{"prompt":"Design a migration from our single PostgreSQL primary to tenant-partitioned clusters. Cover routing metadata, transaction boundaries, cross-tenant admin queries, connection pooling, backup/restore, replica lag, dual writes, tenant moves, observability, rollback, and milestones that let us validate the largest tenants before broad cutover.","purpose":"planning","secondary":null,"mixed":false,"difficulty":0.9,"slice":"core","lang":"en"}
{"prompt":"Add cursor-based pagination to the audit-events endpoint, including stable ordering when multiple events share a timestamp.","purpose":"backendImpl","secondary":null,"mixed":false,"difficulty":0.5,"slice":"core","lang":"en"}
{"prompt":"Build the React account-switcher popover with search, recent workspaces, keyboard navigation, and a loading skeleton.","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.5,"slice":"core","lang":"en"}
{"prompt":"Bump Prisma to 6.12","purpose":"quickFix","secondary":null,"mixed":false,"difficulty":0.1,"slice":"core","lang":"en"}
{"prompt":"Extract SQL filter construction from UserRepository into reusable query specifications without changing generated queries or result ordering.","purpose":"refactor","secondary":null,"mixed":false,"difficulty":0.6,"slice":"core","lang":"en"}
{"prompt":"The checkout API sometimes returns an empty order after a successful commit. Find the race between the write transaction and replica read.","purpose":"debugging","secondary":null,"mixed":false,"difficulty":0.8,"slice":"core","lang":"en"}
{"prompt":"Inspect the row-level security policies for tenant escape paths","purpose":"review","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Draft the v4 API migration guide","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.3,"slice":"core","lang":"en"}
{"prompt":"Lay out an RFC for replacing integer invoice IDs with opaque sortable identifiers across PostgreSQL, Kafka events, public APIs, SDKs, exports, and support tooling. Include collision guarantees, index effects, compatibility with bookmarked URLs, backfill strategy, dual-read duration, rollback conditions, and an incremental delivery sequence. Do not implement it yet.","purpose":"planning","secondary":null,"mixed":false,"difficulty":0.9,"slice":"core","lang":"en"}
{"prompt":"Implement bulk user suspension with per-user authorization checks and idempotent audit events","purpose":"backendImpl","secondary":null,"mixed":false,"difficulty":0.6,"slice":"core","lang":"en"}
{"prompt":"Create the SwiftUI subscription-management screen with plan cards, renewal details, cancellation flow, error states, and VoiceOver labels.","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.6,"slice":"core","lang":"en"}
{"prompt":"Fix the typo in DATABASE_URL_EXAMPLE","purpose":"quickFix","secondary":null,"mixed":false,"difficulty":0.1,"slice":"core","lang":"en"}
{"prompt":"Consolidate the duplicate transaction retry loops in billing and ledger while preserving retry counts, jitter, and surfaced errors.","purpose":"refactor","secondary":null,"mixed":false,"difficulty":0.6,"slice":"core","lang":"en"}
{"prompt":"Why does the SQLite cache report database locked only when the iOS app returns from background? Reproduce and locate the unclosed transaction.","purpose":"debugging","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Explain how ApiKeyAuthenticator selects a tenant when both the hostname and key metadata contain tenant IDs. No code changes.","purpose":"review","secondary":null,"mixed":false,"difficulty":0.4,"slice":"core","lang":"en"}
{"prompt":"Write doc comments for the public QueryBuilder methods","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.2,"slice":"core","lang":"en"}
{"prompt":"Plan the retirement of our legacy REST search endpoint. Account for mobile clients that may remain offline for months, saved integrations, SDK release timing, usage telemetry, customer communication, compatibility shims, rate-limit differences, and a reversible sequence from deprecation headers through final shutdown.","purpose":"planning","secondary":null,"mixed":false,"difficulty":0.8,"slice":"core","lang":"en"}
{"prompt":"Add a transactional outbox publisher for customer-profile changes using the existing Debezium connector.","purpose":"backendImpl","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Implement the responsive invoice table with sticky totals, column visibility controls, empty states, and accessible sorting.","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.6,"slice":"core","lang":"en"}
{"prompt":"Set minimum iOS to 17.0","purpose":"quickFix","secondary":null,"mixed":false,"difficulty":0.1,"slice":"core","lang":"en"}
{"prompt":"Move date-range validation into the domain layer while keeping every API status code and validation message unchanged.","purpose":"refactor","secondary":null,"mixed":false,"difficulty":0.5,"slice":"core","lang":"en"}
{"prompt":"Production queries against customer_notes became 40x slower after yesterday's migration, but EXPLAIN differs between replicas. Determine why the planner stopped using the partial index.","purpose":"debugging","secondary":null,"mixed":false,"difficulty":0.8,"slice":"core","lang":"en"}
{"prompt":"Is the current refresh-token rotation logic safe against two simultaneous refresh requests? Analyze code and tests only.","purpose":"review","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Escribe una página de referencia para los filtros del endpoint de transacciones, con ejemplos de curl y respuestas de error.","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.4,"slice":"core","lang":"es"}
{"prompt":"Propose the architecture for an append-only financial ledger that can support corrections, historical balance reconstruction, multi-currency amounts, idempotent imports, and independent reconciliation. Compare partitioning choices, define invariants, identify ownership boundaries, and split delivery into milestones that avoid a big-bang replacement of the current balance table.","purpose":"planning","secondary":null,"mixed":false,"difficulty":1.0,"slice":"core","lang":"en"}
{"prompt":"Build the GraphQL mutation that merges duplicate contacts and rewrites dependent ownership records atomically.","purpose":"backendImpl","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Add an animated conflict-resolution sheet to the macOS app for records edited both locally and remotely.","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.6,"slice":"core","lang":"en"}
{"prompt":"Change the Settings icon from 18px to 20px; the component and desired value are already identified.","purpose":"quickFix","secondary":null,"mixed":false,"difficulty":0.1,"slice":"boundary","lang":"en"}
{"prompt":"Rename AccountRecord to CustomerRecord across the repository while retaining table names, serialized keys, and public SDK types.","purpose":"refactor","secondary":null,"mixed":false,"difficulty":0.7,"slice":"boundary","lang":"en"}
{"prompt":"Why are deleted comments reappearing after an offline iPad sync? The source of truth is unclear and the resurrection is corrupting customer records.","purpose":"debugging","secondary":null,"mixed":false,"difficulty":0.8,"slice":"boundary","lang":"en"}
{"prompt":"Why does SearchRepository issue two count queries for exported reports? Determine whether both are required by the existing behavior; nothing is failing.","purpose":"review","secondary":null,"mixed":false,"difficulty":0.4,"slice":"boundary","lang":"en"}
{"prompt":"Document the current webhook signature scheme, including canonicalization, timestamp tolerance, key rotation, and verification examples. Do not alter the verifier.","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.5,"slice":"boundary","lang":"en"}
