Combined register (2026-07-22): this backlog and the VisionClaw remediation ladder now share a single unified TODO with a six-state unblock taxonomy:
../../../docs/TODO-unified.md(governed by PRD-024 / ADR-133). Entries below remain authoritative for agentbox detail; the unified register is the cross-repo view the final-mile sprint works from.
Living document for known gaps and deferred decisions. Each entry carries the date it was identified and what unblocks it. Remove entries when done; move decisions into an ADR when they become architectural.
[skills.tree_search_coder].enabled = true in the manifest and the flake bakes
ENABLE_TREE_SEARCH_CODER=true into the supervisor environment, but nothing
consumes it: skills/tree-search-coder/ (SKILL.md + implementation) has never
been authored. The gate is armed but inert.
Next steps:
- Author the skill per ADR-020 §tree-search / PRD-008 §3.3: N candidates,
each executed in a fresh code-interpreter kernel, scored by assertion pass;
respect the existing manifest tunables (
max_candidates = 5,per_branch_timeout_s = 60,spend_cap_usd = 0.50). - Add a phase-6 closure probe (or entrypoint check) if the implementation
ships as an npm/python closure — follow the
mcp/aci-shellmakeNpmService pattern (pinned deps, lockfile,npmDepsHash, appRoot overlay). - Until then the gate may stay on (harmless) — or flip it off if manifest honesty is preferred over readiness.
feed_retrieval / feed_routing stay false until the trajectory corpus
clears the Wilson floor (aggregate_min_samples = 20 per action pattern).
Recording started 2026-07-05. Next steps once samples accumulate:
./agentbox.sh ruvector aggregate-effectiveness(dry-run first).- Flip
feed_retrieval = true, restart, observe re-ranking quality. - Then
feed_routing = truefor advisory [INTELLIGENCE] hints.
Deliberately not enabled during the capability-matrix session; each is a posture/exposure choice, not a technical gap:
| Surface | Flags | Consideration |
|---|---|---|
| Relay exposure | sovereign_mesh.relay.expose |
Opens nostr relay beyond loopback; populate allowed_pubkeys first (W039) |
| Mobile bridge | sovereign_mesh.mobile_bridge.enabled |
Requires relay exposure + phone npub in allowlist |
| Multi-user | sovereign_mesh.multi_user, per_user_agents |
Multiple DIDs on one box |
| Git pods / gateway | sovereign_mesh.git.read_public, networking.host_gateway |
Unauthenticated clone; container→host network |
| Payments | payments.consumer, payments.broadcast.*, skills.payment_router |
Enable when a concrete counterparty exists |
| Solid OIDC | enable_oidc (+ enable_dpop_cache, E033-coupled) |
Needs an OIDC issuer decision |
| Pod MCP surface | integrations.solid_pod_rs.enable_mcp |
Exposes the pod as 16 MCP tools |
| Kernel pip | skills.code_interpreter.allow_pip_install |
Allowlist-bound installs vs. fully sealed kernel |
| Capability | Flag(s) | Blocked on |
|---|---|---|
| ComfyUI | integrations.comfyui_external / skills.media.comfyui_builtin |
No ComfyUI service on visionclaw_network (builtin also needs a heavy image rebuild + source hash) |
| KG elevation / ontology axioms | sovereign_mesh.kg_elevation, skills.ontology.direct_axiom_load |
visionclaw-server:4000 unreachable |
| Ollama sidecar | providers.ollama.sidecar |
Confirm whether host ollama on :11434 exists; sidecar off is correct while it does |
| Nagual QE | toolchains.nagual_qe |
Upstream sqlx 0.9 SqlSafeStr compilation error |
None currently — see below for the two items closed on 2026-07-22.
— fixed 2026-07-22:scripts/ruvector-sidecar-update.shbackfill-embeddings curls Xinference from the host, where the compose DNS namexinference:9997does not resolveXINFERENCE_ENDPOINTnow defaults tohttp://localhost:9997whengetent hosts xinferencefails (host-side invocation),http://xinference:9997otherwise; an explicitXINFERENCE_ENDPOINTenv var always wins.GitHub enrichment blocked on— cleared 2026-07-22: a valid token (validated HTTP 200 against api.github.com) is present in the runtime env andGITHUB_TOKENunset.env(0600);[project_tracking].github_enrichment = true, applies at next boot. Note: the token is a broad-scope classic PAT (admin:org/repo/workflow) — consider swapping for a fine-grained read-only PAT scoped to issues+metadata.— fixed 2026-07-22: content moved todocs/user/browser.mdnames a linked-data viewer doc, not browser automationdocs/user/linked-object-viewer.md;browser.mdis now a short redirect stub (kept because existing links point at it);docs/README.mdandREADME.mdupdated to link the new filename.