Skip to content

Read at

A snapshot: read at commit 707a04c7ce8 on 2026-10-18T00:01:48Z by majordomus 0.29.0. Nothing on this page is read again. See it live

Issues

Every piece of work the plan holds, and where each stands.

Narrow the plan by status, milestone, priority or text; every issue opens its inspector, every milestone its own.

  • Issues424plan.status /counts/total
  • Ready86plan.status /counts/by_status/READY
  • Blocked159plan.status /counts/by_status/BLOCKED
  • Done161plan.status /counts/by_status/DONE

Issues

Every issue of the plan, as the plan records it.

IssueStatusMilestonePriorityBlocked byEvidence
I0001Audit what actually plans work in this repositorydoneM000p0nothing1 of 1
I0002Define the canonical milestone and issue schemadoneM000p0nothing1 of 1
I0003Implement the model loader and the status derivation enginedoneM000p0nothing1 of 1
I0004Implement DAG validation and execution wavesdoneM000p0nothing1 of 1
I0005Implement the plan command surfacedoneM000p0nothing1 of 1
I0006Generate the Mermaid DAG from the graphdoneM000p1nothing1 of 1
I0007Enforce the canonical model as doctrinedoneM000p1nothing1 of 1
I0008Project the model to GitHub milestones and issuesdoneM000p1nothing2 of 2
I0009Project the model into the websitedoneM000p1nothing1 of 1
I0010Behavioural tests for schema, status, graph and commanddoneM000p0nothing1 of 1
I0011Cross-surface consistency and mutation testsdoneM000p0nothing2 of 2
I0012Make CI refuse an invalid model or a stale projectiondoneM000p1nothing1 of 1
I0013Document the semantics and the dogfooding ruledoneM000p1nothing1 of 1
I0014Make the worker instructions require the modeldoneM000p0nothing1 of 1
I0015Open the first real milestone and execute one issue through itdoneM000p0nothing1 of 1
I0101Reproduce the escaped blocker as an executable casedoneM001p1nothing1 of 1
I0102Decide whether a question transfers or the gate widensdoneM001p1nothing1 of 1
I0103Implement the decision and prove it holdsdoneM001p1nothing1 of 1
I0104Move the claim from planned to guaranteeddoneM001p2nothing1 of 1
I0201Declare which profile axis may become which runtime limitreadyruntime-adaptersp1nothing0 of 1
I0202Resolve a task's effective limits and print them as datablockedruntime-adaptersp1I02010 of 1
I0203Make enforcement opt-in, and prove a repository that declines is unaffectedblockedruntime-adaptersp1I02020 of 1
I0204Apply one derived limit for real and prove it changes what happensblockedruntime-adaptersp1I02030 of 2
I0205Declare the clamp as a doctrine so the mapping and the adapter cannot driftblockedruntime-adaptersp2I02040 of 2
I0206Publish the runtime-adapters claim with the test that proves it and the limits it does not coverblockedruntime-adaptersp2I02050 of 1
I0301Define the execution record, including what an absence looks likeblockedexecution-telemetryp2milestone:execution-telemetry0 of 1
I0302Record telemetry a provider reports, and refuse anything it did notblockedexecution-telemetryp2I0301milestone:execution-telemetry0 of 1
I0303Prove a silent provider produces an explicit absence, never a guessblockedexecution-telemetryp2I0302milestone:execution-telemetry0 of 1
I0304Read the measurements back through the history surface, under a boundblockedexecution-telemetryp2I0303milestone:execution-telemetry0 of 1
I0305Publish the telemetry claim and record what remains unmeasuredblockedexecution-telemetryp3I0304milestone:execution-telemetry0 of 1
I0401Define an accepted outcome, and join it to its measurements without storing the joinblockedcost-per-accepted-outcomep2milestone:cost-per-accepted-outcome0 of 1
I0402Report cost only where measurement and acceptance both existblockedcost-per-accepted-outcomep2I0401milestone:cost-per-accepted-outcome0 of 1
I0403Make a thin denominator say so rather than average it awayblockedcost-per-accepted-outcomep2I0402milestone:cost-per-accepted-outcome0 of 1
I0404Publish the cost-per-outcome claim with its unit defined beside itblockedcost-per-accepted-outcomep3I0403milestone:cost-per-accepted-outcome0 of 1
I0501Group comparable work from what the records already carryblockedrouting-recommendationsp3milestone:routing-recommendations0 of 1
I0502Recommend a profile from measured cost, naming the measurementsblockedrouting-recommendationsp3I0501milestone:routing-recommendations0 of 1
I0503Return no recommendation where the data is too thin, and say whyblockedrouting-recommendationsp3I0502milestone:routing-recommendations0 of 1
I0504Prove the recommendation is advisory and publish it as suchblockedrouting-recommendationsp3I0503milestone:routing-recommendations0 of 2
I0601Let a policy name a shared source it does not copyblockedshared-policyp3milestone:shared-policy0 of 1
I0602Make a local override explicit and prove it survives an update of the shared sourceblockedshared-policyp3I0601milestone:shared-policy0 of 1
I0603Report drift from the shared policy in one commandblockedshared-policyp3I0602milestone:shared-policy0 of 1
I0604Prove the offline guarantee survives sharingblockedshared-policyp3I0603milestone:shared-policy0 of 2
I0605Publish the shared-policy claim and what sharing still cannot doblockedshared-policyp3I0604milestone:shared-policy0 of 1
I0701Reproduce the misattribution as an executable casedoneM002p1nothing1 of 1
I0702Decide how a record is attributed, between named alternativesreadyM002p1nothing0 of 1
I0703Implement the decision and prove it holdsblockedM002p1I07020 of 2
I0704Publish what attribution guarantees, and what it still cannotblockedM002p2I07030 of 1
I0801Narrow the Clean Extraction Boundary and record what was adopteddoneM003p1nothing1 of 1
I0802Specify the session record before writing onedoneM003p1nothing1 of 1
I0803Open a session and report its statusdoneM003p1nothing1 of 1
I0804Close a session into an envelope derived from the ledgerdoneM003p1nothing2 of 2
I0805Read sessions back with a divergence labeldoneM003p1nothing1 of 1
I0806Make the session rules doctrines, with retention and archivingdoneM003p1nothing1 of 1
I0807Discover knowledge sources from git, not from the filesystemdoneM003p1nothing1 of 1
