af65681179
Aegis CI / lint-and-test (push) Has been cancelled
Snyk Security Scan / Python vulnerabilities (backend) (push) Has been cancelled
Snyk Security Scan / npm vulnerabilities (frontend) (push) Has been cancelled
Snyk Security Scan / Docker image vulnerabilities (backend) (push) Has been cancelled
Direct test removal is now gated to draft-only at the service layer (active campaigns must go through a modification request that a manager approves). The trash-icon button on the tests table still showed for active campaigns and would always fail with a 400 — restrict it to draft, matching the backend gate.