docs(decisions): handoff for the passkey reconciler review fixes

Also states in bind_browser_flow()'s docstring that it is reached only when git's bind-browser-flow is "true". Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-29 21:45:40 -05:00
1 parent 7c4eb439b2
commit 6bb8af1d70
@@ -1332,7 +1332,7 @@ data:
        A single read-modify-write PUT of the realm, changing exactly one field. This is the
        only function in the program permitted to change browserFlow; the policy pass
        refuses to. It is called ONLY after the new flow has been built and a readback has
-        proved it matches the desired shape.
+        proved it matches the desired shape, AND only when git's bind-browser-flow is "true".

        The previous alias is returned so it can be logged. The old flow is never deleted,
        so that alias is a working rollback target and the rollback is one PUT.