support-admin: no way to close an access request that duplicates an account the person already uses - access-reject emails a false denial

MARS-776 mars Blocked high

/practicas list query hit the 10s statement_timeout twice for a real user: CTEs aggregate all practicas' teeth and images per call

MARS-736 mars Blocked high

Safeguard forced práctica unlock with student save grace period and teacher confirmation

MARS-738 mars Blocked high

EVO-12 mars leg: server-side 404/error capture replacing the client-only rail (filed because the leg lived only in an event body for 82 days)

MARS-724 mars Blocked high ↳ EVO-12

SOP support-api: stakeholder-pair-only private comments (CRUD + notify shipped)

MARS-467 mars Blocked high ↳ EVO-52

Support API: restrict internal-note visibility to Elazar plus ticket stakeholder

MARS-732 mars Blocked high

Disk used-vs-provisioned alarm: unreachable from SQL, and autoscale reports configured while inert below LARGE compute

MARS-711 mars Blocked high

statement_timeout errors spreading beyond MARS-736 scope: /practicas/[id] POST actions, /comisiones/[id], /alumnos

MARS-743 mars Blocked high

pg_net EXECUTE to PUBLIC: measure whether this ref grants net.http_post to every login role

MARS-712 mars Blocked high

Supabase saturation: instance-wide execution stalls (Oct-5 class) + PostgREST retry loop + Nano tier - root cause and fix plan (planning cost UNMEASURED: track_planning off)

MARS-769 mars Blocked high

Monitor WAL file count + archiver failures - 34h of failed archiving went completely unseen

MARS-703 mars Blocked high

vPracticaHistorial planning-cost fix for get_practica_detail_bundle, split from MARS-752

MARS-809 mars Backlog ↳ MARS-752

resolutionNote goes to the reporter verbatim as the email body, with nothing warning the author or screening internals

MARS-779 mars Blocked

administrar-actions.ts: "use server" file exports roster getters with no in-function gate (getDocenteMemberships, getAlumnoAssignments, getAlumnoAssignmentsForPeriodos, getComisionesWithCounts, getPeriodoDetail...)

MARS-748 mars Blocked

Endodoncia I comision LETTER CONFLICT (SOP-MARS-58): Mars follows the client 209-x-es-y mapping 6/6 and the catedra attendance sheet uses the other letter - client decision, not a data repair

MARS-728 mars Blocked

Review-depth pilot close: reconciliation is unverifiable by construction - Elazar decides keep classifier / drop pilot

MARS-705 mars Blocked

Nota/concepto-final grading column — spec needed from Elazar before build

MARS-444 mars Blocked

EVO-123: convert 11 UPDATE OF invariant guards to AFTER/no-column-list

MARS-801 mars Backlog

Queryable not-xray image view: count + % of uploaded práctica images flagged as NOT a real radiografía. Elazar 2026-06-26: he has not seen one real x-ray — ~99% are photos of a monitor screen, not actual radiographs. The image-analysis path already produces a flag (a 3-letter code/word per Elazar) that marks an image as not-an-xray. Build a DB view (db + coder) over the existing image-analysis data (likely imageUploadAnalysisEvents) that reports total images vs flagged-not-xray count and percentage, queryable any time (overall + optionally by periodo/comisión/recent-window). FIRST identify the actual flag field + its not-xray value. Read/analysis surface only, no enforcement/blocking. Build deferred — tracking only.

MARS-200 mars Blocked

Resolve provenance/allowed-set for applog_reader EXECUTE on fn_dbperf_statements_top50

MARS-804 mars Backlog

Fleet appEvents schema standardization: single log(entry) entrypoint (no level-wrappers) + promote hot fields to real columns, minimize jsonb-blob reliance

MARS-411 mars Todo

Mars appEvents conform to fleet standard (evolutiva-appevents-standard.md): add categoryId uuid FK->lookupOptions + seed appEventCategory group (16 canonical + practica/studentAssignment/assignment) + backfill 18 free-text values w/ mapping; add 4 promoted cols (httpStatus/durationMs/path/failureCode); add logError/logWarn/logInfo wrappers + pickKnown + isCritical sync-bypass; append-only trigger (GUC-bypass) AFTER appEventRelays sidecar cutover (replace detail.relay.delivered UPDATE pattern); replace level-only prune with 5-cat-security tiered retention; canonical v_appEvents_* views; legacy_events sink. Staged db+coder. BLOCKED on committed SSOT + Elazar priority call.

