Page MenuHomePhabricator

kostajh (Kosta Harlan)
Principal Software Engineer, Product Safety and Integrity

Today

  • No visible events.

Tomorrow

  • No visible events.

Wednesday

  • No visible events.

User Details

User Since
Jun 12 2018, 2:22 PM (434 w, 6 d)
Availability
Available
IRC Nick
kostajh
LDAP User
Unknown
MediaWiki User
KHarlan (WMF) [ Global Accounts ]

Recent Activity

Today

kostajh closed T439755: Abuse review: Revisions looked up for each row should be batched as Resolved.
Mon, Oct 12, 7:35 PM · Patch-For-Review, Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), FY25-26 DE4.1 Platform capacity, MediaWiki-extensions-WikimediaAntiAbuse, WikimediaAntiAbuse-AbuseReview
kostajh moved T440870: AbuseReview: Add rollback, undo and change visibility links to rows from Needs review to QA in Prod on the Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)) board.
Mon, Oct 12, 5:45 PM · MW-1.47-notes (1.47.0-wmf.24; 2026-10-13), Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), WikimediaAntiAbuse-AbuseReview
kostajh created T440871: AbuseReview: Integrate aggregate information to UserInfoCard.
Mon, Oct 12, 12:39 PM · Patch-For-Review, WikimediaAntiAbuse-AbuseReview, Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), CheckUser-UserInfoCard
kostajh moved T440870: AbuseReview: Add rollback, undo and change visibility links to rows from Backlog to Needs review on the Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)) board.
Mon, Oct 12, 12:35 PM · MW-1.47-notes (1.47.0-wmf.24; 2026-10-13), Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), WikimediaAntiAbuse-AbuseReview
kostajh created T440870: AbuseReview: Add rollback, undo and change visibility links to rows.
Mon, Oct 12, 12:34 PM · MW-1.47-notes (1.47.0-wmf.24; 2026-10-13), Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), WikimediaAntiAbuse-AbuseReview
kostajh added a comment to T440832: [hCaptcha] Enable hCaptcha on the Beta only.

hCaptcha isn't available on the beta cluster, because of sensitivity around how hCaptcha enterprise's risk scores need to be handled. So unless you want to use integration test keys on wikidata beta (https://docs.hcaptcha.com/#integration-testing-test-keys), I would just skip that step.

Mon, Oct 12, 8:46 AM · Wikidata-Omega, Product Safety and Integrity, hCaptcha, Wikidata

Thu, Oct 8

kostajh updated the task description for T440534: Add AbuseFilter variable for count of edits flagged as likely vandalism.
Thu, Oct 8, 2:06 AM · Patch-For-Review, WikimediaAntiAbuse-AbuseReview
kostajh created T440534: Add AbuseFilter variable for count of edits flagged as likely vandalism.
Thu, Oct 8, 2:06 AM · Patch-For-Review, WikimediaAntiAbuse-AbuseReview

Wed, Oct 7

kostajh created T440526: CheckUser: Add Client Hints data to the security log context.
Wed, Oct 7, 9:07 PM · Patch-For-Review, Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), Essential-Work, http-client-hints
kostajh changed the status of T234155: Create CheckUser-level abuse filters, a subtask of T50623: Add user-agent variable for abuse filtering, from Stalled to Open.
Wed, Oct 7, 8:34 PM · Product Safety and Integrity, Community-Wishlist-Survey-2023, Stewards-and-global-tools, AbuseFilter
kostajh changed the status of T234155: Create CheckUser-level abuse filters from Stalled to Open.
Wed, Oct 7, 8:34 PM · Patch-For-Review, Product Safety and Integrity, Trust-and-Safety, Community-Wishlist-Survey-2023, Epic, WMF-Legal, CheckUser, AbuseFilter, OKR-Work
kostajh changed the status of T234155: Create CheckUser-level abuse filters, a subtask of T155553: abuse filter should be able to evaluate is IP in range for registered users, from Stalled to Open.
Wed, Oct 7, 8:34 PM · Product Safety and Integrity, Privacy, Stewards-and-global-tools, AbuseFilter

