TASK-AI-001
AI Gateway cost-ledger pre-call check
module: ai
priority: p0
status: done
verify: T
phase: P0
slice: 1
effort: 8h
Complete inventory of CyberOS Tasks — server-rendered at build time per TASK-DOCS-001.
AI Gateway cost-ledger pre-call check
AI Gateway cost-ledger post-call reconcile
memory audit-row bridge — canonical Writer for AI Gateway
Cost-hold expiry cleanup job — refund unsettled holds + emit audit
Tenant-policy YAML loader — per-tenant cap + warn + override + residency
Model-alias resolution (chat.smart → bedrock:claude-3.5-sonnet) with per-tenant override
Provider cost-table loader — YAML-backed, hot-reloadable rate table
LiteLLM-derived multi-provider router with retry + 30s failover SLA
Circuit breaker per (provider, model) with half-open recovery probing
Streaming SSE end-to-end (token-by-token to client)
Presidio EN-base PII redaction in-flight (every prompt)
VN-PII Presidio plugin (CCCD · MST · VN phone · NĐD · VN address · bank account)
VN-PII recall ≥ 99% per-recognizer CI gate on 200-sample fixture
Persona-version system-prompt injection from memory memories/personas/<handle>.md
ZDR (Zero Data Retention) attestation table + enforcement when tenant policy requires
Tenant residency pinning (sg-1 / eu-1 / us-1 / vn-1) propagating to provider region selection
Per-tenant Redis response cache keyed by (tenant × redacted-prompt × model × persona); ≥30% hit-rate P0 target
Cross-tenant cache leak property-test (hard zero) — 200K random ops + 7 regression scenarios + adversarial inputs
Self-hosted BGE-M3 embeddings (single L4 GPU sidecar) + ONNX-CPU fallback + adaptive batching
BGE-reranker-v2-m3 cross-encoder for KB reranking (per-region sidecar; CPU fallback)
cyberos-ai operator CLI (usage · models · policy · failover · invoice · breaker · expiry · memory) with --confirm + --json + audit
OpenTelemetry trace + span emission for every call (caller → router → provider → response) with W3C TraceContext + PII-safe attributes
AI VN provider integration — Viettel Cloud + FPT Cloud as Vn1-residency LLM/embedding providers with TASK-AI-016 region set extension
Local + external model providers (LM Studio + Ollama, no-key local)
Desktop CyberOS Ops UI — build/check/install from Tauri
macOS App Store distribution — sandboxed build, entitlements, notarization split, ASC submission
Microsoft Store distribution — MSIX packaging over the Tauri Windows bundle, Store-managed signing, Partner Center submission
Linux store distribution — Snap Store (snapcraft, strict confinement) and Flathub (flatpak-builder, external-manifest submission)
Package manager distribution — Homebrew Cask (macOS) and winget (Windows) manifests, external-repo PR submission
Tenant create — root-admin in tenant 0 calls POST /v1/admin/tenants with idempotency + RLS provisioning
Subject create — POST /v1/admin/subjects with bcrypt + role allow-list + idempotency + RLS-enforced cross-tenant blocking
RLS enforcement at every tenant-scoped table — USING + WITH CHECK + per-connection app.tenant_id + property test
JWT issuance + JWKS endpoint (RS256) with tenant_id + agent_persona + scope_grants + dual-rate-limit + jti dedup
Admin REST: list tenants + list subjects + revoke subject + unrevoke + cursor pagination + jti deny-list
cyberos-auth bootstrap CLI: tenant 0 + root-admin + initial signing key + sweepers + idempotency-table cleanup
AUTH 22-role RBAC catalogue — closed enum + permission matrix + role-assignment REST + JWT claims + ADR gate + stub→full migration
AUTH TOTP (RFC 6238) + WebAuthn Level 3 MFA — closed factor enum + enrolment FSM + challenge/response + recovery codes + sev-1 lockout + memory audit per factor lifecycle event
AUTH SAML 2.0 SSO — SP-initiated flow + per-tenant IdP config + XML signature verification + assertion validation + JIT provisioning + attribute → role mapping + replay defense
AUTH OIDC SSO — RFC 8414 discovery + RFC 7517 JWKS rotation + per-tenant IdP config + PKCE + JIT subject provisioning + claim → role mapping
AUTH Passkey enrolment + login — discoverable credentials (resident keys) + autofill UI + cross-platform sync + closed enrolment FSM + downgrade-resistance + memory audit per lifecycle event
Impossible-travel detection + adaptive MFA challenge
HIBP password breach check (k-anonymity) on signup + rotation
AUTH Lumi tenant-identity JWT shape — agent_persona + tenant_residency + lumi_org_tenant claims + persona-version stamping + cross-tenant sync identity
AUTH stub → full migration enforcer — 30-day grace window + cutover timestamp + rejection metric + per-tenant override
AUTH OIDC Provider - first-party authorization server (OIDC Core + RFC 8414 discovery, authorize with SSO-session / upstream-IdP brokering, token + id_token, userinfo, first-party RP client registry, PKCE S256, JWKS reuse, revoke-gated authorize)
SSO JIT provisioning must take the person's name from the ID token, not their email address
CyberOS-native chat - slice 1 (skeleton: channels, messages, live delivery, CyberOS-token auth)
Import Slack export archives into native chat
Import Zalo history into native chat
Real mobile/web push delivery
Per-subject DSAR export of chat data
@lumi assistant participant in channels
Rate limiting (subject + IP layers)
JWT hardening: aud always, iss pin, JWKS refetch on unknown kid
Account-wide socket kill on revoke (<60 s)
BYTEA attachment closeout (fs-only prod)
Edit-history revisions table
WS heartbeat + idle reaper
External synthetic probe (login-send-receive)
Metrics baseline + core alerts (Prom/Grafana/AM)
Staging compose profile + seeded tenant
Go-live checklist doc (living)
chat_events log + per-tenant seq (transactional)
Seq-stamped ws frames + client gap detection
POST /v1/chat/sync v1 (pos, subscriptions, initial/limited, reset) + log retention
Idempotent send: client_msg_id + unique index + echo reconcile
chat-core package skeleton + web SQLite/OPFS adapter (IndexedDB fallback)
Persistent outbox (FIFO, backoff, restart-safe, visible states) + connection-state contract
Store-driven rendering: messages/channels/read state + drafts from chat-core
Single account-scoped multiplexed socket (subscribe frames)
Socket hardening: resume hint, backpressure, envelope v, origin/frame caps
Convergence + outbox property suites
Offline end-to-end Playwright suite
chat-core as CI citizen (typecheck/unit/property gates)
Push relay worker (FCM v1 + APNs) + collapse keys + badges
Web push: VAPID + declarative payload
Quiet hours / DND schedule server-side
Desktop: bundle SPA into Tauri + CSP (web + shell)
Desktop: tauri-plugin-sql adapter + native notifications
Desktop: tray/badge, deep links + single instance, window-state/shortcut/autostart
Desktop: updater keys/channels + crash reporting + CI matrix
Version-skew policy: min_supported_client + blocking banner
Error tracking client + server (GlitchTip/Sentry)
Per-tenant feature flags + canary rollout habit
Capacitor init (ios/ + android/ committed) + release lanes live