I0808Extract nodes with identities that survive a rebuilddoneM003p1nothing2 of 2
I0809Record only edges that a file states, each with where it was observeddoneM003p1nothing2 of 2
I0810A content-hash manifest that makes a second sync cheapcancelledM003p1nothing0 of 2
I0811Read-only knowledge lookup with an ordering that can be explaineddoneM003p1nothing2 of 2
I0812Validate the graph, and let doctor and watch ask the same validatorreadyM003p1nothing0 of 2
I0813A closed session becomes a node that points at its episodeblockedM003p1I08120 of 1
I0814Give the worker a bounded slice of knowledge, not the knowledge basedoneM003p1nothing1 of 1
I0815Say what is now true in the claims, the documentation and the worker instructionsblockedM003p1I08130 of 2
I0816Prove the loop on a real issue, without a transcriptblockedM003p1I08150 of 1
I0817Phase timing and work counters behind MJ_TIMINGdoneM004p0nothing1 of 1
I0818The command registry is read in one passdoneM004p0nothing1 of 1
I0819The project model is loaded with one flatten per file and no per-file lookupsdoneM004p0nothing1 of 1
I0820Catalogue, DAG, context and command-surface validators read their inputs oncereadyM004p0nothing0 of 1
I0821Flattened YAML is cached under .ai/local/cache by content hashreadyM004p0nothing0 of 1
I0822Every canonical file is flattened at most once per commandblockedM004p0I08200 of 1
I0823majordomus bench: targets derived from the command registrydoneM004p0nothing1 of 1
I0824Bench persists local runs and keeps a latest projectiondoneM004p0nothing1 of 1
I0825An explicit committed baselinedoneM004p0nothing1 of 1
I0826bench --check refuses a regression by policydoneM004p0nothing1 of 1
I0827The benchmark policy blockdoneM004p0nothing1 of 1
I0828doctor under a declared budget, and the hook inherits itblockedM004p0I08200 of 1
I0829Performance doctrine as project rulesdoneM004p0nothing1 of 1
I0830docs/PERFORMANCE.md, README, CONTRIBUTING and CLI referencedoneM004p0nothing1 of 1
I0831Performance claims at their proven statusblockedM004p0I08220 of 1
I0832generate-site-data instrumented and its hot spots removedreadyM004p0nothing0 of 1
I0833knowledge nodes and edges read each source oncedoneM004p0nothing1 of 1
I0834The test runner reports per-case time and the suite budgetblockedM004p0I08280 of 1
I0835CI runs the structural performance checksblockedM004p0I08220 of 1
I0836A synthetic repository generator for scaling casesdoneM004p0nothing1 of 1
I0837Timing report as JSONdoneM004p0nothing1 of 1
I0838bench compare and the top regressions reportreadyM004p0nothing0 of 1
I0839watch inherits every doctor fix and its own budgetblockedM004p0I08280 of 1
I0840context and its subcommands under a secondblockedM004p0I0820I08210 of 1
I0841Cache equivalence proved by property-shaped casesblockedM004p0I08210 of 1
I0842Before and after evidence for every optimisationblockedM004p0I0820I08320 of 1
I0843The performance workflow is discoverable and completeblockedM004p0I0831I0835I0841I08420 of 1
I0901The deployment description is a kind of the layer, not a provider filedonefly-deploymentp0nothing4 of 4
I0902The deployment object becomes typed Rust that refuses nonsensedonefly-deploymentp0nothing3 of 3
I0903Deployment reads are declared once and projected everywheredonefly-deploymentp0nothing4 of 4
I0904The listen address is one fact with two projectionsdonefly-deploymentp0nothing3 of 3
I0905Liveness and readiness are registered capabilities, not router hacksreadyfly-deploymentp0nothing0 of 3
I0906Termination is graceful and proved against the real containerreadyfly-deploymentp1nothing0 of 3
I0907The running process says what it is, from an allowlistreadyfly-deploymentp1nothing0 of 3
I0908A hosted process has no repository, and says so instead of failingreadyfly-deploymentp0nothing0 of 3
I0909The production image is a generated projection of the build specificationblockedfly-deploymentp0I09050 of 4
I0910The release profile is chosen by measurement, not by folkloreblockedfly-deploymentp1I09090 of 2
I0911A source change does not rebuild the world, and the context stays smallblockedfly-deploymentp1I09090 of 3
I0912The image serves the site the canonical pipeline producedblockedfly-deploymentp0I09090 of 3
I0913The provider configuration is generated, and the cheap profile is declaredcancelledfly-deploymentp0nothing0 of 4
I0914One deployment core, one command, and a dry run that mutates nothingcancelledfly-deploymentp0I0909I09130 of 4
I0915Deployment joins the diagnostics that already existcancelledfly-deploymentp0I09140 of 3
I0916The smoke suite is derived from the route registry, never written twiceblockedfly-deploymentp0I0905I09140 of 4
I0917A bad deployment can be undone deterministicallycancelledfly-deploymentp1I09140 of 2
I0918The bootstrap credential is used once and belongs to nothingcancelledfly-deploymentp0nothing0 of 3
I0919Nothing secret and nothing local leaves in the imageblockedfly-deploymentp0I09090 of 3
I0920The image's dependencies are known and its advisories are policyblockedfly-deploymentp2I09090 of 4
I0921Size is measured first and budgeted secondblockedfly-deploymentp1I0910I09110 of 3
I0922The memory hypothesis is tested, not assertedcancelledfly-deploymentp0I09300 of 3
I0923Cold start and endpoint cost are benchmark targets like everything elseblockedfly-deploymentp1I09300 of 3
I0924The decision is recorded where architecture decisions are recordedcancelledfly-deploymentp1nothing0 of 1
I0925Every deployment rule is a check that runsblockedfly-deploymentp0I09150 of 3
I0926The deployment documentation is generated and reachableblockedfly-deploymentp1I0913I09240 of 3
I0927The cockpit shows the deployment from the same datareadyfly-deploymentp2nothing0 of 3
I0928A pull request cannot merge a deployment that would not workblockedfly-deploymentp0I0919I0921I09300 of 2
I0929Production deploys from CI with a token scoped to one applicationcancelledfly-deploymentp1I0918I09310 of 3
I0930The real image runs under the real limits before anything is deployedblockedfly-deploymentp0I0906I0909I09120 of 4
I0931The application exists, one machine runs it, and the URL answerscancelledfly-deploymentp0I0913I0914I0916I0917I0918I0922I09300 of 4
