- Shipped
- September 10, 2026 at 8:57 PM UTC
- Author
- Kamo
- Commit
- 55265cf
OrgLinkHosts is the one rule for the host a link to an organization may name: its own root domain once it is active, ownership-verified and SSL-confirmed **************** else the platform's. The console and theme host serve every org, so internalOrigin/linkRootDomain never answer null; liveRootDomain does, for hosts that only exist on the org's own domain (the borrower portal). Reported: automated Exec2Exec letters to makeitpopsigns.com, sent before its DNS was verified, linked to internal.makeitpopsigns.com, which answered nothing. Nine services each chose an org's domain by a private rule. SystemBugStatusEmail.rootDomain and QuotePresentation.primaryFqdn now use this one; the services follow in their own commits, each with a guard test that refuses a new private rule.