# The board The work on this site and its vault, as rows: what is open, who owns it, what shipped it. # The board The work, as rows in `data/admin.json`: 34 items, 26 open, 7 done. An item is added by adding a row; the version column names the release that closed it. Several agents work on this site and on the evidence vault; the board is where they see what is taken and what is waiting. | # | Item | Status | Owner | Shipped in | |---|---|---|---|---| | 001 | Pages deploy workflow and breadcrumbs up to the month, the year and the newsroomThe first run failed because admin/build/ was ignored by the repository's Python .gitignore template. | done | dev | 0.2.2 | | 002 | Admin section: the board, the roles, the briefs, the vault with its public read key, telemetry | done | dev | 0.2.3 | | 003 | Anonymous telemetry over an append lane, from the front end, into a separate vaultBrief: admin/content/briefs/2026-10-22__telemetry-over-an-append-lane.md. End-to-end tested from the CLI before shipping. | done | dev | 0.2.3 | | 013 | Hand the telemetry vault key to the editor, sealed to his pki.sgit.ai keydev@php.newsroom's key is made (sha256:8025e2a4470e73f0) and published on the roles page; the handover payload is ready. Waiting on the editor's fingerprint and key link, or his record in the register. | waiting | dev | | | 004 | Run the verifier over every claim: check each quote against its capture textThe BBC's NCSC sentence is the first case. | open | verifier | | | 005 | Retry the blocked sources from another egress: openai.com, watchtowr.com, techzine.eu, socket.dev, ccn-cert.cni.es, dyn.cncs.gov.pt | open | collector-researchers | | | 006 | Find the primary posts behind second-hand figures: Censys, VirusTotal, Unit 42, Cloudflare's CTO at 07:43 UTC, Gina Banyard's Mastodon post, the fedi.katze.sh posts | open | collector-researchers | | | 007 | The 2024 trail in php-src: the audit finding whose fix surfaced the OOM problem, with a deeper clone | open | collector-primary | | | 008 | The next graph layer: facts inside a source (sentence-level nodes) so every noun on a page links somewhere | open | cartographer | | | 009 | A second model reads the vault and writes its own claims file; disagreements become disputed rows | open | editor | | | 010 | Re-check KEV and oss-security daily; record the day php2shell enters KEV if it does | open | collector-primary | | | 011 | Resolve the rights question on publishing the evidence vault's read key: third-party pages are held verbatimThe read key is published on the vault page at the editor's request; the editor will check the vault for anything confidential. | open | editor | | | 012 | Reconcile the fix commit hash rjmendez names (82f8f31b16a) with 3584a98bd | open | collector-primary | | | 013 | Questions readers ask: /questions/, one page per question, each answer pointing at the pages and sources that carry it; first question from a reader's group chat | done | librarian | 0.2.6 | | 014 | Capture The Times, 'Race to fix PHP security issue in software behind most websites' (22 October), seen by a reader, paywalled; listed on /questions/ as seen, not captured | open | collector-researchers | | | 015 | Articles layer and the evidence, derived, authored split: data/layers.json, /layers/, /articles/, gate checks; the first journalist and historian articles, written against v0.2.5 | done | journalist | 0.2.7 | | 016 | Front page: a 'start here' row above the numbers (If you run PHP, the two flaws, exploitation, impact); today the playbook is not linked from the front page bodyFrom the front page and navigation review, 22 October. Superseded by the newsroom review's change 1 (three status lines and two buttons), which is the better spec; see the triage brief. | open | journalist | | | 017 | Front page: replace 'The last 48 hours' with 'Since the last release', drawn from the timeline rows added since the previous version, and drop this site's own events from it | open | journalist | | | 018 | Navigation: split About into About (method, team, brief, corrections) and Engineering (admin, board, roles, briefs, telemetry, releases); move billing and the reading account to the bar's balance | open | dev | | | 019 | A layer badge (evidence, derived, authored) in every page's kicker, from data/layers.json, so a reader always knows what kind of page they are on | open | dev | | | 020 | Pricing by content type and freshness: every content page metered, price = max(1p, round(base x freshness)) x share read x rating; tiers fresh, new, current, archive picked in the reader's browser; rules on the billing page | done | journalist | 0.2.10 | | 021 | Second readings: Perplexity's notes published in full and credited, compared with the vault point by point at /readings/ | done | journalist | 0.2.10 | | 022 | Tables as cards under 700px, and a screenshot check at 390px in the gate (newsroom review, change 2) | open | dev | | | 023 | Per citation: the quoted sentence, capture id and file hash, checked by the gate against the capture text (newsroom review, change 3) | open | claude-story-site | | | 024 | Re-export from the vault head (184 sources against 144 here) and publish /status.json in the newsroom's shape (newsroom review, change 4) | open | dev | | | 025 | Exploitation over time: a strip chart from data/exploitation.json with count and count_basis per signal (newsroom review, change 5) | open | claude-story-site | | | 026 | Who said what first: by_ids on claims, origin, relay and independent roles per source; fixes the party pages that say no claim names them (newsroom review, change 6) | open | claude-story-site | | | 027 | Briefings in two minutes: a bottom line, five to eight claims as cards, the full table folded, read next (newsroom review, change 7) | open | briefing-writer | | | 028 | /blast-radius/ by asset type, marked as the site's analysis, linked from the playbook and two briefings (newsroom review, change 8) | open | claude-story-site | | | 029 | The playbook in three phases, each step opening to the agency's sentence, taking offline last (newsroom review, change 9) | open | claude-story-site | | | 030 | The story graph: every node a link, parties as nodes, typed edges (newsroom review, change 10; board 008 holds the fractal layer) | open | cartographer | | | 031 | Narrow the gate's em-dash exemption to quoted text and titles, and rewrite the 20 source and party pages' notes | open | dev | | | 032 | SG Meter v1.3.1 to v1.5.0 for dark-mode contrast, keeping the pricing tiers working | open | dev | | | 033 | Capture the sources Perplexity named that the vault lacks, W3Techs first (it would close the front page's question on what 70% measures); listed on /readings/ | open | collector-researchers | | Who the owners are is on [roles](../roles/index.html); the briefs that open items are on [briefs](../briefs/index.html). --- site v0.2.11 · data as of 2026-10-22T11:34Z · vault commit 200d08971937 · https://php.oct.2026.newsroom.sgit.ai/admin/board/index.html