Puia reporta que se borraron las zonas anatomicas: no se borraron, TERRA-92 las oculta por directiva de Elazar y las 48 cirugias tienen los flags en NULL - conflicto de instrucciones, no bug

TERRA-116 terra Done urgent

El que carga una practica no puede decir si fue operador, ayudante u observador: vocabulario sembrado y lectura ya renderizada en 2 pantallas, el formulario nunca escribe terraPracticasParticipantes

TERRA-115 terra Done urgent

Shared DB eprpywqwzsvrjeaforei has ZERO backup coverage: free plan, backups list empty, PITR off, no dump machinery on either tenant

TERRA-7 terra Done urgent

scoped vocabularies: inserting a lookupOption does NOT make it visible, and both terra_35 and terra_38 shipped green while invisible

TERRA-100 terra Done urgent

Practicas cannot be re-opened after GUARDAR: no list and no detail route exist, so the 14 seeded postoperative complications have no surface

TERRA-82 terra Done urgent

enamel_031's NOT NULL no-default on shared supportTickets broke requestTerraAccess for 9 minutes: zero eligible callers, nobody hit it

TERRA-40 terra Done urgent

SMTP_REPLY_TO unset: no accessIssue operator notification has ever sent compliantly; 4 terra reports failed terminally 2026-10-01

TERRA-260 terra Done high

Scoped new reader grants for TERRA-267/278 measurements

TERRA-285 terra Done high

Access-report failure census: schema-cache burst and validation toast (resolved)

TERRA-288 terra Done high

Migration stem allocation has no serialiser: terra_239 is claimed by two unapplied drafts (TERRA-276 and TERRA-277), and a doubly-claimed stem applies cleanly once and is unreproducible

TERRA-282 terra Done high

A mail-subscription grant confers practica-creation: createTerraPractica's actor gate accepts ANY live Terra membership, so every existing membership grant carries clinical-write capability

TERRA-277 terra Done high

└─ seed-demo-sample-data.sql breaks under terra_241: fixture rows owned by synthetic actors will refuse

TERRA-283 terra Done

Session dies mid-session on read-only navigation ~1h after login

TERRA-22 terra Done high

Resolving a Terra access request is status only; requester copy must not imply access

TERRA-242 terra Done high

A paciente UUID reaches appEvents.resourceId from two writers, and a source fix leaves the four existing rows in place

TERRA-258 terra Done high

Port pluto's design system to terra /practicas/nueva: grouped option cards, wider layout, required-field highlighting (toast+friction split out to TERRA-134)

TERRA-124 terra Done high

└─ Intraoperative-complication DB invariant is ENABLE ALWAYS and replica-tested

TERRA-136 terra Done high

└─ Port pluto's toast.ts wrapper and friction pairing: coded toasts fire reportFriction, bootstrap + NativeValidationCapture in root layout, adapted coverage test

TERRA-134 terra Done

Ejercicio autenticado real: un solo login de una persona real desbloquea seis filas que hoy esperan por separado

TERRA-213 terra Done high

Restore access for seven cátedra-confirmed Terra members already in the shared registry

TERRA-266 terra Done high

Cortar el EXIF sin aplicar la orientacion rota las fotos verticales: arreglado a ciegas, falta ejercerlo contra una foto real de telefono

TERRA-252 terra Done high

Los datos de muestra para la demo del 1/10 tienen desarme pero no tienen alta: existe cleanup-demo-sample-data.sql y no existe el script que los crea

TERRA-251 terra Done high

practica:create blocked a real user on image upload, and the cause was discarded - ActionError carries only the Spanish user message

TERRA-250 terra Done high

PostgREST empty-schema crash loop on eprpywqwzsvrjeaforei (terra+enamel): apply the 3-statement fix, verify red-to-green with the REST probe

TERRA-248 terra Done high

terraPracticas has two writers and no provenance column: the mock/API boundary function names its own actor, so createdBy cannot be read as who recorded the practica

TERRA-231 terra Done high

Una radiografia sacada con el telefono no se puede guardar: el limite de 1 MB del cuerpo de la server action la rechaza con un 413 del framework

TERRA-218 terra Done high ↳ TERRA-143

El drain de email de terra reporta Result=success, pero nadie verifico que haya ENVIADO algo: una cola vacia y un envio real son el mismo exit 0

TERRA-227 terra Done high

Verificar que lo empujado hoy REALMENTE funciona en prod: TERRA-176 (5e096e8, app v0.31.54) no tiene ninguna lectura post-deploy

TERRA-223 terra Done high

MCP de Supabase acotado a solo lectura en coder-terra y db02-terra; falta reinicio y verificacion del inventario

TERRA-197 terra Done high

An email change on users destroys the prior address: userEmails exists, is empty, and has no write path at any layer

TERRA-215 terra Done high

Auth-view source is reconciled; historical human-CLI GO remains explicitly untagged

TERRA-211 terra Done high

Galvan Padilla DB bindings completed; post-bind login and access-request behavior remain unexercised

