Backlog 4: the other planned work, for when the speed items are blocked abdbc768c6e8

## When a speed item is blocked: the other planned work

Andy's choice (2026-09-30): if the loop is stuck on the speed items (no

idea left that measures better, or blocked on something only Andy can

decide), it notes why in the log and takes the next item below instead of

stopping. Each follows the same rules: an issue, tests, the gate, push,

deploy where it applies, and a log line. Skip an item that needs Andy (a

decision, an account, hardware) and say so in the log.

1. **Web workspaces (P5), "VS Code in the hub"**, in parts:

   - [ ] P5a **flow-casfs**: a read-only FUSE mount of a state from its

     content-addressed chunks, in oxygenflow, measured (mount time, first

     read, a full walk of the Linux tip).

   - [ ] P5b **Open in Workspace** on a change or bookmark page of the hub:

     openvscode-server (MIT, unmodified) with Oxygen VCS inside a

     Firecracker microVM per workspace, the state mounted read-only through

     casfs with an ephemeral overlay for edits, and commits going back

     through oxy as the signed-in user. The runner hosts it (the image under

     `~/flow`, a workspace job kind); the hub starts it, proxies it to the

     signed-in user only, and stops it when idle. Boot time measured, aiming

     under 100 ms for the mount. Write the design into the hub and

     oxygenflow specs first. A fork of VS Code only if an extension cannot

     do what is needed, decided with Andy.

2. - [ ] **oxy on projects coming from Git**: say when a folder holding

   `.git` is skipped (oxygen#43), and honour `.gitignore` or offer to import

   it (oxygen#44).

3. - [ ] **Device sign-in** for apps and `oh` (oxygenhub#67): approve a code on

   the web with password and 2FA, and the app receives a scoped token. The

   Android client needs it.

4. - [ ] **An Android build image** for OxygenFlow (oxygenflow#19): JDK,

   Android SDK and NDK, and a Gradle cache warmed offline.

5. - [ ] **OxygenHub VCS**: declare its authentication provider in the

   manifest (oxygenhub-vscode#4), released as the next patch (see the

   Marketplace notes: never reuse a version).

6. - [ ] **Import at scale**: finish oxygen#25 (per-commit import cost), then

   backlog 3's H3 (Linux history slices of 2 000, 10 000 and 50 000

   commits, verified) and H4 (vscode's full history, about 130 000

   commits, into a scratch repository that is never published).

7. - [ ] **The hub's open issues**: runner management (oxygenhub#41, backlog

   2's H12 parts), a pinned subrepo left out of a Flow job for lack of

   access (#56), faster CI (#29), required checks over the API (#20).

8. - [ ] **The hub's plan** (`oxygenhub/docs/plan.md`): notifications for

   review requests, mentions and landings; the organisation webhooks page.

   Email verification and password reset need SMTP on Earth, and passkeys

   are for 1.0: skip both unless Andy says otherwise.

9. - [ ] **Housekeeping**: tick plan items that are already done (for

   example `oxy seal --proposal` exists), and CHANGELOG files for oxygen,

   oxygenhub and oxygenflow like the extensions' (backlog 2's V2).