Fri, Oct 2

kostajh renamed T439966: AbuseReview: Consider suppressed and revision deleted edits, and edits to deleted pages, to be handled in the vandalism queue from AbuseReview: Consider suppressed and revision deleted edits to be handled in the vandalism queue to AbuseReview: Consider suppressed and revision deleted edits, and edits to deleted pages, to be handled in the vandalism queue.
Fri, Oct 2, 1:15 PM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh moved T439966: AbuseReview: Consider suppressed and revision deleted edits, and edits to deleted pages, to be handled in the vandalism queue from Backlog to Ready on the Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)) board.
Fri, Oct 2, 12:57 PM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh created T439966: AbuseReview: Consider suppressed and revision deleted edits, and edits to deleted pages, to be handled in the vandalism queue.
Fri, Oct 2, 12:57 PM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity

Thu, Oct 1

kostajh added a comment to T439665: Add FIDO-backed SSH keys for kharlan.

Thanks!

Thu, Oct 1, 12:07 PM · SRE, SRE-Access-Requests

Wed, Sep 30

kostajh moved T439708: AbuseReview: Make it possible to apply verdicts from RecentChanges/Watchlist from Backlog to In progress on the Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)) board.
Wed, Sep 30, 12:22 PM · Patch-For-Review, FY25-26 DE4.1 Platform capacity, Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), WikimediaAntiAbuse-AbuseReview
kostajh claimed T439708: AbuseReview: Make it possible to apply verdicts from RecentChanges/Watchlist.
Wed, Sep 30, 12:22 PM · Patch-For-Review, FY25-26 DE4.1 Platform capacity, Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), WikimediaAntiAbuse-AbuseReview
kostajh created T439708: AbuseReview: Make it possible to apply verdicts from RecentChanges/Watchlist.
Wed, Sep 30, 12:10 PM · Patch-For-Review, FY25-26 DE4.1 Platform capacity, Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), WikimediaAntiAbuse-AbuseReview
kostajh moved T439518: Client hints: Add Prometheus integration from Backlog to Needs review on the Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)) board.
Wed, Sep 30, 11:56 AM · Patch-For-Review, Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), Essential-Work, http-client-hints
kostajh moved T439694: Add some extra UI elements to Special:AbuseReview from Needs review to In refinement on the Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)) board.

Moving to in refinement until @ROdonoghue-WMF has a chance to review and sign off on the changes.

Wed, Sep 30, 10:45 AM · MW-1.47-notes (1.47.0-wmf.22; 2026-09-29), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity, Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9))
kostajh created T439665: Add FIDO-backed SSH keys for kharlan.
Wed, Sep 30, 7:53 AM · SRE, SRE-Access-Requests

Tue, Sep 29

kostajh claimed T439518: Client hints: Add Prometheus integration.
Tue, Sep 29, 8:49 AM · Patch-For-Review, Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), Essential-Work, http-client-hints
kostajh created T439518: Client hints: Add Prometheus integration.
Tue, Sep 29, 8:49 AM · Patch-For-Review, Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), Essential-Work, http-client-hints
kostajh added a comment to T437659: [Spike] [iOS] [1-hour] Identify all flows that require the addition of hCaptcha support.

Note these aren't page edits, so I'm not sure if they should be prioritized for hCaptcha. But here's more that Claude dug up:

Tue, Sep 29, 6:17 AM · App Growth (AppG Sprint [FY2627 Sep 16 - Sep 30]), Product Safety and Integrity, hCaptcha, hCaptcha on Mobile Apps

Mon, Sep 28

kostajh added a comment to T439447: Phabricator MCP no longer works in WMF Claude.

Which version are you on?

Mon, Sep 28, 5:27 PM · Product Safety and Integrity, WMF-Claude
kostajh added a comment to T438934: Allow clients to interact with AbuseReview via an API.

Retrieve the feed, to be able to see revisions that are not considered handled (and allow for fetching the feed with parameters for "include handled revisions" and "include false positives", support pagination of responses, etc)

Could users not just use the revisions or recentchanges APIs with tag filters for this?

