- Shipped
- November 13, 2026 at 4:42 AM UTC
- Author
- Kamo
- Commit
- b6bf73b
A design field may carry an optional autofill key naming an attribute of the signing member's profile (legalName, firstName, lastName, email, phone, addressLine, city, state, zip, cityStateZip, fullAddress, dateOfBirth, title, company). Identity field types bind by default (full_name -> legalName, ...); 'none' opts out. Signatures, initials, signature dates and read-only fields are never bound. At session build a member-bound recipient's bound fields are prefilled from the CURRENT profile (editable), unless a prior answer already prefills them. The session says which fields are bound (profileAutofill) and which were filled (profileFilledFieldIds). The signing LINK never carries phone, address or date of birth; the staff-authenticated member surface does. New GET **************** re-reads the bound values after the member corrects their profile in place. No values are logged.