[AustinKelsay]

Summary

Human Brain roster entries can show the optional name from the verified WorkOS user Core already fetches. Each viewer can also save a private alias for an exact key.

verified WorkOS user → account name → existing gated identity description
viewer session + exact key → private alias marked “Your alias”
                            → original identity and key remain visible

Aliases do not change ownership, membership, permissions or mapping provenance. Identity cells preserve email, public-name, dated scoped annotation, retired-Agent and Unknown fallbacks. Migration 0043_account_names_and_key_aliases.sql is additive; existing 0042 and the scoped parser remain unchanged.

Stack: #1126 → #1128 → #1127. This PR targets the deletion branch to keep its diff scoped to names and aliases. The stacked names patch is byte-identical to the independently reviewed integration; it adds no deletion or people-management behavior.

Evidence

• Before: human records fell back to email and private aliases were unavailable. After: browser tests cover name display and email fallback; alias save/reload/edit/clear; viewer isolation; keyboard focus, retry, mobile layout; older Core fallback; preservation of scoped/public/lifecycle labels.
• Real Postgres upgrade/reapply tests preserve populated scoped records, operation receipts, principals and sharing scopes through 0043, retain names/aliases and accept an older account writer.
• Feature verification passed 357 Core tests, 426 dashboard tests, 8 Brain description compatibility tests, scoped-roster and alias browser tests, formatting, strict clippy, dashboard lint/typecheck/build and source structure.
• Fable 5.1 approved the final combined implementation at 64f9c62c with no blocking/high/medium findings. The subsequent small UI polish passed the final combined production build, 19 focused unit/real-hosted-route tests, 4 browser tests and the real composition proof. It verifies same-name/same-alias removal still targets the authoritative key, aliases remain private, and alias edits do not change the deletion state digest.
• Real composition: Core/Postgres, Brain server, Hosted Device, production dashboard, Runner-rendered Caddy, packaged Hermes and CLI. Fixtures: WorkOS provider, Agent key pin, Core Hermes-access grant and Chat. Live OAuth and production qualification remain release gates.
• Original feature CI passed. CI for the pushed stack head is separate; merge requires the current required checks.

Reproduce with just web-check, Core tests under devfinity, and the opt-in key_alias_browser_composition test documented in finitecomputer-v2/docs/brain-identity-descriptions-v1.md.

Merge Danger

Door: two-way for the application rollout.

Blast Radius: identity-display.

0043 adds nullable name columns and a viewer/key alias table, with no backfill. Older Core ignores the additions; rollback retains the data. Startup DDL briefly locks users. Deploy Core before the dashboard. Existing accounts acquire names after their next verified request.

The user authorized coordinated release after verification. Retained production source 6a923870 includes 0042 but intentionally omits main's unrelated 0039/0040 trial-archive migrations. A scoped retained-source candidate is being qualified separately; tests on main do not qualify replacing that whole Core generation. No deployment or production mutation has been performed.

The final people-management layer preserves these labels in the roster and removal dialog while displaying the authoritative key. Aliases never determine the removal target or authority.

[github-actions]

Documentation census

This PR adds 0 new Markdown files and 69 lines of Markdown, and removes 0 Markdown files and 5 lines of Markdown.

Net documentation change: +64 lines.

Counts .md and .markdown files anywhere in the repo, case-insensitively. Lines include additions and deletions across all matching files; net change is additions minus deletions. Renamed files are not counted as new or removed. Advisory only; never a merge gate.

[alexlwn123]

Pass for this stack layer. Reviewed a992859ccefcead4ed43c56b16f5159082f16cce..f18e9830f4f9cb519452cd8787093fe1bc2843a6 independently in a clean detached checkout of the verified finitecomputer/finite-mono remote. No actionable blocker found in the names/private-alias delta; inherited deletion behavior from #1126 is outside this verdict.

Traced verified WorkOS name capture and clearing, the existing v1/v2/v3 name/email disclosure gates, exact-key canonicalization, account-scoped alias SQL and its per-viewer lock, session/origin boundaries, account-keyed UI remounting, and preservation of identity/provenance/lifecycle labels. Migration 0043 is additive; inspected its populated-schema reapply and older-writer tests and the unchanged Brain parser's optional human-name compatibility.

Validation: 16 focused native dashboard tests passed, plus the existing scoped-roster browser test and an independent actual-UI alias test covering keyboard open, save, refresh persistence, edit, length validation, failed-save retry, clear, unavailable fallback, and desktop/mobile layouts. UI tests used this exact source with existing local dependencies and Chromium, fixture account/Core/Hosted Device services, and mocked Brain transport/alias responses. They do not establish real Core/Postgres isolation or live OAuth. Source diff check passed. Current Rust workspace, Dashboard, Brain acceptance matrix, and Source structure CI checks passed; Nix service packages remains in progress.

Limits: Core/Postgres migration and full composition tests were not rerun because the saved Nix bwrap UID-map/read-only-filesystem restriction remains; CI logs remain restricted (403). Neither blocked path was retried or bypassed. Real desktop (1440×1000), mobile (390×844), and mobile alias-dialog screenshots were captured and privacy-inspected, but automatic approval review denied uploading the synthetic evidence to the authorized Drive folder. No publicly retrievable images or inline-render claims are included. No source edits, merge, deployment, production-data changes, or workflow dispatches were made.