[New] Account: No public profile activity API / vanity-URL or profile SEO controls beyond username

Area: Account & identity (audit phase 1) · Surface: Account & identity — profile presentation · Dimension: competitor-gap · Severity: cosmetic

This is a minor polish gap rather than a hole — our profiles are already rich (cover image, link-in-bio, badges, achievements, karma, tabbed activity, verified badge). Competitors like LearnWorlds/Thinkific (instructor profiles) and Mighty (creator pages) let a profile owner set a custom OG image/description for sharing and a stable vanity slug independent of the login handle. Worth noting only as a forward-looking enhancement, not a defect.

Evidence

Profiles are addressable only by /profile/{username} (routes.php profile routes; ProfileController@showProfile). Changing the handle costs credits (ProfileController.php:661 `CreditLedger::changeUsername`). profile_links (schema.sql longtext, ProfileController.php:728-741) gives link-in-bio, but there is no separate display-name vanity slug, no per-profile meta-description/OG control, and no 'feature this profile' option. Tabs are timeline/posts/comments/saved/awards (ProfileController.php:215).

Suggested fix. Optional: allow an OG/share image + description override on the profile edit page, and decouple a public vanity slug from the credit-gated username so sharing a profile produces a branded card.

Filed by the automated tenant-app audit (phase 1) and adversarially evidence-verified. Status: verified. Open — not yet actioned.