chore(triage): 2026-04-25 evening swarm — 45-issue myrmidon close-out

[mvillmow]

Summary

Second myrmidon swarm pass on ProjectKeystone (2026-04-25 evening). Classified all 75 open issues and implemented EASY + MEDIUM in parallel waves.

Pre-swarm housekeeping

Action	Issues
Closed ALREADY-DONE	#311, #251 (cnats already in conanfile.py)
Closed META tracker	#128 ([Audit] Overall Grade C-)
Deferred cross-repo blocked	#432 (awaiting Agamemnon#27/#29)
Phase 0 fix (required)	#451 — gitleaks SARIF jq fix + .gitleaks.toml allowlist (security-report was failing main, blocking all PR merges)

Classification results (75 issues)

Class	Count
EASY	17
MEDIUM	28 (incl. #310 reclassified from ALREADY-DONE)
HARD	26
ALREADY-DONE closed	2
META closed	1

PRs opened this session

EASY waves (Haiku)

PR	Issues	Description
#451	—	Phase 0: fix security-scan.yml gitleaks SARIF parsing
#452	#341	Increase coverage threshold 85→90%
#453	#336	Add Logger::init() to monitoring startup
#454	#234	Correct CLAUDE.md directory tree sections
#455	#433, #366	Update CLAUDE.md + ADR cross-refs after Python migration; update modules.md + build-system.md
#456	#157	Remove stale Mojo/ML-Odyssey agent configs
#457	#223	Extend TaskCleanupOldTasks with all terminal phases
#458	#252	Validate nats-subjects.md against implementation
#459	#276	Validate cert+key parity in NatsConfig
#460	#221	Make phaseToString/stringToPhase public utilities
#461	#368	Pin release-please-action to SHA
#462	#369	Add softprops/action-gh-release to Dependabot
#463	#260	Reconcile duplicate clang-format CI vs pre-commit
#464	#291, #292	pixi environments table + dev task entries

MEDIUM waves (Sonnet)

PR	Issues	Description
#465	#328, #370	CMakeLists: CPack dry-run target + spdlog linkage docs
#466	#350, #351, #232, #247, #353	ci.yml mega-agent: sccache SHA pin, cache monitoring, conan.lock, CLAUDE.md sync, composite action
#467	#184, #185, #186	Fix failure propagation in lead-agent dispatch chain
#468	#324	Fix deps-tsan CMakeUserPresets re-inclusion
#469	#322	GracefulShutdown: drain queue before exit signal
#471	#337	Assert Logger output in backpressure + thread-pool tests
#472	#331, #204, #285	NATS max_attempts, NatsConnection readiness probe, correlation_id field
#473	#175	Convert unsized ints in benchmarks/
#474	#174	Convert unsized ints in test files
#475	#179, #196, #98	cnats 3.9.3→3.12.0; fresh agent list in advance_dag; background DAG scan
#476	#183, #180	ComponentLeadAgent failure tests; wire NATSListener into daemon
#477	#279, #302, #263	validateSubjectToken at gRPC boundary; in_flight Prometheus metric; ADR index cleanup
#478	#222, #224, #225	yaml phase validation; CancelTask notification; TASK_PHASE_ERROR handling

HARD deferred (26 issues — require human review)

#374, #432, #349, #346, #333, #332, #330, #323, #321, #314, #313, #312, #307, #303, #297, #287, #284, #275, #273, #254, #250, #310, #210, #206, #205, #181, #178

Key HARD patterns:

• TSan + concurrentqueue/moodycamel false-positive blocker (concurrentqueue incompatible with -fsanitize=thread (TSan) #321, Add TSan test coverage for NatsListener stop() / start() concurrency #332, Add TSan test run to nats_listener_tests CI step #181, Add TSan build verification for CorrelationScope thread-local access #287)
• Live NATS server required for integration tests (Add NATSListener integration test against a real NATS server #178, Add integration test for NatsConnection against embedded NATS server #205, Add integration test: NATSListener rejects malformed real NATS subject #307, Add CI job that runs NATS integration tests with service container #312, Add TransparentBridge integration tests (local ↔ NATS routing) #314)
• Architectural bridge design (Add C++ NATS JetStream client integration to Keystone #250, Integrate NatsConnection with NATSListener from branch 86 #273, Wire NatsListener into the TransparentBridge / MessageBus #333)
• Circular CMake target dependency (keystone_core / keystone_concurrency circular link dependency #323)
• Cross-repo coordination blocked (chore: delete Python orchestration layer after Agamemnon migration lands #432)

Known failure modes encountered (new to v1.8.0 / captured by existing skill)

All failure modes were already captured in batch-low-difficulty-issue-impl v1.8.0 from the morning swarm. No new patterns discovered in this session.

Notes

• PR chore(ci): add unified required-checks workflow #450 (unified-required-checks workflow) is open with failing CI — leave for manual review after this swarm completes.
• PR fix(ci): use jq to parse gitleaks SARIF and scope ❌ gate to real findings #451 (security-scan fix) must merge first to unblock all other PR auto-merges.
• Implement NATSListener with nats.c JetStream subscription loop #310 was reclassified MEDIUM (nats_listener.cpp exists but uses push-subscribe not pull-Fetch as required).

🤖 Generated with Claude Code

[mvillmow]

Closing this triage-tracker issue. All child work items from the 2026-04-25 evening swarm have been:

• Addressed in PRs fix(ci): use jq to parse gitleaks SARIF and scope ❌ gate to real findings #451–fix(network): TASK_PHASE_ERROR handling, CancelTask notification, yaml phase validation #478 (merged 2026-04-26)
• Classified as ALREADY-DONE and closed (where applicable)
• Elevated to the 2026-04-26 architecture wave for NATS integration work
• Documented as HARD blockers (TSan+concurrentqueue, closed separately)

Session tracking complete.