# Legacy plans and deferred design stubs

> **Status:** Historical planning archive. These files preserve prior proposals and implementation approaches; they are not proof of shipped behavior or authority to run commands.

The records below moved byte-identically from migration quarantine on 2026-08-10. Validate every claim against current source, tests, configuration, and safety policy before reuse.

## Implementation plans

- [Gateway security hardening](2026-03-13-gateway-security-hardening.md)
- [Agent platform architecture](2026-03-15-agent-platform-architecture.md)
- [Wave 2 TUI layout and navigation](2026-03-15-wave2-tui-layout-navigation.md)
- [Hermes–Mosaic alignment](2026-05-06-hermes-mosaic-alignment.md)
- [Coordination resilience](2026-05-07-coordination-resilience.md)
- [Gateway token recovery](gateway-token-recovery.md)

## Setup record

- [Authentik SSO setup](authentik-sso-setup.md) — superseded for current administration by the canonical [SSO provider guide](../../../ADMIN-GUIDE/security/sso-providers.md).

## Explicitly deferred stubs

- [Chroot agent sandboxing](chroot-sandboxing.md)
- [Gatekeeper service](gatekeeper-service.md)
- [Task queue unification](task-queue-unification.md)

## Exclusions

The Agent Reflection PRD remains in quarantine because a live MACP test names its intended canonical path. The WebUI/Fleet Claude bridge draft remains authority-gated and coupled to Fleet decisions. Neither was moved in this archival slice.