- Shipped
- July 18, 2026 at 5:58 PM UTC
- Author
- Kamo
- Commit
- 01609bc
MLOSIngestionService had no gateway presence, so no tenant could hand a rate sheet to the extractor and the candidates it stages had no reader on any reachable surface. Adds **************** at /api/security/mlos/ingestion: multipart rate-sheet ingest relay plus the two staging reads (a source document's candidates, an investor's intake history). organizationId is SERVER-STAMPED from the operator session on every call, so a steward only ever touches their own tenant's staging area. Read timeout is 120s — a parse is CPU work, not a lookup. imgDatId stays required: it is the content-addressed provenance anchor and the intake-dedup key, so the blob is stored through the imaging pipeline first.