Wedged/booting session is electable as PM and can be handed the queue flush (register fakes liveness)

MSG-289 llmmsg-srv Backlog urgent ↳ MSG-285

pruneStale wipes aro memberships of sleeping-host agents; make membership sticky across stale-prune

MSG-270 llmmsg-srv Backlog high

Harden status-ping reroute: catch leading-*** ceremony banners to Elazar

MSG-269 llmmsg-srv Backlog high

Route hub-originated alerts (silence-detector/pmidle/dormant-PM) OFF HUMAN_AGENT to a PM/ops lane

MSG-265 llmmsg-srv Backlog high

elazar-contact durable must-reach backstop: hub liveness + unread-age email fallback

MSG-264 llmmsg-srv In progress high

Hub: brainstorm-brief to an aro with an open session silently DISCARDS the brief body (hub.mjs:2585) — make deflect non-destructive

MSG-261 llmmsg-srv Backlog high

Alert when a CC session is blocked on interactive prompt (AskUserQuestion menu / permission approval / ExitPlanMode): wire CC Notification hook (or transcript-watcher fallback) to DM elazar via llmmsg-srv naming the blocked agent+host. Solves operator having to hunt tmux windows. Research dispatched to claude-code-guide.

MSG-202 llmmsg-srv Backlog high

ca.sh codex launcher: run codex on llmmsg-srv (ca= identity, sandbox-off, pull-only inbound, push-to-ccs) - fleet

MSG-186 llmmsg-srv In progress high

└─ Land reviewed ca.sh in sh.git (after PM draft review); commit+push

MSG-188 llmmsg-srv Backlog high

└─ Design + LIVE-TEST ca.sh: reads ca= from .agent-name, codex --dangerously-bypass-approvals-and-sandbox, injects -c mcp_servers.llmmsg-srv.env.LLMMSG_AGENT_NAME + LLMMSG_HUB_URL; PROVE shim auto-registers under ca name (roster check) before calling done

MSG-187 llmmsg-srv Backlog high

└─ Fix static ~/.codex/config.toml footgun: wrong key LLMMSG_AGENT->LLMMSG_AGENT_NAME + LLMMSG_SRV_HOST 127.0.0.1->public; bare codex (not via ca.sh) currently falls back to cc= in /opt/llmmsg-srv = registers as pm-llmmsgsrv-cc on loopback. Non-blocking; ca.sh -c overrides already bypass it

MSG-191 llmmsg-srv Backlog

└─ lezama ca.sh deploy: GCABA box - get Elazar explicit OK before nw-lezama-cc syncs; codex AGENTS.md convention (aro_join on start, cm/cms -> read_unread)

MSG-190 llmmsg-srv Deferred

└─ Deploy/verify ca.sh on venus (sh.git pull); confirm a codex test session registers + hub URL resolves remote

MSG-189 llmmsg-srv Backlog

Transport reliability + observability program (whey/venus/lezama)

MSG-149 llmmsg-srv Backlog high

└─ Idle over-budget agents never self-compact: wire host-side actuator (whey/lezama)

MSG-207 llmmsg-srv Backlog high

└─ Fleet context-cost rollout: send-keys /compact watchdog + aro_leave-on-idle

MSG-210 llmmsg-srv Backlog high

└─ WI592 nag: drop CronCreate /compact from emit_context_budget_nag interactive branch once send-keys watchdog verified fleet-wide

MSG-214 llmmsg-srv Backlog

└─ cc-context-monitor safety-net: flag/extend nag for agents that miss self-leave (seq AFTER rule lands)

MSG-213 llmmsg-srv Backlog

└─ cc-context-monitor measured role-cap version (floor+EOQ headroom) - successor to #617 seed caps

MSG-217 llmmsg-srv Backlog low

└─ path-B UserPromptSubmit injection copy: reframe CronCreate as automatic-fallback not manual action (avoid conflict w/ v2.13 over-cap DM)

MSG-218 llmmsg-srv Backlog low

└─ Venus-side watchdog + alert standardization (mirror lezama pattern)

MSG-157 llmmsg-srv In progress

└─ chat-duo-web 9704 to lezama: move off whey-initiated -R (VPN-dependent) to lezama-initiated -L over public route

MSG-208 llmmsg-srv Backlog

└─ Shim transport prefer-list: loopback -> ZT -> public DNS (defer until W3+W4 prove design)

MSG-158 llmmsg-srv Backlog low

lezama split-brain: island-b hub (llmmsg-srv.service) auto-started, isolated lezama agents from whey hub

MSG-194 llmmsg-srv Backlog high

multi-subscriber SSE + sender echo + client dedupe (chat-duo + chat-duo-web cohabit)

MSG-118 llmmsg-srv Backlog high

chat-duo-web tablet-grade evolution (path A for unified browser client)

MSG-171 llmmsg-srv Backlog high

ARO topology v3 fleet-wide rollout (epic)

MSG-174 llmmsg-srv Backlog high

└─ Phase 6: llmmsg-protocol.md §ARO Membership + §Routing rewrite

MSG-178 llmmsg-srv Backlog

Close aro_config auth gap: token-gate POST /aro_config + other privileged hub writes so a forged caller=elazar fails (coder-applog-cc exploited it to flip aro:applog PM). Elazar approved ship.

