@ngocsangairvds/vsaf 3.2.13 → 3.2.15

package/tools/vds-scripts/audit_orchestrator/docs/TSK-193-flow-trace.md

@@ -1,201 +0,0 @@
-# TSK-193: Source URL Flow Trace
-
-## Visual Flow Diagram
-
-```
-┌──────────────────────────────────────────────────────────────────────────┐
-│ 1. Evidence Extraction (Confluence → Local)                               │
-└──────────────────────────────────────────────────────────────────────────┘
-                                ↓
-    Confluence Page: https://confluence.example.com/pages/123
-                   ↓ extraction
-    manifest.json: { "page_url": "...", "markdown_path": "..." }
-                                ↓
-
-┌──────────────────────────────────────────────────────────────────────────┐
-│ 2. Evidence Loader (loader.py:291-311)                                   │
-├──────────────────────────────────────────────────────────────────────────┤
-│  source_url_by_path = {}  # Build mapping from markdown path to URL      │
-│  for manifest_entry:                                                      │
-│      source_url_by_path[md_path] = page_url                              │
-│                                                                            │
-│  source_url = source_url_by_path.get(md_file.resolve())                  │
-│  if not source_url:                                                       │
-│      source_url = doc_metadata.url  # Fallback                           │
-│                                                                            │
-│  doc = EvidenceDocument(                                                  │
-│      source_url=source_url  ← CAPTURED HERE                              │
-│  )                                                                         │
-└──────────────────────────────────────────────────────────────────────────┘
-                                ↓
-
-┌──────────────────────────────────────────────────────────────────────────┐
-│ 3. Evidence Object (models/evidence.py)                                  │
-├──────────────────────────────────────────────────────────────────────────┤
-│  Evidence(                                                                 │
-│      source_id="confluence:123456",                                       │
-│      source_url="https://confluence.example.com/pages/123",  ← STORED    │
-│      content="...",                                                        │
-│      status=EvidenceStatus.FOUND                                          │
-│  )                                                                         │
-└──────────────────────────────────────────────────────────────────────────┘
-                                ↓
-
-┌──────────────────────────────────────────────────────────────────────────┐
-│ 4. Row Evaluator (row_evaluator.py:480-516)                              │
-├──────────────────────────────────────────────────────────────────────────┤
-│  def _build_evidence_anchors(evidence):                                   │
-│      anchors = []                                                          │
-│                                                                            │
-│      # Path anchor (source_id)                                            │
-│      anchors.append(                                                       │
-│          EvidenceAnchor(                                                   │
-│              ref_type="path",                                              │
-│              ref_value=evidence.source_id  # "confluence:123456"          │
-│          )                                                                 │
-│      )                                                                     │
-│                                                                            │
-│      # URL anchor (source_url) ← TSK-193 CRITICAL POINT                  │
-│      if evidence.source_url:                                              │
-│          anchors.append(                                                   │
-│              EvidenceAnchor(                                               │
-│                  ref_type="url",                                           │
-│                  ref_value=evidence.source_url,  ← PROPAGATED HERE       │
-│                  verified=True                                             │
-│              )                                                             │
-│          )                                                                 │
-│                                                                            │
-│      # Content excerpt                                                     │
-│      anchors.append(...)                                                   │
-│                                                                            │
-│      return anchors                                                        │
-└──────────────────────────────────────────────────────────────────────────┘
-                                ↓
-
-┌──────────────────────────────────────────────────────────────────────────┐
-│ 5. EvidenceAnchor Model (checklist.py:87-135)                            │
-├──────────────────────────────────────────────────────────────────────────┤
