KICKOFFSession continued from prior summary. Goal: ship brain.partnerships.community with nested /philosophy and /zodiac-report pages behind Google SSO + studio19 passphrase gate.

FAILFirst deploy attempt failed at STEP 2. SSH key not registered with GitHub: Permission denied (publickey).

FIXRewrote DEPLOY_BRAIN.command: switched primary remote from SSH to HTTPS with three-layer auth fallback (HTTPS → gh CLI → SSH). Moved auth probe before the destructive rm -rf so failed deploys no longer wipe the local staging folder.

FAILSecond attempt hung on Username for 'https://github.com': prompt. macOS Keychain had no GitHub credential.

FIXgh CLI not installed on the Mac. Created a short-lived PAT via browser (partnerships-ecosystem-deploy, repo scope, 30-day expiry) and entered at the password prompt. macOS Keychain stored it.

SHIPDeploy succeeded: commit bd6ae62 pushed to main. 5 files changed, 2,175 insertions. Files landed: admin/philosophy.html, admin/zodiac-report.html, api/stripe/daily.js.

FAILSpot-check of deployed URLs returned 404 on /philosophy and /zodiac-report. Root / loaded correctly — nested pages did not.

FIXAdded "cleanUrls": true and "trailingSlash": false to vercel.json. Pushed as commit ece9d0e.

FAILPaths still 404'd. Root cause: Vercel CDN had cached a 404 response for these URLs from 16:15 UTC (before the files existed). x-vercel-cache: HIT with age: 19,725s. Known recurrence — same bug fix in git log from a prior session. Routes renamed to /manifesto and /report to bust cached 404s.

ROTATEDuring the auth loop, the PAT value leaked into ~/.zsh_history by being typed as a standalone shell command. Token revoked immediately at github.com/settings/tokens.

ROTATEFull PAT audit: deleted all tokens except one labelled cloddah (purpose verified, kept with minimum scope). Action item carried forward: also rotate the hardcoded PAT referenced in zodiac-report.html Portal Audit C4 (ghp_qBo5…PigOr) — live on a page that's about to be reachable behind SSO.

HANDOFFInbox Response Kit handed to Farrah: 19 IG comment templates (A1–A19) + 2 FB DM templates (B1–B3) including the B3-Jade variant. Three-things-never-said list locked: no made-up capacity, no £300k figure, no unbooked lineup.

HANDOFFMeta Business Suite automations and away message setup handed to Farrah.

CARRYDraft B3 (and B3-Jade variant) still pending as scheduled drafts in Meta Planner.

CARRYThree-handle strategy in force: @zodiacbarlondon (venue) · @motherofzodiac (Jade, founder) · @partnerships_carebear (Simon/Meta glasses POV). Inbox funnel: DMs/comments → enquiries@zodiacbar.co.uk → HubSpot terminus.

OPSTakepayments email #1 received. Action: contradicted by #2 at 19:17 — resolution pending.

OPSTakepayments email #2 received. Contradicts #1. Needs follow-up.

OPSTabology Polaris restore in progress — login to be performed with Dee.

OPSJames Smith walking stick follow-up staged.

OPSGuidepoint Global paid consultation enquiry logged.

IN_PROGClear inbox: 19 IG comments + 2 FB DMs — handed to Farrah, awaiting confirmation.

IN_PROGMeta Business Suite automations + away message — handed to Farrah.

PENDINGSave Draft B3 (and B3-Jade variant) as scheduled drafts in Meta Planner.

IN_PROGZODIAC Social Senior Lead Command Centre artifact — v3 shipped; propagation of v2/v3 changes into Inbox_Response_Kit.md still pending.

BLOCKERRotate hardcoded PAT in zodiac-report.html (now /report) before the page is reachable behind SSO.