Grouped by State, ordered by Manual. Drag to reorder; drag between groups to change the grouped field where Hangar owns it.
NIG-4[Ops] Renders failing "No space left on device" + VRAM starvation on shared P100No priorityestate-reviewmediumneeds-owner-input
SPE-2[SPEAK-EXPORT-1] Export notes → GitLab issues / ClaudeNo prioritybacklogfeatureneeds-owner-input+1
LIS-2[TAX-WHATIF-1] Budgeting + what-if modelling (±% salary, new-year allowances)No prioritybacklogfeatureneeds-owner-input+1
HOW-1[HML-DATA-1] Ingest + normalise DVLA + DVSA MOT data (foundation)No prioritybacklogfeatureneeds-owner-input+1
HAN-1Hangar — build trackingNo prioritykind::sync
BAS-4[BASIL-WEB-1] Website + commerce integration (WooCommerce)No prioritybacklogfeatureneeds-owner-input+1
SPE-7[Performance] Cold-start ~27s on the shared P100 (VRAM eviction)No priorityestate-reviewmediumperformance
LIS-3[TAX-PENSION-1] Enhanced pension-contribution modelling + education (differentiator)No prioritybacklogfeatureneeds-owner-input+1
HOW-2[HML-SEARCH-1] Search a car → how many left on the road, by yearNo prioritybacklogfeatureneeds-owner-input+1
HAN-2Phase 0 — probes, OAuth app, group webhooksNo priorityphase::0
BAS-2[BASIL-CONVO-1] Hamper qualification conversation designNo prioritybacklogfeatureneeds-owner-input+1
SPE-1[SPEAK-NOTES-1] Mind-dump notes mode (talk → written notes)No priorityapprovedbacklogfeature+2
LIS-8[TAX-ADMIN-1] Admin analytics dashboard (visitors, signups, usage)No prioritybacklogfeatureneeds-owner-input+1
HOW-3[HML-MOT-1] MOT-failure breakdown per model (DVLA × MOT mash-up)No prioritybacklogfeatureneeds-owner-input+1
HAN-3Phase 0.5 — mirror + reconciler + lease + plain tableNo priorityphase::0.5
BAS-3[BASIL-RECIPIENT-1] Recipient outreach conversation (Evabot-style)No prioritybacklogfeatureneeds-owner-input+1
LIS-6[TAX-EMAIL-1] Email capture + saved profile + annual tax-change notificationsNo prioritybacklogfeatureneeds-owner-input+1
HOW-4[HML-ENGINE-1] Breakdown by engine sizeNo prioritybacklogfeatureneeds-owner-input+1
HAN-4Phase 1 — full mirror, list + board layouts, read-onlyNo priorityphase::1
NIG-1[NJ-MODELS-1] Multi-model selector for the audition POC (swap-safe, one model at a time)No priorityapprovedenhancementfeature+2
BAS-11[Performance] LLM throughput collapses under shared-GPU contention (12 vs 33 tok/s)No priorityestate-reviewmediumperformance
LIS-7[TAX-ADVICE-1] Legal tax-reduction guidance (informational)No prioritybacklogfeatureneeds-owner-input+1
HOW-6[HML-MOBILE-1] iPhone app (later phase)No prioritybacklogfeatureneeds-owner-input+1
HAN-5Phase 2 — write-through, table, PQL, saved views, Power KNo priorityphase::2
LIS-1[TAX-CALC-1] Core UK PAYE salary & tax calculator (the replica core)No priorityapprovedbacklogfeature+2
HAN-6Phase 3 — workflow states, cycles, epics, estimates, relationsNo priorityphase::3
HAS-8[DB] PG18 upgrade — 1/4 Prep & local rehearsalNo prioritychore
SPE-4[SPEAK-E2EE-1] Zero-knowledge encrypted vault keyed to loginNo priorityapprovedbacklogfeature+3
LIS-9[TAX-MOBILE-1] Mobile app (complements the website)No prioritybacklogfeatureplanned
HAN-7Phase 4 — agent layer, MCP, timeline, analyticsNo priorityphase::4
SPE-3[SPEAK-SYNC-1] Cross-device synced chat/notes (desktop + web + mobile)No prioritybacklogfeatureneeds-owner-input+1
HAN-8Phase 5 — pages, initiatives, teamspaces, dashboardsNo priorityphase::5
HAN-9Phase 6 — custom properties, automations, intake, security layerNo priorityphase::6
BAS-5[BASIL-REPORT-1] Chat reporting / admin (summaries + full detail)No priorityapprovedbacklogfeature+2
OCT-28[STORAGE-2] Backups still live only on the database host — off-site mirroring is unconfiguredNo priorityapprovedblockedenhancement+2
PI-13[Ops] Deploy reliability on coolify8 — ghcr.io helper-image pull hangNo priorityopspipeline-reliability
AUT-29[DATA-1] Two Postgres extensions — analytical vs loggingNo prioritybacklogfeaturemail+1
PI-29Post-cutover: local dev, docs, and decommission Postgres 16No prioritychorelowneeds-owner-input+1
AUT-43[OPUX-1] Operator UX redesign + inline knowledge/help systemNo priorityapprovedfeatureneeds-owner-input+1
AUT-33[TEST-MAIL-1] Test the email service (no coverage today)No prioritybacklogchoremail+2
AUT-34[TEST-SPAM-1] Change/test anti-spam on the send + relay pathsNo prioritybacklogchoremail+2
AUT-35[RUA-1] Get DMARC RUA operating + test webhook/JSON ingestionNo prioritybacklogfeaturemail+2
AUT-60[DOMAIN-1] Give Automaton its own proper domain (not a subdomain)No prioritybacklogchoredns+2
AUT-48[INFRA-2] Clear redundant git worktreesNo prioritybacklogchoreneeds-owner-input+1
AUT-49[OPS-TOKEN-1] Automate GitLab PAT rotationNo prioritybacklogchoreneeds-owner-input+1
AUT-51[META-BOARD-1] Fleet-wide cross-project board/milestonesNo prioritybacklogchoreneeds-owner-input+1
AUT-52[META-AUTOFIX-1] Claude Code loop to work the issue boardNo prioritybacklogchoreneeds-owner-input+1
AUT-53[META-AUTOPLAN-1] Scheduled Claude Code routine to auto-plan un-planned issuesNo prioritybacklogchoreneeds-owner-input+1
AUT-47[INFRA-1] New Claude dev VM (disk-constrained box)No prioritybacklogchoreneeds-owner-input+1
AUT-70[GPU-4] Organisation-level GPU view — history for GPUs the org has access to (deferred)No prioritybacklogfeatureneeds-owner-input+1
AUT-88[MIG10-1] Migrate the Automaton platform to a dedicated standalone Coolify 10 — master plan & cutover runbookNo priorityfeaturemigrationneeds-owner-input+1
AUT-82[MIG10-3] Recreate the Automaton resource on Coolify 10 — app, secrets, domains, deploy webhookNo priorityfeaturemigrationneeds-owner-input+2
AUT-83[MIG10-2] Stand up the standalone Coolify 10 control planeNo priorityfeaturemigrationneeds-owner-input+2
AUT-84[MIG10-7] DNS/TLS cutover, verification & decommission of the coolify4 footprintNo prioritydnsfeaturehost-agent+4
AUT-89[MIG10-8] Migrate the self-hosted Logto auth stack to Coolify 10No priorityfeaturemigrationneeds-owner-input+2
AUT-30[SPEC-1] Email spec-divergence auditNo prioritybacklogchoremail+2
AUT-90[BUILD-3] Dedicated fast in-RAM image builder (BuildKit + tmpfs → GitLab registry cache)No priorityenhancementfeatureneeds-owner-input+1
DH-61[deploy] A red pipeline still ships to production — the deploy webhook fires on push, before CI runsNo prioritybugcideploy+2
AUT-95[Infra] Shared P100 tenancy plan — 5 tenants on one 16GB cardNo priorityestate-reviewinfrastructuremedium+1
AUT-87[MIG10-5] Migrate the mail stack — Postfix/OpenDKIM/rspamd, new IPs + PTR + DNS + reputationNo prioritydnsfeaturemail+4
AUT-45[BUILD-2] Move builds off Coolify → dedicated builder + image registryNo prioritybacklogchoreneeds-owner-input+1
AUT-46[PERF-2] App-wide performance auditNo priorityapprovedbacklogneeds-owner-input+2
AUT-39[BAO-1] OpenBao — Automaton platform secrets (Phase 1)No priorityapprovedbacklogfeature+2
AUT-54[STRIPE-1] Add operator-level Stripe connection to activate payments/billingNo priorityapprovedbacklogfeature+1
