| A01 |
#2469 |
closed |
Restore PR_REVIEW and PR_FEEDBACK end to end |
| A02 |
#2470 |
closed |
Correct default execution-gate semantics and corrupt-evidence handling |
| A03 |
#2471 |
closed |
Make recovery state actionable and circuit-safe |
| A04 |
#2472 |
closed |
Remove hot-path stalls and make the runtime lifecycle restart-safe |
| A05 |
#2473 |
closed |
Add generation-fenced pre-execution launch retry |
| A06 |
#2530 |
closed |
Make Node/Bun subprocess output reliable at every affected caller |
| A07 |
#2533 |
closed |
Make disabled compaction safe through the registered host hook |
| A08 |
#2574 |
closed |
Keep gate-denial guidance specific to the current cause and action |
| A09 |
#2664 |
open |
Keep mandatory lifecycle bookkeeping active and record every Stage A attribution route |
| A10 |
#2665 |
open |
Connect existing task recovery and status to authoritative transition receipts |
| A11 |
#2674 |
open |
Close remaining subprocess lifetime gaps and enforce the caller contract |
| A12 |
#2678 |
open |
Give repeated PRM stops a bounded episode and terminal recovery state |
| B01 |
#2474 |
closed |
Canonicalize project and filesystem identity across Windows and POSIX |
| B02 |
#2475 |
closed |
Ship and verify the Windows native sandbox boundary |
| B03 |
#2476 |
closed |
Harden executable, Git-ref, and config trust boundaries |
| B04 |
#2669 |
open |
Make optional automation-status startup failures nonfatal |
| B05 |
#2670 |
open |
Measure and enforce the complete startup and first-use latency contract |
| C01 |
#2477 |
closed |
Root-fix filesystem, process, and test-isolation flakes |
| C02 |
#2478 |
closed |
Root-fix async, timeout, and quota-batch flakes |
| C03 |
#2479 |
closed |
Make schema, coverage, and source ratchets authoritative |
| C04 |
#2572 |
closed |
Diagnose and repair the merge-group host-timeout test flake |
| C05 |
#2552 |
closed |
Measure merge-queue throughput and resolve gate-policy decisions |
| C06 |
#2554 |
closed |
Restore the LF checkout rule by removing the .gitattributes BOM |
| C07 |
#2633 |
open |
swarm ci follow-up backlog from the PR #2629 review round |
| C08 |
#2675 |
open |
Make full repository validation reproducible and truthfully bounded |
| C09 |
#2677 |
open |
Align enforced CI checks and invariant claims with the actual required-check contract |
| D01 |
#2480 |
closed |
Establish the SQLite durable-state foundation and migrate low-risk stores |
| D02 |
#2481 |
closed |
Migrate coordination state to atomic SQLite transactions |
| D03 |
#2482 |
closed |
Build the SQLite-native observability sink and /swarm report |
| D04 |
#2483 |
closed |
Migrate and bound every residual durable stream |
| D05 |
#2484 |
closed |
Migrate the plan ledger to SQLite with exact replay and hash parity |
| D06 |
#2485 |
closed |
Add bounded remote observability export and privacy controls |
| D07 |
#2486 |
closed |
Build the consented training vault and governed dataset export |
| D08 |
#2487 |
closed |
Prove SQLite/observability parity and retire legacy paths |
| D09 |
#2531 |
closed |
Recover complete plans from the ledger and preserve valid U+FFFD text |
| D10 |
#2510 |
open |
Register and verify PR-workflow gate-state retention against its actual authority |
| D11 |
#2575 |
open |
Serialize Full-Auto state updates across processes without unlocked fallback |
| D12 |
#2576 |
open |
Preserve summary identity and stored output across restarts |
| D13 |
#2577 |
open |
Serialize cohort destination migration under its live lock |
| D14 |
#2667 |
open |
Make live state and hydration project-owned and generation-fenced |
| D15 |
#2668 |
open |
Preserve effective runtime policy and reconcile interrupted work across restart |
| D16 |
#2676 |
open |
Bind execution traces and task-cost metrics to exact attempts and outcomes |
| D17 |
#2679 |
open |
Apply project-root ownership before initialization creates runtime state |
| E01 |
#2488 |
closed |
Finish graph correctness and graph-first workflow wiring |
| E02 |
#2489 |
closed |
Make the repo graph warm, indexed, bounded, and defensively validated |
| E03 |
#2490 |
closed |
Prove hybrid retrieval and graph-memory quality across languages and hosts |
| E04 |
#2491 |
open |
Enforce review routing and synthesize high-confidence findings |
| E05 |
#2492 |
open |
Make test and mutation scope safe and efficient |
| E06 |
#2540 |
open |
Connect or retire the six remaining repo_map actions |
| E07 |
#2578 |
open |
Preserve explicit general-council stances and negated concessions |
