PII in PM-triage NOTIFY payloads (venus+pluto), live since Jun/Jul, needs Elazar policy call
venus fn_notify_pm_triage (Supabase, db.fjnhfjwskixzsilxrkph) emits createdByEmail + left(body,300) on every supportTickets insert; pluto's version emits accessRequests email+domain+legajo/catedra (no ticket email). Both PERFORM pg_notify -> venus/pluto-pm-triage-listen.service -> single hub DM to the live PM agent. Confirmed via hub v2.sqlite messages table: venus 15+ real sends since 2026-07-04 (real patient names/emails/surgical-case text, most recent 2026-08-31), pluto 24 sends since 2026-06-22 (academic PII, most recent 2026-08-31). Ongoing today, not historical. Payload is durable in the hub sqlite (messages table) indefinitely, readable by any agent with roster/DB access, no redaction/retention policy. Found by coder-mars-cc while scoping MARS-174 (mars's own equivalent trigger is being retired unused, never had a listener). This is a data-handling/privacy policy call, not a venus-scope fix: options include truncating/dropping the email+free-text fields from the NOTIFY payload (daemon would need a DB-read fallback for context) vs accepting current exposure as within-policy (per the existing secrets-over-llmmsg-srv precedent, which was scoped to credentials, not user/patient PII) vs restricting/redacting at delivery. Held for Elazar, not fixed unilaterally.
Activity
-
Elazar 2026-09-02: NOTIFY payload minimized to ticket/request number only - agent looks up full record from DB itself, does not receive raw email/body over the wire. Applies to venus+pluto triggers (db-* lane) and daemon payload formatting (coder/solo-* lane), and is the baseline for MARS-174's build. Second, separate directive: the PM receiving the triage DM is required to ACT on it (triage + fix per the existing bs-mr4xk6nnuu2 spec: claim, classify, fix or escalate) - not just receive and sit. This applies to coder-mars-cc for MARS-174 and to whoever holds venus/pluto's PM seat today for the existing live pipelines.
-
Payload-minimization resolved for mars (number-only, per-channel disambiguation, migration 125 payloads being stripped by db-mars-cc). Venus/pluto still carry the old wider payload - not yet actioned, same fix needed there (db-venus/db-pluto + daemon owners).