{"prompt":"Prepare a design for introducing soft deletion to shared folders, with retention, restore, purge, indexing, and audit implications.","purpose":"planning","secondary":null,"mixed":false,"difficulty":0.8,"slice":"boundary","lang":"en"}
{"prompt":"The OpenAPI contract is approved. Implement PATCH /v2/customers/{id} with ETag preconditions and field-level authorization.","purpose":"backendImpl","secondary":null,"mixed":false,"difficulty":0.6,"slice":"boundary","lang":"en"}
{"prompt":"Add a compact date picker to the report toolbar with presets, custom ranges, validation feedback, and mobile behavior.","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.5,"slice":"boundary","lang":"en"}
{"prompt":"Rename `reciever` to `receiver` in SyncEnvelope.swift","purpose":"quickFix","secondary":null,"mixed":false,"difficulty":0.1,"slice":"boundary","lang":"en"}
{"prompt":"Split CustomerService into command and query collaborators, preserving transactions, emitted events, and all externally visible behavior.","purpose":"refactor","secondary":null,"mixed":false,"difficulty":0.7,"slice":"boundary","lang":"en"}
{"prompt":"Diagnose the unknown duplicate-charge path, implement the correction once the cause is proven, and add a regression test around the triggering interleaving.","purpose":"debugging","secondary":"backendImpl","mixed":true,"difficulty":0.9,"slice":"mixed","lang":"en"}
{"prompt":"Audit the existing database-encryption key rotation flow, then write a security review memo with findings and unresolved assumptions.","purpose":"review","secondary":"writing","mixed":true,"difficulty":0.8,"slice":"mixed","lang":"en"}
{"prompt":"Produce the webhook integration guide and add a small Node.js verification utility that customers can run against captured requests.","purpose":"writing","secondary":"backendImpl","mixed":true,"difficulty":0.6,"slice":"mixed","lang":"en"}
{"prompt":"Design and implement the first stage of organization merges: specify invariants and rollback rules, then build the dry-run analyzer behind an admin-only flag.","purpose":"planning","secondary":"backendImpl","mixed":true,"difficulty":0.9,"slice":"mixed","lang":"en"}
{"prompt":"Implement the audit-log export endpoint and add a client-facing reference section describing pagination, limits, and error responses.","purpose":"backendImpl","secondary":"writing","mixed":true,"difficulty":0.7,"slice":"mixed","lang":"en"}
{"prompt":"Product ticket WEB-2481\n\nThe customer detail page currently uses a desktop-only two-column layout. On a 390px viewport the activity timeline falls below six dense metadata panels, so users scroll several screens before seeing recent events.\n\nDesired behavior:\n- On phones, show name, status, and primary actions first.\n- Put secondary metadata in a collapsed Details section.\n- Keep the activity timeline immediately below the header.\n- The action menu must remain reachable at 200% zoom.\n- Tablet and desktop layouts should not visually regress.\n- Loading and permission-denied states need the same hierarchy.\n\nImplement the responsive layout in CustomerDetailPage.tsx using existing primitives and tokens. No API changes.","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.7,"slice":"pasted-context","lang":"en"}
{"prompt":"Release build output:\n\nwarning: marketing version 8.3 does not match release metadata 8.3.1\nArchive succeeded\nUploading symbols...\nerror: expected dSYM at build/Release/AppStore/Atlas.dSYM\nnote: archive output is build/archive/Atlas.xcarchive/dSYMs/Atlas.app.dSYM\n\nWorkflow excerpt:\n  SYMBOL_PATH: build/Release/AppStore/Atlas.dSYM\n  run: scripts/upload-symbols \"$SYMBOL_PATH\"\n\nThe archive layout changed in Xcode 18. Set SYMBOL_PATH to the exact new path shown above. This is a known path correction; don't modify the upload script or archive settings.","purpose":"quickFix","secondary":null,"mixed":false,"difficulty":0.1,"slice":"pasted-context","lang":"en"}
{"prompt":"Cleanup notes:\n\npackages/data-access/src/customerRepo.ts owns SQL construction, row mapping, cache invalidation, analytics emission, and email-trigger decisions. `customerRepo.test.ts` mocks twelve unrelated services, and the same row-to-domain conversion exists in the export worker.\n\nTarget boundaries:\n- persistence: SQL plus row mapping\n- application: mutation orchestration\n- observers: analytics and email triggers\n\nSeparate these responsibilities and share the mapper with export-worker. Preserve public repository methods, transaction scope, emitted events, and query text snapshots. This work must not alter customer behavior or database schema.","purpose":"refactor","secondary":null,"mixed":false,"difficulty":0.8,"slice":"pasted-context","lang":"en"}
{"prompt":"Crash excerpt from iPad sync:\n\nFatal error: Duplicate keys of type 'RecordID' were found in a Dictionary\n0 Swift._assertionFailure\n1 Dictionary.init(uniqueKeysWithValues:)\n2 SyncBatch.coalesceChanges()\n3 SyncCoordinator.applyRemoteBatch()\n\nLog tail:\nremote batch cursor=991 count=84\nlocal pending count=3\ncoalesce record=72D op=update\ncoalesce record=72D op=delete\nnetwork retry response duplicated request-id=af31\n\nIt occurs only after the app reconnects through a captive portal. We don't know whether the server sends duplicates or the retry layer replays a batch. Identify the source and the correct coalescing semantics before patching.","purpose":"debugging","secondary":null,"mixed":false,"difficulty":0.9,"slice":"pasted-context","lang":"en"}
{"prompt":"Diff to assess:\n\ndiff --git a/db/migrations/20260729_email_unique.sql b/db/migrations/20260729_email_unique.sql\n+UPDATE users SET email = lower(trim(email));\n+CREATE UNIQUE INDEX CONCURRENTLY users_email_unique\n+ON users (tenant_id, email)\n+WHERE deleted_at IS NULL;\n\ndiff --git a/services/users/find.ts b/services/users/find.ts\n-return db.one('SELECT * FROM users WHERE email = $1', [email]);\n+return db.one('SELECT * FROM users WHERE lower(email) = lower($1)', [email]);\n\nReview locking, duplicate handling, failed concurrent index recovery, query-index compatibility, and tenant scoping. Do not edit the migration; return specific findings and required preflight checks.","purpose":"review","secondary":null,"mixed":false,"difficulty":0.8,"slice":"pasted-context","lang":"en"}
{"prompt":"Write up the API stuff","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.3,"slice":"vague-eval","lang":"en"}
{"prompt":"Sort out the migration approach","purpose":"planning","secondary":null,"mixed":false,"difficulty":0.5,"slice":"vague-eval","lang":"en"}
{"prompt":"Finish the data layer","purpose":"backendImpl","secondary":null,"mixed":false,"difficulty":0.5,"slice":"vague-eval","lang":"en"}
{"prompt":"Create a visionOS attachment browser with spatial cards, selection feedback, progressive image loading, and an accessible flat fallback.","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Update Kotlin to 2.2.0","purpose":"quickFix","secondary":null,"mixed":false,"difficulty":0.1,"slice":"core","lang":"en"}
{"prompt":"Move push-notification payload parsing into a platform-neutral module while preserving Android and iOS behavior.","purpose":"refactor","secondary":null,"mixed":false,"difficulty":0.6,"slice":"core","lang":"en"}
{"prompt":"The Android app freezes when rotating during biometric authentication. Determine which lifecycle callback or coroutine is blocking the main thread.","purpose":"debugging","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Check whether the current Swift actor isolation around DownloadRegistry actually prevents duplicate downloads. Explanation only.","purpose":"review","secondary":null,"mixed":false,"difficulty":0.6,"slice":"core","lang":"en"}
