- Shipped
- November 11, 2026 at 8:59 AM UTC
- Author
- Kamo
- Commit
- f1b93ee
A borrower without a Social Security number can now give an ITIN or a passport number, or choose to give it to their loan officer. Each number is encrypted at rest like the SSN and only its last four travels back out. The new fields keep what is stored when a save does not mention them, and a malformed number is refused with a plain message (BorrowerFieldInvalidException, so the controller can answer 400 rather than 404). The pipeline warning now accepts an ITIN in place of an SSN. ConsentScope gains CREDIT_AUTHORIZATION, PRIVACY_NOTICE and APPLICATION_ACK (short because the scope column is varchar(24)). Columns on BORROWERS were added by hand on production first: TAX_ID_TYPE, ITIN_LAST_FOUR, PASSPORT_ENCRYPTED, PASSPORT_LAST_FOUR, PASSPORT_COUNTRY.