DH-48[PIVOT] Reposition from "Domain Hunter" to a branding & marketing appNo priorityepicin-progressneeds-owner-input+1
AUT-78[GPU-1b follow-up] Adopt the VRAM lease in Nightjar + Speakeasy + Basil (cross-repo)No priorityapprovedfeaturehost-agent+1
DH-83Object store has no settings UI — cache state is invisibleNo priorityenhancement
DH-84Search page auto-loads an unfiltered 72M-row view (45s)No prioritybugperformance
AUT-59[TEST-HOSTAGENT-1] Test plan for automatond / host-agent (unit + integration + security + fault)No priorityapprovedbackloghost-agent+3
AUT-102[DEPLOY-OOM-1] Harden prod build against OOM during parallel web+api build on coolify4No prioritybacklogbugops
AUT-63[TEST-RENAME-1] Test plan for project rename sync (Automaton ↔ GitLab ↔ Coolify)No priorityapprovedbacklogchore+2
AUT-108[STORAGE-7] Implement R2 / MinIO / AWS-S3 provisioning adapters (bring-your-own backends)No priorityapprovedenhancementfeature+2
AUT-115[DATA-2] Build large indexes CONCURRENTLY (+ lock_timeout) — non-concurrent CREATE INDEX locks hot MailMessageEventNo priorityapprovedmailneeds-owner-input+3
AUT-143[coolify-image-source] Create a service from a Docker image (wire the dead wizard stub to real Coolify image-app provisioning)No priorityapprovedfeature
AUT-144[coolify-more-sources] Additional app-creation sources: public repo, Dockerfile, GitHub-AppNo priorityapprovedfeature
AUT-145[coolify-databases] Manage standalone databases via Coolify (create + lifecycle + envs + logs)No priorityapprovedfeature
AUT-157[s3-presigned] Presigned share URLs (time-limited object links)No priorityapprovedfeature
AUT-158[s3-key-mgmt] Console key management: list / revoke / rotate scoped keysNo priorityapprovedfeature
AUT-159[s3-public-buckets] Public-read + CORS + bucket policy (R2-style public buckets)No priorityapprovedfeature
AUT-160[s3-quota] Per-bucket quota / size limit (set + enforce)No priorityapprovedfeature
AUT-161[s3-lifecycle] Lifecycle / expiry / retention rules (auto-delete old objects)No priorityapprovedfeature
AUT-162[s3-bucket-crud] Console bucket create + delete/empty (standalone, not only via service provision)No priorityapprovedfeature
AUT-166[music-worker-managed] Convert the Music Stations GPU worker to an Automaton-managed serviceNo priorityapprovedfeature
AUT-153[coolify-parity] EPIC — manage everything from Automaton (never log into Coolify)No priorityapprovedfeature
AUT-165[object-storage-parity] EPIC — manage the object store fully from Automaton (never open SeaweedFS)No priorityapprovedfeature
AUT-171[security] An over-scoped Coolify token exposes every SSH private key (master key does NOT — scope is the variable)No priorityapprovedcoolifysecurity
AUT-38[DMARC-DNS-BUG-1] RUA DNS record generated incorrectly (MX → .internal, unroutable)No priorityapprovedbugdns+256
AUT-37[DMARC-UI-1] "Publish DNS" flow hangs / uninformative + confusing field labelsNo priorityapprovedbugmail+356
AUT-31[MAIL-DEPLOY-1] Decouple MTA deploy lifecycle from unrelated deploysNo priorityapprovedbacklogbug+3
AUT-27Mail flow: long group caption overflows outside the dashed boxNo priorityapprovedbugplanned+256
AUT-189[pipeline-activity-feed] Historical 'everything that happened' feed — the deferred half of #142No prioritybacklogfeatureobservability
AUT-118[GPU-METRICS-COLLECTION] Real GPU stats: process names, power/temp history, resolution tiers, per-app seriesNo priorityapprovedfeatureops56
AUT-167[gpu-managed-ollama] Make the Domain Hunter Ollama a MANAGED GPU service, not an unmanaged tenantNo priorityapprovedfeaturegpu56
AUT-164[s3-operator-ui] Operator storage console UI + surface unmanaged-key reconciliationNo priorityapprovedfeature
AUT-194[gpu-workloads] Check what the CONSUMER asks for, not just what the endpoint servesNo priorityfeaturegpuneeds-owner-input+1
AUT-199[auth] Operator-token policy: should operator:read force an expiry, and should its use be audited?No priorityneeds-owner-inputsecurity
AUT-191[BFF-COV-1] Nothing checks that an operator API route is reachable — 11 are dead right nowNo priorityapprovedbugseverity::medium
AUT-163[s3-key-scoping] Per-key permission tuning (read-only vs read-write, prefix sub-scope)No priorityapprovedfeature
AUT-203[mail] DMARC reports for tpnetworks.dev go to a black hole — the rua domain has no MX and no ANo priorityapprovedbugdns+2
AUT-182[MAIL-SEC-F6] The inbound pipe's Delivered-To precondition isn't pinned, and pickRecipient falls back to the attacker-controlled To: headerNo prioritybugmailsecurity+1
AUT-181[MAIL-SEC-F2] Anyone can file a forged DMARC report against another tenant's domain — and defeat the dedupe to bloat their orgNo prioritybugmailsecurity+1
AUT-85[MIG10-4] Migrate stateful data — Postgres + Redis volumes (maintenance-window snapshot/restore)No priorityfeaturemigrationplanned
AUT-215[Registry mirror] Mirror job reports success for images it never copied (failed lookups compare equal)No prioritybugciinfrastructure+2
AUT-216[BACKUP-GAP-1] Scheduled backups have no agent-side implementation — the `backup` verb does not existNo prioritybacklogbugdata+3
AUT-168[storage] Reconcile the EXISTING orphaned SeaweedFS identities (backlog from #154)No priorityapproveddataneeds-owner-input+1
AUT-218[flaky] gpu-stats live-view test reads the Redis cache back — flaky by construction, and the fix is 20 lines above itNo prioritybacklogbugci+3
AUT-173[deploy] main did NOT auto-deploy — 4 merges sat undeployed for 2h+, and /health cannot reveal itNo priorityapprovedbugdeploy+1
AUT-180[MAIL-SEC-F1] Authentication-Results is trusted with no authserv-id check — requireAuth fails OPEN when the milter doesn't stampNo prioritybugmailsecurity+1
AUT-219[OPS] /version still reports commit "unknown" — the deployed SHA never reaches the buildNo prioritybacklogbugdeploy+3
AUT-221[storage] The gateway never reloads filer-written identities — minting needs the s3.configure/admin path, not a file writeNo prioritybacklogbugneeds-owner-input+2
AUT-222[storage] The platform object_storage connection cannot write — no bucket, key absent from backend identities, stale identitiesConfigPathNo prioritybacklogbuginfrastructure+2
AUT-205[PG18-1] Migrate the platform database to PostgreSQL 18 — master plan & cutover runbookNo prioritychoredatainfrastructure+3
AUT-225Live E2E suite: drive the real build as testuser123, creating projects + services on real infraNo priorityapprovedcifeature+1
AUT-231Rotate the test org's GitLab connection before it expires (~2026-08-13)No priorityapprovedneeds-owner-inputops+1
AUT-230Live E2E: Claude-driven GUI exploration passNo priorityapprovedciux
AUT-232Intermittent error boundary on /orgs/:slug/projects/new under sustained create/delete churnNo prioritybugseverity::mediumweb
AUT-26Operator Mail flow: group captions hidden behind node boxesNo prioritybugui
PI-1Widen price-grid time window (5yr → ~10yr) to fill low-turnover gapsNo priorityenhancementheatmap-v2priority::high
DH-3[DH-EXPIRY-1] Surface domains expiring soon (expiring + valuable + about-to-be-available)No priorityenhancementfeatureshipped