Mobile: sqlite adapter + push plugin + deep-link tap-through
Mobile UX pass + store readiness (privacy forms, deletion path)
Attachments to object storage (presigned)
Upload pipeline: resumable, EXIF/thumbs, AV scan, orphan GC
Fan-out seam trait + LISTEN/NOTIFY backend + shared presence + push offline fix
Calls: coturn TURN + ring via account socket + push wake + call log + quality telemetry
PDPL ops: DSAR export, retention jobs, legal hold
PDPL governance: data mapping/DPIA, transfer assessment, breach playbook
Web: unread from event log (kill polls) + Chat.tsx refactor + virtualized list
Web: PWA completion, a11y AA + axe CI, perf budget, QoL batch
Sync v1.1: cold-start snapshot, lists/windows, offline local search, long-poll fallback
Ops drills: zero-downtime deploy, off-site backup + restore drill, runbooks, dep cadence
Load/fuzz/migration-gate/chaos/soak suites
Observability completion: OTel traces, capacity dashboard, SLOs + error budget
Product wave 1: pins, saved-for-later, forward/quote, notif-override UI, edit-history view
Group DMs + scheduled send + reminders
Link previews (SSRF-safe fetcher + cards)
Product wave 2: slash commands, custom emoji, status/DND states, jump-to-date/sections/mark-unread, templates
AI set: catch-me-up/summaries/action items (streaming), semantic search, @lumi assistant
API contracts: error envelope, OpenAPI, generated TS client, ws frame catalog
Ecosystem: incoming/outgoing webhooks, bot accounts, MCP tool surface
Imports: Slack then Zalo (idempotent, checkpointed)
Scale wave: Redis/NATS backend, load-shed order, partitioning, quotas, cold storage
Security completion: upload hardening, device/session UI, secrets scan, supply chain, retention policy object
External penetration test (scope: chat + auth + uploads + ws)
Encryption posture: honest security page + attachment encryption at rest
E2EE channel class on MLS (capture/AI/search off, labeled)
Attachment offline cache policy + sync conformance fixture
Calls extended: 1:1 screen share; SFU spike for group calls
Notification extras: offline email digest, delivery-ticks decision, Zalo/SMS bridge spike
Share-to-chat intent (mobile share sheet)
Admin data-governance panel (retention, holds, DSAR, consent, capture)
Decision memos D1-D6 prepared for Stephen (one page each)
In-app content reporting - report a message, an attachment, or a person
User blocking - stop seeing a person's content, and stop receiving their messages
Workspace moderation queue - an administrator reviews reports, acts, and is audited
CRM Account/Contact/Deal Postgres schema — closed entity primitives + custom pipelines + closed stage-template enum + RLS + deal status FSM
CRM activity feed — auto-log inbound email + outbound send + chat mention + calendar event to per-contact timeline
CRM VN account types + MST — legal entity classification (Sole/LLC/JSC/FDI) + tax ID field with format validation
CRM convert-to-engagement — deal.won → PROJ Engagement creation with rate card + billing_currency + recognition_method + AM assignment
CRM CUO crm.next-action@1 skill — AI-ranked top-3 next moves per open deal with rationale and deep-links
CRM AI lead scoring — contact-creation-time score + nightly refresh based on activity signals, account tier, engagement history
CRM win/loss analysis CUO draft — auto-generate analysis at deal close + memory memory persistence for institutional learning
CRM vietnam-mst-validate skill — synchronous GDT lookup on Account write to confirm MST format + entity name match
CRM vietnam-bank-transfer skill — VietQR payment image generation for deal collection with embedded amount + memo + bank routing
CRM vietnam-vat-invoice skill — Decree 123 hóa đơn auto-emit on deal.stage=won + invoice issuance + verification code retrieval
CUO Phase 2 — LangGraph supervisor + LiteLLM cascade + confidence-band escalation + persona-aware routing + memory audit per decision
CUO Postgres checkpointer for LangGraph state — persists supervisor graph state per run with EU AI Act Art. 12 logging
CUO Phase 2 trace rows include prompt + model + temperature + seed for deterministic replay
CUO topological walk of `depends_on` chain — orchestrates multi-step skill invocations with composite audit row + per-step sub-rows
CUO per-step rollback on chain failure — execute compensating actions in reverse order with partial-execution audit preserved
CUO supervisor Phase 4 — 5 special-case workflow handlers: time-critical SLA bypass, per-instance iteration, multi-output fan-out, sequential-approval gating, persona-pair partnership
Harness Wave 1 — read-only daily report of self_audit signals per skill
Harness Wave 2 — refinement-proposal emitter with stripe-based dedup
Harness Wave 3 — auto-bump applier for low-risk refinement proposals
Harness Wave 4 — workflow-level evolution via outcome distribution
Idle-time autonomous evolution - the dream loop under the AWH gate
Single backlog write path - /create-tasks delegates BACKLOG.md rows to backlog-state-update@2 (insert-row)
Ship run-state manifest (ship-manifest@1) - resumable 31-step chain + depends_on-aware queue selection
Portability hardening - install.sh gate autodetect for Go/JVM/.NET/PHP/Ruby + per-repo .cyberos/config.yaml overrides
task template profile - /create-tasks resolves engineering-spec@1 vs task@1 per repo, and the audit rubric follows
Vendor the full 14-stage SDP skill set by default - payload and plugin cover SOW through decommissioning, with a lifecycle map in GUIDE.md
ship-tasks queue is permanently empty: backlog_reader parses a table BACKLOG.md that nothing generates
Fail-closed machine gates - RED when zero gate commands are configured
Mechanical HITL lock - verdict-gated flips + memory.status_overridden
Unify the route-back ceiling - api.py default 2 vs doctrine's 3
ship-tasks evolution — batch/8 HITL + sub-batch doctrine
DOC Document repository — S3 Object-Lock Compliance bucket + per-tenant residency pinning + versioned + ACL'd + 10-year retention + hash-chained audit
DOC eIDAS QTSP integration — GlobalSign or Cryptomathic partner for EU residency qualified signatures
DOC AATL CA integration — Adobe Approved Trust List CA partner (DigiCert / Entrust / IdenTrust) for US/non-EU/non-VN residency
DOC VN CA chain — VNeID + VnPay/MK Group/Viettel-CA partners for VN-residency qualified digital signatures per Decree 130/2018
DOC multi-party signing workflow — ordered + parallel + counter-sign with reminder cadence and full audit trail
DOC identity verification — 4 methods (WebAuthn / VNeID / SMS-OTP / email-link) with per-document method selection + audit
DOC lifecycle metadata — parties + effective_date + expiry_date + renewal_terms + parent_contract_id for contract document substrate
DOC expiry alert cascade — 90/30/7-day notifications to parties + CLO with deduplication and snooze support
DOC renewal proposal CUO draft — auto-generate renewal terms + price adjustment + send-to-customer flow with AM approval
DOC third-party import — DocuSign / Adobe Sign / HelloSign migration with LTV (long-term-validation) preservation
DOC PAdES-B-LT format + year-9 LTV re-stamping — extend B-T signatures with validation data + re-timestamp before signature/TS authority expires
Server-render NFR catalog + Risk Register + task catalog at build time — Pagefind-indexed + crawler-visible + deterministic + Alpine reactive coexistence
Documentation single source of truth - module-owned markdown, generated website
Release roadmap visualization - a generated roadmap.html rebuilt on every release and deploy from task frontmatter + CHANGELOG + VERSION
Folder-per-task layout - <module>/<STEM>/{spec.md, audit.md, assets/} + loud regen + the 42 yaml-invalid tasks repaired
Per-task CDS HTML pages - every spec renders to its own self-contained deliverable page with assets
Status hub - one status.html: command deck + Roadmap | Backlog | Changelog tabs (supersedes roadmap.html)
Status hub v2 - dashboard UI (module cards, progress bars, chips) + zero-touch HTML regeneration on every task/backlog/version change
Land status-v3 preview + enforcement trio on main behind PR
Traceability required check + cutoff registry in config.yaml
status-feed@1 emission + validation in render-status-hub (pair-mirrored)
Epoch/shorthand/ledger commit classification in generator
Ledger relocation to docs/tasks/_state + task-lint validation
v3 client into modules/templates + shell swap + legacy emission
Legacy hash redirect map + noscript regeneration from feed
Port v3 DOM suite to tools/docs-site/tests with jsdom
Delete docs/status-v3-preview and move integration docs
Wide regen trigger + --coverage-only fast path
deploy.yml trigger widening + served-page freshness check
Installer: checker in payload lib, config scaffold, CI template
Release-range preflight (warn now, block at 1.12.0)
Mothership violation triage into reviewed ledger (148 rows)
Payload/channel verification matrix execution
Offline scratch-repo certification for status v3
1.12.0 release (was v2.0.0): changelog, Release-As PR, tag runbook, artifacts
Fleet discovery re-scan + classification report
Pilot migrations (zero-task, medium, sachviet layout)
Fleet rollout remaining repos + exception handling
Docs: status-feed spec, traceability runbook, help/AGENT-ENTRY text
Post-rollout watch + /cyberos:improve pass
EMAIL Stalwart Rust mail server deployment — JMAP + IMAP + SMTP + ManageSieve + MTA-STS + DANE + per-tenant residency + S3+KMS body storage + Postgres metadata
EMAIL Stalwart authbridge plugin — JMAP/IMAP/SMTP auth delegates to AUTH JWT validation + per-tenant mailbox scoping
EMAIL Missive-style team UX — shared inbox, thread assignment, internal comments, Genie actions panel, keyboard shortcuts
EMAIL DKIM signing + ARC chain forward + BIMI brand indicator — RFC 6376 + RFC 8617 + BIMI 1.0 per-tenant outbound auth
EMAIL CaMeL dual-LLM security layer — Privileged-LLM plans, Quarantined-LLM parses untrusted email content (prompt-injection defense)
EMAIL tracked-domain → CRM auto-link — inbound message from tenant-tracked domain auto-creates/links CRM contact + thread association
EMAIL convert-to-issue — one-click create task-PROJ issue from message with thread backlink + attachment carry-over + AI summary
EMAIL Genie prefix — inbound subject prefix routes message to Genie (Branded AI) for automated drafting + action proposals
EMAIL outbound 1:1 send — DKIM-signed via TASK-EMAIL-004 + AM confirm-before-send + queue + bounce handling
EMAIL bulk send (≥ 10 recipients) — AM + CFO/marketing dual-approval token + suppression-list filter + rate-pacing
EMAIL DSAR message export — every message a subject authored or received + chained memory audit hashes for TASK-PORTAL-008 bundle
ESOP SP grant schema — Stock Plan grant with 4-year vesting + 12-month cliff default + per-grant immutable params
ESOP monthly vesting accrual deterministic batch — runs EOM tenant_tz computing per-grant vested shares with cliff respect + immutable accrual rows
ESOP annual valuation — CFO base + Board multiplier sign-off with immutable share-price snapshot per year
ESOP put-option exec flow — Year 3+ eligibility + per-Member annual cap + CFO approve + bank wire via TASK-INV-005
ESOP Good/Bad Leaver branch on HR offboarding — CFO+CEO co-sign to apply forfeiture/acceleration per termination_kind
ESOP M&A acceleration trigger — Board declares M&A event + 5-business-day Member notice + full vesting acceleration for all active grants
ESOP Member dashboard — personal view only (own grants + vesting + estimated value); cross-Member access requires CFO audit
governance, consent, access-control + retention layer — versioned monitoring notice + per-subject acknowledgment gate + data-category/purpose registry + per-category retention sweeper + manager/self access grants (tenant RLS + audit row per read) + data-subject rights — the Phase-0 gate every BRAIN/EVAL capture and evaluation depends on
evaluation rubric from the three signed employment documents — versioned, effective-dated, bilingual VN/EN; each item cites its exact source clause (document + clause_ref) so an assessment can name the contract clause it measured against
Evaluation engine — GENIE evidence-linked auto-scoring against the TASK-EVAL-002 rubric with a mandatory human-in-the-loop gate before any assessment is final
manager + employee evaluation views — access-restricted console panel over the eval service; founder/manager-of-report/self-only reads, the auto-score shown as a clearly-marked DRAFT requiring human approval before it is final, and the employee's right to see + respond to their own record; every cross-person read audited
HR Member schema — profile + role + level + contract type + leave balance + sabbatical accrual + status FSM + comp-exclusion CI gate
HR 5 contract types — indefinite + fixed_term + probation + part_time + contractor with per-type leave + benefit rules
HR CCCD photo KMS — separate keyspace for VN citizen ID photos with sev-1 access audit + ROOT-CHRO-only key access
HR 8 leave types — annual/sick/maternity/paternity/sabbatical/unpaid/bereavement/public_holiday with per-type accrual + approval rules
HR Decree 145/2020 working-hour caps + Decree 152/2020 SI rates — version-pinned policy constants with annual refresh + tenant override
HR annual leave accrual nightly batch — Decree 145 formula (1d/month + 1d/5yr seniority bonus) with immutable accrual ledger
HR onboarding saga — orchestrates AUTH + TIME + LEARN + KB + CHAT + REW provisioning on member.active transition with compensating rollback
HR performance signal aggregator — read-only consumer of PROJ + TIME + LEARN signals for periodic performance snapshots
HR termination workflow — Good-Leaver / Bad-Leaver branch with CFO+CEO co-sign + ESOP forfeiture + access revocation cascade
npm audit + license gate for install tooling
Refuse dev CORS in production boot
Secret scanning in CI and pre-push
Deploy observability stack to P0
External uptime probes and alerting
Canary healthcheck and auto-rollback in deploy
