Protect response continuity while preventing replay, duplicates, and lost updates.
Overview
Protect response continuity while preventing replay, duplicates, and lost updates.
Key points
- Resume tokens are stored for the matching public key.
- Save and submit include expected response version.
- Conflicts can return currentVersion and server data.
- Idempotency keys identify a logical save, submit, or invitation send.
- Tokens and keys must be scoped, expired, and excluded from logs.
Recommended procedure
- Classify the survey data and identity requirements.
- Choose the least permissive distribution and access model that meets the need.
- Protect links, tokens, exports, and integration secrets.
- Audit administrative actions and test isolation, retention, and recovery.
Troubleshooting
Sensitive data is exposed
Disable or rotate affected access, preserve evidence, and follow the incident procedure.
The policy is unclear
Keep the article in draft until product, engineering, security, and legal approve the contract.