| E08 |
#2671 |
open |
Enforce architect prompt budgets across supported feature combinations |
| E09 |
#2672 |
open |
Optimize instruction selection and caching with paired outcome evidence |
| F01 |
#2493 |
closed |
Make CLI, command docs, installation, and first-run activation correct |
| F02 |
#2494 |
closed |
Make first-class skills executable across supported hosts |
| F03 |
#2495 |
closed |
Materialize and prune release fragments safely |
| F04 |
#2496 |
closed |
Split close.ts along its existing stage boundaries without behavior change |
| F05 |
#2497 |
closed |
Extract a host-decoupled runtime and ship advisory headless CI |
| F06 |
#2498 |
closed |
Publish the gated GitHub Action |
| F07 |
#2499 |
closed |
Expose a read-only MCP verification surface |
| F08 |
#2500 |
open |
Add explicitly authorized MCP writes and client coverage |
| F09 |
#2501 |
open |
Complete Spec-Kit v2 multi-feature round trip |
| F10 |
#2502 |
open |
Close the autonomous PR babysitting loop |
| F11 |
#2503 |
open |
Ship the governed HarnessOpt capstone with held-out validation |
| F12 |
#2504 |
open |
Flip only proven defaults in v8 with migration and rollback |
| F13 |
#2564 |
open |
Wire issue-tracer v3 receipts and prove issue ingestion reaches a durable plan |
| F14 |
#2566 |
open |
Complete deferred issue-tracer v3 validator, portability and migration follow-ups |
| F15 |
#2579 |
open |
Preserve installer config strings and honor uninstall cleanup without host config |
| F16 |
#2580 |
open |
Make plan_cursor configuration effective in both context paths |
| F17 |
#2581 |
open |
Connect TODO evidence production to the configured completion gate |
| F18 |
#2582 |
open |
Implement or deprecate the automatic checkpoint threshold |
| F19 |
#2583 |
open |
Align scoring, context-budget and PRM configuration documentation with runtime |
| F20 |
#2600 |
open |
Bind the issue trace to its loaded plan and surface silent trace stalls |
| F21 |
#2601 |
open |
Detect and repair stale installed skill copies against the shipped runtime contract |
| G01 |
#2505 |
closed |
Ensemble adoption decision: license, provenance, and adopt-or-reimplement ADR |
| G02 |
#2506 |
closed |
Lane liveness: timeout watchdog and stall detection |
| G03 |
#2507 |
closed |
Dispatch protection: spawn circuit breaker and token-bucket rate limiting |
| G04 |
#2508 |
open |
Settlement merge safety and two-step destructive-purge pattern |
| G05 |
#2509 |
open |
Swarm dashboard: opt-in local mission-control view over swarm.db |
| G06 |
#2532 |
open |
Make parallel-first scheduling and phase progression use current plan bindings |
| H01 |
#2526 |
closed |
Verify current host guidance delivery and close only the remaining delivery gaps |
| H02 |
#2527 |
closed |
Worktree reclamation destroys sibling projects' live lanes and uncommitted work |
| H03 |
#2528 |
closed |
Per-agent tools maps are inert — 2,388 intended denies, none enforced |
| H04 |
#2529 |
closed |
The host's tool id is task; five plugin comparison sites test for Task |
| H05 |
#2512 |
closed |
Complete PR-workflow transition authority and critic settlement wiring |
| H06 |
#2511 |
closed |
Preserve delegation-read uncertainty and make workflow recovery status truthful |
| H07 |
#2584 |
closed |
Expose documented no-publication cancellation through the registered abort schema |
| H08 |
#2585 |
open |
Prove default-path PR-review completion with findings, recovery and restoration |
| H09 |
#2586 |
open |
Qualify PR-review completion across supported runtimes, hosts and enabled features |
| H10 |
#2602 |
open |
Make PR-workflow gate lifecycle safe across dead sessions, corrupt state, and checkout receipts |
| H11 |
#2614 |
closed |
Refuse unregistered lane agents at dispatch time (bare canonical roles on multi-swarm hosts) |
| H12 |
#2615 |
closed |
Typed terminal failure class and completion admission for accepted-then-dead, stale and cancelled PR-review lanes |
| H13 |
#2666 |
open |
Qualify the complete normal EXECUTE journey through actual supported hosts |
| H14 |
#2673 |
open |
Render swarm guidance for strict single-system providers without breaking caching |
| H15 |
#2680 |
open |
Validate final enabled swarm model selections and fallbacks during preflight |
Roadmap index — 2026-09-09
94 stable implementation slots: 48 closed and 46 open at this publication. Each implementation issue represents one PR. This index is administrative and does not represent another PR.
