Mars OAuth redirect_to bypasses resolveSiteOrigin() + 3 uncanonicalized prod hosts (TERRA-20-derived)

MARS-642 mars Backlog high

Mars demo-concept eradication: sweep-to-zero + ban-guard (bs-mrteu5nvtt6)

MARS-542 mars In progress high

SOP support-api: add ticket CRUD (close/status/notify) + private stakeholder comments

MARS-467 mars Backlog high ↳ EVO-52

Support-agent registry + atomic assign/list-budget functions for support-API

MARS-648 mars Backlog

Práctica edit-quota lock burns a slot on tab-abandon, not just on save

MARS-646 mars Backlog

Standardize /alumnos filters onto the shared URL-param filter pattern

MARS-635 mars Backlog

Opportunistic compliance: rename tipoDocumento/numeroDocumento -> documentoType/documentoNumber (entity-first) on users + accessRequests; confirm stored value stays lowercase 'dni'/'pasaporte' (Mars already correct)

MARS-406 mars Backlog

practicaCodigo format: add PRA-MARS- prefix

MARS-614 mars Backlog

Hide non-required fields + require Endodoncia I fields for Endodoncia I students

MARS-612 mars Backlog

Reconcile 'principal' JTP checkbox on /docentes vs no-principal-JTP claim

MARS-610 mars Backlog

Add a main-JTP designation to comisiones

MARS-608 mars Backlog

fn_notify_pm_triage exception-swallow silently drops PM alerts

MARS-596 mars Backlog

Full write-to-human appEvents consumer/gate/transform enumeration for mars

MARS-590 mars Backlog

Percent-encoded path evasion bypasses SCANNER_PROBE_RE allowlist entirely

MARS-586 mars Backlog

error-tier toast/error-shown rows would page despite mig 074 mute (warn-only scope)

MARS-584 mars Backlog

Real 404s hidden in alert-rail noise: /login x19, /practicas/<uuid> x36

MARS-583 mars Backlog

Mars measured VENUS-319 burst mispairing: 10 rows stranded

MARS-582 mars Backlog

Profile photo escalating nag -> hard block on 10th prompt; show photo in practica for teacher identification

MARS-580 mars Backlog

└─ Admin lever to clear a profile-photo block (and handle self-deleted photos re-entering the ladder)

MARS-628 mars Backlog high

└─ Route the profile-photo nag upload through the MARS-567 honest-copy validator before uploadProfileImage

MARS-627 mars Backlog high

route.ts: /api/log-error outer catch swallows its own failures, no appEvents row

MARS-577 mars Backlog

Sweep pre-086 owner-rights agent-granted views to security_invoker=true

MARS-561 mars Backlog

usuarios: DB-backed regression tests for updateAlumno/tier authz matrix

MARS-556 mars Backlog

Teachers can claim out-of-scope students as theirs (JTP/ayudante takeover)

MARS-553 mars Backlog

Formalize numeroHistoriaClinica as validated patient DNI (governance-gated)

MARS-534 mars Backlog ↳ EVO-80

Grader x verdictBucket grade-tendency views to drive MARS-504 backfill coverage trigger

MARS-530 mars Backlog ↳ MARS-504

Document the rectificar student-reminder email workflow: what triggers it, what emails a student actually receives, volume/dedup — then decide cleanup

MARS-525 mars Backlog

iPhone HEIC upload: wasm-decoder go/no-go — gated on MARS-508 instrumentation (userAgent + detail.diag container) format-mix data

MARS-517 mars Backlog

EVO-58 admin storage tile (Hostinger 25GB) — /administrar ambient panel

MARS-513 mars In progress

EVO-57 Mars: audit-trail schema normalization plan (coverage + naming)

MARS-492 mars Backlog ↳ EVO-57

└─ WP4c: archive twins + triggers for practicaReviews + practicaComentarios + studentPostgradoProgression

MARS-497 mars Deferred

└─ WP4b: archive twins + triggers for supportTickets/Messages/NotifySubscriptions + accessRequests + accountSwitchLinks

MARS-496 mars Deferred

└─ WP4a: archive twins + triggers for userRoles + lookupOptions

MARS-495 mars Deferred

└─ WP2+WP3: add deletedByUserId + createdByUserId coverage columns

MARS-494 mars Deferred

└─ WP1 naming: deletedBy -> deletedByUserId dual-column shim

MARS-493 mars Deferred

Stamp session_user into archive-trigger snapshots alongside app.user_id

MARS-491 mars Backlog

Per-agent Postgres login roles (REFERENCE impl)

