2026-05-20 Delta

• The tracked platform audit is still green on May 20 with 0 open PRs, 0 open issues, 0 discussion maintainer-touch gaps, 0 answerable Q&A gaps, 0 conflicting PRs, and 0 blocking dirty files across affaan-m/ECC, affaan-m/agentshield, affaan-m/JARVIS, ECC-Tools/ECC-Tools, and ECC-Tools/ECC-website.
• The new #2015 setup-location Q&A was answered and marked accepted. The answer keeps install guidance conservative: do not install into C:\; use a normal workspace, install the ecc@ecc Claude plugin once, copy only needed rule folders when using manual rules, and avoid stacking plugin plus full manual install.
• ECC-Tools PRs #80-#88 landed the next hosted-platform batch: runtime receipts now require failure reasons; AgentShield fleet approval IDs survive hosted security review and render into comments/check-runs; Linear follow-up sync reuses deterministic external IDs; hosted AgentShield remediation items sync to Linear; hosted job observability events are emitted for queued, completed, blocked, failed, and budget-blocked states; and both hosted job status comments and hosted depth-plan check-runs read back recent observability/budget events. PR #88 adds the authenticated observability API readback for operator dashboards and production smoke tests.
• AgentShield PR #94 landed the next cross-harness adapter slice: Zed and VS Code are first-class adapter detections, .zed/settings.json and .zed/tasks.json are discoverable scan inputs, and .zed/setup.mjs now trips the same AI-tool persistence IOC rule as .vscode/setup.mjs.
• AgentShield PR #95 cleared the remaining default-branch Dependabot alert by moving transitive brace-expansion 5.x lockfile entries to 5.0.6; the post-merge Dependabot open-alert API now returns [], and local npm audit --audit-level=moderate returns 0 vulnerabilities.
• ECC PR #2019 merged the Marketplace Pro selected-target release-gate sync into this repo as 30f60710d4e0424fc70d9bbdc105009db141d9d8. The post-merge main CI run 26135974576 completed green across lint, coverage, security, validation, and the full OS/package-manager matrix.
• ECC PR #2020 merged the selected-target announcement-gate mirror as c2471fe5c535310f8a8008c9ed7ea9f6757b33f2. The post-merge main CI run 26136949698 completed green across lint, coverage, security, validation, and the full OS/package-manager matrix.
• ECC-Tools PR #90 added the selected-target official announcement gate for billing:announcement-gate -- --select-ready-target; safe production preflight no longer requires a raw GitHub login and now blocks only on the local/internal INTERNAL_API_SECRET input before live execution.
• ECC-Tools PR #91 added --env-file support to both billing gate scripts so ignored local operator credential files can supply INTERNAL_API_SECRET, Cloudflare auth, Wrangler auth mode, or target fallbacks without printing secret contents. Verify, Security Audit, and Workers Builds passed before merge as 72119a1, and main CI run 26137280847 completed successfully after merge.
• ECC-Tools PR #92 added a non-breaking INTERNAL_OPERATOR_API_SECRET bearer accepted by privileged internal API routes without rotating the existing INTERNAL_API_SECRET; Verify, Security Audit, and Workers Builds passed before merge as 18d80197be779619283e0b37e2952bac53819a07, and the merged Worker was deployed to api.ecc.tools.
• The May 20 live native-payments gate now passes: the vault-backed Wrangler readback selected a ready Marketplace Pro target with fingerprint e953a74209fe, both key families present, webhook evidence ready, 0 KV blockers, and the official npm run billing:announcement-gate -- --select-ready-target returned announcementGateReady: true, 0 required actions, 0 blockers, and audit summary 6 pass / 1 warn / 0 fail through the new operator bearer path.
• ECC-Tools PR #93 recorded that live billing evidence in the app launch checklist and distribution roadmap as d3d62df83fa075660fa4530c3e0edc311a4355fe; public native-payments copy is no longer blocked by billing evidence, but publication timing remains behind the final release, plugin, live URL, and owner-approval gates.
• Linear ITO-54 and the ECC Platform Roadmap now have the May 20 ECC-Tools hosted observability update comments 74dcc101-3be5-4173-be13-62b80d54f569 and 348ea8f5-2a2d-46d9-a0fe-ed99653e7fe5, after earlier PR #84/#85 comments recorded remediation sync and hosted observability events. PR #88 is recorded in Linear comments 291e2a4b-06e3-4672-a057-cdb141478161 and b2d35de0-ca49-44cb-982a-ddec229e7691; AgentShield #94 is recorded in ITO-49 comment faed69dd-35f5-469d-acb5-ddde6a70d6a1 and project comment 70187c1e-d481-4181-b418-09bd65d54b5e; AgentShield #95 is recorded in ITO-49 comment 371fc3e4-611f-4d20-a23f-67db1260b418, ITO-57 comment bd06e252-15c1-4256-b667-caa3f64f5968, and project comment 22c2c388-2fd1-4dea-a939-6141f40c9a21.
• Linear ITO-61 and the ECC Platform Roadmap now have the May 20 Marketplace Pro release-gate comments 467d148a-712a-4777-aad9-95593e9f1739 and 7642ee9c-3107-400c-a229-53e2895a8914, recording ECC-Tools #89, ECC #2019, the green post-merge CI run, and the remaining internal bearer-token gate. The repo mirror now also records ECC-Tools #90 and #91 as the selected-target announcement gate and billing gate env-file operator-path follow-up.