TERRA-210 terra Done high

Un carril empuja src/ con git manual y saltea .gitpush-pre.sh entero: TERRA-63, TERRA-29 y TERRA-32 no corrieron sobre esos commits

TERRA-195 terra Done high

Los dos campos tipoBarrera se muestran SIN el aviso de lista provisoria: el Set del front nombra terraTipoBarrera, que quedo con cero filas vivas cuando la categoria se partio en Implante y Reconstruccion

TERRA-191 terra Done high

Comentarios en src que afirman conteos vivos: 35 cirugias/0 confirmed es hoy 78/48/17 y users 3 es 159 - el numero vencido y la conclusion son dos preguntas separadas

TERRA-189 terra Done high

logFrictionEvent let an unauthenticated caller write arbitrary actionName into the SHARED appEvents rail - bounded server-side, unknown names now recorded under a fixed sentinel instead of dropped

TERRA-177 terra Done high

Raw User-Agent is written into shared appEvents.detail while the same project classifies the Host header to closed values for that exact reason: 2 real browser strings, 365d retention, no retraction path, and the column-level count reads as clean

TERRA-174 terra Done high

/practicas/[id] renders the complicaciones multi-select as a row of toggle Buttons while /practicas/nueva renders the same concept as a proper Checkbox group - the codebase already holds the right pattern and this one screen never got it

TERRA-167 terra Done high

backup-db.sh selects dumped tables by NAME PREFIX, so a terra table named without the terra prefix is absent from every dump and the zero-match guard cannot see a partial miss

TERRA-151 terra Done high

Four registries answer whether a migration is applied and no two agree - three repo-side disagreements found today by accident, none by a check: add a source-only test comparing applied/, draft/ and REPLAY-ORDER.md

TERRA-160 terra Done high

terra_53 is APPLIED and live on terraParticipantes but its only copy sits in draft/ with no file in applied/ at all - the inverse of terra_29's stale twin, and the third disagreeing apply-record registry found today

TERRA-159 terra Done high

A stale draft copy of terra_29 still says DRAFT ONLY NOT APPLIED beside the applied file, and terra_36/38's deliberately-inert archive sentinel became illegal the moment terra_29 went live today with nothing watching for it

TERRA-158 terra Done high

Ten applied terra migrations have NO row in supabase_migrations.schema_migrations (terra_20-24, terra_43-47), so the table designed to answer 'has this been applied' is wrong by ten files and says nothing about it

TERRA-156 terra Done high

An out-of-range table page renders as an EMPTY TABLE on /alumnos, /practicas and /mi-cursada: total is read off the paged rows, so past the end there is no row to carry it and 0 records is indistinguishable from none exist

TERRA-155 terra Done high

Vocabulary-table archive: the sink already has a bigint arm and NO function can reach it - terraCirugias and terraModulos need a second zero-arg trigger function writing rowIdInt

TERRA-66 terra Done high

└─ terraModulos has the same zero archive coverage and the same integer-PK wall as terraCirugias, and is the second half of the population TERRA-66 measured

TERRA-68 terra Done low

Sortable/searchable/paged tables on /alumnos, /practicas and /mi-cursada - and REMOVE the /practicas fixed 200-row cap, which hides older records today and is a separate defect this row must not close without

TERRA-125 terra Done high

REPLAY-ORDER says the db-enamel-cc GO is unconditional even for terra-private tables, an applied migration claims an exemption from it, and I resolved the conflict by citing the applied file

TERRA-153 terra Done high

A hand-written git commit bypasses gitpush.sh entirely - no secret scan, no version bump and NO --only pathspec bound, so the committed set is whatever is in the index; the absent Agent trailer is only how it became visible

TERRA-132 terra Done high

Informes: alumno filter for docentes - the practica count is unattributable without it, and the client read it wrong

TERRA-139 terra Done high

Operador selects the ayudante so one load records the whole team quirurgico - client gates go-live on this

TERRA-140 terra Done high

Required campo is enforced only in the browser: the server action drops blank campos instead of refusing them, so a practica can be saved with a required clinical field missing

TERRA-127 terra Done high

Guard suite unexercised on a non-empty population: the writer exists and is owned, but no natural terraPracticas write has been observed

TERRA-46 terra Done high

createTerraPractica no escribe el snapshot pacienteNombre/pacienteApellido de terra_40 - las 4 practicas en prod lo tienen NULL y el COALESCE del detalle lo oculta

TERRA-114 terra Done high

A probe row in appEvents is indistinguishable from a real user failure and the record is permanent

TERRA-43 terra Done high

Antecedentes del paciente: el formulario promete paridad con maxilo y no existe - tabla y triggers listos desde terra_2, catalogo con 0 filas y cero codigo en la app

TERRA-112 terra Done high

No existe ruta de informes ni estadisticas: Puia pide filtros cruzados por tiempo, modulo, cirugia, complicaciones intra y post, injertos y marcas - hay que definir alcance y que ve un alumno

