Record lead reads and refuse un-auditable exports
HIPAA § 164.312(b) kwa ajili ya huduma ya usalama. Orodha ya viongozi wote Kila kitu kinabadilika na hakuna mabadiliko. Soma yote, kwa hivyo "Nani aliyeangalia ...
Public branded quote/estimate document at /{locale}/q/{token}
The customer-facing surface for the commerce quote system. Server-rendered so the org's branding is in the first paint — an unbranded flash on a commercial docu...
Quote REST surface — staff management and public share links
Staff endpoints at /api/security/commerce/quotes and an unauthenticated resolver at /api/security/public/quotes. QuoteController extends BaseLosController rath...
Quote/estimate domain — entities, pricing engine, share links
Adds a first-class Quote alongside the existing commerce spine. The pre-existing "ServiceQuote" is an Intent plus a JSON blob carrying one offering and one flat...
Egress containment for the avatar resolver, as a CiliumNetworkPolicy
Inaelezea nini 8f6c672 ilirudi, kwa fomu pekee ambayo inafanya kazi hapa. Jaribio la awali lilishindwa kwa sababu mtandao wa wazi hauwezi kuelezea hili. Topolo...
Show a facepile for group conversations
A thread with five people on it was represented by one arbitrary face, which reads as a message from one person. Up to three participants now overlap, so "sever...
Instrument the chain, reap expired entries, record disclosures
Kila njia ya kushindwa katika kipengele hiki ni kimya. Mchezaji wa mpira wa miguu, mfanyakazi Kuweka foleni kila kazi, mtoa huduma ambaye alianza kurudi HTML - ...
Promote an ingested LLPA matrix into adjustments from the console
The ingestion panel could only publish a rate sheet. For an LLPA_MATRIX source document it now shows a "Promote as LLPA adjustments" card: pick the existing rat...
Gateway relay to promote an LLPA matrix into conditional adjustments
**************** gain promote-adjustments, mirroring the promote-rate-sheet relay: god-eligible gate, organizationId server-stamped onto the payload via write()...
Record call recording, voicemail and transcript access
Recording playback left no trace. A recorded call is the densest PHI the platform stores — the unredacted conversation — and "who listened to this call" was una...
Rekodi upatikanaji wa PHI kwenye kila usomaji wa historia ya mazungumzo iliyohifadhiwa ya AI
Wires the shared §164.312(b) spine into the paths that read persisted prompts and completions. The assistant is the module the compliance assessment put OUTSIDE...
Record chat message reads on the endpoints that return bodies
Sending a message left a row; reading one left nothing. Every chat, support and social thread on the platform renders from a handful of endpoints here, and none...
Rekodi upatikanaji wa haraka kwenye njia nne za hati ambazo hazirekodi chochote
/download already logged through **************** and it was the platform's only byte-access injection site. The sibling endpoints serving the exact same bytes ...
Contain egress from the avatar resolver; note the Redis eviction pool
Huduma ya Usalama sasa inaendesha mporaji ambaye URL ya lengo inachaguliwa na wasio waaminifu Chama - rekodi ya BIMI ni maudhui ya DNS yaliyochapishwa na mtu ye...
Onyesha picha za kutuma na mpokeaji
Katika barua yake hiyo ya kujiuzulu, Bi. Kila mstari ulionekana sawa na mzunguko haukuchukua habari. Sasa inaonyesha kuwa Picha halisi ya mwandishi wakati mtu a...
Avatar endpoints; fix unauthenticated reachability and contact tenancy
Adds the mailbox side of sender avatars, and fixes three pre-existing holes this work would otherwise have built on top of. AUTHENTICATION. OTKPreAuthFilter us...
Sender-avatar resolution chain for the mailbox
Resolves a correspondent's email address to a picture, working outward from what Kamo already knows: member photo, then a photo someone attached to a contact, t...
Sender identity model + org-scoped batch email lookups
Backing store and queries for the mailbox sender-avatar chain. SenderIdentityEntity is the durable tier of the avatar cache. org_id is part of the natural key ...
Audit spine for PHI access — §164.312(b)
The Security Rule requires recording access to ePHI, which means reads. The platform records changes well — LeadHistory, SystemAccessLog, UserHistory, LoanAudit...
403 rather than 500 when the compliance boundary refuses
Two call sites of featureService.enableFeature now understand the HIPAA boundary: - /enable maps PhiModuleNotPermittedException to 403 carrying the reason, m...
Kuimarisha mipaka ya kufuata katika kubadili kipengele
Wires PhiTenantGuard into FeatureService, the single choke point through which a module is switched on for an organization. This is where the boundary stops bei...
Auto-assign a MERS-compatible loan number at application creation
LoanFile.loanNumber was null on create (both blank-create and lead-promote) and only ever set when a steward typed one — which hard-blocked MERS MIN minting (a ...
Render signer tarehe katika wakati wa mpokeaji kutatuliwa
SigningSession gains a required `timeZone` (IANA id) that ESigService resolves from the recipient's member zone, then the org's, then UTC. WelcomeScreen now pas...
Resolve signer display timezone from member, then org
Katika hali yoyote ile, mtuhumiwa huyo aliachiwa kwa dhamana. bahasha expiring 2026-08-03T05:00Z inaweza kusoma "Aug 3" kwa saini Pacific Kwa wale ambao tayari ...
Kujenga HANDLES PHI na PHI EFFECTIVE DATE kwenye orgs
Mirrors the two new Organization fields, following the OrgBrandingFieldsMigration convention, so the columns are reproducible on any environment rather than onl...
