Purchase-order bindings and phone numbers: a read that names no company is refused

Row ui-s-d-part2, silent reads part 8. Staff login. Stage, this branch. PropFlow's own phone lines are masked on the page (maskOwnedLines); any other number would still block the capture.

1 Oct 2026 · branch uisd-p2-silent-refused-po-phones · captured against propflow-stage · at 59a38cfc013+local

Data note. Every name and balance below comes from propflow-stage, which is anonymized by construction (ADR-0097/0110 — phones in the impossible +1000 NPA, emails @example.test). The identical capture against prod would carry real tenants' names and balances and is not safe to attach anywhere, which is why the generator refuses to run against one.

1 · 1 · The phone-numbers page on All companies — every line, no failure

Staff with All companies picked still see every line. PropFlow's own registry lines are masked before the shot.

Masked for publishing: 7 × property-line — PropFlow's own lines, as listed in config/phone-registry.json. Any other phone number on the page was left in place for the contact scan.

Asserted in the captured DOM — Phone numbers. The page, with no "couldn't check" notice.

1 · The phone-numbers page on All companies — every line, no failure
Sections 2–4

2 · 2 · Phone numbers with no company named — refused

On main a silent read listed every company's numbers. It now refuses.

Asserted in the captured DOM — needs_a_selection. The refusal body.

2 · Phone numbers with no company named — refused

3 · 3 · Purchase-order bindings with no company named — refused

On main this answered from the default bound. It now refuses.

Asserted in the captured DOM — needs_a_selection. The refusal body.

3 · Purchase-order bindings with no company named — refused

4 · 4 · Control — bindings with a company named

The same read naming the company.

Asserted in the captured DOM — purchaseOrderModeProperties. A queue response.

4 · Control — bindings with a company named
PropFlow Docs