apps/web test spine
Goldensets as first-class gate inputs
LLM call ledger in ai-gateway
Telemetry-to-task bridge
Structured gate-failure taxonomy
Coverage measurement and ratchet
Cross-service contract tests
External audit-chain anchoring
Nightly chain-integrity monitor
Staging environment
OTLP tracing export
Prometheus metrics endpoints
SLO definitions and burn-rate alerts
task outcome scoring
Rubric evals for LLM outputs, anchored judge
Ban defensive asserts
Groom draft tasks with value and confidence
Dream proposal ranking
Dream budget, latency and drift gates
Auto-revert on gate regression
Enable auto mode for docs/skills envelope
ACE-style skill curation loop
Paired-trajectory skill audits
QLoRA fine-tuning pilot (obs triage)
Unified error envelope crate
Extract cyberos-service-kit
Wire cloud router adapters in ai-gateway
Chat realtime fanout seam
unwrap/expect burn-down and panic removal
Finish and property-test audit-chain crate
OpenAPI generation per service
Extend RLS property gate, cross-tenant probe
Load and soak test suite
Mutation testing pilot on shared crates
Secrets inventory and rotation runbook
Rate limits beyond login
Payload supply-chain: pin Actions, emit SBOM, checksum posture
Automated dependency updates (Dependabot)
Session and token security validation
Backup independence and restore drill
Rebuild-in-60-minutes runbook
Build caching with cargo-chef
Deploy events into audit chain
Client and service error tracking
Least-privilege DB roles and layout doc
Migration discipline CI check
pgvector operations plan
Generalized retention schedule
Spec-only module manifest
API versioning and deprecation policy
Frontend state and fetch consolidation
ADR backfill for irreversible decisions
Wiki link-integrity gate
Generated CONTINUE-HERE
BRAIN Phase 0 consent completion
Quarterly envelope review ritual
Track A: serve a chat model in P0 and verify AI end-to-end
Track B: desktop signing, auto-update, release verify
Track B: mobile shells and store release pipeline
Track C: brain activation rollout (deploy, notice, ack, capture)
Go-live readiness gate (safety nets before fully on)
Payload-version drift gate - CI and git hooks fail when any dist/plugin stamp differs from VERSION
Publish the versioned payload + Claude plugin as GitHub Release assets on every vX.Y.Z tag
Remote update awareness - /update and install.sh --check compare installed vs latest published release, not the local payload
Durable release trigger - version bumps drop [skip ci] so tag pushes fire release.yml natively
Repo-wide version consistency - every version-bearing file moves with VERSION, enforced at bump, gate, and hook
Fix Capacitor mobile app icon — Android + iOS shells ship Capacitor's default placeholder instead of the CyberSkill brand icon
Ship-workflow hardening — status-page auto-sync, batch/parallel task shipping with unlock rescan, rules-to-channels distribution sync
MAS updater exclusion — `mas` cargo feature compiles the self-updater out of the Mac App Store build
Distribution expansion — root CLI .sh commands (install/update/changelog/help) + remote MCP connector transport for agent UIs
iOS icon alpha flatten — ASC 90717 hotfix: 1024x1024 marketing icon must carry no alpha channel
Store build-number monotonicity — release-time floor decouples re-tags from BUILD_NUMBER bumps (Play versionCode 10706 collision)
Docs-ship race — shared staging dir between deploy.yml and release.yml docs jobs; fixed by a single ship script with per-run staging + flock'd swap
Served-bundle version drift — live site announced v0.1.0 after the 1.0.0 release; refreshed bundle + version-sync gate coverage for apps/console/web
CI leg rebuilds + recommits apps/console/web on real source changes - structural follow-up to TASK-IMP-080's served-bundle version-drift fix
Status page provenance stamp becomes a corpus fingerprint (byte-stable)
install lands the status-sync hook where core.hooksPath points
task-lint, a deterministic machine floor under the task-audit rubric
Doc-driven workflow helpers, ship-manifest and backlog-mutate CLIs
Backfill the improvement backlog index rows 068-081 to frontmatter truth
Release-readiness checklist for 1.0.0 at docs/release/
install scaffolds task_template task@1 in consumer config.yaml
task@1 template drops the duplicate out-of-scope section 4
task-author manifests default to untracked .workflow session state
regen_backlog emits every status and recomputes Totals from frontmatter
Lost-update hardening, retally headers and committed-object evidence
memory-append CLI, doc-driven runs can append chained BRAIN rows
Channels, shared .agents/skills dir plus Devin and Windsurf rules
gates.env regeneration names its backup and the durable home
Non-git installs state the ship-tasks git requirement
GUIDE gains the sandboxed-agent runbook section
coverage-scope helper maps a task diff to per-file coverage
Queue selection prose ranks p0-p3, MoSCoW wording retired
task-reconcile, evidence ladder and report for drifted task states
ship-tasks reconcile entry phase and depends_on evidence gating
Audits bind the normative half, not bytes the workflow rewrites
Install concurrency lock
Refuse an older payload over a newer .cyberos
Task-id allocation rule + next-id helper
Uninstall summary names what it kept
End-to-end mechanical smoke test
Split the statuses doing two jobs
Standing goals - re-verify done, forever
Outer loop - propose skill amendments from run evidence
The plan workflow
Structured review findings alongside the prose packet
Skill trust measurement - pass rates as a report, not a gate
Cost and cycle telemetry - make the loop's economics visible
Effort tiering - advisory judgment metadata on skill_chain steps
Every mutation emits the whole file's truth, not just its section's
The template teaches the violation it is linted for
A test that cites a clause must test that clause
A declared cone is a promise nothing checks
The index moves without the truth, in both directions
Uninstall must leave the repo as it found it
rules_sha must be recomputed, not recalled
Authors do not check what they originate
mechanical means deterministic, not docs-tools/
Uninstall completeness - MCP, dangling skill links, hook newline
Payload build MUST read from git, not the working tree
Run the test suite in CI on ubuntu
Uninstall MUST preserve .cyberos/config.yaml, the override home
Rename the public CyberOS CLI bin from `cyberos` to `cs`
Add a `memory` verb to `cs`, gated on local availability
Add a `cuo` verb to `cs` as a redirect stub
Homebrew tap: update cyberos-cli.rb for the cs rename
End-to-end regression for the cs/memory/cuo rename
Publish npm release shipping bin.cs for the rename
CI truth - CAF evals in root CI, hook-claim honesty, stub workflow sweep
Install portability - MCP loopback+token, shasum fallback, atomic vendor
Platform entry-point identity - thin spine vs explicit dual identity
Corpus hygiene - UNREVIEWED fork, module-case lint, stuck-WIP triage
