Execute premortem follow-up (B) same-session: added AUTH GUARD warning to all 4 stitched skills (performance-profiler, post-deploy-verification, visual-regression, next-js-app-audit) instructing agent

Decision

Execute premortem follow-up (B) same-session: added AUTH GUARD warning to all 4 stitched skills (performance-profiler, post-deploy-verification, visual-regression, next-js-app-audit) instructing agent to route authenticated/gated URLs via Playwright-with-stored-session or Claude_in_Chrome instead of chrome-devtools-mcp. (A) version-drift and (C) real lighthouse_audit smoke test correctly deferred — (A) to 2026-11-16 evolution-backlog review, (C) to next session by physical constraint of MCP load lifecycle.

Rationale

First-principles decomposition surfaced that (C) is physically deferred by Claude MCP load lifecycle (config-load at session-start), (A) is non-urgent because tool surface is stable at v0.26.0 today and 6-month review window catches drift before it bites. (B) silently produces wrong Core Web Vitals data when invoked on gated URLs — fresh-Chrome MCP has no session cookies, so it audits the login page. Severity medium-high (silent wrong data is worse than loud failure), mitigation cost trivial (4 one-line edits, <2 min), asymmetric benefit-vs-cost mandates same-session fix. Evidence-based confidence 0.88. ST session c087c55f built reasoning chain: create_thinking_session → first_principles_decomposition → add_evidence × 2 → draw_conclusion → record_decision.

Alternatives Rejected

Outcome

Pending