The owner's to-do list of 2026-11-06, triaged and ruled on 2026-11-07, plus every to-do the root lane found since. Maintained automatically; the attention strip is what to look at.
Spans are the root lane's estimates until each lane plans its phase; dated milestones are real.
| R1 | done | "Patent fees, pay Nov 7" - nothing is due; the item had no source Dropped. Next real date: the unified non-provisional filing, March 2027. | owner | |
| R2 | done | Message-archive round 2: the rulings sitting In progress today. Also the fix for "EVA can't read recent messages". Sitting #4 closed 11:19 (both batches ruled, identifiers 13/13, amendment ratified). First apply landed on the live database 12:20 under the owner's sign; the second apply's token awaits the sign - the EVA lane rows carry the rest. | owner + EVA | |
| R3 | done | The language module defined: double feed + minions + HERO → graduation tiers → federation HERO is faulty; the whole chain gets a check-up (Phase 202 scope). | owner | |
| R4 | done | EVA reads all of the owner's health documentation and readings from the health vault Ruled: allowed, full scope, owner's own records only. Execution tracked in section 2. | owner | |
| R5 | done | "Milestone 3" = EVA v3.0, Track A (appearance) Migration gate lifted for the visual path the same day. | owner | |
| R6 | owner action | Patent counsel: candidate identified; engagement next week Deferred to the week of 2026-11-09. | owner | |
| R7 | done | Voiceprints learned from voice notes, with participant consent Ruled: proceed. Consents collected by the owner, starting today. | owner | |
| R8 | done | Ten styleframes read; eight Track A design decisions ruled Body/field states · displacement layer · state-derived light · one surface, never a corner · ring as an arrangement · H-band palettes + saved looks + attention lighting · renderer substrate · field knobs first. | owner + root | |
| R9 | done | Engine direction: keep Three.js; Babylon and PlayCanvas out; native wgpu as the horizon A drop-in Three API on wgpu exists but is days old - watch item, not a dependency. | owner |
| 1.2 | open | Patent status check through the existing surfaces; fix two stale rows in the architecture doc No fee due. Watch task for the trademark docket is red since 11-04 - read the run. | root · evidence | |
| 1.3 | open | Refresh the four outreach drafts (June 2026) - teaser / one-pager External-safe rule stands: vision and traction only. | EVA docs | |
| 1.4 | owner action | Introductory email - when triggered Drafted beside 1.3 when the trigger comes. | owner |
| 2.1a | open | Health vault: flip the owner's subject to EVA-readable; amend the boundary docs Step A + E of the written spec. The switch still reads "never" on disk. | health vault | |
| 2.1b | open | Convergence layer: the health connector (records + analyses as packages, key set, tests) Step B + D. Digests only; never raw data to the brain. | orchestrator | |
| 2.1c | open | On-demand export of EVA's own signals into the vault Step C. Operator-triggered, never continuous. | tools / EVA | |
| 2.1d | open | Verify the health packages reach EVA's bridge context in a capture boot Receive side already exists (5-minute poll). | EVA | |
| 2.1e | owner action | Second ring joins the same device route when it arrives Ordered 11-06; developer access confirmed; pairs on arrival. | owner · health vault | |
| 2.2 | dropped | "Tools for EVA to reason over raw ring data" Intelligence lives in the convergence engine; the brain reads the reasoned summary. | - | |
| 2.3 | open | Voiceprint learning from voice notes - new phase, consent-gated, embeddings only Per-channel enrollment; profiles emit confidence + provenance; the brain weighs. | EVA (after round 2b) | |
| 2.3c | owner action | Collect participant consents Starting today. | owner |
| 3.1 | open | Left panel hidden by default A 202 UI decision now that the panel is identified. | EVA · Phase 202 | |
| 3.2 | open | HERO module redesign Six decisions already ruled in October; discuss pass pending. HERO first. | EVA · Phase 202 | |
| 3.3 | open | The brain receives what emerges from the Lab (as data feeds) Real gap: no feed from vocabulary / pool today. Prerequisite: the scheduler-starvation fix. | EVA · Phase 202 | |
| 3.4 | open | Poems reach the brain's reasoning, not only the screen Today: a mood weight only; the poem accessor has zero callers. | EVA · Phase 202 | |
| 3.5 | open | Verb gifts keep happening - verify Built and wired; counter read + ghost-method fix. | EVA · capture boot | |
| 3.6 | open | Check-up of the rest of the chain (double feed, minions, graduation tiers) Owner: "the rest also needs check up". | EVA · Phase 202 |
| 4.0 | done | Record the gate lift and pin the styleframes manifest in the v3.0 scoping Recorded 2026-11-07 in the v3.0 scoping beside the 11-03 output-streaming lift; the styleframes doc pinned into the EVA planning tree (source sha256 89efeaa9…). EVA commit 29145e18, pushed. The Track A discuss itself stays owner-present, parked until after the one boot. | EVA | |
| 4.A0 | open | A0 - renderer substrate: WebGPU renderer in the worker, WGSL cloud-kernel contract, deferred lanes re-lit once Recommended first. Worker renderer is already the live default; three.js 16 releases behind. | EVA · Track A discuss | |
| 4.1 | ruled / specced | Visual revamp from the styleframes - the vibe is the brief Eight decisions ruled; HUD text in the frames disregarded. | EVA · Track A | |
| 4.2 | open | Flocking: field-knob sitting first (sheet + vortex references), neighbour pass only if needed Start from the list of knobs actually live in worker mode. | EVA · Track A | |
| 4.3 | open | Speaking-state configuration None exists today. | EVA · Track A | |
| 4.4 | open | Thinking-state: fix the dead event wiring, then the richer state A listener waits for events nothing emits. | EVA · quick | |
| 4.5 | open | Axis-driven configurations - verify the trigger 33 presets + GPU transitions exist. | EVA | |
| 4.6 | done | Idle state alive and subtly active Controller re-lit 2026-10-25. | EVA | |
| 4.7 | ruled / specced | Body ↔ field as two states of one cloud (transition visible) Fix the retarget stutter first. | EVA · Track A | |
| 4.8 | open | The lit scene: one receiving surface (wall default, floor option, or void + fog), state-derived key light, particles casting shadow Genuinely new: no backdrop, no shadow pass today. | EVA · Track A (on A0) | |
| 4.9 | open | Attention lighting: the real data points she is looking at light up (idle exploration, queries) Primitive exists and is dark on the worker (residual R2); autonomous targets never lit. | EVA · Track A | |
| 4.10 | open | H-band palettes as defaults; admin-saved looks linked to states; admin-only look controls 109 saved looks; an idle event→look engine; mappings switched off since December. | EVA · Track A | |
| 4.11 | open | Arrangements (ring, vortex, sheet, lattice…) + autonomous arrangement by the four-force principle Tension / Coherence / Growth / Decay: written, no code. Old shape modules retire. | EVA · Track A | |
| 4.12 | open | Retarget stutter in the worker (upstream of all motion work) Evidenced 11-04. | EVA · Phase 129 |
| 5.1 | open | Correlator audit: degraded EVA connector, never-succeeded corpus connector, offline health connector Plus a bridge-health read on EVA's side. | orchestrator · quick | |
| 5.2 | ruled / specced | System-wide awareness of her own subsystems In-brain feeds (3.3 / 3.4), not a round-trip through the orchestrator. | EVA | |
| 5.3 | dropped | Connect every signal into the correlator as one item Each signal has its own home above; the archive connector stays deferred behind its gates. | - |
| 6.1 | ruled / specced | Continuous background cognition while idle Parked until the local reasoning substrate stands; the reflection lane is live meanwhile. | EVA · Phase 194 (v3.0) | |
| 6.2 | dropped | Non-deterministic exploration Already a standing mandate, not a task. | - | |
| 6.3 | ruled / specced | Associative discovery and self-directed attention Attention = valuation, never chronology. | EVA · Phase 194 | |
| 6.5 | open | Discoveries persist into long-term memory - verify Memory route + consolidation gate exist. | EVA · capture boot | |
| 6.6 | ruled / specced | "Meaningful activity, not random processes" as the acceptance criterion | EVA · Phase 194 | |
| 6.7 | open | Reflection-lane health read (no code) | EVA · next capture boot |
| 7.1 | open | A repeatable "portable procedure" as a deliverable of the substrate migration Mirrors + model manifest + identity snapshot restore + secrets out-of-band; never a single ZIP. | EVA · migration scoping | |
| 7.4 | open | Hardware detection at install (GPU, VRAM, CUDA arch, RAM, audio devices) | EVA | |
