sev·
src·
sev id role source age summary
critical DE-FETCH-FAIL-FredOasFetcher.backfill canonical-market-data operational 25d FredOasFetcher.backfill (DS-066) last run failed; written=0; error=OAS_BBB: backfill returned no observations
critical DG-018 data-governance operational 16d AP-06 DEADLINE TOMORROW: credit + spread_recovery review due 2026-06-30. Review NOT initiated. last_reviewed: null.
high SEC-029 security operational 17d vite@7.3.2 HIGH (2 Windows-only advisories GHSA-v6wh-96g9-6wx3 + GHSA-fx2h-pf6j-xcff); fix CONFIRMED as vite@7.3.5 (within ^7.3.1 — NOT a major bump); npm audit fix safe to run on VM
high SEC-031 security operational 12d undici 7.25.0 HIGH — 7 advisories (range 7.0.0-7.27.2); lead: GHSA-vmh5-mc38-953g TLS cert bypass (CVSS 7.4); fix: npm update undici →7.28.0 (non-breaking 7.x minor); transitive devDep vitest→jsdom→undici; actual risk LOW (test-env only)
high SECRT-NPM-FRONTEND security-runtime operational 0d FinView frontend: 5 npm vulns (crit=0 high=2 mod=1 low=2)
medium A4-27 regulatory-readiness operational 29d AP-21 regulatory_frameworks backfill — RE-SCOPED: 9 evidence-backed tags applied (v3.8); remainder is NOT a simple gap (intentional empties + a §3.10 enum gap)
medium A4-30 regulatory-readiness operational 26d Records-grade per-model back-testing: run reserve engines on firm-calibrated books (so reserves reconcile) + define methods for the 8 method-pending Tier-1 models + wire the recurring schedule
medium B9-20 board-reporting operational 29d risk_report template missing stress test results — sections=['summary','holdings','risk'] has no stress scenario outcomes; board risk report omits scenario P&L impact
medium B9-21 board-reporting operational 29d Composition by sector/rating absent from all generated PDF/HTML report templates; charts visible in ReportPage UI via analytics API but not wired into ReportBuilder sections
medium BV-003 business-validation operational 125d APO 52.4bps NII gap is structural — Apollo Asset Management specialty is private credit/alternatives; standard L&A GA model doesn't have those asset classes
medium BV-016 business-validation operational 46d AOCIRiskSignal coverage gap: 4/14 universe firms exceed RED threshold (>40% AOCI/TE). BHF=-54.7% ADDED tick #198 (FY2025 first check). EQH≈-379% (XBRL issue BV-029), CRBG=-102.4%, MET=-63.7%. PFG/RGA removed tick #187. LNC/FG/JXN removed tick #163.
medium BV-026 business-validation operational 29d RGA equity section display gap: displayed SHE=10,816M + NCI=90M=10,906M vs metadata total_equity=13,461M; 2,555M (19%) unaccounted. Stated L/E=9.9x also unexplained: metadata TL/TE=10.63x, no reconciliation path found.
medium BV-027 business-validation operational 29d RGA balance sheet liabilities display gap: 8 displayed items sum 107,769M vs metadata TL=143,039M; 35,270M (24.6%) missing from display schema. Pure reinsurer liabilities may include deposit-type contracts not captured.
medium BV-029 business-validation operational 27d EQH FY2025 total_equity=-74M in dashboard metadata. Canonical store may have correct value (per d047 overlay). balance_sheet display items (amount_current) show FY2024 values (TA=295,866M, TE=3,443M) vs FY2025 metadata (TA=317,990M, TE=-74M) — temporal mismatch. Makes AOCI/TE and L/E unreliable for FY2025 from JSON.
