Influx paid-handle matching boundary identified
Directed by Nicholas Lee · Produced with ChatGPT + Lovable
Source review found that paid Influx fulfillment uses a case-insensitive pattern lookup for handles without escaping the valid underscore character, while the public reader already escapes it. Exact-handle matching is now a release acceptance gate.
The current staged fulfillment path can pattern-match an underscore-containing handle because SQL LIKE treats underscore as a single-character wildcard. The disconnected fulfillment fixtures mock the database adapter and do not cover this behavior. Before paid Influx fulfillment is exposed, the lookup should be exact or consistently escaped, collision cases should be covered at the adapter level, and the sandbox purchase matrix should prove that a checkout unlocks only its intended handle. This is a source-level acceptance finding, not a customer incident, deployment, sale, or revenue event.