- Ya
- 17 Julai 2026, 19:29 UTC
- Mwandishi
- Kamo
- Ahadi ya
- 17f52eb
Completes the doc-review byte path started with the vault viewer. LOAN-collection imgs (appraisal/title/flood) are refused by the generic imaging endpoints (per-loan PII lockdown), so a steward reviewing a third-party satisfier could not open it. New GET **************** gated on an LOS operator (LOS_VIEW_PIPELINE) OR a member who is a party to this loan's application, and confused-deputy anchored by LoanDocLoader's assocObjectId==loanFileUid check (a LOAN img carries its owning loan in assocObjectId). Bytes stream in-process from the imaging-loans bucket, so the loan-file gate IS the compartment (not the CONFIDENTIAL clearance). ?download=true attaches; default inline. Closes the LOAN-side residual of ****************