Someone answers an event invitation without logging in and later wants to change the response. Using their name as proof of identity cannot distinguish namesakes or a different person logging in on a shared device.

SquadNote issues a token controlling one response instead of creating a placeholder user row. Later login does not automatically match names: the person reviews the target responses and explicitly claims them for the account.

A response token grants control of a record; identifying a person requires separate evidence. This investigation read the design, migration, API, and device-storage code at circle-hub commit 9aec489 , then reran related tests on September 11, 2026.

Add response ownership before building an organization roster

The design document separates adding control to existing guest_attendance records from a future organization-level provisional membership feature.

The implemented stage is the former.…