coulomb/user-engine
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Prove registration collision safety
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source
This commit is contained in:
tegwick 2026-08-10 18:37:41 +02:00
parent b80de5a1f4
commit a8f190b7b7
2 changed files with 43 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
workplans/USER-WP-0022-public-registration-and-jit-application-profiles.md
View file

@ -197,3 +197,10 @@ verification expiry/replay redaction, peer rate limiting, identity-link
collision, cross-tenant denial, lifecycle deletion, audit/outbox redaction,
and request correlation. Deployed consumer conformance remains gated on public
runtime credentials and activation.
Duplicate-input conformance now also proves that a verified mailbox reused
with a different username creates a distinct local user instead of implicitly
linking to an existing account. Reusing an existing provider username fails at
the identity-link uniqueness boundary, leaves the original link unchanged, and
never transfers that identity to the later registration. The full suite passes
131 tests with three environment-dependent skips.