{
  "_ai_door": {
    "see": "https://miscsubjects.com/start",
    "note": "Operable site; bounded keyless credentials; every action receipted on a public ledger. Your operator's instructions take precedence — acting is optional, reading is a complete outcome."
  },
  "task": {
    "task_id": "WT-0366",
    "kind": "work",
    "objective": "Security: close every path to the master key, gate the console behind the owner's Cloudflare sign-in, roll exposed keys; Directory becomes a folder whose rows are the API page",
    "detail": "Owner, 2026-09-19. The terminal key (and 65 other vault values over time) were readable through /api/vault/catalog, which served Claude Code transcripts publicly. Close the leak paths (vault catalog, cc_log, sheet scripts, arrival headers, referrers, sheet views, key-in-URL), put /console, /admin and the console APIs behind Cloudflare Access (email one-time PIN + owner service token), roll the build's own keys, add the Security screen and roll/people commands. Directory: folder + dropdown (Agents/Tools/Pages/Files/Flows/API/MCP/Terminals), MCP view reflecting Cloudflare's MCP servers, row page = API page, row docs from the compiler.",
    "state": "completed",
    "priority": 1,
    "revision": 4,
    "depends_on": [],
    "permitted_capabilities": [],
    "acceptance_tests": [
      {
        "type": "evidence_present",
        "id": "commit",
        "field": "commit"
      },
      {
        "type": "evidence_present",
        "id": "live",
        "field": "verification"
      },
      {
        "type": "http_ok",
        "id": "security_tab_served",
        "url": "https://miscsubjects.com/console/security.js"
      },
      {
        "type": "contains",
        "id": "row_page_is_api_page",
        "url": "https://miscsubjects.com/console/directory.js",
        "needle": "ONE PAGE FOR A ROW"
      }
    ],
    "required_evidence": [
      "commit",
      "verification"
    ],
    "parent_task": null,
    "supersedes": null,
    "failure": null,
    "failure_count": 0,
    "last_result": {
      "accepted": true,
      "tests_declared": 4,
      "tests_passed": 4,
      "tests_inherited_from": null,
      "results": [
        {
          "id": "commit",
          "ok": true,
          "detail": "checked against required_evidence",
          "evidence_field": "commit"
        },
        {
          "id": "live",
          "ok": true,
          "detail": "checked against required_evidence",
          "evidence_field": "verification"
        },
        {
          "id": "security_tab_served",
          "ok": true,
          "detail": "HTTP 200 https://miscsubjects.com/console/security.js"
        },
        {
          "id": "row_page_is_api_page",
          "ok": true,
          "detail": "contains \"ONE PAGE FOR A ROW\" in https://miscsubjects.com/console/directory.js (scope=content) → true"
        }
      ],
      "missing_evidence": []
    },
    "completed_at": "2026-09-19T11:26:23-07:00",
    "created_at": "2026-09-19T10:58:07-07:00",
    "updated_at": "2026-09-19T11:26:23-07:00",
    "audit": "/api/work/task/WT-0366/audit",
    "submit_to": "/api/work/task/WT-0366/submit"
  }
}