/me/security/totp/rotate/confirm route currently 500s on every call. Confirmed via test failure surfaced only after an unrelated schema-drift fix cleared 864 masking failures from the suite.
me_security.py:501, the real route handler, calls person_totp.confirm_totp_rotation(...) without the required now keyword argument. now has been a required keyword-only argument on that Stele function for some time (TS-11 replay-guard machinery, predating this session). The call site was last touched 2026-06-20 (CR-2026-120) and has apparently been broken since — not introduced by this session's Stele work, confirmed by direct trace.
Pass now= (the current time, via whatever mechanism the rest of the codebase uses for testable time — check for an existing clock/utility pattern before adding a raw datetime.now() call) at the me_security.py:501 call site.
No conflict. Straightforward production bug fix.
The separate, not-yet-root-caused session-resolution test failure (recorded separately, not this CR). The Stele migration-chain structural fix (separate CR).