APR beside a locked rate, an explicit clear for "I'm Not Sure", the lender's consent wording, and team photos that load on any portal domain
- Workspace rate lock: when the loan officer recorded an APR on the pricing snapshot behind a loan-desk lock with the SAME rate, the posture carries it as a...
Co-borrower requests and phone capture links, borrower saves as true PATCH, and document readings that say which page they came from
- MicroActionService + PortalMicroActionController (/portal/micro/{token}): a signed, single-use link. A request to the other borrower (confirm income, check ...
Void Invoice, Email Receipt, and a retail order's Invoice tab
RecordInvoiceController is the Invoice tab's door for any record - list, Create Invoice, read, PDF, Record Payment, Void Invoice, delivery, send, link - with on...
Borrower consents are recorded as evidence, submit needs them, and each signer opens only their own link
A borrower now gives five consents in the portal, each its own versioned text per lender (default v1 seeded with its hash on first touch, a lender overrides wit...
The borrower's workspace knows their loan team, lock, rate watch and what happened
A new /mortgage-apps/{uid}/workspace surface for the MLOS borrower portal, gated like the application's own reads (staff who see the loan, or a party to it): - ...
A borrower's own "text me updates" tick records SMS consent on their lead
The borrower portal's save-my-spot form now offers an optional text-message consent checkbox. When the borrower ticks it and gives a phone number, the lead gets...
Email a work order's invoice, and its customer link on the signer's invoice page
The public "view your invoice online" page already exists for subscription invoices: the signer app's sign.<org domain>/<locale>/i/<token>, branded, phone-ready...
The lender names its borrower guide, and the portal can Talk It Through (SI)
Owner decisions 2026-11-11 (KamoMLOS borrower-portal overhaul, stream S5). Borrower guide (one per lender): - BorrowerGuideService stores the guide's name, gre...
Org marketing websites — member, platform, edge and webhook APIs
- **************** site, preview pass, change requests (+ pictures), cancel, source.zip (Forgejo archive streamed, audited), get-a-website lead, connect-www (...
POS grace periods, My Bill core plan + every subscription, bank payments
- GET/PUT **************** (seller's MANAGE_SUBSCRIPTIONS): opt-in grace period, OFF by default; the hourly billing job stops service when a deadline passes...
The relay stamps who is god and who is Kamo's CDO, and relays the Kamo share paths
Scheduled online store sync, Sync Now in the background, honest connection test
- RetailStoreSyncScheduler: every 5 minutes, under the singleton lock (one pod), syncs each active store connection whose own interval (15 minutes to a day) h...
A work order's invoice — create it, read it, open its PDF, record payments
ServiceJobInvoiceController, under **************** relays to InvoicingService's CommerceInvoice (issue-from-job, payments, PDF). Rights are the work order's: c...
Accept Result for a vendor order whose result the lender's switch kept off the loan
POST **************** any mortgage write right and sight of the loan; org and the deciding human (behind enter-as) from the session; this loan's order only. Ung...
Purchase request notices travel under their own kinds
A request sent for approval is raised as PURCHASE_REQUEST_SUBMITTED and its answer as PURCHASE_REQUEST_DECIDED (kamo-shared-library 6a765c18, gated in emailserv...
A person clears or confirms a vendor finding; the DMDC SCRA file exchange, audited
- **************** (Compliance Command Center or Financial Complexity Workbench): the screen's steward tasks with each vendor finding's evidence, filed report...
Administrator templates offer the Antivirus rights; platform status shows baseline-scan progress
ADMIN_TEMPLATE_DEFAULT_GRANTS gains VIEW_ANTIVIRUS, MANAGE_ANTIVIRUS_POLICY, ANTIVIRUS_WIDGET, _ADDED, _OPTIONAL and _MOVABLE (703-707 minus _REQUIRED: a member...
The borrower links their bank or payroll with the lender's Plaid, Finicity or Truv
Lender-side asset and income orders ride the borrower's own portal Connection, but nothing ever wrote one a vendor could use. A borrower-link SPI (one bean per ...
Seed Manage Compliance Requirements; announce member activation for the engine
MANAGE_COMPLIANCE_REQUIREMENTS (701) seeds from MANAGE_LEGAL_AND_COMPLIANCE; OVERRIDE_COMPLIANCE_GATE (702) deliberately unseeded (owner implicit). TeamMemberAc...
DocuSign Connect carries the org in its path and verifies that org's key first
The Connect address is public on the shared API host, which cannot tell orgs apart, so envelopes now send **************** (shared-lib VendorWebhookUrls). The l...
Provider connections carry their webhook address, setup and signing field
From VendorWebhookUrls: webhookUrl (null when the vendor sends no updates), webhookSetup (LENDER_ENTERS / SENT_BY_KAMO) and webhookSigningFieldId, so the Partne...
Stock endpoints read and write the one stock count; market customers are scoped
- /{marketId}/inventory (settings) and /api/security/pos/inventory (pipeline Stock view) both go through StockService: org-scoped market list in one statement...
Second write-only secrets; DocuSign Connect key stored encrypted
- CONFIG_SECRET catalog fields are encrypted into configJson on save, kept when left blank, never echoed: the list view and every change-log snapshot strip ...