MARS-490 mars Backlog ↳ EVO-56

Audit createdBy/At + deletedBy/At + changelog/archive coverage

MARS-483 mars Backlog ↳ EVO-55

Adopt Pluto admin-list/detail reference pattern (5 principles) on Mars

MARS-482 mars Backlog

restoreUser must regrant roles after MARS-382 soft-delete cascade (role-less restore gap)

MARS-479 mars Backlog ↳ MARS-382

No-404 directive: navigation/practica-link-dead fired 3x — find and eliminate the dead practica link source (broken link/route), not just relabel the event

MARS-106 mars Backlog ↳ MARS-437

/practicas dashboard: pending-queue rows repeat in the flat table — dedup UX (Elazar option pick pending)

MARS-478 mars Backlog

vComisionAyudantesByJtp SA-join fix

MARS-477 mars Backlog

Tech-debt sweep: catalog unused DB objects (tables/columns/views, e.g. 0-row #395/#396, redundant text cols #394) + dead app-code fields/exports; file one deletion WI per finding (Elazar 06-05: stop brushing off 'legacy field we dont use')

MARS-13 mars Backlog

└─ Delete unused DB views (technical debt audit)

MARS-14 mars Backlog

MARS-468 follow-up: support-action idempotency ledger for close/reopen + test coverage

MARS-470 mars Backlog

EVO-52: extend support-api for full SOP-ticket CRUD (status transitions incl. close/resolve, private Elazar+stakeholder-only comment type, notify-list on ticket events) — bearer-invokable, no direct DB/chrome-mcp/manual-human path

MARS-468 mars Backlog

CI guard: static logEvent call-site scan vs checked-in action-classification manifest (MARS-465 follow-up)

MARS-466 mars Backlog

Admin landing: pinned-first sidebar + numbered emoji card grid (fleet-uniform pattern, bs-mrlnhbp0y3n)

MARS-458 mars Backlog

Middleware session-refresh (createServerClient) -- edge-bundle-safe design needed

MARS-454 mars Backlog

instrumentation.ts pulls pg (node driver) into the Edge middleware graph — move error-capture behind an Edge-safe boundary

MARS-452 mars Backlog

Nota/concepto-final grading column — spec needed from Elazar before build

MARS-444 mars Backlog

useActionForm has zero Mars consumers - decide adopt vs leave

MARS-420 mars Backlog

Inventory + lock down public function EXECUTE and sequence privileges (adjacent to MARS-416 relation-grant revoke)

MARS-417 mars Backlog

Log native HTML5 validation hints as friction events (any user-facing feedback = logged; native constraint-validation currently bypasses the toast/checkRequired path)

MARS-412 mars Backlog

Fleet appEvents schema standardization: single log(entry) entrypoint (no level-wrappers) + promote hot fields to real columns, minimize jsonb-blob reliance

MARS-411 mars Backlog

Refactor DataTable onto shared Pluto sort core (vendored)

MARS-394 mars Backlog

MARS-145 follow-up: daytime-peak 53300 re-scan of the txn-pooler runtime pool

MARS-383 mars Backlog

Custom 404: add LLM-copy block to not-found page + enrich routing/not-found event (referrer, appVersion, requestId) + rate-limiter

MARS-330 mars Backlog

Fleet curated-knowledge-file + prune-arrow adoption: repo-visible SSOT digest .md (coder/db/audit/pm all edit+prune) as the reviewed distillation on top of auto-memory ON; raw memory captured then distilled into the .md, prune superseded. Decoupled from the solo agent (adopt regardless). 4-PM unanimous brainstorm bs-mr3bt2c0vgy. Mars=reference (solo-mars-cc.md already this shape). Scope: standing digest+prune discipline, mirror to venus/pluto/ayudarg.

MARS-372 mars Backlog

Adjunto oversight/governability landing: adjunto logs in -> lands on a page showing comisión health, which JTPs need help, pending workload (Elazar 06-06, q3). NEEDS DESIGN/BRAINSTORM - distinct surface from /practicas

MARS-35 mars Backlog

Check size of Mars images on Hostinger (api-images file store) — measure total disk + file count used by Mars JPEGs on the api.pensanta.com/mars FTP-jail host; report bytes + count, flag if cleanup/retention needed.