TERRA-119 terra Done high

Puia dice que sigue sin estar como docente controlador: su cuenta uba.ar YA es docente, la de gmail es alumno, y controlador no existe como rol en terra - preguntar cual de las tres cosas pide

TERRA-120 terra Done high

Antecedentes: Puia quiere la jerarquia de venus - los hijos se abren al cliquear el padre - y TERRA-112 publico las 33 opciones planas porque antecedentesCatalog no tiene parentId

TERRA-117 terra Done high

A retired complicacion code makes a practica's post-op section permanently unsaveable, and the error tells the user to retry forever

TERRA-107 terra Done high

Practica detail page shows raw camelCase codes instead of labels: roturaInstrumento, anteroSuperior - and the comment saying that is fine has been false since the catedra lists were seeded

TERRA-105 terra Done high

import venus maxilo cirugias into modulos 1 and 2, marked (a conf.)

TERRA-96 terra Done high

Modulos offer AI-seeded cirugias instead of the catedra list: client-reported, correct mapping supplied, Drive source not yet in hand

TERRA-75 terra Done high

Implantologia and reconstruccion alveolar need modulo-specific fields (injerto, zona dadora, barrera, marca de implantes): never built, shape undecided

TERRA-76 terra Done high

└─ terraCirugias needs nullable requierePieza/requiereRegion so the zona pickers render per cirugia instead of showing both always

TERRA-91 terra Done high

└─ terra_33: provisional seed of the four modulo-campo vocabularies (tipo de injerto, zona dadora, tipo de barrera, marca de implante), marked for catedra review

TERRA-90 terra Done high

└─ terra_31: per-modulo field definitions + per-practica values (terraModuloCampos, terraPracticasCampos), seed 4 implantologia/reconstruccion fields with empty terra vocab categories

TERRA-86 terra Done high

Stage 0: snapshot paciente nombre/apellido onto terraPracticas - a practica's name silently re-renders when the shared registry row is corrected

TERRA-101 terra Done high

client-stated cirugia catalog for modulos 3/4/5, and modulo 6 confirmed

TERRA-95 terra Done high

client-source brands: add FIA, IMPLANTSIM, INSPIRAL, NUVO to terraMarcaImplante

TERRA-94 terra Done high

Práctica form shows two pieza diagrams instead of conditional swap on opción

TERRA-92 terra Done high

Nav visibility gap: /practicas/nueva + /mi-cursada unreachable via sidebar for non-alumno roles

TERRA-17 terra Done high

Terra never tells a signed-in user which roles they hold

TERRA-83 terra Done high

Retire/reactivate writes archive rows with no actor or reason: RETIRE_SQL runs on a bare pool.query so setArchiveContext cannot reach it, and terra_29 will break the feature outright

TERRA-78 terra Done high

The citation gate checks tag SHAPE, never tag REALITY: a well-formed invented token passes exactly as a genuine one does, and reads to a human as a real citation

TERRA-69 terra Done high

Reason codes assert the data is wrong and terra has no correct-or-retire path for a cirugia: TERRA-55 risks showing staff a fault they cannot act on

TERRA-56 terra Done high

Raise with applog-listen.ts owner: refuse startup when co-tenanted DB has APPLOG_APPKEY unset

TERRA-25 terra Done high

Client cannot confirm a cirugia: isConfirmedByClient has 3 readers and no writer, and it blocks every guard on the empty population

TERRA-52 terra Done high

Terra hard-delete guard coverage: archive ledger, 4 clinical detail tables, counter

TERRA-10 terra Done high

terraPacienteImplantologia: patient-clinical table with deletedAt and apparently no archive trigger on any mutation

TERRA-31 terra Done high

Detail-table UPDATEs bypass both archive triggers: clinical content overwritable with zero trace

TERRA-28 terra Done high

Unprotected .vercel.app project alias serves the full production build, and is the PKCE-mismatch mechanism

TERRA-20 terra Done high

Terra outbound mail: access-request notification (NOT migration terra_13 — that is TERRA-10's deliverable)

TERRA-13 terra Done high

deletedAt on the four terra clinical detail tables (ruled 2026-07-31, not delivered by terra_13)

TERRA-15 terra Done high

Data API OFF is an unowned config that terra's pg_temp LATENT rating silently depends on

TERRA-11 terra Done high

Terra leg of EVO-83: CR + client-questions surface

TERRA-1 terra Done high ↳ EVO-83

Shared lookupOptions NULL scope confirmed intentional; no backfill

TERRA-294 terra Done

friction rail does not resolve acceso:reportar, so access-report friction counts read zero

TERRA-291 terra Done

Una practica existente no tiene donde subir una radiografia: el control de imagen solo existe al crearla

TERRA-254 terra Done

Pedidos de acceso sin perfil: codigo y deploy completos; falta ejercicio autenticado real

TERRA-59 terra Done

Pasart: fila y correo corregidos; falta ejercer su primer login real

TERRA-6 terra Done

└─ El correo guardado del director no es el que va a usar para entrar: la fila dice jordipasart@hotmail.com, la direccion recibida el 2026-08-30 es jorge.pasart@odontologia.uba.ar, y el vinculo de identidad se hace UNA sola vez y por email

