Cada proyecto serializa sus propios pushes y ninguno serializa contra los otros: cuatro gates de pre-push en 4 vCPUs llevaron a venus a load 47 y ningun proyecto pudo publicar

EVO-97 evolutiva Done urgent

EPIC: move app email drains off Supabase pg_cron to venus systemd timers, keep an authenticated relay for transport

EVO-93 evolutiva Blocked high

supautils force-grants EXECUTE on new functions to PUBLIC/anon/authenticated despite default-privilege revocation - every Evolutiva CREATE FUNCTION needs an explicit same-migration REVOKE, and no commons file says so

EVO-114 evolutiva Done high

UPDATE OF keys on the statement SET list, not final NEW: every final-row-invariant trigger in the fleet using it is blind to a neighbouring trigger's rewrite

EVO-123 evolutiva Done high

api.pensanta.com RSTs a FRACTION of connects while serving others: not listener loss, not load, upstream of PHP - a per-account connection limiter nobody can measure

EVO-103 evolutiva Blocked high

api-images deploy manifest: inc/idempotency.php absent from RUNTIME_FILES (fatal 500 on every POST), plus two pre-existing require-order bugs that made every prior deploy serve 500s

EVO-122 evolutiva Done high

Venus-consolidation: unified service on host venus for Vercel/Supabase background work

EVO-86 evolutiva Done high

└─ EVO-86: unschedule pg_cron jobs 15/16 and drop the venus_cron_drain_bearer Vault secret, AFTER the host leg is verified

EVO-109 evolutiva Done

└─ EVO-86: install and arm the two venus-crontick@ user timers on host venus

EVO-108 evolutiva Done

evolutiva-emaildrain@.service exists on one disk: untracked, unsymlinked, no registry row - and it is now the only thing sending enamel's and terra's mail

EVO-96 evolutiva Done high

nw-venus repo has no git remote: the emaildrain + gdrive-auth-check units are version-controlled but NOT off-disk recoverable

EVO-112 evolutiva Backlog high

Email drain health check treats ok:false as success - fix the EVO-94 template

EVO-110 evolutiva Done high

EVO-93: templated venus systemd timer that drains an app's email outbox over its bearer route

EVO-94 evolutiva Backlog high

Minimize non-actionable PM DMs at the ALERTER (not just app-side rows). Each alert DM = a PM turn = tokens (Elazar 2026-06-29). Scanner-probe silencing cut the warn ROWS fleet-wide (PLUTO-450/453/454 + mars/venus), but the applog/errscan digest still DMs each PM per tick incl non-actionable warn/info lines. RULE: alerter DMs a PM ONLY on level=error/fatal OR a genuinely NEW/unseen signature; NEVER re-DM known silent-tier (info/security) scanner shapes or recurring-benign signatures. Two legs: (1) shared errscan digest (owner bin-whey-cc, ~L244/L309 PM-digest render + the source view predicate) suppress non-error/non-novel; (2) per-project applog-pull digest (each PM's project) same predicate. Fleet-wide; all 3 PMs align in aro:evolutiva-management. Distinct from EVO-46 (count mislabel) though same render path.

EVO-47 evolutiva Done high

Render/server errors in appEvents (appLog): verify capture parity across pluto, mars, venus + fill gaps

EVO-4 evolutiva Done high

Push staged appEvents-standard + retired-identifiers commons edits once objection window closes (hub 07:58 / 10:58 UTC 2026-07-30)

EVO-85 evolutiva Done high

Fleet roster and model/effort policy: retire pm-*-cc, coder holds PM, Sonnet 5 on the 02 seats, coder03 as coder-plus-auditor, /clear handoff with an idle guard

EVO-101 evolutiva Backlog high

Split terra onto its own Supabase project - PLAN ONLY, no build, no migration until Elazar sees the plan

EVO-100 evolutiva Backlog high

Fleet CR + client-questions surface (replace Google Sheets/Docs for client change-requests and our questions-to-client)

