Contact Authorization Belongs to Backend Policy, Not Dialing Logic
SIP addresses endpoints; the product still needs an explicit policy for who is allowed to contact whom.
contacts
Parent-Approved Contacts Are an Architecture Rule, Not a UI Filter
Contact approval has to be enforced by backend identity and call routing, not only hidden buttons.