Support-ticket API parity - create/triage/status ops + list read, no UI-only actions

PLUTO-700 pluto Backlog high

Operator-alert attempt ceiling (3.5s) sits below the SMTP transport's own connect timeout (10s) — races away connections that would have succeeded

PLUTO-688 pluto Backlog high

Unpinned authz-scope functions need explicit search_path design (pg_temp fleet finding)

PLUTO-666 pluto Backlog high

Retroactive audit-PASS verification: 21 Class-A commits with uncited self-noted verdicts

PLUTO-646 pluto Backlog high

lastPractica/inactiveStudents: persisted-attribution scope-gate

PLUTO-575 pluto Backlog high

Mobile-first refactor (Elazar all-app directive): audit + base-up redesign of layouts/nav/forms/touch-targets/breakpoints

PLUTO-40 pluto Backlog high

Real-time error tee: appEvents AFTER-INSERT pg_notify trigger on Pluto Supabase (error→PM DM, warn stays in digest). GATED on nw-venus's exact spec (channel name, WHEN-clause, payload — byte-identical channel+payload across 3 apps; host listener LISTENs + DMs PM). Pluto level vocab = error|warn|info (NO fatal) so WHEN-clause = level='error'. Pre-apply audit review per DDL discipline. Additive/reversible. Do NOT start until spec lands + 112 done.

PLUTO-116 pluto Backlog high

Treat 404 as error: emit level=error on 404 + email+DM + feed auto-fix protocol (Elazar 404-directive, kpi-n-optimization)

PLUTO-158 pluto Blocked high

Archive triggers RAISE on a missing app.user_id but silently NULL a missing app.archive_reason, so commons promises loud failure it does not deliver

PLUTO-707 pluto Backlog

CLAUDE.md cites a 6-prefix archiveReason policy that is defined nowhere in the repo

PLUTO-706 pluto Backlog

Comment notification quotes empty-content comments and fires on aprobado practicas

PLUTO-703 pluto Backlog

OAuth redirectTo pinned to validated canonical origin (was window.location.origin)

PLUTO-699 pluto Backlog

Declare maxDuration on /api/image, then set fetchImage timeout bound from sampled data

PLUTO-697 pluto Backlog

fetchImage needs AbortSignal.timeout, bound picked from Pluto's own latency data

PLUTO-696 pluto Backlog

Grading-path notification+email both lost on pool timeout (Class-A)

PLUTO-693 pluto Backlog

logCaughtError drops error.cause — every caught fetch failure is un-attributable

PLUTO-691 pluto Backlog

weeklyReport es un kind sin fila: el reporte KPI semanal solo existe en vuelo y catchUp() no puede re-barrerlo — perdida silenciosa e indistinguible de una semana tranquila

PLUTO-682 pluto Backlog

resolveFrom honra cualquier SMTP_FROM_* seteado sin validar — Gmail re-estampa el From y el mail sale mal atribuido (ambas vars seteadas en prod)

PLUTO-681 pluto Backlog

setPersonaRoles: replace-the-set sin baseline — dos superficies de admin de roles se pisan silenciosamente y la atribución del archive queda mal

PLUTO-680 pluto Backlog

Fleet DB-hardening directive — pluto leg (logging/principals/backups)

PLUTO-684 pluto Backlog

Scheduled GoTrue config-drift check (cron/applog rail, alerts not blocks)

PLUTO-634 pluto In progress

Stats glossary: footnote + tooltip explaining stat abbreviations in user-facing text

PLUTO-495 pluto In progress

Extend SCANNER_PROBE_RE with archive-probe family (/backup.tar|.7z|.rar|.zst|...) — 294 unsuppressed scanner 404s in one window

PLUTO-661 pluto Blocked

Add egress deliverability classifier at email-transport chokepoint (distinct from allowedEmailDomains admission gate)

PLUTO-674 pluto Backlog

appEvents has no success row for outbox-path email delivery

PLUTO-675 pluto Backlog

Retro cross-vendor review queue: 10 unreviewed pushes since audit-pluto-ca went dark