I0932The milestone is accepted on its evidenceblockedfly-deploymentp0I0920I0923I0925I0926I0927I0928I0929I09310 of 3
I1001One typed graph composes the registries that already own their factsdonecapability-graphp0nothing2 of 2
I1002Relations are typed, inferred from stable identities, and never dangledonecapability-graphp0nothing2 of 2
I1003Skills, rules, decisions, documents, use cases and benchmarks enter the graph as themselvesdonecapability-graphp0nothing2 of 2
I1004Availability and visibility are metadata, not conditions in a templatedonecapability-graphp0nothing2 of 2
I1005The graph is a generated artifact with a schema and no unsafe fielddonecapability-graphp0nothing3 of 3
I1006The runtime reads the graph through the registry, like every other readdonecapability-graphp1nothing2 of 2
I1007The site renders the same graph, generated oncereadycapability-graphp0nothing0 of 2
I1008The two projections are proved to be the same modelblockedcapability-graphp0I10070 of 1
I1009Every menu in this repository comes from one derivationreadycapability-graphp0nothing0 of 2
I1010The overview is what exists, counted rather than claimedreadycapability-graphp1nothing0 of 2
I1011The coverage matrix reports evidence, and never a green cell without onereadycapability-graphp0nothing0 of 2
I1012One detail view, assembled from what a node actually hasreadycapability-graphp1nothing0 of 3
I1013Search over the graph, generated, with nothing to runblockedcapability-graphp2I10070 of 2
I1014The relation view reads the graph and holds no data of its ownblockedcapability-graphp2I10070 of 3
I1015A surface with no server behind it is not offered as if it had onedonecapability-graphp0nothing2 of 2
I1016The Cockpit works on a phone and before JavaScript runsblockedcapability-graphp0I10090 of 3
I1017Live state is an overlay that degrades to nothingreadycapability-graphp2nothing0 of 2
I1018The surface rules exist as checks, proved by making them failblockedcapability-graphp0I10110 of 2
I1019One skill runs the whole loop, and is itself in the graphblockedcapability-graphp2I10180 of 2
I1020The graph's health is answered by the doctor that already answers everything elseblockedcapability-graphp1I10070 of 2
I1021A browser proves the interface, at the widths people useblockedcapability-graphp1I1014I10160 of 2
I1022Drift in any derived surface fails the buildblockedcapability-graphp0I10070 of 2
I1023Nothing private reaches a published pagereadycapability-graphp0nothing0 of 2
I1024The interface has a weight, and it is measuredblockedcapability-graphp2I10140 of 2
I1025The federated model and its two projections are an architecture decisiondonecapability-graphp1nothing1 of 1
I1026The architecture explains itself, from inside itselfblockedcapability-graphp1I10120 of 2
I1027A synthetic capability proves the architecture instead of describing itblockedcapability-graphp0I1018I10190 of 2
I1028The inventories this replaces are removed, not left running beside itblockedcapability-graphp1I10090 of 2
I1029The gate refuses what would silently break the interfaceblockedcapability-graphp1I1021I1022I10230 of 2
I1030The milestone is accepted on its evidenceblockedcapability-graphp0I1010I1013I1017I1020I1024I1026I1027I1028I10290 of 3
I1031A served surface says which checkout it is servingverifycapability-graphp1nothing2 of 2
I1101What this tool leaves behind, established by inspection rather than by memoryverifytwo-folder-integrationp0nothing2 of 2
I1102The two namespaces are a typed contract, not a habitblockedtwo-folder-integrationp0I11010 of 2
I1103Whether a file is authored or derived is a field, not a naming conventionblockedtwo-folder-integrationp0I11020 of 2
I1104Both namespaces carry their contracts, all the way downblockedtwo-folder-integrationp1I11020 of 2
I1105The repository is discovered once, into one modelblockedtwo-folder-integrationp0I11010 of 2
I1106The registries are views of the model, not separate discoveriesblockedtwo-folder-integrationp0I11050 of 2
I1107Discovery is deterministic, cached, and its cost is knownblockedtwo-folder-integrationp1I11060 of 3
I1108The desired integration is a value, and the plan is a diffblockedtwo-folder-integrationp0I11060 of 3
I1109Everything placed outside the two namespaces is recorded, with what it wasblockedtwo-folder-integrationp0I11080 of 2
I1110The second run changes nothing, and a test says soblockedtwo-folder-integrationp0I11090 of 2
I1111Uninstall gives back exactly what was takenblockedtwo-folder-integrationp0I11090 of 3
I1112What touches the root is two small blocks, and they never change againblockedtwo-folder-integrationp0I11090 of 2
I1113Entering a directory is local, bounded and silent about the networkblockedtwo-folder-integrationp1I11120 of 2
I1114A provider is an adapter over the model, and adding one is an implementationblockedtwo-folder-integrationp1I11120 of 2
I1115Completion comes from the command model, not from a second listblockedtwo-folder-integrationp2I11140 of 1
I1116This repository's own footprint moves, through the reconcilerblockedtwo-folder-integrationp0I1110I11120 of 3
I1117The hand-maintained lists are removed, not left running beside the derivationblockedtwo-folder-integrationp1I11060 of 2
I1118Every invariant of this milestone is a rule with a check that runsblockedtwo-folder-integrationp0I1110I11160 of 3
I1119The budgets are measured, and a regression fails rather than being noticedblockedtwo-folder-integrationp2I11130 of 2
I1120A refusal says what to do about itblockedtwo-folder-integrationp1I11080 of 1
I1121Every surface shows the integration from the one modelblockedtwo-folder-integrationp1I11120 of 2
I1122A foreign repository, adopted, upgraded and given backblockedtwo-folder-integrationp0I1110I1111I1116I11210 of 3
I1123The milestone is accepted on its evidenceblockedtwo-folder-integrationp0I1104I1107I1115I1117I1118I1119I1120I11220 of 3
I1201An identity provider is a declarative object, and Google and Facebook are two of themreadyweb-sign-inp0nothing0 of 3