MARS-42 mars Backlog

Archive trigger captures NEW not OLD on UPDATE — verify forensic recovery coverage across audited tables (db)

MARS-64 mars Backlog

UX Friction (epic): reduce user pain points surfaced by toast/error telemetry

MARS-69 mars Backlog

Sidebar/navbar per-role regroup (Stage A): execute the holistic restructure the /sidebars-preview diagnostic (75ad66f, 2026-06-04) was built to inform. Per-role nav still cluttered/inconsistent. Use the preview tool (renders real sidebar per role side-by-side) to design grouping, then regroup. Only piecemeal edits landed since (MARS-33/34, WI#327, WI#214); holistic cleanup dropped + untracked until now (Elazar 06-09).

MARS-77 mars Backlog

EPIC: shift /users /estudiantes /docentes from admin-dashboard mgmt to self-managed roster (JTP/Ayudante/Adjunto/students self-pick relationships + self-confirmation workflow)

MARS-87 mars Backlog

EPIC mobile-first refactor (Elazar directive, all 3 apps): Mars is desktop-CSS-with-patches, not mobile-first. Staged base-up rework. Stage0 foundation (44px tap floor + search/form fixes, mobile-only media blocks, desktop density unchanged); Stage1 DataTable mobile card mode (fixes /practicas + /docentes); Stage2 /mi-cursada; Stage3 /practicas/nueva form (+tooth-selector tap targets, +undefined .conducto-* classes latent bug); Stage4 filter-bar accordion; Stage5 practica detail (/practicas/[id]+/mi-cursada/[id]: info-bar, changelog, comentarios, review-form, image-viewer pinch-zoom currently broken on mobile); Stage6 secondary (soporte thread, notificaciones, perfil, postgrado-progression). Order 0>1>2>3>5>4>6. Owners: coder-mars 0/3/5, audit-mars-ca 1/6. Held on proxy-mars BEFORE baseline (Elazar launching). Admin wide-tables=P3 tail/defer.

MARS-97 mars Backlog

Real-life-as-SSOT JTP attribution analysis: quantify divergence between start-of-year studentAssignments (error-prone excel import) and actual student JTP picks (práctica.jtpUserId). Two mismatch classes: (1) JTP students picked but aren't assigned to; (2) students assigned to a JTP who picked a different one. Analysis only first (no writes); evidence base for evidence-based reassignment (NOT admin-pick UI). Links MARS-43 + live-vs-snapshot rule. (Elazar 2026-06-14)

MARS-126 mars Backlog

Mars appEvents conform to fleet standard (evolutiva-appevents-standard.md): add categoryId uuid FK->lookupOptions + seed appEventCategory group (16 canonical + practica/studentAssignment/assignment) + backfill 18 free-text values w/ mapping; add 4 promoted cols (httpStatus/durationMs/path/failureCode); add logError/logWarn/logInfo wrappers + pickKnown + isCritical sync-bypass; append-only trigger (GUC-bypass) AFTER appEventRelays sidecar cutover (replace detail.relay.delivered UPDATE pattern); replace level-only prune with 5-cat-security tiered retention; canonical v_appEvents_* views; legacy_events sink. Staged db+coder. BLOCKED on committed SSOT + Elazar priority call.

MARS-107 mars Backlog

Teacher-facing student reassignment surface (JTP/Ayudante self-service, NOT on /alumnos)

MARS-108 mars Backlog

Mars logging structural hardening (R1 follow-up): middleware-injected requestId correlation + actor de-anon in onRequestError (F-3/F-4), isCritical sync-write for auth/authz/security cats (F-5), log-error 5min digest dedup (F-6) — audit design-review first (middleware is auth-adjacent)

MARS-116 mars Backlog

Audit PTD render-GET tooling: enable exercising authed routes (dedicated test-user + stored session, OR a server-side render-self-check route) — Mars leg of the cross-project gap that let Pluto's /informes 500 ship unexercised (audit unauth render-GET -> 302/login, authed routes never actually rendered in PTD)

MARS-118 mars Backlog

DB (deferred/cold): 24 unindexed FKs on forensic/audit/housekeeping columns (archivedBy/deletedBy/restoredBy/resolvedByUserId/surrogateUserId/actorUserId/createdUserId/assignedTeacherUserId); none in hot paths; track, index only if a real query path emerges

