Out-of-scope thoughts that surface during work. Not yet promoted to issues, not yet on a sprint plan. Triaged weekly by the orchestrator. Each entry is one line — if it needs more, it should already be an issue.
Format: - [year-month-day, source] description (status). Status is one of open | promoted | rejected | shipped. Once shipped, link to the PR.
- [2026-05-10, phase 3] Add the cheering-fan sprite atlas (crowd-atlas-day.png / night.png) and switch the InstancedMesh material to a textured atlas sampler with per-instance frame offset. Phase-3 ships with a flat colour-jittered billboard which reads OK at distance but misses the cheering frames. (open)
- [2026-05-10, phase 3] Run the offline ElevenLabs MP3 batch step for the AR-FR final and check the resulting manifest.json + 200-line corpus into apps/web/public/audio/commentary/{lang}/. Renderer-side scheduling already wired in lib/audio/pre-rendered-track.ts. (open)
- [2026-05-10, phase 3] Real GLB seating models per doc 27c — Phase-3 uses procedural boxes that are cheap and read fine, but a hand-authored GLB would tighten the silhouette. (open)
- [2026-05-09, doc 04] WebXR / VR mode — scene already in three.js, additive lift. (open)
- [2026-05-09, doc 04] In-scene replay seek (snap to event time). (open)
- [2026-05-09, doc 04] Spectator chat / Twitch overlay. (open)
- [2026-05-09, doc 04] Stadium customisation per-team. (open)
- [2026-05-09, doc 07] Ready Player Me avatar tier — generates GLB from one player photo, swap into existing pipeline. (open)
- [2026-05-09, doc 07] Custom GLB avatar tier for forks (Roblox-style worlds). (open)
- [2026-05-09, doc 07] Ship full Mixamo retargets for the 12 stub animations (
walk,sprint,pass,header,shoot,tackle,fall,celebrate,throw,catch,dribble,jump) — current build emits idle-clip stubs that satisfy the loader contract but read as static. Pipeline: download Mixamo FBX →FBX2glTF→ drop inapps/web/public/animations/. (open) - [2026-05-09, doc 07] Higher-fidelity body GLB: hand-modelled in Blender with a full Mixamo skeleton, tasteful low-poly silhouette (head/torso/arm separation rather than the current box approximation). Current self-authored body is functional but readable as boxes at close camera. (open)
- [2026-05-09, statsbomb-replay] Multi-match support: lift the hard-coded ARG/FRA team identity into a config so the producer can replay any StatsBomb open-data match. (open)
- [2026-05-09, statsbomb-replay] Bezier-arc ball trajectories on shots / long passes; current state synthesis is linear-only. (open)
- [2026-05-09, statsbomb-replay] Auto-fetch player photos from Wikidata SPARQL instead of the hand-curated CSV. (open)
- [2026-05-09, statsbomb-replay] Speed-driven facing improvements during freeze-frame holds (currently faces toward next anchor). (open)
- [2026-05-09, statsbomb-replay] Emit
event.tacklefrom StatsBombDuel/Dribbled Pastpairs for richer renderer animation triggers. (open) - [2026-05-09, statsbomb-replay] Emit
event.out_of_boundsfrom StatsBombBall Out/ restart events. (open) - [2026-05-09, doc 06] Per-player MOT tracking (TrackNet for ball, ByteTrack for players). (open)
- [2026-05-09, doc 06] Camera-pose estimation to back out world coordinates from broadcast view. (open)
- [2026-05-09, doc 06] Pose estimation for accurate kicking / heading animations. (open)
- [2026-05-09, doc 06] Multi-feed fusion (sideline + broadcast + tactical cam). (open)
- [2026-05-09, doc 11] Live-broadcast CV pipeline (own implementation, not LLM-based). (open)
- [2026-05-09, doc 11] UWB / RFID amateur-match tracking module — community capstone. (open)
- [2026-05-09, doc 02] Player rotations beyond yaw (pitch/roll). (open)
- [2026-05-09, doc 02] In-scene crowd / weather / atmosphere. (open)
