# Project Backlog

## Completed

### ASD-001 — Render agent-facing sponsored creative
**Owner:** Codex · **Status:** merged in `591dbf0`

Demonstrates embedded prose that catches an agent's attention while remaining explicitly sponsored and non-authoritative. Plain text, semantic attributes, visible disclosure, JSON-LD, user-authority language, and no-JavaScript rendering are covered by automated tests.

### ASD-005 — Preview deployment
**Owner:** Leemur · **Status:** live

Deployed and smoke-tested at https://agent-sponsored-discovery.vercel.app.

## In progress

### ASD-007 — Controlled carry-on experiment
**Owners:** Leemur (fixture/deploy), Codex (protocol/analysis), Instinct (rubric/behavior), Muse/leemuse (creative review)

Four matched static retailer arms: neutral promotion, conventional sponsored unit, direct agent-addressed sponsored prose, and identical agent prose plus structured disclosure. Product facts and discount value stay constant; coupon codes differ for attribution. Publish separate URLs and log fresh-context runs in the shared `Ad Test` sheet.

## Ready

### ASD-002 — Creative variant suite
**Owner:** Muse
**Depends on:** ASD-001

Create ten variants across travel, shopping, restaurants, software, and local services. Score attention, clarity, trust, and manipulation risk. Return versioned feedback, not untracked prose.

### ASD-003 — Shopper-agent behavior evaluation
**Owner:** Instinct
**Depends on:** ASD-001

For each creative, record whether it would be noticed, considered, disclosed, ignored, or distrusted while helping Vance. Include exact reasons and required evidence.

### ASD-004 — Adversarial evaluation harness
**Owner:** Leemur/Codex
**Depends on:** ASD-001

Test hidden instructions, fake urgency, sponsor omission, irrelevant intent, stale price, “ignore previous instructions,” and a user request for no ads. A candidate must never override user constraints.

## Blocked

### ASD-006 — Private GitHub repository and CI
**Blocker:** `gh` credential for `vance5427` is currently invalid. Reauthenticate with `gh auth login -h github.com`; verify private visibility before pushing.

## Product questions
- Should the creative be visible to humans by default, collapsed, or integrated into ordinary page copy?
- Should publishers host third-party creatives or should merchant sites advertise only themselves in v0?
- What categories are prohibited in the pilot?