Summary

Completes the platform audit remediation across migration safety, P0 integrity controls, sequential decision governance, data workflows, ingestion reliability, source-of-truth cleanup, and operational documentation.

Key changes

• Adds idempotent PostgreSQL extension bootstrap and clean-database migration verification.
• Hardens migration locking, checksum handling, source validation, and legacy reconciliation.
• Makes decisions, scheduler leases, event delivery, Impact Office workflows, consent, and public projections fail closed.
• Enforces solution lifecycle gates and sequential evidence integrity.
• Adds retention, portability, feedback, ingestion idempotency, ClickHouse-safe writes, and failure-injection coverage.
• Reconciles spatial/source-of-truth metadata, Directus permissions, Adelphi pilot labels, and adds a governed draft-only EBF fixture.
• Updates operational documentation and CI checks.

Verification

• python3 -m pytest -q: 3222 passed, 13 skipped.
• ./scripts/ci-check.sh: 111 passed, 0 failed.
• Clean PostgreSQL bootstrap: passed.
• Migration state: 410 applied, 0 pending.
• Seed idempotency: passed.