PLUTO-636 pluto In progress

Soft-deleted-user restore + identity-attach explicit two-step design

PLUTO-620 pluto Backlog ↳ EVO-79

Audit-trail schema plan (Pluto, EVO-57 child)

PLUTO-583 pluto Deferred ↳ EVO-57

└─ Actor backfill, provable-only (PLUTO-583D)

PLUTO-587 pluto Deferred

└─ Write-path actor-field population (PLUTO-583C)

PLUTO-586 pluto Deferred

└─ Additive lifecycle-column migration (PLUTO-583B)

PLUTO-585 pluto Deferred

└─ Lifecycle contract + sensitivity matrix (PLUTO-583A)

PLUTO-584 pluto Deferred

└─ Historial mapping update + regression + drift checks (PLUTO-583F)

PLUTO-589 pluto Backlog low

└─ DB enforcement for future rows (PLUTO-583E)

PLUTO-588 pluto Backlog low

/administrar/comisiones spreadsheet grid — Stage 4 editable comisión/day rows por período

PLUTO-339 pluto Deferred

Email-identity SSOT campaign: users.emailCanonical generated key + getUserByCanonicalEmail chokepoint (absorbs PLUTO-61 display-write fix + PLUTO-36 JS/DB parity fix as acceptance criteria)

PLUTO-154 pluto Backlog

conform appEvents to fleet SSOT (categoryId FK, promoted cols, append-only+GUC, appEventRelays sidecar, retention guard, logger, views)

PLUTO-73 pluto Blocked

Drop vFriction7d legacy OR-clauses after companions confirm-emitting 7d clean

PLUTO-539 pluto Backlog ↳ PLUTO-534

Fleet appEvents schema standardization (mirror MARS-411) — DESIGN-HOLD

PLUTO-533 pluto In progress

Fleet deliverable: draft BACKTEST SPEC + TRIAGE-CODIFICATION CHECKLIST template (Pluto-owned)

PLUTO-524 pluto Backlog

Prácticas: sometimes a student is operador with NO student asistente (single-participant práctica) - define canonical rule

PLUTO-511 pluto Blocked

Prácticas: enforce operador/asistente role separation once rosters are curated (students can't pick a docente as asistente)

PLUTO-510 pluto Blocked

Accent-insensitive search (tilde): 'matias' must match 'matias'/'matias'

PLUTO-505 pluto Todo

Adopt fleet ticket-triage protocol (bs-mr4xk6nnuu2) — Pluto replication

PLUTO-487 pluto Blocked

CR 39: Crear una sección interna accesible para usuarios autenticados con manual de uso, SOP operativos y ayudas de carga/revisión. Debe poder crec

PLUTO-265 pluto Deferred

CR 30: utilizar varias direcciones de correo para mensajes diferentes que envía la app: noreply@pensatna.com soporte@pensanta.com, notificación@pen

PLUTO-256 pluto Deferred

Plan: paciente DNI + HC central store — autocomplete, dedup warning, estadísticas

PLUTO-437 pluto Todo

Prácticas rectificar + bidirectional comment/email-notification workflow (port/adapt from Mars)

PLUTO-440 pluto Todo

BUILD (dispatch-ready, Elazar-launched per bs-mqpzo3ly470 — do NOT act between sessions): Pluto admin "Cambiar email de acceso" server action (canonical change-login-Gmail, decision bs-mqq2v3r1802). New action in src/lib/admin-actions.ts, gate withCap(manageUsers) NOT fullAccess (reportes-trap, mem pluto-view-as-architecture). Input targetUserId+newEmail. In ONE txn w/ setArchiveContext (users is trigger-archived): (1) isAllowlistedEmail(new); (2) dedup-reject if canonicalizeEmail(new) belongs to another live user (id!=target, deletedAt IS NULL); (3) UPDATE users.email=new (emailCanonical GENERATED auto-regens, mem pluto-stored-generated-column-no-recompute) + SET users.authId=NULL so new Google identity re-links next login; (4) cleanup stale auth.users row for OLD identity via service-role admin deleteUser so old account cannot log back in; (5) userAuditLog email delta old->new; (6) optional fire welcome email to new address. Re-login on new gmail = proof-of-control (auth/callback matches by canonicalizeEmail(users.email)==canon(auth email), stamps new authId, same row -> roles/practicas intact). UI: "Cambiar email de acceso" in admin-user-detail.tsx with AlertDialog confirm (account-takeover-shaped). Touches auth/identity -> pre-impl audit design-ping + pre-push audit diff review per push-to-done.