Benchmark gates G1-G16 - checkers, risk register, BRAIN recording
MMR sync for memory-append — doctor stays READY after gated flips
Schedule MCP/OBS resume wave after IMP-139 triage
1.4.x — stuck-WIP hub sentinel + signed HITL verdict artifacts
1.5.0 — transition-locked state engine (close frontmatter bypass)
TRACE citation truth — SKILL-202 and gates G7/G8
memory-append --dry-run — rehearse an append, write nothing
Ingest inspect-harden — four skills, /inspect+/harden, conductor clarity
INV invoice substrate — draft invoices from TIME per-cycle rollup with rate-card snapshot preservation + closed enums + lifecycle FSM + per-line traceability
INV multi-currency support — VND/USD/SGD/EUR/GBP with daily SBV FX snapshot + per-invoice currency lock + cross-currency reporting
INV Stripe webhook handler — Stripe-Signature verify + closed event-type allowlist + idempotent receipt insert + multi-currency + append-only ledger + memory audit
Wise webhook handler for multi-currency receipts (USD / EUR / GBP / SGD / JPY)
INV VietQR / Napas247 webhook handler — HMAC-SHA256 signature + idempotent receipt insert + reference memo parsing + append-only ledger + memory audit
INV cash application — closed 4-step matching cascade (exact-ref → amount+date → fuzzy-fraction → manual) + atomic ledger reconciliation + partial allocation + over-allocation block + memory audit per match
INV VN hóa đơn auto-emit on AM-send — Decree 123/2020 GDT XML signing + idempotent transmission + verification code retrieval for VN tenants
INV VN hóa đơn cancellation flow — Decree 123 Art. 19 replacement-or-cancellation protocol with GDT 1-1 mapping + amendment audit
INV AR aging report — current/30/60/90/120+ bucket rollup per customer + per engagement with as-of date determinism
INV CUO dunning draft — auto-generate polite/firm/legal-warning email drafts per aging bucket + CFO review queue + send-via-TASK-EMAIL-009
INV revenue recognition — ASC 606 / IFRS 15 compliant deferred-revenue rollforward with monthly journal entries + per-engagement schedule
Wise webhook HTTP host — POST /v1/webhooks/wise/{profile_id} + 24h key cache + WAL processor
KB Document schema — slug + markdown body + YAML frontmatter + closed category enum + 3-tier ACL + immutable versions + translation_of
KB server-side renderer — markdown → sanitised HTML (ammonia) + sanitised plaintext for memory ingest
KB 3 permission tiers — public / org-only / role-restricted with share-link tokens for time-bounded external access
KB FTS5 + PGroonga lexical search — VN bigram tokenisation + English stemming + per-tenant index with tier filter
KB BGE-M3 semantic search — memory Layer 2 vector ingest + dense embedding query with chunk-level retrieval
KB BGE-rerank-v2-m3 cross-encoder — reranks top-K results from TASK-KB-004 lexical + TASK-KB-005 semantic to final ordering
KB Ask-this-page Q&A — CUO-grounded answer over current + linked docs with span-level citations and answer-or-decline gate
KB runbook category — applicability tags (provider / region / severity) for OBS triage with TASK-OBS-007 incident routing
KB dual-language `translation_of` link — vi/en pairing with locale-aware reader display and translation parity audit
LEARN skill tree schema — 1-5 mastery levels per skill per Member with parent-child skill graph
LEARN bằng cấp + chứng chỉ — degree + certification evidence types with issuer + expiry + verification link
LEARN VP (Voting Power) deterministic nightly roll-up — aggregates PROJ + TIME + KB contributions into per-Member VP score
LEARN Hội đồng Chuyên môn (Specialist Council) — 3-5 judges + multi-dim scoring + per-judge anonymity within council
LEARN per-judge score isolation — never exit LEARN boundary; HR receives only summary + recommendation
LEARN promotion approval workflow — CEO + CHRO sign-off after council vote with cascade to HR + REW comp band update
LEARN VP score → REW BP fund distribution handoff — quarter-close trigger emits aggregate VP shares per member to REW for fund allocation
MCP Gateway 2025-11-25 spec compliance — initialize + tools/list + tools/call + capabilities negotiation + Streamable HTTP transport + tool annotations
MCP per-module server registration + heartbeat lifecycle — 3-miss → unhealthy with automatic skill_unavailable propagation
MCP SEP-986 naming validator + CI gate (cyberos.module.verb_noun)
OAuth 2.1 PKCE authorization-code flow with audience-bound tokens for MCP servers
MCP Protected Resource Metadata (RFC 9728) well-known endpoint
MCP destructive-tool gating via elicitation confirmation
MCP Tasks primitive — handles, status poll, cancel lifecycle
MCP elicitation store with confirmation round-trip
Layer-2 ingest pipeline (binlog → pgvector + Apache AGE) — chain-anchor verification + 1s p95 lag + per-tenant cursor + idempotent UPSERT
Layer-2 rebuild-from-Layer-1 CI gate — deterministic rebuild + spot-check + 30min budget + mid-rebuild resume + multi-tenant
memory-sync daemon — laptop A ↔ Cloud memory ↔ laptop B with sync_class gating + CRDT conflict + 10K offline buffer + device-id stamp
Tauri 2.x desktop app — macOS + Windows + Linux signed/notarised + auto-update + tray + quick capture + Full Disk Access
cyberos doctor — watched-folders integrity invariants (manifest ↔ filesystem ↔ HEAD reconciliation; 5 new invariants in memory.invariants.yaml)
memory sync_class enforcement — private vs shareable + ACL filtering + structural compensation exclusion + property test
memory capture daemon — Rust + notify crate FS watcher with rate-limit + content-dedup + backpressure + W3C trace propagation
memory search — vector + graph + full-text in parallel + RRF fusion + BGE-rerank + RLS + ACL + chain_anchor verify + 250ms p95
Claude Code hook capture — UserPromptSubmit + PostToolUse + Stop hooks emit memory memories with prompt + diff + trace correlation
memory capture daemon supervision — systemd + launchd units + /healthz + watchdog + crash-restart with exponential backoff + sweeper cron
memory pre-ingest PII detection — Presidio EN + custom VN recognisers; ≥ 99.5% held-back recall on labelled fixture; auto-redact at capture boundary
memory episodic memory — `kind: episode` frontmatter + `cyberos recall-similar` API; task / approach / outcome / quality_score per Episode; reflection-loop foundation
memory recall ranking — Park-et-al combined score (relevance · 0.4 + importance · 0.3 + recency · 0.3) with configurable Ebbinghaus decay; MARS-aligned forgetting curve
memory write-time importance scoring — cuo-Phase-3-pattern Invoker (mock-llm + anthropic); haiku-rated `meta.importance` filters noise at the source; opt-in via `cyberos put --score-importance`
memory dreaming — `cyberos dream` out-of-band batch reflection that mines transcripts + episode rows for cross-session patterns; produces reviewable diffs that consolidate / mark-stale / verify / propose-new memories under explicit operator gate
memory consolidate — semantic-dedup phase (Walk → Compact → Sign → Publish → SemanticDedup); shares duplicates detector with TASK-MEMORY-115; opt-in via --semantic-dedup; dry-run by default
