- Shipped
- August 6, 2026 at 9:20 PM UTC
- Author
- kamo
- Commit
- c3f3214
Both surfaces go through the LEGAL endpoints, keyed on the assignment, not /api/imaging/download/{imgId}: that path additionally needs organization.isDocs and VIEW_DOCUMENTS and checks a session security level baked in at login, and design §8 is explicit that DocManager is the convenience copy and not the access path. executedImgId stays the presence signal — the action is ABSENT, not disabled, while nothing has been filed, because a Download button that 404s reads as a lost document. assignmentStatusKey stops mapping EXECUTION_INCOMPLETE to common.states.incomplete, which is semantically INVERTED in pt. It has been harmless because nothing in the platform has ever written that status; Phase 6 is the first thing that can, and a Portuguese member would have read "complete" over a package with no artifact behind it, on their own employment record. The file name is built from data and sanitised: a package title is free text an HR admin typed, and it reaches both a Content-Disposition header and the user's filesystem, where "/" makes a path and a quote terminates the header.