PLUTO-202 pluto Backlog

Pluto fly-solo-kill execution brief (bs-mqpzo3ly470 / EVO-26) — execute on next Elazar-launched team session, do NOT act between sessions. (A) COMMONS/DOC: delete fly-solo/autonomy doctrine + flip log-review=work-order to report-only-Elazar-decides + add Agent-Boundary PM-never-spawns-hands-brief. Pluto-repo files (pluto-commons.md, pm-pluto-role.md) = Pluto coder; shared evolutiva-commons/evolutiva-pm-commons deletes route via bin-whey-cc (whey-canonical, mem shared-commons-edit-routing), NOT Pluto coder. (B) PROBE NOISE (Pluto app code, coder): port venus X-Audit-Probe demotion + internal-probe UA marker so scanner/probe traffic self-classifies to security/info and emits NO page_not_found warn row (source = not-found.tsx capture, mem pluto-notfound-capture-redirect-overfire); + downstream expected-signal allowlist: /wp-* & CMS-scanner paths, apple-touch-icon* 404s, pm-triage NOTIFY probe, gate-correct login-unknown, mobile fetch-abort. (C) RAIL RE-POINT (nw-owned venus daemons = Elazar-launched nw edit, NOT Pluto coder): applog-listen/pull@pluto + pluto-pm-triage-listen.service (EVO-32) -> REAL-severity DM Elazar only, everything else log/queue row no PM DM. (D) DEFERRED per decision pt7: headless sendWelcomeEmail(userId) path (the Agustina exhibit) - policy stands, conversion not scheduled yet.

PLUTO-201 pluto Backlog

EVO-12 deploy-skew guard FAST-FOLLOW (dormant, flag-OFF + Q3-held): (a) APP manifest-oracle — replace interim KNOWN_SEGMENTS with a prebuild codegen that walks src/app and emits a BUNDLED TS route-pattern module (Vercel-safe, rot-free, not a hand-allowlist); shared cross-fleet helper coordinated w/ coder-mars + coder-ayudarg per pm-llmmsgsrv. (b) DAEMON skew-suppression — nw-venus updates applog daemon to consume detail.isSoftNav/routeResolves + deploy-timing window so a stale-build soft-nav of a valid route downgrades ERROR->WARN and does NOT DM; audit-pluto specs the daemon-side predicate. Both are flag-ON PREREQUISITES (part of the Q3-enable gate), not live bugs. Canonical predicate: downgrade ONLY when RSC-soft-nav AND path in build-time route manifest; hard-nav/curl/bot ALWAYS page.

PLUTO-169 pluto Backlog

PLUTO-133 follow-up (Elazar 5b, sequenced AFTER the main toast sweep ships): should-be-required / data-integrity candidates needing a verify pass then fix — (1) periodo date-range fechaFin<=fechaInicio unvalidated client+server; (2) practica rejection comentario not required; (3) destructive activo toggles (periodo/comision) no confirm dialog → toggle-off cascades; (4) admin create-user with no role → primaryRoleId NULL → blank-redirect login. Verify each path first (2nd-sweep agent guessed some), then fix. Do NOT start until PLUTO-133 main sweep is shipped.

PLUTO-136 pluto Backlog

DB connection scaling: verify Supavisor txn-pooler + query-shape pass (pre-scale)

PLUTO-146 pluto Backlog

Vercel log-drain setup: Elazar greenlit (2026-06-12) true 24h+ runtime-log retention (currently logs are point-in-time only via Vercel MCP). Scope: pick drain destination (log service/endpoint), configure Vercel log-drain, implementer is infra (nw-whey/nw-venus) not coder. PM owes Elazar the concrete scoped plan before dispatch.

PLUTO-46 pluto Backlog

KPI-rework /informes (gathering inputs, do NOT implement yet): teacher-scoped report quality pass. Inputs so far: (a) wrap bare CohortAndProcedureCards grid (teacher-report.tsx:818) in titled ReportSection; (b) Moda operador/asistente cards mislabeled (modal per-student count, not most-frequent person) + redundant beside Promedio -> cut or relabel; (c) EPI RE-WEIGHT: Puia wants MORE epidemiology on pluto+venus -> KEEP/EXPAND porSexo/porProvincia/etc (REVERSES earlier generic-remove rec; do NOT cut epi buckets). Grounding: judge on ACTUAL teacher-scoped values via audit-venus KPI->source-view map + db-pluto value pull, NOT admin-proxy shape. Awaiting full KPI->view map (~20-30min from audit-venus) + Elazar per-item rulings before WI splits into coder/db work.

PLUTO-121 pluto Backlog

Duplicate practicas: operador + asistente each create the SAME clinical event picking each other as counterpart -> 2 mirror practica rows for 1 real práctica. Need duplicate-detection + canonical-record rule (natural key candidates: fecha+comision+paciente/tratamiento+the operador/asistente pair). Design WITH Elazar; covers (a) prevent new dupes at create, (b) reconcile existing dupes in prod. Cross-team lessons-learned for mars/venus.

PLUTO-78 pluto Backlog

PLUTO-77 v1 LOW followup: comision-day secondary list capped at limit-200 first-page (no cursor pagination); add cursor paging if an ayudante's assisted-comision roster exceeds 200

PLUTO-81 pluto Backlog

D8 Tier-2: compute-in-Node over DB rows (cron practicas-kpi-report:277/330/146/208, legacy-export-actions:68-88, hierarchy-utils:22-74/team-stats) -> SQL GROUP BY/ORDER BY

PLUTO-99 pluto Backlog ↳ PLUTO-304

PLUTO D8 compute-placement remediation (self-scan)

PLUTO-98 pluto Backlog

Generalize known-benign 404 suppression (extends PLUTO-182/184 template, app-side classifier per Elazar bs-mqoruy0m32e). All currently page at warn; reclassify at the write path (not-found-classify.ts / not-found-log.ts) so the row persists at info and never enters the warn page path. Candidates: (1) phantom redirect over-fire PLUTO-165/169 residue: empty requestedPath + classifiedReason=genuine-bad-route -> info (~1.9/day); (2) /apple-touch-icon.png + -precomposed.png iOS/Safari auto-requests -> WELLKNOWN_BENIGN_RE -> info/navigation (~1.3/day); (3) /robots.txt -> WELLKNOWN_BENIGN_RE -> info (~0.5/day; optionally serve real robots.txt separate); (4) credential-JSON scanner burst ~15 variants currently mis-tagged navigation NOT security (gcp/firebase/secrets/config/service-account .json, /api/env, /actuator/env) -> extend SCANNER_PATH_RE -> info/malicious (these are 182-class probes that slipped the regex); (5) /practicas/<non-uuid-slug> malformed -> non-UUID on UUID route -> info/malicious (~0.3/day). INVESTIGATE-FIRST sub-point: anonymous-no-referer-unknown old-schema warn rows (~0.9/day) -> suppress ONLY if all pre-date PLUTO-169 deploy; if any post-date, find the un-upgraded code path. ~7/day of ~14/day page_not_found warn volume.

PLUTO-187 pluto Blocked

getAnomalyReport: nested 3-wide raw Promise.all bypasses DB_POOL_MAX limiter (residual pool-acquire class)

PLUTO-151 pluto Backlog

LEG-2 aro-retarget: applog-listen alert DM pm-pluto-cc -> POST aro:pluto (aro tag) so Elazar sees in-room + PM runs error-incident troubleshoot IN aro:pluto. DEPS: nw-venus daemon target change + keepalive restart 60cf5e6; pm-llmmsgsrv re-enable fan-out aro:pluto. Pluto verified Elazar in aro:pluto.