MSG-201 llmmsg-srv Backlog high

Memory-discipline policy: make enforcement discoverable fleet-wide (whey/venus/lezama)

MSG-179 llmmsg-srv Backlog high

└─ Consolidate evolutiva-memory-discipline.md into fleet-neutral canonical + scrub project/agent names for public sh.git

MSG-180 llmmsg-srv Backlog high

└─ Land canonical memory-discipline.md in sh.git (docs/md), commit+push; nw-* pull propagates to 3 hosts

MSG-181 llmmsg-srv Backlog high

└─ Per-host global CLAUDE.md: add memory-discipline.md to Lazy-loaded + 2-line enforcement pointer (whey/venus/lezama, one commit each)

MSG-183 llmmsg-srv Backlog high

└─ memory-discipline.md threshold divergence: prose (§10/§13/§15 ~4k tok/150-200 lines/8000 budget) != enforced memlint-cron.sh (600 warn/1200 trim); make doc reference script as threshold SSOT, drop duplicated numbers

MSG-185 llmmsg-srv Backlog

└─ Acceptance gate: fresh agent on each host must cite the policy+thresholds when asked is-there-a-md-policy

MSG-184 llmmsg-srv Backlog

└─ Stub evolutiva-memory-discipline.md -> sh.git canonical; update maintainer-agents.md pointer

MSG-182 llmmsg-srv Backlog

Agent-hygiene: automated CLAUDE.md/memory bloat detection + LLM compression (fleet-wide)

MSG-160 llmmsg-srv Backlog high

└─ chat-duo Agent Hygiene pane: surfaces top-bloat agents from /agent_hygiene

MSG-167 llmmsg-srv Backlog low

gitpush.sh strict-mode: detect staged deletions in ONLY_PATHS and commit them (git rm --cached silently dropped today)

MSG-109 llmmsg-srv Backlog high

Hub SIGTERM handler hangs on shutdown — ~90s blackout per restart

MSG-83 llmmsg-srv Backlog high

OPS-25: rkhunter-scan.sh email malformed — wrong From (envelope=elazar.pimentel vs body=evolutiva), raw HTML renders (dup header block before <html>), WARNING COUNT='0\n0' (stray newline). Fix all three, re-verify rendered output.

MSG-79 llmmsg-srv Backlog high

OPS-24: notify-nw.sh ORIGIN_ARO env support — script must read ORIGIN_ARO from env and pass origin_aro to hub send; without it DM routes without origin_aro regardless of EnvironmentFile

MSG-78 llmmsg-srv Backlog high

OPS-23: hub.pensanta.com DNS repoint — A-record still 172.27.178.27 (dead ZT IP), blocks all venus scrp- DM legs; update Hostinger DNS to real venus IP

MSG-77 llmmsg-srv Backlog high

Infra cleanup phase 1: canonical URL migration to hub-t.pensanta.com fleet-wide + kill-list execution post Elazar GO (tracked in /gdrive/systemd-audit-*/)

MSG-93 llmmsg-srv Backlog high

Migrate bwi authoritative writer from whey to venus (wi-http.service + bwi-venus-tunnel) — prerequisite for whey backup-only retirement

MSG-92 llmmsg-srv Backlog high

KPI Track A: ADD pg views (usage.v_kpi_tokens_7d + context.v_kpi_compact_7d) + extend scrp-kpiweekly-whey (email + snapshot/live-read)

MSG-54 llmmsg-srv Backlog high

POST /unregister route: deregister permanence for VENUSINF waves - {agent,caller,[bearer]}; txn validate->capture-PM-AROs->deleteAroByAgent->electPm-each->deleteRosterRow; PRESERVE cursors (optional purge_cursor:true default false); idempotent 200 already_absent; auth self-dereg ungated + admin-dereg edge-bearer interim soft-dep #599; HTTP-only (no MCP tool). Replaces hand-SQL roster DELETE dereg-at-cutover.

