- Shipped
- 6 ஜூலை, 2026 அன்று 1:41 AM UTC
- Author
- Kamo
- Commit
- b315a50
Adversarial-review fixes: - HIGH: drop the memberId dedup that conflated the loan's isPrimary borrower with the account OWNER — a member self-creating a loan for a family member collapsed two humans onto one vault party (cross-human doc/PII leak). Dedup now on SSN-last4+DOB ONLY, and require a compatible last name so a last-4 collision (e.g. twins) never merges two people. - ensurePartyLinksForAccount + **************** account-scoped self-heal so the staff Documents tab populates for existing accounts.