PLUTO-167 pluto Backlog

Verify applog error→aro:pluto live-PM routing survives EVO-5 rail rename (kpi-n-optimization migration bs-mqmr47bwkk4)

PLUTO-157 pluto Backlog

Real-time error reporting + auto-heal — Pluto leg (ratified protocol bs-mqn2ze006f7)

PLUTO-164 pluto Backlog

db/schema.md omits function bodies, so it cannot answer what is installed for any fn

PLUTO-704 pluto Backlog low

db:export silently depends on unset DATABASE_URL, only DATABASE_URL_DIRECT is populated

PLUTO-701 pluto Backlog low

PKCE callbackExchangeFailed: add benign-vs-attack discriminator (volume-gated, no action yet)

PLUTO-698 pluto Backlog low

Pool saturation makes its own telemetry unreliable (partial evidence during incidents)

PLUTO-695 pluto Backlog low

No test script in package.json; vitest unresolvable via pnpm exec

PLUTO-694 pluto Backlog low

404 classifier: preview-crawler traffic is a third class, decide handling

PLUTO-690 pluto Backlog low

Comisión-remainder section is read-only but canGradePractica permits grading it — affordance and permission disagree

PLUTO-687 pluto Backlog low

Schema-qualify the six unqualified fn call sites landed in orphan slices C and D

PLUTO-686 pluto Backlog low

primaryRoleId column-write invariant: remove direct writes + real enforcement

PLUTO-669 pluto Backlog low

Benign SEO-crawler sitemap-probe 404 noise: a crawler walks sitemap filename variants (/sitemap_index.xml, /sitemap-index.xml, + a random catch-all-200 test token /_rNd9xZ7kL3) — all correctly 404 (Pluto is auth-gated, no public index surface) but log warn/navigation/page_not_found. Two-part: (1) decide the correct SEO posture — Pluto has nothing public to index, so likely robots.txt Disallow + NO sitemap is right (confirm whether /sitemap.xml exists/should); (2) down-tier benign sitemap/SEO-crawler probe 404s to info, mirroring ICON_PROBE_RE (3c10bb0) / SCANNER_PROBE_RE (PLUTO-442) in not-found-classify. EVIDENCE-GATE the down-tier: audit quantifies frequency over the applog digest/7d BEFORE implementing (per PLUTO-442 discipline + WELLKNOWN_BENIGN_RE caution against speculative benign-matcher broadening). Anchor only to exact sitemap filename shapes; the random token is NOT safely down-tierable. Low-pri.

PLUTO-445 pluto Backlog low

Shared push-tree same-file concurrent-edit handoff protocol

PLUTO-683 pluto Backlog low

Non-owner app role for archive/fraud/audit table write containment (real remedy, migration 100 is hygiene-only)

PLUTO-670 pluto Backlog low

Consume venus-side applog cursor-age instrument (report pluto's rail age)

PLUTO-651 pluto Backlog low

Applog burst-dedup: duplicate event ID replay within 60s synthesizes x2 burst

PLUTO-650 pluto Backlog low

No reachable contact channel on /solicitar-acceso or /acceso-denegado

PLUTO-649 pluto Backlog low

Orphaned active userRoles survive user soft-delete (hygiene)

PLUTO-639 pluto Backlog low

User-facing self-suggestion surface (is-this-you link-to-existing)

PLUTO-622 pluto Backlog low ↳ EVO-79

EVO-70 Tier 1 follow-up: retire app after() calls (gated on passive prod evidence)

PLUTO-615 pluto Blocked low ↳ EVO-70

Admin landing storage tile (GB-left/% of 25GB)

PLUTO-605 pluto Todo low ↳ EVO-58

Harden migration dry-run tooling against embedded COMMIT/BEGIN

PLUTO-582 pluto Backlog low

fn_getInformesBundle comparativaAdjunto missing p_adjunto_comision_ids/p_comision_ids commission filter

PLUTO-572 pluto Backlog low

Investigate stray uncommitted .agent-name change in solo-pluto team tree

PLUTO-562 pluto Backlog low

User contact profile split — userProfile 1:1 table para campos opcionales

PLUTO-325 pluto Deferred low

Add value/codigo machine-key column to lookupOptions

PLUTO-551 pluto Backlog low

PLUTO-529 client friction-telemetry leg: un-stub notifyFriction + wire checkRequired (post-Jul-10, server-action transport)

PLUTO-535 pluto Backlog low

Pluto Historial change-history panels: audit gap + build (HOLD for Elazar go)

PLUTO-531 pluto Backlog low

/practicas global-landing student picker: lightweight id/nombre/apellido-only query

PLUTO-509 pluto Backlog low

Add close/resolve-via-API support endpoint

PLUTO-501 pluto Backlog low

Lint guard: forbid non-async-function exports in "use server" modules (gitpush-pre)

PLUTO-492 pluto Backlog low

Gate-correct 403 denials logged at level=error inflate error telemetry

PLUTO-482 pluto Backlog low

appEvents double-logging inflates error-cluster counts ~2x

PLUTO-481 pluto Backlog low

Quiet well-known-path 404 noise (robots.txt, apple-touch-icon[-precomposed].png) in page_not_found telemetry

PLUTO-181 pluto Backlog low

PLUTO-89 fast-follow hardening: multi-pieza dup-guard is order-sensitive ('11,12' vs '12,11' evades tier-1 because piezas keep insertion order). Canonicalize the pieza set for the dedup KEY only (sorted), preserving as-entered display/storage order. Needs functional index or normalized key column

PLUTO-91 pluto Backlog low

D8 Tier-3: batch sequential per-row write loops (personas-actions:378/388 role add/remove) into set-based INSERT VALUES / UPDATE WHERE id=ANY

PLUTO-100 pluto Backlog low ↳ PLUTO-304

Hygiene: vPracticaParticipantFacts counts demo-practica-by-real-student in scoped teacher stats (pre-existing, surfaced during PLUTO-97 gate-A)

PLUTO-103 pluto Backlog low

fn_detectRateSpike cadence: every-2min cron is 91% of DB-time (frequency-driven, ~7.6s/day absolute) - weigh fraud-detection latency vs cost

PLUTO-67 pluto Backlog low

log-toast ingest: no server-side rate limit (anon-flood appEvents amplification)

PLUTO-66 pluto Backlog low

PLUTO-34 contract step: DROP flat columns on 7 archive tables after jsonb expand verified in prod (irreversible)

PLUTO-65 pluto Backlog low

Phase-2 demo cleanup (BLOCKED on demo-row purge): strip the now-unneeded demo filters/labels/tab once Elazar purges demo rows. These are PROTECTIVE while rows exist — removing earlier leaks demo data into real reports. Sites: admin/page.tsx:11 (@demo pendingUsers filter), informes/page.tsx:117-121 + practicas/page.tsx:139-142 ('Demo ' comision filter), admin-user-detail.tsx:68/127 + audit-log.tsx:122 (isDemo/demo_seed label map), complication-rate/dificultad-distribution/procedure-type cards '(no demo)' text, admin/usuarios 'Usuarios demo' tab. Coupled to PLUTO-118 phase-1 + the row purge.

PLUTO-120 pluto Backlog low

Advisory (low pri): enable auth_leaked_password_protection (HaveIBeenPwned check) in Supabase auth — currently disabled. Low value for Pluto (allowlist-only, no open signup) but a free defense-in-depth toggle. From PLUTO-123 security sweep.

