Files
zeekay afbe7410a9 The sign-in email's mark, and the link it carries, gated
IAM's sign-in mail loads its mark from the org's site at
/email/mark.png, so the export serves one: @hanzo/brand's five paths,
white, on an opaque black tile, 132px for a 44px place.  An email client
shows no SVG, and an opaque tile reads on a light page, a dark one, and
in a client that inverts the page but never an image.  It is derived by
scripts/email-mark.mjs, never drawn.

e2e/gates/link.spec.ts drives the link the mail carries, the way a
person meets it: opened beside the waiting tab, which signs in and the
link's tab follows; opened in the browser that asked with no tab
waiting, which signs in where it opened; opened in another browser,
which shows the code and spends nothing, and the code typed where the
sign-in began, in a field the browser fills (one-time-code, numeric).
The mark is held served, byte for byte.
2026-10-22 18:50:55 -07:00
..