Skip to content

feat: Add 2 more well-known values (stable user ID & location) to signals for abuse prevention#596

Open
jingyli wants to merge 1 commit into
Universal-Commerce-Protocol:mainfrom
jingyli:feat-risk-signals
Open

feat: Add 2 more well-known values (stable user ID & location) to signals for abuse prevention#596
jingyli wants to merge 1 commit into
Universal-Commerce-Protocol:mainfrom
jingyli:feat-risk-signals

Conversation

@jingyli

@jingyli jingyli commented Jul 16, 2026

Copy link
Copy Markdown
Contributor

Description

Add 2 more well-known values to signals.json to help with abuse prevention.

  • dev.ucp.user_id: identifier representing the end-user that remains stable across multiple sessions
  • dev.ucp.user_location: address location of the end-user that is detected by the platform (may differ from contextual hints and/or billing/shipping address)

Propose to add them under UCP's namespace as these are common, generic first-class signals instead of vendor specific.

Category (Required)

Please select one or more categories that apply to this change.

  • Core Protocol: Changes to the base communication layer, global context, or breaking refactors. (Requires Technical Council approval)
  • Governance/Contributing: Updates to GOVERNANCE.md, CONTRIBUTING.md, or CODEOWNERS. (Requires Governance Council approval)
  • Capability: New schemas (Discovery, Cart, etc.) or extensions. (Requires Maintainer approval)
  • Documentation: Updates to README, or documentations regarding schema or capabilities. (Requires Maintainer approval)
  • Infrastructure: CI/CD, Linters, or build scripts. (Requires DevOps Maintainer approval)
  • Maintenance: Version bumps, lockfile updates, or minor bug fixes. (Requires DevOps Maintainer approval)
  • SDK: Language-specific SDK updates and releases. (Requires DevOps Maintainer approval)
  • Samples / Conformance: Maintaining samples and the conformance suite. (Requires Maintainer approval)
  • UCP Schema: Changes to the ucp-schema tool (resolver, linter, validator). (Requires Maintainer approval)
  • Community Health (.github): Updates to templates, workflows, or org-level configs. (Requires DevOps Maintainer approval)

Checklist

  • I have followed the Contributing Guide (including Conventional Commits title requirements and ! for breaking changes).
  • I have updated the documentation (if applicable).
  • My changes pass all local linting and formatting checks.
  • I have added tests that prove my fix is effective or that my feature works.
  • New and existing unit tests pass locally with my changes.
  • (For Core/Capability) I have included/updated the relevant JSON schemas.
  • I have regenerated Python Pydantic models by running generate_models.sh under python_sdk.

@damaz91 damaz91 added status:needs-triage Signal that the PR is ready for human triage gov:needs-gc-review and removed status:needs-triage Signal that the PR is ready for human triage labels Jul 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants