All checks were successful
CI / Unit & Component Tests (pull_request) Successful in 4m5s
CI / OCR Service Tests (pull_request) Successful in 20s
CI / Backend Unit Tests (pull_request) Successful in 3m42s
CI / fail2ban Regex (pull_request) Successful in 43s
CI / Semgrep Security Scan (pull_request) Successful in 19s
CI / Compose Bucket Idempotency (pull_request) Successful in 1m1s
- DEPLOYMENT §6: clarify re-import keeps person/tag scalar human edits but re-applies document sender/receivers/tags from the canonical export (canonical-authoritative), per owner sign-off. - ADR-025: path-escape/symlink aborts the whole import (fail-closed) by deliberate owner decision, chosen over a per-file skip. Refs #669