test-audit

This contains an authorization-ordering vulnerability: unauthorized callers may delete records before the Forbidden error is raised. The code shows no indicators of malware, data exfiltration, or obfuscation.