Resolve a document's countersigner inside a transaction

Shipped

November 12, 2026 at 10:15 PM UTC

Author

Kamo

Commit

89ca273

The delivery worker issues envelopes with no transaction open, and a countersigning member's email lives behind a lazy Member.user. Read there it failed to load, emailOf() swallowed that as 'no email', and every countersigned document was refused at delivery with 'has no email address on file' while publish, which runs in a transaction, passed. Found end to end in the test org. The guard's entry points now open a read-only transaction of their own.