MSG-38 llmmsg-srv Backlog high

Hub leaks direct DMs into sender's home ARO: kind=dm fanned to origin_aro roster (cc-context-monitor-venus DMs reaching nw-venus-cc)

MSG-13 llmmsg-srv Backlog high

Post-/compact re-register reliability: hook-fire blind spot + hook-independent shim re-register net

MSG-5 llmmsg-srv Backlog high

Spurious unread-poke loop: read_unread cursor-ack is fire-and-forget (race) + drain-on-other-tools acks only on next poll + poker lacks debounce/idle-gate

MSG-35 llmmsg-srv Backlog high

init-db.sh drift: stale messages schema (generated tag + phantom cols) contradicts hub.mjs self-create / live DB - reconcile or demote

MSG-32 llmmsg-srv Backlog high

Make context-budget nag idempotent: stop re-nagging every turn + stop stacking /compact crons after compact

MSG-12 llmmsg-srv Backlog high

Codex receive-bridge: sidecar tmux-poke so Codex agents auto-drain llmmsg unread (no live push)

MSG-10 llmmsg-srv Backlog high

└─ HARD PREREQ: derive + test a Codex-specific ready-prompt regex for idle-gating (CC matcher will NOT transfer; wrong matcher = corrupted-buffer poke). No send-keys goes live until validated.

MSG-11 llmmsg-srv Backlog high

ACK_OPENER_RE gate and kpi-coach receipt exemption disagree

MSG-288 llmmsg-srv In progress

llmmsg-reconcile.sh: populate detail (RECONCILE_NOTE) + name agent in invoked_by

MSG-291 llmmsg-srv Backlog

agent-sleep.sh: bind exit consent to session identity, not just ack freshness

MSG-290 llmmsg-srv In progress

kpi-coach rubric: cover lock banners + N-separate-DM fanout

MSG-287 llmmsg-srv Backlog

Hub: generalise rail-sender prune exemption from name regex to push-only-producer property (held diff, awaiting audit)

MSG-280 llmmsg-srv Backlog

Rule 3 silence-default violations

MSG-278 llmmsg-srv Backlog

Rule 9 dossier-dump-inline detection

MSG-277 llmmsg-srv Backlog

cc-* noncanon-sender catcher: verify in-wild, then migrate cc-context-monitor-* to canonical scrp-<name>-<host>

MSG-271 llmmsg-srv Backlog

Fleet-wide per-agent auth: hub identity is self-asserted on the shared edge bearer

MSG-263 llmmsg-srv Backlog

cc-context-monitor compact half - wire host-side tmux send-keys auto-compact for idle over-cap sessions, after the one-session verification test

MSG-122 llmmsg-srv Backlog

hub-resident cross-project WI board: add cross_wi table + MCP wi_add/wi_close/wi_ls/wi_show/wi_event tools. Replaces per-host bwi for cross-project items (mars/pluto/venus/evolutiva). 3-PM consensus pm-mars-29395 / pluto-29405 / venus-29411; Elazar greenlight elazar-…-29506 Q2. Owner: llmmsg-srv-cc-w.

MSG-120 llmmsg-srv Backlog

chat-duo timestamp display drops date - stale msgs read as today

MSG-147 llmmsg-srv Backlog

aro_config caller field unauthenticated - light-scope hardening

MSG-145 llmmsg-srv Backlog

Brainstorm: connect lezama agents to whey's llmmsg-srv hub

MSG-112 llmmsg-srv Backlog

Next.js chat client to supersede chat-duo GTK + chat-duo-web (brainstorm item 4): node service on whey, Tailscale-only, native Pending tabs. Needs design brainstorm->spec->plan.

MSG-127 llmmsg-srv Backlog

Durable GC for stale bridge registrations (TTL prune) - no more retired-codex corpses in registrations.json

MSG-221 llmmsg-srv Deferred

gitmerge.sh diverged-branch newest-wins auto-adds untracked files, defeats gitpush --only strict-staging

MSG-216 llmmsg-srv Backlog

Push llmmsg protocol mechanics into MCP send tool + hub (shrink model-held context)

MSG-209 llmmsg-srv Backlog

lezama single-path fragility: all 5435 probes since May23 are public-dns with zt_whey_visible=0 (ZeroTier fallback never worked); make ZT a real 2nd route + fix phantom ssh_r_active self-report

MSG-205 llmmsg-srv Backlog ↳ OPS-80

lezama host-dark alert: watchdog fires notify-elazar+eq after 3 consecutive 'unreachable' skips (~15min), instead of silently skipping forever

MSG-204 llmmsg-srv Backlog ↳ OPS-80

/loop skill self-exports LLMMSG_AUTONOMOUS=1 on entry (so L1 hook branches correctly inside /loop)

MSG-196 llmmsg-srv Backlog

cdw PWA: make chat-duo-web installable (manifest+icons+service worker, Add-to-Home-Screen)

MSG-46 llmmsg-srv Backlog

v_large_aro_content_24h view: add recipient LIKE 'aro:%' filter so DMs with origin_aro carry-through are not counted as ARO fan-outs

MSG-228 llmmsg-srv Backlog

venus /opt/llmmsg-srv is NOT a git checkout - no sync path for maintainer pushes (forces manual /gdrive/temp hops; v1.16 bootstrap had to be hand-installed). Make it a proper git checkout of origin/main like lezama (project_lezama_code_drift) so future pushes land via git pull. Care: venus dir has live local files (.agent-name, service config) - clone-in-place or backup+clone, don't clobber runtime config.

