support-admin: no way to close an access request that duplicates an account the person already uses - access-reject emails a false denial

MARS-776 mars Blocked high

EPIC: move app email drains off Supabase pg_cron to venus systemd timers, keep an authenticated relay for transport

EVO-93 evolutiva Blocked high

/practicas list query hit the 10s statement_timeout twice for a real user: CTEs aggregate all practicas' teeth and images per call

MARS-736 mars Blocked high

Safeguard forced práctica unlock with student save grace period and teacher confirmation

MARS-738 mars Blocked high

EVO-12 mars leg: server-side 404/error capture replacing the client-only rail (filed because the leg lived only in an event body for 82 days)

MARS-724 mars Blocked high ↳ EVO-12

SOP support-api: stakeholder-pair-only private comments (CRUD + notify shipped)

MARS-467 mars Blocked high ↳ EVO-52

Support API: restrict internal-note visibility to Elazar plus ticket stakeholder

MARS-732 mars Blocked high

Disk used-vs-provisioned alarm: unreachable from SQL, and autoscale reports configured while inert below LARGE compute

MARS-711 mars Blocked high

statement_timeout errors spreading beyond MARS-736 scope: /practicas/[id] POST actions, /comisiones/[id], /alumnos

MARS-743 mars Blocked high

pg_net EXECUTE to PUBLIC: measure whether this ref grants net.http_post to every login role

MARS-712 mars Blocked high

pg_net EXECUTE to PUBLIC: measure whether this ref grants net.http_post to every login role

PLUTO-736 pluto Blocked high

Estado del vehiculo como estado GUARDADO con periodos propios, editable y con fecha, no como campo derivado

MOVILBA-219 movilba Blocked high ↳ MOVILBA-125

Historical app-created vehicles still attribute creado_por to system_import despite audit_log CREATE

MOVILBA-182 movilba Blocked high

└─ 65 de 94 eventos CREATE de audit_log sobre vehiculos apuntan a una fila que no existe en ninguna tabla, y 26 de esos dominios viven hoy con otro id atribuido a system_import

MOVILBA-780 movilba Blocked

Seleccion de fila: 223 vehiculos vigentes muestran un expediente de alta que no es el suyo (mas 132 observaciones y 9 IDs) - el estado actual sale de una fila CERRADA

MOVILBA-174 movilba Blocked high ↳ MOVILBA-155

El DROP de vehiculos_datos_colectivos.observaciones tiene GO para PROD pero DEV figura dropeada tres semanas antes y no hay archivo PROD

MOVILBA-745 movilba Blocked high

Cadena entidad-linea-vehiculo: portador de estado actual para linea_id/entidad_id fuera de vehiculo_historial

MOVILBA-166 movilba Blocked high ↳ MOVILBA-167

Retirar los nombres legacy fecha_vigencia_desde/hasta: el nombre canonico sigue al header del libro (Fecha_Alta/Fecha_Baja)

MOVILBA-242 movilba Blocked high

api.pensanta.com RSTs a FRACTION of connects while serving others: not listener loss, not load, upstream of PHP - a per-account connection limiter nobody can measure

EVO-103 evolutiva Blocked high

Supabase saturation: instance-wide execution stalls (Oct-5 class) + PostgREST retry loop + Nano tier - root cause and fix plan (planning cost UNMEASURED: track_planning off)

MARS-769 mars Blocked high

metrics_replay() has never been called: the metrics spool drains nowhere, fleet-wide

OPS-211 agent-ops Blocked high

ELAZAR DECISION: venus-state-backup gdrive leg ships ltm.md, the hub sqlite snapshot and .env.local unencrypted

VENUS-450 venus Blocked high

Support-ticket surface fails the agent-operable directive: mutation and thread capabilities are MISSING, not merely auth-unreachable

TERRA-36 terra Blocked high

PUBLIC pg_net grants give Terra _ro roles effective writes; cron grant remains dormant

