- Shipped
- November 12, 2026 at 6:52 PM UTC
- Author
- Kamo
- Commit
- 93e7bf1
POST /leads/{id}/ssn/reveal and **************** The caller needs VIEW_FULL_SSN and the same standing on the lead as for its contact details; the password is checked for every reveal against the shared re-check limiter (5 wrong per session per 15 min); the number is decrypted only for that response, which is no-store. Every reveal and every refusal is written to the access log, never the number. The key reaches SecurityService from the lead-pii-enc-key secret. Also teaches the external-audience mask test the new BigDecimal field.