- Ya
- 7 Julai 2026, 20:39 UTC
- Mwandishi
- Kamo
- Ahadi ya
- c649941
**************** orgId): read helper backing the borrower post-submission edit lock (a borrower may only edit the URLA while the file is DRAFT). **************** deletePair/deleteBorrower now remove every per-borrower child row **************** **************** before the delete. Borrower has no cascade to these and bootstrapBorrower ALWAYS creates a Declarations + HMDA row, so a bare delete FK-failed every time (a mis-added borrower could never be removed). applyGift: resolve the gift recipient via findByUidAndAppMortgageUid scoped to the gift's own app instead of a bare findById — a caller could otherwise point the gift at another app's/org's borrower uid (cross-app IDOR / dangling FK).