From 644be67ea2dcd2e216d52c9e3754e09c2892eb08 Mon Sep 17 00:00:00 2001
From: Joakim Persson <joakim.persson@icloud.com>
Date: Sun, 25 Oct 2026 13:29:29 +0100
Subject: [PATCH] docs(changelog): aws-sso keeper idle without Bedrock
 (pi-extensions f032195)

---
 CHANGELOG.md | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0d03d59..8b5011f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -157,6 +157,15 @@ Pre-v1.0.0 tags followed the pi npm version (`v{pi_version}[letter]`).
 
 ### Fixed
 
+- **AWS SSO login prompt in sessions that don't use Bedrock (pi-extensions
+  `f032195`).** The `aws-sso` keeper logged in whenever it was enabled, so
+  `pi --model glm-5.3` (ERDC) still asked for AWS approval once the SSO session
+  had ended. It now acts only when the session model, the observational-memory
+  model or a fork/task profile is `amazon-bedrock`, and otherwise shows
+  `AWS · idle (no Bedrock)`. For a session with no AWS at all, point
+  `observational-memory.model` and `pi-fork.effortProfiles` at ERDC models in
+  `settings.json` too.
+
 - **Mailbox: asks this device answered long ago came back as owed
   (mempalace-toolkit `c04d488`).** mempalace 3.11.0 stopped treating
   `from_agent` as a filter on `event_list`; the filter is now `writer`. The