EVO-83 evolutiva In progress high

Un rol de dump sin BYPASSRLS produce un backup cuyo auth.users restaura VACIO y no falla en el momento del dump: verificar el credencial de cada lane de backup

EVO-98 evolutiva Done high

Automate the api-images operator-log read (.api-images.log)

EVO-92 evolutiva Done high

EVO-93: resolve ownership of VENUSINF-3/16/17 and decide the transport shape given port 25 is blocked

EVO-95 evolutiva Backlog high

Fleet-wide Gmail dot/plus normalization: block duplicate accounts at the DATA LAYER (Mars+Pluto+Venus)

EVO-45 evolutiva Done high

global ~/.claude/CLAUDE.md HOT/COLD split to cut per-turn token load fleet-wide

EVO-44 evolutiva Done high

gdrive bisync down since ~May 16 (whey<->venus) — venus agents loading 2-week-stale evolutiva shared .md rules (missing WI#450 + A+B + any ratified change since May 16); fleet correctness/drift risk. Fix = repair rclone bisync (maintainer territory), then re-measure per-agent preload vs true current files.

EVO-43 evolutiva Done high

Trim auto-loaded context for mars/evolutiva sessions: evolutiva-commons.md (5.3k) + mars-commons.md (3.6k) + mars/CLAUDE.md (2.1k) + mars MEMORY.md (3.8k) = ~14.8k. Target <=8k total per-session auto-load. Editorial trim, Evolutiva PM executes. Detection side is WI 444 (memory-lint token alarm, 8k line). Surfaced by Elazar 2026-05-21 from a researcher-mars-cc /memory dump (~17k total).

EVO-42 evolutiva Done high

Email drain: kill ~288/day cron no-ops (Tier 0 EXISTS-guard) + DB-native trigger-wake (Tier 1)

EVO-70 evolutiva Done high

Account access-state (Activa/Desactivada), no-soft-delete-for-inactivity

EVO-81 evolutiva Backlog high

Supabase supautils force-grants PUBLIC EXECUTE on new public objects: fleet REVOKE-explicit standing pattern + live-exposure sweep

EVO-71 evolutiva Backlog high

sexo: add 'No especificado' opt-out fleet-wide (keep required)

EVO-67 evolutiva Done high

Fleet lint matchBrace bug: no-silent-failure guard undercounts broken sites (destructured params / Promise generic returns)

EVO-53 evolutiva Done high

SOP support-ticket API: full CRUD + private stakeholder comments + notify-list, per app

EVO-52 evolutiva Backlog high

Solo-agent initiative: unified fleet protocol + named driving maintainer

EVO-50 evolutiva Done high

applog-listen rail robustness: IPv4 force + catch-up + heartbeat

EVO-5 evolutiva Done high

Fleet applog-listen repoint: LEG-2 = project-aro post (not 1:1 DM)

EVO-13 evolutiva Done high

└─ ayudarg: applog posts to aro:ayudarg + Elazar receives (LEG-2 verify); re-fire canonical test row b3de98a6 post-rollout

EVO-17 evolutiva Done high

└─ venus: applog posts to aro:venus + Elazar receives (LEG-2 verify)

EVO-14 evolutiva Done high

└─ mars: applog posts to aro:mars + Elazar receives (LEG-2 verify)

EVO-15 evolutiva Done high

└─ pluto: applog posts to aro:pluto + Elazar receives (LEG-2 verify)

EVO-16 evolutiva Done high

Fleet server-side error/404 capture: client-side-only logging leaves 3 blind spots (non-JS clients, auth-redirect-before-render, API/server 404s) — push-tier errors can be silently dropped upstream of the applog rail

EVO-12 evolutiva In progress high

api-images tenant isolation: key->tenant binding, scoped serve/delete, per-tenant storage + stats, _trash TTL, server-side EXIF strip, backup (closes cross-tenant IDOR)