| 7.5 | ruled / specced | Hardware-adaptive configuration - backends and rendering yes, brain selection no One brain, deliberately adopted, never chosen per machine. | EVA | |
| 7.6 | open | Remove hardcoded machine paths (one root variable) 15 files. | EVA · quick | |
| 7.7 | open | Identity continuity across machines - the restore round-trip proof | EVA · migration gate 0 | |
| 7.8 | open | Startup diagnostics after migration - extend the existing health run and boot checklists | EVA | |
| 7.9 | done | Secrets out of the distributable Already the estate's rule. | - | |
| 7.10 | open | Host parity (one active runtime, snapshot handoff) Context written, not started. | orchestrator · Phase 38 |
| 8.1 | done | Verify the phone backup Custody chain closed 11-05. | - | |
| 8.2 | done | Why recent messages are unreadable Answered: a governed publish not yet done, waiting on the rulings sitting. Not a bug. | - | |
| 8.3 | done | Backup freshness Snapshot id and hash recorded. | - | |
| 8.4 | dropped | Import pipeline audit 28 plans, reviewed five times, documented. | - | |
| 8.5 | open | Chronological integrity (watermarks, parity legs) | EVA · 210-24 | |
| 8.6 | open | Retrieval validation on known recent messages | EVA · 210-27 | |
| 8.7 | open | Incremental import (--since) Planned; the missing piece. | EVA · 210-23/24 | |
| 8.8 | open | Diagnostics: last published timestamp, counts, refusals A status operation on the existing reader. | EVA · 210 follow-up | |
| 8.9 | open | End-to-end test on the round-2 capture boot | EVA · 210-27 |
| 10.1 | done | "The endgame document is local-only and cannot be rebuilt from git" - checked False. Tracked in the EVA repo, on the remote, and in the owned bare mirror. No priority-one gap. | root | |
| 10.2 | done | "The health vault is the Convergence layer" - checked False; the orchestrator is. The architecture doc's vault rows were stale the other way and are now corrected. | root | |
| 10.3 | done | "Active privacy-covenant violation in the orchestrator" - checked Stale: resolved in October. One rented copy remains by design until the dated erase on 11-10. | root | |
| 10.4 | done | Architecture doc v1.8: vault rows reconciled, filed families marked filed Checksum regenerated; dated copy on the backup drive. Committed to the root repo 2026-11-07. | root | |
| 10.5 | owner action | Satellite boundary rule (source-side default-deny, from the vault's pattern) added as PROPOSED Ratify or strike. | owner | |
| 10.6 | done | Content-addressed manifest of the canon (owned; replaces the proposed new repo + CI) One file, one verify command. Committed to the root repo 2026-11-07. | root | |
| 10.7 | in progress | Hygiene check that re-verifies the canon manifest Tools lane 2026-11-07: a canon-drift check exists in the machine-hygiene registry (built and tested, commit fa74c9a); it runs when the hygiene routine runs. The tools lane's own row carries the rest. | tools | |
| 10.8 | open | Map the architecture invariants onto the vault's files (covered vs missing) After the EVA-feed steps land. | health vault | |
| 10.9 | owner action | Run the dated erase list (last rented copy of the old training sink) 2026-11-10, owner-executed by rule. | owner | |
| 10.10 | dropped | New repository + hosted CI for the endgame document False premise, and new rented infrastructure on a vendor being exited. | - | |
| 10.11 | dropped | Retention tier carried in the source envelope Valuation is a convergence-layer rule; sources stay dumb. | - |
| 11.1 | open | aeva.aego.dev content rewrite Owner: 'quite the re-write'. Map done: every page is hand-written static HTML; the deploy pipeline itself is healthy (every push to the EVA branch redeploys). Stale: version strip and changelog frozen at March, brain described as the old four-tier router, no current milestone, old guardian names in eight pages, an in-page editor with a GitHub token field, backup files served. Brief: keep the robots block and origin lock, the thesis chapters and the two notes; kill the static changelog, the editor, the backups; render the status strip, knowledge index, model pages and a sovereignty page from the planning state, the canon manifest and the config files. | EVA docs | |
| 11.2 | done | Documentation health scored on this page Cross-repo audit folded: 25 documents scored, drift line-cited in the root planning record. | root | |
| 11.3 | done | Find the documentation-updating worker that stopped working, and why Identified: the in-app website worker + documentation bridge (patent → site-config → index sync, module timestamps, changelog). Loads every boot, never acts: its startup staleness check was disabled for freeze risk, file watchers died with context isolation, it only fires on an explicit architect voice command, and even then nothing commits or pushes, so the Git-integrated site never sees it. | root → owning lane | |
| 11.4 | open | Repair or retire that worker Decision for the EVA lane: give the worker a governed commit+push leg, or retire it and render the site at build time from the planning state and the canon manifest. Until then delete the site's 'auto-update pipeline' claim. | owning lane | |
| 11.5 | done | This page maintained in the background with an attention strip and a timeline Scheduled since 2026-11-08 on the owned scheduler (registry row progress-maintain, task "AEGO progress page"): 30 s after every logon, then every 30 min; rebuilds and redeploys only when something changed, retries a build-and-upload cycle that precedes Wi-Fi, alerts on the Desktop when a run fails. Replaced the session-bound loop, which died with its session on 2026-11-08 06:43 and left the page stale for 12 h. SessionStart hook installed 2026-11-07: every session under the estate prints the attention strip and its lane items at start. job · AEGO progress page: last run 2026-11-09 22:35 (UTC+01:00) ok · 16 s | root | |
| 11.6 | done | Orchestrator mandates: vault row, dead project path, incomplete repo table (plus two worktree copies) Orchestrator lane 2026-11-07: repo table aligned to the root branch policy (projects/ paths, utae / tools / major_domus rows); vault row and dead project path fixed; the two stale worktree copies removed. Docs-only commit on main. | orchestrator | |
| 11.7 | owner action | EVA system-knowledge copy in the orchestrator is seven months and 2,677 commits stale Orchestrator lane verified 2026-11-07: last synced 2026-04-10, 2,688 EVA commits behind, still mandatory reading there. Lane recommends retiring the copy in favour of a pointer to EVA's own document; the owner rules retire vs re-sync. | orchestrator · EVA | |
| 11.8 | done | Tools mandates file five months behind its registry Tools lane 2026-11-07 (commit fa74c9a): mandates category list = the six real directories; registry README corrected (the false 'untracked' claim, the missing category, the MCP note). | tools | |
| 11.9 | open | Money resume state untouched since April Resume state seven months behind commits; mandates file carries the old project name and lists two scripts that no longer exist. | money | |
| 11.10 | open | Guardian documentation regenerated (architecture doc + dev reference + README) One command: the existing sync script; it has never been called. README still names the pre-March guardian set. | EVA | |
| 11.11 | open | EVA resume-state frontmatter: three disagreeing stale dates Live blocks are current; the header is not. | EVA | |
| 11.12 | open | maze inventory still scans the pre-move project path Functional, not cosmetic: two config entries and a schema default point at a directory that no longer exists. | maze | |
| 11.13 | open | major_domus docs: review-round count, remote status and 'not started' all false since 11-05 | major_domus | |
| 11.14 | open | Vault docs: auth model predates the gateway; mandates say 'owner steps pending' though live; history stops at 11-03 | health vault | |
| 11.15 | open | Sovereignty doc claims a renderer that does not exist; guard script still pending Either ship the small renderer + guard or reword the claim. | tools · root | |
| 11.16 | open | Old model ids in renderer code comments Comments name the previous brain while the ids are current. Cosmetic, but it misleads readers of a mandatory file. | EVA | |
| 11.17 | in progress | Evidence resume state five days behind commits; roadmap text from June Evidence lane 2026-11-07: resume state brought up to the 6 Nov commits (current position covers 5 to 7 Nov); the roadmap text from June is still untouched. | evidence | |
| 11.18 | open | Gateway roadmap lists one phase while the milestone is complete | gateway | |
| 11.19 | open | utae mandates describe a deploy path that changed on 11-04 | utae | |
