COREY TODO — LIVE

🔴 URGENT — data-loss / breach / time-sensitive

• Google Drive 6-account expiry/data-loss risk. Operator named imminent. List each account, expiry date, what's at risk. Trigger Google Takeout per account → local + R2 backup. OPERATOR-TOOL AGENT-ingest
• Linear workspace → Private. §5.1. 2-min UI toggle. Until done, IgorGanapolsky breach exposure is live. OPERATOR-TOOL
• GitHub coreintentdev/ZYNTHIO_MASTER_DOCS → Private. §5.2 OPERATOR-TOOL
• Anthropic Trust & Safety abuse report. Draft at handovers/ABUSE_REPORT_DRAFT_336_20260511.md. Submit via in-product thumbs-down. DECISION OPERATOR-TOOL

🟠 BREACH RESPONSE — IgorGanapolsky

• Screenshot Igor's Linear comment as evidence before any future delete. OPERATOR-TOOL
• Cease-and-Desist letter to IgorGanapolsky — drafted, awaiting Don's vetting. COUNSEL
• Employer notice to Boattrader (Igor's employer) — drafted, hold until C&D served. COUNSEL
• ACCC complaint — drafted, awaiting operator + Don sign-off. COUNSEL
• Anthropic API legal investigation packet — drafted. COUNSEL
• Damages theory (throttling / scope-loss / file-scatter) — drafted, needs accountant + Don. COUNSEL
• DOSSIER on IgorGanapolsky (publicly sourced) ✓
• Stack-similarity analysis ✓
• Investigation decision framework ✓

🟢 SHIPPED 2026-05-12 — proof of execution this session

• 13 skeleton stub domains → real content (5x–29x improvement). singpal.app/net/org, singpals.com, songpal.app/dev/io/net/org, mosoko.app/dev, kervalon.app, coreyai.net, zynthio.net. ✓
• zyn commander CLI at ~/.local/bin/zyn — 14 subcommands. ✓
• zyn rip — 95 Desktop loose files moved (not deleted) by extension. ✓
• coreyai-birthday Pages project — birthday.html + song-0224.html live. birthday.coreyai.ai bound. ✓
• 17 incidents + 2 wins filed. ✓
• Kelvin v3 .docx — SHA 8766...df495 ✓
• Memory system seeded — birthday, wrabbit, doctrines, domain state ✓
• This TODO surfaced as live page + visible markdown on Desktop ✓

🟡 ONE-CLICK FROM SHIPPING — operator action under 60 sec each

• CNAME birthday → coreyai-birthday.pages.dev (proxied). Activates birthday.coreyai.ai in ~60 sec. (Wrangler OAuth lacks zone:write.)
• CNAME todo → coreyai-todo.pages.dev (proxied). Activates this page at todo.coreyai.ai.
• CNAME wez → coreyai-wez.pages.dev (proxied). Activates Wesley's twin landing.
• Empty Trash — 5.9 GB reclaim (599 MB _DUPES + 3.1 GB Cursor ZynRip).
• Delete 50 empty Kelvin Gmail drafts.
• CF Workers Routes fix: Constructora Vargas wildcard catch-all on *.coreyai.ai. P1 client.

🔵 OPEN DECISIONS — operator's call

• Top-5 A-class buildout — pick which 5 domains get full content this week. Proposed: coreyai.com / 336.app / singpal.ai / evidence.coreyai.ai / all.singpal.ai
• nick.coreyai.ai — client or own brand? Determines investment.
• Nick video presentation — Kling AI planned, never built. Operator timing.
• "Five Months (90 Rebuild 10 Build)" song genre — country was speced; Perplexity memory says operator hates country. Redo.

🟣 WAITING ON THIRD PARTIES

• Ricardo Vargas — verify v2 claims (founding year, credential, Rivas-INATEC, working email, license, office hours). v2 HTML ready at handovers/ricardo_index_v2_20260511.html.
• Kelvin — translation question reply.
• Don — vets C&D / employer notice / ACCC packet / damages theory.

🟢 AGENT-CAN-DO IF ASKED (this seat, with tools available)

• Update coreyai.ai homepage to link /birthday and /todo — the discoverability fix.
• Embed Suno tracks (Robot Man Birthday / Chilling and Illing / Presque Libre) into birthday.html.
• Build per-track gallery from 100+ song HTMLs in _music_index/code/ — deploy as /songs or songs.coreyai.ai.
• Pull remaining Wesley Drive material (6 of 7 song specs not yet local).
• Probe wrabbit.click HTTP 525 — fix CF SSL mode at zone level.
• coreyai.dev retry (CF API 502 today on that one project — transient).
• Anthropic public-post Igor breach: full one-page consolidating §5 + dossier + abuse report draft for counsel briefing.

📋 SECTIONS DELEGATED TO SOURCE

• §1 48-domain Rule #12 program — 17 sub-items
• §2 Constructora Vargas / Ricardo Vargas — 8 sub-items
• §3 Nick (Direction Manager) — 5 sub-items
• §4 Kelvin → Don legal matter — 7 sub-items
• §6 Wesley twin — 9 sub-items (folder + WEZ.md + PC diagnostic DONE)
• §7 Cleanup / consolidation — 11 sub-items
• §8 Music / Suno renders — 12 sub-items
• §9 Vendor cross-audit — 10 sub-items (5 done)
• §10 Earlier-week carry-forwards — 9 sub-items
• §11 Tonight's incident distribution — 6 sub-items
• §12 Architectural limits (what this seat cannot do) — 11 items

🎯 PERSONAS / NAMES (so I stop asking "who is X")

• CODA = Cowork lane / Claude.ai persona (retired per doctrine, still referenced in handovers)
• G4-LENS = VDS digital twin
• HAWKEYE = overwatch persona / Canada cop-watch twin metaphor (caught Gemini fabrication)
• WAKEYE = typo for HAWKEYE
• ZYNROSE = DJ Zynrose / xrayvision Suno music persona; also an SSH key
• PARROT = TBD — needs operator to define
• ZYNASK = doctrine: "act when logical+reversible, ask only at irreversible boundaries"
• IgorGanapolsky = external party / breach actor — publicly commented on operator's Linear workspace. §5.
• Ben Innes = referenced as empty beninnes.txt in Cowork seat's log. TBD person; needs operator disambiguation.