MARS-107 mars Blocked

Two Mars access requests pending 4-5 days, triaged and approvable - need an admin in the UI (approveRequest is session-bound)

MARS-746 mars Blocked

└─ SOP-MARS-65: which email should Camila Mamani Cardozo use (blocks SOL-MARS-59)

MARS-760 mars Backlog

mars appEvents stores a raw client ip on exactly one rail - the 404 capture - and nowhere else: 19 of 14276 rows in 30d

MARS-796 mars Blocked

Replace MARS-691's daily reminder with event-triggered alerts (ECHECKOUTTIMEOUT+pool counters, non-stall statement_timeout kill, checkpoint write) - retire the timer only in the same change

MARS-729 mars Backlog

Safari-only opaque 'Script error.' hides 30% of Safari's unhandled errors: 33 events / 20 users since June, zero stack on every one

MARS-782 mars Backlog

MARS-84 UX-pain digest can never reach its pattern threshold for parameterised toasts: feedbackKey embeds the entity id, so one problem fragments into 11 keys

MARS-780 mars Backlog

authenticator lost supautils from session_preload_libraries - dashboard-only fix, blocked on Elazar

MARS-775 mars Backlog

Runtime-role DML smoke test: exercise each affected verb through the real code path AS mars_app_runtime, not an information_schema grants assert

MARS-771 mars Backlog

Alert on postgres_logs 'checkpoint complete' with write= over a few seconds - would have fired BEFORE the 2026-09-04 student-visible 500s

MARS-733 mars Deferred

Restore Mars error->email-to-Elazar loop (bs-mqn8g0rhso5 fleet decision): B ESOCKET operator-email hotfix (after->emailOutbox enqueue) + C instant-error-email onRequestError->enqueue direct-to-Elazar, throttled

MARS-161 mars Backlog

EVO-58 admin storage tile (Hostinger 25GB) — /administrar ambient panel

MARS-513 mars Blocked

The weekly-kpi DATABASE_URL_DIRECT pool may share mars_app_runtime and silently inherit its 10s statement_timeout, which would kill a long KPI batch

MARS-714 mars Backlog

Full write-to-human appEvents consumer/gate/transform enumeration for mars

MARS-590 mars Backlog

usuarios: DB-backed regression tests for updateAlumno/tier authz matrix

MARS-556 mars Backlog

Opportunistic compliance: rename tipoDocumento/numeroDocumento -> documentoType/documentoNumber (entity-first) on users + accessRequests; confirm stored value stays lowercase 'dni'/'pasaporte' (Mars already correct)

MARS-406 mars Backlog

Refactor DataTable onto shared Pluto sort core (vendored)

MARS-394 mars Backlog

Mars logging structural hardening (R1 follow-up): middleware-injected requestId correlation + actor de-anon in onRequestError (F-3/F-4), isCritical sync-write for auth/authz/security cats (F-5), log-error 5min digest dedup (F-6) — audit design-review first (middleware is auth-adjacent)

MARS-116 mars Backlog

Vercel runtime-log API billing-capped (ExceedsBillingLimitError) — blinds PTD runtime-log gate until cap reset/raised

MARS-141 mars Backlog

Reconcile 'principal' JTP checkbox on /docentes vs no-principal-JTP claim

MARS-610 mars Backlog

Práctica-create uploads to api-images before the transaction commits: pre-row orphans, no sweeper

MARS-693 mars Backlog

instrumentation.ts pulls pg (node driver) into the Edge middleware graph — move error-capture behind an Edge-safe boundary

MARS-452 mars Backlog

Percent-encoded path evasion bypasses SCANNER_PROBE_RE allowlist entirely

MARS-586 mars Backlog

EVO-57 Mars: audit-trail schema normalization plan (coverage + naming)

MARS-492 mars Blocked ↳ EVO-57

└─ WP4c: archive twins + triggers for practicaReviews + practicaComentarios + studentPostgradoProgression

MARS-497 mars Deferred

└─ WP4b: archive twins + triggers for supportTickets/Messages/NotifySubscriptions + accessRequests + accountSwitchLinks

