From ffc367bb5d6e573e743cd739754894b0422e703f Mon Sep 17 00:00:00 2001
From: DeepZone <mail@noisens.de>
Date: Wed, 20 May 2026 17:38:09 +0100
Subject: [PATCH] feat: add alembic migration baseline and db schema status

---
 README.md                                     | 12 ++--
 RELEASE_NOTES.md                              | 21 ++++++
 backend/Dockerfile                            |  2 +
 backend/alembic/env.py                        | 39 +++++++++++
 backend/alembic/script.py.mako                | 23 +++++++
 .../alembic/versions/0001_initial_schema.py   | 65 +++++++++++++++++++
 backend/app/api/routes_health.py              |  2 +-
 backend/app/api/routes_system.py              |  2 +-
 backend/app/core/system_status.py             | 38 ++++++++++-
 backend/app/main.py                           |  5 +-
 backend/pyproject.toml                        |  2 +-
 backend/tests/test_api_smoke.py               | 24 ++++++-
 docs/operations/backup-restore.md             | 12 ++++
 docs/operations/database-migrations.md        | 30 +++++++++
 docs/operations/upgrades.md                   | 27 ++++++--
 frontend/package-lock.json                    |  4 +-
 frontend/package.json                         |  2 +-
 frontend/src/App.tsx                          |  9 +--
 frontend/src/components/Layout.tsx            |  2 +-
 frontend/src/types.ts                         |  2 +-
 20 files changed, 297 insertions(+), 26 deletions(-)
 create mode 100644 backend/alembic/env.py
 create mode 100644 backend/alembic/script.py.mako
 create mode 100644 backend/alembic/versions/0001_initial_schema.py
 create mode 100644 docs/operations/database-migrations.md

diff --git a/README.md b/README.md
index d99062f..6239c8d 100644
--- a/README.md
+++ b/README.md
@@ -2,7 +2,7 @@
 
 RouteForge is a read-only routing preflight and explainability tool for BGP, RPKI, Registry/IRR and Routing Visibility checks.
 
-Current user-facing version: **v0.5.2-beta**.
+Current user-facing version: **v0.5.3-beta**.
 
 <!-- Screenshot gallery placeholder:
 - docs/screenshots/dashboard.png
@@ -32,7 +32,7 @@ Routing changes often require fast but traceable checks across multiple external
 
 ## Current Alpha Status
 
-RouteForge is a **functional alpha** release with production-like workflows for read-only validation and demo usage. Current release target: **v0.5.2-beta**.
+RouteForge is a **functional beta** release with production-like workflows for read-only validation and demo usage. Current release target: **v0.5.3-beta**.
 
 ## Quickstart with Docker Compose
 
@@ -182,6 +182,8 @@ docker compose up --build
 ```bash
 cp .env.example .env
 # edit .env (especially POSTGRES_PASSWORD, DATABASE_URL, CORS_ORIGINS)
+docker compose -f docker-compose.prod.yml up -d postgres
+docker compose -f docker-compose.prod.yml run --rm backend alembic upgrade head
 docker compose -f docker-compose.prod.yml up -d --build
 ```
 
@@ -198,9 +200,9 @@ In the standard setup, RouteForge does **not** require a hardcoded host IP in th
 
 ### Database
 - Recommended production path: PostgreSQL via `docker-compose.prod.yml`.
-- Backend initializes tables on startup using SQLAlchemy `create_all`.
-- Alembic exists, but migration workflows are still beta-grade.
-- Database migrations are currently simple/alpha-grade and will be hardened before v1.0.
+- Production/PostgreSQL lifecycle is managed with Alembic migrations.
+- SQLite/dev mode keeps lightweight startup initialization (`create_all`) for local/demo compatibility.
+- Run migrations manually before production upgrades (`alembic upgrade head`).
 
