chore: groom the seven stalest tasksHEADmain

I restamped all seven. The popup bug now names the org-capture float, records the fix shape (a maxsize windowrule in the dotfiles hyprland config), and picks up :quick: and :solo:. The net-doctor heading now names the remaining work (VM live verification) instead of the shipped spec build. The audio-doctor mic task loses :solo: while its spec is still DRAFT with open decisions.

1 files changed, 19 insertions, 5 deletions

diff --git a/todo.org b/todo.org
index aafdc07..da7dd07 100644
--- a/todo.org
+++ b/todo.org
@@ -22,6 +22,9 @@ The vocabulary is open — topic tags are coined as needed — so these are conv
 - *Topic / area* (open): the subsystem a task touches — e.g. =:hyprland:= =:waybar:= =:mpd:= =:music:= =:network:= =:tooling:= =:llm:= =:eask:= =:pocketbook:= =:cmail:=. Coin a new one when it aids filtering.
 * Archsetup Open Work
 ** DOING [#B] Widget gallery upgrades :feature:design:
+:PROPERTIES:
+:LAST_REVIEWED: 2026-07-13
+:END:
 Usability + documentation pass over the [[file:docs/prototypes/panel-widget-gallery.html][panel widget gallery]], orthogonal to the component-generation spec work, so it runs on the =gallery-upgrades= branch (squash merge to main after Craig's UI confirmation + tweaks). Items 1-4 run as a no-approvals speedrun (Craig authorized 2026-07-12); item 5 is a joint brainstorm after the merge.
 *** 2026-07-12 Sun @ 12:59:48 -0500 Added the card size toggle (1x/2x/3x, default 3x)
 Masthead size chips apply CSS zoom per grid; 2x/3x drop the 1320px wrap cap so wide monitors get the room. CDP-verified: 84 cards, no exceptions, fader drag and toggle click both track at 3x (drag helpers are rect-ratio based, so zoom is transparent to them).
@@ -66,6 +69,7 @@ Brainstorm WITH Craig (after the squash merge, not solo): break the components d
 ** DOING [#B] Retro widget catalogue :feature:design:
 :PROPERTIES:
 :SPEC_ID: 3ac0d42c-db1a-4d21-bce4-e63785fef0ba
+:LAST_REVIEWED: 2026-07-13
 :END:
 The panel widget gallery ([[file:docs/prototypes/panel-widget-gallery.html][docs/prototypes/panel-widget-gallery.html]]) grows into a retro-instrument component catalogue: reference photos of period hardware → gallery cards (the visual + behavioral spec) → reusable components for three targets (emacs svg.el, web/React, waybar). Tokens single-sourced in [[file:docs/prototypes/tokens.json][tokens.json]] (gen_tokens.py emits web/waybar/elisp); svg.el proof widget shipped (gallery-widget.el, needle gauge). Reference photos live in [[file:working/retro-stereo-widgets/][working/retro-stereo-widgets/]]. Collection converged at R56 (109 cards, all behaviorally verified; probes in [[file:tests/gallery-probes/][tests/gallery-probes/]]).
 
@@ -88,11 +92,15 @@ Restyle the audio panel's GTK CSS onto =tokens-waybar.css= + the banked composit
 After ~5 hand ports, weigh widget-level codegen with evidence (mechanical duplication vs judgment per port). Recorded as a dated decision in the spec; go spawns its own spec.
 *** TODO Flip the spec to IMPLEMENTED
 When the phases above close: status heading keyword → =IMPLEMENTED=, dated history line with the reason, Metadata =Status= mirror. Three lines, one file.
-** TODO [#C] Notification/capture popup grows too large :bug:hyprland:
-A popup (Craig calls it the notification/capture popup) gets too large; it needs a max on its scale so it never exceeds a threshold — his guess is roughly X by 120 (from roam inbox, 2026-07-11). Confirm which popup and window rule. Minor severity × most users, frequently = P3 = [#C].
-** TODO [#B] Net doctor expansion v1 — build the READY spec :feature:dotfiles:network:
+** TODO [#C] Org-capture float popup grows too large :bug:hyprland:quick:solo:
+:PROPERTIES:
+:LAST_REVIEWED: 2026-07-13
+:END:
+The org-capture float (confirmed by Craig, 2026-07-13) gets too large; it needs a max on its scale so it never exceeds a threshold — his guess is roughly X by 120 (from roam inbox, 2026-07-11). Fix shape: a maxsize windowrule on the org-capture float rule in the dotfiles hyprland config (archsetup owns dotfiles end to end). Pre-flight question: the exact cap values. Minor severity × most users, frequently = P3 = [#C].
+** TODO [#B] Net doctor expansion v1 — VM live verification :feature:dotfiles:network:
 :PROPERTIES:
 :SPEC_ID: ce29b103-ed9d-4f56-bf8c-9ed8fe680ff3
+:LAST_REVIEWED: 2026-07-13
 :END:
 Build the [[file:docs/specs/2026-07-11-net-doctor-expansion-spec.org][net doctor expansion]] (IMPLEMENTED). Adds the control-plane cluster (rival-manager / nm-masked / keyfile-perms) and a sharper auth verdict to the shipped net doctor (=~/.dotfiles/net/=). Archsetup owns the dotfiles work end to end — edit, test, commit, and push in =~/.dotfiles=, then drop an inbox note. All build phases shipped and fake-verified; the one open piece is the VM live verification below.
 *** 2026-07-11 Sat @ 02:47:47 -0500 Built the read-only control-plane probe
@@ -150,6 +158,9 @@ Scope note (Craig, 2026-07-07): realtime lamp *behavior* only. The maintenance c
 Addendum (Craig, 2026-07-07): DO backport the 3.5-entry height convention — every panel's output well caps at 3.5 visible entries, the half-visible entry being the scroll cue, with the dark slate-on-black scrollbar. Layout stays compact per above; only the height cap + scroll affordance carries over.
 