TERRA-104 terra Done

Demo 1/10: resolver 2 candidatos de identidad y ensayar el acceso real antes de la jornada

TERRA-207 terra Done

Un ejercicio autenticado en produccion no declara como se revierte lo que escribe, y por eso deja residuo indistinguible de datos reales

TERRA-256 terra Done

Terra's /api/health version has been frozen at 0.31.86 for 38 commits, so the field peers use to tell deploys apart is dead - and unlike enamel's, terra's bump is not broken, just never invoked

TERRA-265 terra Done

El correo de accessIssue exige Reply-To monitoreado, registra la falla y se envia igual

TERRA-240 terra Done

La accion del servidor acepta cualquier tipo de documento activo del catalogo aunque el formulario ofrezca solo dos: validacion de presencia sin guarda de vocabulario, y la llamada posicional de nueve parametros que ENAMEL-34 va a romper

TERRA-221 terra Done

MARS-790 step 4: terra scanner-tier block Y for the SonicWall-style /access/api/v1/system/ping probe

TERRA-264 terra Done

Serve /favicon.ico: it 404s live, browsers request it by default, and the residual warn class cannot be attributed to any requester

TERRA-259 terra Done

Radiografias: schema y display desplegados; falta ejercicio autenticado y politica de reclaim

TERRA-208 terra Done

favicon.ico 404 is logged at error tier and pages the applog rail

TERRA-247 terra Done

404 capture + scanner filter (catch-all, Block W parity)

TERRA-246 terra Done

La compuerta de citas apaga su advertencia de objeto compartido ante CUALQUIER db-enamel-cc-<12> en el texto, sin exigir que sea una cita de ese archivo - terra_22 viene sin advertir desde que se escribio

TERRA-225 terra Done

createTerraPractica pasa a resolveOrCreatePacienteForApp('terra', ...)

TERRA-236 terra Done

One human holds two live users rows with different terra grants: a revoke on one leaves the other live, and no uniqueness index can catch it

TERRA-233 terra Done

No terra lane holds a DATABASE_URL, so every db-touching script ships with its own wiring never executed once - the decision core is tested and the glue is not

TERRA-234 terra Done

La base no tiene marcador de vocabulario provisorio, asi que una direccion del chequeo es indetectable

TERRA-224 terra Done

Who may attribute a named ayudante: createPractica gates on PRACTICA_ROLES only, so any participant can assert another person attended a surgery, and rolPropio NULL is undecided

TERRA-149 terra Done

A NUL byte in a .ts file passes tsc, lint and the whole suite while making the file unreviewable: no gate can see it by construction

TERRA-230 terra Done

El propio gate de citaciones seguia ofreciendo el escape falso 'predates the 2026-08-31 hash-tag convention' que TERRA-190 cerro

TERRA-228 terra Done

TERRA-63 es la UNICA de las tres guardas que no es retrospectiva: la mayoria de las migraciones vivas nunca la corrieron y el repo no permite saber cuales

TERRA-199 terra Done

Terra owes enamel a refile of provincia/localidad that Elazar decided on 2026-09-05 and nobody could file

TERRA-216 terra Done

recordPoolIdentityOnce censors the success side: a retry that worked and a retry that was never needed write byte-identical rows

TERRA-222 terra Done

Terra SECURITY DEFINER pg_temp shadowing sweep: pin vs schema-qualification, per function

TERRA-220 terra Done

Terra WHEN OTHERS sweep: enumerate every function/trigger with a broad exception handler and state what each can silently swallow

TERRA-219 terra Done

The audit lane holds no database connection, so every DDL PASS it issues is an evidence review of output supplied by the lane being audited - verdicts now state that, the missing capability is unresolved

TERRA-133 terra Done

Quien ve la PAGINA DE GESTION del catalogo de cirugias: CATALOG_ROLES gatea solo /cirugias y su estado de confirmacion, mientras el picker de practicas lee las mismas cirugias por PRACTICA_ROLES

TERRA-175 terra Done

Tres campos con alcance CERO: la fila decia que por eso ningun formulario los pide y es al reves - alcance cero es ABIERTO POR DEFECTO, se piden en todas las cirugias del modulo. Queda vivo solo si ese alcance cero es deliberado en dos de los tres

TERRA-176 terra Done

Auditoria de procedencia: reconciliar el registro vivo de migraciones contra el repo, y revalidar el blockedReason de cada row abierto

TERRA-212 terra Done

Outbox durable y timer externo de Terra operativos

TERRA-209 terra Done

Catalog archive-on-insert DB guard is live; behavior exercise and source provenance remain to reconcile

TERRA-182 terra Done

Vocabulary member-integrity guard is live; remaining category/policy scope must be stated precisely

TERRA-198 terra Done

Pieza-or-region DB invariant is live; behavior exercise and source provenance need reconciliation

