@@ 255,3 255,10 @@ Rollback per phase: each commit is independently revertable. PH3 alone reverts c
- PH2 -> IF4 @ internal/config/config.go, internal/config/config_test.go, config.example.yaml
- PH3 IF1, IF2, IF3, IF4 -> @ internal/server/auth/devstub.go, internal/server/auth/devstub_test.go, cmd/lethe/main.go
+## Conclusion
+
+### Deviations from plan
+
+- PH1 — added `Stub.Issuer() string` getter beyond the planned `SetIssuer`. **Why:** `middleware_test.go` builds `config.OIDCConfig{Issuer: ...}` after `httptest.NewServer` returns, and needs to read the value back from the stub. Read-only; no mutable-state concern.
+- PH1 — local helper renamed from `newVerifier` (plan) to `newOIDCVerifier`. **Why:** symbol clarity in a test file that already has `newAuthenticator`, `newStub`; one verifier/authenticator name pair reads better. Test-file only.
+