EVO-1 evolutiva Done high

EVO-12 regression: captureServer404 in not-found boundary fires on EVERY page view (false page_not_found rows fleet-wide)

EVO-19 evolutiva Done high

└─ pluto EVO-19 leg: two-sink fix; UA-tagged causal proof (5x /login -> 5 phantom rows on 200) + matcher-excluded empty-route blindspot; ship

EVO-22 evolutiva Done high

└─ ayudarg EVO-19 leg: pull captureServer404 out of not-found boundary; two-sink (catch-all + [id] throw-site capture); verify valid routes stop writing page_not_found

EVO-20 evolutiva Done high

└─ mars EVO-19 leg: two-sink fix; by-route 20x/login=1 floor likely higher under UA-tag; ship on body=(a) confirm

EVO-23 evolutiva Done high

└─ venus EVO-19 leg: two-sink fix (pull capture out of not-found boundary); corrected probe shows 200 GET /login wrote action=404/level=error/alert=true row firing real alert+email; demonstrated pollution -> ship

EVO-21 evolutiva Done high

Cross-app nav-link normalization: one criteria for sidebar/navbar links per role in mars+pluto+venus

EVO-51 evolutiva Blocked

api-images: off-box backup of uploads/ with a REHEARSED restore - 2.64GB exists in exactly one place, and it is the precondition for the first ?purge=1 caller

EVO-121 evolutiva Backlog

sqlite-safe-backup row-count bracket cannot bound a non-monotonic table - a transient lock row deleted the hub backup

EVO-120 evolutiva Canceled

404 telemetry: genuine-bad-route is returned for routes that exist, so the row sends triage after a missing route that is not missing

EVO-111 evolutiva Done

applog-listen rail: alert '×N' count inflated, decoupled from actual DB insert count

EVO-24 evolutiva Blocked

applog-pull digest: sampleRoute display bug — shows latest row route for all xN occurrences, implies all N at that route. Fix: qualify as latest@route or list distinct routes.

EVO-18 evolutiva Done

venus: add TABLET device class to telemetry deviceType (bs-mqmt93jl25b)

EVO-11 evolutiva Canceled

Trailing-newline URL 404s reach real users: a pasted link with %0A is fetched by a link-preview crawler and then clicked by a human

EVO-106 evolutiva Done

DB: mandate createdAt insert-timestamp fleet-wide (updatedAt recommended)

EVO-69 evolutiva Done

EVO-91 retired /api/app-version fleet-wide but never registered it, and probe-curl.sh still documents it as the usage example

EVO-105 evolutiva Backlog

Vercel MCP read path is dead for this lane: list_projects returns zero for a team that demonstrably holds projects, so every env-var question is unanswerable

EVO-104 evolutiva Backlog

Support API: record acting agent on every write (traceability) + per-agent API keys

EVO-102 evolutiva Backlog

Existing duplicate-account reconciliation: detect + merge users with >1 account already in prod (Elazar still finding dupes) — mars+venus+pluto

EVO-74 evolutiva Backlog

└─ EVO-74 prevention: access-request flow must link-to-existing, not spawn a duplicate account (mars/pluto/venus)

EVO-79 evolutiva Backlog

└─ Document as durable person key (DNI/legajo/passport/CUIT); email+googleSub are rotatable credentials; build email-change re-link flow

EVO-82 evolutiva Backlog

└─ EVO-74 mars: schema-anchor check + read-only dupe candidate query

EVO-76 evolutiva Done

└─ EVO-74 venus: schema-anchor check + read-only dupe candidate query

EVO-78 evolutiva Done

└─ EVO-74 pluto: schema-anchor check + read-only dupe candidate query

EVO-77 evolutiva Done

Fleet sweep: authz gate on a side-effecting function call in a FROM clause is not a gate - the function's INSERT fires before the enclosing WHERE

EVO-99 evolutiva Backlog

push-scope-guard write-side recovery tooling (captured-index disentangle)

