log: rows 176 and 178 briefs revised for mos-0878 (80cabd935, c4e049319)

BUILD-LOG.md

@@ -5088,3 +5088,12 @@ Before: managed project/thread verbs had no Console conversation area. After: fi
 - Correction for the record: mos-0872 said any k3s pod could reach 7332. mos-0874 withdrew that, because a default-deny policy plus the traefik-only tunnel policy blocks it (#384 comment 285). The 176 brief's Why gives the tunnel and Cilium AllowLocalhost reasons.
 - Pushed 1c90c68c5..58e173535: briefs and queue only, and no test reads them. pushcheck reported SECRETS_CLEAN, NO_ATTRIBUTION and PUSH_READY.
 - Not live: nothing live changed.
+
+2026-10-19 22:45:14 UTC | Sage | rows 176 and 178 briefs revised (mos-0878)
+
+- Before: the 176 brief had no test that the tester's credentials read leaks nothing, and none for project.file traversal. The 178 brief left the secret, the middleware and the turn-on all to Jason. After: 176 tests 9 and 10 cover both, with mutants for a credentials result carrying the fixture path and for blob() taking mode 120000. 178 is a partial fix built after 169, 175 and 176.
+- 178's activation steps: an agent may create the slot file ~/.config/mosaic-dev/secrets/mosaic-stack/console-proof.token (0600, value never printed) under Q173. ops-01 adds the SealedSecret and the Traefik middleware in the mosaic-preview Argo app under R27. The unit flags come after that, in a window Mos plan-checks. Whether narrowing who can reach the Console counts under the Q173 exclusion is Mos's call at that plan check, and until then the turn-on waits for Jason.
+- console-allowed-uid: decision 101's Authentik uid for the switch to X-authentik-uid. No code reads it, and its contents weren't read. It's an identity and not a proof, so 178 neither reuses it nor retires it.
+- Same-uid limit kept. #385 stays open for Jason's ruling on uid separation before "in use".
+- Commits 80cabd935 (briefs) and c4e049319 (queue revs 2041-2044: both re-pins, the 178 piece, after 169, 175, 176).
+- Not live: nothing live changed.

docs/SESSIONS.md

@@ -1243,3 +1243,4 @@ are never rewritten or removed; corrections are new entries.
 2026-10-19T21:34:03Z | Sage (Opus 5.5, a4e2d047) | row 64 (#1557, mos-0863/0864) D2 and close-out | D2 coder sessions on a scratch root: claude-code rc13bcd555652 one turn naming its 4 skills, pi r3455505dd5da launch only (no pi-readable credential on host, to Mos); manifests on #1557 29228, packet c87865ee0; queue revs 2027-2028 done (5cabf919e); #1557 closed (29229); not live until a re-pin with the D3 step
 2026-10-19T22:09:22Z | Sage (Opus 5.5, a4e2d047) | row 166 landing (#1663, mos-0867) and row 175 filing (mos-0868) | 4b738e2da landed and pushed, gate 2399/0 + 10 scripts, revs 2029-2030, #1663 closed (29237); row 175 #1673 brief + queue rev 2031 (6b8f94524); Window B doc f8ac674cc (F1-F3, J1/J2 blocks); P3 rerun on ed5b41d4 pending with Darkwing |
 2026-10-19T22:35:06Z | Sage (Opus 5.5, a4e2d047) | rows 175-178 filing (mos-0872, mos-0874) | 175 queue-committed 835941b7c (revs 2032-2036 + Dewey claim 2037); briefs 6ee7285c0 for 176 #1674 (tester listener, 7332 refuses x-mosaic-tester), 177 #1675 (tester threads, scoping), 178 #1676 (Traefik proof, Vikunja #385); queue 58e173535 revs 2038-2040; pushed 1c90c68c5..58e173535; row 169 rehearsal go to Darkwing (sage-1075); Mos report sage-1076 Q1-Q3 | open
+2026-10-19T22:45:14Z | Sage (Opus 5.5, a4e2d047) | rows 176 and 178 briefs (mos-0878 Q1-Q3) | 176 brief adds tests 9-10 (credentials body has no token, path or variable; project.file traversal and symlink refusals) and 2 mutants; 178 rewritten as a partial fix after 169/175/176, console-proof.token slot, ops-01 SealedSecret plus middleware under R27, console-allowed-uid left alone; 80cabd935, queue c4e049319 (revs 2041-2044); Darkwing's 169 rehearsal go carries the live-store mtime check