An AI invite settles the caller's authority before it looks at the target

Shipped

September 28, 2026 at 10:28 AM UTC

Author

Kamo

Commit

38c8e3f

invite() answered 409 NOT_AN_ACTIVE_AI_MEMBER before 403 NOT_ALLOWED_TO_INVITE, so a member who could reach M1 but not invite could tell an active AI's member id from anyone else's. The 403 now comes first; remove() already had that order, and a test now pins both. SP98-D-3.