ci/woodpecker/pr/ci Pipeline was successful
- user FKs text not uuid (users.id is BetterAuth text; matches
hierarchy_grants shape)
- actor receipt split from canonical audit event: receipt carries
{target id, old, new}; canonical event keeps hierarchy schema §5.2's
full immutable snapshot; no audit read conferred; §8.6.3 witnesses
both sides
- kanban SOT Amendment A3 (§10) expressly extends A2's sole-disclosure
rule by exactly the capability-holder carve-out; ruling request names
it