EVO-52 evolutiva Backlog high

Fleet server-side error/404 capture: client-side-only logging leaves 3 blind spots (non-JS clients, auth-redirect-before-render, API/server 404s) — push-tier errors can be silently dropped upstream of the applog rail

EVO-12 evolutiva In progress high

Render/server errors in appEvents (appLog): verify capture parity across pluto, mars, venus + fill gaps

EVO-4 evolutiva Backlog high

pluto EVO-19 leg: two-sink fix; UA-tagged causal proof (5x /login -> 5 phantom rows on 200) + matcher-excluded empty-route blindspot; ship

EVO-22 evolutiva Backlog high ↳ EVO-19

push-scope-guard write-side recovery tooling (captured-index disentangle)

EVO-87 evolutiva Backlog

Applog relay daemon conflates DATABASE with TENANT — no per-tenant routing on shared-DB co-tenants

EVO-84 evolutiva Backlog

Central patient DB + shared identity/auth hub in enamel (mars/pluto/venus consume) - item f

EVO-80 evolutiva Backlog

Weekly KPI/report email quality: stop noisy+wrong sends (recipients with no practicas or all-zero KPIs; some users get 4+ emails) — mars+venus+pluto

EVO-72 evolutiva Backlog

End-of-term xray-file retention + disposal policy (fleet)

EVO-65 evolutiva Deferred

Existing duplicate-account reconciliation: detect + merge users with >1 account already in prod (Elazar still finding dupes) — mars+venus+pluto

EVO-74 evolutiva In progress

└─ Document as durable person key (DNI/legajo/passport/CUIT); email+googleSub are rotatable credentials; build email-change re-link flow

EVO-82 evolutiva Backlog

└─ EVO-74 prevention: access-request flow must link-to-existing, not spawn a duplicate account (mars/pluto/venus)

EVO-79 evolutiva Backlog

Admin pending-items digest email (open support tickets + pending access requests + pending correcciones) to admin — mars+venus+pluto

EVO-75 evolutiva Backlog

Inactive / never-used user cleanup: identify users who never logged in or never used the app, decide disposition (archive vs exclude-from-comms) — mars+venus+pluto

EVO-73 evolutiva Backlog

DB: mandate createdAt insert-timestamp fleet-wide (updatedAt recommended)

EVO-69 evolutiva Backlog

Friction-telemetry action/category labeling hygiene (fleet)

EVO-63 evolutiva Backlog

Friction-log-driven UI fix campaign (fleet)

EVO-62 evolutiva Backlog

Audit-trail schema normalization (coverage + field-name naming), planned per-project

EVO-57 evolutiva Deferred

└─ Fleet audit: createdBy/At + deletedBy/At + changelog/archive coverage on every table

EVO-55 evolutiva Backlog

└─ Decide archived-PII retention/redaction policy (fleet)

EVO-60 evolutiva Deferred someday

Per-agent Postgres login roles for DB-layer attribution (Mars/Pluto/Venus)

EVO-56 evolutiva Backlog

Minimize demo-data technical debt fleet-wide

EVO-54 evolutiva Backlog

Cross-app nav-link normalization: one criteria for sidebar/navbar links per role in mars+pluto+venus

EVO-51 evolutiva In progress

Migration 042 (pluto applog-view-reshape) is designed + audit-PASS'd but HELD for fleet-lockstep GO — do NOT apply solo

EVO-49 evolutiva Backlog

Vercel + Supabase optimization — reduce Fluid Active CPU bill creep, eliminate dashboard misconfig, lower latency

EVO-36 evolutiva Backlog

Adopt PMs-24/7 + spawn-workers-on-demand RAM-reduction model (brainstorm bs-mqor18api1w)

EVO-26 evolutiva Backlog

PM DB-fed triage loop (bs-mqotdmmk6b5): PMs run a DB-fed ticket/triage queue + dispatch fixes in each app's own aro. Elazar greenlit per pm-venus relay 2026-06-22. Per-app legs tracked as children.

