[witbrock]

Outcome

Fix wrong-organisation landing after Google/Cloudflare login (JVNAUTOSCI-2738). Legacy member_of_organisation was incorrectly consumed as a preference; same-person email changes retained old org state.

Changes

• Represent explicit per-login organisation preference map; canonical setter validates login binding and membership, serialises writes and reads back. No grant/domain inference.
• Auth status returns membership-validated default and bootstrap generation; missing/revoked default -> Personal.
• Rotate window context and clear stale mirrors before chat initialisation on changed login/default. Preserve deliberate per-tab switches on reload; failed binding stops at retry gate.
• Remove legacy first-membership preference fallback. Preserve descriptive graph.

Evidence / decision

Merge ready: 72 backend tests, 11 frontend tests, ESLint and diff checks. JWT same-person changed-email test, revoked/malformed preference cases, session membership denial and frontend contradictory binding included.
Deployment authorised separately by user. Live normal work-profile Google session, DGX/Mac data reconciliation, household/SAIL-denial checks and completion message remain deployment acceptance, not yet claimed. Physical Yunli Google account sign-in cannot be simulated as proof of his normal issuance.
Mobile edits isolated in a different worktree. No Sol requests.