sage: 10-24 window draft 0 counts grant look-alike events before --migrate (row 234 A22b, gizmoduck-0107)

2026-10-20 23:29:34 -05:00
parent 7662b04902
commit 9b53620185
1 changed files with 6 additions and 0 deletions
@@ -57,6 +57,12 @@ Service script drift OLD to HEAD is 415+/91- over the four scripts, mostly row 1
 - Rollback after a migration isn't the plain rollback. OLD is 3i and the store is 3j, so going back needs
  `--restore <W5 activation>`, and that loses the events written after W5. The row 181 restore guard counts
  11 tables, and the untimed ones need the D3 snapshot. Mos decides any restore past W5, as before.
+- Grant look-alikes (row 234 A22b, gizmoduck-0107). `3i-3j.sql` adds `events_grant_actor` but doesn't check
+  rows already in the store, so after the migration only the actor filter in `GRANT_EVIDENCE` (actor_role NULL,
+  actor_run 'grant') ignores an old session-written row. P3, and again just before `--migrate`: on the
+  backup copy, count the `action.allowed` events whose body.action or body.operation starts with `grant.`, or
+  whose body has `hostLineLeft`. Expect 0, since no grant code has run live. Any nonzero count stops the window
+  until I've read those rows.
 - P3 is the rehearsal with `--migrate` on a copy of the live backup. It must show the 3j step and the row
  counts before and after.