MARS-496 mars Deferred

└─ WP4a: archive twins + triggers for userRoles + lookupOptions

MARS-495 mars Deferred

└─ WP2+WP3: add deletedByUserId + createdByUserId coverage columns

MARS-494 mars Deferred

└─ WP1 naming: deletedBy -> deletedByUserId dual-column shim

MARS-493 mars Deferred

practicaCodigo format: add PRA-MARS- prefix

MARS-614 mars Backlog

Adopt Pluto admin-list/detail reference pattern (5 principles) on Mars

MARS-482 mars Backlog

EPIC mobile-first refactor (Elazar directive, all 3 apps): Mars is desktop-CSS-with-patches, not mobile-first. Staged base-up rework. Stage0 foundation (44px tap floor + search/form fixes, mobile-only media blocks, desktop density unchanged); Stage1 DataTable mobile card mode (fixes /practicas + /docentes); Stage2 /mi-cursada; Stage3 /practicas/nueva form (+tooth-selector tap targets, +undefined .conducto-* classes latent bug); Stage4 filter-bar accordion; Stage5 practica detail (/practicas/[id]+/mi-cursada/[id]: info-bar, changelog, comentarios, review-form, image-viewer pinch-zoom currently broken on mobile); Stage6 secondary (soporte thread, notificaciones, perfil, postgrado-progression). Order 0>1>2>3>5>4>6. Owners: coder-mars-cc 0/3/5, coder02-mars-cc 1/6. Held on proxy-mars BEFORE baseline (Elazar launching). Admin wide-tables=P3 tail/defer.

MARS-97 mars Backlog

Formalize numeroHistoriaClinica as validated patient DNI (governance-gated)

MARS-534 mars Backlog ↳ EVO-80

Adjunto oversight/governability landing: adjunto logs in -> lands on a page showing comisión health, which JTPs need help, pending workload (Elazar 06-06, q3). NEEDS DESIGN/BRAINSTORM - distinct surface from /practicas

MARS-35 mars Backlog

PM DB-fed triage loop: support-ticket + access-request events DM PM; PM reads DB + triages (bs-mqotdmmk6b5)

MARS-174 mars Backlog

Custom 404: add LLM-copy block to not-found page + enrich routing/not-found event (referrer, appVersion, requestId) + rate-limiter

MARS-330 mars Backlog

jtp_roster (?jtp= query, MARS-474 P2): join-order defect fires review LATERAL 1.6M times instead of ~3K

MARS-685 mars Backlog

get_practica_detail_bundle unexplained exec-time regression (up to 46.7s max)

MARS-680 mars Backlog

Mobile practica-create failures are undiagnosable: client 'Failed to fetch' leaves no server-side row

MARS-679 mars Backlog

Verify restored-Mars object completeness after bin-whey-cc's rail patch

MARS-675 mars Backlog

Archive trigger captures NEW not OLD on UPDATE — verify forensic recovery coverage across audited tables (db)

MARS-64 mars In progress

Práctica edit-quota lock burns a slot on tab-abandon, not just on save

MARS-646 mars Backlog

Standardize /alumnos filters onto the shared URL-param filter pattern

MARS-635 mars Backlog

Profile photo escalating nag -> hard block on 10th prompt; show photo in practica for teacher identification

MARS-580 mars Backlog

restoreUser must regrant roles after MARS-382 soft-delete cascade (role-less restore gap)

MARS-479 mars Backlog ↳ MARS-382

/practicas dashboard: pending-queue rows repeat in the flat table — dedup UX (Elazar option pick pending)

MARS-478 mars Backlog

CI guard: static logEvent call-site scan vs checked-in action-classification manifest (MARS-465 follow-up)

MARS-466 mars Backlog

Admin landing: pinned-first sidebar + numbered emoji card grid (fleet-uniform pattern, bs-mrlnhbp0y3n)

MARS-458 mars Backlog

Middleware session-refresh (createServerClient) -- edge-bundle-safe design needed

MARS-454 mars Backlog

MARS-145 follow-up: daytime-peak 53300 re-scan of the txn-pooler runtime pool

MARS-383 mars Backlog

EVO-47 db-lane: redefine vAppErrorsRecent + vAppAlertsRecent to expose level + category + normalizedRoute; rollup signature = normalizedRoute+level+category (subsumes EVO-46 lane-2 distinctPaths). Enables the level/category-aware alert-suppression predicate. Class-A review pre-apply (reversible CREATE OR REPLACE VIEW).