-│  EvidenceAnchor(                                                           │
-│      ref_type="url",                                                       │
-│      ref_value="https://confluence.example.com/pages/123",  ← STORED     │
-│      verified=True                                                         │
-│  )                                                                         │
-│                                                                            │
-│  def format_for_output():                                                  │
-│      return f"{ref_type}: {ref_value}"  # "url: https://..."            │
-└──────────────────────────────────────────────────────────────────────────┘
-                                ↓
-
-┌──────────────────────────────────────────────────────────────────────────┐
-│ 6. RowEvaluation (checklist.py:413-415)                                  │
-├──────────────────────────────────────────────────────────────────────────┤
-│  @computed_field                                                           │
-│  def evidence_refs_str(self) -> str:                                      │
-│      return "\n".join(                                                     │
-│          f"{ref.ref_type}: {ref.ref_value}"                               │
-│          for ref in self.evidence_refs[:5]                                │
-│      )                                                                     │
-│      # Returns:                                                            │
-│      # "path: confluence:123456\n                                         │
-│      #  url: https://confluence.example.com/pages/123\n                   │
-│      #  excerpt: content"                                                  │
-└──────────────────────────────────────────────────────────────────────────┘
-                                ↓
-
-┌──────────────────────────────────────────────────────────────────────────┐
-│ 7. Checklist Output (Excel/Google Sheets)                                │
-├──────────────────────────────────────────────────────────────────────────┤
-│  Column: "Minh chứng" (Evidence)                                          │
-│  Value:                                                                    │
-│      path: confluence:123456                                              │
-│      url: https://confluence.example.com/pages/123  ← FINAL OUTPUT       │
-│      excerpt: content                                                      │
-│                                                                            │
-│  → Stakeholders can click the URL to access source                        │
-└──────────────────────────────────────────────────────────────────────────┘
-```
-
-## Key Components
-
-### 1. Evidence Document (corpus.py)
-```python
-@dataclass
-class EvidenceDocument:
-    title: str
-    content: str
-    source_path: str
-    source_url: str | None = None  # ← Confluence URL field
-```
-
-### 2. Evidence Anchor (checklist.py)
-```python
-class EvidenceAnchor(BaseModel):
-    ref_type: str  # "url" for Confluence links
-    ref_value: str  # The actual URL
-    verified: bool = True
-```
-
-### 3. Row Evaluation (checklist.py)
-```python
-class RowEvaluation(BaseModel):
-    evidence_refs: list[EvidenceAnchor]
-
-    @computed_field
-    def evidence_refs_str(self) -> str:
-        # Formats for "Minh chứng" column
-        return "\n".join(f"{ref.ref_type}: {ref.ref_value}"
-                         for ref in self.evidence_refs[:5])
-```
-
-## Test Verification
-
-### Test Case: test_evidence_anchor_includes_source_url
-
-```python
-def test_evidence_anchor_includes_source_url(self, sample_check):
-    """TSK-193: Verify source_url propagates to checklist output."""
-
-    # 1. Create evidence with Confluence URL
-    confluence_url = "https://confluence.example.com/pages/123"
-    evidence = Evidence(
-        source_id="confluence:123456",
-        source_url=confluence_url,  # ← Input
-        content="...",
-        status=EvidenceStatus.FOUND,
-    )
-
-    # 2. Evaluate
-    evaluator = DeterministicEvaluator(template_hash="test_hash")
-    result = evaluator.evaluate(sample_check, evidence, "row_0")
-
-    # 3. Verify URL anchor exists
-    url_anchor = next(
-        (a for a in result.evidence_anchors if a.ref_type == "url"),
-        None
-    )
-    assert url_anchor is not None
-    assert url_anchor.ref_value == confluence_url  # ← Output verified
-
-    # 4. Verify appears in checklist output
-    evidence_refs_str = "\n".join(
-        f"{ref.ref_type}: {ref.ref_value}"
-        for ref in result.evidence_anchors[:5]
-    )
-    assert confluence_url in evidence_refs_str
-```
-
-**Result**: ✅ PASS
-
-## Summary
-
-The `source_url` field flows correctly through all 7 layers:
-
-1. ✅ Extracted from Confluence manifest
-2. ✅ Loaded into EvidenceDocument
-3. ✅ Passed to Evidence object
-4. ✅ Converted to EvidenceAnchor (ref_type="url")
-5. ✅ Stored in RowEvaluation.evidence_refs
-6. ✅ Formatted in evidence_refs_str
-7. ✅ Output to "Minh chứng" column in checklist
-
-No code changes needed - system already worked correctly. Added test to prevent regression.

package/tools/vds-scripts/audit_orchestrator/docs/TSK-193-verification.md

@@ -1,124 +0,0 @@
-# TSK-193: Confluence URL Anchor Verification
-
-**Status**: ✅ COMPLETE
-**Date**: 2026-02-05
-**Time Estimate**: 2h (Actual: 1.5h)
-
-## Goal
-
-Verify that canonical checklist artifacts consistently emit Confluence URLs (not just local file paths) in the `Minh chứng` (Evidence) column.
-
-## Implementation Summary
-
-### Verified Flow
-
-The `source_url` field already flows correctly through the system. Here's the complete trace:
-
-1. **EvidenceDocument Model** (`evidence/corpus.py:31-54`)
-   - Has `source_url: str | None` field (line 42)
-   - Populated from Confluence extraction manifest
-
-2. **Evidence Loader** (`evidence/loader.py:300-311`)
-   - Line 291-298: Extracts `source_url` from manifest mapping
-   - Line 306: Passes `source_url` to `EvidenceDocument` constructor
-   - Supports both direct URL mapping and fallback to `doc_metadata.url`
-
-3. **DeterministicEvaluator** (`engine/row_evaluator.py:480-516`)
-   - `_build_evidence_anchors()` method processes evidence
-   - Lines 494-502: Creates `EvidenceAnchor` with:
-     - `ref_type="url"`
-     - `ref_value=evidence.source_url`
-     - `verified=True`
-   - Returns list including URL anchor when `source_url` is present
-
-4. **EvidenceAnchor Model** (`models/checklist.py:87-135`)
-   - Line 99: `ref_value` stores the actual URL
-   - Line 124-134: `format_for_output()` formats for display
-   - Used by checklist generator for output
-
-5. **RowEvaluation Model** (`models/checklist.py:413-415`)
-   - `evidence_refs_str` computed field
-   - Formats evidence anchors as: `"{ref_type}: {ref_value}"`
-   - This becomes the "Minh chứng" column content in Excel/checklist
-
-### Test Coverage
-
-Added comprehensive test case: `test_evidence_anchor_includes_source_url`
-
-**Test Location**: `tests/test_engine/test_row_evaluator.py:463-507`
-
-**Test Verification**:
-- ✅ Creates Evidence with Confluence URL
-- ✅ Verifies both path and URL anchors exist
-- ✅ Confirms URL anchor contains correct Confluence URL
-- ✅ Validates URL appears in evidence refs string (checklist output)
-
-**Test Result**: PASS (verified with `uv run pytest tests/test_engine/test_row_evaluator.py::TestDeterministicEvaluator::test_evidence_anchor_includes_source_url -v`)
-
-## Acceptance Criteria
-
-- [x] Trace confirms `source_url` flows to `EvidenceAnchor.ref_value`
-- [x] New test case `test_evidence_anchor_includes_source_url` added
-- [x] Test passes: `uv run pytest tests/test_engine/test_row_evaluator.py -k url -v`
-
-## Files Modified
-
-1. **tests/test_engine/test_row_evaluator.py**
-   - Added test case `test_evidence_anchor_includes_source_url` (lines 463-507)
-   - Verifies complete URL propagation flow
-
-## Key Implementation Details
-
-### Evidence Anchor Structure
-
-When evidence has a `source_url`, the evaluator creates multiple anchors:
-
-```python
-anchors = [
-    EvidenceAnchor(ref_type="path", ref_value=evidence.source_id),
-    EvidenceAnchor(ref_type="url", ref_value=evidence.source_url),  # Confluence URL
-    EvidenceAnchor(ref_type="excerpt", ref_value="content", excerpt=...),
-]
-```
-
-### Checklist Output Format
-
-The "Minh chứng" column contains:
-```
-path: confluence:123456
-url: https://confluence.example.com/display/PROJECT/Requirements-Page
-excerpt: content
-```
-
-This ensures stakeholders can click directly to source documentation.
-
-## Testing Commands
-
-```bash
-# Run new test
-uv run pytest tests/test_engine/test_row_evaluator.py::TestDeterministicEvaluator::test_evidence_anchor_includes_source_url -v
-
-# Run all URL-related tests
-uv run pytest tests/test_engine/test_row_evaluator.py -k url -v
-
-# Run full test suite
-uv run pytest tests/test_engine/test_row_evaluator.py -v
-```
-
-## Related Tasks
-
-- TSK-169: Evidence manifest loader (implemented source_url extraction)
-- TSK-169B: Evidence ranking metadata
-- TSK-191: Crawl artifacts ingestion (also uses source_url)
-
-## Notes
-
-- No code changes needed - flow already worked correctly
-- Added test to prevent regression
-- System correctly handles both local file paths AND Confluence URLs
-- URL anchors are only created when `source_url` is present (not always required)
-- The loader intelligently falls back from manifest path mapping to doc metadata URL
-
-## Verification
-
-All 49 tests in `test_row_evaluator.py` pass, including the new URL verification test.

package/tools/vds-scripts/audit_orchestrator/docs/phase152-hierarchical-query-surface.md

@@ -1,46 +0,0 @@
-# Phase 152 — Hierarchical Query Surface
-
-The Phase 152 query surface provides five read-only CLI commands for inspecting
-centralized audit state at department, project, repository, run, and summary levels
-without triggering any workflow execution.
-
-## Commands
-
-| Command | Options | Description |
-|---------|---------|-------------|
-| `vds-audit state query-departments` | `--department`, `--limit` | Department-level summaries |
-| `vds-audit state query-projects` | `--project`, `--department`, `--limit` | Project-level summaries |
-| `vds-audit state query-repos` | `--project` (required), `--repo`, `--limit` | Repository-level summaries |
-| `vds-audit state query-runs` | `--project` (required), `--repo`, `--run-type`, `--status`, `--limit` | Run history rows |
-| `vds-audit state query-summary` | `--project` (required), `--repo`, `--no-completeness` | Aggregated project/repo summary |
-
-All commands accept `--json-only` (global flag) to emit machine-readable JSON output.
-
-## Selector Precedence
-
-Selectors are resolved in this priority order:
-
-1. **`project_storage_key`** — exact stable-identity match (highest priority)
-2. **`page_id`** — numeric Confluence page ID, also a stable-identity match
-3. **`project_name` / `project_name_en`** — display-name match (lower priority)
-4. **Confluence URL alias** — extracted page ID or display title from URL
-
-If two projects share the same display name and the selector does not match a stable
-identity field, a `ValueError` is raised with the competing storage keys so the
-caller can disambiguate.
-
-## JSON Output Fields
-
-`query-runs` rows include two enrichment fields added by the resolver:
-
-- `resolved_project_key` — canonical storage key resolved from the selector
-- `resolved_repo_key` — canonical repo key resolved from the selector (or `null`)
-
-`query-summary` includes `selectors`, `project`, `execution`, `workflow`, `links`,
-`retrieval`, `runs`, and `completeness` (omitted when `--no-completeness` is passed).
-
-## Backward Compatibility
-
-All five commands were present before Phase 152. The changes in this phase are
-additive: new enrichment fields in JSON output and improved selector normalization.
-Existing callers that ignore unknown fields are unaffected.

package/tools/vds-scripts/audit_orchestrator/examples/bitbucket_metadata_example.json

@@ -1,50 +0,0 @@
-{
-  "branch_permissions": [
-    {
-      "id": 1,
-      "matcher": {
-        "displayId": "master",
-        "id": "refs/heads/master",
-        "type": {
-          "id": "BRANCH",
-          "name": "Branch"
-        }
-      },
-      "type": "fast-forward-only",
-      "users": [],
-      "groups": []
-    },
-    {
-      "id": 2,
-      "matcher": {
-        "displayId": "master",
-        "id": "refs/heads/master",
-        "type": {
-          "id": "BRANCH",
-          "name": "Branch"
-        }
-      },
-      "type": "no-deletes",
-      "users": [],
-      "groups": [
-        "administrators"
-      ]
-    }
-  ],
-  "collected_at": "2026-02-05T10:00:00Z",
-  "default_branch": "master",
-  "default_reviewers": [],
-  "merge_checks": [
-    {
-      "id": 1,
-      "requiredApprovers": 2,
-      "scope": {
-        "resourceId": 123,
-        "type": "REPOSITORY"
-      },
-      "type": "REQUIRED_APPROVERS"
-    }
-  ],
-  "project_key": "INS",
-  "repo_slug": "insurance-core"
-}

