2026 03 27 LeadEngine Audit Reviewed the recent LeadEngine upload/auth/geocoder/filter/scraper changes. Main findings: Header auth migration is incomplete because ?token= is still accepted in lead engine/api/index.js Upload CSV parser in lead engine/app/upload/page.tsx corrupts valid multiline and e