# Implementation checkpoints

## Foundation
- [x] Dedicated Noita repository checkout.
- [x] Contribution fingerprinting; input and verifier hashes; no automatic execution.
- [x] Owner-key authority with separate reviewer, runner, curator roles.
- [x] Claim acceptance requires approved verifier, owner rerun and final Astra review.
- [x] Signed task decisions and deduplication outcome.
- [x] Failure tests for forged, modified, incomplete and conflicting review chains.
- [x] Human mirror and agent entry-point package; exercise locally.
- [x] Push the reviewed initial implementation to the provided Tangled repo.

## Before opening to outside contributors
- [ ] Enroll owner key(s) outside the repository; protect canonical branch and deployment.
- [ ] Connect the actual owner-controlled Astra runtime and capture model/prompt/run evidence.
- [ ] Implement and audit isolated verifier execution, resource limits, and receipt signing.
- [ ] Run one real claim and one task proposal through the entire owner workflow.
- [ ] Approve starter tasks and historical claim migrations explicitly.
- [x] Deploy the preview at noita-research-lab.cee.wtf via ctrl and verify HTTPS/assets.
- [ ] Test an outside contributor's fork/pull-request flow end to end.

## Later, if useful
- [x] Search complete historical artifacts and merged contributions, with exact source links.
- [x] Suggested task plans, prerequisites and prior-attempt links.
- [x] Maintainer activity history, with bundle hashes and review references.
- [ ] Task reservation leases and duplicate-suggestion queue.
- [ ] AT Protocol contribution announcements and owner attestation mirror.
- [ ] Signed, archived releases and richer research graph views.