Roundup snapshot — 2026-06-20

STATUS.md

@@ -1,139 +1,179 @@
-# Roundup — 2026-06-18
+# Roundup — 2026-06-20
 
-Repos scanned (11): keysat, matrix-bridge, premier-gunner, proof-of-work, recap-relay, recap, spark-control, standards (meta/tooling), ten31-database, ten31-signal-engine, ten31-transcripts.
+Repos scanned (11): keysat, matrix-bridge, premier-gunner, proof-of-work, recap-relay, recap,
+spark-control, standards, ten31-database, ten31-signal-engine, ten31-transcripts
 
-Skipped (non-git folders under `~/Projects`, noted not dropped): discount-watcher, expense-organizer, giga, Grand-Cayman-paddleboard, heart-rate, one-river, `satoshi-sleep (need to add code)`, `START9 PACKAGING`, ten31-command-center, timestamp-converter, timestamp-newspaper, website-landing, Workout-log. (Failed readers: none.)
+Skipped (not git repos): discount-watcher, expense-organizer, giga, Grand-Cayman-paddleboard,
+heart-rate, one-river, "satoshi-sleep (need to add code)", "START9 PACKAGING", ten31-command-center,
+timestamp-converter, timestamp-newspaper, website-landing, Workout-log
 
-> Read-and-report only. Items are grouped by the priority signals found in each repo and the inbox; projects are **not** ranked against each other and no "what to work on" call is made — that's yours. The repo backlogs below already live durably in each repo's ROADMAP; the **inbox items are itemized in full** because they exist nowhere else yet.
+Failed readers: none.
 
 ---
 
 ## Per-project snapshot
 
-**keysat** — Bitcoin-native software-licensing service (StartOS 0.4.x s9pk + 4 SDKs + landing/docs). Live `0.2.0:60` on immense-voyage.local serving licensing.keysat.xyz; `:60` shipped the Zaprite auto-charge silent-lapse fix + docs reconciliation; `cargo check`/`tsc`/tests green. **Next:** multi-profile webhook routing test → split `audit:read` scope → operator-alerts-via-StartOS → registry `prepare.sh`.
+**keysat** — Self-hosted Bitcoin-native software-licensing service (StartOS 0.4.x s9pk + 4 SDKs + public sites).
+Live canonical `0.2.0:62` (buy-page escape fix shipped, installed on `immense-voyage.local`, master at `licensing.keysat.xyz` 200, migrations → 0025); daemon/wrapper tests green, no CI.
+In progress: inbox items just triaged into ROADMAP. Next: eval P2 hardening (XFF, dep bumps, admin/public split), split `audit:read` scope, work newly-routed ROADMAP cluster.
 
-**matrix-bridge** — Single-user Matrix bot turning a room message into a live Claude Code session on the Mac, surfaced to phone. Phases 0–3 + ask mode all DONE and live (Docker on Spark); capture mode deployed. **In progress:** none; only optional optimizations (Docker HEALTHCHECK, trust-gate flag, priority keyword). **Watch:** Update button depends on modelo's Gitea ssh `IdentitiesOnly yes` pin.
+**matrix-bridge** — Single-user Matrix bot on the Spark that turns a room message into a live Claude Code session on the Mac, surfaced to phone.
+Phases 0–3 + ask mode complete; capture mode (D13) live 2026-06-16, proven on 1 room (N=3 pending). Shipped in Spark Control v0.21.0 tile.
+Next: prove capture mode on remaining rooms; optional Docker HEALTHCHECK; optional priority keyword in `capture-note.sh`.
 
-**premier-gunner** — Kid-friendly soccer-training tracker PWA (one player), StartOS s9pk. Live `v0.1.7:0`; all requested features built/deployed. **In progress:** none. **Next:** confirm speed unit (mph vs km/h); work the eval backlog if desired. **Known issue:** in-app password change reverts on restart (use the StartOS action).
+**premier-gunner** — Kid-friendly soccer-training tracker PWA (single player), StartOS 0.4.x s9pk.
+Live `v0.1.7:0`, all requested features built/deployed, no in-progress work. Known issue: in-app password change reverts on restart (use the action).
+Next: confirm speed unit (mph vs km/h); optionally work the eval backlog.
 
-**proof-of-work** — Self-hosted multi-user workout logger (Next.js 15) as StartOS s9pk. Live `1.2.0:5` (Gear replaces RPE for cardio); built + sideloaded, verified on-box (231 tests pass). **Known bug (P2):** Mobile-Safari first-login-tap fails once then works — gated on a Safari error code to pick client vs server fix. **Next:** P3 hardening batch → tiered AI prompt formatting → Next 15→16.
+**proof-of-work** — Self-hosted multi-user workout logger (Next.js), StartOS 0.4 s9pk.
+Live `1.2.0:9` (tsc/lint clean, 274 tests); 6 AI providers incl. SparkControl local inference; design contract established. Operator running on-box successfully.
+Blocker: Mobile-Safari first-login-tap fails (2nd works) — gated on capturing the Safari error code. Next: P3 hardening batch, design-cleanup batch, tiered AI prompts, Next 15→16.
 
