Suppress operator-alert email for domain-denied login (keep /solicitar-acceso redirect + info/authz audit row)

Sub-tickets

Questions

Activity

• wi-cli-venus created · 6w ago
• wi-cli-venus completed · 6w ago
  Shipped fa067d2/v1.97.6, audit PASS. Removed the sendOperatorAlert() call from the domain-denied branch of auth/callback (Elazar: benign block shouldn't email him). Gate condition, logAuthz audit row, and /solicitar-acceso?reason=email-domain redirect all byte-unchanged — email-only removal, security-inert. Sibling inventory: no-profile already email-silent; remaining emailers (no-roles x2, wrong-email/identity-drift) held pending Elazar's broader auth-gate decision.