HAS-1[Bug] Duplicate/reused hashes: only the first row is ever marked crackedNo prioritybugestate-reviewhigh+1
OCT-1[Bug] "Subnet full" alert uses a different count than the dashboard → mis-fires & never clearsNo prioritydata-qualityestate-reviewmedium+1
BAS-1[BASIL-POC-1] Litmus-test hamper chatbot on the P100 (basic Q&A) — build firstNo prioritybacklogfeatureplanned
AUT-18[UI/UX] Wave 1 — responsive + a11y CSS foundation (shipped)No priorityaccessibilityreactive-designshipped+1
PI-2Gap-dilation: fill blank cells from occupied neighbours to close holesNo priorityenhancementheatmap-v2
DH-4[DH-VALUE-1] Re-work domain valuation (short names + keyword weighting)No priorityenhancementfeatureshipped
HAS-2[Bug] reconcileOnBoot can double-execute a live run in multi-worker mode (latent)No prioritybugestate-reviewmedium+1
OCT-2[Security] Probe result ingestion is not scoped to the probe's assigned subnetsNo priorityestate-reviewmediumsecurity+1
NIG-2[Bug] crestFactor: Infinity breaks the whole /jobs list with a 500No prioritybugestate-reviewhigh+1
AUT-19[UI/UX] Shared primitives + contained UX/a11y fixes (shipped)No priorityaccessibilitycomponent-uxshipped+1
PI-7[BIG] Replace square grid with an interpolated smooth heat surface (IDW raster tiles)No priorityenhancementheatmap-v2
DH-9[Bug] Auto-catch is dead: self._porkbun typo (should be self._pk)No prioritybugestate-reviewhigh+1
HAS-3[Bug] Successful run shows a scary "error" (benign GPU stderr)No prioritybugestate-reviewlow+1
OCT-3[Cleanup] Low-severity: enumerable /12-vs-/18 guard; UTC timestamp label; IPv6 usable-count precisionNo priorityestate-reviewlowshipped
NIG-3[Security] Public unauthenticated GPU workbench + unvalidated/unbounded job paramsNo priorityestate-reviewmediumsecurity+1
AUT-20[UI/UX] Command palette / TabBar a11y + breadcrumb casing (shipped)No priorityaccessibilitynavigation-iashipped+1
PI-11[Ops] Add a price-grid-only rebuild path (avoid the ~113-min forced geocode)No priorityapprovedenhancementops+1
DH-10[Bug] Blocking DNS resolution + time.sleep on the event loopNo prioritybugestate-reviewmedium+1
HAS-4[Security/Cleanup] Low-severity: wordlist-import SSRF, CSV formula injection, stale run progressNo priorityestate-reviewlowsecurity+1
OCT-5[LIVENESS-2] ICMP liveness matches on Echo ID only, ignoring reply source IP — cross-talk can false-positive a dead hostNo prioritybugshipped
NIG-5[Cleanup] Low-severity: seconds_start dead code; non-constant-time bearer compareNo priorityestate-reviewlowshipped
SPE-5[Security] Audio >1MB spools to /tmp — contradicts the zero-retention promiseNo priorityestate-reviewhighsecurity+1
AUT-21[UI/UX] Adopt PageHeader/EmptyState/Skeleton + a11y sweep across org pages (shipped)No priorityaccessibilitycomponent-uxconsistency+2
PI-3Reduce grid-alignment splitting (lower minSales on fine cells / moving window)No priorityenhancementheatmap-v2shipped
DH-5[DH-SETTINGS-1] Move operational config from env into an in-app settings pageNo priorityenhancementfeaturesecurity+1
HAS-5[STORAGE-S3] Move wordlists to S3 (source-of-truth + worker warm cache)No priorityenhancementshipped
OCT-6[ALLOC-1] "Show free addresses" toggle — greyed ghost rows for every available IP in a subnetNo priorityenhancementshipped
SPE-6[Security] Size cap checked after full spool (disk-fill DoS); MAX_AUDIO_SECONDS is dead codeNo priorityestate-reviewmediumsecurity+1
AUT-5[DNS-1] Auto-DNS attach is impossible on any Coolify connection with >1 server (one-line fix)No prioritybugdnsqa-2026-07+1
PI-4Soften the blocky look: edge feathering / opacity falloff on the fill layerNo priorityenhancementheatmap-v2shipped
DH-11[Cleanup] Low-severity: pipeline shows ">100% checked"; unbounded login-limiter mapNo priorityestate-reviewlowshipped
OCT-4[LIVENESS-1] "Active" lingers 14 days after an IP stops responding — demote unseen IPs promptlyNo priorityenhancementshipped
NIG-6[STORAGE-S3] Store generated FLAC audio in S3 (already mandated by the design doc)No priorityenhancement
BAS-6[Security] Admin console & APIs are unauthenticated (fail open)No prioritycriticalestate-reviewsecurity+1
SPE-8[Cleanup] Low-severity: whisper "…" not treated empty; readiness loose match; IndexedDB leakNo priorityestate-reviewlowshipped
HOW-5[HML-NEWREG-1] Breakdown of newly registered cars for a modelNo priorityfeatureshipped
AUT-25[UI/UX] Overhaul — tracking (consistency · reactive · a11y · IA)No prioritytrackingui-ux
PI-5Locally-normalised colour ramp (show local variation, not national blue/red)No priorityenhancementheatmap-v2shipped
DH-1[DH-DATA-1] Bulk-import registered domains from ICANN CZDS (gTLD zone files)No prioritydatafeatureshipped
OCT-7[STORAGE-S3] Upload pg_dump backups to S3 for off-host durabilityNo priorityenhancementshipped
BAS-7[Bug] Dietary constraints (allergies) can be silently walked back to emptyNo prioritybugestate-reviewhigh+1
AUT-24[UI/UX] IA polish — unify in-resource tabs, operator chip, admin doc titles (N2/N3/N4)No prioritybacklognavigation-iaui-ux
PI-6Improve rooftop geocoding coverage (postcode-centroid clustering distorts cells)No priorityenhancementheatmap-v2shipped
DH-18[TLD-UX-1] TLD registry: add a per-row Edit (load & edit in place); make the bottom form Add-onlyNo priorityenhancementshipped
HAS-10[DB] PG18 upgrade — 3/4 Cutover (dual-DB restore into fresh PG18 volume)No prioritychoreshipped
OCT-8[UI-THEME-1] Add Light + System appearance modes (currently dark-only)No priorityenhancementshipped
BAS-8[Bug] Brief extraction captures Basil's own question text into the Card slotNo prioritydata-qualityestate-reviewmedium+1
LIS-10[Bug] K-tax-codes keep a full Personal Allowance and under-taxNo prioritybugestate-reviewhigh+1
AUT-23[UI/UX] Component-UX polish — Button busy, palette actions, optimistic updates (U4/U6/U7)No prioritybacklogcomponent-uxui-ux
PI-8[BUG] Gap-fill stats-write fails silently → no progress bar + no auto-rebuildNo prioritybugpipeline-reliabilitypriority::high+1
DH-19[UI-LAYOUT-1] App is a fixed 1200px centred column with no responsiveness — widen + make it responsiveNo priorityenhancementshipped
HAS-9[DB] PG18 upgrade — 2/4 Off-box backup (rollback anchor)No prioritychoreshipped
OCT-9[PLANNER-1] Proportional block map — draw the address space, click to split, click the parent bar to joinNo priorityenhancementshipped
BAS-9[Bug] Two divergent "complete" definitions → sessions never finish, input never locksNo prioritybugestate-reviewmedium+1
SPE-9[SPEAK-S3-1] Model artifacts → managed S3 (SeaweedFS); drop the persistent /data volumeNo prioritychoreperformanceshipped
LIS-11[Enhancement] "Marginal rate" excludes student loan and is unlabelledNo priorityenhancementestate-reviewlow+1
AUT-4[PG-1] Postgres data-move runs pg_restore in the wrong container of a compose stack (exit status 1)No prioritybughost-agentmigration+2
PI-9[Feature] Unified background-jobs progress view (imports + derived workers)No priorityenhancementpipeline-reliabilitypriority::high+1