EVO-87 evolutiva Backlog

Friction-telemetry action/category labeling hygiene (fleet)

EVO-63 evolutiva Backlog

Friction-log-driven UI fix campaign (fleet)

EVO-62 evolutiva Backlog

Adopt PMs-24/7 + spawn-workers-on-demand RAM-reduction model (brainstorm bs-mqor18api1w)

EVO-26 evolutiva Backlog

└─ BUILD spawn-agent.sh + reaper (EVO-26 productionization; Elazar greenlit 2026-06-22). One-command on-demand worker spawn (task launch-arg'd) + PTD-gated external teardown. KEY CONSTRAINTS: tmux->ccs DIRECT via tmux-ccs.sh, NO extra terminal layer (Elazar caveat; extra PID=orphan bug); full -cc agent name (bare double-registers); external teardown only (agents can't self-/exit); /unregister SINGULAR {agent:x} per call (array form returns missing_agent), clean both -cc + bare rows; TTL hang-reaper must hub-deregister; reuse per-app agent dirs; shared-tree flock for mars/pluto. Script in ~/Documents/terminal/sh/ (shared, notify bin-whey per sh.git); PMs EXECUTE, bin OWNS+versions. Inputs from venus pilot EVO-33.

EVO-34 evolutiva Done high

└─ EVO-26 VENUS PILOT TEST (Elazar greenlit 2026-06-22): prove spawn-on-demand end-to-end on venus. PM spawns db+coder+audit via tmux-ccs.sh direct+launch-arg; db pulls 5 most-recent user logins; coder trivial edit (comment/line-move); audit verifies; commit via gitpush.sh; EXTERNAL teardown of all 3 (agents cannot self-/exit — reaper send-keys/kill-session + hub-deregister). Runs in aro:venus. Falsifiable proof: 5 logins + diff + audit verdict + commit sha + 3 confirmed deregistrations.

EVO-33 evolutiva Done high

└─ venus: adopt two-layer gitpush guard (strict --only + per-repo flock) per bs-mqoxiw8ptby

EVO-35 evolutiva Done

PM DB-fed triage loop (bs-mqotdmmk6b5): PMs run a DB-fed ticket/triage queue + dispatch fixes in each app's own aro. Elazar greenlit per pm-venus relay 2026-06-22. Per-app legs tracked as children.

EVO-29 evolutiva Backlog

└─ Triage-loop leg: PLUTO — ACTIVE. Tickets (net-new surface) + access; live app. pm-pluto dispatching in aro:pluto.

EVO-32 evolutiva Backlog high

└─ Triage-loop leg: MARS — per its own (mars already has both surfaces: tickets + access).

EVO-31 evolutiva Backlog

└─ Triage-loop leg: VENUS — DEFERRED (authorized by Elazar 'venus can wait'). On un-defer, carries prereqs: canonicalizeEmail + createAuthUserSafe.

EVO-30 evolutiva Backlog

Vercel + Supabase optimization — reduce Fluid Active CPU bill creep, eliminate dashboard misconfig, lower latency

EVO-36 evolutiva Backlog

Admin pending-items digest email (open support tickets + pending access requests + pending correcciones) to admin — mars+venus+pluto

EVO-75 evolutiva Backlog

Inactive / never-used user cleanup: identify users who never logged in or never used the app, decide disposition (archive vs exclude-from-comms) — mars+venus+pluto

EVO-73 evolutiva Backlog

applog-listen venus rail: burst-dedup for opaque client errors (Script error. / Failed to fetch) — N same-UA+session within 60s → 1 alert+count; isolated 1-offs → log-only. pm-venus amend 2026-06-22 (mars cross-app: Samsung Internet crash-loop found in this class). Supersedes blanket log-only.