package/tools/vds-scripts/audit_orchestrator/legacy/migrations/README.md

@@ -1,68 +0,0 @@
-# Legacy `audit_state` migration snapshots (retired in P4)
-
-These `.sql` files are **historical reference only**.  They were retired in
-Phase 4 (Alembic Migration Standardization, TSK-4.1.7) when the
-`audit_state` schema was placed under Alembic ownership.
-
-## Why they existed
-
-Pre-Phase-4, the `audit_state` schema was bootstrapped at runtime by
-`PostgresStateStore.init_schema()` consuming three string constants
-(`_BOOTSTRAP_TABLES_SQL`, `_BOOTSTRAP_INDEXES_SQL`, `_BOOTSTRAP_FUNCTIONS_SQL`)
-defined inline in `state/store.py`.  These `.sql` files were
-**parallel snapshots** of phase-numbered DDL deltas, kept as documentation
-and as manual-application artifacts for CI test databases that did not go
-through a normal `vds-audit` startup cycle.  They had **no runtime callers**
-in the orchestrator code path — only test files that read them as text to
-verify their content.
-
-## What replaced them
-
-All DDL is now squashed into the canonical Alembic migration:
-
-```
-audit_orchestrator/alembic/versions/0001_initial_audit_state_schema.py
-```
-
-That migration subsumes:
-
-- The combined `BOOTSTRAP_SQL` (tables + indexes + functions + view) that
-  `init_schema()` used to run.
-- The `ALTER TABLE audit_state.dispatch_lanes ADD COLUMN claimed_at` from
-  `phase157_dispatch_tables.sql` (the one delta that was NOT already in
-  `BOOTSTRAP_SQL`; the others were redundant restatements).
-- The schema_version anchor seed (`audit_state.schema_version` row at
-  `version=52`, `phase='Phase 50'`).
-
-All operations are idempotent — `IF NOT EXISTS` on tables/indexes,
-`CREATE OR REPLACE` on functions/view, `ON CONFLICT (id) DO UPDATE` on the
-schema_version seed — so an operator can safely run:
-
-```
-alembic -c audit_orchestrator/alembic.ini stamp 0001     # for already-bootstrapped DBs
-alembic -c audit_orchestrator/alembic.ini upgrade head   # no-op once stamped
-```
-
-against any pre-Phase-4 production database without data loss.
-
-## Catalog (with retirement provenance)
-
-| File | Phase | Status pre-P4 | Subsumed by 0001? |
-|---|---|---|---|
-| `phase117_phase118_shared_state.sql` | 117/118 | Already in `_BOOTSTRAP_TABLES_SQL` (project_evidence_discoveries, project_knowledge) | Yes |
-| `phase154_published_pages.sql` | 154 | Already in `_BOOTSTRAP_TABLES_SQL` (`published_pages`) | Yes |
-| `phase157_dispatch_tables.sql` | 157/168 | Mostly in `_BOOTSTRAP_TABLES_SQL`; `ALTER TABLE dispatch_lanes ADD COLUMN claimed_at` was the **only** delta not in BOOTSTRAP — folded into 0001 | Yes |
-| `phase157_events.sql` | 157 | Already in `_BOOTSTRAP_TABLES_SQL` (dispatch_events + sequence) | Yes |
-| `phase157_scope_snapshots.sql` | 157 | Already in `_BOOTSTRAP_TABLES_SQL` | Yes |
-| `phase157_status_view.sql` | 157 | Already in `_BOOTSTRAP_FUNCTIONS_SQL` (`dispatch_run_status` view) | Yes |
-| `phase169_dispatch_observability.sql` | 169 | Already in BOOTSTRAP — `heartbeat_at` column on `dispatch_runs`, widened `event_type` CHECK on `dispatch_events`, refreshed view | Yes |
-| `state_repair_hardening.sql` | (no phase) | Already in `_BOOTSTRAP_TABLES_SQL` — `repo_filter` column on `project_bitbucket_links`, `checklist_cache` table | Yes |
-
-## Do not edit
-
-These files are frozen.  Schema changes happen via new Alembic revisions:
-
-```
-./scripts/worktree_uv.sh run --project audit_orchestrator \
-  alembic -c audit_orchestrator/alembic.ini revision -m "add_<feature>"
-```

package/tools/vds-scripts/audit_orchestrator/legacy/migrations/phase117_phase118_shared_state.sql

