| Issue #151: Evaluate advisory model/effort routing with observed execution provenance |
complexify |
P2 |
reconcile |
| Issue #159: Install and document the portable dashboard lifecycle |
simplify |
P1 |
drain-first |
| Issue #179: Follow-up: Block merge while review completion is nonterminal |
complexify |
P2 |
needs-scope |
| Issue #202: Follow-up: Fail closed on six reconciled workflow-pack contracts |
neutral |
P1 |
drain-first |
| Issue #204: Follow-up: Add verified-backport evidence reuse to PR batches |
complexify |
P3 |
needs-scope |
| Issue #225: address-review: bind REVIEW_CHECK_NAMES_JSON to exact check-run names (no identity to check-name bridge) |
neutral |
P1 |
drain-first |
| Issue #249: Follow-up: Fail closed on unsettled or failed configured reviews before merge |
complexify |
P1 |
needs-scope |
| Issue #251: Keep PR-body QA markers synchronized after review-fix pushes |
neutral |
P2 |
drain-first |
| Issue #256: verify: add a coverage-of-change gate (a green PR can ship zero tests for the behavior it fixed) |
complexify |
P2 |
needs-scope |
| Issue #257: Block merge on unchecked test-plan checkboxes in the PR body |
complexify |
P3 |
park |
| Issue #258: Generated-artifact drift gate: declare template-to-mirror pairs at the repo seam |
complexify |
P2 |
needs-scope |
| Issue #260: Load-sensitive subprocess-timeout tests make local bin/validate ambiguous |
neutral |
P1 |
drain-first |
| Issue #266: Post-merge hardening decisions from adversarial review of #252 (autonomous merge gates) |
complexify |
P3 |
reconcile |
| Issue #271: qa-evidence v2: ship a configured GitHub attachment uploader so GitHub-only UI lanes stop blocking on a human |
complexify |
P2 |
needs-scope |
| Issue #275: Build a closed-rubric skill-quality review for this pack's own 27 skills |
complexify |
P3 |
park |
| Issue #276: Evaluate hook-enforced gates: make one fail-closed check binding, not advisory |
complexify |
P3 |
reconcile |
| Issue #283: Unblock Block worked example contradicts its own (reordered) rule in a two-entry swap |
neutral |
P3 |
park |
| Issue #284: measured-metric validation is a denylist and keeps leaking new name shapes |
simplify |
P2 |
needs-scope |
| Issue #296: Add an immutable human-reviewed release channel |
complexify |
P2 |
needs-scope |
| Issue #309: Refactor oversized Ruby files and re-enable default RuboCop metrics |
simplify |
P1 |
simplify-next |
| Issue #318: Keep agent evidence in PR details, not commit history |
simplify |
P2 |
needs-scope |
| Issue #320: Support issue-linked PR and ad-hoc QA lanes in completed-batch receipts |
neutral |
P2 |
reconcile |
| Issue #334: Follow-up: generate PR route provenance automatically from receipts (#151 AC4/AC5) |
complexify |
P2 |
needs-scope |
| Issue #335: Follow-up: replay fixtures and evaluation runner for measured route recommendations (#151 AC6-AC8) |
complexify |
P3 |
park |
| Issue #353: Goal-prompt templates have 9 chars of usable slack: no Batch id: line fits (blocks #186 companion fix) |
simplify |
P2 |
reconcile |
| Issue #356: verify coverage-of-change gate: refine after first use (NO_HARNESS dominance, multi-hunk revert, multi-behavior receipts) |
complexify |
P3 |
park |
| Issue #359: Follow-up: prose mutation test in model-routing-contract-test has no detection power |
simplify |
P3 |
needs-scope |
| Issue #368: Add policy-aware GitHub API rate-limit routing and browser fallback handoffs |
complexify |
P3 |
park |
| Issue #372: Fail before execution and convert prompts for the active Codex or Claude harness |
complexify |
P2 |
needs-scope |
| Issue #376: Add project-configurable Grok and Gemini adversarial review adapters |
complexify |
P3 |
park |
| Issue #380: Follow-up: Require audits to create issues and batch prompts for outstanding findings |
complexify |
P3 |
needs-scope |
| Issue #391: Bind task scratch state to plan identity and reject cross-plan reuse |
complexify |
P3 |
needs-scope |
| Issue #392: Deploy and evaluate the early review stopping rule |
simplify |
P1 |
drain-first |
| Issue #399: Enforce hierarchical token budgets with human checkpoints for PR batches |
complexify |
P3 |
park |
| Issue #400: Default routine PR-batch coordinators below Sol/xhigh and require measured escalation |
complexify |
P3 |
park |
