All checks were successful
CI / Unit & Component Tests (pull_request) Successful in 3m5s
CI / OCR Service Tests (pull_request) Successful in 19s
CI / Backend Unit Tests (pull_request) Successful in 2m58s
CI / fail2ban Regex (pull_request) Successful in 40s
CI / Semgrep Security Scan (pull_request) Successful in 18s
CI / Compose Bucket Idempotency (pull_request) Successful in 59s
The circular-dependency that originally forced @AllArgsConstructor was removed when changePassword orchestration moved into the controller. No cycle now exists between UserController, UserService, AuthService, or AuditService — final fields and constructor injection are safe again. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>