- Shipped
- October 4, 2026 at 8:22 PM UTC
- Author
- Kamo
- Commit
- 4a78486
The PBX policy pull now carries blockedPatterns, the Asterisk extension patterns of the phone server's optional toll-fraud guards. Fetch keeps only an underscore followed by digits and the N, X, Z and . wildcards (at most 40), so nothing from the response can add a priority, an application or a context to the dial plan. RenderPolicy writes them as a third managed context beside the two allow-lists; with every guard off it still defines the context with a pattern no digits match, so the outbound gate's DIALPLAN_EXISTS is always safe. Tick threads the list through PolicyWriter.Apply and logs it on a change. A Kamo that predates the field sends none, which blocks nothing.