Signing and document-manager links only name a live domain

Shipped

September 10, 2026 at 8:59 PM UTC

Author

Kamo

Commit

3cdb9f4

**************** settled for any active root domain, so an org still setting up its domain had signing links mailed to sign.<that domain>, which answered nothing. It now uses OrgLinkHosts.liveRootDomain; null falls back to the shared signer host, as it already did for an org with no domain. The document-manager link uses OrgLinkHosts.internalOrigin and is never blank. Guard test added.