oficina / home Public

Inspect legacy Home migration inventory without logging database strings open

On branch feat-operator-schema-audit

Read-only startup inventory to diagnose the directory canary mismatch while keeping ordinary serving available. Logs only extra migration IDs that are already compiled into the credential/directory schemas, plus a count for unknown IDs and a truncation flag. Unknown DB strings, checksum values, rows, addresses, names and private payloads never enter logs. SELECT bounds ID materialization and row count; timeout2s, no mutation or operator authority. Test includes a canary address and oversized unknown ID and confirms neither leaks. This allows known legacy role migrations to be identified through existing authorized carlos logs; unknown IDs still need the protected native diagnostic path. Parent commandc1f26bb in canary. Actual Fable source review and full gates before deployment.

Fable review could not run: actual CLI result says session limit, resets7pm Europe/Dublin. This is not approval; preserved at /home/paulca/.cache/oficina-provisioning-20260911/home-schema-audit-review/result.json. Focused race test passed and full local/remote gates running on8969a42. No audit deployment/merge until review available. No alternate account/model substitution.