- P1 bulk-verify via com.atproto.repo.applyWrites (chunks of 200) - P2 load-once duplicate index Map<subjectDid,...>; update after create/revoke - P3 shared paginate() cursor-loop helper for getList/getLists/listRecords - P4 staleness check (getProfiles x25) + in-place re-issue (putRecord same rkey) - P5 trust caveat note near the primary action - P6 single source of truth for OAuth client metadata (/client-metadata.json) - P7 export/import JSON toolbar - npm run build passes (exit 0)