TERRA-257 terra Blocked high

sh.git cutover: pre-flip residency audit on LEZAMA - which git-ignored in-tree files the symlink flip would lose

OPS-281 agent-ops Blocked high ↳ OPS-158

Idle over-budget agents never self-compact: wire host-side actuator (whey/lezama)

MSG-207 llmmsg-srv Blocked high ↳ MSG-149

Staged offender remediation: escalation ladder (DM -> alert Elazar -> unregister/kill)

KPI-47 kpi Blocked high ↳ KPI-45

Alert Elazar: misconfig / high-burn / context / needless-turns

KPI-46 kpi Blocked high ↳ KPI-45

Fleet accounting contract: shared query, window validation, exact-vs-estimate

KPI-68 kpi Blocked high ↳ KPI-66

Monitor WAL file count + archiver failures - 34h of failed archiving went completely unseen

MARS-703 mars Blocked high

Three terra users locked out today need enamel-side writes: one email correction to let a bind happen, two member rows created - one of them a docente mid-course

TERRA-261 terra Blocked high ↳ TERRA-242

Greenfield transactional email stack: dispatcher chokepoint, admission+egress guards, durable outbox

ENAMEL-16 enamel Blocked high

Consolidate Evolutiva backups into one performed/monitored/inventoried lane

VENUS-357 venus Blocked high

Measure whether terra's app pool also connects as the project OWNER role, and whether RLS is FORCE-d on the tables it touches - owner bypasses RLS silently

TERRA-244 terra Blocked high

pg_net ACLs: ask Supabase to apply the hardening its own issue_pg_net_access trigger defines but version-gates out at 0.20.3

ENAMEL-41 enamel Blocked high

Shared support tables have zero DB-side access control: no RLS, owning role, cross-tenant with terra

ENAMEL-28 enamel Blocked high

EVO-83 central build: client CR + questions on the extended supportTickets queue, portal UI, and the appKey-VALIDATED SECURITY DEFINER RPC - the only EVO-83 leg still outstanding

ENAMEL-47 enamel Blocked high ↳ EVO-83

gcaba-sync.sh vendored with the GCABA GitLab password inline in a tracked file (b6a41e5b, MOVILBA-460); commit scanner misses _PASS=

MOVILBA-477 movilba Blocked high

Extend /api/internal/support-action: access/participant/user/assignment ops (Elazar GO 2026-09-22)

PLUTO-753 pluto Blocked high

Supabase instance-level slowness 2026-09-11 22:34Z - 2026-09-12 01:54Z (3h20m continuous): 42 slow queries incl. 'SELECT now()' at 35s, AT LEAST 4 user-facing 500s on /mi-cursada (3 logged + 1 whose own serverError INSERT left no row), one operator alert LOST

PLUTO-742 pluto Blocked high

Fix the PM election engine: vacancy is legal, a member claims a vacant or unregistered seat, 30min cooldown (the setpm deadlock is a symptom)

MSG-400 llmmsg-srv Blocked high

/setpm returns ok:true on all four refusal paths, and the MCP shim passes it through unexamined

MSG-401 llmmsg-srv Blocked high

Google 400 at consent stops a real user signing in to Terra

TERRA-137 terra Blocked high

Spike: can a settings/env knob make daemon forks keep --dangerously-load-development-channels?

MSG-349 llmmsg-srv Blocked high ↳ MSG-346

Necesidades: no se seleccionan de a 1 (multi-select roto)

AYUD-18 ayudarg Blocked high

Comunas en /necesidades: no se seleccionan de a 1

AYUD-19 ayudarg Blocked high

Conversación se actualice cada 24hs

AYUD-29 ayudarg Blocked high

GATE#1 step iii: flip venus-kpi-collect.sh to pg-write (telemetry_rw via metrics_write) — kills kpi.sqlite split-brain co-writer; nw lane (cross-host)

