AIKIDO-2026-771360

TL;DR

The ETS and Mnesia data layers write new records without checking whether the primary key already exists. A create action that supplies an existing primary key overwrites the stored record instead of failing. When primary keys are client controlled, create actions can change existing rows even where authorization policies are enforced. The fix rejects duplicate primary keys on create in both data layers.