Mon, Sep 28, 7:55 AM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity

Fri, Sep 25

kostajh closed T439181: AbuseReview: Instrument the "include recent edits" filter as Resolved.
Fri, Sep 25, 2:06 PM · MW-1.47-notes (1.47.0-wmf.22; 2026-09-29), Patch-For-Review, Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), FY25-26 DE4.1 Platform capacity, MediaWiki-extensions-WikimediaAntiAbuse, WikimediaAntiAbuse-AbuseReview
kostajh closed T439181: AbuseReview: Instrument the "include recent edits" filter, a subtask of T436905: [epic] DE4.1.5 Vandalism classifier, as Resolved.
Fri, Sep 25, 2:06 PM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh added a comment to T438050: Preserve visible/hidden notification state of revisions when page is undeleted.

Perhaps we could consider deleting the notifications from the DB once handled, and then re-creating them if the verdict is removed?

Fri, Sep 25, 10:43 AM · MW-1.47-notes (1.47.0-wmf.22; 2026-09-29), Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), FY25-26 DE4.1 Platform capacity, MediaWiki-extensions-WikimediaAntiAbuse, WikimediaAntiAbuse-AbuseReview

Thu, Sep 24

kostajh moved T401808: Allow Client Hints data to be used to prevent the save of edits from In progress to Needs review on the Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)) board.
Thu, Sep 24, 11:54 AM · MW-1.47-notes (1.47.0-wmf.23; 2026-10-06), Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), Patch-For-Review, Essential-Work, CheckUser, http-client-hints
kostajh closed T438729: Update private code to enable the vandalism classifier, a subtask of T438860: Enable the vandalism classifier alpha test on testwiki, as Resolved.
Thu, Sep 24, 10:59 AM · MW-1.47-notes (1.47.0-wmf.21; 2026-09-22), FY25-26 DE4.1 Platform capacity, Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)), WikimediaAntiAbuse-AbuseReview, Wikimedia-Site-requests
kostajh closed T438729: Update private code to enable the vandalism classifier as Resolved.
Thu, Sep 24, 10:59 AM · Patch-For-Review, Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh closed T438729: Update private code to enable the vandalism classifier, a subtask of T436905: [epic] DE4.1.5 Vandalism classifier, as Resolved.
Thu, Sep 24, 10:59 AM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh closed T438860: Enable the vandalism classifier alpha test on testwiki as Resolved.
Thu, Sep 24, 10:59 AM · MW-1.47-notes (1.47.0-wmf.21; 2026-09-22), FY25-26 DE4.1 Platform capacity, Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)), WikimediaAntiAbuse-AbuseReview, Wikimedia-Site-requests
kostajh moved T438860: Enable the vandalism classifier alpha test on testwiki from Needs review to Done on the Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)) board.
Thu, Sep 24, 10:59 AM · MW-1.47-notes (1.47.0-wmf.21; 2026-09-22), FY25-26 DE4.1 Platform capacity, Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)), WikimediaAntiAbuse-AbuseReview, Wikimedia-Site-requests
kostajh closed T438860: Enable the vandalism classifier alpha test on testwiki, a subtask of T436910: [epic] Update the AbuseReview feature to support a "likely vandalism" flag, as Resolved.
Thu, Sep 24, 10:59 AM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), Epic, WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh updated the task description for T438860: Enable the vandalism classifier alpha test on testwiki.
Thu, Sep 24, 10:59 AM · MW-1.47-notes (1.47.0-wmf.21; 2026-09-22), FY25-26 DE4.1 Platform capacity, Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)), WikimediaAntiAbuse-AbuseReview, Wikimedia-Site-requests

