- Shipped
- September 9, 2026 at 10:19 PM UTC
- Author
- Kamo
- Commit
- f6d1aa4
`consentedAt` records that somebody ticked a box. 15 U.S.C. § 7001(c) is a list of specific things a consumer must be told BEFORE consenting — the right to paper and any fee, how to withdraw and what that costs them, what the consent covers, how to keep their contact details current, and the hardware and software needed to read AND RETAIN the records. That wording is translated into twenty-two languages and it will be revised, so a certificate produced after a revision would otherwise describe the CURRENT disclosure while the signer had accepted an earlier one, in a language the record does not name. `consent_disclosure_version` and `consent_locale` are written by ESigService at the moment of the first acceptance and never overwritten — re-opening a signing link re-posts consent, and re-dating an old acceptance to whatever wording is current is the one thing these columns exist to prevent. DDL applied by hand on the live cluster (ddl-auto is `none` everywhere): ALTER TABLE esign_envelope_recipients ADD COLUMN IF NOT EXISTS consent_disclosure_version varchar(32); ALTER TABLE esign_envelope_recipients ADD COLUMN IF NOT EXISTS consent_locale varchar(16); Both are nullable, and rows that consented before they existed read as "not recorded" on the certificate rather than being given a version they never saw.