- Shipped
- August 26, 2026 at 4:50 PM UTC
- Author
- kamo
- Commit
- 4d2855f
Two compliance queues that were recorded server-side and never shown. UNRECOGNISED CALLERS. Every inbound exchange request that could not be attributed to a partner is kept rather than dropped, because a partner whose credential has gone stale and somebody probing the endpoint look identical until a human reads them. Toned critical with zero as the expected value, and the empty state says so — otherwise an empty list reads as a feature that is not working rather than as the answer you want. PART 2 DISCLOSURES, on their own. 42 CFR Part 2 is a separate obligation from HIPAA: its own consent rules, its own three-year accounting, its own penalties. Mixing it into the general disclosure list would make the separate obligation invisible, which is the whole reason the responder tracks it separately in the first place.