- Shipped
- 17 ஜூலை, 2026 அன்று 6:05 PM UTC
- Author
- Kamo
- Commit
- 49a7bbc
Uploaded vault documents (pay stub / Gov ID / bank statement) were write-only: the generic imaging byte endpoints refuse ACCOUNT_MEMBER_VAULT (per-party PII lockdown), so a steward accepted/rejected a requirement without ever opening the doc, and a borrower couldn't re-view a submission. New authz'd byte endpoint GET **************** mirrors the extract guard: requirePartyAccess (owning member OR an LOS right) + a document-belongs-to-this-party confused-deputy check, then serves bytes IN-PROCESS via VaultDocLoader (MinIO) — so the per-party gate IS the PII compartment, not the CONFIDENTIAL clearance level (which would fail even for the owner). ?download=true attaches; default inline. Closes the residual noted in ****************