The updatePostAssetPrompt action now correctly rejects cross-tenant writes. Previously, the auth wrapper was in place but untested end-to-end, meaning the protection existed on paper but wasn't verified to hold. Requests for a post that belongs to another account and requests for a post that doesn't exist both return the same response — intentionally, so neither case leaks information about what exists in your workspace or anyone else's.