DH-20[DH-STORAGE-S3] Cache downloaded source snapshots (CZDS zones, Nominet drop-lists, HTTPS/SFTP files) in S3No priorityenhancementshippedstorage
HAS-11[DB] PG18 upgrade — 4/4 Cleanup & estate parityNo prioritychoreshipped
OCT-10[PLANNER-2] Split straight to a target prefix, and bulk-create selected blocks in OctetNo priorityenhancementshipped
BAS-10[Performance] Admin session list parses every session file on each requestNo priorityestate-reviewmediumperformance+1
SPE-10[SPEAK-S3-1a] Provision Automaton-managed S3 bucket + scoped keyNo prioritychoreshipped
LIS-13[Cleanup] Cosmetic: favicon 404, mobile helper crowding, minus glyphNo priorityestate-reviewlowshipped
AUT-9[MIG-3] Resource limits never carry on migration — wrong payload types (422)No prioritybugmigrationqa-2026-07+1
PI-10[Ops] Heavy derived/import work blocks the event loop → app unhealthy → Traefik unroutes → blank mapNo prioritybugopspipeline-reliability+2
DH-2[DH-DATA-2] Registered-domain coverage for the ccTLDs (.uk / .io / .sh)No prioritydatafeatureshipped
HAS-7[DB] Upgrade Hashforge Postgres 16 → 18No prioritychoreshipped
OCT-11[PLANNER-3] Show real host utilisation per planned block, not just whether the subnet existsNo priorityenhancementshipped
BAS-12[Cleanup] Low-severity: interests union, unbounded maps, token in query/logs, read-back truncationNo priorityestate-reviewlowshipped
SPE-12[SPEAK-S3-1c] Boot-time S3 model hydrator (boto3) + entrypoint rewrite (fail-open)No prioritychoreenhancementshipped
LIS-4[TAX-REGION-1] Regional tax variants (England / Scotland / Wales)No priorityfeatureshipped
AUT-6[NET-1] Fleet servers whose `ip` is a hostname produce unroutable URLs and DNS prefillsNo prioritybugqa-2026-07severity::high
PI-12[Ops] Stale-lock / stuck-import detection ("importing" flag never clears)No prioritybugopspipeline-reliability+1
DH-6[DH-TLD-REGISTRY-1] Manageable TLD registry with per-TLD source + authNo prioritydatafeaturesecurity+1
OCT-12[UI] Address row action icons don't line up when a row has no DeleteNo prioritybuglowshipped
SPE-13[SPEAK-S3-1d] Coolify cutover: S3_* env, remove /data volume, redeploy + verifyNo prioritychoreshipped
LIS-5[TAX-SELFEMP-1] UK self-employed tax calculatorNo priorityfeatureshipped
AUT-15[UI-4] Port defaults to 3000 even when the selected Dockerfile EXPOSEs a different portNo prioritybugqa-2026-07severity::medium+1
PI-15[Bug] "Sold" alerts miss sales whose completion date predates the watchNo prioritybugestate-reviewmedium+1
DH-7[DH-DOWNLOADER-1] Scalable bounded-parallel daily download orchestratorNo prioritydataenhancementfeature+1
OCT-13[HIER] Epic: hold the ranges you own as parent prefixes and carve subnets out of them (prefix hierarchy)No priorityenhancementepicshipped
BAS-13[STORAGE] Move Basil's data volume (sessions + persona) to managed S3 (SeaweedFS)No priorityenhancementpocshipped
SPE-11[SPEAK-S3-1b] Seed the bucket with whisper + Ollama model artifacts (one-time)No prioritychoreshipped
LIS-12[Bug] Numeric tax code is unbounded — a typo can zero the taxNo prioritybugestate-reviewlow+1
AUT-2[DOM-1] Add-service wizard "Point a domain at this service" creates DNS but never attaches the domain (404)No prioritybugdnsqa-2026-07+1
PI-16[Security] Admin authorization trusts a stale JWT claim (up to 7 days)No priorityestate-reviewmediumsecurity+1
DH-8[Performance] Filter/search/sort views time out (>12s) on the 72M-row candidates tableNo priorityestate-reviewhighperformance+1
OCT-14[HIER-1] Schema + create policy: `kind` (range/subnet), `parent_id`, containment instead of overlap rejectionNo priorityenhancementshipped
BAS-14[STORAGE] Move Basil's Ollama model cache to S3 (drop the ollama-models volume)No priorityenhancementpocshipped
AUT-22[UI/UX] Design-system consolidation — button/card/type/spacing (C1/C2/C3)No prioritybacklogconsistencyui-ux
PI-17[Performance] Search tail-latency balloons under concurrency (p99 ~11s)No priorityestate-reviewmediumperformance+1
DH-13[DH-SEARCH-1] Configurable search core — length/shape, multi-keyword generation, business-fitNo prioritydataenhancementfeature+1
OCT-15[HIER-2] Range metrics: carve utilisation and the uncarved free blocksNo priorityenhancementshipped
AUT-3[DOM-2] Migration never carries the compose-service domain mapping → app 503s on the targetNo prioritybugdnsmigration+2
PI-19[STORAGE-S3] Cache large gov.uk source downloads in S3 (optional, net-new — nothing to migrate)No priorityenhancementshipped
DH-16[DH-SEARCH-3] Domain-hack finder (the TLD completes the word)No prioritydataenhancementfeature+1
OCT-16[HIER-3] Guard every surface that assumes a flat register against rangesNo priorityenhancementshipped
AUT-10[MIG-4] Storage/volume declaration replay fails on migration (422 "type field required")No prioritybugmigrationqa-2026-07+1
PI-18[Cleanup] Watch-list 20-cap TOCTOU (read-committed race)No priorityestate-reviewlowshipped
DH-17[DH-SEARCH-2] Saved search profiles + scoring presetsNo prioritydataenhancementfeature+1
OCT-17[HIER-4] UI: nested Subnets view, range creation, dashboard Ranges panel, planner carves a rangeNo priorityenhancementshipped
AUT-1[MIG-1] Server migration reports success while taking the site downNo prioritybugmigrationqa-2026-07+1
PI-31[Admin] Manual price-grid rebuild records nothing — successes and failures both invisibleNo prioritybugmediumpipeline-reliability+1
DH-15[DH-SEARCH-6] Shortlist, side-by-side compare, explainable scores & bulk paste-and-scoreNo prioritydataenhancementfeature+2
OCT-18[PLANNER-4] Block map is unusable past ~16 blocks — replace the single strip with a wrapped space mapNo prioritybugenhancementshipped
AUT-12[UI-1] Status shows "running" while the host agent reports zero containersNo prioritybughost-agentqa-2026-07+2
PI-21[Blocker] Mirror postgis/postgis:18-3.6 into the registry mirrorNo prioritychorehighpg18+1
DH-14[DH-SEARCH-4] AI naming assist — business description → brandable candidatesNo priorityenhancementfeaturesecurity+1
OCT-22[PG18-3] Backups report healthy while every dump fails — outcome is never surfacedNo prioritybugmediumseverity::high+1
AUT-14[UI-3] Repo picker never refetches — a newly created repo stays invisible until a hard reloadNo prioritybugqa-2026-07severity::medium+1
PI-22Pre-flight: measure the database and the host before sizing the cutoverNo prioritychoremediumops+2
DH-12[DH-SEARCH-5] Watchlist + drop / availability alertsNo prioritydataenhancementfeature+1
OCT-26[BUG] Alerts never auto-clear — clearAlerts passes a nil slice, so `ref = ANY(NULL)` matches nothingNo prioritybugseverity::mediumshipped
AUT-13[UI-2] Add-service wizard marks steps "complete" the user never visitedNo prioritybugqa-2026-07severity::medium+1
PI-24CI: run the backend suite against Postgres 18 / PostGIS 3.6No prioritychoremediumpg18+2
DH-26[DH-DATA-6] Manual upload facility for the Nominet full registered-.uk list — shipped MR !97No prioritydatafeatureshipped
OCT-24[PG18-5] We hold 14 backups with no supported way to restore oneNo priorityenhancementmediumseverity::high+1