I1202One typed provider model reads the objects, and no code names a providerblockedweb-sign-inp0I12010 of 3
I1203One flow serves every provider, and it refuses everything it did not startblockedweb-sign-inp0I12020 of 3
I1204The session is signed, short, and revocable from the serverblockedweb-sign-inp0I12030 of 3
I1205Identity is resolved once, in the router, and every surface reads it from thereblockedweb-sign-inp1I12040 of 2
I1206What an anonymous reader may do is derived from the effect classification, not from a listblockedweb-sign-inp1I12050 of 3
I1207No credential reaches any output, and hostile provider metadata renders safelyblockedweb-sign-inp0I12040 of 3
I1208Adding a provider is one file, removing one is one deletion, and both are executed rather than describedblockedweb-sign-inp1I1202I12060 of 3
I1301A workspace is a declared object of the layer; only its content is localdoneexternal-workspacesp0nothing4 of 4
I1302Identity, provenance and support level are typed fields, not prosereadyexternal-workspacesp0nothing0 of 4
I1303The store is bounded, measured and invisible to every published projectionblockedexternal-workspacesp0I13020 of 4
I1304The browser transport is the one this repository already drivesblockedexternal-workspacesp0I13020 of 5
I1305An observed contract has a fingerprint, a compatibility state and a fixtureblockedexternal-workspacesp1I13040 of 5
I1306A sync resumes, repeats itself without harm, and says how fresh it isblockedexternal-workspacesp1I1303I13050 of 4
I1307The ChatGPT shape is mapped from evidence and never becomes the canonical modelblockedexternal-workspacesp1I1302I13050 of 4
I1308The executable's share is one capability, shaped like continuityblockedexternal-workspacesp1I13030 of 4
I1309The boundaries this milestone asserts are gates, not sentencesblockedexternal-workspacesp0I1303I13080 of 5
I1310The subsystem is documented where a person looks, and the plan is closed against the repositoryblockedexternal-workspacesp2I1308I13090 of 4
I1401The identity of a projected record is what the record carries, not what its title saysdonework-graph-githubp0nothing2 of 2
I1402A finding says which of six states it found, and the state that could hide a person's edit is no longer one of themdonework-graph-githubp1nothing2 of 2
I1403Backfill the projection once, deliberately, and record what it createddonework-graph-githubp0nothing1 of 1
I1404The drift check is a gate, so a projection that stops being applied cannot stay silentdonework-graph-githubp0nothing2 of 1
I1405A pull request names the issue it realises, and the edge is derived rather than remembereddonework-graph-githubp1nothing1 of 1
I1406The plan's derivations are capabilities, so every surface reads the readiness the terminal readsdonework-graph-githubp1nothing2 of 2
I1407One issue travels the whole path and back, as an executable casedonework-graph-githubp1nothing1 of 1
I1408The documents stop claiming a projection nobody runsdonework-graph-githubp2nothing1 of 1
I1409Derived data stops hashing inputs it cannot controldonederived-data-integrityp1nothing3 of 3
I1501An execution a person starts is an execution the server can seedonedevelopment-runtimep0nothing2 of 2
I1502A server serving code that no longer exists stops calling itself readydonedevelopment-runtimep0nothing2 of 2
I1503A closed session is not closed a second time under the same identitydonedevelopment-runtimep0nothing2 of 2
I1504One development transition is a capability, end to endreadydevelopment-runtimep0nothing0 of 3
I1505A mutating capability leaves a durable event, and the ledger can be read backblockeddevelopment-runtimep1I15040 of 2
I1506The lifecycle commands become non-interactive capabilitiesblockeddevelopment-runtimep1I1504I15050 of 2
I1507Issues, milestones, sessions and peers reach the Cockpit as projectionsblockeddevelopment-runtimep2I1505I15060 of 2
I1508The navigation is derived from the dispatcher, not kept beside itdonedevelopment-runtimep1nothing2 of 2
I1509A detail page that pages nothing has outgrown the reason it pages nothingdonedevelopment-runtimep1nothing2 of 2
I1510A gap the audit calls planned names a plan object that existsdonedevelopment-runtimep1nothing2 of 2
I1511The documentation surface answers in a checkout that has not built the sitedonedevelopment-runtimep2nothing1 of 1
I1512Gate state is something the runtime can answerreadydevelopment-runtimep2nothing0 of 2
I1516The adapter composes a projected body in one placedonework-graph-githubp0nothing2 of 2
I1520A step that runs out of time says so itselfdonedevelopment-runtimep1nothing2 of 2
I1600The challenge is one recorded run, and every public surface replays itdonepublic-proofp1nothing3 of 3
I1800The sandboxed engine a scripted capability runs inreadyautomationp1nothing0 of 1
I1801A scripted capability is a kind, discovered and registered, runnable and projected like any capabilityblockedautomationp1I18000 of 2
I1802Nothing runs Perldoneautomationp1nothing1 of 1
I1803New shell is refused without a declared exemption, and the migration inventory is trackeddoneautomationp1nothing1 of 1
I1804The first shell scripts become scripted capabilities over typed Rustblockedautomationp2I18010 of 1
I1900An intent is a typed record whose stage and satisfaction are derivedreadyintent-lifecyclep1nothing0 of 2
I1901An issue names the intent criterion it serves, and coverage is derivedblockedintent-planningp1I1900milestone:intent-planning0 of 2
I1902The gap and the critique of an intent are typed records the plan is held toblockedintent-planningp1I1901milestone:intent-planning0 of 2
I1903The work realising an intent is joined across episodes, providers and handoversblockedintent-lifecyclep1I19000 of 2
I1945The test-evidence decision and its plan are recordeddonetest-evidencep1nothing2 of 2
I1946The verdict words are status words of the design systemdonetest-evidencep1nothing1 of 1
I1947Every feature reaches a test, and every use case has a featuredonetest-evidencep1nothing2 of 2
I1948Evidence is judged at the presented revision, by one freshness functiondonetest-evidencep1nothing3 of 3
