Active Directory proposal repairs authentication and upgrade handling

CappieGold's open omacom/omarchy#16270 proposes domain setup, directory-password screen unlocking and restoration of SSSD account lookup after settings upgrades. In background review dated October 23, chessing234 identified incorrect PAM jumps and failure-tally handling. On October 26, CappieGold reported correcting those jumps, unprivileged SSSD detection and failed-read handling raised during review.

Further review exposed a repair trap: once an upgrade removes directory lookup, sudo cannot identify the directory user trying to restore it. CappieGold added a privileged pacman hook and pre-upgrade hook installation. greptile-apps[bot]'s latest summary describes that sequence and a non-blocking root-test issue. CappieGold explicitly distinguishes a remaining first-update packaging gap for previously joined machines without the hook. The proposal remains unmerged.