| 11.20 | done | Memory still points money at the old folder name Fixed in the root memory index this tick. | root | |
| 11.21 | open | A documentation-health check that runs on a schedule Nothing in the estate maintains the mandates files, resume states or the system-knowledge copy. Joins the machine-hygiene registry with the canon manifest check. | tools | |
| 11.22 | open | Site: remove the in-page editor and its GitHub token field A token typed into a browser on a gated page is a rented path and a leak surface. Part of the rewrite, but worth doing first. | EVA (site) | |
| 11.23 | open | Site: stop serving backup files, the integration summary and duplicate icons; confirm the 94 MB video is not in git | EVA (site) | |
| 11.24 | open | Site: render version strip, changelog, knowledge index and model pages from data at build time Sources: planning state, roadmap, canon manifest, config files. Pages has no build step today - add one or pre-render in CI. | EVA (site) | |
| 11.25 | open | Daily documentation analysis: results never reach storage The cron dispatch sends no run id, so every run logs 'skipping upload (dry-run mode)'. One-line fix in the change-controlled worker: plan + owner sign-off. | site worker (change-controlled) | |
| 11.26 | open | Documentation health score pinned at zero; patent extraction finds zero claims The score deducts to the floor every day, so it carries no information; the claim regex no longer matches the page. | EVA (doc worker) | |
| 11.27 | open | Orchestrator watchdog must validate the analysis OUTPUT, not the webhook's exit status Exactly the silent-degradation case the registry itself warns about. | orchestrator | |
| 11.28 | open | Self-repair mirror is four months behind the live code The publish workflow only runs on a 'stable' tag; the last was 2026-07-10. A self-repair today would restore July code. Push a fresh tag or dispatch the deploy. | EVA | |
| 11.29 | done | /progress on aego.dev and aeva.aego.dev redirects to the progress page Live 2026-11-07: aego.dev/progress, www.aego.dev/progress and aeva.aego.dev/progress all reach the progress page without the PIN (route rule deployed through the guarded path after owner sign-off). | EVA (site) | |
| 11.30 | done | Site worker: redirect /progress on the apex and the site host to the progress page before the PIN gate Live 2026-11-07: aego.dev/progress, www.aego.dev/progress and aeva.aego.dev/progress all reach the progress page without the PIN (route rule deployed through the guarded path after owner sign-off). | site worker (change-controlled) |
| 12.1 | ruled / specced | Ruling: the phone is a second body, never a second EVA - thin client, one brain on the workstation No client-side reasoning, no client-side speech recognition; raw audio rides an end-to-end encrypted overlay; the shell is Tauri 2, media over WebRTC inside the overlay. | owner · EVA | |
| 12.2 | in progress | Branch state: the port branch runs far ahead of and behind the main line 40 ahead / 336 behind as of 11-05 (a full-shell port: whole renderer carried to mobile, plus client-side ASR and a client LLM that will not board). Drift grows about one commit a day. | cousin | |
| 12.3 | ruled / specced | Salvage into a fresh branch from the current main line instead of a re-base Ruled 2026-11-09 (owner: go ahead): no re-base. `track-d` created from `eva-v1.1` HEAD 33755227 the same day; the salvage list is the lane's seeded task list; `dev-mobile` stays as the reference. | owner → cousin | |
| 12.4 | done | Handoff note to the cousinTauri lane · 11-09 Written 11-05. Sent by the owner 2026-11-09 07:44 UTC as a reply in the collaborator thread (ruling, branch, reading order, access, two questions back). A second note explaining the page's features (flags, collapse / expand, filters, the summary, the drop-in fields) was drafted the same day in that thread; the owner sends. | owner | |
| 12.5 | open | D1 - the overlay and the gateway host Workstation terminates the tunnel; phone and the remote server are peers. | EVA · Track D | |
| 12.6 | open | D2 - the thin Tauri client (mic + camera in; audio, text and a reduced cloud view out) Renders contracts; composes nothing; decides nothing. | cousin · EVA | |
| 12.7 | open | D3 - per-channel calibration and speaker enrollment for the phone microphone A phone mic is a different acoustic channel; the current echo calibration does not transfer. | EVA | |
| 12.8 | open | D4 - the WAN latency budget handed to the turn gate as data | EVA | |
| 12.9 | ruled / specced | Native rendering horizon: a Three.js-compatible API on wgpu exists but is days old Watch item for the shell decision; Three.js stays the authoring surface; the kernels are written portable. | cousin · EVA | |
| 12.10 | done | Cousin reports progress through a drop-in file on his branch The page reads .planning/progress-items.tauri.json from the lane's branch on the remote at every build; moved from dev-mobile to track-d and seeded with nine items on 2026-11-09. The lane flips them; nothing else is needed. | root | |
| 12.11 | done | Collaborator summary published and the cousin introduced to the page by email Summary gated by Cloudflare Access (owner + collaborator); custom domain progress.aego.dev attached 2026-11-07. | root | |
| 12.12 | done | track-d seeded for the Tauri lane: working agreement, mainline digest since 2026-09-15, progress drop-in Three commits on the branch 2026-11-09. The agreement names scope (D2 + the client side of D1), branch mechanics (weekly merge-ups, never re-base dev-mobile), reporting and the reading order. | root | |
| 12.13 | done | Collaborator access: push on every repository except the one project kept separate Owner directive 2026-11-09; the owner sent the ten invitations the same morning (push on every repository except the one kept separate). Acceptance is his; he already had write on the EVA repo and sits on the summary gate. | owner | |
| 12.14 | done | Collaborator summary carries a 'For the Tauri lane' block with the dated decisions that changed the lane's direction Data in items.json meta.collaborator_brief; rendered by build.py; name-free by construction. | root |
| 9.1 | done | Intake triage written, every item verified against code / git / disk | root | |
| 9.2 | done | Styleframes manifest, read, re-integration map, renderer note | root | |
| 9.3 | done | Memory and resume state updated | root | |
| 9.4 | open | Two stale patent rows in the architecture doc Tracked edit + checksum regeneration; left for the owner's word. | root | |
| 9.5 | done | This progress page Static, self-contained, no index. Live at progress.aego.dev; summary at /summary/ behind Access. | root | |
| 9.6 | done | Timeline fullscreen option Done 2026-11-07: 'Full view' pill moves the timeline into a fixed overlay (Fullscreen API when a gesture allows, overlay-only fallback), SVG sized to fit, Esc / pill / leaving fullscreen close it, focus returns to the pill; #timeline-full deep link. | root (page) | |
| 9.7 | done | More vivid palette for statuses and markers Done 2026-11-07: light #1fa7a0 / #f0b429 / #d12b31 / #8d7fc0, dark #39d6c9 / #ffc94d / #ff6b6b / #a78bfa; every chip label >= 4.5:1 (dark text on teal / amber / violet via --on-vivid); shapes still carry meaning. | root (page) | |
| 9.8 | done | The estate's animated particles background on the page Done 2026-11-07: vendor/ holds byte-identical copies of death/site/particles-reload.js + particles-bg.js (sha guarded in build.py), canvas fixed behind a translucent content panel, summary page too; CSP script-src gains 'self' only. | root (page) | |
| 9.9 | done | Page restyled in the evidence vault's design idiom Done 2026-11-08 on the owner's ask: dark-only vault shell (top-bar, meta-row, stat boxes, outlined filter chips, collapsible sections with the ▸ marker), vault palette (teal / azure / gold / coral / violet), Comfortaa + JetBrains Mono self-hosted from vendor/fonts (sha guarded); CSP gains font-src 'self' only. Summary page shares the shell. | root (page) | |
| 9.10 | done | Shared flags (owner + Tauri lane), collapse / expand all, back to top Done 2026-11-09 (Codex + Gemini plan review): Pages Advanced-Mode Worker + KV flags API (progress.aego.dev/api/*), Access app on /api/auth/* with the two-person policy, Cookie Path on both apps, e-mail secrets, merge-warning hook + brief line installed, register 1.0.7 (cf-kv-progress-flags, cf-access-progress). First use: SIGN IN TO FLAG once per browser. | root (page) | |
| 9.11 | owner action | Sections collapsed on landing, sticky top bar + pinned section titles, flag from a session (service token) Built 2026-11-09: landing collapsed, vault stacking, flag.py CLI + Worker service-token identity. OWNER STEP: run bash progress/setup-flag-token.sh once (creates this machine's Access service token into .env, the non_identity policy, FLAG_OWNER_CN, redeploys); then any session flags on your word: python -I [local path] <item id>. | root (page) + owner |
