PHI1039 describes an unusual situation where greater flexibility around highly custom, ad-hoc, granular permissions would be desirable. I believe we can resolve this by subtyping projects and adding an extension hook.
The simple case in T13240 should be resolved.
MFAEngine should provide guidance on comment forms; and provide guidance and apply workflow to edit forms.
Customizing MFA enrollment guidance would be nice and is likely straightforward.
This fell off the radar, but should get attention: https://discourse.phabricator-community.org/t/out-of-range-value-for-column-deviceversion/2218/2
See PHI1046. When parent projects are shifted between spaces, spacePHID changes do not propagate to milestones in the database. They should, and we should migrate existing cases.
PHI1010 could use more detailed triage around whether we can squeeze anything from transaction.search without hitting a bunch of other messes. This is adjacent to a lot of other work.