- Shipped
- August 5, 2026 at 1:17 AM UTC
- Author
- Kamo
- Commit
- efc3ce3
A price is only as trustworthy as the sheet it was assembled from, and nothing on the pricing path carried that signal: confidence existed ONLY on pre-promotion staging rows (MlosExtractedCandidate) that no production code read. **************** is the WEAKEST per-field confidence across the approved candidates promoted into the version -- minimum, never mean. A sheet of 200 clean cells and one 0.20 misread averages to 0.996 and would clear any threshold, while that one cell is the one that misprices a loan. Null means NO SIGNAL (hand-authored, or promoted before the column existed) and consumers must refuse to auto-approve on it; reading absent as good is how an unverified price goes out unreviewed. WORM-protected like the other priceable columns -- snapshotted in @PostLoad and diffed in @PreUpdate, or it would be a silently mutable hole in the audit chain. MlosPricingSignoff gains automated / basis_confidence / threshold_applied. Without them a machine approval is indistinguishable from a human one except by a member id, which on the money path is an audit defect. The threshold is stored beside the value because configuration moves: 'confidence was 0.72' cannot be judged later without knowing whether the bar that day was 0.70 or 0.90. Columns applied to prod CockroachDB via KamoInitializer.