Insight 04Technical article
Derive identity,don’t assert it
Writing ‘i am ignaz’ in the chat is a long way from making you Ignaz to our agents. The identity comes from the account.
Station 01 / 05The trigger
A claim is not an identity.
Until September 2026, an agent took its identifier from the session context. Anyone who claimed to be someone else could have written as that person.
- ‘i am ignaz’ Claim in the chat
Station 02 / 05The principle
Nobody can simply write in the account.
A commit’s author and prefix can be set to anything. The account it is pushed with cannot. That is what we derive the actor from.
- Author freely chosen
- Prefix freely chosen
- Account not chosen
Station 03 / 05The sources
Strong, weak, never.
The signed-in account counts. Name and email from Git only when there is no account. A statement in the chat never.
- Account strong
- Name and email weak
- Statement in the chat never
Station 04 / 05Unknown
Unknown means read only.
Anyone who is not recognised can only file notes as an unverified inbox note. A person assigns them later.
- Unknown read only
- Inbox note unverified
Station 05 / 05The check
No push clears itself.
The check only trusts the last state that was demonstrably green. Never the push it is checking.
- Last green state trusted
- New push under check