-**recap-relay** — Operator-side credit-metered service in front of Gemini + Spark Control, powering Recaps' transcription/analysis pipeline. Aligned at relay `0.2.126` (app `0.2.155`), 79 tests green; Users dashboard tab + persistent webhook-dedup shipped; BTCPay-only rail; CORS scoped. **In progress:** none open above P2. **Next:** P2/deferred tail (split 2225-line internal-meetings.js — likely overkill; security/doc P3s).
+**recap-relay** — Operator-side credit-metered transcription/diarization/analysis relay in front of Gemini + Spark Control; powers Recaps. Private, operator-box only.
+Live `v0.2.127` (app 0.2.155), 79 tests green, dashboard redesign (mobile-first) done, design contract imported. **⚠ A P1 analyze-hang outage is captured in the inbox but NOT yet reflected as fixed here.**
+Next (low priority per repo): typography hygiene tail; deferred speaker-tool polish; P3+ security/packaging tail.
 
-**recap** — YouTube/podcast summarizer + library SPA, StartOS s9pk + cloud at recaps.cc. Live app `0.2.161` + relay `0.2.126`, 144 tests pass; self-serve Pro/Max purchase + design system (Phases 1–2) complete. **Loose end:** Daily Digest relay-synthesis+SMTP installed but not smoke-tested on-box (operator action #5). **Next:** operator smoke-test #5; resolve P2 known-debt cluster.
+**recap** — YouTube + podcast summarizer + library; StartOS s9pk (self-host) and `recaps.cc` cloud (multi-tenant).
+Live: app `0.2.162` + relay `0.2.126`, 158 tests; just shipped relay-client dedup. Daily Digest installed but off-box-unsmoke-tested.
+Next: deferred refactor-survey items (test-first); operator verification actions (iPad scroll, Gemini key rotation, real cloud purchase/webhook/reminder tests, smoke Daily Digest); design `palette.css` stretch.
 
-**spark-control** — Browser StartOS package driving a dual NVIDIA DGX Spark cluster (vLLM swaps, health/proxy, STT/TTS/diarization, embeddings, redaction). Live `v0.26.0:0` (disk-driven model menu); OpenClaw/Johnny-5 coexistence epic fully shipped (v0.25.0); 137 tests pass. **In progress:** Gemma-4-26B-A4B vision eval (recipe in catalog, not yet downloaded/swap-tested). **Awaiting:** Signal-Engine client-side flakiness remedy forwarded to dev.
+**spark-control** — Browser-based StartOS 0.4 package controlling a dual DGX Spark AI cluster (vLLM model swaps + STT/diarization/TTS/embeddings/redaction APIs).
+Live `v0.27.3:0`; Qwen3.6 vision end-to-end (cards 7/7 @ ~97 tok/s), 161 pytest. Vision "check" button removed at owner's request — do NOT re-add.
+Next (externally gated): Grant sends adopter reply; adopter runs disk-scan diagnostic; codify Gitea Releases channel.
 
-**standards** *(meta/tooling)* — Home of agent standards + the live global fleet (8 commands, 11 subagents, served via `~/.claude` symlinks). `/adjudicate` shipped (item 10), **untested on a real backlog** — first run should calibrate drop-bias. **Next:** first `/adjudicate` run on keysat/recap; Stage-1 onboarding-tester harness; cross-repo quality-gate standard + `/harden`; non-git-folder sweep.
+**standards** *(meta / tooling layer)* — Global source of agent commands, subagents, and `how-i-work.md`, symlinked live into `~/.claude`.
+Fleet built/live (9 commands, 12 subagents); recent: `refactor-scout`, `/adjudicate`, design round-trip, `onboarding-tester` all shipped. Prior roundup snapshot 2026-06-18.
+Next: first real `/adjudicate` run (calibrate drop-bias); Stage-1 `onboarding-tester` harness; cross-repo quality-gate standard + `/harden` (item 1); non-git-folder sweep (item 6 residual).
 