AUT-7[DIAG-1] A failed deploy gives the user no reason — only "deploy failed (deploymentId=…)"No prioritybugqa-2026-07severity::high
PI-28Cut over production to Postgres 18No priorityhighopspg18+1
DH-23[DH-DATA-4] Nominet import — live progress bar, timing + ETA, multi-fileNo prioritydataenhancementfeature+1
OCT-20[PG18-1] Mirror alpine:3.23 — the only Alpine that carries postgresql18-clientNo prioritychoremediumshipped
AUT-8[ISO-1] No org→domain scoping: an org can edit DNS for other domains in a shared provider accountNo prioritybugdnsqa-2026-07+2
PI-27Rehearse the Postgres 18 upgrade end-to-end on a full-size copyNo prioritychorehighops+2
DH-24[DH-DATA-5] Scheduled files.com auto-fetch of the Nominet registered-.uk list (SDK)No prioritydataenhancementfeature+1
OCT-21[PG18-2] Runtime image: Alpine 3.23 + postgresql18-client, shipped before the server movesNo prioritychoremediumshipped
AUT-11[MIG-5] A success-but-broken migration orphans the old Coolify app, invisible to the productNo prioritybugmigrationqa-2026-07+1
PI-23[Blocker] Postgres 18 cutover breaks the nightly S3 backup — pg_dump client is pinned to 16No prioritychorehighops+2
DH-22[DH-DATA-3] Start downloads from the settings UI — master downloader toggle + Nominet full-list toggleNo prioritydataenhancementmedium+1
OCT-23[PG18-4] CI and local dev on postgres:18-alpine — with a 16/18 matrix until prod cuts overNo prioritychoremediumshipped
AUT-16[UI-5] Assorted UX/UI polish (batch)No prioritybugqa-2026-07severity::low+1
PI-30[Ops] Land Registry import stalled and flood version check erroring in prodNo prioritybugmediumops+1
DH-25[DH-UX-1] Split the Settings page into Search / Data sources / System tabsNo priorityenhancementshippedux
OCT-25[PG18-6] Production cutover: side-by-side db18, guarded one-shot copy, flip DATABASE_URLNo prioritychoremediumshipped
AUT-77[PERF-5] Org audit/events feed is hard-capped at 30 with no pagination — history is unrecoverableNo prioritybugseverity::low
PI-26Guard the cutover against the self-loading data pipelineNo prioritybughighpg18+2
DH-27[DH-DATA-6] Generalise import/download progress to the CZDS bulk downloader + files.comNo prioritydataenhancementshipped
OCT-19[PG18] Epic: move Octet's Postgres from 16 to 18No prioritychoreepicmedium+1
AUT-73[PERF-2] >100 projects: the NEWEST projects silently vanish from GET /orgs (take:100 + orderBy asc)No prioritybugperformanceseverity::medium
PI-32[Ops] Prove the nightly S3 backup actually restores — never verifiedNo priorityhighopsseverity::high
DH-21[DH-STORAGE-S3b] Backfill existing downloads to S3 + evict local snapshots (keep the mounted volume small)No priorityenhancementshippedstorage
OCT-27[PG18-7] Post-cutover tidy-up: drop the 16 CI job, stale env vars, and the pgcopy audit tableNo prioritychorelowshipped
AUT-74[PERF-3] Provider-proxy reads are uncached and are the ONLY real slowness — DNS zone expand costs 0.9–1.8s every timeNo priorityperformanceseverity::medium
PI-25PostGIS 3.4 → 3.6 compatibility audit — the tile pipeline is the real riskNo prioritychoremediumpg18+1
DH-28[DH-STORAGE-S3c] Mirror Nominet downloads (files.com + manual upload) to S3 + restore-on-demandNo priorityenhancementshippedstorage
AUT-76[PERF-4] DNS proxy surfaces provider rate limits as raw 502s under modest concurrencyNo priorityperformanceseverity::low
PI-14[Blocker] Watch-list & alerts are unusable in prod — email verification required but SMTP unconfiguredNo priorityestate-reviewhighshipped
DH-29[DH-OPS] Business-fit backfill un-throttled → GIL starvation crash-loop ("no available server")No prioritybugopsperformance+1
AUT-17[PERF-1] Cold-path 5–7s first-call + ~650–900ms per-call BFF floor; background-tasks fires twiceNo prioritybugperformanceqa-2026-07+1
PI-33[Perf] Heat-map tiles bypass the cache — viewport-relative colour domain makes every request uniqueNo prioritybughighperformance+1
DH-30[DH-SEARCH] Multi-key sort on /search (chain sort keys in priority order)No priorityenhancementshippedux
AUT-75[OPS-1] Prod ran ~5h of stale code today — merged ≠ live, and nothing detects itNo prioritybugseverity::medium
DH-31[DH-OPS] Liveness coupled to the busy event loop -> load-induced "no available server"No prioritybugopsperformance+1
AUT-56[GPU-1a] GPU inventory + live operator visibility (nvidia-smi via automatond)No priorityapprovedfeaturehost-agent
PI-20[Geocoding] Prefer UPRN coordinates / de-stack same-postcode map pinsNo priorityapprovedestate-reviewlow+1
DH-33[DH-PERF] GUI performance under load — search + navigation must not time outNo priorityperformanceshippedux
AUT-71[GPU-3] GPU utilisation & memory history + dedicated GPU area in the Operator Control PanelNo priorityfeaturehost-agentplanned
PI-34[Ops] Restore drill — prove a nightly backup actually rebuilds the databaseNo priorityhighopsshipped
DH-34[DH-OPS] Background-process observability panel (status · backlog · rate · ETA for every job)No priorityenhancementopsshipped+1
DH-32[DH-SEARCH] Per-TLD, per-stage enumeration/check depth (accept any length; cap DNS/RDAP/Porkbun per TLD)No priorityenhancementsearchshipped
AUT-62[DOMAIN-UX-1] Change-domain → compose-service attach uses a free textbox instead of a service dropdown (typing does nothing)No prioritybugdnsseverity::high+2
DH-36[BUG] Duplicate taken_log rows → domains shown 2-3× in search (tpnet.uk)No prioritybugdata-integrity
AUT-66[DOMAIN-MULTI-1] Automaton assumes one domain per service; Coolify supports multiple — extra domains hidden (and at risk on edit)No prioritybugdnsseverity::medium+2
DH-37[BUG] Cross-table duplicate: a dropped .uk name shows as BOTH taken and available in unified searchNo prioritybug
AUT-57[GPU-2] Dedicated remote GPU host — provision + link into the control panelNo prioritybacklogfeaturehost-agent+1
DH-38[PIVOT P1] Extend instant .uk availability to every generator + dictionary 'available words containing X' searchNo prioritypivot
AUT-72[GPU-1b] VRAM lease + admission control — stop the shared P100 OOMingNo priorityfeaturehost-agentshipped
DH-44[bug] Reserved .uk SLDs (net.uk, police.uk, gov.uk…) are reported AVAILABLENo priorityapprovedavailabilitybug+1
DH-43[bug] Naming results aren't scoped to the run — every brief shows the same top namesNo priorityapprovedbugnaming+1
DH-42[flaky] test_dns_pool_claimer_drains_pending breaks on the wrong condition (pending==0, not drained)No prioritybugshippedtech-debt+1
DH-46[bug] LLM (Phase B) names skip the pronounceability gate and the ranking Phase A appliesNo prioritybugnamingquality
DH-47[P1 bug] Search form drops naming_run / generated — filtering loses the AI generationNo priorityP1bugnaming+1
DH-49[redesign] Naming becomes a list of MY APPS — a description per app, research on demandNo priorityfeaturenamingux
DH-50[P1] Enumerator holds the global write lock while examining up to 200,000 labels — every interactive write stallsNo priorityP1bugdatabase+1
