epic: robustness and operations

[Fluory]

Duplicate handling in the UI, dead-letter reprocessing, health details, status and errors in the request list, RLS on every tenant table. Milestone M2.

Issues (in order)

• feat(tenancy): guard test – every app table has forced RLS #29
• feat(identity): simple user and role management for admins #30
• feat(requests): request list with errors, retries and reprocessing #26
• feat(intake,review): duplicate handling in the UI #27
• feat(observability): correlated structured logs and full health #28

[Fluory]

Overnight run – status for this epic

All issues of this epic have a ready-for-review PR (stacked, not merged):

Issue	PR	State
#26 request list	#43	ready, CI green
#27 duplicates UI	#44	ready, CI green – decision-needed on #27 (decision timing)
#28 observability	#45	ready, CI green, verify:full green on this head, security review done
#29 RLS guard	#37	ready, CI green
#30 user management	#38	ready, CI green, security review (1 blocker fixed)

Note: /api/health is public and now reports dependency reachability and backlog – put it behind the proxy/auth before a public deployment. Full report, merge order and follow-ups: #2 (morning report comment).

---

Generated by Claude Code

[Fluory]

Closed on the orchestrator's instruction: every issue of this epic (#26–#30) is merged into main (PRs #37, #38, #43–#45). Open follow-ups: #47 (DB check), #48 (pagination), #51 (log format).

---

Generated by Claude Code