medium CA-027 controls-audit operational 24d Appendix-B doc drift — 3 FAIL: L1 FinView table=15/registry=16; L4 InsModel table=34/registry=38; subtotal 122 vs 127
medium CA-029 controls-audit operational 23d docs consistency FAIL — modelling/validation_evidence/M-071/v1.0.0/README.md:53 says 45 engines; registry has 133
medium CA-034 controls-audit operational 5d insightalm ci.yml state=disabled_manually since 2026-03-06 (~116d) — last 5 runs all failure; no Python test gate active
medium CA-036 controls-audit operational 0d ORCH-PR-STUCK-code-quality-3592: orchestrator tick #385 code-quality PR #3592 open ~9h (created 09:18Z, seen at 18:06Z tick #387)
medium D3-36 code-quality operational 24d CompanyAnalysisPage.tsx regressed from resolved 585 LOC to 926 LOC (+341 LOC); D3-22 resolution undone by PRs #52/#57/#60 (merged 2026-05-25); page over 700-LOC threshold
medium DE-STALE-FINVIEW-MARKET-DATA data-engineering operational 43d finview-market-data: 5 operational tables past their stale threshold (e.g., assumption_audit_log latest=2026-03-08T17:29:02Z, age=113d >= 90d)
medium DE-STALE-INSMODEL-UNIFIED data-engineering operational 49d insmodel-unified: 7 operational tables past their stale threshold (e.g., asset_allocations latest=2024-01-01, age=911d >= 90d)
medium DE-STALE-PRODUCTSCOPE data-engineering operational 22d productscope: 4 operational tables past their stale threshold (e.g., companies latest=2026-03-12 07:20:37, age=110d >= 90d)
medium EG-026 engine-governance operational 15d Duplicate A-101 ID in assumption_domains.yaml — two different definitions share the same ID (R-06 violation: unique IDs required). Assign new A-NNN (A-286+) to collateral posting threshold entry.
medium EG-029 engine-governance operational 0d D064 P2 removed finlib/ from FinView (PR #112, merged 2026-06-29). Engine registry has 44 engines with codebase=FinView + path=finlib/... that now live in platform-lib package. Registry codebase/path fields are stale. B-06: binding manifest generator resolved via installed package (all 49 bindings intact, B-02 PASS). Registry codebase tag needs update to platform-lib for the 44 finlib-origin engines.
medium F1-20 codebase-hygiene operational 19d insightalm remote has 156 branches (+11 vs 145 at tick #367); 114 agent/* (+1); 110 pre-June stale (unchanged); 4 June-2026 agent/* (+1); 41 non-agent non-main (+10 REGRESSION)
medium PA-021 platform-architect operational 9d VM migration repos.tsv (PR #3020) introduces 4 new 'core' repos not in ecosystem_registry.yaml: insightalm-mrm, modelriskapp, ecosystem-mapper, insightalm-web. insightalm-mrm is governance-adjacent. 9d open — no change.
medium PA-022 platform-architect operational 1d bankview codebase referenced as active sibling operator surface (banking, port 8011) housing banklib.L3.* engines, but not registered in ecosystem_registry.yaml. Carry.
medium PA-023 platform-architect operational 0d platform-lib (vsdhaka/platform-lib) is the extracted finlib shared package (D064 P2, FinView PR #112 merged 2026-06-29) consumed by FinView/bankview/energyview but NOT registered in ecosystem_registry.yaml. First-class platform dependency — the shared pricing kernel.
medium PM-047 program-management operational 8d Issue #3051 (2026-06-21T14:32Z): Heartbeat Layer-5 false-positive — vm-workflows flagged STALE while GHA runs actually SUCCEED. Post-migration runners (vsdhaka-insightalm.vm-runner-1, vsdhaka-ecosystem.vm-runner-1-ecosystem) are active; SRE, DE, UCV workflows running and succeeding. Root cause: probe measures staleness by last-commit of watermark, but workflows no longer commit that watermark. Fix direction: rebase probe on GHA run history (Actions API) or restore watermark-commit step in each workflow YAML. CA-032 'runner offline' characterization is incorrect — reclassify to 'watermark commit broken'.
medium PM-048 program-management operational 8d Issue #3052 (2026-06-21T14:38Z): VM migration SPA build gap — FinView (backend/main.py:325 frontend/dist check) and tenk2win (server/config.py FRONTEND_DIST) both served 'SPA not built' JSON. 03_clone_and_venvs.sh never ran npm ci/build. Fix applied live (npm ci && npm run build in each frontend/); 06_verify.sh also patched (was giving FinView a false-pass on 200 API JSON). Machinery fix: 03_clone_and_venvs.sh needs 'Build SPA frontends' pass committed. Principal action needed: commit 03 + 06 fixes.