MARS-122 mars Backlog

Re-key grading attribution to práctica-pick (jtpUserId) — reverses live-SA model

MARS-136 mars Backlog

Proactive unreviewed-práctica backlog outreach: identify top 3-4 teachers (JTPs) by sin-revisión backlog, the active JTP in each's comisión, the adjunto + titular; draft email to adjunto/titular asking how to address the backlog before it's insurmountable. Real-audience outbound — held for Elazar approval before send. (Elazar 2026-06-14)

MARS-125 mars Backlog

Vercel runtime-log API billing-capped (ExceedsBillingLimitError) — blinds PTD runtime-log gate until cap reset/raised

MARS-141 mars Backlog

404 digest count inflation: error-digest reports 11 /mi-cursada 404s but appEvents shows only 2 — reconcile digest aggregation vs raw appEvents rows (possible double-count, window mismatch, or path-glob over-match). Source: audit /mi-cursada triage, de2e960 window. mem: appevents double-render dedupe (not-found-log.ts isDuplicateRender) is one suspect.

MARS-164 mars Backlog

INVESTIGATE (not-prejudge): authed post-OAuth /mi-cursada empty-state-vs-404 gap. Row 1 of the triage: a legit OAuth-redirected alumno on the canonical landing got classified genuine-bad-route via the external-referer heuristic. CONFIRM FIRST whether bare /mi-cursada notFound()s for an authed no-active-cursada user (code read says it renders an EMPTY STATE, does NOT 404 — so the 404 is on a different path/referer shape) before prescribing any empty-state fix. Scope: not-found-classify external-referer branch + post-OAuth referer shape.

MARS-165 mars Backlog

Restore Mars error->email-to-Elazar loop (bs-mqn8g0rhso5 fleet decision): B ESOCKET operator-email hotfix (after->emailOutbox enqueue) + C instant-error-email onRequestError->enqueue direct-to-Elazar, throttled

MARS-161 mars Backlog

Student duplicate-práctica deletion request: student requests delete (reason=duplicate), picks keeper from pulldown, teacher approves -> non-keeper soft-deleted

MARS-147 mars Backlog

EVO-47 db-lane: redefine vAppErrorsRecent + vAppAlertsRecent to expose level + category + normalizedRoute; redefine rollup signature = normalizedRoute+level+category (subsumes EVO-46 lane-2 distinctPaths). Enables the level/category-aware alert-suppression predicate. Audit pre-apply DDL gate (reversible CREATE OR REPLACE VIEW). BLOCKED: Mars db agent offline — apply queues for db-mars launch; audit preps read-only DDL spec meanwhile.

MARS-344 mars Backlog

CR-override-grade: adjunto/titular jumps in when JTP unavailable

MARS-213 mars Backlog

Queryable not-xray image view: count + % of uploaded práctica images flagged as NOT a real radiografía. Elazar 2026-06-26: he has not seen one real x-ray — ~99% are photos of a monitor screen, not actual radiographs. The image-analysis path already produces a flag (a 3-letter code/word per Elazar) that marks an image as not-an-xray. Build a DB view (db + coder) over the existing image-analysis data (likely imageUploadAnalysisEvents) that reports total images vs flagged-not-xray count and percentage, queryable any time (overall + optionally by periodo/comisión/recent-window). FIRST identify the actual flag field + its not-xray value. Read/analysis surface only, no enforcement/blocking. Build deferred — tracking only.

MARS-200 mars Backlog

PM DB-fed triage loop: support-ticket + access-request events DM PM; PM reads DB + triages (bs-mqotdmmk6b5)

MARS-174 mars Backlog

EPIC active-view-by-default (Elazar directive 2026-06-26): every soft-deletable table (deletedAt column) must have a canonical active-view filtering deletedAt IS NULL; the app reads the view BY DEFAULT and the raw table only for admin/restore access. Root structural fix for the practica-link-dead class (soft-deleted prácticas still rendering as clickable links to teachers) and any future see-the-deleted-row bug. Scope: (1) db inventory tables-with-deletedAt vs existing active-views + the gap + ONE canonical naming convention (existing views fork camelCase vStudentAssignments vs proposed v_<table>); (2) coder map app read-paths hitting raw tables that must switch to the view, and the admin/restore paths that keep raw access; (3) create missing views; (4) migrate app reads; (5) audit each read-path swap. Staged, reversible per-view+per-path. Cross-project pattern candidate (mirror to pluto/venus). Plan-first; do not build until Elazar sees scope.

