Workflow reports should avoid unnecessary personal email disclosure #305

New Issue

2026-07-07T00:45:43-05:00

jcwalker3 commented

2026-07-07 00:45:43 -05:00

Workflow reports sometimes include the authenticated user's personal email address even when username/profile identity is sufficient.

Observed behavior

A reconciliation handoff reported:

Identity: jcwalker3 / [email protected]

Problem

Most controller handoffs only need username, profile, role, and remote. Personal email addresses are unnecessary in normal workflow reports and can create avoidable privacy exposure.

Required behavior

Default workflow reports should identify users by:
- username
- profile
- role
- remote/context
Do not include personal email unless:
- the exact tool requires it for proof
- the user explicitly asks for it
- the email is necessary to disambiguate identity
If included, explain why the email is necessary.
Final-report validators should flag unnecessary email disclosure.

Acceptance criteria

Standard reports use jcwalker3 / prgs-author, not personal email.
Reviewer reports use sysadmin / prgs-reviewer.
Tests cover reports with unnecessary emails, necessary disambiguation, and no-email identity summaries.

Workflow reports sometimes include the authenticated user's personal email address even when username/profile identity is sufficient. ## Observed behavior A reconciliation handoff reported: `Identity: jcwalker3 / [email protected]` ## Problem Most controller handoffs only need username, profile, role, and remote. Personal email addresses are unnecessary in normal workflow reports and can create avoidable privacy exposure. ## Required behavior 1. Default workflow reports should identify users by: - username - profile - role - remote/context 2. Do not include personal email unless: - the exact tool requires it for proof - the user explicitly asks for it - the email is necessary to disambiguate identity 3. If included, explain why the email is necessary. 4. Final-report validators should flag unnecessary email disclosure. ## Acceptance criteria - [ ] Standard reports use `jcwalker3 / prgs-author`, not personal email. - [ ] Reviewer reports use `sysadmin / prgs-reviewer`. - [ ] Tests cover reports with unnecessary emails, necessary disambiguation, and no-email identity summaries.

jcwalker3 referenced this issue

2026-07-07 01:51:24 -05:00

Add final-report validator rules for reviewer and reconciliation handoffs #327

jcwalker3 added the status:in-progress label 2026-07-07 01:53:50 -05:00

jcwalker3 referenced this issue from a commit

2026-07-07 01:57:51 -05:00

feat(reports): add no-email identity summary and disclosure validator (closes #305)

jcwalker3 referenced a pull request that will close this issue

2026-07-07 01:59:27 -05:00

feat(reports): add no-email identity summary and disclosure validator (closes #305) #329

sysadmin closed this issue

2026-07-07 03:03:13 -05:00