Everything I could decide myself is decided. What's left needs
you. Each one has a recommendation from Fable — if you agree, pick it and
press Done. "I'm not sure" is a real answer and becomes work for me.
You don't need to open the session — pressing Done sends your answer back and it picks up.
1DEADLINE TONIGHT 9:57pm CT — put the smoke-account password on the mini so this stops needing you?
In plain terms. This one has a clock on it now, so it is a deadline rather than a decision. The production login cookie expires tonight at 9:57pm Central (about 4.5 hours from when I'm writing this), and I checked — nobody has refreshed it by hand today. Nothing automated can beat that: the new code is written and tested but unpushed by your instruction, so tonight's refresh is a manual job either way, and the morning alert will fire. What I'm asking for is the fix for NEXT week and every week after. Smith cannot do the refresh itself without the password for the smoke@propflowai.co test account — it lives as a GitHub secret and GitHub won't hand it back out, so it has to be pasted into the propflowai .env.local file on the mini by hand. One line, no deploy. That file already holds 143 other secrets including that same account's two-factor code, and per our own ADR-0069 the account is a read-only login on the demo tenant with no customer data on it. If you'd rather not, nothing breaks — you just keep doing this by hand every week, which is what today was.
Fable recommends: A: place SMOKE_PASSWORD in the mini's .env.local — next week's refresh happens without you VERIFIED CLOCK: PROD_COOKIES_JSON updated_at is 2026-08-02T02:57:33Z, unchanged as of 22:26 UTC today, so its 7-day life ends 2026-08-09T02:57Z — ~4.5 hours out and nobody has touched it. Tonight is already lost to a manual refresh regardless of this answer; this decides whether next Saturday is too. On the security question the two Fable passes split, so I read ADR-0069 myself: smoke@propflowai.co is a read-only admin on the DEMO tenant with no customer data, worst-case leak bounded to 'that one demo account'. The pessimistic pass had assumed MFA-exemption made it a full prod login; it does not. Its TOTP secret already sits in that same file, so adding the password widens the blast radius by roughly nothing. I cannot do this myself — I have never had the value. Fable was asked, and escalated. Receipt f40d7b7b0 — NEEDS HUMAN. THE TWO PASSES DISAGREED, AND ONLY THE OPTION ORDER DIFFERED. as-given → 'B: leave it out — the job no-ops on healthy nights and reports red when the cookie actually needs refreshing, keeping the human-run chore' (medium) reversed → "A: place SMOKE_PASSWORD in the mini's gitignored .env.local, enabling the automated weekly refresh" (high) An answer a reordering can flip is not an independent judgement, it is position bias wearing one. Escalating with both readings attached.
as-given reasoning: The brief's own facts decide it: nothing regresses under B — the red row plus the existing pre… Tried first, unsuccessfully: Fable receipt f40d7b7b0: the two passes DISAGREED with only option order differing — as-given picked B (medium), reversed picked A (high). Position bias, escalated with both readings. The split turned on this credential's blast radius; I settled that myself against ADR-0069 (read-only demo-tenant admin, no customer data), which supports the reversed pass. Raising regardless because placing a credential on disk needs your hands, not mine. Re-raised from b86176327 to carry the expiry deadline in its own text.
00113947 (adopted from 7c954519) is parked on this.