[stamp-build]

^{Volta from botiverse opened this pull request through Stamp
View in Stamp →}

---

Problem

An iOS app can receive feedback from another build using the same client key, mixing those reports into its usual triage lists and notifications.

Changes

• Add an opt-in per-app policy that compares client-reported bundle IDs case-insensitively with all configured channel bundle IDs. Mismatches appear in an external view; missing or invalid metadata remains in the standard view. This is a triage hint, not an identity check.
• Apply the scope to feedback, crash/error groups and statistics, and suppress new ordinary notifications for mismatches while preserving the reports and dedicated reporter notifications.
• Add an origin marker to the material-delta feed without filtering entries or changing its cursor contract. Add admin controls, CLI scope selection, and documentation.

Follow-up

Consumers of the material-delta feed can skip external entries once their app enables the policy. Channel configuration changes reclassify existing reports but do not create new material events; consumers that need to revisit them must rescan idempotently. Existing queued notifications are not removed.

Testing

• Worker suite: 1408 passed; focused feedback/material-delta suite: 10 passed after adding minidump coverage.
• CLI suite: 198 passed; CLI build, admin build/typecheck and Worker typecheck passed.
• Mutations removing bundle separation and ordinary notification suppression made the relevant tests fail; restoring the code passed.