Master backlog

0. Status legend

Quality tiers

• Tier A - generated/procedural walkthrough; accurate shape, generic detail.
• Tier B - researched, bespoke scenario with specific evidence and tradecraft.
• Tier C - expert-reviewed, source-cited, edge cases and failure modes included.

0A. Remaining work at a glance

Next action: no open work; all priorities and defects are closed.

1. Coverage inventory - what exists now

1.1 Totals

1.2 Technique quality split

1.3 Group quality split

1.4 Protocol quality split

1.5 Data files and load order

First paint: ~5 s headless (was ~14 s before the split).

2. Complete audit queue - what still must be checked

2.1 Content audits

2.2 Functional audits

3. Coverage gaps - topics that still must be added

3.1 Techniques

All current ATT&CK Enterprise v19, Mobile and ICS techniques are covered. No ATT&CK technique gaps remain.

Depth gaps, not coverage gaps: 583 remaining auto Enterprise, 125 Mobile and 104 ICS pages are Tier A.

3.2 Concepts

Current: 120. Target: 120. Coverage target met; 107 generated concepts remain Tier A and are in the audit queue.

Future candidates beyond the current target: satellite security, cyber insurance, crisis communications, legal/regulatory response, identity wallets, deepfake detection, cyber diplomacy and M&A security.

3.3 Groups

Current: 212. All ATT&CK groups are covered.

Depth gaps: 34 Mobile/ICS groups have no dossier, tools, technique chain or mitigation mapping.

3.4 Software, campaigns, mitigations

Current: 971 software, 61 campaigns, 109 mitigations. All have pages.

Gaps: no filters/search, no relationship navigation, generic simulation, no source citations.

3.5 Frameworks

Current: 4. Target: ~12 - 15. Missing:

• NIST SP 800-53
• PCI DSS 4.0
• HIPAA Security Rule
• GDPR
• ISO/IEC 27017
• ISO/IEC 27018
• CMMC 2.0
• FedRAMP
• CIS Benchmarks
• MITRE D3FEND
• NIST SSDF
• SLSA
• ISO 22301
• COBIT
• ITIL 4

3.6 Glossary

Current: 150. Target: 150. Coverage is complete; definitions remain static, with no search/filter.

3.7 Protocols

Current: 160. Target: 160. Coverage target met; all 160 have explicit packet fields and per-step phases.

Future protocol families beyond this target: CDP, VTP, HSR, MRP, OTV, BIER, DCCP, UDP-Lite, NNTP, rlogin, X11, DMVPN, FlexVPN, SNMPv3, Cassandra, Kafka, MQTT-SN, Matter, Thread, BLE, Teredo.

3.8 Learning and narrative

• Learning paths: 6 of 6
• Role paths: 4 of 4
• Case studies: 0 of 12
• Tactic detail pages: 0 of 41
• Data-source pages: 0
• Detection-rule pages: 0

4. Issue register - actual defects and weaknesses

4.1 P1 - coverage and depth

4.2 P2 - UX, performance, quality

No open defects. ISSUE-032 and ISSUE-036 are fixed and covered by regression checks.

4.4 Things that are not defects

5. Prioritised work groups

All priority groups (P0-P4) are complete. No open priority work remains; completed work is in 5A.

5C. Remaining work registry

Both remaining issues were fixed and verified. The backlog now has no open priority work and no open defects.

• Verification:
  • Search step records load on demand.
  • Blockquotes and nested lists render in this page.

5A. Completed and removed from the open backlog

These items are complete and no longer count as open work. They stay here as the audit trail.

5B. New findings added this pass

• The backlog is now live-only: completed items are removed from open sections and archived in - 5A.
• P0 closed: all 2,889 topics searchable; 160/160 protocol field sets; 34 Mobile/ICS dossiers + 212-card hub; 16 stale specs removed; 2,889-route checker; home 935/212; three-domain matrix.
• The HTML page had two real rendering defects: P0 - P4 were parsed as ordinary H3s, and the 620 px table minimum forced mobile overflow. Both are fixed and archived.
• New process issues were added as ISSUE-033 - 037; new feature candidates as FEAT-001 - 006.

6. Next actions - ordered

1. P2-02 audit 229 Mobile/ICS techniques. Platform-specific accuracy.
2. P3-01 index reduction. 940 KB is still heavy.
3. P3-02 first paint below 2 s. Measure after the index split.

7. Verification reference

Run from attack-range/:

node tools/compile.mjs --check
node tools/build-secondary.mjs
node tools/build-concepts.mjs
node tools/build-protocols.mjs

Syntax:

node --check assets/js/app.js
node --check assets/js/protocol-engine.js
node --check assets/js/library.js

Routes to smoke-test:

#/                    home
#/range               Enterprise matrix list
#/matrix              Enterprise matrix
#/t/T1669             lazy technique
#/groups              group hub
#/g/G0032             lazy group dossier
#/concepts            concepts
#/c/phishing           concept lab
#/library             library hub
#/domain/mobile       Mobile list
#/domain/ics          ICS list
#/protocols           protocol hub
#/p/dns               protocol player
#/frameworks          frameworks
#/glossary            glossary
#/taxonomy            concept taxonomy

8. Definition of done for the whole site

• Every topic has a page and a working simulation/lab or a clearly static reference page.
• Search finds all 2,889 topics.
• No route 404s, no empty page, no console errors.
• Every generated page has been reviewed at least once.
• Protocols have protocol-specific fields and accurate layers.
• Home and matrix reflect Enterprise + Mobile + ICS.
• Mobile/ICS groups have full dossiers.
• Frameworks and glossary are searchable and cross-linked.
• Boot < 1 MB and first paint < 2 s.
• CI runs compile, link, AV and route checks.
• Docs match the build.
• Deployed with a stable public URL.