Correct the sign.pink finding

Shipped

August 24, 2026 at 9:36 PM UTC

Author

Kamo

Commit

e620b76

The inventory called SignLinkBuilder's sign.sign.pink fallback a "foreign apex" and I recorded it as one. It is not: sign.pink is a Kamo-owned organization (id 1174321970511380486, "Sign Pink", DNS-verified). So a domainless org emailing signing links to counterparties is a white-label defect -- the links carry the Sign Pink brand instead of the org's own -- not a leak to a third party. Still worth fixing; not the incident the original wording implied.