Issue #769 — KBN-100 unified schema and N-1 migration

Status

IN PROGRESS — tracking and baseline gate. No schema or migration implementation is authorized until this scratchpad and docs/native-kanban-sot/TASKS.md are committed/pushed and baseline evidence is recorded.

Requirement authority

Provider issue: https://git.mosaicstack.dev/mosaicstack/stack/issues/769
Canonical requirements: docs/requirements/native-kanban-sot.md
Frozen integration contract: docs/native-kanban-sot/SHARED-CONTRACT.md v1.0.0-rc.4
Frozen target schema: docs/native-kanban-sot/contracts/kanban-schema.v1.ts
Threat/auth/constraint gate: docs/native-kanban-sot/KBN-010-THREAT-AUTH-CONSTRAINT-GATE.md
Dependency evidence: PR #765 merge 2e228007, issue #753 closed, post-main pipeline #1813 terminal success.

Fixed decisions

PostgreSQL is the sole writable project/task/orchestration SOT; generated projections and external transports are never import/write authority.
Expand is additive and N-1-safe. Do not drop, rename, narrow, or reinterpret legacy data during this card.
Backfill is bounded, idempotent, resumable, checksummed, and quarantines ambiguity rather than guessing.
rc.4 SI-001 creates missions_workspace_id_uidx(workspace_id,id) before both dependent artifact/approval FKs while retaining global and project-congruent keys.
Runtime repositories, Gateway/MCP, Coordinator behavior, clients, fleet, channels, connector fencing, deployment, and production migration execution are out of scope.
Critical schema/data behavior uses TDD RED/GREEN and real PostgreSQL integration evidence; PGlite-only evidence cannot certify the migration.

Authorized paths

packages/db/src/schema.ts
packages/db/drizzle/**
DB-package tests/config files explicitly enumerated by the author before first edit
docs/native-kanban-sot/TASKS.md
this scratchpad

Any additional path requires control-plane approval before edit.

Delivery cycle

baseline -> test design/RED -> schema+migration GREEN -> focused tests -> real PostgreSQL migration matrix -> full gates -> independent DB review -> SecReview -> remediate/rereview -> Codex-Ultron -> PR CI -> squash merge -> post-main CI -> issue close

Baseline evidence

Pending fresh author-lane intake and baseline test run.

Collision boundaries

#758 owns generic local Fleet configuration/lifecycle cards.
#757/#755 owns logical-agent connector identity/lease/fencing.
#756 channel foundation is merged and remains separate.
KBN-105 and all KBN consumers remain held until #769 completes.

Completion evidence

Pending implementation, reviews, PR, merge, terminal-green main CI, and issue closure.

2.7 KiB Raw Blame History