kaien/l-ai-core-proto
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(proto): ResolveLinkedAccount fail-closed on ambiguous identity (FailedPrecondition); comment-only, no regen (generated doc comments drift until next regen)

Browse Source
This commit is contained in:
Kaien 2026-08-09 12:39:34 +03:00
parent 0315e13ce0
commit d3895e9a18
1 changed files with 9 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
users.proto
View File

@ -27,9 +27,15 @@ service UsersService {
// identity to the stable global_user_id. It NEVER creates a global user or
// a linked account.
//
// linked=false means the account is not linked to any global user. When
// several links exist for the same account (legacy duplicates), the oldest
// (smallest linked_account id) wins — deterministic across retries.
// Identity boundary invariant: (platform, account_id) -> at most one
// canonical global_user_id.
// - no rows -> linked=false (account not linked; nothing created)
// - one distinct global user -> that user; if several legacy link rows
// exist for the SAME user, the oldest (smallest linked_account id) wins,
// deterministic across retries
// - more than one distinct global user -> FAILS CLOSED with
// FailedPrecondition (ambiguous identity); callers must not persist
// anything under a guessed identity
rpc ResolveLinkedAccount(ResolveLinkedAccountRequest) returns (ResolveLinkedAccountResponse);
}