Todo

Actionable open work for AskRue™ — highest leverage first.

Priority

1. Close gate enroll soft hinge: first valid code → confirm enable + show backup codes once; pending-secret hygiene / rotate on timeout.
2. Write and practice Rue admin TOTP reset runbook (verify member, anti-social-engineering).
3. Confirm rate-limit / TOTP replay / password backoff meet house bar on live endpoints.
4. Auth event logging (logins, failures, enrollments, resets).

Next

• “Last login / new device” line inside the house (pairs with Echo elsewhere-assurance later — stop expanding Echo here).
• Equalize or document username enumeration behavior.
• Optional passkeys (later); never SMS.

To fill… owner + target date per item once swarm assigns.

Out of scope on this list

• Dining Room / chat features → RUEZALS chat (stop).
• Brand site copy → RUEZALS.com or RUEZALS stub only.
• Wiki shell / registry → RUEZALS wiki stub only.