Wed, Sep 23

kostajh closed T438467: AbuseReview: Enable an alpha testing mode for vandalism detection, a subtask of T436905: [epic] DE4.1.5 Vandalism classifier, as Resolved.
Wed, Sep 23, 1:03 PM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh closed T438467: AbuseReview: Enable an alpha testing mode for vandalism detection as Resolved.
Wed, Sep 23, 1:03 PM · MW-1.47-notes (1.47.0-wmf.20; 2026-09-15), Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh closed T438362: WMF Claude starts displaying permission errors since recently as Resolved.
Wed, Sep 23, 6:54 AM · Product Safety and Integrity, WMF-Claude
kostajh closed T437718: WMF Claude sandbox blocks access to Claude's artifacts as Resolved.
Wed, Sep 23, 6:50 AM · WMF-Claude, Product Safety and Integrity
kostajh moved T438860: Enable the vandalism classifier alpha test on testwiki from Backlog to Ready on the Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)) board.
Wed, Sep 23, 6:32 AM · MW-1.47-notes (1.47.0-wmf.21; 2026-09-22), FY25-26 DE4.1 Platform capacity, Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)), WikimediaAntiAbuse-AbuseReview, Wikimedia-Site-requests
kostajh updated the task description for T438934: Allow clients to interact with AbuseReview via an API.
Wed, Sep 23, 6:31 AM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh moved T438934: Allow clients to interact with AbuseReview via an API from Backlog to Ready on the Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)) board.
Wed, Sep 23, 6:31 AM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh updated the task description for T438934: Allow clients to interact with AbuseReview via an API.
Wed, Sep 23, 6:27 AM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh created T438934: Allow clients to interact with AbuseReview via an API.
Wed, Sep 23, 6:26 AM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity

Tue, Sep 22

kostajh moved T339291: Should temp users be counted as registered & active users on Special:Statistics? from In progress to Backlog on the Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)) board.
Tue, Sep 22, 11:56 AM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), MW-1.47-notes (1.47.0-wmf.11; 2026-07-14), Data-Persistence, Schema-change, Essential-Work, Patch-For-Review, Temporary accounts, MediaWiki-User-management, MediaWiki-Special-pages
kostajh placed T339291: Should temp users be counted as registered & active users on Special:Statistics? up for grabs.
Tue, Sep 22, 11:56 AM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), MW-1.47-notes (1.47.0-wmf.11; 2026-07-14), Data-Persistence, Schema-change, Essential-Work, Patch-For-Review, Temporary accounts, MediaWiki-User-management, MediaWiki-Special-pages
kostajh moved T429569: When AbuseFilter has both warn and showcaptcha consequences, see warning and hCaptcha challenge twice from In progress to Backlog on the Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)) board.
Tue, Sep 22, 11:56 AM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), Essential-Work, Patch-For-Review, WikiEditor (2010), ConfirmEdit (CAPTCHA extension), hCaptcha
kostajh placed T429569: When AbuseFilter has both warn and showcaptcha consequences, see warning and hCaptcha challenge twice up for grabs.
Tue, Sep 22, 11:56 AM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), Essential-Work, Patch-For-Review, WikiEditor (2010), ConfirmEdit (CAPTCHA extension), hCaptcha
kostajh moved T401808: Allow Client Hints data to be used to prevent the save of edits from Backlog to In progress on the Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)) board.
Tue, Sep 22, 11:56 AM · MW-1.47-notes (1.47.0-wmf.23; 2026-10-06), Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), Patch-For-Review, Essential-Work, CheckUser, http-client-hints
kostajh moved T438808: AbuseReview: Allow verdict buttons to be interactive without expanding the row from In progress to Needs review on the Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)) board.
Tue, Sep 22, 9:20 AM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), MW-1.47-notes (1.47.0-wmf.22; 2026-09-29), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh moved T438808: AbuseReview: Allow verdict buttons to be interactive without expanding the row from Ready to In progress on the Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)) board.
Tue, Sep 22, 9:08 AM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), MW-1.47-notes (1.47.0-wmf.22; 2026-09-29), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh claimed T438808: AbuseReview: Allow verdict buttons to be interactive without expanding the row.
Tue, Sep 22, 9:08 AM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), MW-1.47-notes (1.47.0-wmf.22; 2026-09-29), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh updated the task description for T438467: AbuseReview: Enable an alpha testing mode for vandalism detection.
Tue, Sep 22, 7:52 AM · MW-1.47-notes (1.47.0-wmf.20; 2026-09-15), Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh moved T438477: AbuseReview: User without access to personal info tag can trigger error when using Echo notification query param from Needs review to Done on the Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)) board.
Tue, Sep 22, 7:17 AM · MW-1.47-notes (1.47.0-wmf.21; 2026-09-22), Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh assigned T436910: [epic] Update the AbuseReview feature to support a "likely vandalism" flag to • Dreamy_Jazz.
Tue, Sep 22, 6:42 AM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), Epic, WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh moved T438808: AbuseReview: Allow verdict buttons to be interactive without expanding the row from Backlog to Ready on the Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)) board.
Tue, Sep 22, 6:41 AM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), MW-1.47-notes (1.47.0-wmf.22; 2026-09-29), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh created T438808: AbuseReview: Allow verdict buttons to be interactive without expanding the row.
Tue, Sep 22, 6:41 AM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), MW-1.47-notes (1.47.0-wmf.22; 2026-09-29), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity

Mon, Sep 21

kostajh renamed T438467: AbuseReview: Enable an alpha testing mode for vandalism detection from AbuseReview: Enable a closed alpha testing mode for vandalism to AbuseReview: Enable a alpha testing mode for vandalism detection.
Mon, Sep 21, 6:16 PM · MW-1.47-notes (1.47.0-wmf.20; 2026-09-15), Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh added a comment to T438235: AbuseReview: Implement filter for time delay view of edits.

Proposed design for the recent-edits filter.

I’ve given this its own “Recent edits” section in the filter panel rather than grouping it under “Show additional items”, since it controls the age of revisions shown rather than their review status.

For the vandalism inbox, “Include recent edits (last 10 minutes)” would be unchecked by default, meaning edits made within the last 10 minutes are hidden to reduce churn from revisions that may be quickly reverted through existing workflows. Users can enable the option if they want to see those edits as well.

The helper text explains why recent edits are hidden. We should also make the active default visible outside the filter panel so users understand that the queue is intentionally excluding the newest revisions.

Screenshot 2026-09-21 at 17.31.35.png (1,425×877 px, 167 KB)

See example in Figma under 'ready for dev': https://www.figma.com/design/l8xYc2kynkR0t7CHwXAHyt/DE4.1-Content-Policy-Review?node-id=2073-4721&t=0d2chZRCLVweK2tW-1

Mon, Sep 21, 4:38 PM · MW-1.47-notes (1.47.0-wmf.21; 2026-09-22), Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh updated Other Assignee for T436905: [epic] DE4.1.5 Vandalism classifier, added: kostajh.
Mon, Sep 21, 4:32 PM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh assigned T436905: [epic] DE4.1.5 Vandalism classifier to • Dreamy_Jazz.
Mon, Sep 21, 4:32 PM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh added a project to T438747: client hints: Sec-CH-UA-Form-Factor should be renamed to Sec-CH-UA-Form-Factors: Essential-Work.
Mon, Sep 21, 2:36 PM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), Essential-Work, http-client-hints
kostajh created T438747: client hints: Sec-CH-UA-Form-Factor should be renamed to Sec-CH-UA-Form-Factors.
Mon, Sep 21, 2:36 PM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), Essential-Work, http-client-hints
kostajh closed T437047: AbuseReview: Remove border-top from table diffs as Invalid.

We no longer need this task, because we switched from the table diff to inline diff format. Sorry for not closing this out earlier, and thanks for the patch.

Mon, Sep 21, 2:07 PM · Patch-For-Review, Product Safety and Integrity, MediaWiki-extensions-WikimediaAntiAbuse, WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh moved T437313: AbuseReview: Implement flag inboxes from Needs review to Done on the Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)) board.
Mon, Sep 21, 1:27 PM · MW-1.47-notes (1.47.0-wmf.21; 2026-09-22), Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh moved T436937: AbuseReview: Implement logic for considering vandalism-flagged edits as "handled" from Needs review to Done on the Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)) board.
Mon, Sep 21, 1:27 PM · MW-1.47-notes (1.47.0-wmf.21; 2026-09-22), Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh created T438729: Update private code to enable the vandalism classifier.
Mon, Sep 21, 12:43 PM · Patch-For-Review, Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh closed T437307: AbuseReview: Display the short name of a flag in the flags column, a subtask of T436910: [epic] Update the AbuseReview feature to support a "likely vandalism" flag, as Resolved.
Mon, Sep 21, 11:35 AM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), Epic, WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh closed T437307: AbuseReview: Display the short name of a flag in the flags column as Resolved.

