- Shipped
- September 25, 2026 at 11:07 AM UTC
- Author
- Kamo
- Commit
- 385562a
An organization with no domain has no register host of its own, so its members land on register.<platform apex>, whose host names the platform. The resend endpoint looked the address up there, did not find the member, and answered the usual ambiguous 200 having sent nothing: a member added to such an org whose first letter went missing could never be verified. The verification screen always holds the account id. When the id and the typed address both match one account, the letter is composed under that account's security-provider organization. Anything else (no id, a malformed one, an id that does not own the address) is decided by the host exactly as before, after the same rate limit.