MARS-344 mars Backlog

Support-agent registry + atomic assign/list-budget functions for support-API

MARS-648 mars Backlog

Add a main-JTP designation to comisiones

MARS-608 mars Backlog

route.ts: /api/log-error outer catch swallows its own failures, no appEvents row

MARS-577 mars Backlog

Audit PTD render-GET tooling: enable exercising authed routes (dedicated test-user + stored session, OR a server-side render-self-check route) — Mars leg of the cross-project gap that let Pluto's /informes 500 ship unexercised (audit unauth render-GET -> 302/login, authed routes never actually rendered in PTD)

MARS-118 mars Blocked

└─ Refactor session-reading src/lib modules to take an explicit actor param instead of calling getSession() internally

MARS-721 mars Backlog low

Student duplicate-práctica deletion request: student requests delete (reason=duplicate), picks keeper from pulldown, teacher approves -> non-keeper soft-deleted

MARS-147 mars Todo

Materialise the reviewer-vs-assigned-pick discriminator on practicaReviews, then label both surfaces

MARS-213 mars Todo

EVO-72 driver: approval emails are not coalesced against burst grading (median 55min for 8 emails) - decide the coalescing policy

MARS-719 mars Backlog ↳ MARS-525

Teachers can claim out-of-scope students as theirs (JTP/ayudante takeover)

MARS-553 mars Backlog

Sidebar/navbar per-role regroup (Stage A): execute the holistic restructure the /sidebars-preview diagnostic (75ad66f, 2026-06-04) was built to inform. Per-role nav still cluttered/inconsistent. Use the preview tool (renders real sidebar per role side-by-side) to design grouping, then regroup. Only piecemeal edits landed since (MARS-33/34, WI#327, WI#214); holistic cleanup dropped + untracked until now (Elazar 06-09).

MARS-77 mars Backlog

Real-life-as-SSOT JTP attribution analysis: quantify divergence between start-of-year studentAssignments (error-prone excel import) and actual student JTP picks (práctica.jtpUserId). Two mismatch classes: (1) JTP students picked but aren't assigned to; (2) students assigned to a JTP who picked a different one. Analysis only first (no writes); evidence base for evidence-based reassignment (NOT admin-pick UI). Links MARS-43 + live-vs-snapshot rule. (Elazar 2026-06-14)

MARS-126 mars Backlog

EPIC: shift /users /estudiantes /docentes from admin-dashboard mgmt to self-managed roster (JTP/Ayudante/Adjunto/students self-pick relationships + self-confirmation workflow)

MARS-87 mars Backlog

Proactive unreviewed-práctica backlog outreach: identify top 3-4 teachers (JTPs) by sin-revisión backlog, the active JTP in each's comisión, the adjunto + titular; draft email to adjunto/titular asking how to address the backlog before it's insurmountable. Real-audience outbound — held for Elazar approval before send. (Elazar 2026-06-14)

MARS-125 mars Backlog

EPIC active-view-by-default (Elazar directive 2026-06-26): every soft-deletable table (deletedAt column) must have a canonical active-view filtering deletedAt IS NULL; the app reads the view BY DEFAULT and the raw table only for admin/restore access. Root structural fix for the practica-link-dead class (soft-deleted prácticas still rendering as clickable links to teachers) and any future see-the-deleted-row bug. Scope: (1) db inventory tables-with-deletedAt vs existing active-views + the gap + ONE canonical naming convention (existing views fork camelCase vStudentAssignments vs proposed v_<table>); (2) coder map app read-paths hitting raw tables that must switch to the view, and the admin/restore paths that keep raw access; (3) create missing views; (4) migrate app reads; (5) audit each read-path swap. Staged, reversible per-view+per-path. Cross-project pattern candidate (mirror to pluto/venus). Plan-first; do not build until Elazar sees scope.

MARS-202 mars Backlog

SCANNER_PROBE_RE gap: vendor appliance path /access/api/v1/system/ping pages on mars and pluto, 3 hits from 3 IPs

MARS-790 mars Blocked low

└─ MARS-790 step 5: SCANNER_PROBE_RE must be assertable directly - tail vectors are green lines in 4 of 5 apps

MARS-791 mars Backlog low

Image-proxy read path does not retry a 20s TTFB abort, so the student gets a 500 even though a fresh connection would likely be served

MARS-792 mars In progress low

bedel can write: updateImageRotation reachable by any read-only-all bedel via canViewPractica

MARS-747 mars Blocked low

Review-depth pilot: measure audit token burn and shallow-sample quality

MARS-802 mars Blocked low

No surface can add conductos to an existing practica, so a tipo change into endo costs the student their practica

MARS-785 mars Blocked low

Post-commit student notification is fire-and-forget: a transient INSERT timeout loses the in-app notice permanently, and its only redundancy is a sibling best-effort email

MARS-793 mars Backlog low

WATCH: post-MARS-799 connection phase evidence

MARS-787 mars Backlog low

Client fetch drop on /practicas/nueva: 48 events, 29 students, and 19 of the 48 show no practica within 24h

MARS-789 mars Backlog low

applog digest re-delivers event ids the real-time and suppressed paths already sent

MARS-786 mars Backlog low

Remaining agent ops on the internal support surface: roles/user/flags/jtp-reassign + access-request trio (blocked on Elazar)

MARS-777 mars Blocked low

Staff ticket-notification email has no outbox retry (immediate:true bypass)

MARS-757 mars Backlog low

Rotate Mars Supabase DB (postgres) password — leaked in git history

MARS-135 mars Blocked low

Retro independent review of MARS-562 / SHA 872495a (migration 091...)

