intercom-enterprise-rbac

No malicious behavior or supply-chain attack indicators are present in the supplied examples. The code documents legitimate RBAC, OAuth installation, and audit workflows. The OAuth example has a significant security gap because state verification is described but omitted from the shown callback, and workspace_id is trusted directly from a query parameter. These should be validated and bound to the authenticated installation context before persisting the token.