detail
records-api.php add_decision let code be blank or hand-picked with no validation, causing 70% blank codes and 10 real collisions per Admin K352 audit. Fixed: blank auto-assigns next sequential D###, explicit duplicate rejected with clear error.