`5x/sweep-1.md`

19 lines
# /5x sweep 1 — photo.designerwallcoverings.com (post FT-model + dedup)

## Verify
- **Runner:** M1 PASS · M2 PASS · **M3 FAIL (page.goto Timeout / ERR_INVALID_AUTH_CREDENTIALS)** · B4 PASS → 3/4.
- **Endpoints (all 200):** /healthz, /api/vendors, /api/resolve-product, /api/media-status, /caps.
- **Headless flow:** 0 console errors; Add/Update/fb modals all open; counters work.
- **Dedup + FT visual-ID:** warning + "Update instead" switch render; 0 errors.

## Caught
- **1 issue — M3 FAIL — proven NON-app (harness auth artifact).** The /3x M3 method does not send
  basic-auth to its browser context, so it hits the 401 wall. Proof: an authed page load completes
  in **0.24s**, while a no-auth load fails with `net::ERR_INVALID_AUTH_CREDENTIALS` — exactly M3's
  failure. The app itself is fast and clean; M3 fails only because it omits credentials.

## Fixed
- Nothing in the app — 0 app defects. Fabricating a fix for a credential-less test would be dishonest.

`sweep 1: 3/4 · caught 1 (M3 harness auth artifact, proven non-app) · fixed 0 (no app defect)`