[E17-S01-T04] Expiration supported #321

New Issue

2026-08-27T08:05:47Z

kpcto commented

2026-08-27 08:05:47 +00:00

Parent story: [E17-S01] Anonymous preference identity (#123)

Intent

Support an expiration time on the anonymous preference identity so stale identities can lapse.

Acceptance criteria

Each identity carries an optional expiration timestamp.
Expired identities are rejected or ignored on lookup.
Preferences can set an expires_at value.

Explicitly out of scope

Lazy creation, token generation, hashing, cookie contents and corrupt-token handling (sibling tasks T01-T03, T05-T06).

Test plan

Assert an expired identity is not accepted for lookups.
Assert an unexpired identity remains valid.

Rollback note

Additive expiration column; revert code. Column removal needs a migration if kept.

Owning stream

platform

Risk quadrant

agent-full

> Parent story: [E17-S01] Anonymous preference identity (#123) ## Intent Support an expiration time on the anonymous preference identity so stale identities can lapse. ## Acceptance criteria - Each identity carries an optional expiration timestamp. - Expired identities are rejected or ignored on lookup. - Preferences can set an expires_at value. ## Explicitly out of scope - Lazy creation, token generation, hashing, cookie contents and corrupt-token handling (sibling tasks T01-T03, T05-T06). ## Test plan - Assert an expired identity is not accepted for lookups. - Assert an unexpired identity remains valid. ## Rollback note - Additive expiration column; revert code. Column removal needs a migration if kept. ### Owning stream platform ### Risk quadrant agent-full

kpcto added this to the Sprint 5 milestone 2026-08-27 08:05:47 +00:00

kpcto added the

labels 2026-08-27 08:05:47 +00:00

Sign in to join this conversation.