TERRA-131 terra Done

anestesiaType and regionAnatomicaValue now have ENABLE ALWAYS vocabulary guards

TERRA-200 terra Done

The alumno filter is BUILT and live in /informes since 2026-08-31; what is missing is a picker on /practicas, which accepts ?alumno= but only via the /alumnos drill-down

TERRA-204 terra Done

No es un defecto: los roles estan bien y el menu si cambia por rol - el cliente nunca entro con la cuenta de alumno, supabaseAuthId nulo y cero signInCompleted

TERRA-205 terra Done

El informe docente tiene SIETE ejes, no uno: implante/reconstructivo/protesis, edad, maxilar, numero de dientes y marca de implante - dictados en audio, nunca escritos

TERRA-206 terra Done

La version de la app no describe que codigo cambio y ADEMAS RETROCEDE: cinco versiones distintas el mismo dia, un feat entero desplegado bajo el numero que fijo un commit de documentacion, y el ledger inmutable no guarda deploymentId para desempatar

TERRA-194 terra Done

Los lectores de informes de campos ignoran deletedAt: hoy INALCANZABLE porque ningun camino de la app corrige un campo, o sea una trampa que se arma sola el dia que exista la edicion (condicion de aceptacion de TERRA-181)

TERRA-180 terra Done

Elegir 'Otra' como marca de implante no pierde el nombre por descuido: la fila de escape es un ruling explicito de no-texto-libre, y lo que falta es el camino para agregar la marca - colapsa dentro de TERRA-141

TERRA-196 terra Done

La seguridad de una interpolacion de string en SQL la sostiene un comentario en presente sin fecha que afirma que los sitios de llamada son solo tres - nada verifica esa frase cuando alguien agregue el cuarto

TERRA-202 terra Done

El brazo (e) de coordination-recipient.test.ts sobrevivio a la reescritura que fue escrito para detectar y paso en verde mientras lo hacia: su nombre promete que el archivo no afirme que el mail sale, y su predicado solo chequea que aparezcan tres cadenas

TERRA-193 terra Done

El texto de FIX del checker de citaciones ofrece una unica salida - 'predates the convention' - que hoy habria sido falsa: sugiere la frase, no la forma

TERRA-190 terra Done

Comentarios de migraciones aplicadas que afirman poblacion viva: separar estado-al-aplicar de presente-sin-fecha antes de medir

TERRA-188 terra Done

Cinco comentarios NO PII en src/ afirman menos de lo que la superficie expone, en dos clases distintas: dos dicen 'no historia clinica' en el mismo archivo que declara los antecedentes atestiguados, y tres titulan NO PII arriba de una lista correcta de identificadores

TERRA-187 terra Done

La cabecera de /informes afirma que la pagina no nombra a ningun alumno, y el picker de alumno imprime el nombre: es una afirmacion de PII falsa en el lugar donde una auditoria de privacidad deja de leer

TERRA-186 terra Done

An empty report panel cannot say whether nothing happened or nothing was ever asked - SEVEN instances, and marca (TERRA-176) is one of three from a single function

TERRA-178 terra Done

Antecedentes: pre-carga desde pacienteAntecedentes y escritura de vuelta - la mitad compartida que TERRA-112 dejo fuera, sin ella la lista del paciente nunca deja de estar vacia

TERRA-113 terra Done

└─ Antecedente provenance has no reader: terra_52 records merge history that nothing renders, and the surface the row originally specified (a shared ficha) does not exist in Terra at all - reader hangs off /practicas/[id]

TERRA-144 terra Done

The only warning that deselecting a retired complicacion is irreversible is a hover-only title attribute, invisible on touch - and the TERRA-167 port made the reveal region smaller than the action region

TERRA-168 terra Done

Dry-run transcript coverage over 54 applied migrations (2026-08-31): 14 have one, 32 carry post-apply claims only, 5 carry post-DDL in-transaction asserts, 3 carry entry guards only - backfilling would manufacture the evidence, not recover it

TERRA-169 terra Done

An apply can execute text that DIFFERS from the committed file while every catalog field a reviewer checks still matches - metadata-only post-apply verification cannot detect that the wrong text ran

TERRA-171 terra Done

changeTerraMembership's ordering comment names an UNREACHABLE case as a worked example of lastAdmin firing - TERRA-164 arm 2 executed that exact scenario and the revoke succeeded, so the comment is what makes a shadowed backstop read as a live zero-admin guard

TERRA-165 terra Done

Dry-run transcripts were unpublishable because two correct policies left a hole between them, NOT the extension list this row originally named - convention fixed and all 38 db-terra transcripts backfilled beside their scripts

TERRA-163 terra Done

changeTerraMembership's lastAdmin refusal may be UNREACHABLE: adminOnly and selfDemotion both return before it, so the actor's own admin membership always survives the revoke - and Terra has exactly one live admin either way

TERRA-161 terra Done

Four TERRA-152 arms I recorded as PERMANENTLY unbuildable are buildable through changeTerraMembership itself - the rule is not shared table therefore forbidden but no sanctioned boundary function reaches this state, and holder 3 had already written through shared users the same way

TERRA-164 terra Done

setTerraUserTelefono's actorDeleted refusal is RACE-ONLY, not dead: vUserGroups filters deletedAt so notMember fires first sequentially, leaving actorDeleted reachable only through a TOCTOU window - so it is untestable by construction in a dry run, not merely unexercised

TERRA-162 terra Done

DB authorization harness: four holders armed, 10 of 12 predicates have a refuse arm distinguishable from their own did-not-fire arm - the satisfied branch ran twice and an exercised refuse arm is not coverage

TERRA-152 terra Done

PWA: no manifest and no installable icon set (source artwork terra.webp DOES exist) - ship manifest, derived icons and iPhone Add-to-Home-Screen instructions, and deliberately NO service worker: caching a clinical screen is unsafe

TERRA-126 terra Done

WRONG PREMISE, closed: terra's backup rail carries NO --exclude-table-data set - backup-db.sh is a positive include-list, and the flag was a cross-project carry from a mars finding in TERRA-103's evidence

TERRA-157 terra Done

REPLAY-ORDER's list stops at terra_19 and 30 applied migrations are missing from it - and the file's own hole notice, scoped to 11-15, is what makes the other 30 invisible

TERRA-154 terra Done

appEvents is now a HARD DEPENDENCY of two terra user actions: a rejected INSERT rolls back the state change, and the constraints live on a shared table the co-tenant can alter

TERRA-70 terra Done

Terra has no backup coverage statement: what pg_dump does NOT capture is unmeasured, and the answer is only zero today

TERRA-103 terra Done

Every one of 159 live shared users holds a Terra membership, so terra appKey scoping currently selects everyone and three checks that depend on it are unfalsifiable

TERRA-147 terra Done

vUserGroups group-level app scoping is vacuous: all six live groups have ownerAppKey NULL, and two reviewers cited that clause as justification in terra_53

TERRA-148 terra Done

Docente controlador membership is checked only in the Node action - the DB trigger validates the role vocabulary, so any user of the SHARED table can be attached as controlling docente

TERRA-130 terra Done

Antecedentes parent/child is enforced ONLY in the browser: the action inserts any IDs it is handed, so a child antecedente can be stored without its parent

TERRA-129 terra Done

db:catalogReadFailed has zero rows ever AND zero test coverage, so its zero is uninterpretable - plus lookups.ts quotes a comment that has since been corrected and carries a stale three-row count

TERRA-145 terra Done

users.lastSignInAt is never written - the adoption instrument is accidentally-always-zero

TERRA-80 terra Done

Field-by-field comparison against Maxilo up to GUARDAR PRACTICA - client answered 'es igual en todo', which starts the work

TERRA-142 terra Done

Client consultas document for Puia: own the artifact, carry the SIX open questions, keep the 14 Implementado claims true

TERRA-122 terra Done

Record browser context on sign-in and warn in-app browser users

TERRA-138 terra Done ↳ TERRA-137

terra_44 trigger exemption shipped with its pre-apply interpretive-review flag UNRESOLVED - live and unsigned-off

TERRA-123 terra Done

PKCE exchangeFailed on first sign-in: instrument shipped, population gone, unresolved between two lanes

TERRA-51 terra Done

Mi perfil promises photo and phone editing proximamente and has no edit path at all

TERRA-106 terra Done

Sacar el sufijo (a conf.) de 17 nombres de terraCirugias - Puia confirmo el contenido de los 6 modulos; decidir en el mismo paso si isConfirmedByClient pasa a true

TERRA-118 terra Done

Only the Nº cell opens a practica; the rest of the row is dead space on both list pages

TERRA-110 terra Done

Detail page renders every label and value on its own line on mobile, and complication pickers read as a menu of actions

TERRA-108 terra Done

Terra had no application error rail until 2026-08-16: every error before that date is unrecorded

TERRA-84 terra Done

campo presence is per-CIRUGIA in the client model but per-MODULO in terra, so three fields are over-offered

TERRA-97 terra Done

Odontogram offers deciduous teeth 51-85 which cannot take implants: terra has an exclude scope row for exactly this and it is not narrowing

TERRA-77 terra Done

Docente drill-down: /alumnos practica count linked to a filtered /practicas view

TERRA-93 terra Done

Practica accepts a contradictory zone: piezas + a whole-arch region on the same row (e.g. pieza 11 + mandibulaCompleto), no check client or server

TERRA-85 terra Done

terraPracticasComplicaciones.value has no DB enforcement against the scoped vocabulary: an app-side check is the only guard

TERRA-87 terra Done

Applog heartbeat dormant - blocked on coder-venus-cc's shared writer-script appKey fix

TERRA-81 terra Done

Terra-side applog/alert-rail coverage

TERRA-3 terra Done ↳ EVO-84

Citation gate must state its own bound: shape-checked, not authorization-verified