-**ten31-database** — Self-hosted venture-fund CRM (replacing Airtable) with an agentic AI layer for funnel-widening + outreach drafting. Phase 0/1 built; deployed & verified live `v0.1.0:91` (2026-06-18); grid is canonical SoR, Matrix email-proposal review + pipeline adoption + intake bot all live. **Unsmoked:** intake fuzzy-match numbered-pick grammar. **Debt (P2):** soft-delete sweep residue, `?limit=abc` crash, auth regression test, oversized icon, 5.4k-line monolith.
+**ten31-database** — Self-hosted venture-fund CRM (replacing Airtable) + in-house AI fundraising layer; Phase 0/1 live on Start9.
+Live `v0.1.0:103` (verified 2026-06-20); fundraising grid + email capture is system of record. Mobile UX batch, required-date reminders, M3 business-card OCR all shipped this session. W1 Reminders + W2 NL-query built/tested (deploy pending).
+Next: spot-check bidirectional sync; Phase 8 mobile-design conformance (8 phases scoped); deferred in-app card intake (plan written, approval pending); real-card OCR accuracy spot-checks.
 
-**ten31-signal-engine** — Recurring pipeline ingesting audio + text → structured "claims" → investment signals via Ten31's thesis lens, each logged as a falsifiable prediction. **Strike adversarial test: CONDITIONAL PASS (2026-06-16)** — 56,008 claims embedded, false positive correctly refused; reflexivity demo unexercised (RHR/CD/Bitcoin.Review audio deferred). No automated test suite yet. **Next:** Frontier-fan-out test H6 → complete Strike reflexivity demo → Job A discovery scorers.
+**ten31-signal-engine** — Recurring pipeline ingesting audio/text, extracting structured claims, surfacing investment signals through Ten31's thesis lens with falsifiable predictions.
+Strike adversarial test CONDITIONAL PASS (2026-06-16); 56,008 claims embedded in Qdrant; engine correctly refuses the false positive. Repo clean, no automated test suite yet.
+Next: frontier-fan-out test H6; complete Strike reflexivity demo (audio-GPU gated); Job A discovery scorers.
 
-**ten31-transcripts** — Native macOS menu-bar app: detects calls, records dual-track audio, sends to Spark Control for transcription/diarization. `main` clean + pushed; app rebuilt+installed, 91 tests pass; meeting-name prompt + folder rename shipped & reviewer-verified. **Pending verify:** naming prompt + rename on a live stop. **In progress/unverified:** Meet visual fix (reject solid camera-off tiles).
+**ten31-transcripts** — Native macOS menu-bar app: dual-track call audio + active-speaker window-watching → self-hosted SparkControl for transcription/diarization/naming.
+`main` clean (2026-06-17), 91 tests; meeting-name prompt + folder rename built. Naming prompt unit-tested but not yet exercised on a live stop.
+Next: repoint `origin` to `gitea-home` (off flaky `.local`); backend URL primary→fallback + `mmss()` NaN guard; run a real recording end-to-end.
 
 ---
 
 ## Priority queue (all projects + untriaged inbox)
 
-No P0 or P1 items exist anywhere — nothing is flagged drop-everything or urgent. Repo "next steps" carry no Pn marker; they're the operator's chosen next moves, listed under **Next actions (no Pn)**. Repo ROADMAP backlogs live durably in each repo and are summarized per-line with a pointer; **inbox items are itemized in full** below and again under "Not yet pushed down."
+### P1
+- [P1] Analyze-phase hang permanently jams the single in-memory hardware FIFO slot → blocks ALL YouTube processing; multi-hour outage — source: inbox(untriaged) → recap-relay — `server/backends/gemini.js:587/281` (no AbortSignal), `hardware-queue.js:51-98` (no acquire-timeout/dead-holder watchdog)
+- [P1·"elevated, money-path bug"] Auto-charge silently lapses subscription on 200-with-failure response — source: keysat (ROADMAP, Payments & subscriptions)
 
