docs: record 2026-10-28 topic queue, backlog and kill list in project-state

docs/project-state.md

@@ -491,6 +491,37 @@ An independent read of the shipped pages turned up four things the first pass mi
 
 `/posts/` and `/zh/posts/` ledes no longer claim the page is purely newest-first.
 
+## 4f. Topic queue after the 2026-10-28 sourcing sweep
+
+Mined 14 local sessions (cron / subagent / personal rows dropped) against the 73 published posts.
+Overlap grep was clean for every item below (`proxy_read_timeout`, `cpuset`, `cpu_shares`,
+`Inno Setup`, `discover_models`, `home assistant` → zero hits across 96 EN files).
+
+**Accepted queue — in release order**
+
+| # | Post | Category | Evidence source | Status |
+|---|---|---|---|---|
+| 1 | `when-a-proxy-timeout-returns-html-instead-of-json` | engineering | session 2026-10-28 (`/api/automation` incident) | **published 2026-10-28**, LinkedIn companion in `docs/linkedin/batch-07-linkedin-posts.md` |
+| 2 | Home Assistant Container: ten releases across a 4-hop ladder | devops | session 2026-10-28 (2025.9.4 → 2026.10.4) | to write — recorder schema 50→53, Python 3.13→3.14, `http:` YAML→UI, exit 137 → `stop_grace_period: 60s` |
+| 3 | The installer prompt that printed `#13#10` literally | engineering | sessions 2026-10-27 (hevc packaging 1.0.1) | to write — `#13#10` is a newline in `[Code]` but not in `[Messages]`/`[CustomMessages]`; 18/18 silent loop |
+
+**Backlog candidates (not scheduled)** — one-core DSM CPU quota (`cpuset` not `cpus:`), model-picker
+`discover_models` (2,521 models), installer/uninstaller UX.
+
+**⛔ Kill list — do not re-offer (material already owned elsewhere)**
+
+- cloudflared + authentik 2026.8.5 + Portainer 2.45.3 + n8n 2.45.4 batch upgrade → owned by
+  `authentik-major-upgrade-gotchas` + `n8n-v1-to-v2-upgrade-gotchas`.
+- Telegram `409 polling conflict` → fatal adapter with no auto-reconnect → owned by
+  `why-telegram-bot-notifications-die`.
+- Jellyfin subtitle/track + library-washing sessions → owned by
+  `every-player-stuttered-the-file-was-fine` / `space-reclamation-wasnt-stuck-it-was-waiting`.
+- Magnet / download-source research batches → no first-hand engineering artefact.
+- Jellyfin password recovery session → ends on a content refusal; not writable.
+
+**Date hygiene** — 2026-09 (20) and 2026-10 (23) are saturated. Still-thin months to backfill one
+post each with `updatedDate: 2026-10-28`: **2025-11, 2025-12, 2026-01, 2026-06, 2026-07**.
+
 ## 5. Conventions (non-negotiable)
 
 - Push git.hoelee.com first, then GitHub