Returns the unmasked document number held on one of a user’s files, and records the read in the profile changelog. Every other endpoint returns metadata.documentNumber as null alongside a masked metadata.documentNumberMasked, so this is the only way to obtain the value — and it always leaves an audit entry naming the caller, the file and the time. The audit write is not best-effort: if it fails, the number is not returned.