Web Console 1.6.197

Web Console 1.6.197 restores the verified actor for an existing cookie opened in a fresh browser session. Human approval can then load without a new login. The token endpoint virtual-account headers are ignored; only an authenticated API-root user header supplies a missing actor. Cookie/generation races and 401/403 protections remain intact.

Validation: 31 targeted session tests, all 1,121 Ember tests, reproducible double build, existing security gates, CodeQL with no new alerts, artifact/SBOM/profile checks, and GitHub attestations passed. Server555 deployment acceptance remains separate.

Original artifact producer: 4c18b92. Release/main commit: 9245399; source trees match. The published bytes are the original CI output from run 40866485520.

Build profile: ceiling=enabled, initialMode=off. Browser tools still require explicit opt-in. The unchanged bridge 0.1.0 remains available from the 1.6.196 release.

Asset	SHA256
web-console-1.6.197-artifact-manifest.json	2b0f7276221a4148ce4a2ce75df07d413a0ee9a4ae37bc1fa203183edd755c89
web-console-1.6.197-build.cdx.json	fc21ff52fdbe28a3eba0bbad38dad247ddf920911bf1e3c3300823111ae78dcd
web-console-1.6.197-runtime.cdx.json	04476100b2c764963ed71c33dfb4917e8cb8cae70c5ca0d64d4b34a004b17421
web-console-1.6.197-sbom.sha256	5971cb8c6a2b9f8c15d4906fed40fe20559467dd1855fec7153731bf085cbee7
web-console-1.6.197-webmcp.json	7c116dad93902398fea86d95f4e599764a5f0fe6606fe801ebccf4b2f69958a6
web-console-1.6.197.tar.gz	f45b4c1357199bed491f5a708d6103996f7f03313b6045d3e81f6bb7464fd7ad
web-console-1.6.197.tar.gz.sha256	74a938bef6e11f69697d7ab11a30d217f9b30ec822ea7f03151882b0062d24d6