MARS-563 mars Backlog low

Notifications never clear on resolution: 93% of unread access-request pings and 78% of unread practicaToReview pings point at already-decided work

MARS-726 mars Backlog low

Weekly ux-pain digest delivery: move to Vercel-cron→authenticated-POST-to-hub→PM-drains-on-reconnect (remove relay-row/always-on-agent dependency). Blocked on llmmsg-maintainer answers: (1) can Vercel POST to hub from outside the reverse tunnel with an auth key, (2) unread-buffer retention/TTL must exceed weekly digest interval so an offline PM still receives it. Applies to mars (replace MARS-84 relay-row) + venus + pluto toast-ports. db agents are NOT 24/7 so a db-host cron is not viable; only nw agents + maybe PMs run 24/7.

MARS-102 mars Todo low

login-email-drift-blocked: consider auto-sync email when supabaseAuthId sub already matches

MARS-602 mars Backlog low

Standing audit: nextjs/nodejs → Postgres pushdown — find Node-side aggregations/filters that should be DB views/functions, refactor opportunistically

MARS-247 mars Backlog low

student-assignment-tcm.ts peer-inference fallback (L188-234) seeds a NULL SA from OTHER students' practicas.jtpUserId/ayudanteUserId snapshot; TCM-gated (deletedAt IS NULL + role-matched) so stale teachers rejected — NOT a rule-(b) violation, low risk. Tighten to prefer live peer SA over práctica snapshot.

MARS-22 mars Backlog low ↳ MARS-21

Friendlier landing for a soft-deleted práctica link (vs generic 404)

MARS-706 mars Backlog low ↳ MARS-583

vUsuariosDirectory: lateral aggregates compute for all 758 users before LIMIT

MARS-681 mars Backlog low

Load-failed class: capture visibilityState + nav-in-flight at throw time

MARS-640 mars Backlog low

Apply MARS-507 #2 decorate pattern to mi-cursada/[id]/editar form

MARS-510 mars Backlog low

MARS-419: browser-mode integration test for native-validation coalescing

MARS-421 mars Backlog low

gitpush-pre lint: block value exports in use-server modules (PLUTO-491/492 class)

MARS-397 mars Backlog low

Consolidate vFrictionEvents 6-way view duplication onto canonical wrapper pattern

MARS-489 mars Backlog low

ALTER DEFAULT PRIVILEGES: decide whether to narrow the agent roles too, after the MARS-707 fence has proven itself on mars_app_runtime

MARS-708 mars Backlog low

Tech-debt sweep: catalog unused DB objects (tables/columns/views, e.g. 0-row #395/#396, redundant text cols #394) + dead app-code fields/exports; file one deletion WI per finding (Elazar 06-05: stop brushing off 'legacy field we dont use')

MARS-13 mars Backlog low

PARKED until measured: consolidate serial write paths into set-based SQL (practica create/edit, perfil, memberships)

MARS-690 mars Backlog low

vPracticaHistorial repeats lookupOptions Seq Scans across its 4 archive branches

MARS-674 mars Backlog low

usuarios: replace per-user correlated roles/comisiones subplans with set-based CTEs

MARS-555 mars Backlog low

Verify toast/backend-diagnostic dedup pairing on Mars

MARS-464 mars Backlog low

Pruning strategy for append-only growing tables: appEvents (2334 rows), notifications (5202 rows), imageUploadAnalysisEvents (4327 rows) — no TTL/rotation defined; design retention policy + purge job

MARS-294 mars Backlog low

Transient fetch failure on practica /editar has no retry or draft; user remedy is delete

MARS-730 mars Backlog low

404 digest count inflation: error-digest reports 11 /mi-cursada 404s but appEvents shows only 2 — reconcile digest aggregation vs raw appEvents rows (possible double-count, window mismatch, or path-glob over-match). Source: audit /mi-cursada triage, de2e960 window. mem: appevents double-render dedupe (not-found-log.ts isDuplicateRender) is one suspect.