memory per-store ACL — `STORE.yaml` per top-level subtree (memories/ meta/ company/ client/ project/ persona/ episodes/) auto-generated on migration; writer enforces ACL on every put/move/delete; reads remain unrestricted to local processes
memory put_if — optimistic-concurrency primitive with content-hash preconditions; many-agent contention without clobbering; canonical-ops extension §3.1
memory session transcript ledger — opt-in `cyberos session {start,append,end}` writes turn-level transcript rows under sessions/<date>/<id>.binlog.zst; default classification=confidential; configurable retention; feeds TASK-MEMORY-115 dream
memory history — `cyberos history <path>` surfaces per-file version + attribution from the audit chain; REST `/api/v2/memories/<path>/history`; dream-applied + session_id annotations rendered inline
interaction-event schema & contract — the one work-interaction event shape (event_id, subject, module, event_type, target_ref, content_ref) every module emits into l1_audit_log, versioned + RLS + emit API; the single BRAIN capture primitive
capture emitters — wire AUTH (sign-in, presence) + CHAT (message create/edit/delete, channel/DM activity) to emit TASK-MEMORY-121 interaction-events, turn ON the chat→brain audit link (CHAT_AUDIT_DATABASE_URL), define the emitter contract for PROJ/EMAIL/APP/MCP, gated by the consent check; day-1 wide capture
BRAIN ingestion + embedding + rolling summaries + hot/warm/cold tiering + access-scoped recall — the interaction-event log becomes a fast, persistent, citable brain (HNSW sub-second recall, summaries-first, audit chain stays system of record)
memory.awh_gate_result aux audit row - the awh out-of-band gate verdict, emitted into the memory chain by the ship-tasks testing->done step (step 28)
JWT auth on /v1/memory endpoints (kill header-trust identity)
Fail-closed RLS on brain tables (drop NULL-GUC arm + nil-uuid bypass)
RLS with FORCE on l1_audit_log, l2_memory, l2_entity, l2_edge + cross-tenant probe
Per-principal and per-tenant rate limits on recall/search
Fix dead recall confidence floor (use real cosine, not constant 1.0)
Batched candidate pipeline - snippets filled, one-query verify, set-based access check
Light up ai-gateway /v1/embeddings route + memory-side contract test
Metrics correctness - embed_malformed label, per-leg recall latency spans
Golden recall eval runner + 25 seed cases wired into CI
Architecture ADRs - single memory plane, Rust-in-Tauri sync, no CRDTs for memory rows
Pin pooled-connection GUC behavior; standardize on app.tenant_id
brain_fact table + memory_kind taxonomy (episodic/semantic/procedural/profile/resource)
Fact write pipeline - extract then ADD/UPDATE/DELETE/NOOP with chained op audit
Content-aware ingestion - dereference content_ref pointers under RLS, embed redacted content
PII sidecar (Presidio + VN recognizers) in the cloud ingest path
Abstractive summaries via gateway chat (extractive digest stays as degraded mode)
Incremental summarization - queue off hot path, window-bounded scopes, version-race fix
Summary hierarchy - leaf/mid/root with subject profiles as default injected context
Lexical retriever leg in brain recall (tsvector + pg_trgm) fused via RRF
Cross-encoder rerank stage (BGE via embed-sidecar) over fused top-50
Park scoring + MMR - relevance/importance/recency weights, access_count, last_accessed_at
Contextual embedding - situating prefix (who/where/when/kind) at embed time
Query rewriting - relative-time parsing (EN+VN) and subject-handle expansion
Write-time importance scoring with anchored rubric (TASK-MEMORY-114)
Day-1 emitters (chat/auth/proj/obs) + real consent gate wired to TASK-EVAL-001 ledger
Embedding lifecycle - halfvec, content_hash+embedded_at, batch embeds, version-pinned indexes, migration runbook
Warm-tier reachable on drill (honor documented behavior)
Recall API v1.1 - keyset pagination, scores breakdown in explain, feedback endpoint
Query-embed LRU cache + EmbedClient in AppState
Bi-temporal l2_edge - valid_at/invalid_at/expired_at + invalidation not deletion
LLM entity extraction + resolution, graph recall leg, query-shape router
Sync server - shape-scoped seq stream down + idempotent outbox endpoint up
Tauri SQLite client - synced/local tables, combining views, changes outbox, sync worker
Derived-data policy - server recomputes embeddings/summaries; optional embeddings-down + sqlite-vec
Desktop at-rest encryption - SQLCipher + OS keychain + file perms
Offline capture outbox + hydration (hot window snapshot, cold on demand)
Device identity - device_id on chain rows, device-scoped JWTs, per-device limits
Sync test matrix + chaos suite (offline x concurrent x crash x replay)
Retention policy engine + reaper (per-kind TTLs, archive not delete)
Erasure - crypto-shredding (per-subject DEKs), lineage cascade, ghost-vector reindex, backup re-deletion
PDPL 91/2025 pack - DPIA, CTIA draft, consent mapping, evidence cadence
Recall read-audit rows (who searched whom) on the chain
External chain anchoring + nightly chain-integrity walker
Rust denylist enforcement at emit/ingest + admin binary hardening
Calibrated LLM judge + golden-set growth + internal LongMemEval-style benchmark
Usage-signal loop - retrieved/used/cited counters, used-ratio demotion
Dream loop on the BRAIN - four detectors, proposal queue, gated applier, rewrite caps, ACE playbook curation
Promotion + dedup + contradiction jobs, eval-gated with auto-revert
Retrieval config A/B + shadow evaluation on sampled live traffic
GEPA prompt optimization for extraction/summary/judge prompts
Self-healing job registry + drift sentinels + backpressure/DLQ
Telemetry to standard + memory-ops console tile + weekly auto-report
Poisoning defenses - source trust scores, quarantine, quoted-data prompt wrapping, red-team suite in CI
Calibrated abstention - confidence output + not-in-memory behavior + false-memory metric
MCP memory server + Anthropic memory-tool file adapter
Perf + scale pass - tenant registry, parallel ingest, l2 HNSW decision, SLO smoke, partitioning plan
Module-author guide + per-module namespaces and spend budgets
Lumi integration - recall-API-only access, mandatory citations, personal/company boundary published
brain_common test harness fix so the brain DB suite runs (raw_sql + once-per-process migrate)
summarize scope-filter placeholder fix + access-scope SELECT 1 INT4 decode
Reconcile layout-root-canonical with the store scaffold (top-level artifact dirs)
applier.py raw-writes artefacts to the BRAIN root, bypassing the canonical writer and AGENTS.md §2
Memory hardening - schema single-source, INTEROP.md, walker + doctor
OTel collector scaffold + LGTM compose (validate-config, PII scrub)
Tenant-aware Grafana proxy (Rust) — AST-injects tenant_id into PromQL/LogQL/TraceQL with anti-bypass + property test + audit log
RED metrics via cyberos-obs-sdk (axum middleware + cardinality guard)