DH-41[DH-AI-1] Deploy a dedicated Ollama on coolify7 to power the AI naming assist (Phase B)No prioritydatafeatureshipped
DH-39[PIVOT P2] Ollama GPU naming worker on coolify7 + wire DH naming Phase BNo prioritypivotshipped
DH-51[DH-AVAIL] Capture Nominet's own snapshot/production date (bulk_imports.snapshot_at is never written)No priorityavailabilitybugcorrectness
DH-35[DH-PERF] Load-hardening & speed under heavy load (benchmark-gated)No priorityapprovedenhancementperformance+1
DH-40[PIVOT P3] Side-menu navigation + declutter (reorganise, not delete)No prioritypivotshipped
DH-55[DB] Editing 0001 is INERT on an existing database — prod's audit_log.detail is still jsonb, and the migrator trusts a hand-written JSON_COLSNo prioritybugdatabaseincident+1
DH-52[incident] Postgres cutover crash-looped — schema applied (15 tables) then the app died, no tracebackNo prioritybugdatabaseincident+1
DH-53[DB] The Postgres schema is a redesign, not a port — 13 tables missing, and a silent partial-serve pathNo prioritybugcorrectnessdatabase+1
DH-58[.uk] Instant availability from set-membership — type any name, no per-name checkNo priorityfeatureneeds-owner-inputsearch
DH-57[BACKUP] Since the cutover, Domain Hunter has NO working backup — pg_backup exists and nothing calls itNo priorityapprovedbugdatabase+1
DH-56[CI] Every Postgres test is SKIPPED in CI — which is why #52, #53 and #55 all reached productionNo priorityapprovedbugci+1
DH-64[search] Three filters went CASE-SENSITIVE at the Postgres cutover — the helper that prevents this exists and they skipped itNo priorityapprovedbugsearch+1
DH-60[BACKUP] We have a good backup and nowhere to restore it — no target host has the ~70GB it needsNo priorityapprovedbugdatabase+1
AUT-67New-Project wizard: "new repo" mode can never succeed once the repo exists (delete + recreate loops forever)No priorityapprovedbugneeds-owner-input+2
DH-62Postgres never got the 0013 interactive-view indexes — the default dashboard view walks a global index and filtersNo prioritybugperformancepostgres
AUT-68New-Project wizard: new-repo services provision a placeholder that always deploys broken (empty repo + nixpacks / root / :3000)No priorityapprovedbugneeds-owner-input+3
DH-63"Best first" sorts put UNSCORED names at the top on Postgres — and fixing it alone would full-scan the tableNo prioritybugperformancepostgres
AUT-81[PLUGIN-4] Logto plugin — write capability (Management API writes behind a consent gate)No priorityapprovedbacklogfeature+1
DH-66The disk-headroom guard has been dead since the Postgres cutover — it measures a DSN string as if it were a directoryNo prioritybugopspostgres
AUT-65[DIAG-2] Background-task errors have no context — "already taken" but not WHAT or which projectNo priorityapprovedbugplanned+256
DH-67The Nominet fetch fails silently at five gates — no last-attempt record, no way to test the keyNo prioritybugobservabilityux
AUT-61[UI-PIN-1] Pin icon overlaps the trailing number — move it to the left of the numberNo priorityapprovedbugplanned+2
AUT-79[PLUGIN-2] Stripe project plugin (payments) on the ProjectPlugin frameworkNo priorityapprovedbacklogfeature
DH-69[ci] Nothing proves docker-compose.yml can actually START — a valid file took production downNo prioritybugcideploy
AUT-80[PLUGIN-3] Apple app-store project plugin on the ProjectPlugin frameworkNo priorityapprovedbacklogfeature
DH-65Move Domain Hunter's database from Postgres 17.10 to 18 — plan, blockers, and the trap that would destroy itNo priorityneeds-owner-inputopspostgres
AUT-91[MAIL-SCAN-1] Outbound "malware/phishing" reject blocks legit mail — undiagnosable + zero-weight false positivesNo prioritybugmailseverity::high
DH-70[DH-AVAIL 1a] Trust gate: refuse the import marker when the row count collapsesNo priorityavailabilitybugseverity::high
DH-72[DH-AVAIL 2] Record Nominet's snapshot date, not just when we downloaded itNo prioritysnapshot
DH-74[DH-AVAIL 4] Honest badges, a 'registry list' filter option, and tri-state premiumNo priorityavailabilityenhancementui
AUT-55[PLUGIN-1] Project-level service plugins (Logto, Stripe, Apple app provider)No priorityapprovedfeature
DH-75[DH-AVAIL 5] Confirm-on-demand: RDAP → Porkbun, in front of the spend capNo priorityavailabilityenhancement
DH-71[DH-AVAIL 1b] The stale-list guard stops at the badge — three gaps below itNo priorityavailabilitybugseverity::high+1
DH-76[DH-AVAIL 6] The Nominet import still deletes candidate evidence that post-dates the snapshotNo priorityavailabilitybugshipped
AUT-69Provisioning to a GPU server can't enable Coolify's GPU toggle — GPU services silently run on CPUNo prioritybugseverity::mediumshipped+1
DH-59[search] \"Find similar\" — LLM variations of a typed seed, TLD-scoped, availability-checkedNo priorityfeaturesearchshipped
AUT-28[EMAIL-1] Email analytics & sender-reputation packageNo priorityfeaturemailshipped
DH-45[DH-AVAIL] Availability model: discover free, verify on demand, buy behind the capNo priorityapprovedavailabilitydesign+2
AUT-32[MAIL-VIZ-1] Live "watch a test email traverse the system" animationNo priorityfeaturemailshipped
DH-77[DH-AVAIL] The availability_basis converge succeeds or fails invisiblyNo priorityavailabilityenhancementobservability+1
AUT-40[BAO-2] OpenBao — operator interface + multi-tier auth over ENVsNo priorityfeaturesecurityshipped
DH-73[DH-AVAIL 3] availability_basis exists as a column but the code still hardcodes 'uk'No priorityavailabilitydatabaseenhancement+1
AUT-44[BUILD-1] Per-service independent builds/deploysNo prioritychoreshipped
DH-54[DH-PERF] Postgres index audit — restore the coverage the port dropped, drop the dead index, gate all index DDLNo priorityapproveddatabaseenhancement+2
AUT-86[MIG10-6] Host-agent mesh continuity — automatond hosts reconnect to the moved control planeNo prioritydnsfeaturehost-agent+3
DH-78[bug] /readyz hangs for the whole post-boot index build — it takes the migration lockNo prioritybugobservabilityseverity::high+1
DH-68Make the domain score BRIEF-RELATIVE — CPU for "is this a good name", LLM for "is it right for THIS brand"No prioritybrandingenhancementshipped
DH-79[ui] Light / dark / system theme toggle in the menuNo priorityenhancementshippedui
AUT-96[STORAGE-2] Object-storage connections (operator + org level) + provisioning-adapter frameworkNo priorityenhancementfeaturesecurity+1
DH-80[search] Cut the filter panel from 25 controls to 5 — it asks engineering questionsNo priorityenhancementsearchshipped+1
AUT-92[Security] Seat-quota (plan limit) bypass via invitationsNo priorityestate-reviewmediumsecurity+1
DH-81[bug] Registered .uk names show as AVAILABLE — the import stopped clearing themNo priorityavailabilitybugseverity::critical+1
AUT-93[Data] Customer overview shows fabricated headline metrics next to real (empty) dataNo prioritydata-qualityestate-reviewmedium+1
DH-82[CRITICAL] Nominet's list appears to OMIT undelegated .uk — "absent ⇒ unregistered" is falseNo priorityavailabilitybugneeds-owner-input+1