I1949CI evidence is recorded clean, and its report is the tracked ledger's verdictdonetest-evidencep1nothing2 of 2
I1950Text a run printed is redacted by one rule setdonetest-evidencep1nothing1 of 1
I1951Evidence runs are typed, and a recording carries what its run measuredreadytest-evidencep1nothing0 of 3
I1952Evidence subjects are derived once, in Rustdonetest-evidencep1nothing2 of 2
I1953Evidence answers by subject, on every surfaceblockedtest-evidencep1I19510 of 2
I1954Every runner reaches the ledger, through the recording branchblockedtest-evidencep1I19510 of 4
I1955The evidence publication is an allow-listed projectionblockedtest-evidencep1I19530 of 2
I1956The Cockpit shows evidence by subjectblockedtest-evidencep2I19530 of 1
I1957Every test line is read, and a local run stays localblockedtest-evidencep2I19550 of 2
I1958Evidence has one route per subject, and every panel is joined to its subjectblockedtest-evidencep1I19550 of 2
I1959The evidence publication is typed, bound to its build, and kept on gh-pagesblockedtest-evidencep1I1955I19540 of 2
I1960Every widget names its proofblockedtest-evidencep1I1958I19590 of 2
I1961A deploy verifies the evidence routes it publishesblockedtest-evidencep1I1959I19580 of 1
I1962The evidence gates read subject findings and widgetsblockedtest-evidencep1I1960I19530 of 2
I1963Evidence is tested end to endblockedtest-evidencep1I1960I1956I19590 of 3
I1964The evidence reference is documented and held to the treeblockedtest-evidencep2I1962I19630 of 1
I1965The entry preflight reads the one verdictreadytest-evidencep2nothing0 of 1
I1966The composed graph is whole or its generation refusesdonecapability-graphp1nothing3 of 3
I1967A reporter that sets a flag is a reporterdonedevelopment-runtimep2nothing1 of 1
I1980A layer names the tool version it was written for, and doctor tells version skew from defectsreadyadopter-upgradesp0nothing0 of 3
I1981A command's effect class is declared per subcommand and flag, and live scenarios judge the whole argvdoneadopter-upgradesp0nothing4 of 2
I1982Plan stamps written before seals existed are re-sealed by a command that keeps their original timesblockedadopter-upgradesp1I19800 of 2
I1983Upgrading the vendored rules reports or applies the policy and source keys those rules depend onblockedadopter-upgradesp1I19800 of 1
I1984Knowledge candidates never leave untracked files on a trunk that only pull requests changedoneadopter-upgradesp1nothing2 of 2
I1985A knowledge candidate relates to its own decision and commit, not to the whole episodereadyadopter-upgradesp2nothing0 of 1
I1986The vendored rule package says nothing that is only true of this repositorydoneadopter-upgradesp2nothing2 of 2
I1987A knowledge record's file provenance survives the file's deletiondoneadopter-upgradesp2nothing1 of 1
I1988A use case's setup scripts live where the adopter declares, and its scenarios may run the adopter's own commandsreadyadopter-upgradesp2nothing0 of 1
I1989init seeds a scope for the stack it finds, not for this repository'sdoneadopter-upgradesp3nothing1 of 1
I1990The pre-push check judges the refs being pushed, or says why the checkout's task binds themreadyadopter-upgradesp3nothing1 of 2
I1991A comment-only edit of the policy regenerates no bootstrapdoneadopter-upgradesp3nothing1 of 1
I1992A rebuild that fails consumes no change: the next request retries itdonedevelopment-runtimep2nothing1 of 1
I1995Work a session left uncommitted in a worktree is named, not found by luckdonedevelopment-runtimep1nothing2 of 2
I1996doctor does not fail an adopter on a check written for this repositorydoneadopter-upgradesp2nothing2 of 2
I1997The peer board can be read from the command linereadydevelopment-runtimep1nothing0 of 2
I1998A health command in an unsupervised repository does not exit 0doneadopter-upgradesp2nothing1 of 1
I1999A tracked file a hook regenerates does not refuse a task that never touched itreadyadopter-upgradesp2nothing0 of 2
I2000What a piece of work serves is one derivation, with a revisionblockedintent-bound-workp1milestone:intent-bound-work0 of 4
I2001start asks what the task serves and refuses a refused binding where the policy requires itblockedintent-bound-workp1I2000milestone:intent-bound-work0 of 4
I2002The context of a bound task says what the intent asks of this workblockedintent-bound-workp1I2001milestone:intent-bound-work0 of 1
I2003A handover pins the binding it was written under, and resolving it reports driftblockedintent-bound-workp1I2001milestone:intent-bound-work0 of 1
I2004plan start refuses an issue whose binding is refused, in both enginesblockedintent-bound-workp1I2000milestone:intent-bound-work0 of 1
I2054A tag does not turn every other pull request red until its record landsdonedevelopment-runtimep1nothing1 of 1
I2059A rebuild never replaces the executable a live lease namesreadydevelopment-runtimep1nothing0 of 2
I2068A verdict that depends on the runner says so, and one cold sample is not a regressionverifyM004p2nothing2 of 2
I2073A worker records an observation in one commanddonea-session-leaves-what-it-observedp1nothing1 of 1
I2074An observation becomes a candidate that says what it is about, and reading groups recurrencedonea-session-leaves-what-it-observedp1nothing1 of 1
I2075A candidate is routed by what it is aboutdonea-session-leaves-what-it-observedp1nothing1 of 1
I2114A task's scope admits what its derive writesreadydevelopment-runtimep2nothing0 of 2
I2123A caller beyond loopback reads, and changes nothing it cannot authenticatedoneruntime-trustp0nothing2 of 2
I2124An event reloaded from disk meets the trust policy in force, and no stamp outruns the clockdoneruntime-trustp0nothing1 of 1
I2126A server busy with tool calls is never taken over as if it were deaddoneruntime-lifecyclep1nothing1 of 1
I2127A server that lost its lease hands its sessions on and endsdoneruntime-lifecyclep1nothing2 of 2
I2128A lease is removed only by the process that holds it, and serve stop stops the server in orderdoneruntime-lifecyclep1nothing3 of 3
I2129The lease timings the policy declares are the ones the mcp and serve elections usedoneruntime-lifecyclep2nothing1 of 1
