# session_base_check.py on agent/refactor-auth (base=M0, main=M1)
$ exit=1
{
  "ok": false,
  "base_sha": "7598e66b903de584c74d787ada4313f6deb70cb7",
  "recorded_base": "eb077068deb227b84d791b71f0d738773ad2a0d0",
  "head": "b162bc838092d0011fbc49c3be07d49f50c29365",
  "main_moved": true,
  "overlap": [
    "app/auth.py"
  ],
  "files_main": [
    "HOTFIX.md",
    "app/auth.py",
    "tests/test_hotfix_no_bypass.py"
  ],
  "files_pr": [
    ".agent-session-base",
    "app/auth.py"
  ],
  "hotfixes": [
    {
      "sha": "6496969a2f8ae910c87f82b442e6ee1b7b386598",
      "subject": "hotfix: remove debug bypass token from auth.check_token",
      "reason": [
        "HOTFIX.md",
        "subject",
        "paths:app/auth.py"
      ]
    }
  ],
  "errors": [
    "main and the session/PR both touched: app/auth.py",
    "hotfix/security commit(s) landed on main since base: 6496969 hotfix: remove debug bypass token from auth.check_token"
  ],
  "notes": [
    "main moved eb07706 -> 7598e66"
  ],
  "gate": "main_moved_gate"
}
REFUSE main_moved_gate: main and the session/PR both touched: app/auth.py | hotfix/security commit(s) landed on main since base: 6496969 hotfix: remove debug bypass token from auth.check_token