| Issue #402: Default PR-batch to one canonical issue or PR per user-visible task |
complexify |
P2 |
needs-scope |
| Issue #403: Block foreign-target lane takeover through cross-task delegation |
neutral |
P2 |
reconcile |
| Issue #404: Tracking: 2026-08-09 execution plan — token burn P0, merge-queue drain, Ruby cleanup (#309) |
neutral |
P3 |
reconcile |
| Issue #414: Incident follow-up: add a one-shot GitHub API canary and correct 403 guidance |
neutral |
P2 |
drain-first |
| Issue #441: Follow-up: accept passive independently owned route blockers after #409 |
complexify |
P3 |
needs-scope |
| Issue #444: Follow-up: Resolve workflow seams from the trusted current base |
neutral |
P2 |
needs-scope |
| Issue #445: Follow-up: Include fingerprinted skills in revision-backed migrations |
neutral |
P2 |
drain-first |
| Issue #455: Handle coordination-backend activation for in-flight PR batches |
complexify |
P2 |
needs-scope |
| Issue #459: Genericize the PR #307 status-row incident fixture while preserving replay provenance |
neutral |
P3 |
park |
| Issue #461: batch-plan-preflight accepts a path set that cannot complete: derive mechanically-implied companion paths at plan time |
complexify |
P2 |
needs-scope |
| Issue #462: An unresolved help_requested{permission} has no bounded outcome: lane kept working 2.8 days and died naming the wrong cause |
complexify |
P2 |
needs-scope |
| Issue #468: doctor: read linter settings and advise on agent-effective limits (complexity, file length, ABC, asset budgets) |
complexify |
P3 |
needs-scope |
| Issue #473: Discount generated-file churn from autonomous-merge size gates |
complexify |
P2 |
needs-scope |
| Issue #476: Slim the goal-prompt template: pin workflow contracts instead of restating them, and make density host-budget aware |
simplify |
P1 |
needs-scope |
| Issue #477: Validate merge_authority feasibility at plan time: branch protection, acting identity, stale-approval defects |
complexify |
P2 |
needs-scope |
| Issue #478: pr-batch: a QA lane sharing its maker's target makes the batch structurally un-closeable |
simplify |
P1 |
drain-first |
| Issue #480: Machine-enforce OC-v1: contract test and a non-self-counted narration-volume helper |
complexify |
P3 |
reconcile |
| Issue #482: RFC: review_tiers seam key — declare blast-radius paths so required review depth is schema, not per-PR judgment |
complexify |
P3 |
park |
| Issue #483: Hygiene: add SECURITY.md (GitHub private vulnerability reporting) and Dependabot for Actions |
neutral |
P2 |
reconcile |
| Issue #485: Reconcile PR #347 premature terminal-supersession audit blocker |
neutral |
P3 |
reconcile |
| Issue #500: agent-coord status vocabulary is missing ready-human-review-required and autonomous-merge-evidence-unknown |
neutral |
P2 |
reconcile |
| Issue #501: agent-coord terminal closeout cannot match an issue-registered lane that produced a PR |
neutral |
P2 |
reconcile |
| Issue #503: agent-coord terminal closeout needs the manifest and claim target forms to match, but the documented manifest example does not |
simplify |
P1 |
drain-first |
| Issue #504: Tracking: #473-#477 batch-gate and output-contract improvement chain |
neutral |
P3 |
reconcile |
| Issue #507: agent-coord terminal lane closeout rejects a valid single-lane batch (target form mismatch) |
neutral |
P2 |
reconcile |
| Issue #511: Follow-up: Exercise GitHub Actions changes from PR #427 |
neutral |
P3 |
reconcile |
| Issue #513: Avoid repeated high-risk acknowledgments for verified changes already merged to trusted main |
complexify |
P2 |
needs-scope |
| Issue #514: Define repository delivery policy and task merge authority |
simplify |
P1 |
drain-first |
| Issue #518: autonomous-merge-eligibility is unsatisfiable from an installed pack, silently disabling auto_merge_when_gates_pass |
neutral |
P1 |
drain-first |
| Issue #521: Follow-up: six deferred plan/spec findings from PR #383 review |
complexify |
P3 |
park |
| Issue #559: Refactor PR-batch into independently owned components |
simplify |
P1 |
simplify-next |
| Issue #560: Use GitHub task prompts and compact append-only run records |
complexify |
P3 |
needs-scope |
| Issue #561: Launch, name, and track user-visible Codex tasks |
complexify |
P3 |
park |
