audit-mass-assignment

name	audit-mass-assignment
description	Mass-assignment checklist. Use when request payloads are bound onto models or entities — create/update/fill from the request body, fillable/guarded lists, strong params, DTO binding, or fields like role, is_admin, or owner_id being writable.

Read ../audit/references/access-data-security/mass-assignment.md and apply its checklist to the code the user specified (or the current diff if none was given). Verify each candidate with ../audit/references/methodology/verify.md before reporting. Report findings with severity and file:line references.