| 13.0 | done | Where the plan lives: the sovereignty mandate + the dependency register at the estate root (opened 2026-11-06/07) 65 registered dependencies: 30 to demote behind an owned seam, 21 tolerated with a dated re-judgment, 14 to drop. By vendor: 26 Cloudflare, 15 GitHub, 4 Google, the rest small. Rules S1-S12 bind every new proposal. | root | |
| 13.1 | ruled / specced | Rulings in force: GitHub = mirror then delete; Cloudflare = hibernated apex-only read-only tenant after the exit; origin hardware decided at E4 Cross-review-locked 2026-11-06. | owner | |
| 13.2 | done | E0a - root docs, register, mandate rows, one dead key pruned Done 2026-11-07. | root | |
| 13.3 | open | E0b - capture + zero-risk drops, per lane Redacted infrastructure manifest and zone exports to git; dead tokens removed; orphan DNS records dropped. Each lane separately authorised. | tools · EVA · site worker · gateway · vault · money | |
| 13.4 | in progress | E1 - durability: owned bare mirrors of all 16 repos Mirrors exist on the owned D: drive since 2026-11-07. Still owed: nightly push in the backup tool, an offline bundle with encrypted secrets, an independently powered replica. | evidence · tools | |
| 13.5 | in progress | E2 - one owned scheduler; every cron a registry row Nov-Dec 2026. The ten unregistered workflows get rows; the site worker's 09:00 dispatch retires after one local cadence. Tools lane 2026-11-07: registry plan drafted (one owned scheduler, every job a registry row); the page's own maintenance job is the first effectful candidate and needs a cutover window - see the tools lane rows. job · AEGO canon drift: last run 2026-11-09 21:15 (UTC+01:00) ok · 1 s · AEGO sovereignty register drift: last run 2026-11-09 21:20 (UTC+01:00) ok · 4 s | tools · orchestrator | |
| 13.6 | open | E3 - state comes home by journaling before every rented write Dec 2026 → Jan 2027. Owned write-of-record first, rented store second; snapshot-consistent ops dump to owned media. | evidence · orchestrator | |
| 13.7 | owner action | E4 - hosting re-home to an owned origin Gated; earliest Q1 2027. Entry gates: the hardware ruling (always-on box) and an origin acceptance test. Rollback is restore, not undo, after the point of no return. | owner · all lanes | |
| 13.8 | open | E5 - GitHub wind-down, two clean months after E4 Every runtime GitHub flow replaced first: site dispatches, page writes, the EVA publish and self-repair paths. | all lanes | |
| 13.9 | open | E6 - registrar, DNS and account; dated re-entry 2027-03-01 Domains to a plain registrar with zone export; owner re-judges name-server placement. | owner | |
| 13.10 | owner action | Owner rulings still outstanding for Track E Counsel freeze dates (proposed 2026-11-20 → 12-05); whether the architecture doc's sovereignty line is anchored on-chain; the gateway mandate amendment; the registrar check. | owner | |
| 13.11 | open | Drills: a restore from the owned mirrors, re-run at every phase gate No row has a recorded drill yet. | evidence | |
| 13.12 | done | This page is itself registered rent (a static-sites consumer) with the same exit as every static dir Moves to the owned origin at E4 like everything else. | root | |
| 13.13 | open | Automation-registry row for the progress page job (aego-progress-maintain) The E2 registry row progress-maintain (task "AEGO progress page", 2026-11-08) names an orchestrator automation-registry row that does not exist yet, so the fleet checker prints an XREF line every run. Add: surface windows-task, task_name "AEGO progress page", cadence every 30 min + logon (+30 s), cadence_seconds 1800, anthropic false (the Admin API cost read is billing metadata, not a model call). The canon-drift and sovereignty-register-drift rows have the same gap. | orchestrator |
| 14.1 | ruled / specced | Introduction statement: organic path - EVA is told the situation in conversation and says it as she sees fit; no script, no brief An external draft script was checked claim by claim: three load-bearing claims are false today (open source, rules readable in git, local-first brain). Format kept: about 30 seconds, first person, no ask, forwardable. | owner · EVA | |
| 14.2 | owner action | Record the statement: tell her who hears it, pick a take by ear, check the name is said [ˈɛːva] Every rendered utterance already lands as an mp3 with its manifest line; nothing to build. | owner (EVA session) | |
| 14.3 | owner action | Confirm the synthetic voice's provenance and consent before the file leaves the estate No still frame of the endgame doc travels with it. | owner | |
| 14.4 | owner action | Decide what the second touch is for | owner | |
| 14.5 | ruled / specced | "Ask EVA" visitor page - design: edge dumb relay → her one brain on the desktop; a visitor is a new unverified perception source; conversation only, no capability execution Design memo 2026-11-07; nothing built. The current site host is the wrong host for a visitor (gated). Proof under each answer: timestamp, model, manifest hash. | EVA · site worker · root | |
| 14.6 | owner action | Owner beta pass first: the owner is the first visitor, from mobile, on an owner-issued tokened link Ruled 2026-11-07: several guests, each on their own tokened link with a small turn budget; no outside link before the beta pass. | owner · EVA | |
| 14.7 | open | Capture the two referenced social posts into the vault before she may cite them Neither post has a vault capture as of 2026-11-07; the owner confirms which one is the comment in question first. | evidence | |
| 14.8 | owner action | Visitor page build: plan rev 32 approved and handed to the EVA session as a GSD phase - relay Worker, tokened links, the visitor source in the brain, the static page Approved 2026-11-08; root-lane deliverables done (register row, memo rulings, state, memory). Hand-off acknowledged by the live EVA session, which is finishing other work and will not self-start the phase. Next move is the owner's: open a fresh EVA session (or a second checkout) and point it at the hand-off brief in the root planning record; it then runs phase add → plan (cross-AI convergence) → identity backup → execute. The roadmap's 217 slot was taken on 11-07, so the phase takes the next free number. | EVA (phase) · root (register, memos) · evidence (secrets map) · owner (provisioning) | |
| 14.9 | done | Register row for the relay Worker on ask.aego.dev: TOLERATE, re-entry 2027-02-05, gated, EVA-owned Register 1.0.6 (68 rows); table re-rendered with the tested renderer and the drift check passes; canon manifest re-attested. Consumers include the secrets-sync map and the zone WAF rule, so the S10 guard holds at the first deploy. | root | |
| 14.10 | open | Secrets propagation map: add the two verifier-hash lines and the Worker directory for the relay Relayed 2026-11-08 (root state block has the exact lines): two SECRET_MAP entries mapping the relay's desk and admin key hashes to the ask-eva Worker, plus the WORKER_DIRS entry pointing at the relay directory in EVA's tree. Lands once the relay directory exists (the sync needs its wrangler.toml); the keys themselves never leave the root .env. | evidence | |
| 14.11 | owner action | Owner-run provisioning for the relay, in order: WAF rule, key generation, deploy, mint the owner-phone token, beta pass from mobile Runbook = plan rev 32 §D. Each step waits for the EVA phase to ship its scripts; the first deploy is the hard test of Durable Objects on the free plan (fallback = an owner ruling for the paid plan on the same register row). The beta pass is the acceptance test before any outside link is issued. | owner |
| 15.1 | done | Run-out warning for the org API credits: automatic estimate, a line in every session brief, an attention-strip blocker, a Desktop file and a toast Runs in every page build and in the daily digest task; the Console baseline is re-read when a new grant lands. job · AEGO sovereignty digest: runs through its own registrar; no ledger (its lane's E2 step-5 decision pending) | root | |
| 15.2 | done | Subscription-first rule written into the root and global instructions and printed in every session brief API credits only for consumers with no subscription path: EVA's runtime brain and perception, the orchestrator daemon, the site worker. Supersedes the 11-05 'burn the org credits' directive. | root | |
| 15.3 | open | 210 round 2b paid delta: can it run on the subscription? If not, say why before the paid step The paid step stays owner-interactive. | EVA · 210 | |
| 15.4 | open | Daemon enrichment calls: can they move to the subscription rail? Dispatched sessions must stay key-stripped | orchestrator | |
