docs(archreview): round-2 re-review (2026-07-12) + 8 fix plans (86 tasks)

Re-ran all 8 domain reviews at HEAD 8c888f13 against the b910f5eb baseline: every round-1 finding source-verified (168 fixed, 0 regressions, 0 false claims); 56 new findings (1 Critical / 4 High / 15 Medium / 36 Low), concentrated in post-baseline code (anti-entropy resync, KPI rollup backfill, live alarm stream) and seams the fixes exposed. Headliners: S&F resync predicate inversion can wipe the delivering node's buffer (02-N1 Critical); resync snapshot exceeds the Akka remoting frame size (02-N2); failover drill kills the one node keep-oldest can't survive (01-N1); unbounded rollup backfill per failover (04-R1); live production API key in untracked test.txt (08-NF1). Adds PLAN-R2-01..08 + .tasks.json manifests and the Round-2 board, P0 list, cross-plan mutexes, and wave order in 00-MASTER-TRACKER.
2026-07-12 23:52:10 -04:00
parent 8c888f13a0
commit 5bbd7689fa
26 changed files with 7236 additions and 1321 deletions
@@ -0,0 +1,87 @@
+{
+  "planPath": "archreview/plans/PLAN-R2-07-ui-management-security.md",
+  "tasks": [
+    {
+      "id": 1,
+      "subject": "Task 1: Route the DebugStreamHub LDAP bind through ManagementAuthenticator (throttled) + fix the false doc claim",
+      "status": "pending",
+      "blockedBy": []
+    },
+    {
+      "id": 2,
+      "subject": "Task 2: ForwardedHeadersSetup — trusted-proxy client-IP resolution for the throttle keys",
+      "status": "pending",
+      "blockedBy": []
+    },
+    {
+      "id": 3,
+      "subject": "Task 3: Ship the ForwardedHeaders config to the Traefik topologies + document the lockout-DoS trade-off",
+      "status": "pending",
+      "blockedBy": [
+        2
+      ]
+    },
+    {
+      "id": 4,
+      "subject": "Task 4: Enforce site scope on secured-write submit / approve / reject",
+      "status": "pending",
+      "blockedBy": []
+    },
+    {
+      "id": 5,
+      "subject": "Task 5: ISecuredWriteRepository — additive permitted-sites filter for scoped listing",
+      "status": "pending",
+      "blockedBy": []
+    },
+    {
+      "id": 6,
+      "subject": "Task 6: Scope-filter HandleListSecuredWrites + amend Component-Security.md:141 + matrix verification",
+      "status": "pending",
+      "blockedBy": [
+        4,
+        5
+      ]
+    },
+    {
+      "id": 7,
+      "subject": "Task 7: AlarmSummary.RefreshAsync stale-site guard — never display cross-site data",
+      "status": "pending",
+      "blockedBy": []
+    },
+    {
+      "id": 8,
+      "subject": "Task 8: While live, the poll updates only _notReporting — never regresses live rows",
+      "status": "pending",
+      "blockedBy": [
+        7
+      ]
+    },
+    {
+      "id": 9,
+      "subject": "Task 9: House disposal guard on the live callback",
+      "status": "pending",
+      "blockedBy": [
+        8
+      ]
+    },
+    {
+      "id": 10,
+      "subject": "Task 10: Un-stick IsLive — deathwatch resets liveness when the aggregator terminates (MUTEX with PLAN-R2-02 SiteAlarmLiveCacheService task)",
+      "status": "pending",
+      "blockedBy": []
+    },
+    {
+      "id": 11,
+      "subject": "Task 11: Amortize LoginThrottle.Prune off the failure hot path",
+      "status": "pending",
+      "blockedBy": []
+    },
+    {
+      "id": 12,
+      "subject": "Task 12: Lock in the scrubber's fragment coverage + document the array-merge limitation",
+      "status": "pending",
+      "blockedBy": []
+    }
+  ],
+  "lastUpdated": "2026-07-13T03:26:45Z"
+}