docs(cua-driver): reconcile historical backlog review

[f-trycua]

Summary

• reconcile the historical Cua Driver backlog review against current origin/main and live GitHub state
• provide a bounded five-item maintainer decision surface, important blockers, and superseded historical items
• reorganize active work by Windows, Linux X11, rootless XWayland, macOS, cross-platform, security-hold, and release lanes
• ground the proposed Windows W1 batch in public Cua Fleet documentation as one reusable static pool with two sequential, state-isolated exact-SHA candidate segments
• separate a no-cost Phase 0 from billable, human-gated Phase 1 and make proof of a clean candidate boundary the first acceptance criterion

Reports

• backlog-reconciliation-2026-08-23.md — current candidate ranking and blocked items
• backlog-by-platform-and-test-batching-2026-08-23.md — OS/area grouping, public Fleet pilot, and test-batching plan

Public Fleet pilot

• prefers one static Windows pool with replicas=1; broad parallel scale-out is not needed for the bounded two-item pilot
• keeps cua-driver 0.21.0 Windows MCP: permanent "this session has ended" state after an mcp shim instance exits — start_session cannot recover #3329 at current main 737dc2a069528abadee67526d138a907e1c52061 and fix(cua-driver): make Windows listener discovery locale independent #3275 at exact head 1429831d5a27246ea241f55b4f0f991884e43f5b
• requires separate claims, sandboxes, and evidence ledgers, while allowing pool/configuration reuse only
• records the public-doc gap: claim release, rewarm, scale-to-zero, and claim recreation are not documented clean boundaries
• aborts before candidate execution unless a fresh sandbox from the pinned image digest can be proven
• keeps fix(cua-driver): report inaccessible Windows daemon pipes #3318 review-first with no VM reservation

Evidence

• recovered the historical artifact from 3251536e645fa148c7cd9bfdba42575f47a1a19c
• reconciled 340 open issues plus 361 open pull requests to GitHub's 701 open-item count
• inspected focused current issue and pull-request metadata, exact heads, files, checks, reviews, comments, and selected diffs
• rechecked cua-driver 0.21.0 Windows MCP: permanent "this session has ended" state after an mcp shim instance exits — start_session cannot recover #3329, fix(cua-driver): make Windows listener discovery locale independent #3275, fix(cua-driver): report inaccessible Windows daemon pipes #3318, and draft PR docs(cua-driver): reconcile historical backlog review #3339 immediately before delivery; candidate heads and states remained unchanged
• grounded Fleet claims in five public cua.ai/docs pages covering sandbox state, lifecycle, Terraform pools, Python pool claims, and concurrency

Validation

• git diff --check
• pnpm exec prettier --check libs/cua-driver/docs/backlog-by-platform-and-test-batching-2026-08-23.md
• strict citation-ledger verification for the report and focused Fleet section
• verified all 21 distinct public and GitHub links in the companion report resolve
• scanned the companion report for credentials, private URLs, machine-local paths, placeholders, and private identifiers
• confirmed the revision removes no existing exact SHA or named contributor/reporter attribution
• independent read-only content review; expanded teardown evidence to include deletion method, times, result, absence verification, final spend, and escalation

Limits

• documentation-only reconciliation and scheduling plan; no product behavior changed
• no Fleet authentication, credential retrieval, pool apply, claim, sandbox execution, spending, teardown, or untrusted contributor-code execution occurred
• pool reuse does not authorize state reuse; every behavioral result remains scoped to one exact candidate SHA and session class
• public Fleet documentation covers Linux and Windows pool examples, not the logged-in, TCC-authorized macOS Lume harness
• no native Windows, Linux, or macOS desktop matrix was rerun
• no backlog issue, label, assignment, comment, review, merge, release, or workflow was mutated

Review focus

• decide whether to select the W1 public Fleet pilot without treating that selection as billable execution approval
• resolve the public-doc cleanliness gap before either candidate runs
• if Phase 1 is considered, record the account owner, budget ceiling, wall-clock cap, pool name, immutable image digest, credential source, teardown authority/deadline, and untrusted-code approval
• confirm fix(cua-driver): report inaccessible Windows daemon pipes #3318 as the next bounded maintainer review without a VM reservation
• settle the fix(cua-driver): honor disabled UIA ancestors #3263/fix(cua-driver): report Windows tree completeness #3264/fix(cua-driver): clarify Windows window-state coordinates #3265 landing order and fix(cua-driver): bind rootless XWayland browser windows #3295 live acceptance environment
• settle the public-contract/RFC boundary for Standardize foreground delivery as action-scoped activation with guaranteed restoration #2206 and fix(cua-driver): expose AT-SPI actions in get_window_state elements #3307
• keep feat(cua-driver): record human demonstrations as skill-ready trajectories #2016 in private security review and run chore(main): release cua-driver-rs 0.22.0 #3269 release certification alone