| Issue #570: Extract optional PR-batch coordination and observability |
simplify |
P1 |
simplify-next |
| Issue #583: Harden readable prompt and provenance contract edges after #476 |
complexify |
P3 |
park |
| Issue #584: Make launch identity persistence crash-safe |
complexify |
P2 |
needs-scope |
| Issue #587: Follow-up: Harden host task launch diagnostics and multi-lane summary |
simplify |
P3 |
park |
| Issue #604: Make heavy-root capacity admission atomic across coordinators |
complexify |
P2 |
needs-scope |
| Issue #613: Replace fixed PR-batch lane caps with per-host adaptive capacity budgets |
complexify |
P3 |
park |
| Issue #629: Follow-up: Codex goal-prompt budget is razor-thin and size-guard fixtures are unrealistic |
simplify |
P2 |
reconcile |
| Issue #631: Follow-up: Extract phases from closeout-evidence-replay HTTPS label parser |
simplify |
P1 |
simplify-next |
| Issue #632: Follow-up: HTTPS prose-label acceptance is an open-ended wording list |
simplify |
P1 |
simplify-next |
| Issue #634: Follow-up: hosted-qa-readiness verified-installed-pack provenance has no published digest |
complexify |
P3 |
park |
| Issue #635: Harden replay timeout ownership and cleanup reporting |
neutral |
P2 |
drain-first |
| Issue #636: Add adversarial trust fixtures for the stage-dependency helper |
neutral |
P2 |
drain-first |
| Issue #637: Follow-up: decide whether private and link-local hosts count as durable evidence |
complexify |
P3 |
park |
| Issue #638: Follow-up: decide whether the coordination applicability proof needs a technical independence control |
complexify |
P3 |
park |
| Issue #640: Follow-up: distinguish an unavailable configured-review gate from unsettled reviews |
neutral |
P2 |
reconcile |
| Issue #645: Follow-up: pass the trusted applicability proof and its digest as one value object |
simplify |
P2 |
simplify-next |
| Issue #647: Follow-up: agent-workflows-status reports UP_TO_DATE for a modified installed bin/agent_doctor file |
complexify |
P2 |
needs-scope |
| Issue #659: Follow-up: extract one bounded process-group lifecycle instead of three copies |
simplify |
P1 |
simplify-next |
| Issue #660: Follow-up: bound the trusted-base rev-parse in autonomous-merge-eligibility |
neutral |
P3 |
park |
| Issue #666: Follow-up: batch-plan-preflight suite fails opaquely from a world-writable checkout root |
neutral |
P2 |
needs-scope |
| Issue #685: Publish non-Rails adopter examples (surface shakaperf; add Vite+Supabase/Deno and Python example repos with recorded runs) |
complexify |
P2 |
needs-scope |
| Issue #686: Installer: add --dry-run and --diff, plus a 'review before installing next to privileged agents' doc |
complexify |
P2 |
needs-scope |
| Issue #698: Follow-up: calibration GitHub reader lacks the UTF-8 and decoded-surrogate gates added in #682 |
simplify |
P2 |
drain-first |
| Issue #702: pr-batch: do not chase reviewer re-review prompts when the merge gate is already satisfied |
simplify |
P1 |
drain-first |
| Issue #715: Mirror merge-feasibility expected-terminal into plan prompt template |
neutral |
P3 |
reconcile |
| Issue #725: Complete #607: make the safe test-only risk resolution executable |
complexify |
P3 |
needs-scope |
| Issue #726: Reduce full Validate runner time with bounded in-job installer sharding |
complexify |
P2 |
needs-scope |
| Issue #729: Refine the HIL desk contract after PR #728 review |
complexify |
P3 |
park |
| Issue #731: Standardize GitHub human-attention labels and agent comment attribution |
complexify |
P2 |
needs-scope |
| Issue #735: upgrade-agent-workflows snapshots the whole agent home with rsync; unusable on large ~/.codex |
simplify |
P1 |
simplify-next |
| Issue #738: Trim the control-tower prompts and freeze the desk contract until T2 has run |
simplify |
P1 |
needs-scope |
| Issue #739: Fill the Claude Desktop adapter row for control towers and the Human Attention Desk |
complexify |
P3 |
park |
| Issue #740: Position Agent Workflows as the exoskeleton for the AI-aggressive engineer, not a software factory |
neutral |
P3 |
park |
| Issue #743: Add a required comment kind and in-place bookkeeping to the agent comment envelope |
complexify |
P2 |
needs-scope |
| Issue #744: Add a label-hygiene GitHub Action for needs-rebase and human-attention labels |