medium SEC-030 security operational 14d js-yaml 4.1.1 GHSA-h67p-54hq-rp68 — Quadratic-complexity DoS in merge key handling via repeated aliases (transitive devDependency; actual risk LOW — build-time only)
medium SRE-API-001 sre operational 0d FinView processes running but /api/v1/health returned status 429
low A4-26 regulatory-readiness operational 115d gold_copy CVACalculator/@engine binding — monitor_only per clone-on-demand sub-repo policy (gold_copy not in sandbox)
low A4-29 regulatory-readiness operational 26d §3.10 regulatory_frameworks enum gap: ~10 assumptions have a real regulatory nexus but NO matching tag string (DFAST/CECL/ASC-326/RBC-action-levels/RBC-reinsurance-credit)
low B9-22 board-reporting operational 29d Schedule CRUD missing UPDATE endpoint — users must delete+recreate to change frequency or template; GET/POST/DELETE present, no PUT/PATCH
low BV-014 business-validation operational 46d roe_pct null for 3/14 universe firms (CRBG, EQH, NYL) — down from 10/14. ROE now populated for 11/14 firms; residual nulls have legitimate structural reasons.
low BV-018 business-validation operational 42d EQH FY2024 computed ROE anomalously high (38% net / 58% adj) due to AOCI-compressed equity — same compression dynamic as BV-017 (LNC). TE=3443M vs net_unrealized_gl_b=-8.1B.
low BV-020 business-validation operational 36d EQH NII yield cross-check discrepancy 29bps: stated=4.5%, computed=4.21% (4896M / 116400M period-end GA investments). Exceeds 20bps contract tolerance.
low BV-021 business-validation operational 33d FG FY2025 metadata BS gap 113M (TA-TL-TE=113M): Roar JV 30% NCI not captured in XBRL StockholdersEquity field. Same Phase 1 XBRL artifact as BV-001/BV-008/BV-009.
low BV-022 business-validation operational 33d JXN FY2025 metadata BS gap 389M (TA-TL-TE=389M): CLO VIE NCI not in XBRL StockholdersEquity. FY2024 CLO VIE NCI was 218M; gap grew to 389M (+78%), consistent with structured product expansion.
low BV-023 business-validation operational 33d FG NII yield period-end vs average methodology discrepancy 29.2bps (stated=4.38%, period-end computed=4.09%). Exceeds 20bps tolerance. Same root cause as BV-020 (EQH).
low BV-024 business-validation operational 33d JXN NII yield period-end vs average methodology discrepancy 28.7bps (stated=4.84%, period-end computed=4.55%). Exceeds 20bps tolerance. Same root cause as BV-020/BV-023.
low BV-025 business-validation operational 29d AFL liabilities_to_equity_x=3.5x matches total_investments/equity (103.8B/29.49B=3.52x) rather than TL/equity (86.98B/29.49B=2.95x). Investment-leverage metric used instead of balance-sheet L/E. Supplemental-health archetype characteristic.
low BV-028 business-validation operational 29d UNM total_revenue_m=null (XBRL coverage gap). UNM premium-based revenue doesn't map to a single us-gaap:Revenues concept. Source notes confirm 26 null fields. Same structural pattern as BV-011.
low BV-030 business-validation operational 27d MET FY2025 BS gap=523M (TA-TL-TE). No RNCI in metadata. Likely NCI from international subsidiaries not captured in Phase 1 XBRL refresh.
low BV-031 business-validation operational 27d PFG FY2025 residual BS gap=169M after accounting for RNCI=337.7M (gross gap=507M). Additional NCI or preferred stock not captured.
low BV-033 business-validation operational 26d APO BS gap 19,174M — NCI in consolidated investment vehicles (CLOs, VIEs, credit funds) not captured in metadata.total_equity.
low BV-035 business-validation operational 24d LNC L/E stated 46.3x vs computed TL/TE 37.3x (9.0x unexplained gap). Insurance-leverage_x=20.1x is consistent with GA-only TL/TE=20.7x, but the stated 46.3x can't be reconciled to any standard insurance leverage calculation. Implied TE denominator=8,775M (2,131M less than stated TE=10,906M).
low BV-036 business-validation operational 24d NYL BS gap 1,700M (TA=431,900 - TL=403,800 - TE=26,400 = 1,700M). Mutual insurer — gap likely AVR/IMR (Asset Valuation Reserve / Interest Maintenance Reserve) or surplus notes not captured in total_equity. Carry: AOCI/TE=-77.3% RED on STAT basis (BV-016 note).
low BV-037 business-validation operational 24d PRU FY2025 BS gap 1,204M after RNCI (TA=773,740 - TL=738,159 - TE=32,438 - RNCI=1,939 = 1,204M). Additional NCI from international subsidiaries (US, Asia, EMEA, LAM segments) not captured in metadata. Same family as BV-021/022/030/031.
low BV-040 business-validation operational 19d CRBG FY2025 GAAP net loss -$366M vs adj_operating_income +$2,966M ($3.3B swing). adj ROE=21.25% reasonable; GAAP ROE=-2.62% requires normalization. MRB fair value suppression pattern (same as JXN, EQH).