MARS-202 mars Backlog

Dead component image-upload-area.tsx + stale provenance comment referencing it

MARS-649 mars Backlog low

Disambiguate 'rectificar:pending' vs 'rectificar-nudge' feedbackKeys (observability trap)

MARS-641 mars Backlog low

Load-failed class: capture visibilityState + nav-in-flight at throw time

MARS-640 mars Backlog low

estadisticas: dead outlier-detection rule, never fires (since MARS-193)

MARS-639 mars Backlog low

Widen or stop truncating toast feedbackKey so distinct validation messages don't collide

MARS-629 mars Backlog low

Standing audit: nextjs/nodejs → Postgres pushdown — find Node-side aggregations/filters that should be DB views/functions, refactor opportunistically

MARS-247 mars Backlog low

Sweep for other per-request/standing-condition alerts that should use logEventOnce

MARS-618 mars Backlog low

Restore column sorting on /administrar/usuarios (server-side, post-MARS-615)

MARS-616 mars Backlog low

Make role->capability map DB-owned, or add a cross-layer drift guard (CAPS vs fn_admin_invariant_ok)

MARS-605 mars Backlog low

db-mars-cc: correct setArchiveContext GUC key for manual psql writes (app.user_id, not app.archive_actor_id)

MARS-603 mars Backlog low

users email-guard hygiene: normalizedEmail (app normalizeEmail) vs uq_users_email_ci (SQL canonicalizeEmail) disagree on 3 live rows; + duplicate index users_normalizedemail_unique == uq_users_normalizedEmail

MARS-566 mars Backlog low

login-email-drift-blocked: consider auto-sync email when supabaseAuthId sub already matches

MARS-602 mars Backlog low

9 archive tables have zero retention/prune — unbounded growth, fleet-wide pattern (also on venus)

MARS-598 mars Backlog low

edit-form.tsx missing isViewAs dep (view-as correctness) + weekly-kpi.ts unused eslint-disable

MARS-595 mars Backlog low

Disposition MARS-373 archive-context WARN on 2 immutable applied migrations

MARS-594 mars Backlog low

users.displayName NOT NULL DEFAULT '' allows silent empty-name insert (siblings CHECK-reject)

MARS-591 mars Backlog low

Retro cross-vendor audit review of MARS-562 / SHA 872495a (mig 091 get_comision_picked_teachers SECURITY INVOKER + three-way REVOKE + jtps-subquery repoint) — cold brief BOUNCED (audit-mars-ca offline, NOT buffered anywhere); re-fire the cold brief when audit-mars-ca returns

MARS-563 mars Backlog low

usuarios: replace per-user correlated roles/comisiones subplans with set-based CTEs

MARS-555 mars Backlog low

usuarios directory: align tier comment with emitted columns, consider programa/período columns

MARS-557 mars Backlog low

Link legacy routes (/alumnos, /docentes, /administrar/usuarios) into the new unified /usuarios directory + eventual consolidation decision

MARS-554 mars Backlog low

Staff hitting reporter /soporte/[id] for a non-owned existing ticket should redirect to /administrar/soporte/[id], not 404

MARS-551 mars Backlog low

Migrate Mars lookup-key columns from uuid-FK to value-code-text per §Lookup-Backed (deferred strict-compliance from MARS-544 exception)

MARS-546 mars Backlog low

resume-link.ts empty-env robustness: align ??->|| so empty-string NEXT_PUBLIC_APP_URL falls to prod host, not a hard URL() crash

MARS-543 mars Backlog low

MARS-526 fast-follow: focused action tests for updateAlumno hardening — null-JTP orphan (vs MARS-29), stale-updatedAt lost-update rejection, closed-periodo/period-scope guard. Audit noted as coverage gap, non-blocking.

MARS-535 mars Backlog low

EVO-75 mars leg: admin pending-items digest — open support tickets + access requests + correcciones to admins (Elazar)

MARS-533 mars Backlog low

Warn-tier friction (nudge-shown) real-time-pages PM — should be digest-only per friction-vs-error standard

MARS-529 mars Backlog low

EVO-70 tail: retire redundant after() email-outbox enqueue now that T1 trigger-wake is live

MARS-528 mars Backlog low

MARS-519 follow-up: add drift-breadcrumb comment in email-outbox.ts tying RECLAIM_AFTER + claim eligibility to the pg_cron T0 guard fn