| 15.5 | open | Invoice and statement parsing: move what runs interactively to the subscription; only unattended runs stay on the API | money | |
| 15.6 | open | Scripts that call the API (they still read the EVA key, not their own): move interactive analysis to the subscription | evidence | |
| 15.7 | open | Task registry: the daily digest task now also runs the credit check (local alert only, effects still none); update its purpose and notes | tools | |
| 15.8 | open | Cost aggregator: its window drops the last day (the exclusive end equals the window end), so the cost watchdog's 'latest complete day' is two days old Found 2026-11-08: the 11-07 run's window ends 11-06 but its records stop at 11-05. | tools | |
| 15.9 | open | Guard-script toasts use an unregistered app id, which Windows usually drops silently; the Desktop file still lands The credit check shows its toast under PowerShell's registered id; the same fix applies to the guard and vault-pull scripts. | tools |
| EVA:210-sitting-4 | done | 210 rulings sitting #4 - both batches ruled (285 children), identifiers 13/13, amendment ratified, knowledge backup run 2026-11-07 ~11:20; dispositions Sitting #4; rulings files pinned to the labeled r2 proposals. | EVA | |
| EVA:210-boot-wal-fold | done | Owner boot per the reconciled boot checklist - folds the pending eva.db WAL; clean close · by 2026-11-07 Done 12:11; WAL folded, verified on disk before the first apply. | EVA | |
| EVA:210-apply-B-r2 | done | 210 apply batch B - 3 role hits on confirmed rows; signed, banked, applied, proven on two copies · by 2026-11-07 Applied 12:20; inverse proven; AFTER snapshot clean. | EVA | |
| EVA:210-apply-C-r2 | done | 210 apply batch C - 2 inserts + 1 hit, 2 rebinds; signed, banked, applied, proven on two copies · by 2026-11-07 Applied 14:35; baseline complete (D-02). | EVA | |
| EVA:210-one-boot | done | Owner ONE boot - boot reads for batches B and C PASSED (both new rows resolved by voice); clean close verified · by 2026-11-07 Closed 12:03, WAL folded; baseline keys taken after the close. | EVA | |
| EVA:210-round-2b | in progress | 210 round 2b - delta parse BUILT (plan 210-23, rehearsed: 5,248 delta keys / 12 threads); NEXT = owner call on the [redacted]-Ferguson render scope → real --since → estimate → paid delta · by 2026-11-10 Org credits expire 2026-11-10/11; the published viewer holds only [redacted]'s new session (a real --since would shrink his live thread to 96 msgs) - re-render or exclude him first; 210-24 still unbuilt (gates the post-pass, not the paid extraction); paid step owner-interactive. | EVA | |
| EVA:210-thread-held | owner action | One thread held pending identity confirmation - identifiers ruled; re-entry after round 2 closes on the owner's explicit go Hold D-03. | EVA | |
| EVA:214-substrate-commit | done | Phase 214 - brain substrate Opus 5 → Opus 5.5: commit live and the owner-eared identity-continuity read PASSED 8/8 on its own boot 2026-11-08 evening: 188 calls, no truncation, cache warm from turn 2, tool loop clean, lanes quiet; week-after cost/refusal ledgers still owed. | EVA | |
| EVA:214-bystander-write-defect | done | HIGH defect from the 214 boot's bystanders-only mic window: non-owner speech reached the brain's intake and was written as owner correction rows (+35 rows; the brain answered 14 of 243 stranger turns, unheard) - FIXED (who-axis WRITE floor) + the 34 rows retired + the 4 corrections.json entries retired The who-axis gated her voice but not the write path. FIX LANDED 2026-11-08 (66425908: the who-axis WRITE floor, steps 1-6 - intake floors + brain R4/R5 + G211, health 229/229). Capture boot 2026-11-09 01:59 PASSED the null control (8 non-owner turns answered → 0 rows, 8 refusal lines; the owner's voice wrote 2 owner-stated corrections); two of the owner's own code-switched turns scored 0.42-0.46 and were refused as `other` → P14's echo re-cal owns that. STEP 7 APPLIED 2026-11-09 11:41 (owner present): 34 rows quarantined `209-bystander-boot1-2026-11-08` via the 209 ritual (dry-run proof_ok, owner-signed ops_sha, TIER-0 11-33 zip, inverse rehearsed byte-identical on a copy; 0 boot-#1 rows left in the correction pool; ledger in the 209 phase dir). §7c DONE 12:45 (retireCorrections landed a1138a4f; the owner retired the 4 corrections.json entries from the console, file backup verified) · detector `wrong.` family landed · W3-B lane fix landed. The who-axis arc is CLOSED; P14's code-switched null control carries the owner-voice wobble. | EVA | |
| EVA:218-ask-eva | in progress | 218 Ask EVA - tokened visitor page + edge relay + visitor adapter + brain floors: LIVE on ask.aego.dev; the first visitor turn from the owner's phone passed its checks (2026-11-09), but her answer arrived cut off at 300 characters, to fix before the rest of the beta pass 2026-11-09: the owner's runbook is done (no zone rate rule, keys, deploy, link). Beta pass, first turn: the question was saved before she answered, the proof chain passed 6 of 6, a search of 116,563 files found the test word nowhere in her memory, and her database did not change. Finding: the answer was cut mid-word at 300 characters (likely her 400-token reply limit on turns without tools; todo filed). Next for the EVA lane: fix that, then the remaining beta steps. Register relay done by the root lane (1.0.9); the evidence lane's two secret-sync lines are still owed. | EVA |
| orchestrator:1 | done | D-4 monthly D1 archive job (orchestrator = sole writer) landed + live Window 2026-11-07: main 0cadf75, one restart, PostRestart OK; scheduled daily 01:00Z, first real run 2026-12-01T01:00Z. | orchestrator | |
| orchestrator:2 | done | Phase 37 cross-review deferrals XR-03/08/09/12 + IN-04 landed + live Same window as D-4; IN-01 stays open. | orchestrator | |
| orchestrator:3 | open | D-4 first real run - dated follow-up (legacy-layout check first, then verify 2026-11) · by 2026-12-01 Read-only checklist in 261106-kf5-WINDOW.md; closes the FLAGS entry; then nemesis deletes the dead handler. | orchestrator | |
| orchestrator:4 | owner action | I-05 ruling: orchestrator.query_result in the monthly archive type policy Landed fail-closed (option c de facto). Rule a / b / c; a /query call in a month blocks that month until ruled (hygiene WARN). | orchestrator | |
| orchestrator:5 | owner action | Erase (xi): delete the f3s top-up run dir after the nemesis acknowledgement Gate met 2026-11-09: the nemesis archive lane re-read the cloud archive (51/51 checks pass; hashes match the top-up report). The owner deletes the top-up run dir; the eight-month second copy sits outside it and stays. | orchestrator | |
| orchestrator:6 | owner action | 2026-11-10 Drive erase list (five targets, ≈ 20.2 GB) - owner runs the rm lines · by 2026-11-10 Runbook in STATE PICKUP; (iii) 15.49 GB needs the owner's decision; then empty the Drive Trash. | orchestrator | |
| orchestrator:7 | open | Phase 38 multi-host parity - plan it in a second checkout Unblocked since Phase 37 closed 2026-11-06; the launch banner is in the orchestrator STATE PICKUP. | orchestrator | |
| orchestrator:8 | open | SANE-04 ops.ts route migration - waiting on the nemesis 11-03 route table Orchestrator-side census done (7 consumed /ops/api routes, sent to the nemesis lane). Never batched with a D-4 window. | orchestrator | |
| orchestrator:9 | in progress | WR-02 follow-up: outbox containment for pruneOrphanTemps / enqueueObservation - BUILT + PARKED Quick 261107-mee on a branch (root + observations/ child guards, 5 tests, 5 invariant pins, three reviews, verifier passed); lands at the next owner-gated restart window; full suite is a window precondition (memory was under the floor). | orchestrator | |
| orchestrator:10 | done | Anthropic spend anomaly 2026-11-03 ($12.00) - ATTRIBUTED: EVA brain live-use rate, not the orchestrator 2026-11-07 Admin API read-only: 11-03..11-06 = $12-21/day on the EVA brain key (Opus 5 live use; ≈45 % cache-hit), same shape as October live days; ≈ $0.75/day when EVA is closed; the 16.2× WARN came from a closed-week median and self-clears. Orchestrator daemon ≈ $0.11/day. EVA-lane levers (prompt caching; the 210 extraction riding the brain key) recorded in FLAGS. | orchestrator | |
| orchestrator:11 | in progress | EVA P12 (Phase 44 spool drainer + bridge status icon) - banner sent to the EVA session 2026-11-07 spool:undrained 7 persists until EVA drains; EVA schedules it as its own phase. | EVA | |
| orchestrator:12 | done | CLAUDE.md drift (progress 11.6) fixed - repo table aligned to the root branch policy (projects/ paths, utae / tools / major_domus rows), death row now BUILT (Worker death-vault) 2026-11-07 docs-only commit on main; the two stale worktree copies were removed by the window. | orchestrator | |
