- Shipped
- July 16, 2026 at 6:17 PM UTC
- Author
- Kamo
- Commit
- b63b966
Production tri-merge credit rail. The abstraction now passes the FULL 9-digit SSN (decrypted at order time from the borrower's encrypted record) + co-borrower for a JOINT pull — previously only ssnLast4 was passed, which no bureau accepts. New MISMO-2.4 protocol core (mismo/): CreditVendorProfile + CreditAuthScheme **************** MismoCreditRequestBuilder (individual + joint, full SSN, MeridianLink inline-login block), CreditResponseParser (tolerant score parsing across attribute orderings + bureau normalization + vendor-error detection). AbstractMismoCreditAdapter holds the shared order flow (validate → build → auth → POST with bounded timeouts → parse), config-driven with per-tenant overrides **************** from configJson). Named adapters for the most common mortgage resellers, each encoding its public protocol (auth scheme) with account creds as config: MeridianLink (inline login), Xactus (bearer), Factual Data / CBCInnovis / Credit Plus (basic) + the generic MISMO catch-all. CreditOrderService decrypts the full SSN via SecretCipher, resolves the co-borrower, and orders joint when present. Honest failures only, never a fabricated score. 12 tests green.