MARS-164 mars Backlog low

Build re-runnable orphan-image reference counter before any sweeper (api-images)

MARS-697 mars Backlog low

estadisticas: dead outlier-detection rule, never fires (since MARS-193)

MARS-639 mars Backlog low

Sweep for other per-request/standing-condition alerts that should use logEventOnce

MARS-618 mars Backlog low

Restore column sorting on /administrar/usuarios (server-side, post-MARS-615)

MARS-616 mars Backlog low

Make role->capability map DB-owned, or add a cross-layer drift guard (CAPS vs fn_admin_invariant_ok)

MARS-605 mars Backlog low

users email-guard hygiene: normalizedEmail (app normalizeEmail) vs uq_users_email_ci (SQL canonicalizeEmail) disagree on 3 live rows; + duplicate index users_normalizedemail_unique == uq_users_normalizedEmail

MARS-566 mars Backlog low

9 archive tables have zero retention/prune — unbounded growth, fleet-wide pattern (also on venus)

MARS-598 mars Backlog low

edit-form.tsx missing isViewAs dep (view-as correctness) + weekly-kpi.ts unused eslint-disable

MARS-595 mars Backlog low

Disposition MARS-373 archive-context WARN on 2 immutable applied migrations

MARS-594 mars Backlog low

users.displayName NOT NULL DEFAULT '' allows silent empty-name insert (siblings CHECK-reject)

MARS-591 mars Backlog low

usuarios directory: align tier comment with emitted columns, consider programa/período columns

MARS-557 mars Backlog low

Link legacy routes (/alumnos, /docentes, /administrar/usuarios) into the new unified /usuarios directory + eventual consolidation decision

MARS-554 mars Backlog low

Staff hitting reporter /soporte/[id] for a non-owned existing ticket should redirect to /administrar/soporte/[id], not 404

MARS-551 mars Backlog low

Migrate Mars lookup-key columns from uuid-FK to value-code-text per §Lookup-Backed (deferred strict-compliance from MARS-544 exception)

MARS-546 mars Backlog low

resume-link.ts empty-env robustness: align ??->|| so empty-string NEXT_PUBLIC_APP_URL falls to prod host, not a hard URL() crash

MARS-543 mars Backlog low

MARS-526 fast-follow: focused action tests for updateAlumno hardening — null-JTP orphan (vs MARS-29), stale-updatedAt lost-update rejection, closed-periodo/period-scope guard. Audit noted as coverage gap, non-blocking.

MARS-535 mars Backlog low

EVO-75 mars leg: admin pending-items digest — open support tickets + access requests + correcciones to admins (Elazar)

MARS-533 mars Backlog low

Warn-tier friction (nudge-shown) real-time-pages PM — should be digest-only per friction-vs-error standard

MARS-529 mars Backlog low

EVO-70 tail: retire redundant after() email-outbox enqueue now that T1 trigger-wake is live

MARS-528 mars Backlog low

MARS-519 follow-up: add drift-breadcrumb comment in email-outbox.ts tying RECLAIM_AFTER + claim eligibility to the pg_cron T0 guard fn

MARS-521 mars Backlog low ↳ MARS-519

supportTickets.statusOptionId is uuid-keyed, not value-code (fleet standard gap)

MARS-487 mars Backlog low

Audit Mars trackable routes for Historial change-history coverage gaps (extend the /practicas/[id] Historial pattern fleet-wide)

MARS-410 mars Backlog low

no-silent-failure lint false-positives on catch-empty inside comment prose — add offset-preserving comment-strip pre-pass

MARS-409 mars Backlog low

Conform Mars appEvents-immutability fn to fleet §5.1 TG_OP-keyed amendment (6794d0e)

MARS-385 mars Backlog low

Drop duplicate unique index users_normalizedemail_unique (dup of uq_users_normalizedEmail)

MARS-381 mars Backlog low

solicitudes needs-info to modal skin (all three modes, cosmetic, no functional change)

MARS-379 mars Backlog low

Migrate drain-email-outbox cron (jobid=6) off inline bearer onto vault cron_auth_header()

MARS-378 mars Backlog low

Cátedra branding sweep p3: URL slug strategy

MARS-279 mars Backlog low

Enable pg_cron + daily errorDigestSnapshots table so error trends survive appEvents pruning (WI#390)

MARS-334 mars Backlog low

Plan: patient DNI/HC number storage + cross-record sharing - enable future autocomplete-suggest, mismatch warnings ('DNI ya existe con otro nombre'), statistics