| orchestrator:13 | owner action | EVA system-knowledge copy (progress 11.7): retire or re-sync - owner ruling needed Verified 2026-11-07: last synced 2026-04-10, 2,688 EVA commits behind, yet mandatory reading in this repo. Recommend retire → pointer to EVA canon + orchestrator-side invariants only (this repo is read-only toward EVA by charter). | orchestrator | |
| orchestrator:14 | done | Automation registry: five Windows scheduled tasks registered + one stale row retired (tools-lane registry check) · by 2026-11-08 2026-11-07, owner go; live for the daily 08:00Z watchdog tick (offline evaluation: 0 findings); tools lane cross-references set, its check reads 0 XREF. Dated check 2026-11-08 08:00Z: no new WARN. | orchestrator | |
| orchestrator:15 | in progress | Automation watchdog: task-missing finding + disabled/retired rows - BUILT + PARKED Quick 261107-ujj on a branch (exit-1-only classification, strict flags, stderr piped; 17 new tests, 20 mutants killed, three reviews, verifier passed); lands at the next owner-gated restart window with the WR-02 branch; full suite is a window precondition (host memory pressure). | orchestrator | |
| orchestrator:16 | done | Automation registry: HYGENE watchdog row retired; rows added for canon drift, sovereignty drift, the progress page and both iPad displays (tools-lane attention item) 2026-11-08, owner go; quick 261108-fast. Covers root item 13.13 (aego-progress-maintain row now exists, cadence 1800). Tools check: XREF 6 -> 2, exit 0; the last two need the tools lane to name aego-ipad-display-mini1 / aego-ipad-display-duo in its two iPad rows (a dry run with those pointers gives 0 XREF). | orchestrator | |
| orchestrator:17 | open | Automation watchdog: long-running scheduler jobs read as failed (codes 267009 / 267011 / 0x800710E0) Both iPad display servers stay running, so the watchdog's any-non-zero-is-failed rule raises two false task-failed warnings from the 2026-11-09 08:00Z tick on. Known noise, not an incident. Fix folds into the parked quick 261107-ujj branch before its owner-gated window. | orchestrator |
| evidence:1 | done | US trademark watch red since 5 Nov: a tracked mark registered on 3 Nov; captured, counsel docs updated, acknowledged Not a fault: the watch reports events by going red. Full tracked set re-pulled 7 Nov; five counsel documents carry dated notes; ack state, pushed 7 Nov; counsel gateway query returns the new notes. | evidence | |
| evidence:2 | done | US trademark watch no longer forgets: a red stays red until acknowledged Five red episodes (Aug to Nov) had cleared on their own unreviewed. Window now starts after the last clean run; offline self-test passes; pushed 7 Nov, live from the next daily run. | evidence | |
| evidence:3 | done | Registration certificate of the newly registered mark: downloaded and filed Owner downloaded it past the captcha on 7 Nov; filed in the capture set with its hash (unsealed). | evidence | |
| evidence:4 | owner action | EU trademark watch rebuilt on the EU office API; production access is the owner step Built and proven on the test service (self-test passes; full check, update and re-check cycle green). Needs the owner: a ruling on the rented-service register, the production application, then the production keys. | evidence | |
| evidence:5 | done | Evidence resume state brought up to the 6 Nov commits STATE.md current position 7 Nov covers 5 to 7 Nov; roadmap text not touched. | evidence | |
| evidence:6 | done | Note to counsel on the US register update: sent 7 Nov on the owner's word Sent on the 6 Nov digest thread; secured byte for byte in the matter folder. | evidence | |
| evidence:7 | done | Owner ruling for the root lane: name the EU office trademark API on the rented-service register Applied by the root lane: register 1.0.4 names the EU office trademark search API on the read-only register watches line (no row, as ruled). | root | |
| evidence:8 | done | Secrets propagation map carries the relay's two verifier-hash lines and its Worker directory (closes root item 14.10) Added 9 Nov, names checked against the relay code; dry run lists both for the relay Worker; pushed 9 Nov. The relay Worker already exists and holds both secrets; the running sync daemon picks the new lines up at its next restart. The plain keys stay unmapped. | evidence |
| tools:canon-drift | done | Canon-manifest drift check (page item 10.7) 2026-11-08: runs on the owned scheduler as Scheduled Task 'AEGO canon drift' (daily 09:15 local, repeated every 3 h until 21:15, + 5 min after sign-in); alerts on the Desktop on drift or an unreadable file. First real run: 11/11 rows OK. job · AEGO canon drift: last run 2026-11-09 21:15 (UTC+01:00) ok · 1 s | tools | |
| tools:mandates-docs | done | Tools mandates file + registry README brought current (page item 11.8) 2026-11-07: CLAUDE.md category list = the six real dirs; README categories, the false 'untracked' claim and the retired tools/mcp plan fixed. | tools | |
| tools:e2-registry | in progress | E2: one owned scheduler, every job a registry row (page item 13.5) Steps 1-3 done 2026-11-08: registry + read-only checker; apply-aego-task.ps1 + run wrapper (lease, run ledger, Desktop alert); jobs canon-drift, sovereignty-register-drift, ipad-display-mini1 and progress-maintain (the page every 30 min). Live: 11 tasks OK. Tests: 47 + 16 + 14 (+ 20 for the sovereignty check). Next: step 5 (move the older tasks' own registrars onto apply) and the owner's retention decision. | tools | |
| tools:hygene-watchdog-removed | done | Disabled HYGENE Chrome Renderer Watchdog removed Owner decision 2026-11-08: the task had done nothing since July (its script was gone); removed from Task Scheduler and from the registry. Chrome Memory Saver is the remaining guard against runaway tabs. | tools | |
| tools:digest-credit-note | done | Task registry: the digest task's description names the credit check (page item 15.7) 2026-11-08: purpose and notes updated; action unchanged, effects stay none. | tools | |
| tools:effort-override-per-checkout | done | Effort router: overrides per checkout, never below a critical scope; fewer false write alarms 2026-11-08: overrides hold for the whole checkout (507dd04) and never lower a CRITICAL scope; read-only commands that only throw output away no longer raise the floor (33cf5b5, owner ruling). Tests 25/25; high + max-effort reviews, all findings fixed. | tools | |
| tools:cost-window-last-day | done | Cost aggregator: the last day of every window is no longer dropped (page item 15.8) 2026-11-08: the Admin API's ending_at is exclusive; the adapter now asks up to the day after the window end. Verified on a scratch copy against the live API: window 11-04..11-07 now returns 11-07 too (before: up to 11-06), earlier days unchanged; a one-day window works. The orchestrator's next aggregator run picks it up (no restart). | tools | |
| tools:toast-app-id | done | Guard and vault-pull toasts now use a registered app id (page item 15.9) 2026-11-08: death-vault-pull.ps1 and tanstack-guard.ps1 show their toasts under PowerShell's registered id (the one run-aego-task.ps1 and the credit check use). One-line change each; encoding kept (vault pull stays UTF-8 with BOM), both parse under PS 5.1 and 7. The Desktop alert files are unchanged. | tools | |
| tools:sovereignty-renderer | done | SOVEREIGNTY.md register table: renderer + daily drift check + the S10 guard (page item 11.15) 2026-11-08: renderer + daily drift check (0749aeb) and the sovereignty guard (system/sovereignty-guard/, S10): walks [local path] without gitignore, maps every rented-API hit to a register row, checks allowlist growth against git HEAD; 36 tests (both shells), code-reviewed; first live run clean (973 covered files, 0 unregistered). Owner decision open: four rows with repo 'all' + path '**' make every hit 'covered', so the guard cannot fire until they are narrowed (207 files covered only by them). Not scheduled yet; root lane updates the S10 path in SOVEREIGNTY.md. job · AEGO sovereignty register drift: last run 2026-11-09 21:20 (UTC+01:00) ok · 4 s | tools | |
| tools:progress-maintain-schedule | done | Schedule progress/maintain.py every 30 min through the E2 registry 2026-11-08 (owner directive; the 3-day gate lifted): Scheduled Task 'AEGO progress page' (root lane's row progress-maintain, f436df3) runs progress/maintain.py 30 s after sign-in and every 30 min through the E2 wrapper. Registered by the owner, verified by this lane: checker 11 OK, all suites green, Task Scheduler diff = only the new task. First scheduled run 21:35: exit 0, deployed; the live page shows built 21:35. The session-bound loop is retired. Open: log/ledger retention (owner decision). job · AEGO progress page: last run 2026-11-09 22:35 (UTC+01:00) ok · 16 s | tools · root | |
