docs: handoff — browser-bridge audit round, CI gates, two real deploys (2026-08-02)

[ZacxDev]

Session handoff. Docs only.

Shipped: 11 devrc PRs (#266, #271, #272, #274, #275, #277, #278, #280, #281, #282, #284), homelab-infra#274 + clawgate 0.7.82 built/deployed/verified, and issue #273 opened, probed and closed on measurement. Both hosts converged; all 4 Brave profiles on extension 0.7.1.

Gates now real: the node suite gates for the first time (#280, 468 tests), and the pytest gate fails loudly on silent coverage collapse (#284) — skips 125 → 2, because 123 tests were silently skipping in the sandbox for want of node.

The four lessons

1. "Merged ≠ deployed" fired twice, in opposite directions. The kubeclaw chart merged to trunk and sat inert — //go:embedded behind a literal image pin with no Flux automation, so git log read as shipped. And the workbench ran old code behind a green ship.sh ✅, because an orphaned non-systemd process from the previous day held port 8788 while the unit crash-looped.
2. A known rule did not inoculate against its own class. RULES.md already names "diff defaulting to unified output"; I read it and hit the trap in a different shape — greps for ^>/^< matched nothing and reported "0 lines differ" for files differing by 1,445 bytes. cmp disagreed and settled it.
3. I counted declarations and reported them as instances — "2 node skips" were 123 tests. 60× off, and it was the difference between a nit and the most valuable change of the session.
4. The merged-tree gate earned itself — a docstring containing the phrase cmd_op stderr made test(browser-bridge): anchor the agent surface to the real op inventory (contains 1 DELIBERATE failure) #277's parser harvest a phantom wire op. Red only on the merged tree.

For the next session

• Re-run scripts/ship.sh — hosts are at 81e2d76, main is now 9254361 (other sessions landed Add .shellcheckrc for consistent ShellCheck across the repo #71, feat: add .editorconfig with polyglot defaults #55, feat(opencode): home-manager-managed opencode config — generated AGENTS.md, env plugin, permissions, 3 subagents #276, docs(clawgate): the picker privacy choke point, and why the obvious test can't fail #283, chore: rescue seven untracked scripts stranded in the main checkout #285).
• A skills/docs update PR is in flight (RULES.md additions, the stale 281 B free figure in CLAUDE.md, the browser-bridge: documentEmulation may survive a tab discard-reload and silence documentPredatesEmulation #273 measurement, clawgate 0.7.82) — check it landed.
• Pre-push hook parity is deliberately left as the operator's call.
• auditloop credentials were DROPPED by the operator — do not re-raise.

🤖 Generated with Claude Code