TERRA-71 terra Done

Blocked-item sweep: measure whether each of the seven stated blockers still holds

TERRA-73 terra Done

Does the shipped citation gate accept unverifiable prose? TERRA-63 checked presence, TERRA-64 checked reality, nothing has checked the checker

TERRA-67 terra Done

Citation currency audited across 31 applied migrations: terra_27 CLEAN, terra_16/17 unverifiable-by-construction

TERRA-64 terra Done

A production import is evidenced in the DB while the tool that performed it exists only on one disk, unversioned

TERRA-62 terra Done

An unconfirm reason routes nowhere: the client states a correctable fact and no terra surface shows it to anyone who can correct it

TERRA-55 terra Done

callback route.ts:270 redirects to /login?error=auth with no finish(): a login rejection landing that writes no signInCompleted row at all

TERRA-61 terra Done

Demote trigger-gated content out of terra-commons into a lazy-loaded detail file: auto-loaded footprint measured ~34K against an 8K budget

TERRA-60 terra Done

Failed access request told the user nothing: generic toast invited a futile retry with no sign the request was not registered

TERRA-41 terra Done

terraCirugias hard-delete ban applied; archive-on-UPDATE ruled NOT TAKEN on redundancy with re-open conditions recorded

TERRA-58 terra Done

Permanent pool-identity read: current_user to appEvents at cold start

TERRA-14 terra Done

TERRA-43's chokepoint coverage claim outlives the chokepoint: TERRA-52 makes logger.ts a non-sole writer

TERRA-54 terra Done

terraCirugias is deliberately unguarded as 'vocabulary, not clinical record' - TERRA-52 makes it carry a client decision and falsifies that premise

TERRA-57 terra Done

Login reliability: PKCE exchangeFailed on first sign-in, plus no actionable message on wrong-Google-account

TERRA-18 terra Done

Terra's 45 guard triggers are all tgenabled='O': one SET session_replication_role='replica' disables the entire guard suite

TERRA-47 terra Done

Archive-context GUCs are bare shared-namespace names (app.user_id / app.archive_reason): rename agreed in terra_13, never scheduled

TERRA-33 terra Done

Guard-inside-try scanner skips any actions module with more than four lines above its directive

TERRA-44 terra Done

Write the accepted service_role/postgres mutation exposure into terra-commons: appEvents append-only and no-hard-delete are CONVENTIONS, not table properties

TERRA-9 terra Done

└─ Watcher on db_schema for eprpywqwzsvrjeaforei: the only control over a fleet-token-writable value gating service_role HTTP reach

TERRA-35 terra Done high

db/export-schema.sh: extend snapshot beyond public schema (13 non-pg_* schemas)

TERRA-12 terra Done

appEvents context columns exist and terra writes none of them (sessionId, userAgent, ip, requestId, traceId)

TERRA-27 terra Done

appEvents immutability guard is disarmed by a BARE shared-namespace GUC (app.bypass_appEvents): TERRA-33 does not cover it and closing 33 must not read as closing the class

TERRA-45 terra Done

Lint guard: ban runtime-derived origins in auth paths (never built under TERRA-21)

TERRA-32 terra Done

withAction presence checks read raw text: a comment mentioning withAction excuses a module that never calls it

TERRA-29 terra Done

Terra applog rail: failnotify propagation gap - both shared template units lacked OnFailure=, and the notifier that fixed it was an unbounded emitter with an inert label

TERRA-26 terra Done

appEvents 48h silence is no-traffic, not a broken writer: terra and enamel writers each proven by emitting through the ordinary app path on the current build

TERRA-42 terra Done

signInCompleted's 8 unattributed rows are outcomes with no resolvable users row, not a call-site gap: 13/13 authorized attributed, so TERRA-23 needs no coverage bound

TERRA-30 terra Done

TERRA-19 instrument fires once per bucket from the Server-Component path via console.error, proven by injected unit + build only: Vercel capture NOT established

TERRA-24 terra Done

pnpm test glob was directory-enumerated and depended on authors remembering to widen it: latent, no committed test was ever skipped

TERRA-38 terra Done

First terra applog digest triaged: no terra defect - login:no-profile is a separate toast sink, PKCE loss was Supabase JS's own verifier storage

TERRA-37 terra Done

TERRA-22 screening instrument: inter-login interval near 60min on signInCompleted

TERRA-23 terra Done

server.ts swallows cookie-write failures on a safety condition (middleware) that does not exist in terra

TERRA-19 terra Done

Terra function set: no pinned search_path on SECURITY-adjacent functions

TERRA-8 terra Done

Confirm enamel whole-DB backup coverage for the shared project

TERRA-4 terra Done

the 2026-09-09 acceso:reportar burst: cause named and fixed by d3ea382; per-person attribution permanently unreadable, fixed forward by febd0bf1

TERRA-292 terra Done low

TERRA-160 stem-overlap test and the applied-record requirement can deadlock every push