 ### Operations docs
 - Backup/Restore: `docs/operations/backup-restore.md`
diff --git a/RELEASE_NOTES.md b/RELEASE_NOTES.md
index 021a18f..f950b6d 100644
--- a/RELEASE_NOTES.md
+++ b/RELEASE_NOTES.md
@@ -1,5 +1,26 @@
 # Release Notes
 
+## v0.5.3-beta
+
+**Database Lifecycle & Migrations**
+
+### Highlights
+
+- Alembic migration baseline for backend schema lifecycle
+- Initial schema migration `0001_initial_schema`
+- Migration status visibility in `/api/system/status`
+- Database schema version visibility in GUI System view
+- Upgrade process updated with explicit migration steps
+- Backup/restore documentation updated for migration-safe operations
+
+### Known limitations
+
+- Existing alpha databases may need manual baseline handling (`alembic stamp 0001_initial_schema`)
+- No advanced rollback automation yet
+- Authentication is not implemented yet
+
+---
+
 ## v0.5.2-beta
 
 **System Status & Operational Checks**
diff --git a/backend/Dockerfile b/backend/Dockerfile
index ae54adf..b454f49 100644
--- a/backend/Dockerfile
+++ b/backend/Dockerfile
@@ -2,6 +2,8 @@ FROM python:3.12-slim
 WORKDIR /app
 COPY pyproject.toml ./
 COPY app ./app
+COPY alembic ./alembic
+COPY alembic.ini ./alembic.ini
 RUN pip install --no-cache-dir .
 EXPOSE 8000
 CMD ["uvicorn", "app.main:app", "--host", "0.0.0.0", "--port", "8000"]
diff --git a/backend/alembic/env.py b/backend/alembic/env.py
new file mode 100644
index 0000000..731138b
--- /dev/null
+++ b/backend/alembic/env.py
@@ -0,0 +1,39 @@
+from __future__ import annotations
+
+from logging.config import fileConfig
+
+from alembic import context
+from sqlalchemy import engine_from_config, pool
+
+from app.config import settings
+from app.database import Base
+from app import models  # noqa: F401
+
+config = context.config
+config.set_main_option("sqlalchemy.url", settings.database_url)
+
+if config.config_file_name is not None:
+    fileConfig(config.config_file_name)
+
+target_metadata = Base.metadata
+
+
+def run_migrations_offline() -> None:
+    url = config.get_main_option("sqlalchemy.url")
+    context.configure(url=url, target_metadata=target_metadata, literal_binds=True, dialect_opts={"paramstyle": "named"})
+    with context.begin_transaction():
+        context.run_migrations()
+
+
+def run_migrations_online() -> None:
+    connectable = engine_from_config(config.get_section(config.config_ini_section, {}), prefix="sqlalchemy.", poolclass=pool.NullPool)
+    with connectable.connect() as connection:
+        context.configure(connection=connection, target_metadata=target_metadata)
+        with context.begin_transaction():
+            context.run_migrations()
+
+
+if context.is_offline_mode():
+    run_migrations_offline()
+else:
+    run_migrations_online()
diff --git a/backend/alembic/script.py.mako b/backend/alembic/script.py.mako
new file mode 100644
index 0000000..ba43f13
--- /dev/null
+++ b/backend/alembic/script.py.mako
@@ -0,0 +1,23 @@
+"""${message}
+
+Revision ID: ${up_revision}
+Revises: ${down_revision | comma,n}
+Create Date: ${create_date}
+"""
+from alembic import op
+import sqlalchemy as sa
+${imports if imports else ""}
+
+# revision identifiers, used by Alembic.
+revision = ${repr(up_revision)}
+down_revision = ${repr(down_revision)}
+branch_labels = ${repr(branch_labels)}
+depends_on = ${repr(depends_on)}
+
+
+def upgrade() -> None:
+    ${upgrades if upgrades else "pass"}
+
+
+def downgrade() -> None:
+    ${downgrades if downgrades else "pass"}
diff --git a/backend/alembic/versions/0001_initial_schema.py b/backend/alembic/versions/0001_initial_schema.py
new file mode 100644
index 0000000..837ab06
--- /dev/null
+++ b/backend/alembic/versions/0001_initial_schema.py
@@ -0,0 +1,65 @@
+"""Initial schema baseline
+
+Revision ID: 0001_initial_schema
+Revises: 
+Create Date: 2026-05-20
+"""
+
+from alembic import op
+import sqlalchemy as sa
+
+
+revision = "0001_initial_schema"
+down_revision = None
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.create_table(
+        "api_cache",
+        sa.Column("id", sa.Integer(), nullable=False),
+        sa.Column("cache_key", sa.String(length=255), nullable=False),
+        sa.Column("response_json", sa.JSON(), nullable=False),
+        sa.Column("created_at", sa.DateTime(), nullable=False),
+        sa.Column("expires_at", sa.DateTime(), nullable=False),
+        sa.PrimaryKeyConstraint("id"),
+    )
+    op.create_index(op.f("ix_api_cache_cache_key"), "api_cache", ["cache_key"], unique=True)
+    op.create_index(op.f("ix_api_cache_id"), "api_cache", ["id"], unique=False)
+
+    op.create_table(
+        "checks",
+        sa.Column("id", sa.Integer(), nullable=False),
+        sa.Column("check_type", sa.String(length=20), nullable=False),
+        sa.Column("input_resource", sa.String(length=120), nullable=False),
+        sa.Column("origin_as", sa.String(length=20), nullable=True),
+        sa.Column("status", sa.String(length=20), nullable=False),
+        sa.Column("summary", sa.Text(), nullable=False),
+        sa.Column("created_at", sa.DateTime(), nullable=False),
+        sa.PrimaryKeyConstraint("id"),
+    )
+    op.create_index(op.f("ix_checks_id"), "checks", ["id"], unique=False)
+
+    op.create_table(
+        "reports",
+        sa.Column("id", sa.Integer(), nullable=False),
+        sa.Column("check_id", sa.Integer(), nullable=False),
+        sa.Column("json_data", sa.JSON(), nullable=False),
+        sa.Column("markdown", sa.Text(), nullable=False),
+        sa.Column("html", sa.Text(), nullable=False),
+        sa.Column("created_at", sa.DateTime(), nullable=False),
+        sa.ForeignKeyConstraint(["check_id"], ["checks.id"]),
+        sa.PrimaryKeyConstraint("id"),
+    )
+    op.create_index(op.f("ix_reports_id"), "reports", ["id"], unique=False)
+
+
+def downgrade() -> None:
+    op.drop_index(op.f("ix_reports_id"), table_name="reports")
+    op.drop_table("reports")
+    op.drop_index(op.f("ix_checks_id"), table_name="checks")
+    op.drop_table("checks")
+    op.drop_index(op.f("ix_api_cache_id"), table_name="api_cache")
+    op.drop_index(op.f("ix_api_cache_cache_key"), table_name="api_cache")
+    op.drop_table("api_cache")
diff --git a/backend/app/api/routes_health.py b/backend/app/api/routes_health.py
index 727039f..a884714 100644
--- a/backend/app/api/routes_health.py
+++ b/backend/app/api/routes_health.py
@@ -8,4 +8,4 @@
 
