Accounts
- you are responsible for activity on your account and the providers linked to it
- you must not try to break authentication, entitlement, or access boundaries
- accounts created through social login still resolve to one canonical identity inside the portfolio