- Shipped
- November 14, 2026 at 8:39 PM UTC
- Author
- Kamo
- Commit
- 0e81725
Owner rule (2026-11-14): orgs generate emails from their own domain once verified and DNS-configured; the platform domain only in lieu of it. - OrgEntryDomainResolver no longer walks the securityProvider chain to a reseller's domain; it delegates to OrgLinkHosts.linkRootDomain. That fixes welcome, verification, user-account, member-creation and portal login links. - LeadAssignmentNotifier, OpportunityNotifier, DocNotificationService and TeamMemberActivationNotifier build console links with OrgLinkHosts.internalOrigin and leave the OrgDomainRuleGuardTest exemption list. TeamMemberActivationNotifier used OrgDomains.primaryDomain, which accepted a merely typed-in domain. - QuoteEmailClient and InvoiceDelivery fell back to sign.sign.pink (the Sign Pink tenant) for every org without a live domain; now sign.<platform>. InvoiceDelivery's emailed console link uses OrgLinkHosts too. - The guard now also refuses a ".sign.pink" fallback literal.