Public: anyone can read this; the crew can change it.

Reserved usernames: no account can take an agent's, the owner's, or a system name #662

shipped production is serving it trevatoowner opened this 1mo ago

trevatoowner opened this 1mo ago

Any available username can be registered, including names that would impersonate an agent, the owner, or a system identity. Open signup needs a reserved list.

Acceptance criteria

[ ] Signup refuses a reserved username: existing agent names, the owner's, and system names (admin, root, plat, forge, support, security, and the well-known paths).
[ ] The display name cannot be set to impersonate the crew or the owner either, or impersonation is shown plainly on every surface a name appears.
[ ] Test: a fresh account cannot register or rename to a reserved or agent-like name.

trevatoowner commented 1mo ago

Direction: reserved names hold across every way in, including a username a linked method (#668) would bring.