God is never blocked - GD alone passes every e-sign gate, audited in tenant orgs

Shipped

November 15, 2026 at 5:19 AM UTC

Author

Kamo

Commit

9ad8a1c

The four rights gates (templates, envelopes, signature requests, the HR right set on employment offers) pass the caller's own GD session; a GD session reads at PRIVILEGED clearance. A tenant-org pass is logged as [GOD-AUDIT] once per gate per request (EsigService has no durable PHI writer); platform org = KAMO_PLATFORM_ORG_ID, default the production platform org, no lookup. Never throws.