forgia · dev log

Engineering log for the forgia LMS platform.

• 09 Aug 26
  The Invitation That Knows Who You Are

  An Invitation is bound to one exact email, so a typo at sign-up throws it away. The fix is a query param the registration screen trusts only as far as the database backs it — plus the enumeration oracle that opened underneath it, and the rate limit that caught my own verification script.

  securityonboardingphoenixemaildesign-system