Why: task-sync merged newer main (f9c6ccc2) after the last receipt; the gate requires evidence on the exact head proposed for merge.
Evidence: latest make test receipt exit=0 appended by make evidence.
Impact: card only.
Refs: feature/login-clear-stale-key
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=f9c6ccc263c00d95919c021cb2fe31cf2f0936d8.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: the gitlink moved to the post-merge frontend head, so the delivery gate needs fresh tool-written evidence on that combination.
Evidence: receipt 007543ab (make test, exit=0) with modules/frontend at 482ba88.
Impact: card only.
Refs: feature/login-clear-stale-key
Why: the frontend task branch merged latest main (PR #54 landed in parallel) to satisfy block_on_outdated_branch; the Dev pin must reference the exact combination that is tested.
Evidence: frontend vitest 20 files / 94 tests green at 482ba88; combined make test rerun via evidence after this pin.
Impact: gitlink only.
Refs: Agent-System-Frontend PR #55.
Why: task-sync flagged that pre-merge receipts predate non-card changes; the delivery gate requires fresh evidence on the synced head.
Evidence: receipt 95d71cd8 (make test, exit=0) on the synced tree, appended via make evidence.
Impact: card only.
Refs: feature/login-clear-stale-key
Why: include the current integration baseline before verification.
Evidence: fetched origin/main=72e3d0c58dbd0268ecc59ec51e52f646fb6a0008.
Impact: integrate upstream changes without rewriting task history.
Refs: task-sync
Why: the delivery gate requires precheck/task-sync/test outputs to be tool-written into the card before review and merge.
Evidence: evidence receipt 81973311 (make test, exit=0) appended to .task/feature-login-clear-stale-key.md; includes the earlier failed drift-check run exit=2 for honesty.
Impact: card only; no code changes.
Refs: feature/login-clear-stale-key
Why: password logins hand the browser an HttpOnly session cookie, but a stale Bearer key left in localStorage shadows it server-side (Bearer is checked first), so every request after login returns 401 and refreshes bounce back to the login page.
Evidence: frontend commit 09310cb (vitest 19 files / 88 tests green); combined make test in this worktree recorded via evidence into the task card.
Impact: dev-instance UIs reachable by LAN IP or hostname log in cleanly with username+password; API-key flow unchanged.
Refs: .task/feature-login-clear-stale-key.md
Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-login-clear-stale-key.md; R0=259270b4e339132219490b95b42d12386f9abe1e.
Impact: task metadata only; the feature workspace starts at 259270b4e3.
Refs: .task/feature-login-clear-stale-key.md
weichen