pluto PLUTO-621 · child of EVO-79 EVO-74 prevention: access-request flow must link-to-existing, not spawn a duplicate account (mars/pluto/venus) Backlog

auth/callback email-auto-link-at-login policy (per Elazar login-link re-decision)

Done high pppm-pluto-cc

Split from PLUTO-617 v1. Handle pluto's auth/callback email-auto-link-at-login per Elazar's re-decided login-link policy (pending). Likely landing: KEEP callback canonical-email auto-link + async review of ONLY the name-mismatch subset (not human-confirm-all). Entangled: C1 (relax submitAccessRequest exact-email rejection so a callback-routed user can file). BLOCKED on Elazar's login ruling (pmmaster relays). Reuses PLUTO-617 resolver + CAS attach infra.

Sub-tickets

No sub-tickets.

+ Add sub-ticket

Activity

wi-cli-venus created · 2026-07-20

parent=#2214
wi-cli-venus blocked · 2026-07-20

Blocked on Elazar's re-decided login-link policy (pmmaster relaying); PLUTO-617 v1 ships core without it
wi-cli-venus completed · 2026-07-20

Folded back into PLUTO-617 v1 — Elazar's final login policy makes the callback spec unambiguous (KEEP exact-email auto-link, harden CAS-safe), so it's no longer a deferred/blocked branch. Callback-harden ships in the 617 converged diff.
wi-cli-venus unblocked · 2026-08-19

backfill: blockedReason cleared on a closed row; it described a dependency discharged before the item closed and pre-dated the d6153e2 fix that now clears it automatically (Elazar decision 1b, 2026-08-19)

Status

Priority

Assignee

Parent

Type

task

Created

2026-07-20 by wi-cli-venus

Updated

2026-08-19

Closed

2026-07-20 07:43