Underwriting review read proxy (agency AUS + non-QM internal rules)

Shipped

July 2, 2026 at 10:52 PM UTC

Author

Kamo

Commit

492bd1f

MlosUnderwritingController @ /api/security/mlos/underwriting + MlosUnderwritingClient to MLOSUnderwritingService (/api/underwriting, X-Internal-Auth). Reuses MlosBaseController (operator/org gate, MLOS-named, no LOS right). Injects the operator's own organizationId into the org-scoped reads; the by-id detail/waivers/validations reads fail-closed against cross-org access. configmap: mlos.underwriting.url.