Note all pending discussions in CURRENT, AGENTS, TODO

CURRENT.md

@@ -40,6 +40,23 @@ persistent logging. Voice, audio, and video stay deferred.
 6. Collector account: read-only modules for voice membership fallback.
 7. Later: voice actions, audio, video, client lightening, web debug UI, remote authentication.
 
+## Open discussions (need the user)
+
+These items were discussed and wait for a decision or a live check.
+
+1. **MCP event delivery.** The MCP server is stateless, so it cannot push events. Options: (a) poll
+   the logs with a `since` cursor, (b) a stateful Streamable HTTP session with server notifications,
+   (c) a separate local SSE or WebSocket event stream. Option (a) works today. Decide before an LLM
+   attaches.
+2. **Untrusted logging.** Untrusted interactions are ignored at this time. The separate 30-entry
+   buffer exists but receives nothing. Confirm whether to log untrusted DMs and mentions again.
+3. **Privacy pass.** Only token-shaped and `mfa.` strings are redacted, and only in the persistent
+   action log. A fuller policy (retention, cache clearing, message redaction) is deferred.
+4. **First live run of reactions.** `reaction.add` and the message-ID return are mock-verified only.
+   The first real-client poll must confirm Discord's internal `addReaction` lookup.
+5. **Setup command flow.** The reaction-based multiple-choice design is recorded in `TODO.md`. The
+   poll command now provides the reaction machinery.
+
 ## Blocked / needs input
 
 - The original repo `zib/Veskslop` has a broken server-side git setup. Fetches and clones fail with