MARS-331 mars Backlog low

helpArticles + helpArticleTags tables: 0 rows, no known app surface — PM decision: implement in-app help or drop scaffolding

MARS-300 mars Backlog low

studentPostgradoProgression table: 0 rows, no known app surface — PM decision: implement feature or drop table

MARS-299 mars Backlog low

Add unit-test harness + normalizeEmail parity tests

MARS-152 mars Backlog low

Large-screen sales-surface polish: xl/2xl density tiers + form line-length cap + side-gutter filters (bs-mqmxqxwop02)

MARS-159 mars Backlog low

Optional: relabel Mars self-probe appEvents rows action='self-probe' (cosmetic, non-blocking)

MARS-175 mars Backlog low

informes follow-up: grader keeps credit even after student SA lapses (LEFT-JOIN vStudentAssignments on the graded axis)

MARS-5 mars Backlog low

Mobile layout-hardening at 384-415px portrait cohort (visual QA, browser-tool agent)

MARS-158 mars Backlog low

error-digest client-noise exclusion is inert: keys on detail IS NULL, but client unhandled-errors now always carry detail{os,browser}, so the intended exclusion never matches and lone transient client 'network error' rows surface in errscan. Fix the exclusion predicate to match the intended client-noise class WITHOUT class-suppressing real client errors (design-gate, not a blind broaden). Pairs with MARS-343 forensic-capture gap.

MARS-349 mars Backlog low

CR-7 comisionChangeRequests

MARS-214 mars Backlog low

Rename studentAssignments.jtpUserId → assignedTeacherUserId

MARS-208 mars Backlog low

EVO-12 follow-up: catch-all API 404 capture (app/api/[...slug]/route.ts) — nonexistent /api/* routes have no Next render/error hook so they escape both the page-404 server capture (MARS-155) and instrumentation.ts (500s only); add a catch-all route that classifies+tiers+logs API 404s through the same shared log path

MARS-162 mars Backlog low

perf: practicaImages rotation UPDATE — scope-validate trigger fires on all UPDATEs

MARS-167 mars Backlog low

Add support: prefix to mars-archive-reasons.md vocab + .gitpush-pre.sh reason-prefix allowlist

MARS-178 mars Backlog low

JTP-facing 'solicitar rectificación / reabrir' action: flip graded (aprobado/desaprobado) práctica back to rectificar through the app (audited), so students can correct submitted uploads without a DB poke

MARS-177 mars Backlog low

log-error/log-toast/log-client-env: realUserId attribution under view-as (parity with MARS-352 log-ux-event). MARS-352 fixed /api/log-ux-event to credit session.realUserId (the real admin) not session.id (the impersonated target) under view-as, so UX-pain abandon-derivation isn't poisoned by events the target never triggered. The sibling client-log sinks log-error/log-toast/log-client-env share the same target-attribution-under-view-as property (the UX-pain miner groups by user) — apply the same realUserId fold-in + isViewAs-in-detail to those 3 routes for parity. Out of MARS-352 scope (security invariant + nav UX were the gate); forensic-attribution hygiene. Surfaced by coder during MARS-352 Class-A review.

MARS-354 mars Backlog low

Conform Mars monitoring/notifications to fleet scrp- standard (bs-mqmr47bwkk4)

MARS-155 mars Backlog low

getJtpStats PENDING axis is SA-populated while admin-delta-report + vPracticasSinEvaluar are SA-free — informes oracle can miss a picked-but-no-active-SA práctica

MARS-138 mars Backlog low

Telemetry tail from MARS-369: notificaciones markAllRead/markReadAndNavigate + consumeRectificarToasts lack try/catch telemetry. Deferred: minor impact + markReadAndNavigate redirect()-in-catch hazard (NEXT_REDIRECT throws-to-signal) needs careful handling.

MARS-371 mars Backlog low

Orphaned-pending picks: reassign-pending-practicas handling after write-path retire (MARS-136)

MARS-137 mars Backlog low

ADVISORY-ONLY (do not hard-fail push lane): soft-delete-filter static lint - flag FROM/JOIN on a soft-deletable table without deletedAt IS NULL / active-view. Split out of MARS-373 because it's inherently false-positive-heavy (can't statically prove filtering across multi-line/dynamic SQL) and has NO proven source (pluto never shipped one, contrary to an earlier relay). Real soft-delete-leak coverage already exists via auditsolo negative-assertion (seed a deleted row, assert excluded) + the MARS-202 active-view-by-default epic. Only worth building as an added-lines-only advisory heuristic IF the leak class recurs; otherwise MARS-202 is the structural fix. Source: MARS-373 recon 2026-07-02.

