docs: record Docker auth correction and reconnect reproduction

.claude/skills/sister-project-history/historiangateway.md

@@ -11,3 +11,5 @@
   - **Live limits:** initial configured live baseline stopped after native read deadlines; fresh native SDK SysTimeSec Raw recent/historical controls also DeadlineExceeded (~30.4/~30.3s), bypassing Gateway/pool. #29 remains open. Deployed hash-matching binaries against a disposable empty store correctly report unknown-ID not-found-or-already-revoked; earlier false-success observation not reproduced. No real key store touched by that control, no deployment changes. #30 deployment verification and #27 native aggregate interval gate remain open. Evidence: `docs/plans/2026-10-13-catalog-key-followup-results.md`.
 
 - **2026-10-13 interval/catalog fixes merged (PR #36, main `9f711c1`, fix `7caec7c`).** #27 aggregate interval first wire field now TotalMilliseconds, trailing field ticks; both AtTime callers preserve existing 2 ms behavior. Corrected captured-input labels retain original bytes; fractional/extreme native acceptance remains unverified. #33 catalog count/allocation/parser integrity and independent three-second cleanup are hardened; unsuccessful cleanup discards pooled sessions and releases permits. Full offline solution: 1,626 passed / 157 skipped / 0 failed across three suites; independent review clear; merged tree matches verified branch. #33 closed; #27/#694 live bucket checks remain open behind #29, whose native gRPC and SQL History controls both time out. No deployment changes. New #35 tracks raw EndQuery refusal handling. #28 source-filtered Events query fails SQL 681 while unrelated event controls return nonzero IDs and correct -240-minute offsets; affected raw identity evidence remains unavailable.
+
+- **2026-10-13 Docker auth documentation #37 merged (PR #38, main `eaeb4fe2`, docs `2bb2557`).** Runbook/CLAUDE/compose comment now match existing dashboard LDAP login and secrets-selected API-key mode; pepper must remain stable across recreation. Corrected Production reflection claim. Effective Compose values unchanged; independent review and diff check clear. #37 closed. #30 candidate Release publish/image prepared at code `9f711c1`, but isolated metadata smoke blocked by unresponsive local Docker; existing service not replaced, candidate cleanup remains unconfirmed. No unrelated services or daemon restarted.

.claude/skills/sister-project-history/otopcua.md

@@ -364,3 +364,5 @@ AddRoute of the dev Mac (`oee-tagdump-mac`, `10.181.206.245.1.1`) on the two tes
   - **ScadaBridge impact:** none — no HistoryRead consumer. No deployment changes. All temporary test keys verified revoked.
 
 - **2026-10-13 cache concurrency coverage #701 merged (PR #703, master `a935e21b`).** Added 15 deterministic cold/expiry/capacity/fault/cancellation overlap tests without changing production cache behavior. Full final repeat: 14,615 passed / 609 skipped / 0 failed across 62 suites; independent review found no important defects. #701 closed. Initial full run exposed an existing intermittent restart-test failure; isolated and full reruns passed, root cause remains unconfirmed and tracked in #702. ScadaBridge impact: none. No deployment changes.
+
+- **2026-10-13 #702 root cause reproduced on unchanged `3ec6006f`.** Full OPC UA integration: 121 passed / 1 failed, exact line-80 assertion expected BadServerHalted but received BadSessionIdInvalid. Production accepts that definitive loss status and deterministic unit tests cover direct definitive and sustained closed-channel routes. Prior outage assertions passed; recovery was not reached. Narrow test correction awaits design approval; no reconnect source/test changes yet.