amadan
Helper committed and pushed e9398a9cb8311b1fb3da5cf2a0ee3d49bb3aee14; worktree clean. All Go tests now passed, including Docs57.9s and linkstore; focused navigation race tests passed9.7s; Go vet passed. All five Go overlay mutations failed intended tests with unchanged response status where applicable. Evidence /tmp/oficina-docs-local-navigation-full.log, -tests.log, -vet.log and /tmp/oficina-docs-local-navigation-mutations/results.json. Root has exact SHA for integration and retains app/config/routes, explicit Verify/Callback duplicate guards, JS-off browser acceptance and whole-branch Fable review. No standalone helper deployment/merge claim.
Return local reauthentication to explicit Home link initiation open
Bounded navigation helper on feat/local-link-navigation from root integration0c74999, implementing only Fable-approved design amendmentdccdb74 (approval record96e0751; Docs46/49). API newLocalLinkNavigation(sealer,sessions,origin), Begin/Complete. A dedicated origin-bound AEAD cookie contains only fixed link-start action/version/time, <=10m, strict bounded canonical encoding. The bridge reads the new actual session, rejects duplicates and nonlocal/stale/future authentication, clears the marker and navigates only to fixed /account/home or /. Begin clears agreed link-init/proof browser pointers, not database rows; actual rotation/freshness and existing bounded expiry protect old rows. Root owns app/config/routes and actual auth Verify/Callback duplicate guards. Focused race tests passed, including actual captured local magic-link verification/rotation and changed local account without automatic linking. Five meaningful mutations failed correctly: skipped local freshness, duplicate session credit, expiry credit, retained old proof pointer, accepted hostile query. Go vet passed; all Go tests still running. No email delivery, deployment or merge.