 ### P2
-- [P2] Design-contract cleanup (3 blockers + structural CSS consolidation + token gaps) — source: inbox(untriaged) → keysat — INBOX.md / keysat ROADMAP "Design (contract conformance)"
-- [P2] Research: does the keysat registry need to retain every prior software version? — source: inbox(untriaged) → keysat — INBOX.md (via matrix)
-- [P2] Adversarial review of keysat (vulns / customer complaints / feature gaps a new user would find) — source: inbox(untriaged) → keysat — INBOX.md (via matrix)
-- [P2] Run spec-checker agent for Start9 community-registry listing — source: inbox(untriaged) → keysat — INBOX.md (via matrix)
-- [P2] Website doc-auditor pass + scan GitHub history for leaked info + add "add licensing to existing software" example — source: inbox(untriaged) → keysat — INBOX.md (via matrix)
-- [P2] Ability to reorder entitlements catalog on edit-products view — source: inbox(untriaged) → keysat — INBOX.md (via matrix)
-- [P2] Add Gemini 3.5 to model selection (research available stable model name first) — source: inbox(untriaged) → recap — INBOX.md (via matrix)
-- [P2] Add Gemini 3.5 to model selection (research available stable model name first) — source: inbox(untriaged) → recap-relay — INBOX.md (via matrix)
-- [P2] Run full-eval suite on the signal-engine folder — source: inbox(untriaged) → ten31-signal-engine — INBOX.md (via matrix)
-- [P2] Backup-history settings tab: minimize + chevron-expand, default collapsed at bottom — source: inbox(untriaged) → ten31-database — INBOX.md (via matrix)
-- [P2] Screen refresh should preserve the current tab, not reset to top tab — source: inbox(untriaged) → ten31-database — INBOX.md (via matrix)
-- [P2] Redesign the software logo/icon (StartOS service icon) — source: inbox(untriaged) → spark-control — INBOX.md (via matrix)
-- [P2] Gitea API automation for /new-project (replace manual create/publish gate) — source: inbox(untriaged) → standards — INBOX.md
-- [P2] Run janitor agent across all projects — source: inbox(untriaged) → standards — INBOX.md (via matrix)
-- [P2] Mobile-Safari first-login-tap fails once then works — source: proof-of-work — repo ROADMAP "Known bugs" (gated on Safari error code)
-- [P2] CRM debt: dashboard comms-aggregate soft-delete sweep, `?limit=abc` crash, auth regression test, oversized StartOS icon, 5.4k-line monolith — source: ten31-database — repo Current state
-- [P2] recap known-debt cluster: SSE error-string scrub, credit TOCTOU, multi-tenant gemini-key bypass, `/api/history` perf, dep CVEs (nodemailer high), risky-file tests, doc drift — source: recap — repo ROADMAP "P2 known-debt"
-- [P2] premier-gunner eval backlog: `@fastify/static`→≥9.1.3 (path-traversal), input validation (unknown metric kind / bad dates / 400 not 500), automated record/streak/migration tests — source: premier-gunner — repo ROADMAP
-- [P2] spark-control tech debt: no tests beyond redaction suites, loose dep floors (python-multipart/starlette), opaque 500 on model POST/PUT, NGC key on process line, global mutable catalog, container root on 0.0.0.0:9999 — source: spark-control — EVALUATION.md
-- [P2] Cross-repo quality-gate standard (linters / pre-commit / CI) + `/harden` — source: standards — ROADMAP item 1
+*Untriaged inbox*
+- [P2] Add Gemini 3.5 to model selection (research-agent confirm available stable model name) — source: inbox(untriaged) → recap
+- [P2] Add Gemini 3.5 to model selection (research-agent confirm available stable model name) — source: inbox(untriaged) → recap-relay
+- [P2] Verify cloud background subscription processing isn't silently skipped post-core-decoupling (entitlement gate `server/index.js:1400`) — source: inbox(untriaged) → recap — check `recaps.cc/api/sub-check-log`
+- [P2] Email auto-capture should match investor only in `to:`/`from:` (not cc) — source: inbox(untriaged) → ten31-database
+- [P2] Add camera icon in top bar (next to pencil) for business-card capture → same flow as Matrix intake bot — source: inbox(untriaged) → ten31-database
+- [P2] Backup-history in Settings should default minimized + chevron-expandable at bottom — source: inbox(untriaged) → ten31-database
+- [P2] Screen refresh should preserve the current tab rather than reset to the top tab — source: inbox(untriaged) → ten31-database
+- [P2] Redesign the software logo/icon (used for the StartOS service) — source: inbox(untriaged) → spark-control
+- [P2] Add a dashboard card for the ten31 CRM / intake bot (Update/Restart/Stop/Logs tile) — source: inbox(untriaged) → spark-control (also tracked in ten31-database ROADMAP)
+- [P2] Brainstorm better cardio logging + cardio program planning (in-week variety + long-term programs) — source: inbox(untriaged) → proof-of-work
+- [P2] Open-brackets artifact in the Matrix capture echo (`📥 captured → - [ ] (...)`) — source: inbox(untriaged) → matrix-bridge
+- [P2] Run full-eval on the signal-engine folder (evaluator/security/exerciser/doc/spec) — source: inbox(untriaged) → ten31-signal-engine
+- [P2] Gitea API automation for `/new-project` (replace manual create/publish gate) — source: inbox(untriaged) → standards *(meta)*
+- [P2] Run janitor agent on all projects — source: inbox(untriaged) → standards *(meta)*
+
+*From ROADMAPs*
+- [P2] 6× full-eval hardening: X-Forwarded-For rate-limit bypass; dependency advisories; admin UI split from public API; webhook-endpoint allowlist; runtime-prepared SQL migration; `rate_buckets` reaper — source: keysat
+- [P2] Design-contract cleanup from 2026-06-16 audit (3 gold-as-fill CTA blockers, structural consolidation, token gaps) — source: keysat
+- [P2] `@fastify/static` 8.3.0 → ≥9.1.3 (path-traversal advisories) + re-test — source: premier-gunner
+- [P2] Input validation: reject unknown metric `kind`, validate calendar dates, 400 on bad `metric_id` — source: premier-gunner
+- [P2] Tests: record-recompute direction, streak math, migration idempotency — source: premier-gunner
+- [P2] 7× known debt: operator-internal strings leak to cloud; credit over-spend TOCTOU on licensed installs; multi-mode tenant can spend operator's Gemini key; metadata cache for `GET /api/history`; dependency CVEs; no tests on risky files; smaller hardening (unsanitized IDs, schema validation, file size) — source: recap
+- [P2] 5× tech debt (EVALUATION.md): test-coverage gap (swap state machine/proxies/SSH/StartOS); lockfile + dependency floors; HTTP 500 handling; NGC API key on cmdline; global mutable `catalog` race — source: spark-control
+- [P2] Guard `mmss()` against NaN/∞ — source: ten31-transcripts
+- [P2/P3] `SessionController` state-machine tests + extraction — source: ten31-transcripts
 
