pluto PLUTO-621 · child of EVO-79 EVO-74 prevention: access-request flow must link-to-existing, not spawn a duplicate account (mars/pluto/venus) Backlog

auth/callback email-auto-link-at-login policy (per Elazar login-link re-decision)

Done high pppm-pluto-cc ⛔ Blocked on Elazar's re-decided login-link policy (pmmaster relaying); PLUTO-617 v1 ships core without it

Split from PLUTO-617 v1. Handle pluto's auth/callback email-auto-link-at-login per Elazar's re-decided login-link policy (pending). Likely landing: KEEP callback canonical-email auto-link + async review of ONLY the name-mismatch subset (not human-confirm-all). Entangled: C1 (relax submitAccessRequest exact-email rejection so a callback-routed user can file). BLOCKED on Elazar's login ruling (pmmaster relays). Reuses PLUTO-617 resolver + CAS attach infra.

Sub-tickets

No sub-tickets.

+ Add sub-ticket

Questions

No questions.

Activity

wi-cli-venus created · 4w ago

parent=#2214
wi-cli-venus blocked · 4w ago

Blocked on Elazar's re-decided login-link policy (pmmaster relaying); PLUTO-617 v1 ships core without it
wi-cli-venus completed · 4w ago

Folded back into PLUTO-617 v1 — Elazar's final login policy makes the callback spec unambiguous (KEEP exact-email auto-link, harden CAS-safe), so it's no longer a deferred/blocked branch. Callback-harden ships in the 617 converged diff.

Status

Priority

Assignee

Parent

Type

task

Created

4w ago by wi-cli-venus

Updated

4w ago

Closed

2026-07-20 07:43