Shared DB eprpywqwzsvrjeaforei has ZERO backup coverage: free plan, backups list empty, PITR off, no dump machinery on either tenant

TERRA-7 terra Blocked urgent

Unattributed full-DB reader on venus Supabase project (~3/day, postgres role, incl. vault.secrets) — attribute or treat as compromise

VENUS-350 venus Blocked urgent

Nav visibility gap: /practicas/nueva + /mi-cursada unreachable via sidebar for non-alumno roles

TERRA-17 terra Blocked high

Modulos offer AI-seeded cirugias instead of the catedra list: client-reported, correct mapping supplied, Drive source not yet in hand

TERRA-75 terra Blocked high

A probe row in appEvents is indistinguishable from a real user failure and the record is permanent

TERRA-43 terra Blocked high

Support-ticket surface fails the agent-operable directive: mutation and thread capabilities are MISSING, not merely auth-unreachable

TERRA-36 terra Blocked high

Agent-operable ticket API: REST handlers over /soporte, single auth definition

ENAMEL-27 enamel Blocked high

Session dies mid-session on read-only navigation ~1h after login

TERRA-22 terra Blocked high

User + group administration: no UI exists, every grant is a hand-written DB row

ENAMEL-22 enamel Blocked high

PM-liveness watchdog: cc-context-monitor detects a PM-less ARO, DMs Elazar

OPS-55 agent-ops Blocked high ↳ OPS-54

venus-db-backup.sh: trash||rm precedence hard-deletes clinical dumps when trash exists and FAILS

VENUS-359 venus Blocked high

venus-db-backup.sh: prune glob spans plaintext+encrypted lanes, sharing one KEEP budget

VENUS-358 venus Blocked high

cc-context-monitor over-cap caps are stale — false alarms fleet-wide. THRESH_OPUS=160k/HAIKU=100k/SONNET=135k are ~80% of the OLD ~200k-class windows. Fleet now runs claude-opus-4-7[1m] = 1M-token window; a 268k session is 27% full, not over cap. Transcript model string lacks the [1m] marker so monitor can't auto-detect window size. Fix: bin-whey-cc updates THRESH_* in cc-context-monitor.sh to real values per Elazar's decision (true-window fraction vs. relabelled cost-budget). All of 2026-05-21's over-cap wind-downs were triggered by this false cap.

OPS-53 agent-ops Blocked high

Whole-DB pg_dump insurance for eprpywqwzsvrjeaforei (enamel+terra shared project) does not exist

ENAMEL-12 enamel Blocked high

Drop clamav-scan.timer cadence biweekly->monthly on venus

OPS-99 agent-ops Blocked high ↳ OPS-97

Comunas en /necesidades: no se seleccionan de a 1

AYUD-19 ayudarg Blocked high

Conversación se actualice cada 24hs

AYUD-29 ayudarg Blocked high

Necesidades: no se seleccionan de a 1 (multi-select roto)

AYUD-18 ayudarg Blocked high

Treat 404 as error: emit level=error on 404 + email+DM + feed auto-fix protocol (Elazar 404-directive, kpi-n-optimization)

PLUTO-158 pluto Blocked high

GATE#1 step iii: flip venus-kpi-collect.sh to pg-write (telemetry_rw via metrics_write) — kills kpi.sqlite split-brain co-writer; nw lane (cross-host)

ONEDB-10 one-db Blocked high ↳ ONEDB-2

A successfully filed access request notifies nobody: COORDINATION_GROUP is null, so the success-path promise has no transport

TERRA-59 terra Blocked

Pasart account blocked: no address, no name available

TERRA-6 terra Blocked

Extend SCANNER_PROBE_RE with archive-probe family (/backup.tar|.7z|.rar|.zst|...) — 294 unsuppressed scanner 404s in one window

PLUTO-661 pluto Blocked

conform appEvents to fleet SSOT (categoryId FK, promoted cols, append-only+GUC, appEventRelays sidecar, retention guard, logger, views)

PLUTO-73 pluto Blocked

Prácticas: sometimes a student is operador with NO student asistente (single-participant práctica) - define canonical rule

PLUTO-511 pluto Blocked

Prácticas: enforce operador/asistente role separation once rosters are curated (students can't pick a docente as asistente)

PLUTO-510 pluto Blocked

Adopt fleet ticket-triage protocol (bs-mr4xk6nnuu2) — Pluto replication

PLUTO-487 pluto Blocked

Root-cause-gated remediation (after forensics): OOM->add swap + tune vm.overcommit_memory; disk-full->monitor cron + notify-elazar; kernel panic->enable kdump for post-mortem

OPS-85 agent-ops Blocked ↳ OPS-80

Generalize known-benign 404 suppression (extends PLUTO-182/184 template, app-side classifier per Elazar bs-mqoruy0m32e). All currently page at warn; reclassify at the write path (not-found-classify.ts / not-found-log.ts) so the row persists at info and never enters the warn page path. Candidates: (1) phantom redirect over-fire PLUTO-165/169 residue: empty requestedPath + classifiedReason=genuine-bad-route -> info (~1.9/day); (2) /apple-touch-icon.png + -precomposed.png iOS/Safari auto-requests -> WELLKNOWN_BENIGN_RE -> info/navigation (~1.3/day); (3) /robots.txt -> WELLKNOWN_BENIGN_RE -> info (~0.5/day; optionally serve real robots.txt separate); (4) credential-JSON scanner burst ~15 variants currently mis-tagged navigation NOT security (gcp/firebase/secrets/config/service-account .json, /api/env, /actuator/env) -> extend SCANNER_PATH_RE -> info/malicious (these are 182-class probes that slipped the regex); (5) /practicas/<non-uuid-slug> malformed -> non-UUID on UUID route -> info/malicious (~0.3/day). INVESTIGATE-FIRST sub-point: anonymous-no-referer-unknown old-schema warn rows (~0.9/day) -> suppress ONLY if all pre-date PLUTO-169 deploy; if any post-date, find the un-upgraded code path. ~7/day of ~14/day page_not_found warn volume.

PLUTO-187 pluto Blocked

EVO-70 Tier 1 follow-up: retire app after() calls (gated on passive prod evidence)

PLUTO-615 pluto Blocked low ↳ EVO-70

Wire applog email leg once verified send-as exists (NOT info@pensanta.com, single-prefix subject 'Ayudarg / <App> / error: <action>')

AYUD-15 ayudarg Blocked low

Recuperación de Correos Históricos (condicional: requiere localizar la computadora)

ADRIANAP-9 adriana-pavon Blocked low