D11 (owner rule 2026-10-13): no files or filesystem, only the database and S3; stateless services.
7.3: token bindings per SECURED-DATA §14.5 (QRun-IO/qqq#1161): record-bound variables use table␟field␟pk so wipes shred the outbox snapshot too; other values use "email"␟template␟variable␟messageId; low-entropy context values get changed:v1; stand-in mirrors ClassifiedValueTokens.
8.3: the Preferences provider reads UserPreferenceRequestContext.getUserEmailAddress() (core #1162); read-only rows when the account has no address.
Follow-ups to the design from coordination:
- **D11** (owner rule 2026-10-13): no files or filesystem, only the database and S3; stateless services.
- **7.3**: token bindings per SECURED-DATA §14.5 (QRun-IO/qqq#1161): record-bound variables use `table␟field␟pk` so wipes shred the outbox snapshot too; other values use `"email"␟template␟variable␟messageId`; low-entropy context values get `changed:v1`; stand-in mirrors `ClassifiedValueTokens`.
- **8.3**: the Preferences provider reads `UserPreferenceRequestContext.getUserEmailAddress()` (core #1162); read-only rows when the account has no address.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Follow-ups to the design from coordination:
table␟field␟pkso wipes shred the outbox snapshot too; other values use"email"␟template␟variable␟messageId; low-entropy context values getchanged:v1; stand-in mirrorsClassifiedValueTokens.UserPreferenceRequestContext.getUserEmailAddress()(core #1162); read-only rows when the account has no address.🤖 Generated with Claude Code