 @router.get('/health')
 def health() -> dict:
-    return {"status": "ok", "version": "v0.5.2-beta", "database": get_database_status(engine).get("status", "unknown")}
+    return {"status": "ok", "version": "v0.5.3-beta", "database": get_database_status(engine).get("status", "unknown")}
diff --git a/backend/app/api/routes_system.py b/backend/app/api/routes_system.py
index bfdfda9..5bf99d3 100644
--- a/backend/app/api/routes_system.py
+++ b/backend/app/api/routes_system.py
@@ -11,7 +11,7 @@
 def system_info():
     return {
         'name': 'RouteForge',
-        'version': 'v0.5.2-beta',
+        'version': 'v0.5.3-beta',
         'demo_mode': settings.demo_mode,
         'read_only': True,
         'data_sources': ['RIPEstat', 'RIPEstat Whois/Registry'],
diff --git a/backend/app/core/system_status.py b/backend/app/core/system_status.py
index cae3a08..c7ba5cd 100644
--- a/backend/app/core/system_status.py
+++ b/backend/app/core/system_status.py
@@ -1,7 +1,11 @@
 from __future__ import annotations
 
+from pathlib import Path
 from urllib.parse import urlsplit, urlunsplit
 
+from alembic.config import Config
+from alembic.runtime.migration import MigrationContext
+from alembic.script import ScriptDirectory
 from sqlalchemy import text
 from sqlalchemy.engine import Engine
 
@@ -47,12 +51,42 @@ def _safe_error_message(exc: Exception) -> str:
     return message[:300]
 