 ### P3
-- [P3] Onboarding-tester Path 2 (full buyer-pays walkthrough on regtest) — source: inbox(untriaged) → keysat — INBOX.md (gated on `payment_providers:write` + network gate + sandbox flag)
-- [P3] Fix AGENTS.md endpoint wording: `POST /relay/analyze` takes `{ prompt }`, not `{ transcript … }` — source: inbox(untriaged) → recap-relay — INBOX.md
-- [P3] Operator-onboarding agent (sibling to onboarding-tester for the operator journey) — source: inbox(untriaged) → standards — INBOX.md
-- [P3] proof-of-work hardening: CSP `unsafe-eval`, `/api/health` info disclosure, rate-limit map leak, shorter sessions, text max-length, unify 3rd JSON-parse — source: proof-of-work — repo ROADMAP
-- [P3] premier-gunner P3: CSRF token, cross-category metric guard, logout-without-session, consistent 404s, validate category color — source: premier-gunner — repo ROADMAP
-- [P3] recap P3 deferred: request-size caps, invoice-ID hijack on `/api/credits/claim`, container root, in-memory auth rate-limit, repo hygiene, registry-submission blockers — source: recap — repo ROADMAP
-- [P3] recap-relay security/ops tail: no `/relay/*` rate limiting, container root, dashboard stored-XSS, `lan-fetch` TLS-verify off, stale `/relay/health` version, doc fixes — source: recap-relay — repo ROADMAP
-- [P3] spark-control bulk-fix-when-touching: stale README, deprecated `@app.on_event`, `innerHTML` sink, no upload-size limits, `VLLM_PORT` crash, Makefile x86-only vs manifest aarch64 — source: spark-control — EVALUATION.md
+*Untriaged inbox*
+- [P3] AGENTS.md endpoint list mis-describes `POST /relay/analyze` ({transcript}→sections); actual route takes `{prompt}` → standard envelope — source: inbox(untriaged) → recap-relay
+- [P3] Operator-onboarding agent (sibling to `onboarding-tester`, operator journey; needs clean StartOS service-install room) — source: inbox(untriaged) → standards *(meta)*
 