low BV-042 business-validation operational 12d APO CS.total_nii_m=1,371M is AM-segment NII only, not total insurance NII (~$11.8B). Stated nii_yield_pct=5.03% is correct but NII field understates by ~8.6x.
low BV-044 business-validation operational 7d comparative_data.json stale (generated 2026-02-26, FY2024 metrics) vs per-firm dashboards refreshed to FY2025; includes GA (out-of-universe, KKR-private) as firm #15; frontend cross-firm comparison views serve inconsistent FY2024/FY2025 data.
low BV-045 business-validation operational 5d SCOPE EXPANDED tick #358: 11/14 universe firms have balance_sheet_assets arrays anchored to FY2024 (comparative_arrays_anchor_year=2024) while metadata/comparative_summary show FY2025. Largest gaps: APO 76.4B (16.6%), MET 67.7B (9.1%), PRU 38.2B (4.9%), RGA 37.9B (24.2%), LNC 26.4B (6.3%), PFG 27.7B (8.1%). Core metadata financials PASS for all. Only CRBG, UNM, NYL (FY2024) have current arrays. Pending narrative curation across entire universe.
low BV-046 business-validation operational 1d MET FY2025 BS gap 523M: TA=745,166 - TL=716,245 - TE=28,398 = 523M. Likely NCI from international subsidiaries (US/Asia/EMEA/LAM segments) not captured in metadata.total_equity. Consistent with BV-043 leverage methodology: TL/(TE+NCI~2080M)=23.50x matches stated 23.5x, implying NCI~2,080M; BS gap=523M is the visible mezzanine fraction.
low CA-031 controls-audit operational 22d assumption_domains.yaml metadata inconsistent — total_assumptions=162, domain_assumptions=161, actual_domain_sum=164
low D3-23 code-quality operational 65d Python source files >500 LOC: 7 files (improved from 8; market_data.py 509→434 via PR #99 canonical-diagnostic split; insmodel_bridge.py grew 803→827 +24 LOC via PRs #94/#100)
low DE-STALE-FINVIEW-APP data-engineering operational 22d finview-app: 1 operational tables past their stale threshold (e.g., portfolios latest=2026-03-09 02:24:05.681751, age=113d >= 90d)
low DE-STALE-INSMODEL-ASSUMPTIONS data-engineering operational 45d insmodel-assumptions: 1 operational tables past their stale threshold (e.g., company_rbc_factors latest=2026-02-16, age=134d >= 90d)
low DG-006 data-governance operational 52d Mortality qx-data acquisition — 3 tables remaining (CSO 2025, VBT 2025, MP-2024). No SOA updates tick #377.
low DG-015 data-governance operational 25d metadata.classification header off-by-1 (planned): planned header=24, actual=23; active+total now correct
low DG-017 data-governance operational 22d assumption_domains.yaml 4-way metadata inconsistency: total=162(->164), domain=161(->164), enumerated=161(->164), domain_count=18(->19)
low E1-31 release-management orchestrator-tick-202 25d insightalm [Unreleased] gap — ~65+ substantive governance PRs not documented (prior ~51+; 14 new since tick #371)
low E1-32 release-management orchestrator-tick-202 25d FinView [Unreleased] header stale — reads 'PRs #30-#94' but latest is PR #114 (20 new PRs: #95-#114, of which #108/#111/#112 documented in content)
low E1-33 release-management orchestrator-tick-202 25d contract_registry.yaml as_of '2026-05-25' not bumped after 4 accumulated updates
low EG-021 engine-governance operational 31d M-002 (VM-21) and M-003 (VM-22) doc_currency behind — InsModel:stat_reserve_engine.py in behind_surface for both; engine changed by InsModel PR #80. Cards need review.
low EG-023 engine-governance operational 18d engine_registry.yaml metadata.total_engines=132 but actual count is 139 (+7 gap). Patch: bump metadata to 139.
low EG-025 engine-governance operational 18d insmodel.L3.rating_model carries tier=tier-3 (non-canonical) — should be tier-3-infra per registry taxonomy. 1-line patch.
low EG-027 engine-governance operational 1d model_registry.yaml metadata.total_models=35 but actual count is 42 (+7). Banking (M-421/422/423) + energy (M-431/432) models added without bumping metadata. Patch: bump to 42.
