diff --git a/docs/remediation/TASKS.md b/docs/remediation/TASKS.md
index f9070103..d7de46ea 100644
--- a/docs/remediation/TASKS.md
+++ b/docs/remediation/TASKS.md
@@ -221,6 +221,42 @@ reviewer, and no other seat holds mosaicstack write. Flagged to the coordinator
 busy lane. Not blocking today — RM-02's code blockers are independently disqualifying — but the next
 otherwise-clean PR meets this.
 
+### D-34 — a context reset silently strips a seat's credential identity
+
+`rev-974` completed its RM-02 review, then **could not post it**:
+`pr-review.sh … → "Gitea token not found for review post"`. It stopped per the wrapper-failure gate
+rather than reaching for a raw CLI — correctly.
+
+Diagnosed rather than guessed:
+
+| environment                                        | `get_gitea_token git.mosaicstack.dev` |
+| -------------------------------------------------- | ------------------------------------- |
+| `MOSAIC_GIT_IDENTITY` unset (a freshly-reset seat) | **FAILS** — empty                     |
+| `MOSAIC_GIT_IDENTITY=rev-974`                      | resolves, 40 chars                    |
+
+The token file was present and correct throughout. **The orchestrator's own context reset wiped the
+seat's exported identity**, and the rehydration brief did not re-establish it. The seat had posted
+reviews 61–64 earlier the same night because that export was still live.
+
+**The split that makes this invisible:** `git config mosaic.gitIdentity` is **persistent and
+per-worktree**; `MOSAIC_GIT_IDENTITY` is **ephemeral and per-context**. A seat working inside a
+configured worktree survives a reset by falling back to git config. `rev-974` works from `~/agent-work`,
+which carries no such config — so it had **no fallback and no warning**, and the loss surfaced only at
+the moment it next tried to act on a credential.
+
+**This is the intersection of two banked findings, and it was created by acting on one of them.** D-31
+prescribes rotation as the response to context exhaustion; D-11a establishes that identity must cohere.
+**Rotating a seat is a credential-affecting operation** — and nothing in the rotation procedure said so.
+The fix for one failure quietly introduced another.
+
+**Requirements.** RM-34 (rotation daemon): a reset must **re-establish seat identity as part of the
+rotation**, not leave it to the rehydration prose — and must **verify** it (resolve a token, or assert
+the identity is set) before the seat is handed work. RM-50: prefer the **durable** binding — set
+`mosaic.gitIdentity` in each seat's working repo so identity survives a context reset by construction,
+rather than depending on an env var that a reset destroys. Interim: **every rehydration brief re-exports
+the seat identity**, and a rotated seat's first credential-touching action is treated as unverified until
+it succeeds once.
+
 ### D-33 — the tool used for "full step scans" silently prunes a step in its default output
 
 `coder-mos1` reported a **9/9** child-step scan of pipeline #2186 using `-f json`. My scan of the same