ONEDB-10 one-db Blocked high ↳ ONEDB-2

Define login-attempt retention without weakening rate limiting or evidence

MOVILBA-802 movilba Blocked ↳ MOVILBA-799

Plan selective app_logs info retention without erasing audit events

MOVILBA-801 movilba Blocked ↳ MOVILBA-799

resolutionNote goes to the reporter verbatim as the email body, with nothing warning the author or screening internals

MARS-779 mars Blocked

administrar-actions.ts: "use server" file exports roster getters with no in-function gate (getDocenteMemberships, getAlumnoAssignments, getAlumnoAssignmentsForPeriodos, getComisionesWithCounts, getPeriodoDetail...)

MARS-748 mars Blocked

Endodoncia I comision LETTER CONFLICT (SOP-MARS-58): Mars follows the client 209-x-es-y mapping 6/6 and the catedra attendance sheet uses the other letter - client decision, not a data repair

MARS-728 mars Blocked

Review-depth pilot close: reconciliation is unverifiable by construction - Elazar decides keep classifier / drop pilot

MARS-705 mars Blocked

Nota/concepto-final grading column — spec needed from Elazar before build

MARS-444 mars Blocked

Cross-app nav-link normalization: one criteria for sidebar/navbar links per role in mars+pluto+venus

EVO-51 evolutiva Blocked

Queryable not-xray image view: count + % of uploaded práctica images flagged as NOT a real radiografía. Elazar 2026-06-26: he has not seen one real x-ray — ~99% are photos of a monitor screen, not actual radiographs. The image-analysis path already produces a flag (a 3-letter code/word per Elazar) that marks an image as not-an-xray. Build a DB view (db + coder) over the existing image-analysis data (likely imageUploadAnalysisEvents) that reports total images vs flagged-not-xray count and percentage, queryable any time (overall + optionally by periodo/comisión/recent-window). FIRST identify the actual flag field + its not-xray value. Read/analysis surface only, no enforcement/blocking. Build deferred — tracking only.

MARS-200 mars Blocked

La clave del resolver 'MT 17.0 V6200' apunta a la fila generica MT 17 y no a MT 17.0 LE, igual que el caso que MOVILBA-710 ya repunto

MOVILBA-759 movilba Blocked

post-receive de dev en /srv: git clean de logs/ y SUDO_PASSWORD en texto plano - los dos necesitan a Elazar

MOVILBA-533 movilba Blocked

Export de vehiculos: falta ejercitar el boton de la UI (sesion NextAuth) y queda pendiente el criterio de collation

MOVILBA-58 movilba Blocked

Residuo del aviso de refresh vencido: el gate de v5.5.8 corta ~45x normalizado por trafico, pero el flag no persiste en todos los caminos y todavia salen 6 por minuto para un usuario en DEV (PROD: 1 en 14 dias)

MOVILBA-301 movilba Blocked

Columnas de negocio que guardan un id de catalogo sin FK que lo restrinja: 7 sin FK alguna mas la clase de FK a opciones(id) sin restringir catalogo

MOVILBA-738 movilba Blocked

Ocultar validadoras SUBE/OpenPass en toda la aplicacion - pantalla, formulario, exportaciones y API

MOVILBA-580 movilba Blocked

GRANT a rol individual con nombre de CUIT: agrupar en movilba_readonlyusergroup

MOVILBA-230 movilba Blocked

Vehiculo entidad differs from linea's assigned entidad: 35 rows/4 lineas + 11 rows/2 lineas with no assignment (v_audit_vehiculo_vs_linea_entidad)

MOVILBA-90 movilba Blocked

Motor manufacturer book-label aliases need FK carrier after MOVILBA-490 phase 1

MOVILBA-752 movilba Blocked ↳ MOVILBA-490

Pantalla y PDF contestan distinto el Tramite de un mismo evento sin tramite_id

MOVILBA-464 movilba Blocked

Decidir la vigencia del catálogo categoria_regulatoria antes de cambiar su resolver

