Files
simplex-chat/plans
Narasimha-sc 474ace1810 core: fix member admission review bypass under concurrency
APIAcceptMember and the group-profile update commands did not take the group lock, so a concurrent profile update could clobber member_admission (disabling review), and the bot's approval could read it mid-update — admitting members without admin review. Lock both paths so the profile read-modify-write and the admission decision serialize with the group's inbound processing.
2026-06-30 22:22:20 +00:00
..