EVO-29 evolutiva Backlog

└─ Triage-loop leg: PLUTO — ACTIVE. Tickets (net-new surface) + access; live app. pm-pluto dispatching in aro:pluto.

EVO-32 evolutiva Backlog high

└─ Triage-loop leg: MARS — per its own (mars already has both surfaces: tickets + access).

EVO-31 evolutiva Backlog

└─ Triage-loop leg: VENUS — DEFERRED (authorized by Elazar 'venus can wait'). On un-defer, carries prereqs: canonicalizeEmail + createAuthUserSafe.

EVO-30 evolutiva Backlog

applog-listen venus rail: probe-IP/UA filter — drop alerts for rows originating from venus host IP (91.99.136.171) or UA matching curl/* or *-coder-*/audit. Catches self-test 500s + probe 404s. pm-venus pilot 2026-06-22; table to fleet error-alerting standard.

EVO-28 evolutiva In progress

applog-listen venus rail: burst-dedup for opaque client errors (Script error. / Failed to fetch) — N same-UA+session within 60s → 1 alert+count; isolated 1-offs → log-only. pm-venus amend 2026-06-22 (mars cross-app: Samsung Internet crash-loop found in this class). Supersedes blanket log-only.

EVO-27 evolutiva Backlog

applog-listen rail: alert '×N' count inflated, decoupled from actual DB insert count

EVO-24 evolutiva Backlog

venus: add TABLET device class to telemetry deviceType (bs-mqmt93jl25b)

EVO-11 evolutiva Backlog

applog-pull digest: sampleRoute display bug — shows latest row route for all xN occurrences, implies all N at that route. Fix: qualify as latest@route or list distinct routes.

EVO-18 evolutiva Backlog

general-pm role + mgmt-aro topology decision (bs-mqolw0w7gcg/bs-mqom01jn5ww): keep general-pm THIN (cross-project convener + EVO-* umbrella owner + router/scribe + authoritative bwi writer); NO bulk .md; depth=pull-on-demand; tiny PM-owned routing map ~1-2k/app (kill-on-drift); pm-mars=fleet-pattern-lead w/ pluto per-app-divergence carve-out; api-image per-topic invite; single-app incidents stay in project aro. FORK resolved CONDITIONALLY on hub non-quorum capability: YES->one-aro non-quorum lurker / NO->two-aro fallback. GATES: (1) Elazar nod on routing-map + mars pattern-lead + lurker model; (2) pm-llmmsgsrv feasibility verdict on member-non-quorum (Q sent). Nothing structural moves until both clear.

EVO-25 evolutiva Backlog

Hostinger image-storage monitoring (api-images)

EVO-58 evolutiva Todo low

api-images: reconcile 67 orphan images in flat uploads/2026/ with no mars/pluto DB owner — decide trash vs reassign

EVO-2 evolutiva Backlog low

api-images: immediate-erasure endpoint (GDPR/right-to-erasure) — DELETE /{id}?purge=1 or /erase/{id} that skips _trash + unlinks immediately, tenant-scoped, audit-logged.

EVO-3 evolutiva Backlog low

venus: rename telemetry field widthBand→viewportBand (bs-mqmscr4k3wh)

EVO-10 evolutiva Backlog low

errscan.sh digest mislabels signature-rollup occurrence count as a per-path count -> false per-path warn spikes (e.g. 'page_not_found x42 @/email/sendgrid.env' when that path has 2 rows; 42 = aggregate env-shape warn occurrences across N paths under one message-derived signature). Lane 1 (bin-whey, errscan.sh ~L244/L309): relabel so count reads as signature rollup + path as a SAMPLE ('[42x total] page_not_found e.g. action=/email/sendgrid.env'). Lane 2 (per-project db: vAppAlertsRecent/vAppErrorsRecent): expose distinctPaths so display can render '42x / 7 paths'. Affects all 3 apps (shared errscan + EVO-12 scanner down-tier shape). Triage-noise only, no data/security. Low-pri.

EVO-46 evolutiva Backlog someday