low EG-028 engine-governance operational 1d banklib.* (3 engines, bankview codebase) and energylib.* (2 engines, energyview codebase) in engine_registry without verified binding manifests. bankview not in ecosystem_registry (PA-022). Confirm bankview/.governance/binding_manifest.yaml exists on VM.
info BV-006 business-validation operational 65d Ecosystem crosscheck coverage 2/14 firms (APO, PRU; MET dropped vs prior). Staleness RESOLVED: ecosystem pipeline ran 2026-05-14T23:30 (data 1 day old). Coverage gap and BV-015 type bug are residual issues.
info BV-011 business-validation operational 55d Dashboard amount_prior nulls — structural XBRL company-extension gap. UNM 20/33 (61%), AFL 26/31 (84%), MET 23/34 (68%) null prior-year rates — consistent pattern across firms; BHF 3/33 (9%) is best-in-class. Residual intentional: narrative-only fields without XBRL concept cannot be auto-backfilled.
info BV-034 business-validation operational 26d BHF BS gap 65M — minor NCI from consolidated subsidiaries not captured in metadata.
info BV-038 business-validation operational 24d PRU L/E stated 25.0x vs computed TL/TE 22.8x. Likely methodology: TL/(TE - RNCI) = 24.2x ≈ 25.0x (rounds to 25), meaning RNCI is excluded from the equity denominator. Since ASC 480-10-S99 convention already excludes RNCI from metadata.total_equity, this effectively double-excludes it.
info BV-039 business-validation operational 23d JXN L/E stated 32.9x vs computed TL/TE 34.4x (1.5x gap). Reconciliation: TL/(TE+NCI)=342244/(9953+389)=33.1x ≈ 32.9x — stated value uses equity inclusive of CLO VIE NCI as denominator.
info BV-041 business-validation operational 12d BHF L/E stated 46.5x uses common stockholders' equity ($5,024M) as denominator, excluding preferred ($1,744M) and NCI ($65M). TL/TE=34.72x vs stated 46.5x (11.8x gap).
info BV-043 business-validation operational 10d MET L/E stated 23.5x vs computed TL/TE 25.22x (1.72x gap). Likely methodology: NCI from international subsidiaries included in equity denominator. TL/(TE+NCI): if NCI≈2,080M, implied L/E=(716245)/(28398+2080)=23.5x. Same INFO family as BV-039 (JXN, 1.5x gap).
info CA-020 controls-audit operational 49d Open PRs: 3 confirmed open (tick #387): #3597 G4-activation, #3592 orch-stuck (CA-036), #3539 engine-promote-op
info DG-004 data-governance operational 62d Dimension tagging 28/86 = 32.6% — tick #377; up from 25/83=30.1% (+3 DS-085/086/087 tagged D3/D5 and D6/D7/D10)
info DG-016 data-governance operational 23d DS-081/DS-082 lack dimension tags — added via #2238/#2241 without annotation (DS-085/086/087 correctly tagged)
info E1-19 release-management operational 65d No platform version mapping document — deferred per Decision 003 / 008 / 022 (no consumer yet)
info EG-016 engine-governance operational 38d Decision 032 activated remediation_unlocked PILOT on binding.yaml (B-01/B-02/B-08); propose_only mode pending security review (D032 OQ#5).
info EG-017 engine-governance operational 38d assumption_domains.yaml v3.8: metadata.total_assumptions=162, actual entries=164. domain_count metadata=18, actual=19. Metadata patch needed.
info EG-019 engine-governance operational 52d Registry at 139 engines / 42 models; B-02 PASS (49 FinView bindings all resolve); B-08 PASS; R-08 PASS (all tier-1 have model_membership). InsModel/GOES B-01 unverifiable from sandbox — binding_manifest.yaml absent for those repos.
info PM-001 program-management operational 65d WS7 Layer 2 complete: all 5 VM runner workflows operational (sre-telemetry, security-runtime, data-engineering-pipeline, use-case-validation-flows, quality-engineering-e2e)
info PM-009 program-management milestone 50d D029 canonical-first market data migration COMPLETE — FinView v7.3.0 (PRs #29-#32): dual-path dropped, legacy EOD fetch retired for migrated series. #921 (W4b legacy table drop) CLOSED 2026-06-05. #2089 D029 consolidation CLOSED 2026-06-05. D029 fully landed.
info PM-028 program-management operational 28d Model registry expansion batch (#2001-#2005, 2026-06-01) CLOSED/RATIFIED. 5 new models committed: M-041 (funds-withheld modco), M-054/055 (Bermuda BSCR + cession optimizer), M-007 (group IBNR Tier-1), M-008 (closed-block PDO Tier-1). Build work: #2229 (M-007 IBNR), #2230 (M-008 PDO), #2308 (M-041), #2309 (M-054), #2310 (M-055) OPEN — WS3/WS4 human-driven build.