LangSmith integration for AI traces — self-hosted + per-tenant opt-in + redacted-prompts-only + W3C TraceContext correlation + async non-blocking
W3C TraceContext correlation (SDK + ai-gateway middleware + auth JWT)
Tail-based sampling at OTel collector — 100% errors/5xx/slow/flagged + 10% normal + decision_wait + flagged-tenants config
obs-router: Alertmanager → CUO triage-alert → CHAT or PagerDuty
OBS compliance views: scoped JSON API + Ed25519 proof
OBS chain-of-custody manifest: Ed25519 sign + verify CLI
OKR Objective × Key Result schema — Company → Team → Member cascade + quarterly Cycle + closed alignment FSM + RLS + face-saving status enum
OKR 3 KR types — hit_target + improvement + milestone with type-specific progress calculation
OKR KR progress_source DSL — declarative query against PROJ / INV / HR / LEARN modules for auto-progress feed
OKR auto-progress nightly batch — resolves all KR progress_sources + updates current_value + emits drift alerts
OKR weekly check-in — 1-10 confidence + rationale per KR with rolling 4-week history + trend visualization
OKR Monday-morning CUO digest — auto-progress + check-ins → founder summary delivered via email/chat at 08:00 Monday
OKR quarterly retro CUO draft — auto-generated retro with face-saving Vietnamese framing for honest reflection
Plugin manifest schema v1.0.0 — canonical plugin.json validated against manifest.schema.json with cyberos-plugin pack reference packer
CyberOS MCP bridge server — exposes CUO/memory/SKILL tools over MCP 2025-11-25 protocol; single binary with stdio + HTTP transports
Canonical slash-commands — /cyberos-run, /cyberos-memory, /cyberos-skill-list, /cyberos-route markdown definitions in modules/plugin/commands/
Skill playbooks bundle — Anthropic-Agent-Skills SKILL.md files teaching hosts how to chain plugin tools correctly
Plugin OAuth-PKCE authentication — install-time authorize + 24h refresh-token rotation against auth.cyberskill.world
memory audit emission — every plugin install/update/uninstall/invoke/auth event produces a plugin.* audit row with idempotent retry queue
Multi-runtime adapters — cyberos-plugin pack --target {claude-code,cursor,cowork,codex-cli} emitters; deferred targets in P2
Marketplace distribution — cyberos-plugin publish pushes signed bundle to plugins.cyberskill.world + mirrors to agentskills.io; revenue-share + vetted badge
PORTAL scoped read-only views — PROJ/INV/DOC/CHAT filtered by Engagement membership + sync_class=client-visible + per-row redaction + GraphQL-style projection
PORTAL per-tenant brand pack — logo + colour palette + custom CNAME + email template overrides + ACME-issued TLS cert + brand-asset versioning
PORTAL external IdP — SAML 2.0 + OIDC sign-in for client-tenant users + SCIM 2.0 JIT provisioning + per-Engagement IdP binding + claim → role mapping + signed-attr trust chain
PORTAL SCIM deprovision — session invalidation ≤ 30 s on IdP user removal + grace period + cascade revocation + dual-channel kill (JWT blacklist + WebSocket close)
PORTAL branded Genie chat — CUO scope-narrowed by JWT scope_grants + per-Engagement brand pack + IdP-auth session integration + cross-tenant boundary enforcement
PORTAL client-initiated workflows — new project request / billing inquiry / support ticket → CHAT thread with SLA + auto-routing + status tracking
PORTAL PWA installable — mobile-first Progressive Web App with offline-capable view cache + push notifications + per-tenant manifest
PORTAL DSAR self-service — GDPR Art. 15 + PDPL Art. 17 client-initiated data subject access request with 30-day SLA + async export bundle + redaction audit
PROJ Issue + Cycle + Engagement schema — RLS + cross-module linkable + status FSM + audit + assignee validation
memory-anchored proj.decision row per Issue state change — reason + prior_chain link + cross-module references + ACL + audit-before-action
Yjs CRDT for issue description + comment-body fields; LWW for scalar metadata; reconnection state recovery; conflict-free multi-cursor editing
Issue lifecycle FSM — backlog → todo → in-progress → in-review → done | cancelled with TASK-PROJ-002 audit trail, validation, and forward-only enforcement
Rate-card schema per Engagement — (role × currency × hourly_rate × billable_default) with effective-date versioning and TASK-AUTH-003 RLS
Billable cascade — Member-override → task-class → role-default → fallback; resolution snapshot at time-entry write
Three billing modes — Time & Materials, Fixed-Fee, Retainer — with mode-aware rollups and per-mode invoice generation hooks
memory audit row per issue mutation — chained to PROJ history_event table with field-level diff and chain_anchor verification
MEMORY_LINK schema — Issue ↔ memory memory linkage (cites | implements | supersedes) with bidirectional traversal and link-graph queries
Citation drift detector — nightly sweep flags stale MEMORY_LINKs (deleted target, superseded chain, broken memory_row_id) with operator notification
Blocker detector from comment stream — `blocked by` parser + dwell-time monitor + CUO Notify on stale blockers
Cycle-review draft generator — CUO/COO-persona LLM compose at cycle close with completion stats, blocker recap, and editable memory draft
Estimate calibration snapshot — per-member per-task-class nightly batch with Bayesian update and operator-visible accuracy trend
Kanban Board view — drag/drop status transition + keyboard-first navigation + 60fps virtualised list rendering
Timeline view — cycle window × assignee swimlane with day-grid layout, drag-resize for date changes, and milestone markers
Gantt view with dependency arrows — issue-to-issue precedence + critical path highlighting + roll-up to parent issue
Brief Modal — issue deep-view with Yjs description editor + threaded comments + LWW meta sidebar + presence cursors
Liquid-Glass design tokens (tokens.proj.css) + axe-core CI accessibility gate + Storybook visual regression
RES capacity-vs-demand matrix — nightly join across HR + PROJ + TIME + LEARN producing per-member-week capacity/demand grid
RES allocation Gantt UI — drag-rebalance interface over capacity matrix with optimistic concurrency + commit-on-save
RES over/under-allocation flags — 110% warning / 60% under-utilization threshold with weekly digest to CHRO
RES hiring memo CUO draft — skill-gap × CRM pipeline trigger → CEO+CFO review queue with cost-benefit projection
RES VN Labour Code Art. 107 OT cap hard-block — propose-time validation gate preventing weekly + annual OT overflow
REW 3P income schema — P1 Base + P2 Allowance + P3 Performance with separate encrypted comp keyspace isolated from HR
REW parameter versioning — immutable versioned formula parameters with 100% replay-equivalence on prior payslips
REW P1 protection invariant — DB CHECK constraint + service-layer guard forbidding any P1 cash reduction (raise-only)
REW statutory deductions — BHXH 10.5% + BHYT 1.5% + BHTN 1% + PIT progressive per Decree 152/2020 with TASK-HR-005 policy lookup