{"prompt":"Write App Store release notes for offline maps","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.2,"slice":"core","lang":"en"}
{"prompt":"Develop a roadmap for unifying authentication across our iOS, Android, web, and desktop clients. Address passkeys, legacy password sessions, device binding, refresh-token storage, account recovery, staged SDK adoption, server compatibility, telemetry, and rollback. Separate prerequisite platform work from user-visible rollout milestones.","purpose":"planning","secondary":null,"mixed":false,"difficulty":0.9,"slice":"core","lang":"en"}
{"prompt":"Add device-bound refresh tokens to the Kotlin authentication service with rotation and replay detection.","purpose":"backendImpl","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Implement the Compose download manager screen with per-item progress, pause controls, storage warnings, and TalkBack support.","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.6,"slice":"core","lang":"en"}
{"prompt":"Change `adressLine` to `addressLine` in one DTO","purpose":"quickFix","secondary":null,"mixed":false,"difficulty":0.1,"slice":"core","lang":"en"}
{"prompt":"Consolidate three nearly identical iOS sheet coordinators without changing presentation order, dismissal callbacks, or deep-link behavior.","purpose":"refactor","secondary":null,"mixed":false,"difficulty":0.6,"slice":"core","lang":"en"}
{"prompt":"Push registration succeeds, but some devices never receive silent notifications after restoring from backup. Find where the token/account association goes stale.","purpose":"debugging","secondary":null,"mixed":false,"difficulty":0.8,"slice":"core","lang":"en"}
{"prompt":"Walk through how the app decides between cached, bundled, and downloaded map tiles when offline.","purpose":"review","secondary":null,"mixed":false,"difficulty":0.4,"slice":"core","lang":"en"}
{"prompt":"Rédige la documentation utilisateur pour activer les passkeys dans l'application iOS, avec les cas de récupération de compte.","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.3,"slice":"core","lang":"fr"}
{"prompt":"Architect a shared offline mutation engine for mobile clients. The design should cover durable queues, dependency ordering, optimistic UI, server-assigned identifiers, conflict resolution, encryption at rest, background execution limits, partial authentication loss, schema evolution, diagnostics, and an adoption path that does not require rewriting every feature at once.","purpose":"planning","secondary":null,"mixed":false,"difficulty":1.0,"slice":"core","lang":"en"}
{"prompt":"Implement an idempotent endpoint that accepts batched mobile mutations and returns per-operation conflict metadata.","purpose":"backendImpl","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Build the macOS command-palette window with fuzzy results, grouped actions, keyboard-only operation, and multi-display positioning.","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Set the Android target SDK to 36","purpose":"quickFix","secondary":null,"mixed":false,"difficulty":0.1,"slice":"core","lang":"en"}
{"prompt":"Extract image cache eviction policy from the UIKit view controller while keeping memory and disk behavior identical.","purpose":"refactor","secondary":null,"mixed":false,"difficulty":0.5,"slice":"core","lang":"en"}
{"prompt":"An async image cell occasionally shows the previous user's avatar after rapid scrolling. Trace the cancellation or reuse bug.","purpose":"debugging","secondary":null,"mixed":false,"difficulty":0.6,"slice":"core","lang":"en"}
{"prompt":"Evaluate the current keychain access-group setup for accidental credential sharing between the production app and extensions.","purpose":"review","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Prepare a README section for running UI tests on Android emulators and iOS simulators.","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.3,"slice":"core","lang":"en"}
{"prompt":"Define a phased migration from our custom mobile analytics SDK to OpenTelemetry. Include event compatibility, batching, offline retention, privacy controls, sampling, battery impact, crash-path behavior, backend ingestion changes, dashboard validation, SDK release sequencing, and criteria for disabling the legacy uploader.","purpose":"planning","secondary":null,"mixed":false,"difficulty":0.9,"slice":"core","lang":"en"}
{"prompt":"Create the server endpoint for registering passkey credentials, including attestation validation and duplicate-credential protection.","purpose":"backendImpl","secondary":null,"mixed":false,"difficulty":0.8,"slice":"core","lang":"en"}
{"prompt":"Add a Dynamic Type-friendly onboarding carousel with reduced-motion behavior and restored progress after relaunch.","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.5,"slice":"core","lang":"en"}
{"prompt":"Correct the German localization key for Settings","purpose":"quickFix","secondary":null,"mixed":false,"difficulty":0.1,"slice":"core","lang":"en"}
{"prompt":"Separate Bluetooth scanning state from the Compose screen model, keeping device ordering and all displayed states unchanged.","purpose":"refactor","secondary":null,"mixed":false,"difficulty":0.6,"slice":"core","lang":"en"}
{"prompt":"The macOS app's CPU usage climbs to 100% after the system clock moves backward. Identify the timer or retry loop responsible.","purpose":"debugging","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Explain why BackgroundSyncScheduler requests both processing and refresh tasks, and what each currently handles.","purpose":"review","secondary":null,"mixed":false,"difficulty":0.4,"slice":"core","lang":"en"}
{"prompt":"Document the deep-link URL formats and examples for support engineers","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.3,"slice":"core","lang":"en"}
{"prompt":"Sketch a rollout strategy for end-to-end encrypted shared notes across four clients, including key distribution, member removal, device recovery, search limitations, old-client behavior, migration of existing notes, telemetry boundaries, and staged validation. Call out which product choices must be settled before implementation.","purpose":"planning","secondary":null,"mixed":false,"difficulty":1.0,"slice":"core","lang":"en"}
{"prompt":"Add resumable media uploads to the Swift networking package using server-issued offsets and persisted task metadata.","purpose":"backendImpl","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Create the foldable layout for the Android conversation screen, with adaptive panes and seamless posture transitions.","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Turn off FEATURE_NEW_COMPOSER in beta","purpose":"quickFix","secondary":null,"mixed":false,"difficulty":0.1,"slice":"core","lang":"en"}
{"prompt":"Rename SyncItem to PendingMutation throughout mobile shared code while preserving database entity names and serialized payloads.","purpose":"refactor","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Biometric unlock sometimes accepts and immediately returns to the locked screen. Diagnose the state transition; the trigger is not understood.","purpose":"debugging","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Review how the app currently redacts notification content on locked devices across each privacy setting.","purpose":"review","secondary":null,"mixed":false,"difficulty":0.5,"slice":"boundary","lang":"en"}
{"prompt":"Write a developer guide to the existing mobile sync protocol, based on code rather than proposing a new protocol.","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.5,"slice":"boundary","lang":"en"}
{"prompt":"Plan the conversion from callback-based iOS networking to async/await, including sequencing and compatibility with extensions.","purpose":"planning","secondary":null,"mixed":false,"difficulty":0.7,"slice":"boundary","lang":"en"}
