LiveRamp per DEC-9: Custom ID, enablement and checks on Fastly and Axum #1601

Summary

LiveRamp per DEC-9: set the Custom ID, enable LiveRamp, and pass the provider and mirror checks with it on Fastly and Axum.

Part of #1558, server-side identity on every adapter. Plan ID T22, planned in wave 9 (MVP: Fastly and Axum); priority P1, size S. Design: spec; order and dependencies: plan.

Requirements

ID-4 Providers on every supported adapter

Lookups start at navigation alongside the origin fetch, share one deadline, and are awaited before finalization, so their IDs reach the record and the cookies of the same document response. A page load writes the record once.

WB-4 Mirror cookie

__Host-ts-eids-mirror as in #1489: opt-in per partner (DEC-10), dropped per vendor when TCF consent is denied, needs bidstream_enabled and Purpose 4, 3,584-byte budget, host-only. Every mirrored ID expires within 30 days.

Current state

What the code does today, from the design's survey at the revisions it names:

• WB-4: in Mirror provider EIDs to a cookie and run pull sync as an identity provider #1489 such an ID never expires (Expiry::Never); closed Add server-side identity providers for six vendors #1461 capped mirrored IDs at 24 hours.

Acceptance criteria

• ID-4: A mock provider that answers within the deadline has its ID in the record and in the mirror cookie of that navigation's response
• ID-4: One that misses the deadline is skipped and does not delay the response past it
• WB-4: An ID written with no stated expiry is mirrored with an expiry of at most 30 days

Dependencies

Blocked by:

• Providers in the shared app, awaited before finalization #1591 Providers in the shared app, awaited before finalization (new in this plan)
• Identity features pass on Axum from the shared app #1581 Identity features pass on Axum from the shared app (new in this plan)
• PR Add identity providers for ID5, LiveIntent, LiveRamp, ConnectID and UID2 #1488 Add identity providers for ID5, LiveIntent, LiveRamp, ConnectID and UID2

Waits on these decisions:

• DEC-9 LiveRamp Custom ID (open). The current value is the IP-derived EC prefix, shared by everyone behind one IP. Blocks T22, which sets the Custom ID, enables LiveRamp and checks it before launch because LiveRamp is in the MVP (DEC-10), and Write a spec on non-browser dependent Liveramp sync (s2s API) #1245.

Related pull requests

• Add identity providers for ID5, LiveIntent, LiveRamp, ConnectID and UID2 #1488 Add identity providers for ID5, LiveIntent, LiveRamp, ConnectID and UID2: must merge first.

  Fixes the plan asks of Add identity providers for ID5, LiveIntent, LiveRamp, ConnectID and UID2 #1488

  Take Run server-side identity collection on the Axum dev server #1566's 0a2a00aaf, which reads the SharedID name from managed_user_ids, defaults the source to pubcid.org and keeps the stored value (still open here: sharedid.rs:46-59, common.rs:94,110,129-136). Take 0c13d4272: the blanket reject_providers_without_a_kind (config.rs:348) makes ts config validate, push and diff reject every enabled provider. SID-6 holds for the provider path. LiveRamp's Custom ID waits on DEC-9, which gates enabling LiveRamp, not this merge. Answer its open threads.