[Walter-byte]

Summary

• Scope runtime DELETE verification to the six retention tables while preserving the approved notification-recipient grant.
• Reject table-level and column-level runtime UPDATE on audit logs, with PostgreSQL regression coverage.

Validation

• Isolated PostgreSQL retention integration and shell checks passed.
• Shell syntax and diff checks passed.

No application behavior, production grants, or retention SQL changed.