{"prompt":"Implement the finalized notification-preferences contract in the API and mobile shared client.","purpose":"backendImpl","secondary":null,"mixed":false,"difficulty":0.6,"slice":"boundary","lang":"en"}
{"prompt":"Créer la vue SwiftUI des appareils connectés avec recherche, suppression, états hors ligne et support VoiceOver.","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.5,"slice":"boundary","lang":"fr"}
{"prompt":"Change the spinner tint to AccentColor in LoginView.swift","purpose":"quickFix","secondary":null,"mixed":false,"difficulty":0.1,"slice":"boundary","lang":"en"}
{"prompt":"Reorganize navigation routes by feature without changing deep links, back-stack behavior, or analytics names.","purpose":"refactor","secondary":null,"mixed":false,"difficulty":0.6,"slice":"boundary","lang":"en"}
{"prompt":"Why are location updates delayed by minutes only after Low Power Mode is toggled? The app's tracking is broken and we don't know which OS interaction causes it.","purpose":"debugging","secondary":null,"mixed":false,"difficulty":0.8,"slice":"boundary","lang":"en"}
{"prompt":"Determine why the existing Android database uses a deferred foreign key for attachment rows; no failure is being reported.","purpose":"review","secondary":null,"mixed":false,"difficulty":0.4,"slice":"boundary","lang":"en"}
{"prompt":"Summarize the current account-recovery flow into support-facing prose, including states and escalation points.","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.4,"slice":"boundary","lang":"en"}
{"prompt":"Produce the architecture and milestone plan for moving mobile feature flags to signed local snapshots.","purpose":"planning","secondary":null,"mixed":false,"difficulty":0.8,"slice":"boundary","lang":"en"}
{"prompt":"Implement the device-revocation service and document the endpoint, token effects, and expected client recovery behavior.","purpose":"backendImpl","secondary":"writing","mixed":true,"difficulty":0.7,"slice":"mixed","lang":"en"}
{"prompt":"Build the iOS diagnostics screen and add a support article explaining how users export and share its bundle.","purpose":"frontendImpl","secondary":"writing","mixed":true,"difficulty":0.6,"slice":"mixed","lang":"en"}
{"prompt":"Update the known-wrong callback URL and adjust the endpoint test that still expects the old value.","purpose":"quickFix","secondary":"backendImpl","mixed":true,"difficulty":0.3,"slice":"mixed","lang":"en"}
{"prompt":"Split the mobile session package into storage, refresh, and policy modules with identical behavior, then write a maintainer overview of the new structure.","purpose":"refactor","secondary":"writing","mixed":true,"difficulty":0.7,"slice":"mixed","lang":"en"}
{"prompt":"Investigate the notification duplication regression, fix the underlying cause, and add a short release-note entry once verified.","purpose":"debugging","secondary":"writing","mixed":true,"difficulty":0.8,"slice":"mixed","lang":"en"}
{"prompt":"Pull request excerpt:\n\nfinal class SessionVault {\n    private var cached: Session?\n    func session() async throws -> Session {\n        if let cached { return cached }\n        let stored = try await keychain.load()\n        cached = stored\n        return stored\n    }\n    func clear() async throws {\n        try await keychain.delete()\n        cached = nil\n    }\n}\n\nThe type is marked @MainActor in the full file. Background extensions call session() through an async protocol. Review whether actor isolation, cache lifetime, keychain errors, and concurrent clear/read operations produce security or correctness risks. Do not change the code; provide findings with concrete interleavings.","purpose":"review","secondary":null,"mixed":false,"difficulty":0.7,"slice":"pasted-context","lang":"en"}
{"prompt":"Documentation ticket MOB-900\n\nThe app stores offline work in three places:\n- PendingMutation.sqlite for unsent edits\n- MediaQueue/ for attachment bytes\n- LastSnapshot.bin for server state\n\nSupport currently tells users that signing out 'removes cached data,' but the implementation retains MediaQueue files for seven days to support account recovery. Removing the app clears everything; revoking a device remotely prevents upload but does not immediately erase local files.\n\nRewrite docs/privacy/offline-data.md to state exactly what is retained for sign-out, device revocation, account deletion, and app removal. Keep the tone user-facing and avoid promising OS-level secure deletion.","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.5,"slice":"pasted-context","lang":"en"}
{"prompt":"Notes from mobile architecture sync:\n\n- iOS has 14 callback-based service protocols.\n- Three are consumed by widgets that cannot adopt the newest deployment target yet.\n- Android shared code expects cancellation to propagate into native calls.\n- Analytics records operation start and completion IDs.\n- A previous async wrapper double-resumed continuations on cancellation.\n- Product wants feature teams migrating independently.\n\nCreate a staged async/await adoption plan. Define adapter boundaries, cancellation semantics, continuation safety checks, testing, telemetry compatibility, sequencing for widgets, and removal criteria for legacy protocols. No implementation in this task.","purpose":"planning","secondary":null,"mixed":false,"difficulty":0.8,"slice":"pasted-context","lang":"en"}
{"prompt":"Backend story AUTH-1932\n\nPOST /v2/devices/revoke\nRequest: { device_id, reason }\n\nRules:\n- the device must belong to the authenticated account\n- revoking the current device requires recent reauthentication\n- all refresh-token families issued to that device become invalid\n- access tokens remain valid for at most five minutes\n- repeated requests return the original revocation result\n- publish DeviceRevoked after commit\n- audit reason is restricted to enum values lost, sold, compromised, other\n\nImplement the handler, transaction, token-family invalidation, outbox event, and integration tests. The mobile UI is out of scope.","purpose":"backendImpl","secondary":null,"mixed":false,"difficulty":0.7,"slice":"pasted-context","lang":"en"}
{"prompt":"Design handoff copied from ticket:\n\nScreen: Downloads\nStates: empty, active, paused, failed, storage-low\nRows show title, thumbnail, progress, remaining bytes, and one primary action.\nSwipe actions are delete and retry. On tablets the queue and selected item details appear side by side. At accessibility text sizes, thumbnails may shrink but controls cannot. Progress changes should not cause VoiceOver to reread the whole row. Product wants the storage warning pinned above active downloads.\n\nImplement this screen in Jetpack Compose using the existing DownloadViewModel. Do not change queue behavior or networking.","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.7,"slice":"pasted-context","lang":"en"}
{"prompt":"Make the app screen pop","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.4,"slice":"vague-eval","lang":"en"}
{"prompt":"Fix that small constant","purpose":"quickFix","secondary":null,"mixed":false,"difficulty":0.1,"slice":"vague-eval","lang":"en"}
{"prompt":"Separate physics integration from entity iteration in the ECS engine while preserving deterministic replay hashes.","purpose":"refactor","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"The robotics simulator drifts from recorded hardware motion after exactly 65,536 ticks. Find the overflow or precision error.","purpose":"debugging","secondary":null,"mixed":false,"difficulty":0.8,"slice":"core","lang":"en"}
{"prompt":"Assess the lock-free ring buffer for memory-ordering bugs on ARM64. Do not modify it.","purpose":"review","secondary":null,"mixed":false,"difficulty":0.8,"slice":"core","lang":"en"}