PLUTO-125 pluto Backlog low

Convenience VIEW joining clientError.digest -> serverError.detail (full message+stack) for client-error diagnosis

PLUTO-59 pluto Backlog low

UX: pre-filter practica list-row links by viewer scope so out-of-scope rows aren't clickable (avoids working-as-designed scope-deny on /practicas/[id])

PLUTO-57 pluto Backlog low

Proxy viewport tooling: chrome-devtools-mcp (CDP) for Pluto needs an auth path — Pluto is OAuth-only

PLUTO-51 pluto Backlog low

KPI weekly-cron staleness alert: last-success-timestamp check that pages if no kpiCronReport appEvent in >8 days. Weekly crons (0 9 * * 1) can fail silently for ~7d before anyone notices (PLUTO-39 showed how easily a weekly gap reads as 'dead'). Defensive observability add, NOT a bugfix. Touches email/alert path → audit pre-push.

PLUTO-45 pluto Backlog low

Migrate all touch primitives (Button/Select/Input) to uniform pointer-coarse:min-h-11 for 44px touch targets — replaces the 3-way convention (Button h-11 sm:h-9 / Select flat h-11 / Input sm:-gated); keys on input modality not viewport so a narrowed desktop window stays 36px. Ref Venus impl. Do AFTER PLUTO-40 lands.

PLUTO-41 pluto Backlog low

Pluto P3 residual: bulkInviteUsers welcome-email loop bypasses the /send-email HTTP rate limiter (PLUTO-20) — uncapped in-process sends on bulk invite. Decide cap (e.g. 100/batch or inter-send delay) vs accept (admin-initiated, low-freq, in-process-mail-undroppable per PLUTO-20 design). From audit round-1.

PLUTO-32 pluto Backlog low

Pluto P3: cold audit FK cols (createdBy/updatedBy) unindexed — defer to post-go-live advisor run

PLUTO-31 pluto Backlog low

DB-health sweep follow-ups (from PLUTO-138, non-urgent): (1) verify practicas.idx_practicas_editlocked query path — drop if genuinely cold; (2) confirm userAuditLogLegacy table is retired → archival candidate (table+idx); (3) FK-usage audit: of 64 advisor-flagged unindexed FKs, identify which appear in live WHERE/JOIN (hot) vs audit/write-path (createdBy/deletedBy/archivedBy — leave cold), index only the hot ones via migration w/ archive-context. Don't index/drop blindly — query-path verify first.

PLUTO-139 pluto Backlog low

Pluto P3: periodos.isCurrent no uniqueness constraint — two isCurrent=true rows possible

PLUTO-30 pluto Backlog low

Pluto P3: vPracticas* views don't filter isDemo — demo inflates grader stats (fix at vPracticas base)

PLUTO-29 pluto Backlog low

Pluto P3: denyAccess UUID-in-URL + deny-vs-404 — practica-existence probe

PLUTO-28 pluto Backlog low

Pluto P3: getCurrentPeriodoId + getComisionesForCurrentPeriodo no auth guard — comision enumeration

PLUTO-27 pluto Backlog low

Logging-hardening: clientError:global-error rows persist with EMPTY detail (no digest/errorName/message/route) — un-diagnosable from appEvents alone. Capture digest+message+route at the global-error boundary so future global-error volume is triageable. Low-pri; only escalate if global-error volume rises (currently sparse/benign: 2-4/day transient).

PLUTO-221 pluto Backlog low

Apply standardized nextUrlPresent comment (UNVERIFIED corroboration, KEEP not drop) in 404 skew telemetry - comment-fix only

PLUTO-178 pluto Todo low

appEvents off-schema categories: 'toast' (53) + 'admin' (3) not in valid category list; logging hygiene

PLUTO-148 pluto Backlog low

Harden intentional info-level appEvents streams against LOG_LEVEL changes (generalizes PLUTO-182's forceSync pattern). Today these persist ONLY because prod LOG_LEVEL=3 disables the logger.ts:98 info-drop gate — none pass forceSync, so lowering LOG_LEVEL (e.g. someone treating 3 as debug noise) would SILENTLY kill the email audit trail + telemetry. Promote to forceSync:true at the call sites so they're LOG_LEVEL-independent: email/email-sent + email/sendAdminEmail (audit trail), client-env/viewport (PLUTO-163), navigation/practica-link-dead, cron audit (pollSecurityAlerts, kpiCronReport, kpiCronSkipRecipient, ux-pain-digest), monitoring/applogListenerHeartbeat. After this, LOG_LEVEL becomes a true verbosity dial (incidental noise only) with no collateral audit-trail loss. EXCLUDE benign well-known + nav page_not_found (we WANT those droppable). Verify with db whether forceSync is a stored appEvents column or purely a logger control flag (affects how to audit coverage).

