The Identity lane: "We already know you" (Arrival board)

The Identity lane on the Arrival board surfaces signals that Turtini already knows about you — records from other orgs that reference your verified email, pending account-merge candidates, and identities you've already linked. It only appears if there's actual signal; brand-new users to the platform don't see an empty box.

What it surfaces:

• **Peer-org contacts** — other orgs that have you (your email) in their contacts list. "3 orgs have you in their contacts — Joe's Coffee, Riverside Suppliers, Hillside Catering." This uses a server-side collectionGroup query across every org's contacts subcollection, so you see records you couldn't otherwise read.

• **Pending account-merge candidates** — if Turtini's daily merge-candidate scan flagged that a different account on the platform shares a verified email with you, you'll see "Pending merge with [email protected] — we'll fold those into your account." When you complete the new org's Create step and sign back in, the merge continuation flow auto-issues a custom token that lands you on the surviving account with the absorbed account's personal data preserved.

• **Linked identities count** — if you've already verified additional emails or phones into your identity graph (via Account → Personal email, or the phone-verify flow), you'll see "{N} identities are already linked to you" as a passive reassurance.

Why this matters:

Most platforms make you re-key the same data over and over — your name, your email, your business address — at every vendor you do business with. Turtini's identity graph (users/{uid}.identities[]) means once any org adds you as a contact and you later sign up yourself, the system already knows you. The new org you're about to create can grant permission to surface those records in your Personal context (the /me lens) without copying anything. Permissions over copies.

Privacy:

The lane shows org NAMES, never record contents. "Joe's Coffee has you in their contacts" is fine; "Joe's Coffee owes you $43.50" would be too much. Cross-org record contents stay invisible until you grant explicit permission post-create (or the other org grants you permission, depending on direction).

When the lane is silent:

• You're a brand-new user with no platform history → no signal, lane hidden.
• Other orgs that reference you used a different email than the one you signed in with → the collectionGroup query won't match. Verify additional personal emails from Account → Personal email to widen the graph.

Future enhancements (not in V1):

The current lane shows aggregate counts + 3 sample org names. A follow-on will let you click each sample to see what fields the other org has on file (read-only preview), with a "Request consolidation" CTA that fires a permission request to that org. See "Personal Vault" for the broader fiduciary picture.