MARS-521 mars Backlog low ↳ MARS-519

Dedupe double-fired rectificar-reminder toast on /mi-cursada

MARS-511 mars Backlog low

Apply MARS-507 #2 decorate pattern to mi-cursada/[id]/editar form

MARS-510 mars Backlog low

Consolidate vFrictionEvents 6-way view duplication onto canonical wrapper pattern

MARS-489 mars Backlog low

supportTickets.statusOptionId is uuid-keyed, not value-code (fleet standard gap)

MARS-487 mars Backlog low

Verify toast/backend-diagnostic dedup pairing on Mars

MARS-464 mars Backlog low

Migrate call-sites to canonical view names + drop old-named views (vPendingAccessRequests/vAccessRequestsPending, vFrictionEvents1w)

MARS-457 mars Backlog low

MARS-419: browser-mode integration test for native-validation coalescing

MARS-421 mars Backlog low

Audit Mars trackable routes for Historial change-history coverage gaps (extend the /practicas/[id] Historial pattern fleet-wide)

MARS-410 mars Backlog low

no-silent-failure lint false-positives on catch-empty inside comment prose — add offset-preserving comment-strip pre-pass

MARS-409 mars Backlog low

gitpush-pre lint: block value exports in use-server modules (PLUTO-491/492 class)

MARS-397 mars Backlog low

Conform Mars appEvents-immutability fn to fleet §5.1 TG_OP-keyed amendment (6794d0e)

MARS-385 mars Backlog low

Drop duplicate unique index users_normalizedemail_unique (dup of uq_users_normalizedEmail)

MARS-381 mars Backlog low

solicitudes needs-info to modal skin (all three modes, cosmetic, no functional change)

MARS-379 mars Backlog low

Migrate drain-email-outbox cron (jobid=6) off inline bearer onto vault cron_auth_header()

MARS-378 mars Backlog low

Pruning strategy for append-only growing tables: appEvents (2334 rows), notifications (5202 rows), imageUploadAnalysisEvents (4327 rows) — no TTL/rotation defined; design retention policy + purge job

MARS-294 mars Backlog low

Cátedra branding sweep p3: URL slug strategy

MARS-279 mars Backlog low

Enable pg_cron + daily errorDigestSnapshots table so error trends survive appEvents pruning (WI#390)

MARS-334 mars Backlog low

Plan: patient DNI/HC number storage + cross-record sharing - enable future autocomplete-suggest, mismatch warnings ('DNI ya existe con otro nombre'), statistics

MARS-331 mars Backlog low

helpArticles + helpArticleTags tables: 0 rows, no known app surface — PM decision: implement in-app help or drop scaffolding

MARS-300 mars Backlog low

studentPostgradoProgression table: 0 rows, no known app surface — PM decision: implement feature or drop table

MARS-299 mars Backlog low

Rotate Mars Supabase DB (postgres) password — leaked in git history

MARS-135 mars Backlog low

ADVISORY-ONLY (do not hard-fail push lane): soft-delete-filter static lint - flag FROM/JOIN on a soft-deletable table without deletedAt IS NULL / active-view. Split out of MARS-373 because it's inherently false-positive-heavy (can't statically prove filtering across multi-line/dynamic SQL) and has NO proven source (pluto never shipped one, contrary to an earlier relay). Real soft-delete-leak coverage already exists via auditsolo negative-assertion (seed a deleted row, assert excluded) + the MARS-202 active-view-by-default epic. Only worth building as an added-lines-only advisory heuristic IF the leak class recurs; otherwise MARS-202 is the structural fix. Source: MARS-373 recon 2026-07-02.

MARS-374 mars Backlog low

Add unconditional liveness heartbeats to send-weekly-kpi + support-tickets-digest cron routes (watchdog-coverage prerequisite)

MARS-347 mars Backlog low

MARS-373 follow-ups (parked, low-urgency): (a) requireAuthForAction-PRESENCE companion push-lint — flag a session-backed server-ACTION write to an audited table missing the view-as guard (require-cap.ts chokepoint); conditional coupling, MUST NOT fire on cron/system:/tsx-repair/read paths (audit scoping guard). Closes the MARS-163-class silent-omission residual audit could not exhaustively rule out on MARS-352 view-as. (b) Hard-flip readiness for the archive-context-presence lint: currently WARN-permanent per audit; flip to hard-fail ONLY after closing the 204254-function-body (CREATE FUNCTION/DO) DML false-positive class + the 2 other KNOWN-GAPS (unquoted-lowercase DML, multi-file txns). audit sign-off required before any flip. Source: MARS-373 close 2026-07-02.

MARS-375 mars Backlog low

Index cold FK columns deferred from advisor sweep

MARS-67 mars Backlog low

Telemetry tail from MARS-369: notificaciones markAllRead/markReadAndNavigate + consumeRectificarToasts lack try/catch telemetry. Deferred: minor impact + markReadAndNavigate redirect()-in-catch hazard (NEXT_REDIRECT throws-to-signal) needs careful handling.

MARS-371 mars Backlog low

error-digest client-noise exclusion is inert: keys on detail IS NULL, but client unhandled-errors now always carry detail{os,browser}, so the intended exclusion never matches and lone transient client 'network error' rows surface in errscan. Fix the exclusion predicate to match the intended client-noise class WITHOUT class-suppressing real client errors (design-gate, not a blind broaden). Pairs with MARS-343 forensic-capture gap.

MARS-349 mars Backlog low

informes follow-up: grader keeps credit even after student SA lapses (LEFT-JOIN vStudentAssignments on the graded axis)

MARS-5 mars Backlog low

student-assignment-tcm.ts peer-inference fallback (L188-234) seeds a NULL SA from OTHER students' practicas.jtpUserId/ayudanteUserId snapshot; TCM-gated (deletedAt IS NULL + role-matched) so stale teachers rejected — NOT a rule-(b) violation, low risk. Tighten to prefer live peer SA over práctica snapshot.

MARS-22 mars Backlog low ↳ MARS-21

11 active studentAssignments rows with NULL assignedTeacherUserId — students with no teacher assigned (pre-dates 2026-06-06, surfaced during MARS-40). Fix path: evidence-based auto-assign per no-operator model (NOT an admin-pick UI). Triage when bandwidth allows.

MARS-43 mars Backlog low

Graceful handling of stale server-action-ID (deploy-skew) in global error boundary

MARS-53 mars Backlog low

Stop the recurring push stash-dance: gitignore untracked auditor scaffolding + resolve parked pm/codex-says.md

MARS-56 mars Backlog low

Cross-app: port Mars error-digest cron (errores 24h digest email) to Pluto + Venus — Elazar greenlit 2026-06-07, NOT now. Each app gets its own daily digest cron + threshold + recipient. Pluto/Venus PMs mirror in their backlogs when picked up; this is the tracking SSOT.

MARS-63 mars Backlog low

Drop legacy accessRequests.status text col — statusOptionId FK is the enforced gate; plain text col is unconstrained dead weight (surfaced during Pluto PLUTO-22 cross-app alignment)

MARS-92 mars Backlog low

/informes table overflows 43px @360 (861px table-wrap) — needs mobile card/scroll mode

MARS-100 mars Backlog low

Weekly ux-pain digest delivery: move to Vercel-cron→authenticated-POST-to-hub→PM-drains-on-reconnect (remove relay-row/always-on-agent dependency). Blocked on llmmsg-maintainer answers: (1) can Vercel POST to hub from outside the reverse tunnel with an auth key, (2) unread-buffer retention/TTL must exceed weekly digest interval so an offline PM still receives it. Applies to mars (replace MARS-84 relay-row) + venus + pluto toast-ports. db agents are NOT 24/7 so a db-host cron is not viable; only nw agents + maybe PMs run 24/7.

MARS-102 mars Backlog low

/notificaciones modest payload trim: paginate the 100-row list + replace 100 per-row server-action-bound <form>s with one delegated action/link nav (smaller RSC payload + less hydration). Not a perf bug — cold-start was the 6s cause; this is opportunistic. No DB/infra change.

MARS-103 mars Backlog low

Mars: track index/DDL changes in-repo — schema.md omits indexes (0 index refs) and DDL is applied via Supabase MCP (recorded only in Supabase migrations table), so index changes like ix_appEvents_category_action_createdAt have no git-side record. Add index export to export-db.py OR adopt a db/migrations file convention so DDL is reproducible/reviewable from the repo.

MARS-117 mars Backlog low

CI/lint guard: flag raw-email ('email =' / lower(email) =) compares in auth + lookup paths; force normalizedEmail-column compares

MARS-154 mars Backlog low

Real-time error push + observe-only auto-heal protocol (bs-mqn2ze006f7 fleet-ratified)

MARS-160 mars Backlog low

Mars DB hygiene (no IO risk, found in 06-15 Disk-IO self-check): (1) VACUUM ANALYZE teacherComisionMemberships (65d stale, 19.7% dead); (2) lower autovacuum_vacuum_scale_factor on notifications (high churn); (3) drop unused idx_st_createdbyuserid on supportTickets (0 scans, 13 rows); (4) index users.comisionId when query plans warrant. All reversible, audit pre-apply DDL review.

MARS-131 mars Backlog low

Orphaned-pending picks: reassign-pending-practicas handling after write-path retire (MARS-136)

MARS-137 mars Backlog low

getJtpStats PENDING axis is SA-populated while admin-delta-report + vPracticasSinEvaluar are SA-free — informes oracle can miss a picked-but-no-active-SA práctica

MARS-138 mars Backlog low

Conform Mars monitoring/notifications to fleet scrp- standard (bs-mqmr47bwkk4)

MARS-155 mars Backlog low

log-error/log-toast/log-client-env: realUserId attribution under view-as (parity with MARS-352 log-ux-event). MARS-352 fixed /api/log-ux-event to credit session.realUserId (the real admin) not session.id (the impersonated target) under view-as, so UX-pain abandon-derivation isn't poisoned by events the target never triggered. The sibling client-log sinks log-error/log-toast/log-client-env share the same target-attribution-under-view-as property (the UX-pain miner groups by user) — apply the same realUserId fold-in + isViewAs-in-detail to those 3 routes for parity. Out of MARS-352 scope (security invariant + nav UX were the gate); forensic-attribution hygiene. Surfaced by coder during MARS-352 Class-A review.

MARS-354 mars Backlog low

JTP-facing 'solicitar rectificación / reabrir' action: flip graded (aprobado/desaprobado) práctica back to rectificar through the app (audited), so students can correct submitted uploads without a DB poke

MARS-177 mars Backlog low

Add support: prefix to mars-archive-reasons.md vocab + .gitpush-pre.sh reason-prefix allowlist

MARS-178 mars Backlog low

practicaDailySeq gap-fill needs partial unique index first: uq_practicas_student_date_seq is non-partial, so a soft-deleted práctica keeps its (studentUserId,date,seq) slot. Adding deletedAt IS NULL to the seq-counter MAX (MARS-203 item-1) would let re-mint reuse a taken slot → unique_violation 500. Audit BLOCKED + reverted item-1 (guard comment left documenting the trap). REAL fix (2 steps): (1) db migration — make uq_practicas_student_date_seq PARTIAL (WHERE deletedAt IS NULL), audit pre-apply review; (2) THEN coder re-adds the deletedAt filter to the seq counter so gap-fill is safe. Benign/cosmetic today (folio gap after same-day delete-recreate), low urgency. Same partial-index class as MARS-181.

MARS-206 mars Backlog low

perf: practicaImages rotation UPDATE — scope-validate trigger fires on all UPDATEs

MARS-167 mars Backlog low

EVO-12 follow-up: catch-all API 404 capture (app/api/[...slug]/route.ts) — nonexistent /api/* routes have no Next render/error hook so they escape both the page-404 server capture (MARS-155) and instrumentation.ts (500s only); add a catch-all route that classifies+tiers+logs API 404s through the same shared log path

MARS-162 mars Backlog low

Rename studentAssignments.jtpUserId → assignedTeacherUserId

MARS-208 mars Backlog low

CR-7 comisionChangeRequests

MARS-214 mars Backlog low

Mobile layout-hardening at 384-415px portrait cohort (visual QA, browser-tool agent)

MARS-158 mars Backlog low

Optional: relabel Mars self-probe appEvents rows action='self-probe' (cosmetic, non-blocking)

MARS-175 mars Backlog low

Large-screen sales-surface polish: xl/2xl density tiers + form line-length cap + side-gutter filters (bs-mqmxqxwop02)

MARS-159 mars Backlog low

Add unit-test harness + normalizeEmail parity tests

MARS-152 mars Backlog low

Bound uploadImage/deleteImage timeout (data-driven, not guessed)

MARS-630 mars Backlog someday

MARS-532 import-preview surfacing: bulk CSV interlock shows per-row fail-closed apply but no batch preview of would-be-halted rows — PARKED (Elazar: bulk not operationally important)

MARS-538 mars Backlog someday

Consider collapsing toast+banner double-log on first /mi-cursada rectificar view

MARS-424 mars Backlog someday