max / makenotwork

Record the imported-subscriber decision where the code called it open GoingsOn 04a882b4 asked three things. The one that gated the step-2 backfill is answered: no re-confirmation pass, imported addresses carry over sendable with marketing included, and the existing signups count as valid consent. It is a deliberate acceptance that nothing recorded what any given subscriber was told they were signing up for, taken against the cost of losing most of the list. No behaviour changes. SENDABLE_STATES already had 'imported' in it, which is the decision, so this is the comments and the test message catching up with it. The filed leaning was the opposite, so each site says what was chosen and why rather than leaving the next reader to reopen it as an oversight. `Imported` stays a distinct state. It is provenance now, not a quarantine: "we carried this over" is worth being able to say years later, and nothing gates on it. Also names the email provider in the privacy policy's Data Sharing list, which had the payment processor and the infrastructure providers but not the vendor that receives every subscriber's address and the message body. Worded like the payment-processor line, pointing at the Infrastructure page rather than hardcoding Postmark, so a provider change is one edit and not two. The other two questions (controller versus processor, per-list rate limits) gate nothing being written now and are split into their own tasks, as 04a882b4 asked.