update report h6

docs/guides/CASAN_LOCAL_FULL_STACK.md

@@ -197,6 +197,26 @@ docker volume rm casan-local-prod_minio-data
 This is destructive and cannot be undone. Do not use it if the MinIO bucket has
 evidence you need to retain.
 
+### Python used by the local auth bridge
+
+`local-full.sh` validates the Python interpreter before starting the host-side
+provider auth bridge. On macOS it prefers `/usr/bin/python3`, avoiding an old
+Intel-only framework Python that may be first in `PATH` but terminated by macOS.
+To select another working Python explicitly, set `CASAN_PYTHON_BIN`:
+
+```bash
+CASAN_PYTHON_BIN=/opt/homebrew/bin/python3 \
+  bash packages/casan-harness/scripts/bash/local-full.sh start
+```
+
+The launcher also validates Docker's configured credential helper. If macOS
+terminates that helper, CASAN uses an isolated, temporary anonymous Docker
+configuration for this local stack's public images while preserving the active
+Docker Desktop socket and Compose plugin. The same fallback uses Docker's classic
+builder if the bundled BuildKit metadata helper is also terminated. It does not
+edit `~/.docker/config.json` or delete stored registry credentials. Reinstall or
+update Docker Desktop later to repair the helper globally.
+
 ## Current scope and next phase
 
 This local environment includes every currently implemented CASAN component.