I2131A server in use through the Cockpit or HTTP is not stopped as idle, and a checkout keeps one addressdoneruntime-lifecyclep1nothing1 of 1
I2132A hello names the runtime it is meant for, and no other runtime accepts itreadyruntime-trustp1nothing0 of 1
I2133Every mesh input and answer has a bound, and a refused registration learns nothingdoneruntime-trustp1nothing2 of 2
I2134A key removed from the trust list loses its links without a restart, and a node key can be rotateddoneruntime-trustp0nothing2 of 2
I2135The trust root is read from the default branch, not from whatever the checkout holdsdoneruntime-trustp0nothing2 of 2
I2137An accepted mesh event is on disk before it counts, and a damaged journal line is reported, never fused or dropped silentlydonemesh-journal-convergesp0nothing3 of 3
I2139A sync message stays under the link bound whatever the marks weighdonemesh-journal-convergesp1nothing1 of 1
I2140Paging mesh.events returns every event exactly oncereadymesh-journal-convergesp2nothing0 of 1
I2145A tool call that may have run is never sent a second timedonemcp-transports-are-reliablep0nothing2 of 2
I2147The MCP transports bound what they read and follow the Streamable HTTP rules they claimdonemcp-transports-are-reliablep2nothing3 of 3
I2151A page served beside the write routes runs only script it shipped, and a rebinding host reads nothingdonesurfaces-never-disagreep0nothing3 of 3
I2156A slow or silent HTTP client cannot hold a server workerdonefailure-is-visiblep1nothing1 of 1
I2157Ready means ready: a lost lease, a degraded layer or a failing mesh is not reported readydonefailure-is-visiblep1nothing2 of 2
I2161No answer, log line or mesh frame carries a credential the redactor knowsdonearchitecture-is-enforcedp1nothing1 of 1
I2162A released archive, installed, serves a foreign repository over the shared server in CIdonearchitecture-is-enforcedp1nothing2 of 2
I2163A client never attaches to a server of another version without saying so, and a newer client replaces an older serverdonesafe-self-updatep1nothing2 of 2
I2165A released archive carries a provenance attestation the installer can checkdonesafe-self-updatep1nothing2 of 2
I2282The record pull request's dispatched verdict does not satisfy branch protectionreadytest-evidencep1nothing0 of 2
I2288A task is on the mesh while it worksblockedevery-session-joins-the-meshp0I27340 of 1
I2289A task built off the mesh is refusedblockedevery-session-joins-the-meshp0I22880 of 1
I2296The executor reopens a record pull request no run was started fordonetest-evidencep1nothing2 of 2
I2298A pull request stacked on one that landed merges on the verdict its head already hasdonetest-evidencep1nothing2 of 2
I2300A head is judged against what it changes, not against GitHub's live statedonework-graph-githubp1nothing2 of 2
I2301Whether the work is done is answered by measurement: the done invariant asks about debt, what was left behind and the backlogdonedevelopment-runtimep1nothing2 of 2
I2303A release publishes its metadata to the site before its record lands, and the site never goes back a releasedonetest-evidencep0nothing2 of 2
I2396The CI critical path of 2026-10-10 is measured, recorded, and explained before anything is changeddonetest-evidencep0nothing1 of 1
I2398A derive offloaded to another machine waits its turn in a declared queuedonedevelopment-runtimep1nothing2 of 2
I2399Every session briefs itself on an interval, without being askeddonedevelopment-runtimep1nothing2 of 2
I2400A signal model and a fold join every source the server already recordsdoneeverything-is-followed-in-one-streamp1nothing1 of 1
I2401monitor is one read capability with three projectionsreadyeverything-is-followed-in-one-streamp1nothing0 of 1
I2402majordomus monitor follows the stream from a terminal and a scriptblockedeverything-is-followed-in-one-streamp1I24010 of 1
I2403Pull requests, checks and deploys reach the stream when GitHub is reachablereadyeverything-is-followed-in-one-streamp2nothing0 of 1
I2404The Cockpit shows the stream liveblockedeverything-is-followed-in-one-streamp1I24010 of 1
I2405Every session is told what happened since its last lookblockedeverything-is-followed-in-one-streamp1I24010 of 1
I2406The stream is documented where a reader looksblockedeverything-is-followed-in-one-streamp2I2402I24040 of 1
I2407The monitor is released and deployedblockedeverything-is-followed-in-one-streamp1I2402I2404I2405I24060 of 1
I2410A trusted machine on the tailnet is found through Tailscale, with no address written by handreadythe-mesh-works-out-of-the-boxp0nothing0 of 1
I2411A server whose mesh is enabled is reachable on the tailnet and the LAN, and only by a trusted peerreadythe-mesh-works-out-of-the-boxp0nothing0 of 1
I2412`majordomus init` declares the mesh and enrols this machine's key, so a fresh repository cooperatesreadythe-mesh-works-out-of-the-boxp1nothing0 of 1
I2413A linked worktree cooperates through its repository's running server, and a start that cannot ensure one says whyreadythe-mesh-works-out-of-the-boxp1nothing0 of 1
I2414mesh.state and mesh.peers answer a filtered summary that fits one tool answerreadythe-mesh-works-out-of-the-boxp1nothing0 of 1
I2415A mesh review request carries a body, can be withdrawn, and expiresreadythe-mesh-works-out-of-the-boxp2nothing0 of 1
I2416The ci verdict asks every selected gate for a receipt, and a gate whose step never ran is reddonetest-evidencep1nothing1 of 1
I2417The landing page is a click-through story: an editorial hero and an evidence chain a visitor steps throughreadypublic-proofp1nothing0 of 1
I2460The overview asks its sources at once, so it costs its slowest source and not their sumdonedevelopment-runtimep1nothing2 of 2
I2461majordomus ui is served at /ui as its own product, with screens composed from capabilitiesdonedevelopment-runtimep1nothing3 of 3
I2462The UI has every screen, and its mesh is a graph whose nodes open an inspectordonedevelopment-runtimep1nothing2 of 2
I2463A train of stacked pull requests is a typed object, served everywhere and drawn as a graphdonedevelopment-runtimep2nothing2 of 2
