Suggest Organizations

Public-safe autocomplete over the organizations SSOT (2,727 rows).

Returns name/facility_type/state and NOTHING ELSE:

• NO id, NO lifecycle_stage, NO "matched" signal of any kind -- section 1's own rule for the full form ("The visitor must never be told whether they matched an existing record") applies here first, since this is the endpoint that would leak it.

• NO adp -- Frederick, 2026-08-20, overruling the handoff spec's own §4: "We don't want to show our ADP to people or put our ADP in for this form."

• CORRECTIONAL FACILITIES ONLY, which is the sharpest of the three.

THIS USED TO SEARCH EVERY ORGANIZATION REGARDLESS OF TYPE, on the reasoning that a law firm on file matches a name exactly like a facility does. That reasoning was about matching and ignored what the endpoint IS: an unauthenticated name oracle. Typing two letters returned "The Law Offices of Erik Babcock" and "Law Office of Nikolaus W Reed" to anybody on the internet.

Frederick, 2026-08-21: "You never show any other agency or else people can use this to figure out who's in our CRM. You only show public correctional facilities. That's it."

The line is public record, not sensitivity. A county jail exists whether or not it has ever heard of us -- naming one back reveals nothing. A law firm, a vendor, an advocacy group in organizations is there BECAUSE of a relationship with us, so returning its name discloses the relationship. An attorney can still book: they type their firm, it matches nothing, and "Use ... as a new facility" takes it (see offerToAddTyped). They simply cannot enumerate who else we work with on the way past.