MARS-374 mars Backlog low

Real-time error push + observe-only auto-heal protocol (bs-mqn2ze006f7 fleet-ratified)

MARS-160 mars Backlog low

CI/lint guard: flag raw-email ('email =' / lower(email) =) compares in auth + lookup paths; force normalizedEmail-column compares

MARS-154 mars Backlog low

Mars: track index/DDL changes in-repo — schema.md omits indexes (0 index refs) and DDL is applied via Supabase MCP (recorded only in Supabase migrations table), so index changes like ix_appEvents_category_action_createdAt have no git-side record. Add index export to export-db.py OR adopt a db/migrations file convention so DDL is reproducible/reviewable from the repo.

MARS-117 mars Backlog low

/notificaciones modest payload trim: paginate the 100-row list + replace 100 per-row server-action-bound <form>s with one delegated action/link nav (smaller RSC payload + less hydration). Not a perf bug — cold-start was the 6s cause; this is opportunistic. No DB/infra change.

MARS-103 mars Backlog low

/informes table overflows 43px @360 (861px table-wrap) — needs mobile card/scroll mode

MARS-100 mars Backlog low

Add unconditional liveness heartbeats to send-weekly-kpi + support-tickets-digest cron routes (watchdog-coverage prerequisite)

MARS-347 mars Backlog low

11 active studentAssignments rows with NULL assignedTeacherUserId — students with no teacher assigned (pre-dates 2026-06-06, surfaced during MARS-40). Fix path: evidence-based auto-assign per no-operator model (NOT an admin-pick UI). Triage when bandwidth allows.

MARS-43 mars Backlog low

Drop legacy accessRequests.status text col — statusOptionId FK is the enforced gate; plain text col is unconstrained dead weight (surfaced during Pluto PLUTO-22 cross-app alignment)

MARS-92 mars Backlog low

Stop the recurring push stash-dance: gitignore untracked auditor scaffolding + resolve parked pm/codex-says.md

MARS-56 mars Backlog low

MARS-373 follow-ups (parked, low-urgency): (a) requireAuthForAction-PRESENCE companion push-lint — flag a session-backed server-ACTION write to an audited table missing the view-as guard (require-cap.ts chokepoint); conditional coupling, MUST NOT fire on cron/system:/tsx-repair/read paths (audit scoping guard). Closes the MARS-163-class silent-omission residual audit could not exhaustively rule out on MARS-352 view-as. (b) Hard-flip readiness for the archive-context-presence lint: currently WARN-permanent per audit; flip to hard-fail ONLY after closing the 204254-function-body (CREATE FUNCTION/DO) DML false-positive class + the 2 other KNOWN-GAPS (unquoted-lowercase DML, multi-file txns). audit sign-off required before any flip. Source: MARS-373 close 2026-07-02.

MARS-375 mars Backlog low

Cross-app: port Mars error-digest cron (errores 24h digest email) to Pluto + Venus — Elazar greenlit 2026-06-07, NOT now. Each app gets its own daily digest cron + threshold + recipient. Pluto/Venus PMs mirror in their backlogs when picked up; this is the tracking SSOT.

MARS-63 mars Backlog low

404 /.well-known/mcp pages at warn tier: WELLKNOWN_BENIGN_RE is a closed 3-member set over a namespace that grows by external publication

MARS-725 mars Backlog someday

Decide whether replay fidelity of db/migrations/applied is a stated guarantee - if yes, retrofit the 19 name-only pg_proc post-checks

MARS-723 mars Backlog someday

Mars OAuth redirect_to bypasses resolveSiteOrigin() + 3 uncanonicalized prod hosts (TERRA-20-derived)

MARS-642 mars Backlog someday

error-tier toast/error-shown rows would page despite mig 074 mute (warn-only scope)

MARS-584 mars Backlog someday

Student eviction UX: warn before lock-break override (MARS-547)

MARS-657 mars Backlog someday

Extend friendly error copy to non-boundary (GlobalErrorHandler) transients

MARS-656 mars Backlog someday

Bound uploadImage/deleteImage timeout (data-driven, not guessed)

MARS-630 mars Backlog someday

MARS-532 import-preview surfacing: bulk CSV interlock shows per-row fail-closed apply but no batch preview of would-be-halted rows — PARKED (Elazar: bulk not operationally important)

MARS-538 mars Backlog someday

Consider collapsing toast+banner double-log on first /mi-cursada rectificar view

MARS-424 mars Backlog someday