Summary
Contributor should be blocked when trying to acknowledge ECLA in Contributor Console for "restricted" org. However, if contributor is part of restricted org (he acknowledge ECLA for restricted org before) he still should be able to acknowledge ECLA for other non-restricted orgs or sign ICLA.
See Slack thread for more details: https://linuxfoundation.slack.com/archives/C0697E1QHNG/p1747072460804129
This is related to backend ticket #4617
Here is UI implementation for CLA Corporate Console: #4649