I2464A path that holds a space is one path to the scope doctrinedoneadopter-upgradesp1nothing1 of 1
I2470The pull requests drain in the UI: a queue a reader narrows, inspects and follows to what each depends ondonedevelopment-runtimep1nothing2 of 2
I2471The roadmap opens a milestone: what it holds, what can start, its critical path, and what it waits fordonedevelopment-runtimep1nothing2 of 2
I2472How long CI takes is measured, from when each run started to when it completed, and the CI/CD screen draws itdonedevelopment-runtimep1nothing2 of 2
I2473A pull request shows its trail: what the executor did to it, and the drain what the lane did latelydonedevelopment-runtimep1nothing2 of 2
I2474The drain draws its merge throughput: each day's merges over the fortnight its trail ends ondonedevelopment-runtimep1nothing2 of 2
I2475The issues are browsed: every issue of the plan by status, milestone, priority or text, each a link onwarddonedevelopment-runtimep1nothing2 of 2
I2476An intent opens what serves it: its statement, its criteria and their evidence, and the milestones and issues that serve itdonedevelopment-runtimep1nothing2 of 2
I2477A claim opens its proof: what settles it, its last run, what changed since, how to see it againdonedevelopment-runtimep1nothing2 of 2
I2478A rule opens its proof: what it states, the tests that prove it, what is missing, and the rules around itdonedevelopment-runtimep1nothing2 of 2
I2481The UI links every entity it names, and says none where a source has no valuedonedevelopment-runtimep1nothing1 of 1
I2482Every screen of the UI has a case, and no link on the UI is deadreadydevelopment-runtimep1nothing0 of 2
I2483The UI is published as a snapshot: read once at the published commit and carried by the site at /uidonedevelopment-runtimep1nothing4 of 4
I2484majordomus ui ensures the shared server and opens the UI's dashboardreadydevelopment-runtimep1nothing0 of 2
I2485The bench measures the first request after the repository moved, and a budget bounds itreadydevelopment-runtimep2nothing0 of 2
I2486No screen waits for a source: a page shows the latest reading with its age, read again behind the readerdonedevelopment-runtimep0nothing4 of 4
I2487A screen is streamed, and one stream tells an open page which readings changedreadydevelopment-runtimep1nothing0 of 4
I2488The HTTP stack is chosen by measurement: the same routes and several hundred open streams on tiny_http and on axumreadydevelopment-runtimep1nothing0 of 2
I2489A screen over its budget fails the build: the UI's latency budgets are benchmark policy, and bench --check holds themdonedevelopment-runtimep1nothing3 of 3
I2491A personal layer changes nothing shared: init --personal and install.sh --personal keep the layer one person's own, verify it, and --shared hands it to the teamdoneadopter-upgradesp1nothing2 of 2
I2495The Cockpit is published as a snapshot at /cockpit, and the UI's evidence links lead to itdonedevelopment-runtimep0nothing3 of 3
I2601majordomus evidence reaches record, stamp and showverifya-second-adopter-is-servedp1nothing1 of 1
I2652The UI shows what the knowledge base holds: the candidates awaiting review and whether the deriver still writes, read and never acted onreadydevelopment-runtimep1nothing0 of 3
I2653Every diagram on the site is one interactive, linkable viewer whose node links are inferred, and a derived table can be drawn as a chartreadysurfaces-never-disagreep2nothing0 of 3
I2654A chart is held to its table by a gate, and the tables that are measured series are drawnblockedsurfaces-never-disagreep3I26530 of 2
I2655The homepage decides whether it carries a derived figure, within its declared story and budgetblockedsurfaces-never-disagreep3I26530 of 1
I2656The diagram viewer serves the Cockpit and majordomus ui, and a node that is a repository file links to its sourceblockedsurfaces-never-disagreep3I26530 of 2
I2660The site is published as an artifact by the job that built it, so a ready site waits for no second workflowreadyM004p1nothing0 of 2
I2661A publication that did not arrive is a finding the next reader meets, never a green stepreadyM004p1nothing0 of 2
I2662Validation leaves the deployment a runner: a branch's checks never hold the pool a publication or a release record needsreadyM004p1nothing0 of 2
I2663The published UI is not read from nothing on every deploymentreadyM004p1nothing0 of 2
I2664A run that has already failed is cancelled by itself, and a red on the trunk is fixed before anything else is prepareddoneM004p1nothing2 of 2
I2670A build-cache offer is a typed model and its selection is a pure, explained functionreadydevelopment-runtimep1nothing0 of 1
I2671A provider offers its cache as a signed, expiring mesh record, and a stopped provider goes staleblockeddevelopment-runtimep1I26700 of 2
I2672The offers and the selection are one read, projected to CLI, MCP, HTTP and OpenAPIblockeddevelopment-runtimep1I26700 of 1
I2673The sccache client configuration is derived from the selected offer, local disk firstblockeddevelopment-runtimep1I2670I26720 of 2
I2674A node is provisioned as an S3 cache provider, idempotently, with no secret in the repositoryblockeddevelopment-runtimep1I26700 of 2
I2675Build-cache health, headroom and hit statistics are visible where the mesh isblockeddevelopment-runtimep2I26720 of 2
I2676The build cache is verified and validated: failure paths, security and a real second-node hitblockeddevelopment-runtimep1I2673I26740 of 2
I2677The build cache is documented, governed by a rule and described on the site and the Pagesblockeddevelopment-runtimep2I26720 of 1
I2678The public Observatory replays events that were recorded, and says it is a replaydonedevelopment-runtimep2nothing1 of 1
I2679The Observatory follows a stream with a cursor instead of asking for its page againdonedevelopment-runtimep2nothing1 of 1
I2680The Observatory's gates are closed with evidence: screenshots, measured frame rates, a soak, the recovery drillsdonedevelopment-runtimep2nothing1 of 1
I2694A promoted note resolves in every checkout, not only where it was promotedreadydevelopment-runtimep1nothing0 of 1