-### Next actions (no Pn signal — operator's chosen next moves, not yet prioritized)
-- keysat: automated multi-profile webhook routing test (S) → split `audit:read` from blanket `:read` → operator-alerts-via-StartOS (verify start-sdk 1.3.2 first) → registry `prepare.sh` + on-box verification — source: keysat Current state
-- recap: smoke-test Daily Digest end-to-end on-box (operator action #5) — source: recap Current state
-- spark-control: Gemma-4-26B-A4B vision eval (download + swap-test; owner weighing vision vs text-only Qwen3.6) — source: spark-control Current state
-- ten31-signal-engine: Frontier-fan-out test H6 → complete Strike reflexivity demo (un-defer RHR/CD audio) → Job A discovery scorers — source: signal-engine Current state
-- ten31-transcripts: verify naming-prompt + folder-rename on a live stop; re-process Meet session for visual fix; repoint `origin`→`gitea-home`; backend URL primary→fallback + `mmss()` NaN guard — source: ten31-transcripts Current state
-- ten31-database: in-room smoke of intake disambiguation numbered-pick grammar; spark-control intake dashboard card; NL→safe-query build; freeze v2.0 canonical thesis — source: ten31-database Current state
-- premier-gunner: confirm speed unit (mph vs km/h) — source: premier-gunner Current state
-- matrix-bridge: optional only — Docker HEALTHCHECK, trust-gate flag, priority keyword, delete vestigial `phase-0` branch — source: matrix-bridge Current state
-- standards: first real `/adjudicate` run on keysat/recap to calibrate drop-bias; Stage-1 onboarding-tester harness in a keysat session — source: standards Current state
+*From ROADMAPs*
+- [P3] No CI / doc-drift cluster — source: keysat
+- [P3] Code health (refactor-scout): delete 3 confirmed-dead functions; extract column consts; large-function splits (DEFER, gated on characterization tests first) — source: keysat
+- [P3] CSRF token; cross-category metric guard; logout without session; consistent 404s; validate category `color` — source: premier-gunner
+- [P3] Security & hardening: verify proxy forwards real client IPs; CSP `unsafe-eval`; `/api/health` info disclosure; rate-limit map leak; shorter/configurable sessions; text max-length; unify JSON-parse pattern — source: proof-of-work
+- [P3] README stale; deprecated `@app.on_event`; packaging placeholders + broken docs link; body/upload size limits; startup crash on bad `VLLM_PORT` — source: spark-control
+- [P3] `manifest.json` sha256; unauthenticated LAN backend — source: ten31-transcripts
+- [P3] Request-size caps; invoice-ID hijack; container root user; in-memory auth rate-limit reset; repo hygiene (old `.s9pk`, `cookies.txt`); StartOS registry submission; doc reconciliation — source: recap
+- [P3] Matrix voice-note transcription (Spark Control Whisper, if endpoint exists) — source: ten31-database
+- [P3+] Security tail (no `/relay/*` rate limiting, root container, dashboard innerHTML XSS, TLS verify, debug leaks); packaging (prune 126 version files, pin yt-dlp, Dockerfile, manifest, no README); `/relay/health` stale 0.2.11; doc fixes — source: recap-relay
 
-### Unprioritized — needs triage (proposed new projects; routed by new-repo bootstrap, not /triage)
-- Embedded-links reader & summarizer — source: inbox `(new:embedded-links-reader)` [P2]
-- Portfolio-company scraper (podcasts/tweets/news digest) — source: inbox `(new:portfolio-scraper)` [P2]
-- Personal website on Start9 Pages via StartTunnel — source: inbox `(new:personal-website)` [P2]
+### Unprioritized — needs triage (ROADMAP backlog with no explicit priority signal)
+- **keysat:** rail-preference editing UI; agent-delegable payment-provider connect (approved, not urgent); onboarding doc-harness Stage 2 (gated; Stage 1 complete); Start9 Community Registry submission; registry version-retention (research-agent task); StartOS-native notifications/health-checks for internal failures; Elastic License v2 vs custom (parked); re-test `KEYSAT_INTEGRATION.md`; **multi-profile webhook routing regression test (adjudicated → DO, low blast radius)**; reorder entitlements catalog
+- **recap:** persist provider preference server-side; apply Export menu to clip-collection panel; CI lint+type-check; surface failed auto-queue items; Zaprite recurring card billing (BLOCKED on Zaprite); close architecture-simplification gaps (8,10,5/6-partial); decide Max tier-quota default; refactoring backlog (extract subscription engine [test-first], `/api/process` pipeline, `sweepAndRefreshTrial` middleware, transcript coalescers)
+- **recap-relay:** speaker-tool polish (re-infer names after recluster, renumber after merge, preserve unpolished base, async re-polish, merge provenance); empty analysis section at window boundary; audit live upload→merge→recluster→repolish pipeline; `palette.css` from tokens
+- **proof-of-work:** tiered AI prompt formatting; keep `MODEL_MENU`/`PRICES` current; fix `publish.sh` Step-3 registry no-op; build for `arm`; community-registry submission (4 blockers); adherence tracking; export/import polish + CSV round-trip; charts/progress views; design-cleanup batch; hygiene (legacy s9pk, drop `bcryptjs`, `workout-planner/` scratch)
+- **premier-gunner:** "Log another" (multiple same-category sessions/day); km/h unit option; per-metric direction toggle; Phase 3 AI coach (deferred); password UX under StartOS; packaging hygiene; other arches
+- **spark-control:** Gemma-4-26B vision (deferred); Qwen3.5-122B reasoning upgrade (candidate); parakeet long-audio guard (deferred); audio-endpoint concurrency sweep; echo cancellation + LLM referee for speaker naming; Qdrant auth+snapshots; observability; API-key auth; second audio worker; per-model vLLM flags from UI; Spark host update actions; Open WebUI integration
+- **ten31-database:** W1b nurture-gap automation (deferred); conversational NL edits in Matrix intake; LLM-judge fuzzy-match re-ranker; email-proposal review API audit; outreach detector; Squarespace form-submissions; intake "search NL-query on no-match"; email-capture learn-from-reject; pre-compile JSX (drop runtime Babel)
+- **ten31-signal-engine:** frontier-fan-out H6; estimator rework (H4); build real resolver (stub); extend claim-type weighting to §7.1 power-infra; Job A scorers; MD&A targeting; complete Strike reflexivity demo; confirm materiality of own_network sources; BTC Sessions (Ben Perrin); River image-PDF OCR; corpus expansion; automated test suite; episode-pipelining; corpus-management UI; expose pipeline tunables; daily digest email; forward live operation; Start9 s9pk packaging
+- **ten31-transcripts:** Meet faint-blue-border detection; geometric screen-share exclusion; speaker-view/spotlight layout; Zoom/Teams ring/hue gating; 1:1 Signal audio-pill fallback; accessibility-tree name hook; Jitsi support; self mic-channel cleanup; adaptive chunk sizing; per-app recording control; constrain recap reading width; SwiftLint/SwiftFormat decision; UserDefaults env-var shadowing
+- **matrix-bridge:** intent-routing brain (D8, Qwen3 dispatcher); thread-based session continuity; Nextcloud/CalDAV output integration; E2EE (D9, libolm); delete vestigial `phase-0` branch
+- **standards** *(meta):* cross-repo quality-gate standard (linters/hooks/CI, item 1); deterministic inbox-surfacing SessionStart hook (item 3); thread inbox-check line into bootstrapping (item 4)
 
