Skip to content

Fix PPR-2 PostgreSQL retention privileges - #49

Merged
Walter-byte merged 1 commit into
mainfrom
fix/ppr2-postgres-retention-boundary
Oct 8, 2026
Merged

Walter-byte merged 1 commit into
mainfrom
fix/ppr2-postgres-retention-boundary

Conversation

@Walter-byte

Copy link
Copy Markdown
Owner

Fixes the PPR-2 PostgreSQL retention sweep after production exposed a permission error under the restricted backend role.

Includes:

  • a dedicated wctm_retention identity with narrowly scoped table and column grants
  • a protected credential file and daily systemd oneshot for fixed, bounded cleanup
  • unchanged retention periods and backend audit-log immutability
  • disposable PostgreSQL privilege and mutation tests, plus no-host-Node shell checks

Backend build, typecheck, lint, privacy tests, boot smoke, Compose and repository checks passed. PPR-2 remains Active; real merchant onboarding remains Blocked. Live role and scheduler validation are pending.

@Walter-byte
Walter-byte merged commit ce456d4 into main Oct 8, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant