✓ HIGH Guardrail hooks system4 hooks + 5 hookify rules, 54 tests passing
✓ CRIT Fix nginx-edge crash-loopRemoved dead backends, fixed certs, Docker networking
✓ HIGH Fix stalwart mailRocksDB corruption — switched manifest pointer
✓ HIGH Server migration — corePostgres, Redis, Mongo, RabbitMQ, cgroups, DNS
▶ HIGH Verify email send/receiveStalwart is up but delivery untested
▶ MED Prometheus exporterspostgres-exporter, redis-exporter running; need full scrape config
○ CRIT Nakama stack cutoverWITH ANDREW — staged at /opt/nakama, not started
○ HIGH Metis runtime fixACP binary removed upstream — sidecar rewrite needed
○ HIGH LetsEncrypt renewalNeed certbot + Cloudflare DNS challenge for proxied domains
○ HIGH Backupsrestic/borg to object storage — nothing is backed up yet
○ MED WireGuard VPNNeeded for spriffy access (ollama failover cascade)
○ MED p.echovr.de certsMia Grafana — needs cert provisioned on tethys
○ MED Cgroup rebalancing reviewScheduled monitoring of memory pressure across slices
○ LOW MadCityServers restock$57/mo Megapower Plus — email sent, waiting
✕ HIGH Decommission old LinodesBlocked on nakama migration — DO NOT DELETE
edit /opt/infra/nginx/tasks.conf to update // auto-renders every 10s