I2695The Observatory draws the proof, claim, surface, wave and release scenes from the capabilities that already answer themreadydevelopment-runtimep2nothing0 of 1
I2696p5 is a built, optional asset of the UI and the page says where it isreadydevelopment-runtimep2nothing0 of 1
I2697The public snapshot carries the p5 library, or says which scenes it cannot drawreadydevelopment-runtimep3nothing0 of 1
I2698The new scenes have screenshot evidence at 1080p and 4K on a named revisionreadydevelopment-runtimep3nothing0 of 1
I2700A lease probe asks a cheap liveness route, and a server holding another lease token is not taken for the leaseholderreadyruntime-lifecyclep1nothing0 of 1
I2701The idle timeout is declared beside the other server timings, and serve --idle overrides the declarationreadyruntime-lifecyclep2nothing0 of 1
I2702A checkout keeps one address across restarts, because its server binds a port derived from the checkoutreadyruntime-lifecyclep1nothing0 of 1
I2703The mesh cooperation rule lists the hello checks in the order the code runs them, and a test names that orderblockedruntime-trustp1I21320 of 1
I2704A dialer reads no reply beyond the link bound and no more candidates than the bound, and a refusing peer is retried at a measured, jittered ratereadyruntime-trustp1nothing0 of 2
I2705A node key can be rotated, peers follow the new key, and the old key is refusedreadyruntime-trustp0nothing0 of 1
I2706An own event whose append failed is never acknowledged as durable, and a journal reload is bounded in sizereadymesh-journal-convergesp0nothing0 of 2
I2707majordomus doctor reports a stale server, or says plainly that it checks governance onlydonefailure-is-visiblep1nothing1 of 1
I2708A mesh event field nobody listed fails the mesh check, and no log field or review body carries a credential the redactor knowsreadyarchitecture-is-enforcedp1nothing2 of 2
I2709A red on the trunk has one named carrier, and nobody else may land until it is paidreadyM004p1nothing0 of 1
I2710A release run never waits behind pull-request validates for a job slotdoneM004p0nothing1 of 1
I2711The pages job judges production only after the deployment of its own commit has arriveddoneM004p0nothing1 of 1
I2712release-check treats a tag whose release run is still going as pending, not as a missing recorddonedevelopment-runtimep1nothing1 of 1
I2713A build never lets idle incremental sessions fill the diskreadydevelopment-runtimep0nothing0 of 1
I2714One build directory never serves two worktrees' jobs at oncereadydevelopment-runtimep1nothing0 of 1
I2715New public Rust code meets rust-quality before the structure job doesdonedevelopment-runtimep1nothing1 of 1
I2716A case derives its budgets and lists from what it tests, never pins themactiveM004p2nothing0 of 1
I2717A release record pull request gets a verdict that can passreadyM004p0nothing0 of 1
I2718A linked worktree runs its own hooks, never the primary checkout'sreadydevelopment-runtimep0nothing0 of 1
I2720majordomus self update re-runs the published installer, and never reimplements itreadysafe-self-updatep0nothing0 of 2
I2721An enrolled mesh node follows the stable pointer by itselfblockedsafe-self-updatep0I27200 of 2
I2722A hub activates a new version under its service manager, checks its health and rolls back by itselfblockedsafe-self-updatep0I27200 of 2
I2723The mesh shows each node's version and how far a release has rolled outreadysafe-self-updatep1nothing0 of 1
I2724A node without a route to the site takes the archive from a peer and still verifies it itselfblockedsafe-self-updatep1I27200 of 1
I2731Every failure class in the published failure table names its test or its stated limitationreadyfailure-is-visiblep1nothing0 of 1
I2733A resumed mesh.events walk returns every event exactly once, across partitionsblockedmesh-journal-convergesp2I21400 of 1
I2734A session joins the mesh at its start and leaves it at its endreadyevery-session-joins-the-meshp0nothing0 of 1
I2735An edit no claim covers is refusedblockedevery-session-joins-the-meshp0I22890 of 2
I2740An issue's delivery is inferred from branches, pull requests, merges, tags and the published sitereadytruthful-plan-surfacesp0nothing0 of 2
I2741Merged work the plan has not recorded is drift, and on the trunk past a window it is redblockedtruthful-plan-surfacesp0I27400 of 2
I2742A milestone's version is inferred from the release that carried it, never typedreadytruthful-plan-surfacesp0nothing0 of 1
I2743The public roadmap draws every milestone in the graph's order, each issue with its inferred deliveryblockedtruthful-plan-surfacesp0I2740I27420 of 1
I2744The UI roadmap reads delivery and the releases themselves, and its now is where work isblockedtruthful-plan-surfacesp0I27400 of 1
I2745The landing page states no present it does not readverifytruthful-plan-surfacesp0nothing1 of 1
I2746Every published tree draws its diagrams, and every diagram is the interactive viewerverifytruthful-plan-surfacesp0nothing1 of 1
I2747Every code block on every surface is highlighted by one engine with one palettereadytruthful-plan-surfacesp1nothing0 of 1
I2748The drift already on the trunk is settled before the gate is made blockingblockedtruthful-plan-surfacesp0I27410 of 1
I2760A scope entry is one path, and a path context would refuse is refused at startreadydevelopment-runtimep1nothing0 of 1
I2770majordomus ui and the Cockpit wear the site's navbar: one renderer, the same styles and scripts, and a browser comparison that refuses a differencereadysurfaces-never-disagreep1nothing0 of 2
I2780The UI has an intent workspace: an intent, its milestones, issues, waves and graph on one screenverifyidd-workspacep0nothing1 of 1
I2786The published UI reads the evidence CI recorded, and a publication that would show tests as not run is refusedreadytest-evidencep0nothing0 of 1
I2787A build never lets the shared build directory's crate artifacts fill the diskblockeddevelopment-runtimep0I27130 of 1

424 of 424 issues shown

plan.issues82 msAPI/api/v1/plan/issuesMCPmajordomus_plan_issuestechnical view

plan.roadmap0 msAPI/api/v1/plan/roadmapMCPmajordomus_plan_roadmaptechnical view