| P0 | SYN-330: resolve advisory and yanked dependency CI blockers | Compatible security fixes; maintained YAML; all gates |
| P0 | SYN-328: isolate Git hook environment from temporary-repository tests | Implemented in PR #315; awaiting security gate |
| P0 | SYN-329: keep audit test fixtures within the retention window | Implemented in PR #315; awaiting security gate |
| P0 | SYN-322: define the composable knowledge framework and trust architecture | Architecture in PR #315 |
| P0 | SYN-236: renumber stale backlog issues off the colliding SYN-200..210 scheme | Resolve task ID collisions without changing historical commits |
| P1 | SYN-261: cryptographic SSHSIG commit verification (multi-user) | Actual SSHSIG validity before treating presence as assurance |
| P1 | SYN-324: seal governed state transitions and detect unjournaled Markdown drift | Durable governed transitions and source drift |
| P1 | SYN-325: persist signed receipts and add fail-closed verification profiles | Persist receipts and explicit fail-closed policy; depends #309 |
| P1 | SYN-318: Memory CI with explicit verification policy and coverage | Memory CI coverage; depends #310 |
| P1 | SYN-326: bind OIDC subjects to offline signing keys and scoped approval authority | Identity binding and scoped authority; consume Soma account contract |
| P1 | SYN-231: shared knowledge authority and governed team acceptance | Team authority, after transitions/identity |
| P1 | SYN-319: scoped contradiction diagnostics (CLI + MCP) | Expose existing deterministic contradiction diagnostics; ML remains separate |
| P1 | SYN-321: embed Synapse in Soma through a versioned knowledge contract | Versioned CLI knowledge contract; coordinated with SOMA-39 |
| P2 | SYN-323: evaluate local NLI and Jev-style typed knowledge decisions | Local NLI/typed decision benchmark with abstention and EN/PT fixtures |
| P2 | SYN-335: optional source adapters for documentation revision monitoring | Source revision adapters, begin with Git and API schemas |
| P2 | SYN-327: track source revisions and scoped shared API knowledge impact | Shared API impact; depends #96 and #308 |
| P2 | SYN-320: standard verification attestation envelopes (in-toto; C2PA optional) | Attestation envelopes after persisted receipt contract |
| P2 | SYN-109: documentation site on GitHub Pages | Publish docs with explicit delivered/proposed scope |
| P2 | SYN-302: syn graph serve - real-time interactive graph in the browser | Local graph UI; includes legacy #234 requirements |
| P2 | SYN-246: localhost graph UI server (Stage 2) | Legacy stage covered by #290; consolidate without dropping security criteria |
| P2 | SYN-295: re-validate the flat-vector ceiling before HNSW (SYN-225) | Measure actual flat vector limits before HNSW |
| P2 | SYN-307: on-device retrieval-model options - E5 asymmetric seam, EmbeddingGemma, MRL (ADR-045) | Retrieval model seam/evidence; do not silently install gated models |
| P2 | SYN-313: spike - wire the discarded BGE-M3 sparse output as a retrieval leg | Sparse output experiment; ship only on measured retrieval benefit |
| P2 | SYN-336: simultaneous multi-workspace from a single MCP server | Multiple workspace routing; authorization and mutation boundaries first |
| P2 | SYN-337: remote federation - syn remote add <git-url> | Remote Git federation with explicit trust/fetch boundaries |
| P3 | SYN-331: encryption at rest for .synapse/index.db | Index encryption is separate from source confidentiality; define threat model |
| P3 | SYN-334: support TOML frontmatter as alternative to YAML | TOML alternative after stable shared knowledge contract |
| P3 | SYN-235: MCP over HTTP/SSE - hosted gateway building block | HTTP MCP transport when a consumer justifies it; do not duplicate Soma authority |
| P3 | SYN-317: resident always-on MCP server (OS auto-start + catalog discovery) | Resident daemon only after measured process-overhead trigger |
| P3 | SYN-174: restore Intel macOS (x86_64-apple-darwin) - ort-tract or ONNX from-source | Intel substrate proof without adding an untested second runtime |
| P3 | SYN-233: verifiable identity / CV layer (signed, checkable attestations) | Identity/CV evidence outside the initial operational product slice |
| P3 | SYN-232: declare explicit open-core boundary (governance/compliance edition) | Commercial/open-core boundary requires product evidence and license decision |
| P3 | SYN-230: ‘syn sync’ - optional end-to-end-encrypted vault sync (hosted + self-hostable) | Hosted encrypted sync after authority and durable protocol |
| P3 | SYN-286: (gate) HNSW vector index when the corpus crosses the budget | HNSW explicitly gated by #283 measurement and real demand |
| P3 | SYN-225: swap sqlite-vec flat scan for HNSW (vectorlite) - execute ADR-008 pre-staged plan | Older HNSW issue superseded by explicit gate #274 |
| P3 | SYN-333: desktop GUI (tauri) | Desktop GUI demand evaluated after Soma integration |
| P3 | SYN-332: TUI (ratatui) interactive mode | TUI demand evaluated after CLI/API workflow |