Both curator-event loaders repeated the same null-user + hasWriteAll block. hasWriteAll already returns false for an anonymous user, so a single requireWriteAll(locals) helper covers both REQ-002 (null user → 403) and REQ-003 (no WRITE_ALL → 403) without the redundant pre-check. Addresses PR #832 review (#781). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>