This was implemented in another task/patch.

Mon, Sep 21, 11:35 AM · Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh removed a subtask for T436910: [epic] Update the AbuseReview feature to support a "likely vandalism" flag: T437322: TBD AbuseReview: Implement improved small viewport UX.
Mon, Sep 21, 11:34 AM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), Epic, WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh removed a parent task for T437322: TBD AbuseReview: Implement improved small viewport UX: T436910: [epic] Update the AbuseReview feature to support a "likely vandalism" flag.
Mon, Sep 21, 11:34 AM · Product Safety and Integrity, WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh removed a project from T437322: TBD AbuseReview: Implement improved small viewport UX: Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)).

This task is pending T437493: UX testing for AbuseReview

Mon, Sep 21, 11:34 AM · Product Safety and Integrity, WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh removed a subtask for T436910: [epic] Update the AbuseReview feature to support a "likely vandalism" flag: T437318: AbuseReview: Remove table header caption and adjust placement of the filter button.
Mon, Sep 21, 11:34 AM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), Epic, WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh removed a parent task for T437318: AbuseReview: Remove table header caption and adjust placement of the filter button: T436910: [epic] Update the AbuseReview feature to support a "likely vandalism" flag.
Mon, Sep 21, 11:34 AM · Product Safety and Integrity, WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh removed a project from T437318: AbuseReview: Remove table header caption and adjust placement of the filter button: Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)).

Removing from the sprint and epic until we've figured out the mobile view, which will follow after the UX research.

Mon, Sep 21, 11:34 AM · Product Safety and Integrity, WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh assigned T438235: AbuseReview: Implement filter for time delay view of edits to ROdonoghue-WMF.

Assigning to @ROdonoghue-WMF for now, to propose a design

Mon, Sep 21, 11:32 AM · MW-1.47-notes (1.47.0-wmf.21; 2026-09-22), Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh renamed T438467: AbuseReview: Enable an alpha testing mode for vandalism detection from AbuseReview: Enable a closed testing mode for a given flag to AbuseReview: Enable a closed alpha testing mode for vandalism.
Mon, Sep 21, 11:24 AM · MW-1.47-notes (1.47.0-wmf.20; 2026-09-15), Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh closed T438466: AbuseReview: Remove revision delete, suppress, and revert buttons as Resolved.
Mon, Sep 21, 11:07 AM · MW-1.47-notes (1.47.0-wmf.21; 2026-09-22), Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh closed T438466: AbuseReview: Remove revision delete, suppress, and revert buttons, a subtask of T436905: [epic] DE4.1.5 Vandalism classifier, as Resolved.
Mon, Sep 21, 11:07 AM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh claimed T438466: AbuseReview: Remove revision delete, suppress, and revert buttons.
Mon, Sep 21, 11:07 AM · MW-1.47-notes (1.47.0-wmf.21; 2026-09-22), Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh added a comment to T100070: Allow CheckUsers to set User agent (UA)-based IP Blocks.

Linking T401808: Allow Client Hints data to be used to prevent the save of edits to this one

Mon, Sep 21, 10:09 AM · Product Safety and Integrity, CheckUser, MediaWiki-Blocks, Security
kostajh claimed T401808: Allow Client Hints data to be used to prevent the save of edits.
Mon, Sep 21, 9:49 AM · MW-1.47-notes (1.47.0-wmf.23; 2026-10-06), Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), Patch-For-Review, Essential-Work, CheckUser, http-client-hints
kostajh moved T438693: AbuseReview: Clicking "view flagged edit" for a revision that's been handled should indicate this from Backlog to In refinement on the Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)) board.