complexify |
P3 |
park |
| Issue #745: Skip draft pushes in the Claude review Action and shape its output |
simplify |
P1 |
drain-first |
| Issue #747: Require Lint on main and make Validate change-aware before requiring it |
neutral |
P1 |
drain-first |
| Issue #750: Strengthen the OC-v1 contract test assertions from PR #705 |
complexify |
P3 |
park |
| Issue #751: Accept standard optional Agent Skills fields and enforce size limits in validate-claude-skill-metadata |
neutral |
P3 |
park |
| Issue #753: Control towers must write attention records (attention-upsert/resolve) once agent-coordination #293 merges |
complexify |
P3 |
needs-scope |
| Issue #760: Follow-up: Recover review replies and reconcile stale change requests after ROR #4980 |
neutral |
P2 |
needs-scope |
| Issue #766: completed-batch-publication-preflight cannot resolve an issue-target lane (targets: ["issue:N"] + pr_url) to its implementation PR |
neutral |
P1 |
reconcile |
| Issue #773: Harden process-gap mechanism-target checker: stale-comment cleanup and fence-aware headings |
complexify |
P3 |
park |
| Issue #774: replicate-ci run-history recipe: repository host, trigger ref, and job-scoped logs in the GitHub Actions default path |
simplify |
P2 |
simplify-next |
| Issue #775: Reject malformed surrogate-pair escapes in GitHub JSON evidence and validate decoded strings once |
simplify |
P2 |
simplify-next |
| Issue #777: pr-route-provenance: fence-aware markers, bounded row growth, duplicate receipts, disposition-enum coupling |
complexify |
P3 |
needs-scope |
| Issue #778: Help-request lifecycle follow-ups from #649 review: doc plumbing, batch-scope closeout, title-metadata dedupe |
simplify |
P2 |
needs-scope |
| Issue #781: Gate follow-up issue creation with the evaluate-issue rubric and add a sweep that closes low-value agent-filed follow-ups |
simplify |
P1 |
simplify-next |
| Issue #782: Follow-up: align default coordination_backend preset and fallback vocabulary with the #601 adapter boundary |
simplify |
P1 |
drain-first |
| Issue #787: Implement repo-owned verification tuning through the seam after delivery-policy design |
complexify |
P2 |
needs-scope |
| Issue #790: Follow-up: ready-to-draft toggle collapses same-head Validate runs and drops the ready run's evidence |
neutral |
P2 |
reconcile |
| Issue #791: Follow-up: batch-status owner route validates a stale heartbeat and coalescing tracks the wrong prior fingerprint |
neutral |
P2 |
needs-scope |
| Issue #793: Measure original versus compact update-changelog instructions on one Codex route |
neutral |
P3 |
park |
| Issue #794: Exclude non-allowlisted PR comment bodies at the review-data ingestion boundary |
simplify |
P1 |
drain-first |
| Issue #802: Report where merged and stalled PRs spend their time |
complexify |
P2 |
park |
| Issue #813: Recognize freshly verified already-integrated PR heads in current-integration evidence |
neutral |
P1 |
drain-first |
| Issue #816: Make ordinary PR closeout lightweight; reserve additional audits for explicit need |
simplify |
P1 |
simplify-next |
| Issue #817: Follow-up: Replace hidden GitHub comment text with labeled details sections project-wide |
simplify |
P1 |
simplify-next |
| PR #280: Bind workflow operations to verified provider revisions |
complexify |
P3 |
park |
| PR #288: Harden fail-closed workflow replay controls |
complexify |
P1 |
drain-first |
| PR #289: Require current-integration CI before merge readiness |
complexify |
P2 |
needs-scope |
| PR #426: Enforce hierarchical token budgets for PR batches |
complexify |
P2 |
needs-scope |
| PR #458: Default PR batches to one canonical target |
complexify |
P3 |
park |
| PR #469: Fail closed on unsettled configured reviews |
complexify |
P1 |
reconcile |
| PR #523: Accept trusted-base provenance for merged changes |
complexify |
P2 |
needs-scope |
| PR #575: Make PR-batch launch prompts human-readable |
complexify |
P1 |
needs-scope |
| PR #582: Add canonical GitHub agent run records |
complexify |
P3 |
park |
| PR #585: Launch and track user-visible host tasks |
complexify |
P3 |
park |
| PR #601: Extract optional PR-batch coordination and observability |
simplify |
P1 |
simplify-next |
| PR #618: Make heavy-root capacity admission atomic across coordinators |
complexify |
P2 |
needs-scope |
| PR #621: Add adaptive per-host PR-batch capacity |
complexify |
P3 |
park |
| PR #630: Add one-shot GitHub API canary |
complexify |
P2 |
drain-first |
| PR #633: Record the installed autonomous-merge runtime digest |
neutral |
P1 |
drain-first |
| PR #643: Fix issue-targeted batch publication |
complexify |
P1 |
reconcile |
| PR #646: Detect omitted companion paths before batch dispatch |
complexify |
P2 |
needs-scope |
| PR #648: Include fingerprinted skills in revision-backed migrations |
neutral |
P2 |
drain-first |
| PR #649: Track permission help requests to bounded closeout |
complexify |
P1 |
drain-first |
| PR #652: Fingerprint managed bin copies for install integrity |
complexify |
P2 |
drain-first |
| PR #654: Make launch identity publication crash-safe |
complexify |
P3 |
park |
| PR #655: Bound replay lifecycles and report cleanup honestly |
complexify |
P1 |
drain-first |
| PR #664: Add adversarial fixed-sibling trust fixtures |
neutral |
P1 |
drain-first |
| PR #665: Distinguish an unavailable configured-review gate from unsettled reviews |
complexify |
P1 |
reconcile |
| PR #674: Require final-head QA marker supersession |
complexify |
P2 |
needs-scope |
| PR #675: Require durable post-merge audit follow-ups |
complexify |
P2 |
needs-scope |
| PR #677: Add repo-owned generated artifact drift verification gate |
complexify |
P3 |
park |
| PR #679: Test route provenance rules structurally |
complexify |
P2 |
needs-scope |
| PR #683: Keep agent evidence in PR details, not commit history |
complexify |
P2 |
needs-scope |
| PR #687: Add receipt-driven PR route provenance |
complexify |
P3 |
needs-scope |
| PR #688: Add opt-in GitHub evidence uploader seam |
complexify |
P3 |
park |
| PR #691: Install public dashboard lifecycle through agent-stack |
neutral |
P2 |
drain-first |
| PR #692: Add a RuboCop metrics baseline ratchet |
neutral |
P1 |
simplify-next |
| PR #694: Add verified-backport evidence contract |
complexify |
P3 |
park |
| PR #696: Add non-failing linter settings advice |
complexify |
P2 |
needs-scope |
| PR #697: Add runtime prompt compatibility gate |
complexify |
P2 |
needs-scope |
| PR #700: Follow-up: calibration GitHub reader needs UTF-8 and surrogate gates |
simplify |
P1 |
drain-first |
| PR #703: Clarify terminal closeout target forms |
neutral |
P2 |
drain-first |
| PR #706: Prevent QA lanes from duplicating targets |
simplify |
P1 |
drain-first |
| PR #708: pr-batch: do not chase reviewer re-review prompts when the merge gate is already satisfied |
simplify |
P1 |
drain-first |
| PR #713: Bind task scratch state to plan identity |
complexify |
P2 |
needs-scope |
| PR #714: Add merge feasibility preflight and stale approval shadow gate |
complexify |
P2 |
needs-scope |
| PR #716: Discount generated-file churn from autonomous merge size gates |
complexify |
P3 |
needs-scope |
| PR #717: Fail closed on malformed trust role values |
neutral |
P1 |
reconcile |
| PR #719: Handle coordination-backend activation for in-flight PR batches |
complexify |
P2 |
reconcile |
| PR #720: address-review: bind REVIEW_CHECK_NAMES_JSON to exact check-run names |
neutral |
P2 |
drain-first |
| PR #722: Mirror expected-terminal into planning prompts |
complexify |
P3 |
reconcile |
| PR #723: Clarify reordered marker contract |
neutral |
P2 |
drain-first |
| PR #724: Make prompt headroom reserve advisory |
neutral |
P3 |
reconcile |
| PR #732: Standardize human-attention labels and agent attribution |
complexify |
P1 |
reconcile |
| PR #799: Enforce actor trust at the review-data ingestion boundary |
simplify |
P1 |
drain-first |
| PR #801: Add external skill maintenance and Matt Pocock coexistence guide |
complexify |
P3 |
park |
| PR #804: Skip Claude reviews for draft pull requests |
simplify |
P1 |
drain-first |
| PR #808: Separate integration checks from full release verification |
neutral |
P2 |
drain-first |
| PR #809: Add a verified stable release channel |
complexify |
P2 |
park |
| PR #811: Limit optional review nits to the initial fix pass |
simplify |
P1 |
drain-first |
| PR #812: Ask for required skill choices before acting |
neutral |
P2 |
drain-first |
| PR #814: Fix current-integration identity and live-base policy provenance |
neutral |
P1 |
drain-first |