Credit resellers on MISMO 2.4 with Test Connection; an eSign SPI with DocuSign and DocMagic eSign
Credit (mortgage/credit): - Every catalogued reseller (Xactus, Credit Plus, MeridianLink, CBC Innovis, Factual Data) now sends the MISMO 2.4 credit request th...
Relay every pricing engine's quote, not only Kamo's native one
The borrower pricing quote returned EXTERNAL_VENDOR_PENDING for any PRICING_PPE engine other than Kamo's own. MLOSPricingService now dispatches to the org's eng...
Catalog-driven provider connections, primary vendor, Test Connection
- GET **************** every vendor category, its owning runtime and the vendors a lender can connect, with their forms. - Creating/updating a connection vali...
Turn on scanning of SecurityService's uploads — kamowsantivirus is 2/2 Ready
Market-scoped orders, customers, carts, drafts and shipments; cart and draft conversion
- GET /pos/orders takes ?marketId=; GET /pos/orders/customers lists a Retail market's customers from its orders, with walk-in sales counted apart. - Carts, dr...
Market-scoped work orders and subscriptions; dispatch and customer endpoints
- GET **************** lists one market's work orders (plus those with no market) - PUT /service-jobs/{uid}/customer files a job under an account or takes it ...
ProcurementController — market-filtered lists, change/reject/withdraw a request, send/receive/close/cancel a vendor order, records returned from every change
- purchase requests and vendor orders move out of POSController into ProcurementController (MANAGE_PROCUREMENT to buy and run orders, APPROVE_PURCHASE_REQUEST...
The Antivirus API, platform controls and scheduled endpoints; gate SecurityService's own file paths
/api/antivirus/** (and the /api/security/antivirus twin the console proxy tries first): overview, detections, settings (audited ANTIVIRUS_POLICY_CHANGE), false ...
Rental steps, market-filtered lists, and a renter that can move but never be cleared
- GET /rental-requests and /bookings take ?marketId (the caller's own market) and filter by the engagement's market. - POST /rental-requests/{id}/cancel, PUT ...
Each Orders row names its own market
Rows carry marketId / marketTitle from their engagement (one query by engagement uid), so an organization with two Retail markets sees which one an order came f...
List rental and procurement records on an account's Orders tab
Rental requests, bookings, purchase requests and vendor orders now reach an account through their engagement, so the Orders list includes them (Access Commerce,...
Where each personality style is used in the organization (SIS7)
GET **************** answers {usage: {ref: {count, places[{level, id}]}}}: every layer of the caller's org whose own job description chooses a style, built-in o...
The Super Intelligence Setup Journey latch (SIS6)
GET **************** (anyone with a Super Intelligence settings right, or the owner) and PUT .../si-journey/complete (MANAGE_AI_SETTINGS, MANAGE_AI_WORKFORCE or...
The account page's Orders, Mortgages, Personal Loans and Healthcare tabs
- GET **************** one list of the account's retail orders, service work orders and subscription orders, each source read only when the org runs that mark...
Seed REVIEW_LEGAL_SUBMISSIONS (697) from MANAGE_LEGAL_AND_COMPLIANCE
Whoever runs Legal & Compliance today reviews what members submit for it, so the new Needs Review queue is staffed on the boot that introduces the right. Seeded...
A guideline learned from corrections is its own job description version (SIE9)
The member charter save may say it adds a guideline the SI learned from supervisors' corrections (source LEARNED, with a short note): the same validated write p...
Version history for job descriptions and personalities, one-click restore, SI Role Templates (SIE6)
- charter_revisions: every save of an org, role, department, job title, team or member charter is a version (who, when, how, per-section counts), recorded by ...
Administrator templates grant UPDATE_OWN_SIGNATURE
Team Members get it from TEAM_MEMBER_ROLE_DEFAULT_GRANTS (shared library); grant-all Administrator roles get it on the rights sync, and the Administrator templa...
Live Changes — deployment tracking, live frames and the members' feed
- The push webhook records each push to main as a CommitDeployment and stamps its commits with it, then publishes the new entries on security.platform.changel...
Password Vault relay and 5-minute re-confirm; attempt limit on the hosted-computer password confirm (TPVAULT)
/api/security/vault/** resolves the session, refuses impersonation, computes the re-confirm freshness on every request (the KREAUTH password marker within 5 min...
Seed View Floor Reports to administrators and floor managers
VIEW_FLOOR_REPORTS (675) now opens Floor Activity. On the boot that introduces it, RoleRightsSyncService grants it wherever CONFIGURE_SYSTEM (an organization's ...
Let MANAGE_MLOS_AUTOMATION open the mortgage automation switches
GET and PUT **************** now accept the narrow MANAGE_MLOS_AUTOMATION right beside MANAGE_SUBSCRIPTION_SETTINGS. Every other mortgage config endpoint keeps ...
An SI's personality on the AI members read, so its work can say who it is
Each /team-members/ai-members row carries personality: the archetype's title and description in force for that SI, or null. One resolve per SI, each in its own ...
Like what you see shipping?
All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.