Pin that a same-org Enter-As is refused before any audit row or session (KamoCollab CP00 final fix)

Shipped

October 5, 2026 at 4:17 PM UTC

Author

Kamo

Commit

b24d88b

EnterAsController answers 400 'target is current session organization' before ImpersonationAudit.enteredAs runs, on both branches, so no same-org entry can write an ENTER_AS row. CP00 Task 12 therefore proves ENTER_AS with EnterAsAuditTest and ImpersonationAuditTest instead of a live call into the sp00verify owner's only other membership, which is in the platform org (ruling CP00-FINAL-1).