- Upstream merge: let's get a bit more rigorous and figure out what needs to be done (more testing, REST APIs, AWS, etc.).
- Need policy about upstream security issues and how they can be promptly applied to BMO so we are not 0-dayed
- Update on readable bug statuses