EVO-27 evolutiva Backlog

Central patient DB + shared identity/auth hub in enamel (mars/pluto/venus consume) - item f

EVO-80 evolutiva Backlog

Weekly KPI/report email quality: stop noisy+wrong sends (recipients with no practicas or all-zero KPIs; some users get 4+ emails) — mars+venus+pluto

EVO-72 evolutiva Backlog

Migration 042 (pluto applog-view-reshape) is designed + audit-PASS'd but HELD for fleet-lockstep GO — do NOT apply solo

EVO-49 evolutiva Backlog

general-pm role + mgmt-aro topology decision (bs-mqolw0w7gcg/bs-mqom01jn5ww): keep general-pm THIN (cross-project convener + EVO-* umbrella owner + router/scribe + authoritative bwi writer); NO bulk .md; depth=pull-on-demand; tiny PM-owned routing map ~1-2k/app (kill-on-drift); pm-mars=fleet-pattern-lead w/ pluto per-app-divergence carve-out; api-image per-topic invite; single-app incidents stay in project aro. FORK resolved CONDITIONALLY on hub non-quorum capability: YES->one-aro non-quorum lurker / NO->two-aro fallback. GATES: (1) Elazar nod on routing-map + mars pattern-lead + lurker model; (2) pm-llmmsgsrv feasibility verdict on member-non-quorum (Q sent). Nothing structural moves until both clear.

EVO-25 evolutiva Backlog

terra: retire /api/app-version, /api/health is the sole version+health surface

EVO-91 evolutiva Done

Recurring 'Failed to fetch' on /practicas/nueva - same frame, Android Chrome, 5 occurrences since June

EVO-90 evolutiva Canceled

venus Tier-0 drain guard predicate does not byte-match worker claim eligibility

EVO-89 evolutiva Backlog

Commons dedup: delete drifted §Tooling-First from venus + pluto role files (terra DONE 8927d8d)

EVO-88 evolutiva Done

Applog relay daemon conflates DATABASE with TENANT — no per-tenant routing on shared-DB co-tenants

EVO-84 evolutiva Backlog

End-of-term xray-file retention + disposal policy (fleet)

EVO-65 evolutiva Deferred

Auth: allow any genuine-Google-OAuth login, drop domain allowlist as login gate

EVO-68 evolutiva Done

Pluto friction-flash UI treatment — fleet distribution + mining-scope-widen lesson

EVO-66 evolutiva Done

Friction reduction on mars+venus intake forms, pluto /practicas/nueva as reference

EVO-64 evolutiva Done

SCANNER_PROBE_RE Block M/N fleet parity

EVO-61 evolutiva Done

Adopt Mars DB-editable domain allowlist fleet-wide (Q4a, Elazar 2026-07-17)

EVO-59 evolutiva Done

Audit-trail schema normalization (coverage + field-name naming), planned per-project

EVO-57 evolutiva Deferred

└─ Fleet audit: createdBy/At + deletedBy/At + changelog/archive coverage on every table

EVO-55 evolutiva Backlog

└─ Decide archived-PII retention/redaction policy (fleet)

EVO-60 evolutiva Deferred someday

Per-agent Postgres login roles for DB-layer attribution (Mars/Pluto/Venus)

EVO-56 evolutiva Backlog

Minimize demo-data technical debt fleet-wide

EVO-54 evolutiva Backlog

gitmerge.sh auto-commit bypasses gitpush --only -> sweeps co-workers dirty files onto remote (shared-tree hazard)

EVO-48 evolutiva Done

Maintainer agents documentation (~/.claude/maintainer-agents.md)

EVO-37 evolutiva Canceled

└─ Setup file and scope: create ~/.claude/maintainer-agents.md skeleton, add lazy-load trigger to global CLAUDE.md, define section format (one ## per agent: scope/paths, authority, escalation)

EVO-38 evolutiva Done

└─ Seed initial entries: llmmsg-srv-ca, llmmsg-srv-cc (llmmsg-srv code/hub/launchers), whey-os-claude (whey OS/systemd), whey-nw-ccs (jobs drop folder)