{"prompt":"Write the README for the new map compiler","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.3,"slice":"core","lang":"en"}
{"prompt":"Plan a migration from our custom scene format to glTF while preserving engine-specific metadata, deterministic asset builds, patch compatibility, editor workflows, and old saved projects. Include conversion validation, dual-format support, rollout milestones, rollback, and a strategy for plugins that currently deserialize the old binary format directly.","purpose":"planning","secondary":null,"mixed":false,"difficulty":0.9,"slice":"core","lang":"en"}
{"prompt":"Implement hierarchical pathfinding over streamed world chunks with cancellation and bounded memory.","purpose":"backendImpl","secondary":null,"mixed":false,"difficulty":0.8,"slice":"core","lang":"en"}
{"prompt":"Create the Unity crafting panel with drag targets, recipe filtering, controller navigation, and animated success feedback.","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Change MAX_DRONES from 12 to 16","purpose":"quickFix","secondary":null,"mixed":false,"difficulty":0.1,"slice":"core","lang":"en"}
{"prompt":"Unify the duplicated quaternion conversion helpers in importer and runtime without changing floating-point outputs.","purpose":"refactor","secondary":null,"mixed":false,"difficulty":0.6,"slice":"core","lang":"en"}
{"prompt":"Our ESP32 controller reboots only when Wi-Fi reconnects while both motors are active. Diagnose whether power, watchdog timing, or a driver race is responsible.","purpose":"debugging","secondary":null,"mixed":false,"difficulty":0.9,"slice":"core","lang":"en"}
{"prompt":"Explain how the current asset cooker decides which textures belong in a shared bundle.","purpose":"review","secondary":null,"mixed":false,"difficulty":0.4,"slice":"core","lang":"en"}
{"prompt":"Escreva as notas de versão do firmware 5.4, incluindo o novo modo de calibração e os problemas conhecidos.","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.3,"slice":"core","lang":"pt"}
{"prompt":"Develop a safety architecture for remote robot commands over unreliable networks. Define authority, command expiry, sequencing, emergency-stop behavior, offline autonomy boundaries, authentication, auditability, simulator validation, degraded modes, rollout stages, and the evidence required before enabling commands outside a test fleet.","purpose":"planning","secondary":null,"mixed":false,"difficulty":1.0,"slice":"core","lang":"en"}
{"prompt":"Add a Rust command scheduler that rejects stale actuator commands and persists monotonic sequence state across restarts.","purpose":"backendImpl","secondary":null,"mixed":false,"difficulty":0.8,"slice":"core","lang":"en"}
{"prompt":"Build the Godot controller-remapping screen with conflict warnings, input capture, reset controls, and localization-safe layout.","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.6,"slice":"core","lang":"en"}
{"prompt":"Pin arm-none-eabi-gcc to 14.2","purpose":"quickFix","secondary":null,"mixed":false,"difficulty":0.1,"slice":"core","lang":"en"}
{"prompt":"Extract collision layer rules into a data-driven table while preserving all existing interactions and replay results.","purpose":"refactor","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Audio crackles after several scene reloads, and the number of active OpenAL sources keeps rising. Locate the resource lifetime bug.","purpose":"debugging","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Check whether the current bootloader validates image length before hashing and flashing. Report security findings only.","purpose":"review","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Prepare a hardware setup guide for the RP2350 debug probe","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.3,"slice":"core","lang":"en"}
{"prompt":"Outline a roadmap for bringing deterministic multiplayer to the existing single-player simulation. Address tick ownership, input delay, rollback state, floating-point differences, bandwidth, cheating boundaries, replay compatibility, debugging tools, staged prototypes, and criteria for choosing rollback versus lockstep before production work begins.","purpose":"planning","secondary":null,"mixed":false,"difficulty":0.9,"slice":"core","lang":"en"}
{"prompt":"Implement delta-compressed snapshot serialization for the C++ server with golden-vector tests.","purpose":"backendImpl","secondary":null,"mixed":false,"difficulty":0.8,"slice":"core","lang":"en"}
{"prompt":"Add an in-game telemetry graph overlay with zoom, series toggles, frame-time thresholds, and gamepad focus.","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.6,"slice":"core","lang":"en"}
{"prompt":"Fix the misspelled GPIO label","purpose":"quickFix","secondary":null,"mixed":false,"difficulty":0.1,"slice":"core","lang":"en"}
{"prompt":"Split the embedded protocol crate into codec, transport, and commands modules while preserving its public API and wire bytes.","purpose":"refactor","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"A newly manufactured board occasionally reports impossible negative temperatures for its first reading. Determine whether initialization, I2C timing, or sign extension is at fault.","purpose":"debugging","secondary":null,"mixed":false,"difficulty":0.8,"slice":"core","lang":"en"}
{"prompt":"Walk me through the current rollback buffer ownership model and why snapshots use intrusive reference counts.","purpose":"review","secondary":null,"mixed":false,"difficulty":0.5,"slice":"core","lang":"en"}
{"prompt":"Draft contributor docs for adding a new world importer","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.3,"slice":"core","lang":"en"}
{"prompt":"Create a milestone plan for migrating factory calibration from desktop scripts to an on-device guided flow, covering fixture compatibility, signed calibration records, operator permissions, offline factories, validation tolerances, audit exports, rollback to scripts, and pilot sequencing across three hardware revisions.","purpose":"planning","secondary":null,"mixed":false,"difficulty":0.9,"slice":"core","lang":"en"}
{"prompt":"Write the parser for CAN-FD diagnostic frames with fragmented payload reassembly and timeout cleanup.","purpose":"backendImpl","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Implement the editor viewport gizmos for translating spline control points with snapping and undo feedback.","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Use 115200 as the sample config baud rate","purpose":"quickFix","secondary":null,"mixed":false,"difficulty":0.1,"slice":"core","lang":"en"}
{"prompt":"Rename WorldChunk to RegionChunk across engine and tools while retaining asset field names and plugin compatibility.","purpose":"refactor","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"The game server's hit validation diverges only on AMD hosts under high load. Find the unknown nondeterministic path.","purpose":"debugging","secondary":null,"mixed":false,"difficulty":0.9,"slice":"core","lang":"en"}
{"prompt":"Review the current firmware update state machine for paths that can leave the device unbootable, without changing it.","purpose":"review","secondary":null,"mixed":false,"difficulty":0.8,"slice":"boundary","lang":"en"}
{"prompt":"Turn the existing CAN command implementation into a protocol reference with byte layouts and examples.","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.5,"slice":"boundary","lang":"en"}
{"prompt":"Plan the asset-bundle naming migration, including compatibility and conversion phases, but do not touch code.","purpose":"planning","secondary":null,"mixed":false,"difficulty":0.7,"slice":"boundary","lang":"en"}
