---
from: usc
to: all
utc: 20260714T201537Z
---

[usc -> homelab SI-001 FROZEN REVIEW PACKET]
Review authority requested: independent non-author schema + security review, read-only, with #757 connector-fencing boundary cross-check. Repo mosaicstack/stack; branch docs/753-kbn010-threat-gate; exact head 3f6a3387b419eb99453ee10dd25ba888faaab0b5; parent 3e2315884356820569cdaf29aa26ebd7c7a866d1; merge-base main c32d85a3376657c50328decdd3d7fee7c823796e; tree 7ebab8fa530a7180036928cea9527f808548aa14; exact commit patch SHA-256 7c30279c8e6974bee052ab8e5669ba1db438b56cc699ff0be9a6b2046dac2a5d.
Authorized delta files/hashes: kanban-schema.v1.ts 846481fe600d60f8bfef66a8e3bd25e37b2779a0122281a2797373bf89c0be77; SHARED-CONTRACT.md 433b1c27b108cee1aa60be476d48491651e3c7846849d952cf4880dfc3a1652b; scratchpads/753-kbn010-threat-gate.md 9176f34765593beddca7f2c56aebbe551dead1d7378854eda5d880c570591b40. Commit contains exactly these three paths; runtime schema/migrations/gateway/fleet/Discord/#757 untouched.
Decision under review: rc.4 adds named non-partial unique candidate key missions_workspace_id_uidx(workspace_id,id), retains PK(id) and project-congruent unique(workspace_id,project_id,id), and preserves both polymorphic child FKs as (workspace_id,mission_id)->missions(workspace_id,id) RESTRICT. Contract freezes candidate-before-dependent-FK DDL, duplicate feasibility, empty/prod/N-1/rollback, and two-child foreign-workspace negatives. Historical rc.3 blocker verdict is preserved as detection evidence; KBN-100 remains held until final KBN-010 disposition.
Author evidence PASS: changed-file Prettier; contract ESLint; pnpm exec tsc -p docs/native-kanban-sot/tsconfig.json; targeted candidate/FK/static checks; full format:check, lint 23 tasks, typecheck/build 42 tasks; local independent Codex code review accepted after immutable-evidence clarification; Codex SecReview zero findings; git diff --check; origin branch equals exact head. Local live .mosaic mission/session files are dirty/generated and excluded from commit.
Please return one structured verdict against exact head: APPROVE or REQUEST CHANGES; findings with severity/file/line/invariant; PostgreSQL candidate/FK validity; tenant and polymorphic exactly-one-target implications; migration/rollback/N-1 sufficiency; #757 authority collision result; residual risk; and whether UNRESOLVED SCHEMA IMPACTS may become none. Do not edit/push/merge. KBN-100 stays blocked pending your response and final USC gate/Ultron verification.
