Authorization logic

A fresh agent session picks the stale comment over the code that contradicts it

A dev.to post hands four models a file whose comment contradicts its code, then asks a clean session to fix the inconsistency. It is a well-built way to expose the failure, and no counts are published yet.