 
+def _migration_snapshot(engine: Engine) -> dict:
+    payload = {"schema_version": "unknown", "migration_head": "unknown", "migration_status": "unknown"}
+    try:
+        alembic_ini = Path(__file__).resolve().parents[2] / "alembic.ini"
+        cfg = Config(str(alembic_ini))
+        cfg.set_main_option("script_location", str(Path(__file__).resolve().parents[2] / "alembic"))
+        cfg.set_main_option("sqlalchemy.url", settings.database_url)
+        script = ScriptDirectory.from_config(cfg)
+        head = script.get_current_head()
+        payload["migration_head"] = head or "unknown"
+
+        with engine.connect() as connection:
+            context = MigrationContext.configure(connection)
+            current = context.get_current_revision()
+        payload["schema_version"] = current or "unknown"
+
+        if payload["schema_version"] == "unknown" or payload["migration_head"] == "unknown":
+            payload["migration_status"] = "unknown"
+        elif payload["schema_version"] == payload["migration_head"]:
+            payload["migration_status"] = "up_to_date"
+        else:
+            payload["migration_status"] = "behind"
+    except Exception:
+        payload["migration_status"] = "unknown"
+    return payload
+
+
 def get_database_status(engine: Engine | None) -> dict:
     db_url = settings.database_url
     payload = {
         "status": "unknown",
         "type": database_type_from_url(db_url),
         "url_safe": safe_database_url(db_url),
+        "schema_version": "unknown",
+        "migration_status": "unknown",
+        "migration_head": "unknown",
     }
     if engine is None:
         return payload
@@ -60,8 +94,10 @@ def get_database_status(engine: Engine | None) -> dict:
         with engine.connect() as connection:
             connection.execute(text("SELECT 1"))
         payload["status"] = "ok"
+        payload.update(_migration_snapshot(engine))
     except Exception as exc:
         payload["status"] = "error"
+        payload["migration_status"] = "error"
         payload["error_message"] = _safe_error_message(exc)
     return payload
 
@@ -70,7 +106,7 @@ def build_system_status(engine: Engine | None) -> dict:
     return {
         "status": "ok",
         "name": settings.app_name,
-        "version": "v0.5.2-beta",
+        "version": "v0.5.3-beta",
         "read_only": True,
         "mode": "demo" if settings.demo_mode else "live",
         "demo_mode": settings.demo_mode,
diff --git a/backend/app/main.py b/backend/app/main.py
index aca05a4..9024359 100644
--- a/backend/app/main.py
+++ b/backend/app/main.py
@@ -8,7 +8,7 @@
 from app.config import settings
 from app.database import Base, engine
 
-app = FastAPI(title="RouteForge", version="0.5.2")
+app = FastAPI(title="RouteForge", version="0.5.3")
 
 app.add_middleware(
     CORSMiddleware,
@@ -21,7 +21,8 @@
 
 @app.on_event("startup")
 def startup() -> None:
-    Base.metadata.create_all(bind=engine)
+    if settings.database_url.startswith("sqlite"):
+        Base.metadata.create_all(bind=engine)
 
