From 0bfb1ff1deda79ddd1890f2aa861d32cbb35f7b3 Mon Sep 17 00:00:00 2001
From: "muling.cs" <muling.cs@alibaba-inc.com>
Date: Mon, 24 Aug 2026 18:11:07 +0800
Subject: [PATCH] chore: add release fragment for legacy global slot recovery

---
 .changes/legacy-global-slot-recovery.md | 5 +++++
 1 file changed, 5 insertions(+)
 create mode 100644 .changes/legacy-global-slot-recovery.md

diff --git a/.changes/legacy-global-slot-recovery.md b/.changes/legacy-global-slot-recovery.md
new file mode 100644
index 00000000..daaf9dab
--- /dev/null
+++ b/.changes/legacy-global-slot-recovery.md
@@ -0,0 +1,5 @@
+---
+category: Fixed
+---
+
+- **Legacy global slot recovery** — recovers a rejected identity refresh from the legacy global keychain slot when the organization mirror is absent, with strict corp/user matching so blank-user legacy tokens only recover for single-account organizations.