Status. Proposed design only. Nothing in this vault is GGA client approval. The GGA client documents are supplied drafts: see GGA-Source-Digest. No application, service or test has been executed; every scenario is Not executed. Delivery fees and dates are open.

T34 · Email content is minimal and links reauthorise

Field	Value
Status	Not executed
Type	Balanced software
Layer / kind	Worker · API · security
Priority	P0
Gates	A06, A08, A09
Build step	07 (GGA order; the 1.3 step is history)
Decisions	Q07, Q08

Disposition under GGA

Field	Value
Disposition	Retained
GGA basis	Blueprint pp. 10, 16, 17 (GGA-Requirement-Register)
Replaced or carried by	GS13-staged
Still open	none
What changes	Messages are non-sensitive with short authenticated links; recipient and scope are re-checked before delivery.

The 1.3 text below is kept verbatim as history. Where the disposition is Reframed, Superseded or Parked it is not the GGA oracle; use the replacing scenario. A Parked scenario has no GGA feedback and stays a Proposed carry-forward. The status stays Not executed. Register: Scenario-Dispositions.

Given

Allowed immediate alert exists; opportunity and conversation contain unique confidential terms and body canaries.

When

Render/send through a provider stub; open link under entitled, logged-out and removed users.

Then / oracle

Subject, preview, body and URL contain no private message body or confidential terms. A link is not an access grant. Authentication and live record policy gate detail; logged-out return URL does not leak data.

Evidence required

Full provider payload snapshot and URL scan; access checks; no tracking/log leakage of private content.

Decision dependency (verbatim)

Q07/Q08: safe email template and allowed public labels; no record-access secret in the link.

Source: TDD rev 1.3 (PDF); machine-readable in 10-Sources/tdd-bundle/. Back to Scenario-Index · Traceability-Matrix · integration dependencies in Dependency-and-Regression-Table.