MOVILBA-767 movilba Blocked

KING LONG XMQ6127E electric book row needs model identity from Eugenia

MOVILBA-708 movilba Blocked ↳ MOVILBA-365

Import must not abort on missing masters (entidad/linea/catalogo)

MOVILBA-519 movilba Blocked

v_vehiculos_export.ultima_modificacion publica creado_en, no la fecha del tramite

MOVILBA-556 movilba Blocked

15 dominios: book records a zero-duration row same-day as the real opening period - question for Eugenia

MOVILBA-727 movilba Blocked

Deriva DEV/PROD en public: de los seis objetos del censo 09-22 sobreviven tres, y en dos de ellos la flecha apunta al reves de como se filo

MOVILBA-537 movilba Blocked

Census residual raw chassis-model column before any database drop

MOVILBA-395 movilba Blocked

View-as writes attributed to real admin

VENUS-299 venus Blocked

Admin action: agregar participante omitido a una practica fuera de la ventana de 48h

VENUS-372 venus Blocked

Decision: is a re-plate (cambio de dominio) its own modification subtype?

MOVILBA-246 movilba Blocked

lezama-down email alert via Hostinger php-api heartbeat

MOVILBA-711 movilba Blocked

SHA-addressed reads in the movilba-web shared checkout: PreToolUse deny-hook

MOVILBA-263 movilba Blocked

gitpush.sh gated version-target resolution on BUMP_LEVEL, so a no-bump push was silent about the version it did not move - and the push-to-deploy floor was reading that version as proof

OPS-287 agent-ops Blocked

gitpush.sh releases the push gate bare; hand it to the FIFO head with successor @next

OPS-285 agent-ops Blocked

reactivateInactive motivo has no persistence other than the truncated archive-reason slice

PLUTO-769 pluto Blocked

Post-window edit fulfillment: after 48h, student requests correction via botón Ayuda ticket → admin can edit ANY field (no per-field lock unless PM/Puia/Elazar restrict). Policy set Elazar 2026-06-26. Fulfillment mechanism (admin-edit-via-ticket UI vs manual) NOT built yet per his 'not for now'; this WI holds the agreed design.

VENUS-56 venus Blocked

CU-15b: alumno-facing 'ver posición relativa a su camada' — BLOCKED on client anonymization contract (own-position-only vs named-peers). New alumno_postgrado exposure to a KPI surface isStaffRole blocks today; needs self-scoped predicate (effective.id===id) + client ruling on whether alumno sees named peers or only aggregate/own-position. Client flagged 'muy verde, hay que darle forma'. Class-A. Follow-up to CU-15(A) staff camada-compare.

VENUS-105 venus Blocked

CR G8+G10 — structured pre-op diagnosis + post-op medication fields (v2 candidate, client-decision-pending)

VENUS-295 venus Blocked

Pathology/treatment conflation cleanup — client mixed patologías with tratamientos in option lists

VENUS-290 venus Blocked

Mendez Bovio DNI client-confirm: source xlsx has dni=95438931 (9-prefix, out-of-AR-range) + surname 'Bovio' absent in source → identity ambiguity, hold until client confirms value+identity before backfill

VENUS-59 venus Blocked

Mars appEvents conform to fleet standard (evolutiva-appevents-standard.md): add categoryId uuid FK->lookupOptions + seed appEventCategory group (16 canonical + practica/studentAssignment/assignment) + backfill 18 free-text values w/ mapping; add 4 promoted cols (httpStatus/durationMs/path/failureCode); add logError/logWarn/logInfo wrappers + pickKnown + isCritical sync-bypass; append-only trigger (GUC-bypass) AFTER appEventRelays sidecar cutover (replace detail.relay.delivered UPDATE pattern); replace level-only prune with 5-cat-security tiered retention; canonical v_appEvents_* views; legacy_events sink. Staged db+coder. BLOCKED on committed SSOT + Elazar priority call.

