oficina / docs Public

Prove Home linking through the actual Docs router open

New integration-test-only branch test/home-router-proof from root3741f6f. Actual App.Handler, real configured synthetic P256 issuer, captured local email POST/Verify with real session cookies, no direct bridge invocation or fabricated identity context. Focused race suite passes8.3s: unsigned original document -> unknown Home guidance with no account -> actual local verification -> explicit fresh link initiation/confirmation -> original document while retaining local session -> real signout -> ordinary Home SSO preserving original auth_time -> same owned/shared content and private-other-owner404. Exact document/update/grant snapshots and person counts unchanged. Also actual-router CSRF guards, duplicate session/pending before Verify with token remaining usable after refusal, stale local navigation and rotation without automatically linking or reviving copied old proof, exact issuer/audience/origin/host and current-account conflict. No integrated production-code bug found. Router CSRF/identity-adapter omission mutations running. Root retains full integrated review/browser/deploy work.

Committed/pushed7d9c8c42ae1bc00c7fa4f628fe63dfde03fee193, new test file only, worktree clean. Focused race tests passed. Both meaningful router-wiring mutations failed for expected behavioral reasons: removing outer CSRF let foreign initiation303; omitting typed adapter prevented Home owned/shared access (303 instead of200). Logs /tmp/oficina-home-router-race.log and /tmp/oficina-home-router-mutations/results.json with per-mutation output. Root has SHA for integration; no production code changed, no deploy/review/merge by this subtask.