- Ya
- 16 Julai 2026, 17:15 UTC
- Mwandishi
- Kamo
- Ahadi ya
- 2af868b
Adds POST **************** — the steward "Run AUS" trigger the read-only underwriting console lacked. Gated on operator (GD); the organizationId and acting member are SERVER-STAMPED from the session (never trusted from the client), and MLOSUnderwritingService re-validates the loan belongs to that org (fail-closed cross-org). Facts are server-derived downstream (DTI via LoanQualifyingRatioService, structural via ScenarioFactDeriver); the caller may still pass a fico/fresh-credit attestation. Nothing triggered a live AUS run before this — the run endpoints had zero callers.