 ** DOING [#B] Run-time privilege model, standard across every panel doctor :feature:dotfiles:
+:PROPERTIES:
+:LAST_REVIEWED: 2026-07-13
+:END:
 The audio input/output doctor is gaining a run-time privilege model (see [[file:docs/specs/2026-07-10-audio-doctor-input-side-spec.org][docs/specs/2026-07-10-audio-doctor-input-side-spec.org]], decision "The doctor may use sudo, resolved by context at run time"). Craig's call, 2026-07-10: make it a standard, "revise the other panels to be consistent with these changes."
 
 The model: a doctor resolves its privilege at run time from three signals — passwordless sudo available (=sudo -n true=, which never hangs), a tty to prompt at, and whether it is the GUI panel. Four remedy classes: Auto (user-scope, reversible), Privileged (needs sudo — runs where passwordless, prompts on a CLI tty, degrades to Guide in a GUI with neither), Reboot-tail (run the applicable part, then instruct the reboot), and Guide (physical/BIOS/wait-for-upstream, nothing to run). Safety floor: every Privileged and Reboot-tail remedy defaults to Confirm or Arm tier, never silent Auto, because passwordless sudo is not consequence-free.
@@ -452,7 +463,7 @@ Consider: document as post-install step or create a sync script.
 
 ** TODO [#B] Test + CI infrastructure :test:
 :PROPERTIES:
-:LAST_REVIEWED: 2026-06-28
+:LAST_REVIEWED: 2026-07-13
 :END:
 Umbrella for the test-harness and CI-automation buildout. Consolidated from the 2026-06-28 task audit: these were scattered top-level tasks circling one effort, re-homed as children so the work reads as a unit. Each child ships independently and keeps the priority it carried before. No CI runner exists yet, so the CI/CD-pipeline child gates several of the others.
 
@@ -1344,7 +1355,10 @@ Rewrote the bare =if $var= boolean conditionals (=show_status_only=, =fresh_inst
 *** 2026-05-26 Tue @ 15:27:09 -0500 eval task moot — the line-434 eval is gone, the survivor is deliberate
 Verified: the only =eval= left in =archsetup= is line 578 in =retry_install=, and it's intentional and documented — it captures =$?= directly from =eval "$cmd"= to dodge the if-compound-swallows-exit-code trap. Replacing it with an array would reintroduce that bug. The line-434 eval this task pointed at no longer exists. Nothing to change.
 
-** TODO [#B] The audio doctor never checks the microphone :bug:audio:solo:
+** TODO [#B] The audio doctor never checks the microphone :bug:audio:
+:PROPERTIES:
+:LAST_REVIEWED: 2026-07-13
+:END:
 The classifier is output-only. =diag.probe_semantic= already collects =default_source= and =default_source_present=, and =classify.py= reads neither: the word "source" appears once in the whole module, in the graph row that counts them. So a muted mic, a default source naming an unplugged device, or a mic at zero volume all classify as =healthy=, and the verdict prints "the default output is present and audible" while the input side goes unexamined. Found 2026-07-10 while asking whether the doctor would have caught Chrome losing the mic. It would not have.
 
 Not a scope decision. The spec's Non-Goals never say the doctor is output-only, and its Summary calls it a doctor for "a broken sound stack".