{"prompt":"Implement the finalized binary packet spec from docs/protocol-v7.md in the embedded Rust crate.","purpose":"backendImpl","secondary":null,"mixed":false,"difficulty":0.7,"slice":"boundary","lang":"en"}
{"prompt":"设计游戏内任务追踪面板，需要折叠分组、距离提示、手柄导航和超宽屏适配。","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.6,"slice":"boundary","lang":"zh"}
{"prompt":"Change the selected-tab underline to 2px","purpose":"quickFix","secondary":null,"mixed":false,"difficulty":0.1,"slice":"boundary","lang":"en"}
{"prompt":"Rearrange firmware command handlers by subsystem while preserving opcodes, timing, and error replies.","purpose":"refactor","secondary":null,"mixed":false,"difficulty":0.6,"slice":"boundary","lang":"en"}
{"prompt":"Why does the drone enter failsafe after exactly 49 days of uptime? The behavior is broken, and the timer interaction is unknown.","purpose":"debugging","secondary":null,"mixed":false,"difficulty":0.8,"slice":"boundary","lang":"en"}
{"prompt":"Explain why the existing renderer queues transparent objects back-to-front before batching; no rendering defect is reported.","purpose":"review","secondary":null,"mixed":false,"difficulty":0.4,"slice":"boundary","lang":"en"}
{"prompt":"Write a concise explanation of the current save-file chunk format for plugin developers.","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.4,"slice":"boundary","lang":"en"}
{"prompt":"Plan and implement signed calibration bundles: define trust and rollout rules, then add verification and persistence to firmware behind a factory flag.","purpose":"planning","secondary":"backendImpl","mixed":true,"difficulty":0.9,"slice":"mixed","lang":"en"}
{"prompt":"Implement the replay validator CLI and document its exit codes, output modes, and CI usage.","purpose":"backendImpl","secondary":"writing","mixed":true,"difficulty":0.7,"slice":"mixed","lang":"en"}
{"prompt":"Create the visual controller calibration wizard and add a technician checklist for verifying dead zones and axis direction.","purpose":"frontendImpl","secondary":"writing","mixed":true,"difficulty":0.6,"slice":"mixed","lang":"en"}
{"prompt":"Correct the known packet-type constant and update the decoder fixture that copied the incorrect value.","purpose":"quickFix","secondary":"backendImpl","mixed":true,"difficulty":0.3,"slice":"mixed","lang":"en"}
{"prompt":"Consolidate map metadata readers with identical output, then write a brief maintainer note about the new extension mechanism.","purpose":"refactor","secondary":"writing","mixed":true,"difficulty":0.7,"slice":"mixed","lang":"en"}
{"prompt":"Proposed change:\n\ndiff --git a/firmware/update.c b/firmware/update.c\n@@\n- if (!verify_signature(image, len)) return ERR_SIGNATURE;\n- flash_write(SLOT_B, image, len);\n+ flash_write(SLOT_B, image, len);\n+ if (!verify_signature(SLOT_B, len)) erase_slot(SLOT_B);\n\ndiff --git a/firmware/boot.c b/firmware/boot.c\n@@\n- boot_slot = SLOT_A;\n+ boot_slot = newest_valid_slot();\n\nThe author says verifying after write reduces RAM usage and remains safe because invalid images are erased. Review power-loss behavior, boot metadata, length validation, erase failures, and whether partially written SLOT_B can ever be selected. Findings only; do not edit the patch.","purpose":"review","secondary":null,"mixed":false,"difficulty":0.9,"slice":"pasted-context","lang":"en"}
{"prompt":"Documentation request copied from hardware Slack:\n\nSam: opcode 0x31 sets motor limits but the wiki still says it only sets max RPM.\nInez: payload is now four little-endian uint16 fields: rpm, current_mA, accel, decel.\nSam: firmware before 4.2 ignores the last two fields and returns ACK anyway.\nInez: error 0x07 means current exceeds the board revision limit, not generic bad input.\n\nUpdate docs/can/motor-limits.md with the exact payload, compatibility note, ACK behavior, error meaning, and one byte-level request example. No firmware changes.","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.4,"slice":"pasted-context","lang":"en"}
{"prompt":"Architecture workshop notes:\n\n- The current rollback buffer stores 180 full simulation states at 14 MB each.\n- Target consoles allow 512 MB for the entire multiplayer subsystem.\n- Re-simulating more than 12 frames misses the render deadline.\n- Physics state has pointer-rich structures that cannot be memcpy'd safely.\n- Replays must remain deterministic across patches within one season.\n- Spectators may join 30 seconds late.\n\nDevelop a state-history design and delivery plan. Compare full snapshots, deltas, and component journals; address memory, restore cost, versioning, spectators, validation, telemetry, and staged prototypes. Do not implement it.","purpose":"planning","secondary":null,"mixed":false,"difficulty":0.9,"slice":"pasted-context","lang":"en"}
{"prompt":"Feature EMB-554\n\nInput arrives as CAN-FD frames with:\n- stream ID: 12 bits\n- sequence: uint16 wrapping\n- flags: START, END, ABORT\n- up to 56 payload bytes\n\nReassembly rules:\n- at most eight active streams\n- reject gaps and duplicate START\n- discard inactive streams after 750 ms\n- ABORT clears state without emitting data\n- completed payload maximum is 4096 bytes\n- no heap allocation after initialization\n\nImplement the reassembler in firmware/protocol and expose completed messages through the existing callback. Add host tests for wraparound, timeouts, interleaving, overflow, and abort.","purpose":"backendImpl","secondary":null,"mixed":false,"difficulty":0.8,"slice":"pasted-context","lang":"en"}
{"prompt":"Editor UI ticket:\n\nArtists need to inspect navigation regions while placing obstacles. Add a viewport overlay with:\n- translucent region fills keyed by traversal type\n- boundary outlines that remain visible over bright scenes\n- hover label with region ID and cost\n- toolbar toggles for fill, edges, and labels\n- a legend that collapses on narrow editor windows\n- no measurable repaint when the overlay is hidden\n\nThe navigation data already exists in NavDebugModel. Implement the overlay and controls using the editor's current theme and undo-safe selection behavior.","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.7,"slice":"pasted-context","lang":"en"}
{"prompt":"Adjust the one value","purpose":"quickFix","secondary":null,"mixed":false,"difficulty":0.1,"slice":"vague-eval","lang":"en"}
{"prompt":"Untangle the engine bits","purpose":"refactor","secondary":null,"mixed":false,"difficulty":0.5,"slice":"vague-eval","lang":"en"}
{"prompt":"Find whatever broke rendering","purpose":"debugging","secondary":null,"mixed":false,"difficulty":0.6,"slice":"vague-eval","lang":"en"}
{"prompt":"Read the OAuth proxy implementation and identify where scopes are narrowed, cached, and revalidated. Explanation only.","purpose":"review","secondary":null,"mixed":false,"difficulty":0.5,"slice":"core","lang":"en"}
{"prompt":"Write a security advisory for the fixed session leak","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.4,"slice":"core","lang":"en"}
{"prompt":"Create an RFC for replacing static service credentials with workload identity across Kubernetes, CI, local development, and external batch systems. Cover trust roots, token exchange, audience scoping, emergency access, rotation, audit evidence, migration sequencing, compatibility gaps, measurable gates, and rollback before static secrets are revoked.","purpose":"planning","secondary":null,"mixed":false,"difficulty":1.0,"slice":"core","lang":"en"}
{"prompt":"Add a Go token-exchange endpoint with audience restrictions, nonce replay protection, and short-lived signed credentials.","purpose":"backendImpl","secondary":null,"mixed":false,"difficulty":0.8,"slice":"core","lang":"en"}