EVO-39 evolutiva Canceled

└─ Cross-link with llmmsg-srv Maintenance Boundary block in global CLAUDE.md (keep guardrail in CLAUDE.md, scope detail in maintainer-agents.md)

EVO-41 evolutiva Canceled low

└─ Notify other agents to self-document their maintained scope in maintainer-agents.md

EVO-40 evolutiva Canceled low

venus pool-acquire-timeout fix (PLUTO-145 class) — getPracticaLookups → 1 json-CTE, /practicas+/reportes lookups bundled

EVO-6 evolutiva Done

venus compute region iad1→gru1 — co-locate with sa-east-1 DB, kills ~120ms cross-region RTT

EVO-7 evolutiva Done

Joomla /media/ scanner probe pages in all five apps - propagate one alt

EVO-115 evolutiva Done low

Daily trash purge runs INLINE under LiteSpeed: one real customer request per day pays the full trash-walk

EVO-119 evolutiva In progress low

Hostinger image-storage monitoring (api-images)

EVO-58 evolutiva Done low

└─ api-images box stats.php threshold fallback still 80; only the box .env carries 75

EVO-118 evolutiva Done low

└─ Admin storage tile for mars/venus/terra, or cancel the scope (tile half of EVO-58)

EVO-117 evolutiva Canceled low

└─ Weekly api-images storage read + surface storage.warning (schedule half of EVO-58)

EVO-116 evolutiva Backlog low

infra: policy-grade attribution separation for identity-mutating DB writes - archive owner role, limited non-owner app role, distinct human credentials

EVO-113 evolutiva Backlog low

Drain Vercel runtime logs into venus telemetry so an agent can read them

EVO-107 evolutiva Blocked low

applog-listen venus rail: probe-IP/UA filter — drop alerts for rows originating from venus host IP (91.99.136.171) or UA matching curl/* or *-coder-*/audit. Catches self-test 500s + probe 404s. pm-venus pilot 2026-06-22; table to fleet error-alerting standard.

EVO-28 evolutiva Deferred low

api-images: reconcile 67 orphan images in flat uploads/2026/ with no mars/pluto DB owner — decide trash vs reassign

EVO-2 evolutiva Blocked low

api-images: immediate-erasure endpoint (GDPR/right-to-erasure) — DELETE /{id}?purge=1 or /erase/{id} that skips _trash + unlinks immediately, tenant-scoped, audit-logged.

EVO-3 evolutiva Done low

venus: rename telemetry field widthBand→viewportBand (bs-mqmscr4k3wh)

EVO-10 evolutiva Backlog low

canonicalizeEmail() prod-vs-source drift — SET search_path hardening absent from 000-initial migration; reprovision would drop it. Fix: forward idempotent migration to match prod; sweep other fns/triggers for same class.

EVO-8 evolutiva Done low

Email canonical generated column + read-side CI tripwire — emailCanonical GENERATED ALWAYS AS STORED + partial UNIQUE index pre-existing in prod; doc migration evo9-email-canonical-generated-column.sql added. Remaining: read-side CI tripwire (lookup paths use emailCanonical or canonicalized input)

EVO-9 evolutiva Done low

errscan.sh digest mislabels signature-rollup occurrence count as a per-path count -> false per-path warn spikes (e.g. 'page_not_found x42 @/email/sendgrid.env' when that path has 2 rows; 42 = aggregate env-shape warn occurrences across N paths under one message-derived signature). Lane 1 (bin-whey, errscan.sh ~L244/L309): relabel so count reads as signature rollup + path as a SAMPLE ('[42x total] page_not_found e.g. action=/email/sendgrid.env'). Lane 2 (per-project db: vAppAlertsRecent/vAppErrorsRecent): expose distinctPaths so display can render '42x / 7 paths'. Affects all 3 apps (shared errscan + EVO-12 scanner down-tier shape). Triage-noise only, no data/security. Low-pri.

EVO-46 evolutiva Backlog someday