AUT-94[Performance] /orgs/:slug/usage issues ~16-20 sequential DB round-tripsNo priorityestate-reviewlowperformance+1
AUT-41[BAO-3] OpenBao as a bring-your-own secret backend for org apps (connection + integration)No priorityfeaturesecurityshipped
AUT-98[STORAGE-4] SeaweedFS provisioning adapter (first self-hosted backend)No priorityenhancementfeaturesecurity+1
AUT-99[STORAGE-5] Read-only object-storage browser on the Connections tab (buckets, keys, permissions, usage)No priorityenhancementfeaturesecurity+1
AUT-42[BAO-4] OpenBao — coexistence with Coolify ENV filesNo priorityfeaturesecurityshipped
AUT-50[STORAGE-1] Object storage off Coolify local disk (R2 / S3 / self-hosted)No prioritychoreshipped
AUT-100[STORAGE-6] Gradual volume→bucket data-migration & cutover helper (verified, reversible)No priorityenhancementfeaturesecurity+1
AUT-101[MAIL-UX-1] Show the SMTP account's description under the username on the Messages listNo priorityenhancementshipped
AUT-103[CONN-BUG-1] Object Storage connection form: "Logto endpoint" label + unmapped fields (FIELD_HINTS drift)No prioritybugseverity::mediumshipped
AUT-106Org Connections page doesn't refresh after adding/changing a connection (stale until manual reload)No prioritybugfrontend
AUT-105Operator "Add platform connection" form: credential fields cramped into narrow columnsNo prioritybugfrontend
AUT-97[STORAGE-3] Declarative storage provisioning (per-project buckets, per-service scoped keys) + env injection + safe teardownNo priorityenhancementfeaturesecurity+1
AUT-112[STORAGE-8] On-demand object-storage provisioning API (create bucket + mint scoped key without a service)No priorityfeatureshippedstorage
AUT-110[TOKEN-UX-1] Token scope picker: explain that Admin already grants email + why General/Email can't mixNo priorityenhancementshipped
AUT-111[TOKEN-UX-2] Show the API endpoint + a usage example when a PAT is createdNo priorityenhancementshipped
AUT-109[MAIL-PROV-1] Declarative per-service email provisioning — auto-mint a service-scoped SMTP credential + inject SMTP env on deployNo priorityenhancementfeatureshipped
AUT-58[DESIGN-SYNC-1] Design sync current system → claude.ai/design for page redesignNo prioritybacklogneeds-owner-inputplanned+1
AUT-104[CONN-META-1] Serve connection field UI metadata from the provider registry (kill FIELD_HINTS drift)No priorityenhancementshippedtech-debt
AUT-107[STORAGE-BUG-1] Scoped-key provisioning doesn't work end-to-end — SeaweedFS filer transport mis-wired; R2/MinIO/S3 adapters unimplementedNo prioritybugseverity::highshipped
AUT-113[STORAGE-BYO] Bring-your-own bucket + scoped-key object-storage connection modeNo priorityfeaturesecurityshipped+1
AUT-119[BUG] Sidebar incident-count badge stays stale after resolving (updates only on full reload)No prioritybugshipped
AUT-124[MAIL-HELD-STATUS] Genuinely hold blocked mail + guarantee it isn't pruned before reviewNo priorityfeaturemailshipped
AUT-125[MAIL-RELEASE-ACTION] Approve, release & redeliver held mail (single + bulk + release-all-held)No priorityfeaturemailshipped
AUT-126[MAIL-ALLOWLIST] Allow a known-good sender/domain past content rejectionNo priorityfeaturemailshipped
AUT-120[SECURITY] Operator/platform incidents blend into the tenant (org) kiosk wall — persona scope-bleedNo prioritybugsecurityseverity::high+1
AUT-121[MAIL-FALSEPOS-REJECT] Stop hard-rejecting legitimate mail on a heuristic symbol nameNo prioritybugmailseverity::high+1
AUT-134[CHORE/OPS] Verify the platform Coolify connection is the arming source of the false 'Coolify down'No prioritychoreopsseverity::low+1
AUT-135[P0 · OUTAGE] Outbound mail is DOWN — stand up the automaton-mail Coolify resource (adopt existing spool volumes)No prioritybugmailops+2
AUT-123[MAIL-BLOCK-REASON] Show the real reason per message + on the incident (kill 'deferred, deferred')No prioritybugmailshipped
AUT-136[mail-mta-incident-undefined-target] MTA-down incident says 'undefined:undefined' — fall back to cfg host/portNo prioritybugmailshipped
AUT-132[KIOSK-INCIDENT-DISPLAY] A critical incident takes over the whole kiosk — should coexist, not blank itNo prioritybugshipped
AUT-122[MAIL-QUARANTINE-DEADLOCK] One flagged message shouldn't freeze the whole org with no way outNo prioritybugmailseverity::high+1
AUT-64[CREATE-1] Create-service wizard doesn't check name/repo availability — lets you proceed with a taken name, then failsNo prioritybugseverity::mediumshipped+1
AUT-133[BUG] Self-monitor 'Coolify down' critical is a FALSE ALARM — probe hits a 404 route (/api/v1/healthcheck)No prioritybugopsseverity::high+1
AUT-137[mail-mta-selfmonitor-probe] Platform MTA health probe + auto-clear (stop relying on failed sends)No priorityfeaturemailops+1
AUT-140[DNS-OP-1] Let a platform operator write DNS to a RESERVED zone via the org-scoped APINo prioritydnsfeaturesecurity+1
AUT-116[GPU-ATTRIBUTION] Show which Automaton app owns each VRAM processNo priorityfeatureshipped
AUT-117[GPU-STATS-GRAPH] Replace the sparkline with a proper RRD-style time-series (VRAM + util + optional watts)No priorityfeatureshipped
AUT-141[GPU-ATTRIBUTION-NAMES] GPU page still shows 'Coolify app 89' — resolve the real app/Service name (id-vs-uuid mismatch)No prioritybugfeatureshipped56
AUT-154[storage-bug] Key "rotation" orphans un-revocable SeaweedFS identities (re-provision never deletes the old key)No prioritybugdatasecurity+2
AUT-155[storage-bug] Concurrent scoped-key mints race on identities.json (unlocked whole-file read-modify-write can drop keys)No prioritybugdataseverity::medium+1
AUT-147[coolify-cancel-deploy] Cancel a running deploymentNo priorityfeatureshipped
AUT-156[s3-object-ops] Console object operations: download / delete / upload / multi-delete (make the read-only browser read-write)No priorityfeatureshipped
AUT-146[coolify-db-backups] Scheduled database backups + persistent-volume backupsNo priorityfeatureshipped
AUT-148[coolify-live-logs] Live-streaming build + runtime logs (no page refresh)No priorityfeatureshipped
AUT-176[storage] Revoking a key can silently do NOTHING and report success — plus teardown's unguarded loopNo priorityapprovedbugsecurity+1
AUT-36[MAIL-SEC-1] Security review of inbound ingress channels (JSON / webhook / RUA)No prioritymailsecurityshipped56
AUT-172[deploy] Failure diagnostics never read the build log — getDeploymentStatus().logs is always undefinedNo priorityapprovedbugcoolify+1
AUT-127[fleet-pipeline-aggregator] Unified per-service GitLab-CI + Coolify-deploy fleet read-modelNo priorityapprovedfeatureshipped56
AUT-128[gitlab-stage-timings] Per-stage/per-job GitLab CI status + live timingsNo priorityapprovedfeatureshipped56
AUT-129[deploy-duration-eta] Historical-median expected-duration (ETA) per app/legNo priorityapprovedfeatureshipped56
AUT-190[deps] Upgrade pnpm 9.12.0 → 11.x (⚠️ needs an onlyBuiltDependencies allow-list or the image ships broken)No priorityapprovedchoreci56
AUT-187[CI] glab-runner4 has a stale pnpm store — every API test job it picks up dies in `pnpm install` (not a flake, a bad runner)No prioritybugciops+1