@ROdonoghue-WMF would you be able to propose a design for this please?

Mon, Sep 21, 9:23 AM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), FY25-26 DE4.1 Platform capacity, WikimediaAntiAbuse-AbuseReview
kostajh edited projects for T438693: AbuseReview: Clicking "view flagged edit" for a revision that's been handled should indicate this, added: Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)); removed Product Safety and Integrity.
Mon, Sep 21, 9:23 AM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), FY25-26 DE4.1 Platform capacity, WikimediaAntiAbuse-AbuseReview
kostajh created T438693: AbuseReview: Clicking "view flagged edit" for a revision that's been handled should indicate this.
Mon, Sep 21, 9:22 AM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), FY25-26 DE4.1 Platform capacity, WikimediaAntiAbuse-AbuseReview
kostajh updated the task description for T435516: AbuseReview: Create Superset dashboard.
Mon, Sep 21, 9:03 AM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), MediaWiki-extensions-WikimediaAntiAbuse, WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh edited projects for T401808: Allow Client Hints data to be used to prevent the save of edits, added: http-client-hints, CheckUser; removed AbuseFilter, WE4.2 Anti-abuse.
Mon, Sep 21, 8:11 AM · MW-1.47-notes (1.47.0-wmf.23; 2026-10-06), Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), Patch-For-Review, Essential-Work, CheckUser, http-client-hints

Sun, Sep 20

kostajh updated the task description for T438467: AbuseReview: Enable an alpha testing mode for vandalism detection.
Sun, Sep 20, 6:29 AM · MW-1.47-notes (1.47.0-wmf.20; 2026-09-15), Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity

Fri, Sep 18

kostajh updated the task description for T430520: epic: Require hCaptcha for API edits.
Fri, Sep 18, 3:30 PM · MW-1.47-notes (1.47.0-wmf.22; 2026-09-29), Epic, Product Safety and Integrity, Essential-Work, hCaptcha
kostajh renamed FY25-26 DE4.1 Platform capacity from DE4.1 Platform capacity to FY25-26 DE4.1 Platform capacity.
Fri, Sep 18, 2:37 PM
kostajh moved T438475: AbuseReview: Change timestamp link to the revision diff from Ready to Needs review on the Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)) board.
Fri, Sep 18, 1:58 PM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), MW-1.47-notes (1.47.0-wmf.21; 2026-09-22), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh claimed T438475: AbuseReview: Change timestamp link to the revision diff.
Fri, Sep 18, 12:57 PM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), MW-1.47-notes (1.47.0-wmf.21; 2026-09-22), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh closed T438456: AbuseReview: Remove target=_blank from "View full diff", a subtask of T436905: [epic] DE4.1.5 Vandalism classifier, as Resolved.
Fri, Sep 18, 12:55 PM · Product Safety and Integrity (Sprint Goldenrod (Sept 21 - Oct 9)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh closed T438456: AbuseReview: Remove target=_blank from "View full diff" as Resolved.
Fri, Sep 18, 12:55 PM · MW-1.47-notes (1.47.0-wmf.21; 2026-09-22), Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh moved T438456: AbuseReview: Remove target=_blank from "View full diff" from Needs review to Done on the Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)) board.
Fri, Sep 18, 12:55 PM · MW-1.47-notes (1.47.0-wmf.21; 2026-09-22), Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh moved T438477: AbuseReview: User without access to personal info tag can trigger error when using Echo notification query param from Backlog to Ready on the Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)) board.
Fri, Sep 18, 12:54 PM · MW-1.47-notes (1.47.0-wmf.21; 2026-09-22), Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity
kostajh created T438477: AbuseReview: User without access to personal info tag can trigger error when using Echo notification query param.
Fri, Sep 18, 12:54 PM · MW-1.47-notes (1.47.0-wmf.21; 2026-09-22), Product Safety and Integrity (Sprint Heather (Aug 31 - Sept 18)), WikimediaAntiAbuse-AbuseReview, FY25-26 DE4.1 Platform capacity