info PM-029 program-management operational 27d Ticks #183-#190 synthesis (8 ticks in 9h, avg 1.1h/tick): SEC-027 escalated CRITICAL (npm audit 2026-06-03); DG-013 NEW MEDIUM; PA-017 NEW MEDIUM; BV-029 NEW MEDIUM; BV-030/031 NEW LOW. PA-016 RESOLVED.
info PM-031 program-management operational 26d Ticks #192-#199 synthesis (8 ticks in 27.1h): MAJOR resolution wave — CRITICAL:0/HIGH:0 effective open. CA-023 root cause fixed + 176 stale PRs bulk-closed. BV-032 recalibrated to canonical. A4-30 MEDIUM (back-test workstream follow-on).
info PM-032 program-management operational 26d CA-023 fully resolved: commit-via-pr auto-closes superseded tick PRs (#2133); 176 stale tick-PRs bulk-closed (0 open remaining). VM workflows UCV/DE stale 38.2h (past threshold); QE/security-runtime approaching 48h. Pattern consistent with GHA runner scheduling disruption.
info PM-033 program-management operational 24d Ticks #201-#209 synthesis (9 ticks in 32.8h, avg 3.6h/tick): major principal issue-closure wave — 17 issues closed. 2 open issues remain (#2229/#2230 build work). PA-017 RESOLVED. Registry: 130 engines / 35 models (+9 ticks). Effective open: MEDIUM:18 LOW+INFO:54.
info PM-034 program-management operational 23d Ticks #211-#219 synthesis (9 ticks in 30.0h, avg 3.3h/tick): 2 MEDIUM findings new (CA-027 arch doc drift, D3-36 926 LOC regress); 5 LOW/INFO new (BV-035/036/037/038, DG-016, CA-028); EG-020/021 LOW doc-currency. 34 commits to insightalm since PM#210. D054/D055 lifecycle infra landed (PRs #2364-#2374). Open issues 2→44 (D054 2L flow handles).
info PM-035 program-management operational 23d 2L flow infrastructure active (D054): 39 new 2L issues mirrored 2026-06-07T04:xx from inventory_capability_review_2026-06 — 3 HIGH (INV-001 VM-21 no engine, INV-010 stochastic gated, INV-029 validation evidence gap), ~10 MEDIUM, ~26 conditions across 10 models. 3 new 1L build issues: #2308 M-041, #2309 M-054, #2310 M-055. Total open issues now 44.
info PM-036 program-management operational 22d Ticks #221-#227 synthesis (7 ticks in 24.1h, avg 3.4h/tick): D056 autonomous review lane active (8 PRs approved); M-132 hull_white_1f + M-005 built; engine registry 130→132; CA-030 HIGH persists (App install needed); VM workflows 3/5 stale. 6 new findings classified (all judgment).
info PM-037 program-management operational 21d Ticks #229-#236 synthesis (8 ticks in 27.0h, avg 3.4h/tick): CA-030 RESOLVED (PR #2396); EG-020/EG-022 RESOLVED; CA-031+DG-017 NEW LOW (assumption_domains metadata off by 2-3); GHA runner OFFLINE ~26h (all 5 VM stale, QE+security-runtime BREACHED 48h); PR #2509 merged this tick.
info PM-038 program-management operational 19d Ticks #238-#247 synthesis (10 ticks in 47.9h, avg 4.8h/tick): CA-032 NEW HIGH (GHA runner offline ~69h; 9 tick PRs stuck); F1-20 NEW MEDIUM (145 remote branches, 110+ stale); PA-019 NEW INFO (D056 workflow enhancements approved). Issues #2229/#2230/#2308 CLOSED (M-007/M-008/M-041 builds complete). WR backlog #2575-#2580 opened. 8 insightalm commits landed.
info PM-039 program-management operational 18d Ticks #249-#256 synthesis (8 ticks in 29.9h, avg 3.7h/tick): EG-023 NEW LOW (metadata.total_engines 132 vs 133); BV-040 NEW LOW (CRBG GAAP/adj $3.3B MRB gap); CA-028 updated 9→10 stuck PRs; CA-027 improved (L4 InsModel 37→38); DG-017 4-way inconsistency confirmed. GHA runner intermittent: brief recovery 2026-06-11T21:17Z then re-offline; 5 VM workflows still stale. Security CLEAN. 0 resolved this window.
