Differences

This shows you the differences between two versions of the page.

--- provenance:roadmap [2026/09/24 21:45] – 3e: decision entry for security:online_scams (chosen in the 2026-09-22 gap pass, never queued). Authored by Claude karel.kubicek.claude
+++ provenance:roadmap [2026/10/08 20:49] (current) – Finish PII leakage collateral: back-links and provenance; Authored by Claude karel.kubicek.claude
@@ Line 70: / Line 70: @@
   * **[[Security:Online scams]] was written without ever being queued.** Karel chose it in the 2026-09-22 gap pass; the Queued table was empty and stays empty. An //Assessed// row records the result in the same shape as the other gap-pass pages, because the gap pass's reading of its own count did not survive the audit: the ''scams'' regex reproduces 43 papers, but only 7 of its 23 hits from 2024–2026 measure scam websites, and it misses 9 of the page's 27 papers. The page is the eighth child of [[:security]]. Full log: [[provenance:security:online_scams]].
+===== 3f. Decisions taken on 2026-09-25 =====
+  * **[[Security:Domain abuse]] was written without ever being queued.** Karel chose it in the 2026-09-22 gap pass; the Queued table was empty and stays empty. An //Assessed// row records the result in the same shape as the other gap-pass pages. The ''domain_abuse'' regex reproduces 85 papers and finds 38 of the page's 48; it misses the name-collision and delegation-hijack papers, and of its 27 hits from 2024–2026 only 11 are in the population. The page is the ninth child of [[:security]]. Full log: [[provenance:security:domain_abuse]].
+  * **One follow-up was filed rather than done:** a [[practices:ethics]] section on registering or claiming names to receive other people's traffic, which the new page flags as an open question.
+===== 3g. Decisions taken on 2026-09-27 =====
+  * **[[Design:Platforms:Messaging channels]] was written without ever being queued.** Karel chose it in the 2026-09-22 gap pass; the Queued table was empty and stays empty. An //Assessed// row records the result in the same shape as the other gap-pass pages. The brief's three counts (40 / 41 / 13) reproduce exactly with case-sensitive name patterns; read against the page's 26-paper population, their union has 30.3% precision and 88.5% recall, and the WhatsApp count alone 9.8% precision. The page is the second child of [[Design:Platforms]], and [[:design]]'s table went from 18 to 19 rows. Full log: [[provenance:design:platforms:messaging_channels]].
+  * **Account enumeration was kept as a pointer section** on that page rather than proposed as a page of its own: four papers, one design (a census of accounts against the numbering plan), and [[Design:Platforms]] already carries its largest example.
+  * **One follow-up was filed rather than done:** a [[practices:ethics]] section on entering and recording online groups whose members did not join a study.
+  * **[[Design:Mobile and app measurement:Mini programs]] was written without ever being queued.** Karel chose it in the 2026-09-22 gap pass; the Queued table stays empty and an //Assessed// row records the result. The brief's count (37 papers, 21 from 2024–2026, ≥ 10 hits of ''%%/mini-?programs?|WeChat/%%'') reproduces exactly, case-insensitive. Read against the page's 16-paper population the rule has 40.5% precision and 93.8% recall; the ecosystem vocabulary alone reaches all 16. The page is the first child of [[Design:Mobile and app measurement]], which had no mention of mini-programs to replace; [[:design]]'s table went from 19 to 20 rows. Three mini-program papers from the seven venues are outside the extraction (one PDF never retrieved, two venue-years without OpenAlex abstracts) and are cited, not counted. Full log: [[provenance:design:mobile_and_app_measurement:mini_programs]].
+===== 3h. Decisions taken on 2026-10-08 =====
+  * **[[Security:Malicious web content]] was written without ever being queued.** Karel chose it in the 2026-09-22 gap pass; a research run on 2026-09-27 stopped before writing, and this sitting finished it. The Queued table was empty and stays empty; an //Assessed// row records the result in the same shape as the other gap-pass pages. The ''malicious_web_content'' regex reproduces 124 papers and finds 36 of the page's 39, but none of its 20 hits from 2024–2026 is in the population. The page is the tenth child of [[:security]]. Full log: [[provenance:security:malicious_web_content]].
+  * **The "nothing after 2023" finding was tested, not assumed:** wider full-text vocabularies over every 2024–2026 paper, a title-and-abstract probe over the whole venue index to find screening losses, and the outside-venue search. Three on-topic 2025 papers were screened out of the corpus (all defences); the page names them and does not count them.
+* **[[Privacy:PII leakage]] was written without ever being queued.** Karel chose it in the 2026-09-22 gap pass; the Queued table stays empty and an //Assessed// row records the result in the same shape as the other gap-pass pages. The brief's three counts (218 / 76 web / 96 from 2024–2026) re-run exactly from ''paper.norm.txt''; the page measures the same regex over ''paper.cols.txt'' (226 hits, 13 of 20 population papers). Full audit: [[provenance:privacy:pii_leakage]].
+  * **Decided as a new page, not a broadening of [[Privacy:Email tracking]]**, because 15 of the 20 population papers are not about an email address (search terms, wallet addresses, SSNs, sensitive visits, logged-in content, tag configurations). Both pages cite //Leaky Forms// and the contact-form study, for different purposes; each links the other.
 ===== 4. The red-link gate =====