# Assignment — auditor2 HIGH: malformed VK likes/comments

Base SHA: `17faecd962c2cf40e0a3f6ec4434811cfffdd312`

Fix only `src/providers/vk/vk-provider.ts` and `tests/vk-r3-safety.test.ts` for the auditor2 HIGH finding in `agents/codex/done/2026-10-19-auditor2.md`. Reject malformed likes/comment records, malformed optional comment profile data, and duplicate likes IDs with `VkIncompleteDataError` before participant persistence. Valid positive safe-integer user IDs are accepted. Valid negative integer comment authors may be excluded under an explicit documented community-author policy. Add route-level regression coverage showing old stored participants survive malformed likes/comments responses. No existing tests edits, no commit, no auth/provider capability changes, and no edits to unrelated files.