PLUTO-190 pluto Backlog low

FUTURE (recommend, separate from skew fast-follow): enable next.config deploymentId + Vercel Skew Protection (if Pluto's plan allows) for a SOUND client-vs-server build compare — gives the app a real origin-build signal (today the build-ID is COARSE: app sees only its own serving build, never the client's origin build, which is why an app-side skew downgrade is unsound and the daemon owns the deploy-timing discriminator). Also makes a real end-to-end deploy-skew test possible. Low pri.

PLUTO-170 pluto Backlog low

Large-screen sales-surface polish: add xl/2xl density tiers (more grid cols / master-detail / side-rail filters), data tables over stacked cards, ~40-48rem line-length cap on prose+forms, persistent sidebar + fluid type >=1280 + responsive imgs. Scope: /informes + KPI dashboards + /admin tables + public landing ONLY. Does NOT touch alumno (PLUTO-159) or docente grading mobile-first paths. Verify via proxy pixel-confirm at 1920/2560. Ship-timing = Elazar's call (low current N). From bs-mqmxqxwop02 decision.

PLUTO-162 pluto Backlog low

Audit + sync prod public-fn DDL drift to checked-in migrations (search_path pins) — pluto mirror of venus EVO-8

PLUTO-153 pluto Backlog low

Adopt curated repo-visible knowledge .md for Pluto agent team (bs-mr3bt2c0vgy consensus)

PLUTO-470 pluto Backlog low

Down-tier callbackMissingCode error→warn at /auth/callback (bare-callback bot/consent-cancel hits, PLUTO-461-class) — only if it recurs at volume; 1 all-time hit as of 2026-07-02

PLUTO-466 pluto Backlog low

Solicitudes: evaluate+fold net-new features into Pluto from mars/venus (brainstorm bs-mr4h5azsk3g)

PLUTO-477 pluto Backlog low

OPTIONAL cosmetic: converge SCANNER_PROBE_RE env alts to the single fleet-canonical literal. Pluto's live v1.95.3 form is two alts (/\.env(?:$|[./~0-9_-])/ + /(^|/)env(?:$|[./~0-9_-])/), audit-proven coverage-EQUIVALENT (in fact a superset) to the published fleet canonical /(^|/)(?:[\w.~-]*\.env|env)(?:$|[./~0-9_-])/. ZERO coverage change — purely so the canonical-owner's code is byte-identical to the SSOT it publishes (cleaner mars/venus cloning + future audits). NOT worth a dedicated deploy: ride-along ONLY on the next touch of not-found-classify.ts. Audit adjudicated 2026-06-29.

PLUTO-452 pluto Backlog someday

Should info/malicious page_not_found bulk (8304 rows) be visible on any digest/surface

PLUTO-660 pluto Backlog someday

Purge 4 synthetic persona rows - superseded by 'Ver como' view-as

PLUTO-598 pluto Deferred someday ↳ EVO-54

Impersonation banner 'Volver a mi cuenta' button: verify mobile touch-target — CDP click() no-op, JS element.click() worked

PLUTO-574 pluto Backlog someday

Rename tipoDocumento->documentoType, numeroDocumento->documentoNumber (users+accessRequests)

PLUTO-527 pluto Backlog someday

admin/usuarios:97 8-wide fan-out collapse (descoped from PLUTO-102)

PLUTO-486 pluto Backlog someday

DEFERRED: extract userDocumentoReview workflow table from users.documento* cols if documento approval flow grows. Workflow entity with natural FK, not generic profile split. Counter to WI#119 verdict.

PLUTO-410 pluto Backlog someday

Análisis estadístico — rol researcher dedicado + acceso a datos anonimizados

PLUTO-306 pluto Backlog someday