chore: remove BACKLOG.md

.github/instructions/BACKLOG.md

@@ -1,126 +0,0 @@
-# BACKLOG
-
-Status reflects 2026-08-06 code scan + implementation batches.
-
-## Playout & Delivery
-
-- [x] Implement FFmpeg + MediaMTX/SRS continuous HLS playout from playlist
-- [x] Implement immutable HLS segment naming for cache-friendly delivery
-- [x] Upload HLS segments to Cloudflare R2 via S3-compatible API
-- [x] Implement emergency slate fallback on playout failure
-- [x] Auto-restart loop for FFmpeg/MediaMTX on failure
-
-## Video Normalization
-
-- [x] Implement video normalization pipeline (H.264/AAC, 30 fps, 2 s keyframes)
-- [x] Implement ffprobe verification gate rejecting non-conforming files
-- [x] Enforce normalization check before upload acceptance in admin UI
-
-## Chat Service
-
-- [x] Implement WebSocket chat backend (Go) with room fan-out
-- [x] Implement private DM channel routing
-- [x] Implement Redis presence tracking for chat
-- [x] Implement Redis pub/sub for multi-instance chat
-- [x] Implement Redis rate limiting (INCR + EXPIRE windowing, >10/10s throttle)
-- [x] Implement chat message persistence (SQLite v1, PostgreSQL migration path)
-- [x] Implement moderation commands (/mod, /mute, /ban) in backend
-- [x] Implement moderation audit log persistence
-- [x] Implement graceful degradation when Redis unavailable (core chat remains up)
-
-## Frontend — Viewer SPA
-
-- [x] Build static SPA with hls.js player integration
-- [x] Build chat sidebar UI (public rooms + private DMs)
-- [x] Implement schedule metadata display synced with playlist timeline
-- [x] Implement responsive/mobile-friendly viewer layout
-
-## Frontend — Admin Interfaces
-
-- [x] Build admin login page with session authentication
-- [x] Build admin dashboard overview page
-- [x] Build video upload interface with chunked upload support
-- [x] Build playlist management interface (drag-to-reorder, validation warnings)
-- [x] Build schedule override/management interface (CRUD + conflict detection)
-- [x] Build user management interface (mute/unmute/ban/unban actions)
-- [x] Build moderation dashboard (chat log, inline mod actions, CSV export)
-- [x] Build analytics dashboard (time range selector)
-- [x] Build system configuration/status page (config editor, restart buttons)
-
-## Infrastructure — nginx
-
-- [x] Configure nginx reverse proxy with auth_request for admin paths
-- [x] Configure nginx HLS path with CORS headers + OPTIONS preflight
-- [x] Configure nginx WebSocket upgrade forwarding for /ws
-- [x] Configure nginx health endpoints (/health JSON, stub_status)
-
-## Infrastructure — Docker
-
-- [x] Create Dockerfiles for playout, chat, nginx services
-- [x] Create docker-compose.yml for all services (11 containers)
-- [x] Create docker-compose.prod.yml override for production
-
-## Infrastructure — CI/CD (Gitea Actions)
-
-- [x] Implement CI workflow (lint, build, vet, push images)
-- [x] Implement CD workflow (pull, deploy, health checks — IP-agnostic)
-- [x] Generate .env from Gitea secrets in CD workflow
-- [x] Seed Prometheus config + alerts into named volume during deploy
-- [x] Implement health check validation with retry in CD pipeline
-
-## Cloudflare Configuration
-
-- [ ] Configure DNS for linearvoid.tv apex and www redirect (manual)
-- [ ] Configure media.linearvoid.tv for split-domain HLS delivery (manual)
-- [ ] Create R2 bucket (manual)
-- [ ] Configure Cache Rules: .ts/.m4s + .m3u8 (manual)
-- [ ] Configure Cloudflare Pages (manual)
-- [ ] Enable Tiered Cache, WAF, rate limiting (manual)
-- [x] Implement Worker for immutable cache headers on segment paths
-- [ ] Enforce HTTPS/WSS, redirect HTTP → HTTPS (manual)
-
-## Monitoring & Observability
-
-- [x] Set up Prometheus with chat/playout/nginx/redis/postgres/node scrape targets
-- [x] Add nginx-exporter, redis-exporter, postgres-exporter, node-exporter
-- [x] Import Grafana app + operational dashboards
-- [x] Define Prometheus alerting rules (8 rules: ChatDown, PlayoutDown, RedisDown, etc.)
-- [ ] Set up UptimeRobot external monitoring
-
-## Security
-
-- [x] Implement admin cookie-session auth (HttpOnly, SameSite=Strict, Secure when TLS)
-- [x] Implement server-side session expiration
-- [ ] Enforce HTTPS/WSS at edge and origin
-- [x] Implement rate limiting for chat messages (Redis windowing)
-- [x] Implement WebSocket connection rate limiting (5/IP/60s)
-- [x] Implement admin login rate limiting (5/IP/5min)
-
-## Data & Storage
-
-- [x] Set up PostgreSQL/SQLite for chat history and moderation data
-- [x] Set up Redis with append-only persistence + maxmemory policy
-- [x] Implement daily Postgres backups to R2 (14-day retention)
-- [x] Implement weekly full backup snapshots (8-week retention)
-- [x] Implement backup integrity verification (restore test)
-- [ ] Document and rehearse recovery runbook (quarterly drill)
-
-## Scaling & Performance
-
-- [ ] Optimize segment immutability and manifest TTL for cache efficiency
-- [ ] Measure playback TTFB from multiple US regions
-- [ ] Load-test WebSocket connections
-- [ ] Benchmark admin API p95 latency
-- [ ] Track cache hit ratio and R2 ops in production
-- [ ] Capacity trigger monitoring
-- [ ] Plan Phase 2 service separation
-- [ ] Plan Phase 3 multi-origin resilience
-
-## Documentation
-
-- [x] Document API contracts in API.md
-- [x] Document deployment runbook in DEPLOYMENT.md
-- [x] Document monitoring setup in MONITORING.md
-- [x] Document security model in SECURITY.md
-- [x] Create incident runbook (docs/incident-runbook.md)
-- [x] Write Level 2/3 building block views