MARS-107 mars Blocked

EVO-58: admin storage tile (GB-left / % of 25GB shared api-images quota)

VENUS-278 venus Blocked

Measure unbound Terra users and watch corrected cohort sign-in

TERRA-274 terra Blocked

Grant Lic. Monica Gardey access as docente + alumna (Puia request 2026-10-02)

VENUS-439 venus Blocked

37 GoTrue signups in 7 minutes on the shared project, 9 of them not on the roster - nobody has established what opened that path

TERRA-262 terra Blocked

Two Mars access requests pending 4-5 days, triaged and approvable - need an admin in the UI (approveRequest is session-bound)

MARS-746 mars Blocked

EVO-93: move this app's email-outbox drain off Supabase pg_cron onto a venus systemd timer

PLUTO-733 pluto Blocked

Why fn_getInformesBundle takes 5-30 s for some users; tighten bundle cap from measured p99

PLUTO-748 pluto Blocked

mars appEvents stores a raw client ip on exactly one rail - the 404 capture - and nowhere else: 19 of 14276 rows in 30d

MARS-796 mars Blocked

Integrate terra with webusage telemetry (per-app bearer) so an aged session is observable

TERRA-270 terra Blocked ↳ TERRA-22

applog-listen rail: alert '×N' count inflated, decoupled from actual DB insert count

EVO-24 evolutiva Blocked

Disposition of the Maxilo exception list: which untracked fields terra adopts, and which absences are deliberate

TERRA-143 terra Blocked

Practicas N19 y N20 son fixtures de prueba en produccion a ocho dias de la demo del 1/10, y ningun script las borra

TERRA-255 terra Blocked

db/schema-live.md is stale: no createdVia column although the app writes one, so a generated snapshot the fleet trusts gives confident wrong schema facts

TERRA-253 terra Blocked

Retire any Whey reverse-SSH tunnel and persistence

OPS-275 agent-ops Blocked

EVO-58 admin storage tile (Hostinger 25GB) — /administrar ambient panel

MARS-513 mars Blocked

EVO-57 Mars: audit-trail schema normalization plan (coverage + naming)

MARS-492 mars Blocked ↳ EVO-57

Adopt fleet ticket-triage protocol (bs-mr4xk6nnuu2) — Pluto replication

PLUTO-487 pluto Blocked

Comment notification quotes empty-content comments and fires on aprobado practicas

PLUTO-703 pluto Blocked

Audit PTD render-GET tooling: enable exercising authed routes (dedicated test-user + stored session, OR a server-side render-self-check route) — Mars leg of the cross-project gap that let Pluto's /informes 500 ship unexercised (audit unauth render-GET -> 302/login, authed routes never actually rendered in PTD)

MARS-118 mars Blocked

Non-Google-address onboarding requires actual Google sign-in verification and a unified replacement flow

TERRA-111 terra Blocked

lock steal predicate: add resource-touch age alongside poll-age, gated on renewal adoption

MSG-365 llmmsg-srv Blocked

Upstream: report daemon-fork channels-flag drop to Anthropic via /feedback

MSG-350 llmmsg-srv Blocked ↳ MSG-346

Root-cause-gated remediation (after forensics): OOM->add swap + tune vm.overcommit_memory; disk-full->monitor cron + notify-elazar; kernel panic->enable kdump for post-mortem

OPS-85 agent-ops Blocked ↳ OPS-80

SCANNER_PROBE_RE gap: vendor appliance path /access/api/v1/system/ping pages on mars and pluto, 3 hits from 3 IPs

MARS-790 mars Blocked low

bedel can write: updateImageRotation reachable by any read-only-all bedel via canViewPractica

MARS-747 mars Blocked low

Review-depth pilot: measure audit token burn and shallow-sample quality

MARS-802 mars Blocked low

No surface can add conductos to an existing practica, so a tipo change into endo costs the student their practica

MARS-785 mars Blocked low

La ficha muestra el expediente de LOTE en vez del per-vehiculo cuando un expediente cubre varios vehiculos

