- Shipped
- July 17, 2026 at 2:11 PM UTC
- Author
- Kamo
- Commit
- e97de52
Catalog was the ONLY MLOS bounded context with no SecurityService gateway, so a tenant's catalog could never be authored/seeded from the console and BorrowerQuoteService returned NO_CATALOG for every real org (pricing stage dead). New MlosCatalogClient + MlosCatalogController (/api/security/mlos/catalog) proxy the catalog reads **************** + the version-spine writers (priceable-bundle seed, **************** publish, bulletin). org is SERVER-STAMPED onto every write from the operator session (a client-supplied org is overwritten); god-eligible steward gate. configmap: mlos.catalog.url.