Marc-André Bombeck 89c872a169 Pin the two writes this branch withdrew, instead of leaving their old proof ...

Taking `POST /api/allergies` and `POST /api/family-history` out of the
delegable set moved one end and left the other: the integration suite still
asserted that a delegate holding a WRITE grant gets a 201 from both, so ten
cases went red on a decision that was deliberate.

They are pinned the other way round now, with the reason in the file. A
delegate is refused at either grant level, nothing lands under either
account, and — the leg that matters most and that nothing else here covered —
the owner's own unswitched write still succeeds. Withdrawing a delegated
write by breaking the ordinary one would have been the worse bug.

2026-08-03 20:56:04 +02:00

..

integration

Pin the two writes this branch withdrew, instead of leaving their old proof

2026-08-03 20:56:04 +02:00