Endelea kushughulikiaPhi na PhiEffectiveDate kwenye Shirika
Rejea PhiTenantGuard kwa safu halisi. HANDLES PHI sio uongo mkubwa Baada ya yote, <=============================================================================...
PhiTenantGuard and the module compliance boundary
The the the the the the the the the the the the the the the the the the the the the the the the the the the the the the the the ...
Create HANDLES_PHI and PHI_EFFECTIVE_DATE on orgs
Mirrors the two new fields on the Organization entity in kamo-shared-library, following the OrgBrandingFieldsMigration convention. HANDLES_PHI is NOT NULL DEFAU...
Weka sehemu ya saini katika viungo vya kutia saini
Extracts the byte-for-byte duplicated buildSignLink into SignLinkBuilder and adds a locale segment sourced from Organization.language, falling back to English f...
Add the handlesPhi tenant flag and PhiTenantGuard
The keystone of the HIPAA compliance boundary: a per-organization flag plus a guard deciding which modules that organization may reach. Everything downstream ke...
Add language switcher to the signer top bar
Endonym-labelled menu over the 22 supported locales. Preserves the query string on switch — ?t= is the signer's only credential.
Mpangilio wa kioo wa RTL locales kupitia stylis-plugin-rtl
The MUI theme direction alone flips component logic but leaves physical CSS properties untouched, so Arabic rendered with LTR spacing. Swaps the Emotion cache k...
Route the signer under /{locale} with next-intl middleware
Inaongeza i18n/routing.ts (localePrefix daima), i18n/navigation.ts, na middleware.ts, na hatua mti njia chini ya src/app/[locale]/ ombi.ts sasa kutatua kutoka U...
Blink the mail icon while an unread indicator is showing
The unread badge alone was easy to miss in the top bar. NavItemButton gains a blinkIcon prop that pulses the icon (and its badge) — kept distinct from the exist...
Starter Imefungwa na Watumiaji wa 5, Biashara katika 25
Repositions the published seat caps on /pricing (and the calculator, JSON-LD offers, and llms.txt summaries) to match the subscription catalog: Starter 25 -> 5 ...
Clarify MeridianLink market secret is the inbound-sync service credential (per-LO logins on member profile)
MeridianLink loan-officer credential card on member profile + lead-button LO pre-warn
Phase L3 of the MeridianLink LOS loan-officer mapping (per §3.4-3.6 of the design spec): - New member-scoped LOS-credential proxy **************** and type...
LO-scoped kuunda (kuzuia ikiwa unmapped) + mwanachama MeridianLink credential API + soko-config LO hali ya kiungo
Awamu ya L2 ya mpango wa ramani wa MeridianLink (kamo-internal Design) Kwa mfano, *** §3.3-3.6), kujengwa juu ya L1 pamoja-lib schema / resolver (MarketLosUserC...
Per-member MeridianLink credential (MarketLosUserCredential) + resolveForMember + LO-scoped outbound push
Bulk Email campaigns UI — grid, editor, provider tab, leads action
Adds the org-level bulk email marketing surface under /marketing/email: - Bulk Email tab (after Social Media) + campaigns AG Grid workspace with live status/s...
Bulk-email recipient resolution + department contact fields
- **************** POST /api/security/marketing-email/ recipients/resolve turns lead/account/application IDs into email recipients. Gated on MANAGE_BULK_EMA...
Shared-lib support for bulk-email recipient resolution + company contact email
- **************** contactEmail branch (company contact email editable via PUT /api/security/org, used as company-scope campaign From) - ApplicationRepository...
Bulk email campaign backend — provider, dispatcher, compliance, realtime
Backend for org-level bulk email campaigns, entirely separate from the everyday email provider so it can't be throttled/blocklisted alongside business mail: - ...
ECOA /FCRA taarifa ya kuchukua hatua + wakati wa kuridhisha
The issuance mechanism's shared-lib half. ComplianceTimerService gains **************** — flips only ARMED ECOA_AA timers to SATISFIED (leaves COUNTEROFFER/INCO...
Add Master Machine remote-desktop launcher (god-gated)
Tatu-click desktop karibu na Linux / Windows: navRegistry kuingia (ComputerIcon), 'bwana' lengo kwa njia ya waziKamoDesktop + njia ya wakala wa SSO, na kupeleka...
Add "master" target for Master Machine SSO deep-link
kujengaAutoConnectUrl sasa mints Master Machine uhusiano (KAMO GUAC MASTER HOSTNAME, default 192.168.4.46); ni pamoja na katika kila ishara kwa ajili ya matumiz...
Kuongeza "Master Machine" (kamo-dev-1) RDP kifaa kwa Guacamole
Local Kubuntu workstation shares its live Plasma/Wayland session over RDP via KRdp. Adds an idempotent bootstrap SQL connection (192.168.4.46:3389, sage/shared ...
Mashirika ya kampeni ya wingi wa barua pepe + idara / mashirika ya kuwasiliana
Adds the shared-library foundation for org-level bulk email campaigns: - OrgBulkEmailProviderEntity (separate from everyday provider; UNIQUE org_id) - EmailCamp...
STEWARD_TASK_ROUTED canonical template
The routed-decision steward notification needs a canonical email template. Registers STEWARD_TASK_ROUTED in CANONICAL_KEYS with its json/html pair; body carries...
Je, unaona nini kuhusu usafiri?
Kila moja ya hizi updates ardhi katika nafasi yako ya kazi moja kwa moja. Kuanza bure na kuangalia kukua wiki baada ya wiki.