REW monthly payroll compute + CFO+CHRO co-sign commit gate — orchestrates 3P + deductions + net pay with dual-sign before bank send
REW byte-identical payslip PDF render — Tectonic + pinned fonts produces deterministic PDF bytes for verification
REW BP (Bonus Points) ledger with ACB-rate interest accrual nightly + per-Member balance + immutable transaction log
REW quarterly P3 distribution from BP fund — CEO+CFO sign-off + LEARN-007 VP share splits + debit BP balances
REW VietQR bank payroll batch send — bulk transfer file generation with CFO manual confirm at submission to bank
REW memory structural exclusion CI gate — no comp fields appear in memory-ingest paths; static analysis + runtime check
Skill memory integration — skill.invoked_started + skill.invoked_completed audit rows (skill.* namespace) + args_hash + trace_id propagation + panic-recovery
Self-hosted OCI registry for .skill bundles — cosign signing + tenant-scoped + immutable tags + 100MB cap + audit
SKILL.md frontmatter extension — allowed_memory_scopes + allowed_tools + version + signature enforced by capability broker
Capability broker — subprocess sandbox enforces allowed_tools + allowed_memory_scopes at invoke time; tool-name allowlist + path-glob allowlist + timeout enforcement
memory-capture@1 skill bundle — canonical SDK-style entry point for emitting memory capture rows from tools, scripts, and external integrations
memory-sync@1 skill bundle — operator-facing sync trigger that defers to Stage 4 orchestrator (slice-3 stub; full sync ships P2)
synthesis-author@1 skill — nightly multi-memory auto-evolve composes derived memories from clustered raw captures (P3 — stub scaffold in P1)
vietnam-mst-validate@1 skill — Vietnamese Tax ID (MST) validation against General Department of Taxation (GDT) public registry
vietnam-bank-transfer@1 skill — VietQR + Napas247 transfer-code generator with bank-prefix validation, memory audit, and per-transfer idempotency
vietnam-vat-invoice@1 skill — Vietnamese e-invoice (hóa đơn) Decree 123 XML emitter with GDT submission, digital signature, and per-invoice audit trail
SKILL.md `description:` field — mandated trigger-phrase enrichment + 1024-char budget for host-portable triggering
`acceptance/TRIGGER_TESTS.md` convention — positive + negative trigger phrases verified against the supervisor classifier
SKILL.md frontmatter — replace XML-bracket sentinel `wrap_in: <untrusted_content/>` with string-form `wrap_in_marker: \"untrusted_content\"` for host-portable load
BASELINE.md artefact at v0.x → v1.0 promotion — design-time performance baseline + with/without-skill comparison + token-budget transparency
Sweep stale `<placeholder>` syntax in 134 production SKILL.md files (metadata.stage + description + allowed_memory_scopes)
Vendor the debugging-cycle pair + chain-coverage check so no ship-referenced skill can be missing from the payload
Author the architectural-spike-author/-audit pair - the missing ADR input artefact (architectural-spike@1)
Bring the six thin vendored pairs to full contract parity (RUBRIC, PIPELINE, INVARIANTS, envelopes, references, acceptance)
Stale-reference sweep - repoint dead SDP anchors across modules/skill and refresh obsolete ship-workflow notes, with a doc-anchor checker
Workflow/skill wiring for visual deliverables - task folder scaffolding + template@1 citations in authoring contracts
SKILL OCI registry deploy for `.skill` bundles — R3 distribution stage with signed bundles + tag immutability + tenant-scoped pulls
Skill quality floor - NFR stubs, untrusted-content backport, pair parity
templates module - CDS-adapted HTML shells (template@1) every workflow/skill renders deliverables through
TEN tenant provisioning CLI — `cyberos-ten provision` ops-driven flow with schema namespace + NATS subject + S3 prefix + initial root-admin subject + memory audit
3 plan tiers (Starter / Team / Enterprise) hardcoded with per-tier caps
Stripe billing integration — USD/EUR/SGD/GBP customer + subscription + per-period invoice + overage push for international tenants
4-axis metering — seats · API · AI tokens · storage (memory audit per metric event)
TEN vertical-pack pricing add-on — per-pack monthly fee (not per-seat) on top of base plan tier; multi-currency; prorate on install/uninstall
Self-serve signup form ≤ 30 s end-to-end — email OTP + slug + plan + currency + payment + provisioning + root-admin + first-login JWT in one orchestrated flow
VND domestic billing rail — VnPay + Momo + ZaloPay subscription, recurring-charge, refund, dunning + per-PSP webhook bridge for vn-1 tenants
4-residency provisioning — sg-1 / eu-1 / us-1 / vn-1 region pinning across Postgres + S3 + NATS + Stripe + KMS with cross-residency-write trip-wire
TEN 90-day offboarding contract — closed 4-state FSM (Active → Terminating-A → Terminating-B → Terminated) + day-pinned transitions + scheduled jobs + read-only freeze + dead-letter recovery + dual-signoff irreversible wipe
TEN signed-bundle export — deterministic zip + Ed25519 signature + memory audit anchor + chain-of-custody manifest for tenant offboarding
TEN permanent-delete attestation — CSO + CLO dual-sign + chain-anchored evidence + cascade hard-purge across all tenant data with verification
TEN tenant-admin SPA — seats + billing + audit + residency + retention dashboard for ROOT-CFO tenant administration
TEN Singapore HoldCo flip CLI — `cyberos-ten holdco-flip` orchestrates ACRA filings + shareholder migration + ESOP transfer for VN → SG corporate restructure
TEN hostile-termination override — legal-trigger fast-track with CEO+CLO+CSO triple-sign for hostile actor offboarding
TEN plan-change HTTP host — POST/GET plan + history TX trigger + plan_tier TEXT→enum
Metering ai_tokens emit at cost_reconcile — WalQueue push from ai-gateway
Metering api_calls emit at auth verify_jwt — WalQueue push on success
TIME TimeEntry append-only schema — correction_to link semantics + tenant-scoped RLS + invoice-grade integrity
TIME timer start/stop — single-active-timer per Member + auto-stop on logout + ≤15-min resolution snap + idle-detection at 10min
TIME manual entry form — retroactive time logging with date validation + per-day total cap + TASK-TIME-007 VN Labour Code cap integration
TIME auto-detect proposals — Member-confirm suggestions from PROJ activity (status changes + comment patterns + commit/PR activity)
TIME billable flag cascade — 4-step resolver (entry override → project default → engagement policy → tenant default) with snapshot on row
TIME weekly approval flow — Member submit → AM (engagement_admin) review → CFO visibility with auto-lock + bulk-approve + diff view
TIME VN Labour Code Art. 107 OT cap — hard-block at entry write when monthly OT > 40h or yearly OT > 200h (300h with regulator approval)
TIME expense capture — photo → AWS Textract OCR → hóa đơn parser → Member confirm + categorisation + invoice integration
TIME per-cycle billable rollup → INV — per-Member × role × Engagement aggregation with rate-card application + idempotent emit