- Shipped
- September 10, 2026 at 6:27 AM UTC
- Author
- Kamo
- Commit
- 40977f3
The greeting the platform sends first over Exec2Exec, on the platform config singleton where every other platform-wide setting already lives. Two new endpoints rather than two more keys on /system-config, and that is the whole point of the change: the singleton's GET has no per-field filter at all — refuseUnauthorizedFields governs the write only — so admitting PLATFORM_GENERAL to its any-of gate would hand every General operator the KamoPBX base URL, master account id, account name, administrator user, realm and WSS endpoint, plus the extraction model id. One text field they are entitled to, in exchange for the other two tabs. Blank saves as null: not configured and configured-to-nothing are the same instruction, and Back Fill is a no-op in that state. The right itself is enforced in MediaService, where the conversations are, so PlatformRightCoverageTest records it under ENFORCED_ELSEWHERE with the file that holds the gate.