- Shipped
- July 18, 2026 at 5:48 PM UTC
- Author
- Kamo
- Commit
- 20b052a
MLOSIdentifierService had no gateway, so the typed identifier plane (the routing gate every inbound vendor/agency/AUS/e-sign callback uses) was unreachable from the console. New MlosIdentifierClient + MlosIdentifierController **************** resolve an external number, and read a loan's identifier ledger + lifecycle events. Tenant isolation: the per-loan reads pass the operator's own org as the doc-11 §6.5 cross-org guard; /resolve carries no org downstream, so a resolution landing in ANOTHER org is reported as UNRESOLVED here rather than leaking that the number exists. god-eligible steward gate. configmap: mlos.identifier.url.