E5 · Friend request to a nickname

You met someone in an event chat. They're private, so you only know them as DrunkBeaver67. This is how you ask to know them for real — and the only route by which a private account can be reached at all.

Notes — this is a good idea with one sharp edge. The route is right: a private account is unreachable by search or by profile URL, so the nickname in a chat is the only door, and it only opens if the person on the other side opens it. Consent is the whole mechanism.

The sharp edge is correlation. If you send a request to DrunkBeaver67 at one event and SleepyRaven04 at another, and the app ever says "already sent", silently merges them, greys one out, or shows them resolving together — it has just told you the two nicknames are the same person, which is precisely the attack the alias system exists to prevent. Two pending requests to the same profile must therefore look and behave exactly like two requests to two strangers, and acceptance must resolve only the one that was accepted.

Three more rules this flow needs: a blocked sender's request must appear to send and quietly go nowhere; requests-from-events must be rate limited, or a chat becomes a mailing list for whoever wants to spam forty people; and a private user needs a switch to refuse nickname requests entirely. None of these are in the schema yet — this flow adds scope to Phase 5, and that should be a deliberate decision rather than a discovery.