AUT-170[connections] A failed verify reports 'HTTP 0' instead of the real transport errorNo prioritybugshippedux
AUT-177[storage] Live orphaned credential AE88BE04E2BED83C7CE5 on the nightjar bucket (created by a smoke test)No prioritysecurityshippedstorage
AUT-193[storage] The identity revoke can never work — adminEndpoint is settable only in tests, so filer reads go to the S3 gateway (HTTP 403)No prioritybugshippedstorage
AUT-195[storage] Minting is very likely broken on a migrated filer — same single-file write the revoke hadNo priorityapprovedbugseverity::high+1
AUT-198[ui] The API-keys scope picker cannot show operator:read — a capability with no way to grant itNo priorityapprovedbugseverity::low+1
AUT-197[auth] operator:read — a token scope that can read the operator console and nothing elseNo prioritysecurityshipped
AUT-114[OPS-2] Stale runtime GIT_COMMIT env masks /health + /version commit stamp (false cutover alarms)No prioritybugopsseverity::low+1
AUT-130[pipeline-live-push] Near-real-time push-origin pipeline/build updates over the existing WS railNo priorityapprovedfeatureshipped56
AUT-131[kiosk-scene-ci-flow] Kiosk fleet pipeline-board scene (push -> CI stages -> Coolify build -> deploy -> live)No priorityapprovedfeatureshipped56
AUT-139[mail-deferred-reenqueue-sweep] Rescue stranded deferred mail (kill-switch-during-outage)No priorityapprovedfeaturemail+156
AUT-142[fleet-pipeline-console] Expose the live fleet pipeline / build activity INSIDE the Automaton console (not just the kiosk)No priorityapprovedfeatureshipped56
AUT-149[coolify-server-ops] Coolify server write-ops + resource/domain browseNo priorityapprovedfeatureshipped
AUT-150[coolify-read-parity] Browse parity: list projects, environments, private keysNo priorityapprovedfeatureshipped
AUT-151[coolify-scheduled-tasks] App/service scheduled tasks (cron)No priorityapprovedfeatureshipped
AUT-152[coolify-service-cleanup] Route raw Coolify fetches through CoolifyServiceNo priorityapprovedchoreshipped
AUT-178[coolify] The same unguarded-upstream-call bug has been written 3 times — remove the failure mode, not the instancesNo priorityapprovedbugcoolify+2
AUT-192[flaky] test:e2e dev-login intermittently stays on /login — NOT solved by !557No prioritybugciflaky-test+1
AUT-174[storage] Minting a SeaweedFS identity fails in production — regression from !518's read-back guardNo prioritybugsecurityshipped+1
AUT-175[storage] The mint VERIFIER is broken, not the mint — a working key is reported as failed (supersedes #174)No prioritybugsecurityshipped+1
AUT-188[orgs] GitLab repo purge: unguarded safeFetch loses the AuditEvent on a permanent delete (5th instance of #178)No prioritybugsecuritytech-debt
AUT-179[ci] ERR_PNPM_NO_OFFLINE_TARBALL fails jobs BEFORE they run — 'typecheck:api failed' when nothing was typecheckedNo prioritybugcitech-debt
AUT-201[orgs] Coolify app purge has the SAME audit gap as #188 — !537 stopped the throw, not the silenceNo priorityapprovedbugsecurity+1
AUT-184[MAIL-SEC-F3] gzip ISIZE check is mod 2^32 — a >4 GB DMARC report bomb wraps past it and inflates fully into memoryNo prioritybugmailsecurity+1
AUT-202[flaky] gpu-stats asserts a BEST-EFFORT Redis write — the test is flaky by construction, not by timingNo priorityapprovedbugci+2
AUT-200[storage] Expose the connection's OWN backend identity on a GET, so "is this the credential we think?" needs no mutationNo priorityapprovedseverity::lowstorage
AUT-185[MAIL-SEC-F4] The 16 MB octet-stream body limit is registered GLOBALLY — every route on the API inherits it, not just the two mail sinksNo prioritybugmailsecurity+1
AUT-186[MAIL-SEC-F5] All inbound mail for all tenants shares ONE rate-limit bucket — a busy hour stalls everyone's inbound, cross-tenantNo prioritybugmailsecurity+1
AUT-196[storage] Connection verify says \"all roles passed\" without ever testing the admin path — and reports 0 buckets where several existNo priorityapprovedbugseverity::medium+1
AUT-169[coolify] Private-IP Coolify: deploy works but browse + purge are blocked (SSRF policy diverged)No priorityapprovedbugsecurity
AUT-183[MAIL-SEC-F7] Every inbox's webhook signing secret is returned on a read-scoped list — an inbound:read PAT can forge webhooksNo prioritybugmailsecurity+1
AUT-138[mail-mta-deploy-presence-guard] Guard against a missing automaton-mail resource (prevent recurrence)No priorityapprovedfeaturemail+1
AUT-2061. Stamp provenance on databases Automaton createsNo priority
AUT-2072. Classify standalone databases: linked / orphaned / unattributableNo priority
AUT-2083. Record what teardown leaves behindNo priority
AUT-2094. Surface orphans in the UI with an explicit one-click deleteNo priority
AUT-204Service/project teardown never deletes standalone Coolify databases — they survive as orphansNo prioritybugcoolifyops+3
AUT-217[security] A manage-role member can make the server post a stored connection secret to a host they choose — defeating maskPrimaryNo prioritybugneeds-owner-inputsecurity+1
AUT-220[storage] Scoped-key minting still fails at gateway confirmation after !574 — reproduced live twiceNo prioritybacklogbugseverity::high+1
AUT-210[PG18-2] Back up the platform database — there is no backup today (blocks the PG18 cutover)No prioritychoredatainfrastructure+3
AUT-213[PG18-5] Prod cutover — platform database to PostgreSQL 18 on coolify4No prioritychoredatadeploy+3
AUT-212[PG18-4] Rehearse the cutover against a restored copy of prod; staging compose to 18No prioritychoredatainfrastructure+2
AUT-214[PG18-6] An empty database boots and reports healthy — the platform cannot tell it apart from a live oneNo prioritybugdatainfrastructure+2
AUT-211[PG18-3] dev + CI to postgres:18-alpineNo prioritychoreciinfrastructure+1
AUT-223Dangling `depends_on: postgres` blocked the prod deploy after the PG16 retirementNo prioritybuginfrastructuremigration
AUT-224Platform backup only runs at API boot — a stable prod silently stops backing up, and `status` still reports "ok"No prioritybuginfrastructureneeds-owner-input
AUT-233Integration tests using the unimplemented `x-test-operator` header pass without asserting anythingNo prioritybugneeds-owner-inputtest-coverage
AUT-234Expiry sweep silently skips platform-level connectionsNo prioritybugsecurity
AUT-235Auto-rotate provider tokens before they expireNo priorityenhancementsecurity
AUT-236Rotate the GitLab↔Coolify deploy webhook secret (and stop refresh leaving a dead hook)No prioritybugsecurity
AUT-226Live E2E: harness — separate Playwright project, real Logto login, prefix sweeperNo priorityapprovedcishipped
AUT-227Live E2E: project lifecycle specsNo priorityapprovedcishipped
AUT-228Live E2E: service lifecycle + the three orthogonal linksNo priorityapprovedcishipped
AUT-229Live E2E: one real deploy per run, verified out-of-bandNo priorityapprovedcideploy+1
AUT-237Deleting a project leaves its GitLab subgroup behind, so re-creating a project with the same name breaksNo prioritybugseverity::mediumshipped+1