 ---
 
-## Not yet pushed down (inbox) — exists nowhere but INBOX.md, grouped by target
+## Not yet pushed down (inbox — exists nowhere but the inbox)
 
-**→ keysat (7)**
-- [P2] Design-contract cleanup — 3 blockers (gold-as-fill on admin `.featured-pill-toggle.on` + `#tier-banner-cta`; buy-CTA pill radius 999px→8px), CSS-variable consolidation onto canonical palette.css, token gaps (14px card radius, wordmark letter-spacing, semantic badge hexes, syntax-highlight hex, admin `#f6f1e7`). Re-run design-checker after. (2026-06-16)
-- [P2] Research whether the registry must retain every prior keysat version on upgrade (2026-06-16)
-- [P2] Adversarial review — vulns / customer complaints / feature gaps a new user might find (2026-06-16)
-- [P2] Run spec-checker for Start9 community-registry listing (2026-06-16)
-- [P2] Website doc-auditor pass; scan GitHub history for leaked sensitive info; add a "add licensing to existing software" example (proof-of-work as a dry-run target) (2026-06-16)
-- [P2] Reorder entitlements catalog on edit-products view (2026-06-18)
-- [P3] Onboarding-tester Path 2 — buyer-pays regtest walkthrough, gated on `payment_providers:write` + network gate + sandbox-mode flag (2026-06-16)
+**recap-relay**
+- [P1] Analyze-phase hang jams hardware FIFO slot (full root-cause + 2-part fix + unit test in the inbox note), 2026-06-20
+- [P3] AGENTS.md `/relay/analyze` request-shape wording fix, 2026-06-15
+- [P2] Add Gemini 3.5 to model selection, 2026-06-16
 
-**→ recap-relay (2)**
-- [P2] Add Gemini 3.5 to model selection (research stable model name first) (2026-06-16)
-- [P3] AGENTS.md endpoint-shape doc fix: `POST /relay/analyze` is `{ prompt }`, not `{ transcript … }` (2026-06-15)
+**recap**
+- [P2] Verify cloud background subscription skip post-core-decoupling, 2026-06-20
+- [P2] Add Gemini 3.5 to model selection, 2026-06-16
 
-**→ recap (1)**
-- [P2] Add Gemini 3.5 to model selection (research stable model name first) (2026-06-16)
+**ten31-database**
+- [P2] Email auto-capture only on `to:`/`from:` match (not cc), 2026-06-20
+- [P2] Camera icon in top bar for business-card capture, 2026-06-20
+- [P2] Backup-history minimize + chevron, 2026-06-18
+- [P2] Screen refresh preserve current tab, 2026-06-18
 
-**→ ten31-database (2)**
-- [P2] Backup-history tab: minimize + chevron-expand, default collapsed at bottom (2026-06-18)
-- [P2] Screen refresh should preserve current tab, not reset to top (2026-06-18)
+**spark-control**
+- [P2] Redesign software logo/icon, 2026-06-18
+- [P2] Dashboard card for ten31 CRM / intake bot, 2026-06-18
 
-**→ ten31-signal-engine (1)**
-- [P2] Run full-eval suite on the signal-engine folder (2026-06-16)
+**proof-of-work**
+- [P2] Cardio logging + program planning, 2026-06-19
 
-**→ spark-control (1)**
-- [P2] Redesign the software logo/icon used for the StartOS service (2026-06-18)
+**matrix-bridge**
+- [P2] Open-brackets artifact in capture echo, 2026-06-19
 