info PM-040 program-management operational 16d Ticks #258-#265 synthesis (7 ticks in 26.9h, avg 3.8h/tick): SEC-029 NEW HIGH esbuild CVEs (actual risk LOW); F1-20 UPDATED 145→150 branches; CA-028 UPDATED 11→12 stuck PRs; E1-31 UPDATED ~39+→~44+. 0 resolved. GHA runner OFFLINE ~5.8 days (SRE 53.8h, QE/UCV 140.8h+, DE 133.7h, sec-rt 140.8h). Issue #2668 NEW: Wave Verify gap (repo-global invariants + CI conventions). 52 open issues total.
info PM-041 program-management operational 15d Ticks #267-#277 synthesis (11 ticks in 33.2h, avg 3.0h/tick): DG-018 NEW MEDIUM (AP-06 credit/spread_recovery due 2026-06-30, 15 days); CA-028 UPDATED 12→14 stuck PRs (+#2763+#2770); F1-20 UPDATED 150→154 branches (+4); CA-032 SRE 89.9h, DE/UCV/QE/sec-rt 158.9h stale. 0 resolved. GHA runner offline ~6.6 days (DE/UCV/QE/sec-rt since 2026-06-09T00:14Z; SRE ~3.75 days since 2026-06-11T21:17Z).
info PM-043 program-management operational 12d Ticks #289-#297 synthesis (9 ticks in 30.0h, avg 3.3h/tick): 0 new findings; 0 resolved. CA-028 UPDATED 16 stuck PRs (+#2829 tick#291); F1-20 UPDATED 162 branches (+1 tick#297). DG-018 AP-06 12d to 2026-06-30 deadline. SRE 38.9h stale; DE/QE/UCV/sec-rt 148.4h stale (~6.2d). Platform-architect HEALTHY.
info PM-044 program-management operational 11d Ticks #299-#306 synthesis (8 ticks in 27.0h, avg 3.4h/tick): 3 new findings (BV-041 INFO BHF L/E gap, BV-042 LOW APO NII field, SEC-031 HIGH undici TLS bypass); 0 resolved. npm audit 1H→2H. SRE 71.9h stale; DE/QE/UCV/sec-rt 167.8h (~7.0d, worsening). DG-018 AP-06 11d to deadline. CA-028 16 stuck PRs. #2903 PENDING REVIEW.
info PM-045 program-management operational 9d Ticks #308-#315 synthesis (8 ticks in 30.0h, avg 3.75h/tick): 2 new findings (BV-043 INFO MET L/E gap, CA-033 MEDIUM MRM sync PRs). KEY EVENT: principal committed VM migration machinery (#3020, #3027) 2026-06-21T00:46-01:37Z — explains CA-032 GHA runner offline context (old VM being replaced by insightalm-vm-3). DG-018 AP-06 NOW 9d to deadline. CA-028 stuck PRs: 18. 2L queue 41/22 stable.
info PM-046 program-management operational 8d Ticks #317-#324 synthesis (8 ticks in 30.1h, avg 3.76h/tick): 2 new MEDIUM findings (PA-021 unregistered repos, issues #3051/#3052 post-migration gaps). CRITICAL CONTEXT: Issue #3051 reveals CA-032 root cause REVISED — GHA runner IS running post-migration (vsdhaka-insightalm.vm-runner-1 + vsdhaka-ecosystem.vm-runner-1-ecosystem active); watermark-commit step broken → staleness probe shows false positives. Issue #3052 SPA build gap (FinView/tenk2win served 'SPA not built') — fix applied live, VM script update pending commit. PR #3089 (2026-06-22) newest MRM sync (supersedes #3038). CA-028 stuck orch PRs: 21 (+3). F1-20: 172 branches, 133 agent/*. DG-018 AP-06: 8 days to deadline.
info PM-049 program-management operational 7d Ticks #326-#333 synthesis (9 ticks in 26.97h, avg 3.0h/tick): POSITIVE — stuck orch PRs 21→10 (11 merged since PM-046). CA-033 MRM sync PRs: 8→9 (+#3128 2026-06-23). DG-018 AP-06 deadline now 7d (2026-06-30). SEC-029/030/031 npm audit fix action-ready (ticks #326+#333 confirmed). #3053 VM-migration SPA fix open. 0 new HIGH/CRITICAL findings.