 
 app.include_router(health_router)
diff --git a/backend/pyproject.toml b/backend/pyproject.toml
index 2b977a7..478f9a0 100644
--- a/backend/pyproject.toml
+++ b/backend/pyproject.toml
@@ -1,6 +1,6 @@
 [project]
 name = "routeforge-backend"
-version = "0.5.2"
+version = "0.5.3"
 description = "RouteForge backend"
 requires-python = ">=3.12"
 dependencies = [
diff --git a/backend/tests/test_api_smoke.py b/backend/tests/test_api_smoke.py
index e45df52..bee9d36 100644
--- a/backend/tests/test_api_smoke.py
+++ b/backend/tests/test_api_smoke.py
@@ -157,7 +157,7 @@ def test_system_status_endpoint() -> None:
     response = client.get('/api/system/status')
     assert response.status_code == 200
     payload = response.json()
-    assert payload.get('version') == 'v0.5.2-beta'
+    assert payload.get('version') == 'v0.5.3-beta'
     assert payload.get('read_only') is True
     assert payload.get('database', {}).get('status')
     assert payload.get('ripestat', {}).get('cache_ttl_seconds') is not None
@@ -168,3 +168,25 @@ def test_safe_database_url() -> None:
     assert safe_database_url('postgresql+psycopg://routeforge:secret@postgres:5432/routeforge') == 'postgresql://routeforge@postgres:5432/routeforge'
     assert safe_database_url('sqlite:////app/data/routeforge.db') == 'sqlite:////app/data/routeforge.db'
     assert safe_database_url('not a url') == 'configured'
+
+
+def test_system_status_includes_migration_fields() -> None:
+    client = _client()
+    response = client.get('/api/system/status')
+    assert response.status_code == 200
+    database = response.json().get('database', {})
+    assert 'schema_version' in database
+    assert 'migration_status' in database
+    assert 'migration_head' in database
+
+
+def test_migration_status_unknown_does_not_crash() -> None:
+    from app.core import system_status as ss
+
+    class FakeBrokenEngine:
+        def connect(self):
+            raise RuntimeError('db down')
+
+    payload = ss.get_database_status(FakeBrokenEngine())
+    assert payload.get('status') == 'error'
+    assert payload.get('migration_status') == 'error'
diff --git a/docs/operations/backup-restore.md b/docs/operations/backup-restore.md
index 4016114..632d082 100644
--- a/docs/operations/backup-restore.md
+++ b/docs/operations/backup-restore.md
@@ -30,3 +30,15 @@ curl http://localhost:8000/health
 ```
 - Open UI and verify report history is present.
 - If using demo/SQLite setups, back up the SQLite file separately.
+
+
+## Migration safety
+- Always create a backup before running `alembic upgrade head`.
+- After restore, verify migration state before opening to users:
+
+```bash
+docker compose -f docker-compose.prod.yml run --rm backend alembic current
+curl http://localhost:3000/api/system/status
+```
+
+- Test restore in non-production first, then apply in production.
diff --git a/docs/operations/database-migrations.md b/docs/operations/database-migrations.md
new file mode 100644
index 0000000..a653d48
--- /dev/null
+++ b/docs/operations/database-migrations.md
@@ -0,0 +1,30 @@
+# Database Migrations
+
+RouteForge uses Alembic for schema lifecycle tracking from `v0.5.3-beta`.
+
+## Why
+- Traceable schema history
+- Safe, repeatable upgrades
+- Visible migration state in system status
+
+## Engines
+- Production: PostgreSQL (recommended)
+- Dev/demo: SQLite supported
+
+## Commands
+```bash
+cd backend
+alembic history
+alembic current
+alembic upgrade head
+```
+
+## Existing pre-baseline databases
+If the schema already exists from historical `create_all`, mark baseline first:
+```bash
+alembic stamp 0001_initial_schema
+```
+
+## Auto migration
+`ROUTEFORGE_AUTO_MIGRATE` is not enabled by default in this beta.
+Run migrations manually before production upgrades.
diff --git a/docs/operations/upgrades.md b/docs/operations/upgrades.md
index 5e98ebb..1c5ffe1 100644
--- a/docs/operations/upgrades.md
+++ b/docs/operations/upgrades.md
@@ -1,21 +1,38 @@
 # Upgrades
 
 1. Read release notes before upgrade.
-2. Create backup before changing containers.
+2. Create backup before migration and container changes.
 3. Pull/update code and rebuild images.
 