A–H preserve historical tracking categories and ordinal slots. They contain cross-category prerequisites. W1–W6 below are the independent execution groups for this audit program; those groups can proceed in parallel, with dependencies inside each group defining order. Unrelated existing product backlog retains its original scope and dependencies.
This publication adds 17 implementation issues, substantively updates 13 existing implementation issues, and synchronizes 55 other issues’ tracking metadata. The affected implementation program remains 30 PRs. #2614 merged through #2661; #2680 owns the remaining final enabled multi-swarm model-preflight gap, while #2614 stays closed.
Tracking overview
Complete slot ledger
task; five plugin comparison sites test forTaskIndependent execution groups
Each runtime PR owns its focused fixtures, behavior documentation, and required release fragment. It does not wait for a repository-wide CI framework or another execution group. New shared infrastructure is not an implicit prerequisite. Only the listed audit program is grouped here; unchanged product work remains in the complete ledger above.
W1: Agent execution, recovery, host compatibility and measured quality
#2664, #2665, #2666, #2671, #2672, #2673, #2676, #2680, #2491, #2492, #2540, #2503, #2583, #2585, #2586, #2615, #2510, #2602, #2502, #2578, #2600, #2564, #2601.
W2: Project-owned state and restart reconciliation
#2667, #2668, #2679.
W3: Startup loadability and latency
#2669, #2670.
W4: Subprocess lifetime contracts
#2674.
W5: Repository validation and CI enforcement
#2675, #2677, #2633.
W6: Bounded PRM stop episodes
#2678.
Prerequisite graph and scenario boundaries
Tracking order is not merge order. Original issue prerequisites remain binding within their stated scope; the graph below records the audit program’s active edges. Already satisfied #2469 and #2614 are resolved inputs, not active blockers. #2600/#2564 apply only to claimed issue-ingestion journeys; #2601 applies only to the installed stale-skill scenario.
#2578 remains the sole general-council parser owner; its integration is conditional on a caller actually consuming it. Default PR-review #2585 does not wait for the full #2586 matrix. #2502 consumes #2586 only for additional claimed host/feature paths. Normal EXECUTE #2666 is distinct from PR-review and feedback. #2503 is the held-out HarnessOpt capstone and never blocks basic recovery.
Active implementation vehicles
Update those existing PRs for their issue scope; do not create competing implementations. Recheck overlap before starting any other issue.
Other open inventory
Bot flake reports #2657 and #2660 remain outside the stable roadmap ledger and retain their own handling. This nonsecurity audit program does not add a security audit or make optional product surfaces prerequisites for ordinary execution.
Maintenance
[Workstream X] PR nn of NN: ...title format with zero-padded numbers and stable slots.of NNon every title in that stream, including closed issues; update the primary Sequence header where maintained. Preserve closed state and implementation history.is:issue "[Workstream H]" sort:title-asc.Concurrent merge during publication
The #2615 issue update was published while it was open. PR #2662 then merged at 2026-09-09T12:28:45Z and GitHub closed #2615 during readback. This index reflects the resulting 48 closed / 46 open tracking slots. The publication still changed 13 existing implementation issues and created 17; one of those 30 affected PRs has now merged. #2615 prerequisites are satisfied wherever listed. This records GitHub completion state, not a claim that a new runtime qualification matrix was executed by this publication task.
Primary Sequence header reconciliation
The metadata-only total is 55 issues: 40 denominator updates for the extended streams plus 15 pre-existing Workstream F primary Sequence headers corrected from 19 to the already-current total of 21. Titles, states, and original implementation obligations of those 15 issues are unchanged. This brings unique existing issues edited to 69: 13 scope/coordination updates, 55 metadata-only updates, and this index. The 17 new issues and 30 affected implementation PRs are unchanged.