MOVILBA-78 movilba Blocked low

El truncado a 40 del sufijo de borrado convive con 8 vistas que no truncan, asi que una etiqueta larga tendria dos largos

MOVILBA-744 movilba Blocked low

21 generateUUID sites in 9 route files still mint a request id outside getRequestId, so one request logs under several ids

MOVILBA-739 movilba Blocked low

dev01: transient 'sesion invalida, reintentar' error clears on retry

MOVILBA-234 movilba Blocked low

Ficha de vehiculo: cada Server Action del montaje arrastra un refetch RSC (~19 requests en ~1.6s, acotado)

MOVILBA-309 movilba Blocked low

Hub precheck: bounce a coder->db/audit message that cites a repo path without a sha

MOVILBA-262 movilba Blocked low

Reporte 4: filtros por fecha de negocio RUTAP

MOVILBA-163 movilba Blocked low ↳ MOVILBA-158

El expediente se guarda verbatim en vehiculo_historial y trimmeado+truncado a 110 en validadoras_historial para el mismo tramite

MOVILBA-571 movilba Blocked low ↳ MOVILBA-362

El proyector guarda un NULL de unidad propulsora como blanco y despues el flag lo excluye por ser blanco

MOVILBA-751 movilba Blocked low ↳ MOVILBA-340

Cadena de expedientes RUTAP: 152 bajas cuyo expediente no es el alta del tramite siguiente

MOVILBA-38 movilba Blocked low ↳ MOVILBA-39

Orphaned active userRoles survive user soft-delete (hygiene)

PLUTO-639 pluto Blocked low

Remove viewport-size logging to appEvents

VENUS-191 venus Blocked low

B6 student-vs-student/camada compare (design-pending)

VENUS-43 venus Blocked low

C2 shared tratamiento pool Quistes/Tumores/Cancer — reverses confirmed §10, needs Sebastian go

VENUS-48 venus Blocked low

D5 Otros modulo empty ok? — ask Sebastian

VENUS-53 venus Blocked low

D4 keep/drop Enucleacion coadyuvante (Tumores) — ask Sebastian

VENUS-52 venus Blocked low

D3 Infecciones cervicofaciales tratamientos — ask Sebastian

VENUS-51 venus Blocked low

D1 patient localidad field for residence distribution — ask Sebastian

VENUS-49 venus Blocked low

Revert práctica fecha floor to 7-day retroactividad for the 2027 cycle

VENUS-440 venus Blocked low

Drain Vercel runtime logs into venus telemetry so an agent can read them

EVO-107 evolutiva Blocked low

Pool identity: connect timeout recuperado en cold start del drain; falta causa del proveedor

TERRA-98 terra Blocked low

Remaining agent ops on the internal support surface: roles/user/flags/jtp-reassign + access-request trio (blocked on Elazar)

MARS-777 mars Blocked low

Rotate Mars Supabase DB (postgres) password — leaked in git history

MARS-135 mars Blocked low

chat-duo Agent Hygiene pane: surfaces top-bloat agents from /agent_hygiene

MSG-167 llmmsg-srv Blocked low ↳ MSG-160

EVO-70 Tier 1 follow-up: retire app after() calls (gated on passive prod evidence)

PLUTO-615 pluto Blocked low ↳ EVO-70

hub.mjs carries 13+ design-rationale comments citing a work-item numbering scheme that no longer resolves

MSG-402 llmmsg-srv Blocked low

api-images: reconcile 67 orphan images in flat uploads/2026/ with no mars/pluto DB owner — decide trash vs reassign

EVO-2 evolutiva Blocked low

Recuperación de Correos Históricos (condicional: requiere localizar la computadora)

ADRIANAP-9 adriana-pavon Blocked low

Wire applog email leg once verified send-as exists (NOT info@pensanta.com, single-prefix subject 'Ayudarg / <App> / error: <action>')

AYUD-15 ayudarg Blocked low