{"prompt":"Build the admin role editor with permission grouping, dependency warnings, diff preview, and confirmation for privilege escalation.","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Rotate the test JWKS fixture expiry date","purpose":"quickFix","secondary":null,"mixed":false,"difficulty":0.1,"slice":"core","lang":"en"}
{"prompt":"Extract authorization decision logging from policy evaluation without changing decisions, latency budgets, or log fields.","purpose":"refactor","secondary":null,"mixed":false,"difficulty":0.6,"slice":"core","lang":"en"}
{"prompt":"Requests authenticated through one edge region occasionally inherit another tenant's cached policy result. Locate the cache-key or propagation defect.","purpose":"debugging","secondary":null,"mixed":false,"difficulty":0.9,"slice":"core","lang":"en"}
{"prompt":"Check whether the current SAML callback validates RelayState binding and destination consistently across identity providers.","purpose":"review","secondary":null,"mixed":false,"difficulty":0.8,"slice":"core","lang":"en"}
{"prompt":"Schreibe eine verständliche Anleitung zur Rotation von Webhook-Schlüsseln, inklusive Überlappungszeit und Verifikation.","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.4,"slice":"core","lang":"de"}
{"prompt":"Map out a multi-quarter migration from role-based access checks embedded in services to a centralized relationship-based authorization system. Include model ownership, latency and availability budgets, consistency, shadow evaluation, decision diffs, emergency fallback, schema evolution, auditability, developer tooling, and milestones that avoid weakening existing controls.","purpose":"planning","secondary":null,"mixed":false,"difficulty":1.0,"slice":"core","lang":"en"}
{"prompt":"Implement a streaming policy-decision export that redacts sensitive attributes and preserves event ordering per tenant.","purpose":"backendImpl","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Create the access-review dashboard with expiring grants, owner filters, bulk attest controls, and high-risk visual treatment.","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Change SESSION_TTL_MINUTES to 30","purpose":"quickFix","secondary":null,"mixed":false,"difficulty":0.1,"slice":"core","lang":"en"}
{"prompt":"Merge duplicate JWT claim parsers across gateway and worker packages while preserving validation errors and accepted tokens.","purpose":"refactor","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"The audit stream drops logout events during Kafka leader elections but no producer error is logged. Determine where acknowledgements are being lost.","purpose":"debugging","secondary":null,"mixed":false,"difficulty":0.8,"slice":"core","lang":"en"}
{"prompt":"Explain the current break-glass workflow from request through expiry and retrospective review, based on code and configuration.","purpose":"review","secondary":null,"mixed":false,"difficulty":0.5,"slice":"core","lang":"en"}
{"prompt":"Draft the threat-model summary for third-party OAuth applications","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.4,"slice":"core","lang":"en"}
{"prompt":"Plan the deprecation of wildcard OAuth redirect URIs across thousands of existing integrations. Address inventory, customer ownership, compatibility windows, exception handling, validation rollout, telemetry, support tooling, communications, enforcement stages, and a rapid rollback mechanism if legitimate authorization flows are blocked.","purpose":"planning","secondary":null,"mixed":false,"difficulty":0.9,"slice":"core","lang":"en"}
{"prompt":"Implement SCIM group membership patch operations with atomic add/remove semantics and idempotent retries.","purpose":"backendImpl","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Add a passkey enrollment dialog with device naming, platform guidance, fallback choices, and clear failure recovery.","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.6,"slice":"core","lang":"en"}
{"prompt":"Remove the extra slash from the callback URL","purpose":"quickFix","secondary":null,"mixed":false,"difficulty":0.1,"slice":"core","lang":"en"}
{"prompt":"Separate identity-provider metadata fetching from SAML assertion validation while retaining cache behavior and error responses.","purpose":"refactor","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Password resets intermittently invalidate sessions for the wrong account when emails differ only by case. Trace the identity lookup bug.","purpose":"debugging","secondary":null,"mixed":false,"difficulty":0.8,"slice":"core","lang":"en"}
{"prompt":"Assess how current API-key prefix matching behaves under collisions and whether full secrets are ever queried unnecessarily.","purpose":"review","secondary":null,"mixed":false,"difficulty":0.6,"slice":"core","lang":"en"}
{"prompt":"Prepare customer-facing docs for configuring OIDC group claims","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.3,"slice":"core","lang":"en"}
{"prompt":"Design a key-management architecture for encrypting tenant exports with customer-managed keys. Cover envelope encryption, grants, regional copies, rotation, revocation, asynchronous jobs, disaster recovery, audit evidence, support access, failure semantics, and an incremental rollout from platform-owned keys.","purpose":"planning","secondary":null,"mixed":false,"difficulty":1.0,"slice":"core","lang":"en"}
{"prompt":"Build a Java background worker that rotates encrypted data keys without decrypting payloads outside the HSM boundary.","purpose":"backendImpl","secondary":null,"mixed":false,"difficulty":0.8,"slice":"core","lang":"en"}
{"prompt":"Implement the security-event timeline with correlated sessions, expandable evidence, time-zone switching, and export feedback.","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Set allow_signup to false in production.toml","purpose":"quickFix","secondary":null,"mixed":false,"difficulty":0.1,"slice":"core","lang":"en"}
{"prompt":"Rename PermissionSet to AccessProfile across internal modules while maintaining JSON, database, and SDK compatibility.","purpose":"refactor","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"OIDC login loops only for users with more than 150 groups. Diagnose whether cookie size, claim mapping, or redirect state is responsible.","purpose":"debugging","secondary":null,"mixed":false,"difficulty":0.8,"slice":"core","lang":"en"}
{"prompt":"Review the existing service-account impersonation checks and tell me which actors can form transitive chains.","purpose":"review","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Write a concise glossary for authentication, authorization, identity, principal, actor, and subject as used in this repo.","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.3,"slice":"core","lang":"en"}
{"prompt":"Produce a migration strategy for splitting authentication data from the main application database, including transactional seams, session continuity, replicas, encryption, backup isolation, dual writes, consistency monitoring, cutover gates, and rollback without forcing every user to sign in again.","purpose":"planning","secondary":null,"mixed":false,"difficulty":0.9,"slice":"core","lang":"en"}
{"prompt":"Add an endpoint that lists active sessions with device metadata and supports idempotent bulk revocation.","purpose":"backendImpl","secondary":null,"mixed":false,"difficulty":0.6,"slice":"core","lang":"en"}
{"prompt":"Build a responsive policy simulator where admins can select an actor, resource, and action and inspect the decision trace.","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"Change the security banner copy to the approved sentence","purpose":"quickFix","secondary":null,"mixed":false,"difficulty":0.1,"slice":"core","lang":"en"}
