Projection rows must not displace authoritative modal records

Observed 2026-09-04 while syncing e3-solutions/theft PR #722 (COR-3894) with staging: a sparse projection-backed dashboard row shared the same load ID as a separately fetched detailed deep-link record. A dedupe helper retained the projection, and a React refresh effect then replaced the selected modal record with it, silently dropping server-computed Required Review readiness and disabling a valid decision control. Reusable rule: when a projection and authoritative detail record collide by ID, preserve list position but let the authoritative record replace the projection; test both non-duplication and survival of evidence-dependent decision fields. Source provenance: local repository trace, regression test, and GitHub Production browser evidence failure.