Una practica no se puede corregir despues de creada: la unica excepcion es el postoperatorio, y todo lo cargado al crear (marca, injerto, zona, piezas, regiones, complicaciones intra, antecedentes) queda mal para siempre

TERRA-181 terra Todo high

Daily orphan-process/scratch sweeper: scan, resolve owner, DM-to-self-clean

OPS-137 agent-ops Todo high

Decide whether pre-launch log retention is needed

MOVILBA-800 movilba Todo ↳ MOVILBA-799

RLS enablement prerequisites: the four-part single-change list for the five policy tables

VENUS-401 venus Todo

VENUS-350: unattributed full-DB reader on venus Supabase — CLOSED, 100% attributed to venus-db-backup.timer (2026-09-11/12 20-day re-measurement)

VENUS-350 venus Todo

Fleet appEvents schema standardization: single log(entry) entrypoint (no level-wrappers) + promote hot fields to real columns, minimize jsonb-blob reliance

MARS-411 mars Todo

Plan: paciente DNI + HC central store — autocomplete, dedup warning, estadísticas

PLUTO-437 pluto Todo

A named ayudante has no correction path: TERRA-140 lets one person assert another attended a surgery, and whether the named person can remove themselves is unanswered

TERRA-146 terra Todo ↳ TERRA-140

Standing coordination-notification subscription rule is undecided: COORDINATION_GROUP is null on purpose and the question survives only in a code comment and a superseded TERRA-59 description

TERRA-214 terra Todo

Marca de implante: proposal and approval path - client answered 'todos los docentes' but no suggestion surface exists

TERRA-141 terra Todo

Who may create a practica is an undecided policy the source itself flags: page and action both gate on all five PRACTICA_ROLES and that default also authorises a write into enamel's shared pacientes registry

TERRA-150 terra Todo

Venus-resident monitoring has no external liveness watcher: every enamel alarm dies silently with its host

ENAMEL-44 enamel Todo

Ejercitar las rutas autenticadas antes de publicar con un doble en la frontera del resolvedor: hoy nada autenticado se prueba porque la compuerta exige una identidad de Google real

TERRA-226 terra Todo

Student duplicate-práctica deletion request: student requests delete (reason=duplicate), picks keeper from pulldown, teacher approves -> non-keeper soft-deleted

MARS-147 mars Todo

Materialise the reviewer-vs-assigned-pick discriminator on practicaReviews, then label both surfaces

MARS-213 mars Todo

PTR/reverse-DNS + SPF/DKIM/DMARC for deliverability

VENUSINF-17 venusinfra Todo ↳ VENUSINF-3

Install + configure MTA (postfix) on venus

VENUSINF-16 venusinfra Todo ↳ VENUSINF-3

cc-context daily digest: delivery channel decision (thread 5) — A fold into 08:00 elazar-pending-digest / B standalone unit+hour / skip

OPS-47 agent-ops Todo

Weekly ux-pain digest delivery: move to Vercel-cron→authenticated-POST-to-hub→PM-drains-on-reconnect (remove relay-row/always-on-agent dependency). Blocked on llmmsg-maintainer answers: (1) can Vercel POST to hub from outside the reverse tunnel with an auth key, (2) unread-buffer retention/TTL must exceed weekly digest interval so an offline PM still receives it. Applies to mars (replace MARS-84 relay-row) + venus + pluto toast-ports. db agents are NOT 24/7 so a db-host cron is not viable; only nw agents + maybe PMs run 24/7.

MARS-102 mars Todo low

Fold the daemon-fork recovery runbook into a fleet rule file (recovery itself executed 2026-09-03)

MSG-351 llmmsg-srv Todo low ↳ MSG-346