MSG-9 llmmsg-srv Backlog

Unknown /command errors back to sender (not silent-send); usage-error on malformed known verb

MSG-49 llmmsg-srv Backlog

Triage edge LLMMSG_HUB_BEARER rotation: exposed on GitHub via api-images repo (NOT llmmsg-only exposure, so no-rotate rule does not apply)

MSG-51 llmmsg-srv Backlog

hub.mjs latent SQLITE_ERROR: 'no such column: ""' at Database.prepare (seen 00:47:15 pre-restart). Route interpolates empty string into query as = "" (SQLite parses "" as column id). Find the unparameterized query, convert to bound params. Route-triggered, not fixed by restart. Also tidy hub.mjs:1007 error string to match widened regex.

MSG-23 llmmsg-srv Backlog

Hub: detect + block redundant per-member DMs when ARO fan-out should be used (same/similar body to N ARO members in short window → coach to use aro:X fan-out)

MSG-104 llmmsg-srv Backlog

auto-commit guard: reject staged *.llmmsg-env / bearer-shaped blobs in git add -A paths (systemic root-cause fix)

MSG-110 llmmsg-srv Backlog

roster.client_version empty for 31/46 agents - version drift is unmeasurable fleet-wide

MSG-292 llmmsg-srv Backlog low

Author CONTACT_ALIAS spec

MSG-286 llmmsg-srv Backlog low

ayudarg applog rail: check for same cursor-strand defect as mars/venus

MSG-275 llmmsg-srv Backlog low

Migration loop swallows all errors, not just duplicate-column

MSG-273 llmmsg-srv Backlog low

SILENCE_SKIP_AGENTS hardcoded allowlist has rotted (missing scrp-*/claude-global)

MSG-272 llmmsg-srv Backlog low

Split client tooling out of /opt so hub.mjs stops landing on client hosts

MSG-262 llmmsg-srv Backlog low

Document to=pm:X send target + hub PM election/pending-queue in README.md protocol section (shipped in 5741b17, README not yet updated)

MSG-128 llmmsg-srv Backlog low

Hub cleanup traps (post-#594): systemd unit sets LLMMSG_SRV_DB but code reads LLMMSG_DB (no-op env var); stale llmmsg.sqlite + init-db.sh schema conflicts with live v2.sqlite

MSG-200 llmmsg-srv Backlog low

lezama out-of-band reset: a dead kernel cannot self-recover; scope IPMI/iDRAC vs smart-PDU for remote host-dark power-cycle (blocked on Elazar: does box have IPMI?)

MSG-206 llmmsg-srv Backlog low ↳ OPS-80

cdw: Caddy flush_interval -1 for SSE reconnecting issue (Caddyfile)

MSG-73 llmmsg-srv Backlog low

.llmmsg-aros cleanup: remove 16 repo-tracked copies in pensanta website repos (#631 tail)

MSG-225 llmmsg-srv Backlog low ↳ MSG-220

MSG-30 lezama: coordinated full-tree pull-forward (shim v2.9.47 + bootstrap v1.19 + package.json, atomic) - replaces nw-lezama hand-patch, un-dirties staged v1.18 bootstrap

MSG-47 llmmsg-srv Backlog low

llmmsg-kpi-report.sh: strip dead -small ARO branch from §PM .aro action list (lanes retired MSG-17)

MSG-26 llmmsg-srv Backlog low

Rationalize errscan-vs-applog overlap fleet-wide (both = error->PM-DM; applog covers all 3 proj+now green, errscan mars-only, mars DOUBLE-covered) - decide consolidate-not-expand; needs PM/Elazar division-of-labor call

MSG-43 llmmsg-srv Deferred low

dm-* send-authorization: reject non-owner/non-host-nw/non-Elazar sends to or origin_aro'd-as aro:dm-*

MSG-50 llmmsg-srv Backlog low

rule-21 standalone-ack gate misses 'ack <noun>' shape

MSG-276 llmmsg-srv Backlog someday

PM retirement doesn't clear aros.pm_agent seat

MSG-274 llmmsg-srv Backlog someday