TERRA-284 terra Done low

La base no modela la provisoriedad de un vocabulario, asi que una direccion del chequeo es indetectable: decidir si lookupOptions lleva marcador o si el limite se declara

TERRA-238 terra Done low

terra has no favicon at all - /favicon.ico 404s on every browser session and each one lands in the ERROR rail

TERRA-249 terra Done low

Nada avisa cuando una cirugia nueva entra a un modulo con alcance ya definido: una exclusion deliberada y una olvidada son la misma fila ausente

TERRA-201 terra Done low

└─ db02-terra-cc holds no DB role, so the live checks this lane writes can only be run by somebody else

TERRA-241 terra Done low

tipoBarrera fuera de /informes y la justificacion de agrupamiento que solo cubre la mitad de los casos; y que la base no tiene marcador de vocabulario provisorio, asi que una direccion del chequeo es indetectable

TERRA-192 terra Done low

PRACTICA_ROLES omits client from six live terra groups while its own comment claims it restricts nobody - the one silent exclusion in a file that argues every other one

TERRA-232 terra Done low

Cedula y libreta de enrolamiento: activas en el catalogo y fuera del scope include de documentoType - TERRA-203 se cancelo sin contestar si eso es deliberado

TERRA-217 terra Done low

El ejemplo del comentario canonico de default-open (terra_41) nombra el modulo equivocado Y la cantidad no esta bien definida: dice modulo-4 y marcaImplante es del 1, y 'cuantas cirugias tiene un modulo' contesta distinto por deletedAt que por isActive

TERRA-183 terra Done low

El comentario que justifica descartar el rename de cirugias se apoya en una premisa falsa: dice que no hay archive trace, y el trace existe y es obligatorio

TERRA-185 terra Done low

Cuatro afirmaciones falsas en los comentarios de informe-query.ts, una de ellas argumentando a favor del denominador por categoria que TERRA-178 acaba de prohibir

TERRA-184 terra Done low

Decide whether friction telemetry keeps a free-text userMessage in the shared appEvents rail at all - it has no runtime reader in terra and a 300-char slice is not a content filter

TERRA-179 terra Done low

MEMORY.md index over threshold: measured levers are fewer links and shorter filenames, not shorter hooks

TERRA-173 terra Done low

check-migration-citations.sh dead-tag span is UNBOUNDED when a file cites exactly one tag - it runs to EOF, so a death word predicated of any OTHER thing reads as a verdict on the citation and refuses a correct push (3 burned app versions on TERRA-165)

TERRA-172 terra Done low

Terra memory index is over its threshold and label-trimming cannot fix it: filenames are ~60 percent of the bytes, so the fix is merging clustered rule files, and it must be done against a concurrently-written corpus

TERRA-166 terra Done low

Unscoped tgname assertions in terra_13, terra_20 and terra_22 pass because trigger names happen to be unique - the applied files cannot be fixed, so the remedy is the template plus a current-state check of what they asserted

TERRA-79 terra Done low

Twelve vTerra* views are live-writable by service_role although their migrations say GRANT SELECT: pg_default_acl, not the migration text, decides a new relation's ACL

TERRA-88 terra Done low

Narrow FUNCTIONS default privileges for role postgres: anon/authenticated get default EXECUTE on every function created in public

TERRA-121 terra Done low

Terra tables/views keep inheriting service_role's full default privilege set at CREATE time (pg_default_acl); ALTER DEFAULT PRIVILEGES to narrow the default, blocked on db-enamel-cc GO

TERRA-89 terra Done low

Readable measure on the remaining nine pages, and the last two definition lists still stacking label above value

TERRA-109 terra Done low

No instrument distinguishes noProfile wrong-account from genuinely-unprovisioned: both carriers falsified

TERRA-50 terra Done low

Post-deploy PTD check mints one permanent appEvents row per push on a shared 365d-floor table

TERRA-74 terra Done low

Probe marking is unavailable on non-error rows: markSynthetic needs errorMessage, and detail.synthetic is explicitly not the marker

TERRA-53 terra Done low

Three shipped comments disagree on whether terraCirugias has rows, and /administrar's stated purpose depends on the answer

TERRA-65 terra Done low

The push gate never sees a new migration unless a human names it in a test: only terra_16 and terra_19 are read

TERRA-63 terra Done low

login:no-profile logs a correct denial at warn on every unregistered visitor: per-code severity or a traced benign arm

TERRA-39 terra Done low

Stale bare-name GUC reference in db/specs/appevents-pruner-design.md, deliberately excluded from a621cb6 to avoid sweeping another lane's uncommitted work

TERRA-49 terra Done low

DELETE/TRUNCATE-class guards stay 'O' (21 triggers, all 12 tables): ENABLE ALWAYS traded away on purpose

TERRA-34 terra Done low

Lint guard: ban runtime-derived origins in auth paths

TERRA-21 terra Done low

db-terra-identity-and-anchors.md is 1797 lines - too large to read in one pass, so an index line promising the anchors reads as coverage while the anchors are unreachable

TERRA-170 terra Done someday