 ```bash
 git pull
 docker compose -f docker-compose.prod.yml build
+```
+
+## Database migration workflow (production)
+
+```bash
+docker compose -f docker-compose.prod.yml up -d postgres
+docker compose -f docker-compose.prod.yml run --rm backend alembic current
+docker compose -f docker-compose.prod.yml run --rm backend alembic upgrade head
 docker compose -f docker-compose.prod.yml up -d
-curl http://localhost:8000/health
+curl http://localhost:3000/api/system/status
 ```
 
 ## Post-upgrade checks
 - Verify backend health endpoint response.
+- Verify `/api/system/status` database migration fields:
+  - `schema_version`
+  - `migration_status`
+  - `migration_head`
 - Open frontend and run a sample check.
 - Verify existing reports can still be viewed.
 
-## Notes on database changes
-- Current migration handling is still beta-grade.
-- Database migrations are currently simple/alpha-grade and will be hardened before v1.0.
+## Notes on existing alpha databases
+- If tables were created via `create_all` before Alembic baseline, apply baseline carefully:
+
+```bash
+docker compose -f docker-compose.prod.yml run --rm backend alembic stamp 0001_initial_schema
+```
+
+- Then run normal upgrades (`alembic upgrade head`).
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index b8aaa75..8b0e1e0 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "routeforge-frontend",
-  "version": "0.5.2",
+  "version": "0.5.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "routeforge-frontend",
-      "version": "0.5.2",
+      "version": "0.5.3",
       "dependencies": {
         "react": "^18.3.1",
         "react-dom": "^18.3.1"
diff --git a/frontend/package.json b/frontend/package.json
index a9a6d46..be1a9f4 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -1,6 +1,6 @@
 {
   "name": "routeforge-frontend",
-  "version": "0.5.2",
+  "version": "0.5.3",
   "private": true,
   "type": "module",
   "scripts": {
diff --git a/frontend/src/App.tsx b/frontend/src/App.tsx
index 46f4007..975c18a 100644
--- a/frontend/src/App.tsx
+++ b/frontend/src/App.tsx
@@ -22,13 +22,14 @@ export default function App() {
     getSystemStatus().then((payload) => { setSystemStatus(payload); setSystemStatusError('') }).catch(() => setSystemStatusError('System status could not be loaded.'))
   }, [])
 
-  const systemLine = useMemo(() => system ? `${system.name} ${system.version} · mode=${system.demo_mode ? 'DEMO' : 'LIVE'} · read_only=${String(system.read_only)}` : 'RouteForge v0.5.2-beta · read-only preflight checks', [system])
+  const systemLine = useMemo(() => system ? `${system.name} ${system.version} · mode=${system.demo_mode ? 'DEMO' : 'LIVE'} · read_only=${String(system.read_only)}` : 'RouteForge v0.5.3-beta · read-only preflight checks', [system])
   const title = { dashboard: 'Dashboard', asn: 'ASN Check', prefix: 'Prefix Check', preflight: 'Preflight Check', reports: 'Reports', system: 'System Status', about: 'About RouteForge' }[active]
   const proxyStatus = systemStatusError ? 'ERROR' : 'OK'
+  const migrationStatus = systemStatus?.database?.migration_status || 'unknown'
 
   return <Layout active={active} onNav={setActive} systemLine={systemLine} title={title} demoMode={Boolean(system?.demo_mode)}>
     {active === 'dashboard' && <section className='space-y-4'>
-      <article className='rf-card p-6'><h1 className='text-2xl font-bold'>RouteForge v0.5.2-beta</h1><p className='mt-2 text-slate-600'>Modernes read-only Operator-Tool für Preflight Checks von ASN, Prefix, RPKI und Registry/IRR.</p></article>
+      <article className='rf-card p-6'><h1 className='text-2xl font-bold'>RouteForge v0.5.3-beta</h1><p className='mt-2 text-slate-600'>Modernes read-only Operator-Tool für Preflight Checks von ASN, Prefix, RPKI und Registry/IRR.</p></article>
       <article className='rf-card p-4'><h3 className='font-semibold'>System Health</h3>{systemStatusError ? <p className='text-sm text-rose-700 mt-2'>{systemStatusError}</p> : <div className='mt-2 grid gap-2 text-sm md:grid-cols-4'><div>Status: <b>{systemStatus?.status || 'unknown'}</b></div><div>Mode: <b>{systemStatus?.mode || 'unknown'}</b></div><div>Database: <b>{systemStatus?.database?.status || 'unknown'}</b></div><div>Version: <b>{systemStatus?.version || 'unknown'}</b></div></div>}</article>