| tools:ipad-second-screens | in progress | Second screens: mini 1 + iPhone Duo live (ipad-mjpeg-display, E2 jobs); next: the remote hub 2026-11-08: mini 1 and Duo served by E2 rows ipad-display-mini1 / ipad-display-duo; Extend / Mirror / Not now dialog; Mirror shows a Duo-shaped window of the Samsung; guard keeps a real monitor primary and the dead panel's ghost output off. spacedesk's iOS app draws nothing on the foldable Duo. | tools | |
| tools:dell-2560-workspace | dropped | Dell main screen: get the 2560x1600 workspace back (NVIDIA DSR) or undo the panel disable 2026-11-08: superseded - the Dell U2415 was replaced by a Samsung LS49AG95 (5120x1440, native), now the primary screen. | tools | |
| tools:claude-sessions | done | Claude Code sessions snapshot + resume per repo window (system/claude-sessions) Live 2026-11-08 (root-lane session snapshot-resume-tool-plan, 97010d2..42090a1): hooks keep a per-session roster; a VS Code folder-open task reopens a window's sessions (same cwd + permission mode; never kills, never auto-prompts, never resumes bypassPermissions or -p). install.js re-run from this checkout, tools-2 deleted (per that session). | tools | |
| tools:remote-hub | in progress | Remote hub: iPhone Duo + iPad mini 2 with Bluetooth keyboard (channel 1) and mouse controlling the laptop Plan: tools/.planning/remote-hub-PLAN.md (input forwarding from the Duo's page to Windows SendInput with a pairing PIN + HMAC, pan-on-edge viewport over the 5120-wide Samsung, mini 2 joins, mini 1 retired after the ghost guard moves). Step 1 (device spikes) done on the Duo 2026-11-09 (input_probe.py + ios_tab_js.py, Duo driven over USB): the Lift arrives as a real mouse (hover, 3 buttons, wheel, ~59 Hz), MX Keys keys arrive without a focused field incl. Cmd+C / Ctrl+C; iOS keeps Cmd+Space / Cmd+Tab / Cmd+H / Globe; movementX reads 0 at the screen edge, so pan-on-edge = dwell hot zone (results in the plan). mini 2 (iOS 12) done too: touch + keyboard arrive, no mouse. Step 2 measured 2026-11-09: full-width frames cost 2.8x the crop, so panning = server-side zmq crop (B). Step 3 built the same night: remote_input.py (scan-code keys, absolute mouse, wheel, PIN pairing + HMAC + counter, kill switch Ctrl+Alt+Shift+F12, auto-release of held keys), 26 tests, xhigh security review with every should-fix item fixed, laptop-side end-to-end OK; the Duo's E2 row now runs with --allow-input. Step 4 built the same night behind --pan (viewport_pan.py dwell hot zone + ffmpeg crop moved at runtime through zmq via a stdlib ZMTP client): laptop-verified edge-to-edge slide at 1403 px/s, 20 updates/s, catch-up + clamping; 37 tests, second xhigh review applied. Next: the owner's hands-on retest of input on the Duo (first try left Win stuck; fixed), then --pan on the Duo row, then step 5 (mini 2 roles, retire mini 1). | tools | |
| tools:shared-hook-helpers | done | Lift the hook-group helpers shared by the effort-router and claude-sessions installers into tools/shared/ Landed 2026-11-09 (plan tools/.planning/SHARED-HOOK-HELPERS-PLAN.md, independent plan review folded, code review high before commit): shared/claude-hooks.js = hookSet (isOurHook / desiredGroup / stripOurs / audit / apply / remove, one drift rule counting our entries: missing / duplicated / differs) + sameGroup + readStrictJson / backup / writeJson (atomic rename with 3x20 ms retries, symlink-safe). Both installers consume it; router exports and test suite unchanged (25/25); new claude-sessions test/install.test.js sandbox round trip (30 checks); shared suite 11 tests. Live --check for both installers byte-identical before and after, exit 0. No settings.json edit was made and none is needed (hook commands point at router.js / hook.js, not the installers). | tools | |
| tools:docs-health | done | Documentation-health check (page item 11.21) 2026-11-08: machine-hygiene check docs-health reads progress/items.json docs_health (path[] + max_age_days, no second list), dates docs by their last commit (uncommitted edits by write time), flags STALE (over the limit while the repo moved on; 'quiet' when it did not) and STALE-STATE for every resume state; -Json for the root lane's build.py (its step 4). 41 tests (both shells), code-reviewed (10 findings fixed). First run: 4 STALE + 4 STALE-STATE. Not scheduled yet. | tools |
| site worker:1 | done | v1.2 Phase 10 - bridge carries text in / reply out only (every control removed) Deployed and verified 2026-07-01. | site worker | |
| site worker:2 | in progress | v1.2 Phase 11 - bridge clean-up (dead code, one API prefix, dropped-message handling): 3 of 7 plans live Waves A and B deployed 2026-11-06; Wave C1 (canonical route twins, dashboard and check scripts on the single prefix, empty repair cards and dead code cut) deployed and verified 2026-11-09. Next: Wave C2 (dropped-message handling: a one-shot table rebuild; the owner pauses EVA and signs), then cross-repo hand-offs, a 24 h traffic census and removal of the old prefix: 2 more guarded deploys. | site worker | |
| site worker:3 | open | v1.2 Phase 12 - the operator-to-EVA conversation becomes the control panel's main surface Starts after Phase 11. Replaces clutter, never adds to it. | site worker | |
| site worker:4 | open | v1.3 control-panel slim-down (sections 2-11: cut or merge by default) Parked behind v1.2; scope locked 2026-05-25, reconciled 2026-06-09. | site worker | |
| site worker:5 | done | D1 archive hand-back from the orchestrator (months 2026-03..10) verified from R2 and acknowledged 2026-11-09: read-only re-read, 51/51 checks PASS; ACK sent to the orchestrator lane (closes their Erase xi). | site worker | |
| site worker:6 | open | D1 prune plan - delete the four excluded event types by id range, plus the API-key switch in the same deploy Not written yet. Needs cross-review and owner sign-off; never during 00:30-06:00 UTC on the 1st-3rd. | site worker | |
| site worker:7 | open | Monthly-archive monitoring change (the site worker only detects; the orchestrator writes) Unblocked since the orchestrator's writer went live 2026-11-07. Own signed plan. | site worker | |
| site worker:8 | open | Remove the dead monthly-archive code from the site worker (~400 lines) · by 2026-12-15 After the first orchestrator-written month (run 2026-12-01) verifies. | site worker | |
| site worker:9 | done | Control-panel sign-in hardening (two security fixes) Found by the Phase 11 review legs; deployed and verified 2026-11-09 through the guarded path, every check passed, counsel's access unchanged. | site worker | |
| site worker:10 | owner action | Owner: confirm the sign-in allowlist entries flagged by the 2026-11-09 security review, and pick the session-tier follow-up option Read-only review found no evidence of misuse; a few entries need the owner's recognition. The session-tier change gets its own signed plan. | site worker |
| Tauri port (cousin):1 | open | Read the handoff note, the seed assessment, the overlay design and the mainline digestTauri lane · 11-09 TRACK-D/README.md lists them in order. | cousin | |
| Tauri port (cousin):2 | open | Cherry-pick the Android scaffolding, the launch scripts and the rebrand onto track-d New files; should land conflict-free. | cousin | |
| Tauri port (cousin):3 | open | Cherry-pick the connection layer and re-point it at the overlay backend-url, http client, mobile bootstrap, connection settings, the connect-failure unblock. | cousin | |
| Tauri port (cousin):4 | open | Spike: native audio + WebRTC library for Tauri 2.12 (Android first) One-page result: library, licence, what works in background, what the iOS audio session needs later. | cousin | |
| Tauri port (cousin):5 | open | Define the client render surface: which contracts it consumes, what the reduced cloud view shows brain.* / perception:* / tts.audio_chunk. Composes nothing, decides nothing. | cousin · EVA | |
| Tauri port (cousin):6 | ruled / specced | Client ASR and client LLM stay on dev-mobile; nothing of them comes over Ruling 2026-11-02: perception and reasoning stay on the workstation. | owner | |
| Tauri port (cousin):7 | open | Write up the server token-gate changes as input to the D1 security review Not ported blind: under the overlay the gate semantics change. | cousin → EVA | |
| Tauri port (cousin):8 | open | Playback handles segment streams and flushes the local jitter buffer on barge-in Depends on the output-streaming path landing on mainline (B0.5). | cousin | |
| Tauri port (cousin):9 | open | Weekly merge-up from eva-v1.1 into track-d Small weekly merges instead of six-week jumps. | cousin |
Each job writes its own run ledger on the owned scheduler; this table and the items that name a job are stamped from it at every build, nobody edits them by hand.