{"prompt":"Consolidate organization-membership resolution under one service without changing authorization decisions or database access patterns.","purpose":"refactor","secondary":null,"mixed":false,"difficulty":0.7,"slice":"core","lang":"en"}
{"prompt":"WebAuthn registration fails on some Windows machines with a generic NotAllowedError. Determine whether our challenge, RP ID, or timeout handling is invalid.","purpose":"debugging","secondary":null,"mixed":false,"difficulty":0.8,"slice":"core","lang":"en"}
{"prompt":"Is the existing recovery-code generator unbiased and resistant to online guessing? Review implementation and rate limits without editing.","purpose":"review","secondary":null,"mixed":false,"difficulty":0.7,"slice":"boundary","lang":"en"}
{"prompt":"Document the API-key lifecycle from creation through rotation and revocation, using current behavior only.","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.5,"slice":"boundary","lang":"en"}
{"prompt":"Develop the rollout plan for mandatory MFA on administrator accounts; code is out of scope.","purpose":"planning","secondary":null,"mixed":false,"difficulty":0.8,"slice":"boundary","lang":"en"}
{"prompt":"Implement the approved token-introspection response contract and cache semantics in auth-service.","purpose":"backendImpl","secondary":null,"mixed":false,"difficulty":0.6,"slice":"boundary","lang":"en"}
{"prompt":"Add a small session-expired modal with sign-in recovery, unsaved-work messaging, and accessible focus management.","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.5,"slice":"boundary","lang":"en"}
{"prompt":"Replace `authenication` with `authentication` in README.md","purpose":"quickFix","secondary":null,"mixed":false,"difficulty":0.1,"slice":"boundary","lang":"en"}
{"prompt":"Restructure scope evaluation into parse, normalize, and decide stages with byte-for-byte identical decision logs.","purpose":"refactor","secondary":null,"mixed":false,"difficulty":0.7,"slice":"boundary","lang":"en"}
{"prompt":"Why do revoked API keys remain usable for up to two minutes? This is unexpected and the responsible cache layer is unknown.","purpose":"debugging","secondary":null,"mixed":false,"difficulty":0.7,"slice":"boundary","lang":"en"}
{"prompt":"Explain why the current refresh-token table retains consumed token hashes for 90 days; no malfunction is alleged.","purpose":"review","secondary":null,"mixed":false,"difficulty":0.4,"slice":"boundary","lang":"en"}
{"prompt":"Summarize the existing SSO domain-verification code into an administrator guide rather than changing its behavior.","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.4,"slice":"boundary","lang":"en"}
{"prompt":"Plan the credential-rotation system and implement a read-only inventory command that identifies owners, age, and unsupported credential types.","purpose":"planning","secondary":"backendImpl","mixed":true,"difficulty":0.9,"slice":"mixed","lang":"en"}
{"prompt":"Build the signed JWKS publication service and write integration documentation covering cache headers and overlap during rotation.","purpose":"backendImpl","secondary":"writing","mixed":true,"difficulty":0.7,"slice":"mixed","lang":"en"}
{"prompt":"Create the admin consent screen and produce a visual QA note for long permission lists, localization, and keyboard navigation.","purpose":"frontendImpl","secondary":"writing","mixed":true,"difficulty":0.6,"slice":"mixed","lang":"en"}
{"prompt":"Correct the known session-cookie domain and update the backend fixture that asserts the old domain.","purpose":"quickFix","secondary":"backendImpl","mixed":true,"difficulty":0.3,"slice":"mixed","lang":"en"}
{"prompt":"Extract token claims into a shared value object without behavior changes, then document its invariants for service maintainers.","purpose":"refactor","secondary":"writing","mixed":true,"difficulty":0.7,"slice":"mixed","lang":"en"}
{"prompt":"Security feature AUTH-2210\n\nImplement POST /v1/service-accounts/{id}/tokens with:\n- caller requires service_account.tokens.create on the target\n- requested scopes must be a subset of the account's grants\n- lifetime range is 60 to 3600 seconds\n- tokens use the regional signing key and include jti, aud, sub, tenant_id\n- duplicate Idempotency-Key returns the same token until its expiry\n- never persist plaintext tokens\n- publish TokenIssued with metadata but no token value\n- rate limit per actor and target account\n\nAdd the handler, signing path, idempotency storage, audit event, metrics, and integration tests.","purpose":"backendImpl","secondary":null,"mixed":false,"difficulty":0.8,"slice":"pasted-context","lang":"en"}
{"prompt":"UI specification from design review:\n\nPage: Access Reviews\nDesktop uses a table; below 720px it becomes stacked cards. Each item shows grantee, resource, reason, grant age, owner, and risk level. Reviewers can approve, revoke, or defer. Revocation requires confirmation if the grant came from a group. Bulk actions must remain visible while scrolling, but never cover validation errors. Screen readers need the selection count and asynchronous action outcomes. Empty, expired-session, and partial-failure states are included in ui/states/access-review.png.\n\nImplement this page with existing React Query hooks and design-system components. Backend behavior is unchanged.","purpose":"frontendImpl","secondary":null,"mixed":false,"difficulty":0.7,"slice":"pasted-context","lang":"en"}
{"prompt":"Failing docs check:\n\nERROR docs/examples/oidc.yaml: issuer does not match configured test provider\nexpected: https://idp.example.test/realms/acme\nactual:   https://idp.example.test/realm/acme\n\nSearch results show the singular `/realm/` value appears only in docs/examples/oidc.yaml line 7. The provider fixture and every other example use `/realms/acme`. Correct that one URL. Do not update snapshots, tests, provider configuration, or surrounding prose.","purpose":"quickFix","secondary":null,"mixed":false,"difficulty":0.1,"slice":"pasted-context","lang":"en"}
{"prompt":"Restructuring brief:\n\nservices/auth currently has:\n- jwt.ts validating tokens and loading tenants\n- permissions.ts parsing claims and querying memberships\n- middleware.ts duplicating both for websocket upgrades\n- audit.ts importing middleware types\n\nThis creates an import cycle and websocket authorization has drifted from HTTP authorization. Introduce token-verification and authorization-decision boundaries used by both transports. Break the cycle, remove duplicated claim normalization, and retain exact status codes, websocket close codes, metrics labels, audit fields, and accepted token fixtures. No policy behavior should change.","purpose":"refactor","secondary":null,"mixed":false,"difficulty":0.8,"slice":"pasted-context","lang":"en"}
{"prompt":"Production log tail:\n\n12:41:08 token revoked family=9c2 user=184\n12:41:08 cache invalidate key=session:184 published region=iad\n12:41:09 request accepted region=fra token_jti=7ab family=9c2\n12:41:10 invalidate received region=fra key=session:184\n12:41:10 cache miss region=fra\n12:41:10 introspection response active=true family=9c2\n12:41:11 cache set active=true ttl=120\n\nA revoked refresh family remained active in Frankfurt even after invalidation arrived. The database row is revoked. Determine why introspection reconstructed active=true and whether replica lag, cache keying, or transaction visibility explains it. Reproduce the failure before applying a fix.","purpose":"debugging","secondary":null,"mixed":false,"difficulty":0.9,"slice":"pasted-context","lang":"en"}
{"prompt":"Tell me what auth does","purpose":"review","secondary":null,"mixed":false,"difficulty":0.3,"slice":"vague-eval","lang":"en"}
{"prompt":"Put together the words","purpose":"writing","secondary":null,"mixed":false,"difficulty":0.2,"slice":"vague-eval","lang":"en"}