- Ya
- 6 Julai 2026, 01:41 UTC
- Mwandishi
- Kamo
- Ahadi ya
- b315a50
Adversarial-review fixes: - HIGH: drop the memberId dedup that conflated the loan's isPrimary borrower with the account OWNER — a member self-creating a loan for a family member collapsed two humans onto one vault party (cross-human doc/PII leak). Dedup now on SSN-last4+DOB ONLY, and require a compatible last name so a last-4 collision (e.g. twins) never merges two people. - ensurePartyLinksForAccount + **************** account-scoped self-heal so the staff Documents tab populates for existing accounts.