amadan
Exact combined4013745c014d6f4a575da5a34b07e17ed98fcb18 passed full make test/race and actual remote CI. Queued for Fable immediately after Docs link design in the active01:51Dublin timer; prompt /tmp/oficina-home-combined-review/prompt.txt. Root review found no functional issue in bounded continuation; audit dates corrected before integration. The paired live canary remains651e5b3, with separate platform instance state paths; prompt explicitly distinguishes route checks from complete Home session/topology proof. Additional live empty POST /signin with production Origin was403/no cookies; no address submitted and email status remains0sends. New layout/continuation candidate remains undeployed pending review and required canary evidence.
Credential flow integration and canary follow-up open
On branch feat/credential-flow-fixes
Root integrates actual canary findings: reviewed origin separation651e5b3, supported credential markup7746f92 and bounded continuationef9ff09, rebased on fresh original-owner main7d68e87 without conflicts. Final4013745, original branches preserved. Complete branch Fable review will include all origin/continuation/layout changes and existing first-factor/second-factor/freshness rules; no approval inferred from parent reviews. Zero new user-facing strings, CSS or JS. HTTP/browser evidence for currently deployed651e5b3 is /tmp/oficina-home-canary; root visually inspected fixed320px form. Combined local and exact-headCI running. No deploy of unreviewed fixes. Actual live origin checks pass, but real mail-delivered sign-in, browser passkey and authentication-cookie isolation remain unproven pending controlled mailbox. Directory remains scaffold; assertions/roster/provisioning stay separate Home10/original-owner work. Root retains all Home canary/SMTP/deployment mutations under original handback.
Exact clean4013745 with verified ARM64 artifact hash and actual CI passed is now deployed only to canary/overnight-home. Production edge remains0d0262a. No Fable approval/merge is implied: review-on-canary is being prepared before final review as required by AGENTS.
Deploy watch correctly timed out because credential host still reported651e5b3 in API body despite4013745 header; directory already ran4013745. Supported carlos restart with exact credential host plus overnight-home environment selector affected one route only. Platform log records stop/exit0 at23:05:35UTC. At23:06:06UTC both paired TLS hosts returned status200 and full4013745c014d6f4a575da5a34b07e17ed98fcb18 in /api/version body and header. Receipt /tmp/oficina-home-combined-review/canary-version.json. Original watch did not pass; post-restart process verification did.
GET-only browser320/1280 scripts-on/off matrix now running on the new candidate, preserving old651 evidence. No email, account creation, passkey driver or production promotion. Live authenticated canary and restore evidence remain missing.