Do you have a HA pair of SBCs? If so, you'll have a 3rd server, the EMS, that manages the configuration. If that's the case, the pair share their config - so, whichever is live would assume the IP addresses your SM and your carrier are sending to - much like CM duplex.
Otherwise you might have 2 single boxes in 2 different places for georedundancy in which case each box would have the management part built in.
you'd want to get in as root by CLI and traceSBC. There, you'd see the INVITE coming from SM to the SBC and from the SBC out to the carrier.
Based on your description, you'd expect that Sally's Desk calling Sally's Cell would work, but outsider Bob's cell calling Sally's Desk to EC500 to Sally's Cell would fail.
You'd want to compare the INVITE to the carrier for both cases.
In the case of Sally's desk calling her cell, you would see a TO header to the cell and a FROM and P-Asserted-Identity of Sally's desk, or DID in the public unknown table.
In the case of Bob calling thru Sally's Desk to EC500, you'd see TO - Sally's Cell, FROM and P-Asserted-Identity of Bob and Diversion of Sally's Desk.
Presumably the carrier would provide back some error message.
The sigma script is made in the SBC, and in the server configuration for your carrier, in the advanced tab, you can set that script active. You can do just about anything with them - force override number display to a main number, or whatever you might want. In your case, this script would look for a diversion header, which would indicate some ind of forwarding or ec500, and if present, make P-Asserted-Identity be the same as that diversion header so that it looks like the call is from Sally's desk.