| task | lane | cadence | state | last run · 24 h |
|---|---|---|---|---|
| AEGO death vault pull s0 | health vault | daily 03:00, daily 08:30, daily 13:00, daily 18:30, logon +3m | unwrapped | runs through its own registrar; no ledger (its lane's E2 step-5 decision pending) |
| AEGO death vault watchdog | health vault | daily 09:00, logon +10m | unwrapped | runs through its own registrar; no ledger (its lane's E2 step-5 decision pending) |
| AEGO sovereignty digest | root | daily 06:30, logon +3m | unwrapped | runs through its own registrar; no ledger (its lane's E2 step-5 decision pending) |
| AEGO standby guard | tools | logon +30s, every 15m | long-lived | long-running service; no exit recorded (the ledger records exits only) |
| AEGO TanStack Guard | tools | every 6h | ok | last run 2026-11-09 18:19 (UTC+01:00) ok · 250 s · 24 h: 4 ok |
| AEGO-AISearch-Rerank-Watch | gateway | daily 03:00 | unwrapped | runs through its own registrar; no ledger (its lane's E2 step-5 decision pending) |
| AEGO-Reap-Claude | tools | every 15m | own launcher | own synchronous launcher by design (E2 step 5): Task Scheduler holds the real result; no ledger |
| AEGO canon drift | tools | every 3h, logon +5m | ok | last run 2026-11-09 21:15 (UTC+01:00) ok · 1 s · 24 h: 5 ok, 1 failed |
| AEGO sovereignty register drift | tools | every 3h, logon +6m | ok | last run 2026-11-09 21:20 (UTC+01:00) ok · 4 s · 24 h: 5 ok |
| AEGO iPad display mini1 | tools | logon +1m, every 15m | failed | exited 2026-11-09 15:49 (UTC+01:00) fail · 11079 s (exit 1) · 24 h: 0 ok, 5 failed |
| AEGO progress page | root | logon +30s, every 30m | ok | last run 2026-11-09 22:35 (UTC+01:00) ok · 16 s · 24 h: 48 ok |
| AEGO iPad display duo | tools | logon +1m, every 15m | failed | exited 2026-11-09 15:49 (UTC+01:00) fail · 11079 s (exit 1) · 24 h: 0 ok, 6 failed |
| document | repo | last change | state | drift |
|---|---|---|---|---|
| Architecture doc (root) | root | 2026-11-07 | fresh | - |
| Root mandates | root | 2026-11-07 | fresh | - |
| Sovereignty register + mandate | root | 2026-11-08 | fresh | renderer, daily drift check and the S10 guard exist (tools 0749aeb, 6bc875f); the guard is unscheduled until the catch-all consumer rows are narrowed (root lane, in progress) |
| Canon manifest | root | 2026-11-07 | fresh | - |
| Root resume state | root | 2026-11-07 | fresh | untracked by design (allowlist): no history |
| EVA mandates | EVA | 2026-11-02 | fresh | names the synced drive as the durable second copy; ruled rented on 11-06 |
| EVA README | EVA | 2026-05-17 | stale | lists the old guardian set; config v3.0 changed it in March |
| EVA architecture doc + guardian dev reference | EVA | 2026-10-11 | aging | guardian weight tables pre-v3.0 while the mandates file is current; the generator script exists and is never called |
| Endgame doc + digest + convergence map | EVA | 2026-05-24 | stable canon | - |
| EVA failure-mode archive · audio config | EVA | 2026-11-06 | fresh | - |
| EVA resume state | EVA | 2026-11-07 | aging | frontmatter carries three disagreeing stale dates; live blocks are current |
| aeva.aego.dev site content | EVA | 2026-04-21 | stale | spec version mismatch inside the site; family count predates two filings; model page shows a four-tier layout; patent-forward framing |
| Orchestrator mandates | orchestrator | 2026-11-07 | fresh | - |
| EVA system knowledge (orchestrator copy, mandatory reading) | orchestrator | 2026-04-12 | stale | 2,688 EVA commits behind; wrong tiers, sizes and latencies; no current brain - owner ruling pending (retire vs re-sync) |
| Orchestrator flags + resume state | orchestrator | 2026-11-07 | fresh | - |
| Vault mandates | health vault | 2026-11-07 | fresh | gateway described as pending owner steps; it is live |
| Vault architecture doc + README | health vault | 2026-11-03 | fresh | auth model described from before the gateway; history list stops at 11-03 |
| Evidence mandates + resume state | evidence | 2026-11-07 | fresh | roadmap text from June |
| Tools mandates | tools | 2026-11-07 | fresh | - |
| Tools registry README | tools | 2026-11-07 | fresh | - |
| Site worker mandates + state | site worker | 2026-11-06 | fresh | - |
| Money mandates + resume state | money | 2026-04-03 | stale | old project name; two scripts listed that do not exist; state seven months behind commits |
| Gateway docs | gateway | 2026-11-06 | fresh | roadmap lists one phase while the milestone is complete |
| major_domus docs | major_domus | 2026-11-03 | fresh | 'two review rounds', 'no remote', 'not started' - all three false since 11-05 |
| maze config (not a doc, but the inventory path) | maze | - | stale | scans the pre-move project path; functional drift |
| doc automation | last run | verdict |
|---|---|---|
| Daily documentation analysis (evidence workflow, dispatched by the site worker at 09:00) | 2026-11-06 green | runs green daily but changes no document: it only writes a JSON result to object storage. It never kept anything up to date. |
| Site/docs publish workflow (EVA repo) | 2026-07-10 | no run in four months - under investigation (relaunched sweep) |
| Guardian-config → docs sync script | never called | exists; not in any script hook; two of its three targets are stale → one command fixes them |
| Documentation analyzer script (EVA) | never | its report file was never produced |
| Weekly /sync-docs command | no evidence of a run | manual prompt from January; not scheduled |
| Sitemap regeneration (site worker dispatch) | 2026-04-23 | no longer auto-deploys; register says drop by 2027-01-31 |
| Verdict | - | nothing in the estate maintains the mandates files, the resume states or the EVA system-knowledge copy. Documentation health is manual until a hygiene check exists. |