ticket_notes and time_entries both carry an is_deleted soft-delete flag (per CLAUDE.md audit-column convention); gatherTicketEvidence was reading both without filtering it, so retracted notes and reversed time entries showed up as evidence for every phishing report. Found during code-review re-verification of the Phase 15 CR-01/WR-01/WR-02 fixes. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012wWroM6FXkQJiH3JgYcony |
||
|---|---|---|
| .. | ||
| hooks | ||
| services | ||
| types | ||
| utils | ||
| auth-client.ts | ||
| auth-utils.ts | ||
| auth.ts | ||
| bootstrap.ts | ||
| permissions.test.ts | ||
| permissions.ts | ||
| status-registry.ts | ||
| utils.ts | ||