Project-Wide Aggregation Rights: The Denominator Risk Hidden in Plain Sight | CAMAudit