#296: remove the unsubscribe-token dual-verify window early #299

Merged

fable-5 merged 1 commits from issue-296-remove-legacy-verify into main 2026-07-31 23:19:43 +02:00

Conversation 0 Commits 1 Files Changed 3 +22 -46

fable-5 commented 2026-07-31 23:03:04 +02:00

Collaborator

Copy Link

Closes the work for #296 (operator decision at the ADR 0020 acceptance): the dual-verify transition window is removed early — LEGACY_VERIFY_UNTIL, the legacy derivation and its verify branch are gone; verification is subkey-only. Consequence stated honestly: unsubscribe links in mails sent before the #188 deploy stop working; recipients use the in-app notification settings. A regression test pins that the legacy derivation can never verify again; security.md §key hierarchy records the removal.

Issue #296 will be closed manually after green CI + merge.

🤖 Generated with Claude Code

https://claude.ai/code/session_01AUtYMxwTCMHG9mVHnwbFg8

Closes the work for #296 (operator decision at the ADR 0020 acceptance): the dual-verify transition window is removed early — `LEGACY_VERIFY_UNTIL`, the legacy derivation and its verify branch are gone; verification is subkey-only. Consequence stated honestly: unsubscribe links in mails sent before the #188 deploy stop working; recipients use the in-app notification settings. A regression test pins that the legacy derivation can never verify again; `security.md` §key hierarchy records the removal. Issue #296 will be closed manually after green CI + merge. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01AUtYMxwTCMHG9mVHnwbFg8

fable-5 added 1 commit 2026-07-31 23:03:04 +02:00

#296: remove the unsubscribe-token dual-verify window early ... 1f56f34113

Operator decision at the ADR 0020 acceptance: verification is
subkey-only now instead of waiting for the stated 2026-11-01 expiry.
Links in digest mails sent before the #188 key separation stop working;
recipients use the in-app notification settings. A regression test pins
that the legacy derivation (root key + purpose prefix) can never verify
again; security.md records the removal.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01AUtYMxwTCMHG9mVHnwbFg8

fable-5 merged commit 1f56f34113 into main 2026-07-31 23:19:43 +02:00

fable-5 referenced this pull request 2026-07-31 23:19:54 +02:00

Remove the unsubscribe-token dual-verify window early (ADR 0020 acceptance) #296

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

area:auth

  

area:docs

  

area:export

  

area:ops

  

area:storage

  

area:supply-chain

  

auth

Authentication, permissions, quotas

  

backend

API server (apps/api)

  

blocked

Blocked on external dependency/infrastructure

  

collab

Collaboration server (apps/collab)

  

deployment

Docker, CI/CD, hosting

  

docs

Documentation

  

effort:L

  

effort:M

  

effort:S

  

frontend

SPA (apps/web)

  

plugins

Plugin system and SDK

  

qa

Tests, fixtures, e2e

  

vs-nfd

  

vs-nfd:blocker

No Label

area:auth

area:docs

area:export

area:ops

area:storage

area:supply-chain

auth

backend

blocked

collab

deployment

docs

effort:L

effort:M

effort:S

frontend

plugins

qa

vs-nfd

vs-nfd:blocker

Milestone

Clear milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

No Assignees

1 Participants

Notifications

Subscribe

Due Date

The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: stwaidele/dorfteich#299

No description provided.