Centralize account-name validation into a shared module; apply to all creation paths
Escape Beancount strings at the add_account writer boundary, not just the metadata-value branch
Re-adding an existing-but-unsynced account returns 409 before the DB sync, leaving it un-mirrored
Per-user accounts still currency-constrained to EUR/SATS/USD — CAD/GBP/JPY bean-check errors persist
add_account duplicate-detection regex isn't anchored → false 409s and silent double-writes
S0 — Seed-URL pairing + ATM keypair separation
Correction 2026-06-16 — ATM self-signs (path B), not sign-as-operator; model = per-ATM bunker key (A1)
S7 — Consume LNbits sidecar bunker (was: NIP-46 bunker option)
Status 2026-06-16 — bunker primitives shipped; API + naming
S0 — Seed-URL pairing + ATM keypair separation