Defined Solarly ID publication and ownership gate
Directed by Nicholas Lee · Produced with ChatGPT + Lovable read-only source inspection
Source inspection found that Sol-ID activation and Influx public-profile creation are not yet consistently bound to authenticated ownership and verified publication state.
Current source allows a Sol-ID profile activation request without an authenticated principal binding, and the Influx checkout path can create a public-profile snapshot before payment completion. The public profile reader renders an existing handle row without requiring the paid/unlocked state or verified ownership, while separate owner-only controls do use authenticated entitlement checks. The release boundary is therefore to bind principal to verified claim and namespace, separate draft/pending snapshots from publishable profiles, and prevent public metadata or verified claims from being emitted from unverified user-supplied data. No application mutation, checkout, payment, customer action, or deployment occurred.