Skip to content

ftb: register LLCs (Form 568), always ask for the PIN letter, reissue (0.71.0) - #207

Merged
ralyodio merged 1 commit into
masterfrom
ftb-llc-pin-letter
Oct 22, 2026
Merged

ralyodio merged 1 commit into
masterfrom
ftb-llc-pin-letter

Conversation

@ralyodio

Copy link
Copy Markdown
Contributor
  • New llc role: business representative with an entity id, Form 568,
    "Total income from line 1" (--entity-id, --year, --amount).
  • The Account Activation Options page (TransUnion quiz or PIN letter) now
    picks "Mail a PIN letter". Its text mentions a PIN letter, which
    outcomeOf read as "registered", so a personal registration could end
    with no letter ever requested. A page still asking a radio question is
    never a result.
  • ftb reissue <role> logs in to ask for a new letter; status shows it.

Verified live 2026-10-22: OSINT Laboratory LLC registered as an llc (SOS file number; the FTB demand-letter id 001198239000 did not match), and a personal registration walked Options -> Mail a PIN letter -> Confirmation.

Tests: test/ftb.test.ts 32/32. Full suite has 2 failures in proxy.test.ts and user-export.test.ts, untouched here.

🤖 Generated with Claude Code

… (0.71.0)

- New `llc` role: business representative with an entity id, Form 568,
  "Total income from line 1" (--entity-id, --year, --amount).
- The Account Activation Options page (TransUnion quiz or PIN letter) now
  picks "Mail a PIN letter". Its text mentions a PIN letter, which
  outcomeOf read as "registered", so a personal registration could end
  with no letter ever requested. A page still asking a radio question is
  never a result.
- `ftb reissue <role>` logs in to ask for a new letter; status shows it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@ralyodio
ralyodio merged commit eb0d5c9 into master Oct 22, 2026
5 checks passed
@github-actions

Copy link
Copy Markdown

ThreatCrush Security Scan

41 finding(s)

HIGH/CRITICAL: 15 | MEDIUM: 12 | LOW: 14

Severity Rule Location
HIGH py-ssrf-outbound-request dev2/dev2-site:151
HIGH py-ssrf-outbound-request dev2/dev2-site:1060
HIGH py-ssrf-outbound-request dev2/dev2-site:1798
HIGH sh-remote-script-execution root-ubuntu.sh:3262
HIGH sh-remote-script-execution root-ubuntu.sh:3263
HIGH sh-remote-script-execution root-ubuntu.sh:5164
HIGH sh-remote-script-execution root-ubuntu.sh:5168
HIGH sh-remote-script-execution root-w3bs-os.sh:3639
HIGH sh-remote-script-execution root-w3bs-os.sh:3640
HIGH sh-remote-script-execution root-w3bs-os.sh:5565
HIGH sh-remote-script-execution root-w3bs-os.sh:5575
HIGH sh-remote-script-execution root-w3bs-os.sh:5582
HIGH sh-remote-script-execution root-w3bs-os.sh:5598
HIGH sh-remote-script-execution root-w3bs-os.sh:5603
HIGH sh-plaintext-download root-w3bs-os.sh:6285
MEDIUM sql-template-interpolation dev2/dev2-site:1287
MEDIUM sql-template-interpolation dev2/dev2-site:1364
MEDIUM sh-remote-script-execution root-ubuntu.sh:5372
MEDIUM redos-nested-quantifier src/domain-free.ts:56
MEDIUM redos-nested-quantifier src/emoji.ts:167
MEDIUM redos-nested-quantifier src/icon.ts:166
MEDIUM redos-nested-quantifier src/mail.ts:1047
MEDIUM sql-template-interpolation src/users-dump.ts:487
MEDIUM sql-string-concatenation src/users-dump.ts:507
MEDIUM sql-template-interpolation src/users-dump.ts:540
MEDIUM sql-string-concatenation src/users-dump.ts:574
MEDIUM redos-nested-quantifier src/wcag.ts:556
LOW secret-generic-credential src/credentials.ts:36
LOW secret-generic-credential src/credentials.ts:53
LOW secret-generic-credential src/credentials.ts:56
LOW secret-generic-credential src/credentials.ts:61
LOW secret-generic-credential src/user-export.ts:689
LOW secret-generic-credential src/user-export.ts:695
LOW secret-generic-api-key test/credentials.test.ts:208
LOW secret-generic-credential test/mail.test.ts:141
LOW secret-generic-credential test/proxy.test.ts:69
LOW secret-generic-credential test/proxy.test.ts:85
LOW secret-generic-credential test/shorten.test.ts:36
LOW secret-database-url test/users-dump.test.ts:108
LOW secret-database-url test/users-dump.test.ts:119
LOW secret-database-url test/users-dump.test.ts:120

Snippets are redacted; ThreatCrush never prints matched credential material.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant