- Ya
- 4 Julai 2026, 14:25 UTC
- Mwandishi
- Kamo
- Ahadi ya
- fe76af3
Owner directive #6: each org configures its own AUS vendor APIs (Fannie DU / Freddie LP / USDA GUS) per mortgage market, in settings→commerce. Foundational data model: AusConnectionConfig (mlos.config, new table mlos_aus_connection_config) — one row per (lender profile, AusKind); since a LenderProfile is one-per-market, keying by lenderProfileId makes these per-market. Reuses the existing AusKind enum (DU/LP/GUS) and VendorCategory.AUS vocabulary rather than inventing new ones. Secret at rest: the API secret is stored ONLY as an AES-256-GCM secretCiphertext (encrypted by PlatformSecretCipher on write, mirroring SocialConnection/ PlatformOAuthClient) and is never in a DTO — reads expose hasCredential instead. clientId/endpointUrl/configJson are non-secret. Unique (profile, aus_kind). Backend write/controller **************** + the kamo-internal AUS-connections tab + i18n + KI (new table) build on this next; the per-market vs org-scoped resolve is a config-spine decision surfaced to the owner.