-**→ standards (3)**
-- [P2] Gitea API automation for /new-project (automate the manual create/publish gate) (2026-06-14)
-- [P2] Run janitor agent across all projects (2026-06-16)
-- [P3] Operator-onboarding agent — sibling to onboarding-tester for the operator journey (needs a clean StartOS service-install clean room) (2026-06-16)
+**ten31-signal-engine**
+- [P2] Run full-eval on the folder, 2026-06-16
+
+**standards** *(meta)*
+- [P2] Gitea API automation for `/new-project`, 2026-06-14
+- [P2] Run janitor agent on all projects, 2026-06-16
+- [P3] Operator-onboarding agent, 2026-06-16
 
 ---
 
-## Proposed new projects (inbox `(new:…)` — awaiting new-repo bootstrap)
+## Proposed new projects (inbox `new:` items — awaiting `/new-project` bootstrap)
 
-- **embedded-links-reader** [P2] — give the app an article/blog URL; it scrapes the author-embedded links, reads them, and summarizes them (2026-06-14)
-- **portfolio-scraper** [P2] — tracks portfolio companies for podcasts, social tweets, founder appearances, news; delivers a digest via email or another interface (2026-06-14)
-- **personal-website** [P2] — host on Start9 Pages, clearnet via StartTunnel; build HTML, style with Claude Design, gather inspiration first (2026-06-16)
+- **new:embedded-links-reader** [P2] — give the app an article/blog URL; it scrapes the links the author embedded, reads them, and summarizes them, 2026-06-14
+- **new:portfolio-scraper** [P2] — track portfolio companies for podcasts, tweets, founder appearances, news; deliver a digest via email or another interface, 2026-06-14
+- **new:personal-website** [P2] — personal website hosted on Start9 Pages, served on clearnet via StartTunnel; HTML site, Claude Design styling, gather design inspiration, 2026-06-16
 
 ---
 
 ## Gaps
 
-- **No AGENTS.md/Current-state gaps among scanned repos** — all 11 returned a description, current state, next steps, and ROADMAP backlog. No reader failed.
-- **Inbox formatting:** two INBOX.md lines have items mashed together without a newline (line 41: keysat registry-retention + keysat adversarial-review; line 48: standards operator-onboarding agent + ten31-database backup-history). Both items were preserved/counted above; the lines should be split when next triaged.
-- **Untested / unverified, by the repos' own words (not gaps in this roundup, just open verification debt):** standards `/adjudicate` untested on a real backlog; recap Daily Digest not yet smoke-tested on-box; ten31-transcripts naming-prompt+rename and Meet visual fix unverified on a live run; ten31-database intake numbered-pick grammar unsmoked; ten31-signal-engine has no automated test suite and the Strike reflexivity demo is unexercised.
-- **Non-git folders under `~/Projects` not covered:** 13 folders (listed at top) are not git repos — out of scope for this roundup, but `satoshi-sleep (need to add code)` and the standards "non-git-folder sweep" (ROADMAP item 6 residual) both suggest a sweep is still owed.
+- **recap-relay state vs. reality:** the repo's `Current state` reads healthy (v0.2.127, 79 tests green) but a confirmed **P1 multi-hour outage** (analyze-hang) is captured in the inbox and is *not yet reflected or fixed* in the repo. The immediate operational unblock (restart recap-relay) recurs until the code fix lands. Highest-divergence item this round.
+- **recap ↔ recap-relay coupling:** the recap subscription-skip P2 was surfaced while diagnosing the relay analyze-hang; both reference `recaps.cc/api/sub-check-log`. They are separate issues but share a diagnostic.
+- **Non-git folders under `~/Projects`:** 13 folders are not git repos and were skipped (see header). Some look like dormant project ideas (e.g. "satoshi-sleep (need to add code)", ten31-command-center, one-river, website-landing). This is the standards ROADMAP item-6 residual ("non-git-folder sweep") — none are tracked or readable as projects yet.
+- **No CI anywhere:** keysat, recap, proof-of-work, ten31-signal-engine, spark-control all explicitly note absent/partial CI; ten31-signal-engine and ten31-database have no automated suite for parts. This recurs as the standards cross-repo quality-gate item (item 1).
+- **Stale roundup index drift:** previous `STATUS.md` snapshot is dated 2026-06-18, but the standards `AGENTS.md` "Latest /roundup" line says 2026-06-16 — the index is stale relative to the actual file. Activity since 06-18 (keysat `:62`, ten31-database `:101–103`, recap `0.2.162`, recap-relay dashboard redesign, the P1 capture) lands in this one.
+- All 11 readers succeeded; no repo was missing `AGENTS.md`.