Group the notepad into work packages, move two reliability items to M5

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01H7LwYgJfpkbLCTeiAf8U4A

ROADMAP.md

@@ -23,6 +23,9 @@ existing flow engine reachable and persistent precedes new feature breadth.
 - [x] Design token contract: root `DESIGN-GUIDELINES.md`, per-repo `DESIGN.md`,
       byte-identical token blocks verified by `make design-check`
 - [ ] CI on Codeberg (Forgejo Actions): pre-commit, backend tests, Playwright, compose smoke
+- [ ] Soak and chaos harness: sustained load with the state backend, the broker and
+      the engine itself taken away underneath it. The reliability layers were verified
+      by hand against a live instance; keeping them verified needs a harness
 
 ## Phase 1 — Backend: management
 
@@ -118,6 +121,9 @@ Rust, optimised for throughput. Executes nodes and distributes them across worke
 - [ ] Parallel invocation of stateless nodes over independent input sets, to
       keep I/O delay minimal (stateful I/O nodes keep serializing via the
       `synchronous` mechanism)
+- [ ] Run user Python nodes out of process. One occupies a worker thread until it
+      returns today, so a runaway node cannot be bounded by a timeout nor cancelled
+      from the canvas — both fall out of the isolation
 - [ ] Extract node execution from the Python prototype into a Rust engine
 - [ ] Worker distribution and load balancing across capable devices
 - [ ] Input/output validation at the node boundary
@@ -152,6 +158,9 @@ React + Vite, primarily desktop but usable on mobile. See `docs/architecture/str
 - [ ] Device assignment per node, selectable from compatible devices
 - [ ] Test-node affordance on the canvas
 - [ ] User management screens
+- [ ] Screens for what the API already owns alone: the secrets store, alert
+      channels and rules, and the OAuth clients an agent registers — the last
+      needs its management endpoints written first
 - [x] Mobile-friendly canvas: touch connect, full-screen node panel
 - [ ] Installable as a PWA (`vite-plugin-pwa`)
 
@@ -163,7 +172,11 @@ Shares components with the admin view. See `docs/architecture/structure.canvas`
 - [x] User-defined dashboard layout with edit and view modes: dashboards are their own
       documents, widgets bind to message names, and the input ones publish back. View
       mode is plain CSS grid, so a panel that only displays loads no editing code
-- [ ] Responsive layout targeting wall panels, mobile and desktop
+- [ ] Chart widget drawing a message's history, with the one sequential
+      `--chart-*` scale it needs. The type and its history are stored and served
+      already; nothing draws it
+- [ ] Layout by dragging rather than a width control, a grid size per dashboard,
+      and a full-bleed route so a wall panel loads no admin chrome
 - [ ] Per-device view
 
 ## Phase 5 — Website and docs