[webmixgamer]

Summary

Moves the enterprise submodule pointer 3f0c1e1 → f126dde. That is exactly one enterprise commit:

• abilityai/trinity-enterprise#853 is the enterprise half of abilityai/trinity-enterprise#849, the SSO setting "keep email-code sign-in available for users".
• The OSS half, fix(auth): enforce the SSO email-code sign-in policy on every surface (ent#849) #3428, merged on 10-10. This bump ships the pair.
• It belongs in rc4: the v1.0.0 freeze plan (docs(releases): v1.0.0 code-freeze plan #3665) counts ent#849 as fixed on dev, which is true only once this lands.

Verified

• Only the gitlink changes (src/backend/enterprise | 2 +-). .claude is untouched.
• f126dde (the fix(monitoring): health-check the whole fleet, not just running agents (#675) #853 squash) has 3f0c1e1 as its parent. Its tree equals fix(monitoring): health-check the whole fleet, not just running agents (#675) #853's head merged onto 3f0c1e1 (git merge-tree).
• With f126dde mounted on this branch's base (dev 18d02a159, which includes AAuth feat(a2a): AAuth agent identity across instances, behind an off-by-default flag (abilityai/trinity-enterprise#623) #2956 and feat(aauth): person-token binding through a person server — an agent acts for its owner (abilityai/trinity-enterprise#878) #3659):
  • the enterprise suite: 995 passed, 5 skipped, on seeds 106 and 12345;
  • tests/unit/test_ent849_email_code_policy.py: 35 passed;
  • the AAuth tests (test_ent623_aauth_a2a.py, test_ent623_aauth_core.py, test_ent878_aauth_person_token.py): 227 passed.
• fix(monitoring): health-check the whole fleet, not just running agents (#675) #853's own CI, re-run today against current dev, is green on all four seeds.

Public CI never checks out the submodule, so this PR's checks run on dev's tree. deploy-dev mounts the new pin after the merge.

Re-test on the build that carries it: abilityai/trinity-enterprise#849.

Related to abilityai/trinity-enterprise#849

🤖 Generated with Claude Code

[vybe]

merge-train: pushed 3d2252a to this branch. It re-points src/backend/enterprise from f126dde to the current enterprise main tip a52ba5c, so this bump now also carries the two enterprise PRs merged just now (ent#893 → #876 SSO interactive-admin writes, ent#894 → #883 assignment and seat audit rows). This is mechanical: one gitlink, same pattern as before. It rides the current train.

[vybe]

merge-train: batch validated on train/20261013-2303 (#3685)