- [2026-05-09, doc 02] Multi-camera authoring as part of the wire format. (open)
- [2026-05-09, doc 02] event.commentary may need an
audio_urifield for prerendered ElevenLabs audio. (open)
- [2026-05-09, doc 16] Dynamic per-tournament scoring rule overrides (sponsor "Comeback Cup" with 2× comeback points). (open)
- [2026-05-09, doc 16] Live-stream "Watch Party Mode" UI for pubs / Discord — see doc 14 mention. (open)
- [2026-05-11, share-landing] Hoist
bracketToCascadeInputfromapps/web/lib/bracket/cascade-bridge.ts+apps/game/src/routes/bracket-cascade-summary.tsinto@tournamental/bracket-engineso both surfaces share one helper. Currently near-duplicated. (open)
- [2026-05-09, doc 13] Voice messages from the bot (only after v0.1 lands). (open)
- [2026-05-09, doc 13] Sticker pack as viral asset. (open)
- [2026-05-09, doc 20] Behavioural-biometrics opt-in (typing cadence) — privacy-conscious, opt-in only. (open)
- [2026-05-10, doc 13] Per-syndicate fresh bots (Option B) — proxy through BotFather to mint a dedicated bot per syndicate operator. v0 ships deep-link Option A on the main bot; revisit when syndicate count > ~50 and operator branding becomes the bottleneck. (open)
- [2026-05-10, doc 13] Inline-keyboard pick flow for /picks (3–4 tap predict tree per doc 13). v0 deep-links to web. (open)
- [2026-05-10, doc 13]
@TournamentalAnnouncechannel for tournament-wide broadcasts; bot posts pinned headlines at draw / kickoff / final. (open) - [2026-05-10, doc 13] Group-leaderboard mode — install bot in a group,
/setupbinds the group ID to a private leaderboard. (open) - [2026-06-04, profile email-change UX] Build a verify-and-merge email change flow: new auth-sms endpoint that takes an authed session + a verified OTP for a new email, and merges that email onto the current user row (instead of minting a fresh session via findOrCreateEmailUser). Until that lands, the Profile email field is readOnly. Affected: apps/auth-sms/src/routes/email-otp.ts (new POST /v1/auth/email/link), apps/web/components/auth/ProfilePage.tsx (re-enable Email field), apps/web/lib/auth/inbound-login.ts (new client helper). (open)
- [2026-05-09, doc 17] Bitcoin-only OpenTimestamps tier marketing badge once Bitcoin proof completes. (open)
- [2026-05-09, doc 17] Prediction-IQ percentile breakdown by tournament stage (group vs knockout). (open)
- [2026-05-09, doc 21] UMA dispute integration for high-value pools. (open)
- [2026-05-09, doc 21] Multi-chain expansion beyond Polygon + Base (Arbitrum, Optimism). (open)
- [2026-05-09, doc 18] Native iOS / Android app shipping (push, contacts integration, location). (open)
- [2026-05-09, doc 18] Advertiser / brand-safety dashboard for sponsored inventory placements. (open)
- [2026-05-09, doc 18] Verified-Pundit-as-creator monetisation flywheel (paid follower tier). (open)
- [2026-05-09, doc 18] Cross-domain expansion (elections, awards, entertainment) once sports platform stable. (open)
- [2026-05-09, doc 19] Quarterly RetroPGF round to layer onto Drips streaming. (open)
- [2026-05-09, doc 19] Formal governance token (deferred to year 2+ if regulatory path appears). (open)
- [2026-05-09, doc 19] Public treasury dashboard at tournamental.com/foundation/treasury. (open)
- [2026-05-09, doc 19] Drips Network Drip List with 200 contributor addresses. (open)
- [2026-05-09, Tournamental Pitch.md] tournamental.com landing — coming-soon page with email capture. (open)
- [2026-05-09, Tournamental Pitch.md] Pitch deck for sponsors / investors based on Tournamental Pitch.md. (open)
- [2026-05-09, Tournamental Pitch.md] Brand assets: logo, wordmark, colour palette, animation reel. (open)
- [2026-05-09, Tournamental Pitch.md] OpenGraph share-card generator for matches and predictions. (open)
- [2026-05-09, CLAUDE.md]
scripts/sign-off.sh— automate the end-of-session checklist. (open) - [2026-05-09, CLAUDE.md]
scripts/new-session.sh— bootstrap a session note from a template. (open) - [2026-05-09, CONTRIBUTING.md] CI integration: GitHub Actions matrix for lint/test/build/security. (open)
- [2026-05-09, CONTRIBUTING.md] Pre-commit hook running gitleaks + lint locally. (open)
- [2026-05-09, REVIEW.md] Repo rename from
SimulatedSportstovtornonce brand is locked. (open) - [2026-05-11, doc 28]
pnpm create @tournamental/plugin <kind> <name>scaffolder. v0.2 SDK ship. (open) - [2026-05-11, doc 28] ESLint rule
no-unsanctioned-domshipped by the plugin SDK to lint renderer plugins. v0.2. (open) - [2026-05-11, doc 28]
/pluginssettings page in apps/web listing installed plugins with enable/disable + per-plugin error log. v0.2. (open) - [2026-05-11, doc 28]
validate-pluginCLI in the SDK that catches manifest/package.json drift before PR. v0.2. (open) - [2026-05-11, doc 28] Wire the plugin loader into apps/web/lib/plugins/loader.ts and apps/api/src/plugins/loader.ts. Currently the SDK + example plugin land additive; the actual loader is a follow-up PR once the first external plugin is ready. (open)
- [2026-06-04, CVE sweep] Bump
apps/marketingto astro 5.x (currently pinned to ^4.16.19). Astro 5 tightens thez.union([image(), z.string()])schema and the union no longer falls through cleanly for/public/blog/*.jpgheroImage strings: build fails with ImageNotFound on every blog post. Fix is either (a) reorder the union or (b) move hero refs to a dedicatedheroImageUrlstring field. Tracking for a deliberate migration once the blog content set is locked. Until then four astro CVEs remain unpatched (1 high reflected-XSS GHSA-7g5w-7gv5-mjj9, 3 moderates). (open) - [2026-06-04, CVE sweep] Bump
apps/webfrom next-intl 3.26.5 to ^4.9.2. v4 changes the navigation/routing API (Link, useRouter) and several locale-detection internals; sweeping refactor across i18n call-sites. Two moderate CVEs (open-redirect, prototype pollution via experimental.messages.precompile) remain on 3.x. (open) - [2026-06-04, CVE sweep] Bump
apps/webto next 15.x once App Router 14 route conventions are audited. 15.5.16 patches eleven highs/moderates (DoS, SSRF via WebSocket, image-optimizer cache-key, App Router XSS); none are exploitable on our current surface but the audit count drops sharply. (open) - [2026-06-04, CVE sweep] Bump
vitestfrom 2.x to ^4.1.0 across all packages — clears the critical advisory (vitest UI server arbitrary file read/execute). Dev-only impact, contained, but worth doing on the next refactor wave. (open)
- [2026-05-09, REVIEW.md] License confirmation (Apache 2.0 vs MIT vs AGPL — Apache 2.0 currently set). (open)
- [2026-05-09, REVIEW.md] Domain DNS + Cloudflare account setup for tournamental.com. (open)
- [2026-05-09, REVIEW.md] Telegram bot username reservation (
@TournamentalBot/ variants). (open) - [2026-05-11, dependabot triage] React 18 → 19 migration: pulls @react-three/fiber 8→9 (#21) + @react-three/drei 9→10 (#23) + react/@types/react (#24). Multi-day; needs full match-replay smoke test. (open)
- [2026-05-11, dependabot triage] vitest 2 → 4 migration: skip-major breaks with
ERR_PACKAGE_PATH_NOT_EXPORTEDacross every monorepovitest.config.ts. (#22) (open) - [2026-05-11, dependabot triage] Astro 4 → 5 migration: blocks @astrojs/sitemap 3.7+ (sitemap calls an
astro:build:donehook signature that exists only on astro 5). (open)
- Promoted: orchestrator opens an issue, links it back here, marks
promoted. - Rejected: explanation in a one-line comment under the entry.
- Shipped: link to the merged PR.
Triage at the start of each sprint. Don't let this list become a graveyard — items older than 90 days that haven't been promoted should be pruned or actively rejected.