     </section>}
     {active === 'asn' && <AsnCheckForm />}
@@ -41,12 +42,12 @@ export default function App() {
         <article className='rf-card p-4'><h3 className='font-semibold'>Overall Status</h3><p className='text-sm mt-1'>{systemStatus.status}</p></article>
         <article className='rf-card p-4 grid gap-2 md:grid-cols-2 text-sm'>
           <div>Version: <b>{systemStatus.version}</b></div><div>Mode: <b>{systemStatus.mode}</b></div><div>Read-only: <b>{String(systemStatus.read_only)}</b></div><div>Demo mode: <b>{String(systemStatus.demo_mode)}</b></div>
-          <div>API Proxy: <b>{proxyStatus}</b></div><div>Database: <b>{systemStatus.database?.status || 'unknown'}</b></div>
+          <div>API Proxy: <b>{proxyStatus}</b></div><div>Database: <b>{systemStatus.database?.status || 'unknown'}</b></div><div>Schema Version: <b>{systemStatus.database?.schema_version || 'unknown'}</b></div><div>Migration Head: <b>{systemStatus.database?.migration_head || 'unknown'}</b></div><div>Migration Status: <StatusBadge status={migrationStatus === 'up_to_date' ? 'OK' : migrationStatus === 'behind' ? 'WARNING' : migrationStatus === 'error' ? 'CRITICAL' : 'UNKNOWN'} /></div>
         </article>
         <article className='rf-card p-4 text-sm'><h3 className='font-semibold mb-2'>RIPEstat Settings</h3><pre>{JSON.stringify(systemStatus.ripestat, null, 2)}</pre></article>
         <article className='rf-card p-4 text-sm'><h3 className='font-semibold mb-2'>Features</h3><pre>{JSON.stringify(systemStatus.features, null, 2)}</pre></article>
       </>}
     </section>}
-    {active === 'about' && <section className='rf-card p-5 space-y-2 text-sm text-slate-700'><p>RouteForge liefert nachvollziehbare Routing-Preflightchecks für technische Operator-Workflows.</p><p><b>Version:</b> v0.5.2-beta</p></section>}
+    {active === 'about' && <section className='rf-card p-5 space-y-2 text-sm text-slate-700'><p>RouteForge liefert nachvollziehbare Routing-Preflightchecks für technische Operator-Workflows.</p><p><b>Version:</b> v0.5.3-beta</p></section>}
   </Layout>
 }
diff --git a/frontend/src/components/Layout.tsx b/frontend/src/components/Layout.tsx
index c0922b4..c18ed5b 100644
--- a/frontend/src/components/Layout.tsx
+++ b/frontend/src/components/Layout.tsx
@@ -28,7 +28,7 @@ export function Layout({ children, active, onNav, systemLine, title, demoMode }:
           <div className='flex flex-wrap gap-2 text-xs font-semibold'>
             <span className={`rounded-full border px-3 py-1 ${demoMode ? 'border-amber-300 bg-amber-50 text-amber-700' : 'border-emerald-300 bg-emerald-50 text-emerald-700'}`}>{demoMode ? 'DEMO' : 'LIVE'}</span>
             <span className='rounded-full border border-blue-200 bg-blue-50 px-3 py-1 text-blue-700'>READ-ONLY</span>
-            <span className='rounded-full border border-slate-200 bg-slate-50 px-3 py-1 text-slate-700'>v0.5.2-beta</span>
+            <span className='rounded-full border border-slate-200 bg-slate-50 px-3 py-1 text-slate-700'>v0.5.3-beta</span>
           </div>
         </header>
         <main className='space-y-4'>{children}</main>
diff --git a/frontend/src/types.ts b/frontend/src/types.ts
index f822751..80a90c6 100644
--- a/frontend/src/types.ts
+++ b/frontend/src/types.ts
@@ -74,7 +74,7 @@ export type SystemInfo = {
   data_sources: string[]
 }
 
-export type DatabaseStatus = { status?: string; type?: string; url_safe?: string; error_message?: string }
+export type DatabaseStatus = { status?: string; type?: string; url_safe?: string; error_message?: string; schema_version?: string; migration_status?: string; migration_head?: string }
 export type ApiProxyStatus = { status?: string; mode?: string; frontend_proxy_expected?: boolean }
 export type RipestatRuntimeSettings = { cache_ttl_seconds?: number; timeout_seconds?: number; max_retries?: number; retry_backoff_seconds?: number; use_stale_cache_on_error?: boolean }
 export type SystemFeatures = { asn_check?: boolean; prefix_check?: boolean; preflight?: boolean; reports?: boolean; exports?: boolean; data_source_diagnostics?: boolean; cache_freshness?: boolean; retry_resilience?: boolean }