@@ -1,64 +0,0 @@
--- Phase 117/118 additive shared state tables.
--- Runtime authority remains Postgres-backed state.
-
-CREATE TABLE IF NOT EXISTS audit_state.project_evidence_discoveries (
-    id TEXT PRIMARY KEY,
-    context_id TEXT NOT NULL,
-    project_key TEXT NOT NULL,
-    source_repo TEXT NOT NULL,
-    discovery_type TEXT NOT NULL,
-    ref TEXT NOT NULL,
-    excerpt TEXT NOT NULL,
-    confidence NUMERIC(5, 4) NOT NULL DEFAULT 0.0,
-    requirement_type_tag TEXT,
-    content_hash TEXT NOT NULL,
-    metadata JSONB NOT NULL DEFAULT '{}'::jsonb,
-    state_version INTEGER NOT NULL DEFAULT 1 CHECK (state_version > 0),
-    created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
-    updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
-    CONSTRAINT ck_audit_state_project_evidence_discoveries_confidence
-        CHECK (confidence >= 0.0 AND confidence <= 1.0),
-    CONSTRAINT uq_audit_state_project_evidence_discoveries_context_hash
-        UNIQUE(context_id, source_repo, content_hash)
-);
-
-CREATE INDEX IF NOT EXISTS idx_audit_state_project_evidence_discoveries_context_id
-    ON audit_state.project_evidence_discoveries(context_id);
-CREATE INDEX IF NOT EXISTS idx_audit_state_project_evidence_discoveries_source_repo
-    ON audit_state.project_evidence_discoveries(source_repo);
-CREATE INDEX IF NOT EXISTS idx_audit_state_project_evidence_discoveries_discovery_type
-    ON audit_state.project_evidence_discoveries(discovery_type);
-CREATE INDEX IF NOT EXISTS idx_audit_state_project_evidence_discoveries_context_created_at
-    ON audit_state.project_evidence_discoveries(context_id, created_at DESC);
-
-CREATE TABLE IF NOT EXISTS audit_state.project_knowledge (
-    id TEXT PRIMARY KEY,
-    project_key TEXT NOT NULL,
-    repo_key TEXT,
-    knowledge_type TEXT NOT NULL,
-    content TEXT NOT NULL,
-    confidence NUMERIC(5, 4) NOT NULL DEFAULT 0.0,
-    source_run_id TEXT NOT NULL,
-    requirement_type_tag TEXT,
-    execution_scope_class TEXT,
-    source_context_id TEXT,
-    metadata JSONB NOT NULL DEFAULT '{}'::jsonb,
-    expires_at TIMESTAMPTZ,
-    retired_at TIMESTAMPTZ,
-    state_version INTEGER NOT NULL DEFAULT 1 CHECK (state_version > 0),
-    created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
-    updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
-    CONSTRAINT ck_audit_state_project_knowledge_confidence
-        CHECK (confidence >= 0.0 AND confidence <= 1.0),
-    CONSTRAINT ck_audit_state_project_knowledge_content_not_blank
-        CHECK (length(btrim(content)) > 0)
-);
-
-CREATE INDEX IF NOT EXISTS idx_audit_state_project_knowledge_project_repo_type_created
-    ON audit_state.project_knowledge(project_key, repo_key, knowledge_type, created_at DESC);
-CREATE INDEX IF NOT EXISTS idx_audit_state_project_knowledge_project_created_at
-    ON audit_state.project_knowledge(project_key, created_at DESC);
-CREATE INDEX IF NOT EXISTS idx_audit_state_project_knowledge_expires_at
-    ON audit_state.project_knowledge(expires_at);
-CREATE INDEX IF NOT EXISTS idx_audit_state_project_knowledge_source_run_id
-    ON audit_state.project_knowledge(source_run_id);

package/tools/vds-scripts/audit_orchestrator/legacy/migrations/phase154_published_pages.sql

@@ -1,28 +0,0 @@
--- Phase 154: Published Pages Registry (FR-154.1)
--- Postgres-backed Confluence page identity registry that eliminates
--- title-based page deduplication by mapping logical publish coordinates
--- (project_key, repo_key, hierarchy_role) to Confluence page_id.
---
--- Idempotent: safe to re-run against an existing database.
-
-CREATE TABLE IF NOT EXISTS audit_state.published_pages (
-    id              BIGSERIAL PRIMARY KEY,
-    project_key     TEXT NOT NULL,
-    repo_key        TEXT NOT NULL DEFAULT '',
-    hierarchy_role  TEXT NOT NULL CHECK (hierarchy_role IN (
-        'audit_root', 'analysis_root', 'repo_root', 'repo_run', 'aggregate'
-    )),
-    confluence_page_id   TEXT NOT NULL,
-    confluence_page_title TEXT,
-    parent_page_id       TEXT,
-    created_at      TIMESTAMPTZ NOT NULL DEFAULT NOW(),
-    updated_at      TIMESTAMPTZ NOT NULL DEFAULT NOW(),
-    CONSTRAINT uq_published_pages_logical_key
-        UNIQUE (project_key, repo_key, hierarchy_role)
-);
-
-CREATE INDEX IF NOT EXISTS ix_published_pages_project_key
-    ON audit_state.published_pages (project_key);
-
-CREATE INDEX IF NOT EXISTS ix_published_pages_confluence_page_id
-    ON audit_state.published_pages (confluence_page_id);