---
vault_clearance: EUCLID
halo:
  classification: INTERNAL
  confidence: HIGH
  front: "19_Project_CorpseOfTheColossus"
  custodian: "The Architect"
  created: 2026-03-28
  updated: 2026-03-28
  wing: UNASSESSED
  containment: "Stealth and topology bounties"
---

# BOUNTY BOARD — 19 Corpse of the Colossus (stealth)

> **Field:** Secrecy over defense, topological invincibility, low observability, corpus hiding (“dead ocean”). **Code for Head 3** remains in **17_CerberusLantern**. **Last updated:** 2026-03-28.

---

## OPEN

| ID | Bounty | Status | Assigned | Impact |
|----|--------|--------|----------|--------|
| O1 | **System graph doc** — One diagram: islands (airgapped vault slice, daily driver, quarantine VM, edge Worker, GitHub) and **allowed edges only**. No secrets on diagram. | OPEN | — | Topology |
| O2 | **Dark lane policy** — Written criteria: which artifact classes may **never** touch sync, MCP, or `public_lab` export (HALO + operational). | OPEN | — | **CRITICAL** |
| O3 | **Ferry minimum** — Smallest worldline + attestation bundle for crossing one edge (pair with vault O6 / 15 O11). | OPEN | — | Protocol |
| O4 | **Decoy / cover surface** — Define one safe decoy project or endpoint pattern that absorbs noise without leaking real map. | OPEN | — | Deception |
| O5 | **Signal inventory** — List metadata leaks (DNS, certs, commit times, Worker routes) and mark which are accepted vs queued for removal. | OPEN | — | Security |
| O6 | **Corpus-hiding ops sheet** — If using “dead” OneDrive / iCloud / Gmail / containers: recovery path (you will forget), provider retention, separate identities per ocean, encryption rule, and **what must never** live there (HALO). One page; no live account names. | OPEN | — | Ops / Security |

---

## SOLVED

| ID | Bounty | One-line answer | Date | Where | Tier |
|----|--------|-----------------|------|-------|------|
| *(none yet)* | | | | | |

---

## RETRACTED / WONTFIX

| ID | What | Why |
|----|------|-----|
| *(none)* | | |