info PM-050 program-management operational 6d Ticks #335-#341 synthesis (7 ticks in 27.0h, avg 3.9h/tick): BV-044 NEW LOW (comparative_data.json stale FY2024/GA). CA-033 UPDATED 9→10 MRM sync PRs (+#3172 2026-06-24). CA-028 UPDATED 21→24 stuck orch PRs (+3 ticks #339-#341). DG-018 URGENT: 5 days to AP-06 deadline (2026-06-30). SEC-027 CONFIRMED RESOLVED (security tick #341 npm audit clean). GHA runner CONFIRMED running (PR #3162 SRE tick 02:15Z today). 0 new HIGH/CRITICAL findings.
info PM-051 program-management operational 4d Ticks #343-#351 synthesis (9 ticks in 29.9h, avg 3.3h/tick): NEW CA-034 MEDIUM (ci.yml disabled 111d), EG-025 LOW (rating_model tier non-canonical), BV-045 LOW (balance_sheet_assets FY2024-anchored). POSITIVE: stuck orch PRs 22→8 (14 merged). CA-033 UPDATED: MRM sync PRs now 10; newest #3219 (2026-06-25). DG-018 CRITICAL COUNTDOWN: 4 days to AP-06 deadline (2026-06-30). 0 new HIGH/CRITICAL findings. All VM workflows stale per watermark-broken pattern (runner active per issue #3051).
info PM-052 program-management operational 3d Ticks #353-#359 synthesis (7 ticks in 30.0h, avg 4.3h/tick): 0 new findings, 0 resolved. URGENT: DG-018 AP-06 deadline NOW 3 DAYS (2026-06-30) — credit (28) + spread_recovery (2) assumptions unreviewed. BV-045 UPDATED 11/14 firms with FY2024-anchored arrays. F1-20 UPDATED: 181 branches (+3 vs tick #352). CA-028: 23 stuck orch PRs stable. SEC-029/030/031: npm audit fix action-ready (confirmed tick #357). CA-033: MRM sync PR #3219 pending review. CA-034: ci.yml 113d disabled unchanged. All VM workflow watermarks still broken (~165h). 7 consecutive DEGRADED ticks.
info PM-053 program-management operational 2d Ticks #361-#369 synthesis (9 ticks in ~27h, avg ~3h/tick): 2 RESOLVED (CA-028 stuck orch PRs 23→0, CA-033 MRM sync PRs 0 via #3311 merged). 1 NEW MEDIUM: EG-026 (A-101 duplicate assumption ID, R-06 violation). DG-018 ESCALATED MEDIUM→HIGH (AP-06 deadline 2026-06-30, NOW ~1.9 DAYS). 3 new GH issues: #3327 (D055 v2 orphaned lifecycle/* PRs), #3328 (sre-telemetry token plumbing), #3329 (stale model PRs #2417+#2667 — 2L judgment). 1 CLOSED: #3052 (VM SPA build gap — live fix applied). Infra: F1-20 branches 181→145 (-36 cleanup). aggregator: CRITICAL:1(resolved)/HIGH:10/MEDIUM:48. All VM watermarks ~137.8h stale (watermark-commit broken — runner active per issue #3051).
info PM-054 program-management operational 1d Ticks #371-#378 synthesis (8 ticks in ~30h, avg ~3.75h/tick): 3 new findings (PA-022 MEDIUM bankview unregistered, EG-027 LOW model meta +7 gap, EG-028 LOW banklib/energylib unverified); 0 resolved. DG-018 ESCALATED CRITICAL — AP-06 deadline 2026-06-30 NOW <9h. D060 wave: 10 open 1L lifecycle:build (+8 banking/energy since tick #369); 2 closed (#3405 reconciler resolved, #3450 M-054 2L conditionally_approved). EG-023 UPDATED 139 vs meta 132 (+7). F1-20 REGRESSION: 156 branches (+11 vs tick #367). Aggregator CRITICAL:2/HIGH:9/MEDIUM:49/LOW:80/INFO:50/WARN:3.
info PM-LOG-163 program-management operational 31d Tick #163 (business-validation DEGRADED, 2026-05-28T18:30Z) missing from orchestrator_log.jsonl — YAML was committed (last_run confirmed), JSONL entry dropped during PR merge. Carry-forward for awareness; not a functional gap.
info SRE-CRON-001 sre operational 26d Legacy crontab still installed (5 entries) — Phase C not cut over yet
info UCV-API-DOWN use-case-validation operational 0d FinView API not reachable at http://[ip]:8000/api/v1/health — 5 flows skipped this run