RHF-e unblock — authenticated helper-access fix (2026-08-28)

Verdict: code DONE + BV pass — land SD-21; redeploy bridge; resume Scooling smoke.
Not RHF-e DONE. Spend still 0/5.

Root cause

lib/agent/delegation-authority-store.mjs always passed Netlify Blobs consistency: 'strong' on authority reads. Under Lambda connectLambda that throws BlobsConsistencyError → GET /api/v1/delegation/helper-access → 503 → Scooling helperAccessState: unavailable. Legacy GET /api/v1/delegation/grants uses eventual get and still succeeded. Business marker/envelope blobs were valid (lineage_lymik9fcy353fuo).

Fix

authorityBlobGetOpts() — eventual on NETLIFY / AWS_LAMBDA_FUNCTION_NAME; strong on persistent hosts. Same pattern as gateway-auth (hub/gateway/server.mjs).

Evidence

Item	Result
Seven-tier `test/rhf-b-kn1-delegation-retail.test.mjs`	25/25
BV round 1	pass — `docs/reviews/2026-08-28-rhf-e-helper-access-fix-bv-round1.md`
Smoke authority	`~/scooling/docs/reviews/2026-08-27-retail-helper-finish-smoke-pass.md`

Explicitly not done

Browser smoke pass (RHF-e)
RHF-f2 closeout
Codex spend

File History 1 commit

sha256:4215cecbbabf5591b1ff69053cc938b4b6c800f0d487be40618c1d4254d8b67b security: npm audit fix pre-bridge 2026-09-05 Human 1 day ago