Core COE Weekly · 06/15–06/21

36 tickets touched · two active engineering lanes + a QA review batch

Project COR · 🐛 web-bug batch · 🚀 feature work · risk = blocker/dependency, not schedule

Tickets updated 36 · Submit for Review 22 · In Dev 5 · To Do 6 · Released 1 · Testing 1 · On Hold 1

Active lanes

🟢 WenlinYuan — COR-329 Change Phone Number backend 70% → 90%

Biggest block of the week. Security-heavy auth work:

PayBy change-mobile callback two-way signing (verify with shared public key + sign response with private key); partner identity moved to the Partner-Id header.
Rebind contact-notify consolidated onto im-friendship notifyContactsOnRebind (single source of truth).
New kick flow (im-user kickAccounts RPC) to evict the orphan account holding the new number. Key finding: only resetting the login token truly kicks a client — disconnect/clear-devices alone lets it auto-reconnect in ~1.2s with the still-valid token.
ucenter↔chat rollback compensation + idempotent rebind; auth hardening (failure lockout + backoff, anti-XFF-spoofing, anti-enumeration, unified rate-limit, SMS-bomb guard); Email OTP upgraded to 6-char alphanumeric.

🟡 Pengxiang.Xie — COR-353 India 5th dedicated line 15% · Blocked

Kicked off; machine list handed to ops. Blocked waiting on Yigang to bind the dedicated-line IPs — SpeedyAgent node deploy can't proceed until then. → needs ops follow-up.
Meet workstream in parallel: COR-207 miss-call notification → Ready for Testing; COR-208 2-channel Meet & COR-209 media error-handling & COR-312 server-side filter config → In Development.

QA batch & shipped

22 Platform Terms / website web-bugs → Submit for Review (COR-330–357, on 06-17) — copy, numbering, localisation, links & styling fixes; awaiting QA + PM sign-off to close.
Shipped: COR-313 Released (06-16) — Lucy experiment Configurator MVP Phase 1.

Newly planned (To Do)

OTP trio — COR-263 verify-outcome/abandonment · COR-355 resend/retry · COR-371 OTP cost × early user value.
COR-369 trace_id uniqueness at ingestion (ties to VPQ-286) · COR-368 website automation · COR-370 PN dashboard bug fixes.
On Hold: COR-281 MoEngage push.

Note: only 3 engineering daily-report comments landed this week (COR-329 ×2, COR-353 ×1, all mid-week); Mon/Tue, Fri & weekend had none — narrative is mid-week-weighted.