Stripe APP account request flow matrix — 4 cases by email verification and account existence

Stripe Projects account request flow — 4 cases by email verification × account existence: (1) Verified+existing: issue token. (2) Verified+new: auto-create user+org. (3) Unverified+existing: cache with TTL, return requires_auth. (4) Unverified+new: error. Auth: ApiToken named [Stripe Projects] <org_name> with scoping_organization_id. Resource IDs type-prefixed (project:<id>, plan:<org_id>, seer:<org_id>); parse_resource_id() splits on :. kyc.verified_fields must contain "email". Token refresh via hashed_refresh_token lookup. Primary identity: OrganizationOption["stripe_projects:account_id"] = "acct_xxx" (immutable). Fast path: scan actor's orgs. Fallback: BillingDetails.billing_email partial index. Actor role on auto-add: admin. Use actor.email (initiating user) not top-level email. First-linker: discover org via billing_email → claim via OrganizationOption → add actor as admin.