create-safest-tools 0.3.0 → 0.4.0

package/template/migrations/0001_safest_resolve_baseline.sql

@@ -0,0 +1,2446 @@
+-- Safest Resolve fresh-install baseline.
+-- Squashed from the pre-customer migration history after release 0.3.1.
+PRAGMA foreign_keys = ON;
+
+CREATE TABLE installations (
+  id TEXT PRIMARY KEY,
+  display_name TEXT NOT NULL,
+  default_locale TEXT NOT NULL DEFAULT 'en',
+  anonymous_reporting_enabled INTEGER NOT NULL DEFAULT 0 CHECK (anonymous_reporting_enabled IN (0, 1)),
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+, timezone TEXT NOT NULL DEFAULT 'UTC', settings_json TEXT NOT NULL DEFAULT '{}');
+
+CREATE TABLE application_integrations (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id),
+  name TEXT NOT NULL,
+  key_id TEXT NOT NULL UNIQUE,
+  allowed_origins_json TEXT NOT NULL DEFAULT '[]',
+  enabled INTEGER NOT NULL DEFAULT 1 CHECK (enabled IN (0, 1)),
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+, scopes_json TEXT NOT NULL DEFAULT '["submit_reports","mint_context_tokens"]', channel_mode TEXT NOT NULL DEFAULT 'contextual'
+  CHECK (channel_mode IN ('contextual', 'anonymous')), form_version_id TEXT REFERENCES report_form_versions(id), context_schema_json TEXT NOT NULL
+  DEFAULT '{"version":1,"allow_unknown":true,"fields":[]}');
+
+CREATE TABLE report_form_versions (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id),
+  form_key TEXT NOT NULL,
+  version INTEGER NOT NULL CHECK (version > 0),
+  title TEXT NOT NULL,
+  description TEXT NOT NULL DEFAULT '',
+  target_types_json TEXT NOT NULL,
+  reasons_json TEXT NOT NULL,
+  fields_json TEXT NOT NULL,
+  consent_notice TEXT NOT NULL,
+  published_at TEXT,
+  retired_at TEXT,
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  UNIQUE (installation_id, form_key, version)
+);
+
+CREATE TABLE policy_versions (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id),
+  policy_key TEXT NOT NULL,
+  version INTEGER NOT NULL CHECK (version > 0),
+  title TEXT NOT NULL,
+  rules_json TEXT NOT NULL,
+  published_at TEXT,
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  UNIQUE (installation_id, policy_key, version)
+);
+
+CREATE TABLE queue_definitions (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id),
+  queue_key TEXT NOT NULL,
+  name TEXT NOT NULL,
+  queue_kind TEXT NOT NULL CHECK (queue_kind IN ('human', 'ai', 'appeal', 'operations')),
+  enabled INTEGER NOT NULL DEFAULT 1 CHECK (enabled IN (0, 1)),
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL, description TEXT NOT NULL DEFAULT '', purpose TEXT NOT NULL DEFAULT 'reports'
+  CHECK (purpose IN ('reports', 'appeals', 'quality', 'operations')), status TEXT NOT NULL DEFAULT 'active'
+  CHECK (status IN ('active', 'paused', 'archived')), position INTEGER NOT NULL DEFAULT 100, active_version_id TEXT, created_by TEXT NOT NULL DEFAULT 'system',
+  UNIQUE (installation_id, queue_key)
+);
+
+CREATE TABLE queue_versions (
+  id TEXT PRIMARY KEY,
+  queue_id TEXT NOT NULL REFERENCES queue_definitions(id),
+  version INTEGER NOT NULL CHECK (version > 0),
+  mode TEXT NOT NULL CHECK (mode IN ('off', 'shadow', 'assist', 'autonomous_low_priority')),
+  priority INTEGER NOT NULL DEFAULT 50 CHECK (priority BETWEEN 0 AND 100),
+  response_sla_minutes INTEGER,
+  resolution_sla_minutes INTEGER,
+  claim_ttl_minutes INTEGER NOT NULL DEFAULT 15 CHECK (claim_ttl_minutes BETWEEN 1 AND 1440),
+  fallback_queue_id TEXT REFERENCES queue_definitions(id),
+  configuration_json TEXT NOT NULL DEFAULT '{}',
+  published_at TEXT,
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL, management_mode TEXT NOT NULL DEFAULT 'human'
+  CHECK (management_mode IN ('human', 'ai', 'hybrid')), routing_criteria_json TEXT NOT NULL DEFAULT '{"match":"all","conditions":[]}', reviewer_instructions TEXT NOT NULL DEFAULT 'Review the report against the published customer policy.', ai_instructions TEXT, enrichment_requirements_json TEXT NOT NULL DEFAULT '[]', ai_bounds_json TEXT NOT NULL DEFAULT '{}', retired_at TEXT,
+  UNIQUE (queue_id, version)
+);
+
+CREATE TABLE routing_rule_versions (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id),
+  version INTEGER NOT NULL CHECK (version > 0),
+  rules_json TEXT NOT NULL,
+  fixture_results_json TEXT NOT NULL,
+  published_at TEXT,
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  UNIQUE (installation_id, version)
+);
+
+CREATE TABLE reports (
+  id TEXT PRIMARY KEY,
+  public_reference TEXT NOT NULL UNIQUE,
+  installation_id TEXT NOT NULL REFERENCES installations(id),
+  integration_id TEXT NOT NULL REFERENCES application_integrations(id),
+  idempotency_key TEXT NOT NULL,
+  source TEXT NOT NULL CHECK (source IN ('signed_widget', 'public_page', 'server_api')),
+  form_version_id TEXT REFERENCES report_form_versions(id),
+  policy_version_id TEXT REFERENCES policy_versions(id),
+  routing_rule_version_id TEXT REFERENCES routing_rule_versions(id),
+  queue_id TEXT REFERENCES queue_definitions(id),
+  state TEXT NOT NULL CHECK (state IN (
+    'received', 'human_review', 'ai_review', 'awaiting_reporter', 'resolved_by_human',
+    'resolved_by_ai', 'human_review_requested', 'appealed', 'closed'
+  )),
+  priority INTEGER NOT NULL DEFAULT 50 CHECK (priority BETWEEN 0 AND 100),
+  reason_code TEXT NOT NULL,
+  locale TEXT NOT NULL,
+  consent_notice TEXT NOT NULL,
+  consented_at TEXT NOT NULL,
+  submitted_at TEXT NOT NULL,
+  received_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  due_at TEXT,
+  resolved_at TEXT,
+  routing_status TEXT NOT NULL DEFAULT 'pending' CHECK (routing_status IN ('pending', 'enqueued', 'processing', 'complete', 'failed')),
+  routing_attempts INTEGER NOT NULL DEFAULT 0 CHECK (routing_attempts >= 0),
+  routing_error_code TEXT, queue_version_id TEXT REFERENCES queue_versions(id), routing_agent_version_id TEXT, routing_reason_json TEXT, intake_decision_id TEXT REFERENCES intake_decisions(id), duplicate_group_id TEXT REFERENCES duplicate_groups(id), quarantine_reason_code TEXT,
+  UNIQUE (integration_id, idempotency_key)
+);
+
+CREATE TABLE report_participants (
+  id TEXT PRIMARY KEY,
+  report_id TEXT NOT NULL REFERENCES reports(id) ON DELETE CASCADE,
+  audience TEXT NOT NULL CHECK (audience IN ('reporter', 'affected_user')),
+  reference TEXT,
+  contact_mode TEXT NOT NULL CHECK (contact_mode IN ('portal', 'customer_notification', 'none')),
+  contact_ciphertext TEXT,
+  created_at TEXT NOT NULL, reference_redacted_at TEXT,
+  UNIQUE (report_id, audience)
+);
+
+CREATE TABLE report_targets (
+  id TEXT PRIMARY KEY,
+  report_id TEXT NOT NULL REFERENCES reports(id) ON DELETE CASCADE,
+  target_type TEXT NOT NULL,
+  target_reference TEXT NOT NULL,
+  owner_reference TEXT,
+  customer_url TEXT,
+  signed_facts_json TEXT NOT NULL DEFAULT '{}',
+  created_at TEXT NOT NULL, sensitive_redacted_at TEXT, routing_facts_json TEXT NOT NULL DEFAULT '{}',
+  UNIQUE (report_id, target_type, target_reference)
+);
+
+CREATE TABLE report_answers (
+  report_id TEXT NOT NULL REFERENCES reports(id) ON DELETE CASCADE,
+  field_key TEXT NOT NULL,
+  value_json TEXT NOT NULL,
+  created_at TEXT NOT NULL, redacted_at TEXT,
+  PRIMARY KEY (report_id, field_key)
+);
+
+CREATE TABLE evidence_references (
+  id TEXT PRIMARY KEY,
+  report_id TEXT NOT NULL REFERENCES reports(id) ON DELETE CASCADE,
+  evidence_kind TEXT NOT NULL CHECK (evidence_kind IN ('allegation', 'signed_fact', 'customer_reference', 'fetched_record', 'snapshot')),
+  reference TEXT NOT NULL,
+  availability TEXT NOT NULL DEFAULT 'available' CHECK (availability IN ('available', 'unavailable', 'deleted', 'changed')),
+  retention_class TEXT NOT NULL DEFAULT 'reference',
+  created_at TEXT NOT NULL,
+  UNIQUE (report_id, evidence_kind, reference)
+);
+
+CREATE TABLE report_state_history (
+  id TEXT PRIMARY KEY,
+  report_id TEXT NOT NULL REFERENCES reports(id) ON DELETE CASCADE,
+  background_job_id TEXT UNIQUE REFERENCES background_jobs(id),
+  from_state TEXT,
+  to_state TEXT NOT NULL,
+  reason_code TEXT NOT NULL,
+  actor_type TEXT NOT NULL,
+  actor_id TEXT NOT NULL,
+  created_at TEXT NOT NULL
+);
+
+CREATE TABLE owner_setup_tokens (
+  id TEXT PRIMARY KEY,
+  email TEXT NOT NULL COLLATE NOCASE,
+  token_hash TEXT NOT NULL UNIQUE,
+  purpose TEXT NOT NULL CHECK (purpose IN ('bootstrap', 'recovery')),
+  status TEXT NOT NULL DEFAULT 'pending' CHECK (status IN ('pending', 'consumed', 'revoked')),
+  expires_at TEXT NOT NULL,
+  consumed_at TEXT,
+  revoked_at TEXT,
+  created_at TEXT NOT NULL
+);
+
+CREATE TABLE context_token_uses (
+  jti TEXT PRIMARY KEY,
+  integration_id TEXT NOT NULL REFERENCES application_integrations(id),
+  report_id TEXT NOT NULL UNIQUE REFERENCES reports(id) ON DELETE CASCADE,
+  used_at TEXT NOT NULL
+);
+
+CREATE TABLE case_messages (
+  id TEXT PRIMARY KEY,
+  report_id TEXT NOT NULL REFERENCES reports(id) ON DELETE CASCADE,
+  audience TEXT NOT NULL CHECK (audience IN ('internal', 'reporter', 'affected_user')),
+  direction TEXT NOT NULL CHECK (direction IN ('inbound', 'outbound', 'internal')),
+  sender_type TEXT NOT NULL CHECK (sender_type IN ('reporter', 'affected_user', 'human', 'ai', 'system')),
+  sender_id TEXT NOT NULL,
+  body TEXT NOT NULL,
+  template_version_id TEXT,
+  automated INTEGER NOT NULL DEFAULT 0 CHECK (automated IN (0, 1)),
+  delivery_state TEXT NOT NULL DEFAULT 'not_required' CHECK (delivery_state IN ('not_required', 'queued', 'delivered', 'failed', 'suppressed')),
+  created_at TEXT NOT NULL
+, idempotency_key TEXT, redacted_at TEXT, conversation_id TEXT REFERENCES conversations(id), workflow_run_id TEXT REFERENCES workflow_runs(id), audience_checked_at TEXT);
+
+CREATE TABLE review_claims (
+  report_id TEXT PRIMARY KEY REFERENCES reports(id) ON DELETE CASCADE,
+  reviewer_id TEXT NOT NULL,
+  claimed_at TEXT NOT NULL,
+  expires_at TEXT NOT NULL,
+  version INTEGER NOT NULL DEFAULT 1 CHECK (version > 0)
+);
+
+CREATE TABLE decisions (
+  id TEXT PRIMARY KEY,
+  report_id TEXT NOT NULL REFERENCES reports(id),
+  decision_code TEXT NOT NULL,
+  policy_version_id TEXT NOT NULL REFERENCES policy_versions(id),
+  policy_code TEXT NOT NULL,
+  rationale TEXT NOT NULL,
+  evidence_references_json TEXT NOT NULL,
+  maker_type TEXT NOT NULL CHECK (maker_type IN ('human', 'ai')),
+  maker_id TEXT NOT NULL,
+  queue_version_id TEXT REFERENCES queue_versions(id),
+  ai_run_id TEXT,
+  proposed_action_code TEXT,
+  supersedes_decision_id TEXT REFERENCES decisions(id),
+  created_at TEXT NOT NULL
+, idempotency_key TEXT, sensitive_redacted_at TEXT);
+
+CREATE TABLE notices (
+  id TEXT PRIMARY KEY,
+  report_id TEXT NOT NULL REFERENCES reports(id),
+  decision_id TEXT REFERENCES decisions(id),
+  audience TEXT NOT NULL CHECK (audience IN ('reporter', 'affected_user')),
+  template_version_id TEXT NOT NULL,
+  rendered_body TEXT NOT NULL,
+  delivery_state TEXT NOT NULL CHECK (delivery_state IN ('queued', 'delivered', 'failed', 'suppressed')),
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+, idempotency_key TEXT, message_id TEXT REFERENCES case_messages(id), redacted_at TEXT);
+
+CREATE TABLE "decision_action_outbox" (
+  id TEXT PRIMARY KEY,
+  report_id TEXT NOT NULL REFERENCES reports(id),
+  decision_id TEXT NOT NULL REFERENCES decisions(id),
+  idempotency_key TEXT NOT NULL UNIQUE,
+  action_code TEXT NOT NULL,
+  target_reference TEXT NOT NULL,
+  payload_json TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('pending', 'delivering', 'accepted', 'rejected', 'already_applied', 'failed')),
+  attempt_count INTEGER NOT NULL DEFAULT 0 CHECK (attempt_count >= 0),
+  next_attempt_at TEXT NOT NULL,
+  last_error_code TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+, lease_expires_at TEXT, terminal INTEGER NOT NULL DEFAULT 0 CHECK (terminal IN (0, 1)), payload_redacted_at TEXT);
+
+CREATE TABLE "decision_action_attempts" (
+  id TEXT PRIMARY KEY,
+  action_id TEXT NOT NULL REFERENCES "decision_action_outbox"(id) ON DELETE CASCADE,
+  attempt_number INTEGER NOT NULL CHECK (attempt_number > 0),
+  response_class TEXT NOT NULL,
+  response_status INTEGER,
+  error_code TEXT,
+  started_at TEXT NOT NULL,
+  finished_at TEXT NOT NULL,
+  UNIQUE (action_id, attempt_number)
+);
+
+CREATE TABLE notification_outbox (
+  id TEXT PRIMARY KEY,
+  notice_id TEXT NOT NULL REFERENCES notices(id),
+  idempotency_key TEXT NOT NULL UNIQUE,
+  channel TEXT NOT NULL CHECK (channel IN ('customer_webhook', 'email')),
+  payload_json TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('pending', 'delivering', 'delivered', 'failed', 'suppressed')),
+  attempt_count INTEGER NOT NULL DEFAULT 0 CHECK (attempt_count >= 0),
+  next_attempt_at TEXT NOT NULL,
+  last_error_code TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+, lease_expires_at TEXT, terminal INTEGER NOT NULL DEFAULT 0 CHECK (terminal IN (0, 1)), payload_redacted_at TEXT);
+
+CREATE TABLE notification_attempts (
+  id TEXT PRIMARY KEY,
+  notification_id TEXT NOT NULL REFERENCES notification_outbox(id) ON DELETE CASCADE,
+  attempt_number INTEGER NOT NULL CHECK (attempt_number > 0),
+  response_class TEXT NOT NULL,
+  response_status INTEGER,
+  error_code TEXT,
+  started_at TEXT NOT NULL,
+  finished_at TEXT NOT NULL,
+  UNIQUE (notification_id, attempt_number)
+);
+
+CREATE TABLE appeals (
+  id TEXT PRIMARY KEY,
+  report_id TEXT NOT NULL REFERENCES reports(id),
+  decision_id TEXT NOT NULL REFERENCES decisions(id),
+  appellant_audience TEXT NOT NULL CHECK (appellant_audience IN ('reporter', 'affected_user')),
+  reason TEXT NOT NULL,
+  state TEXT NOT NULL CHECK (state IN ('submitted', 'human_review', 'upheld', 'modified', 'reversed')),
+  queue_id TEXT NOT NULL REFERENCES queue_definitions(id),
+  submitted_at TEXT NOT NULL,
+  resolved_at TEXT, idempotency_key TEXT, reason_redacted_at TEXT,
+  UNIQUE (decision_id, appellant_audience)
+);
+
+CREATE TABLE appeal_decisions (
+  id TEXT PRIMARY KEY,
+  appeal_id TEXT NOT NULL UNIQUE REFERENCES appeals(id),
+  outcome TEXT NOT NULL CHECK (outcome IN ('upheld', 'modified', 'reversed')),
+  rationale TEXT NOT NULL,
+  reviewer_id TEXT NOT NULL,
+  corrective_action_id TEXT REFERENCES "decision_action_outbox"(id),
+  created_at TEXT NOT NULL
+, idempotency_key TEXT, rationale_redacted_at TEXT);
+
+CREATE TABLE background_jobs (
+  id TEXT PRIMARY KEY,
+  report_id TEXT REFERENCES reports(id),
+  job_type TEXT NOT NULL CHECK (job_type IN ('route_report', 'deliver_action', 'deliver_notification', 'resume_ai', 'retention')),
+  idempotency_key TEXT NOT NULL UNIQUE,
+  state TEXT NOT NULL CHECK (state IN ('pending', 'enqueued', 'processing', 'complete', 'failed', 'dead_letter')),
+  payload_json TEXT NOT NULL,
+  attempt_count INTEGER NOT NULL DEFAULT 0 CHECK (attempt_count >= 0),
+  available_at TEXT NOT NULL,
+  last_error_code TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+, ai_config_version_id TEXT REFERENCES ai_queue_config_versions(id));
+
+CREATE TABLE audit_entries (
+  sequence INTEGER PRIMARY KEY AUTOINCREMENT,
+  id TEXT NOT NULL UNIQUE,
+  action TEXT NOT NULL,
+  actor_type TEXT NOT NULL,
+  actor_id TEXT NOT NULL,
+  target_type TEXT NOT NULL,
+  target_id TEXT NOT NULL,
+  details_json TEXT NOT NULL,
+  previous_hash TEXT NOT NULL UNIQUE,
+  entry_hash TEXT NOT NULL UNIQUE,
+  created_at TEXT NOT NULL
+);
+
+CREATE TABLE daily_aggregates (
+  aggregate_date TEXT NOT NULL,
+  metric_key TEXT NOT NULL,
+  dimension_key TEXT NOT NULL,
+  dimension_value TEXT NOT NULL,
+  value INTEGER NOT NULL DEFAULT 0,
+  updated_at TEXT NOT NULL,
+  PRIMARY KEY (aggregate_date, metric_key, dimension_key, dimension_value)
+);
+
+CREATE TABLE message_template_versions (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id),
+  template_key TEXT NOT NULL,
+  version INTEGER NOT NULL CHECK (version > 0),
+  audience TEXT NOT NULL CHECK (audience IN ('reporter', 'affected_user')),
+  purpose TEXT NOT NULL CHECK (purpose IN ('follow_up', 'outcome', 'affected_user_notice', 'appeal_outcome')),
+  locale TEXT NOT NULL,
+  body_template TEXT NOT NULL,
+  published_at TEXT,
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL, automation_allowed INTEGER NOT NULL DEFAULT 0 CHECK (automation_allowed IN (0, 1)), variables_schema_json TEXT NOT NULL DEFAULT '{}',
+  UNIQUE (installation_id, template_key, version, locale)
+);
+
+CREATE TABLE appeal_claims (
+  appeal_id TEXT PRIMARY KEY REFERENCES appeals(id) ON DELETE CASCADE,
+  reviewer_id TEXT NOT NULL,
+  claimed_at TEXT NOT NULL,
+  expires_at TEXT NOT NULL,
+  version INTEGER NOT NULL DEFAULT 1 CHECK (version > 0)
+);
+
+CREATE TABLE audit_events (
+  id TEXT PRIMARY KEY,
+  idempotency_key TEXT NOT NULL UNIQUE,
+  action TEXT NOT NULL,
+  actor_type TEXT NOT NULL,
+  actor_id TEXT NOT NULL,
+  target_type TEXT NOT NULL,
+  target_id TEXT NOT NULL,
+  details_json TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  chained_at TEXT,
+  chain_error_code TEXT
+);
+
+CREATE TABLE intake_rate_limits (
+  bucket_key TEXT NOT NULL,
+  window_start TEXT NOT NULL,
+  request_count INTEGER NOT NULL DEFAULT 0 CHECK (request_count >= 0),
+  updated_at TEXT NOT NULL,
+  PRIMARY KEY (bucket_key, window_start)
+);
+
+CREATE TABLE ai_queue_config_versions (
+  id TEXT PRIMARY KEY,
+  queue_id TEXT NOT NULL REFERENCES queue_definitions(id),
+  version INTEGER NOT NULL CHECK (version > 0),
+  mode TEXT NOT NULL CHECK (mode IN ('off', 'shadow', 'assist', 'autonomous_low_priority')),
+  enabled INTEGER NOT NULL DEFAULT 0 CHECK (enabled IN (0, 1)),
+  provider TEXT NOT NULL CHECK (provider IN ('workers_ai')),
+  model TEXT NOT NULL,
+  input_cost_microusd_per_million INTEGER NOT NULL DEFAULT 0 CHECK (input_cost_microusd_per_million >= 0),
+  output_cost_microusd_per_million INTEGER NOT NULL DEFAULT 0 CHECK (output_cost_microusd_per_million >= 0),
+  prompt_version TEXT NOT NULL,
+  policy_version_id TEXT NOT NULL REFERENCES policy_versions(id),
+  eligible_form_versions_json TEXT NOT NULL,
+  eligible_sources_json TEXT NOT NULL,
+  eligible_reason_codes_json TEXT NOT NULL,
+  eligible_target_types_json TEXT NOT NULL,
+  allowed_fields_json TEXT NOT NULL,
+  allowed_outcomes_json TEXT NOT NULL,
+  allowed_action_codes_json TEXT NOT NULL DEFAULT '[]',
+  allowed_template_ids_json TEXT NOT NULL,
+  confidence_threshold REAL NOT NULL CHECK (confidence_threshold >= 0 AND confidence_threshold <= 1),
+  max_follow_up_turns INTEGER NOT NULL CHECK (max_follow_up_turns >= 0 AND max_follow_up_turns <= 5),
+  max_wait_hours INTEGER NOT NULL CHECK (max_wait_hours >= 1 AND max_wait_hours <= 720),
+  daily_report_budget INTEGER NOT NULL CHECK (daily_report_budget >= 0),
+  daily_cost_budget_microusd INTEGER NOT NULL CHECK (daily_cost_budget_microusd >= 0),
+  quality_sample_rate REAL NOT NULL CHECK (quality_sample_rate >= 0 AND quality_sample_rate <= 1),
+  fallback_queue_id TEXT NOT NULL REFERENCES queue_definitions(id),
+  pause_state TEXT NOT NULL DEFAULT 'ready' CHECK (pause_state IN ('ready', 'paused', 'budget_exhausted', 'quality_paused')),
+  published_at TEXT,
+  retired_at TEXT,
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  idempotency_key TEXT NOT NULL UNIQUE, minimum_shadow_runs INTEGER NOT NULL DEFAULT 25 CHECK (minimum_shadow_runs >= 1 AND minimum_shadow_runs <= 100000), minimum_quality_reviews INTEGER NOT NULL DEFAULT 5 CHECK (minimum_quality_reviews >= 0 AND minimum_quality_reviews <= 100000), maximum_failure_rate REAL NOT NULL DEFAULT 0.05 CHECK (maximum_failure_rate >= 0 AND maximum_failure_rate <= 1), maximum_disagreement_rate REAL NOT NULL DEFAULT 0.10 CHECK (maximum_disagreement_rate >= 0 AND maximum_disagreement_rate <= 1), pause_reason TEXT, paused_at TEXT, queue_version_id TEXT REFERENCES queue_versions(id),
+  UNIQUE (queue_id, version)
+);
+
+CREATE TABLE dead_letter_items (
+  id TEXT PRIMARY KEY,
+  fingerprint TEXT NOT NULL UNIQUE,
+  source_queue TEXT NOT NULL,
+  source_message_id TEXT NOT NULL,
+  job_type TEXT NOT NULL CHECK (job_type IN (
+    'route_report', 'process_ai_report', 'fetch_evidence',
+    'dispatch_workflow', 'deliver_action', 'deliver_notification', 'deliver_email',
+    'apply_action_proposal', 'invalid'
+  )),
+  job_id TEXT,
+  report_id TEXT REFERENCES reports(id),
+  outbox_id TEXT,
+  incident_id TEXT REFERENCES operations_incidents(id) ON DELETE SET NULL,
+  state TEXT NOT NULL DEFAULT 'open' CHECK (state IN ('open', 'acknowledged', 'resolved')),
+  error_code TEXT NOT NULL,
+  occurrence_count INTEGER NOT NULL DEFAULT 1 CHECK (occurrence_count > 0),
+  details_json TEXT NOT NULL DEFAULT '{}',
+  first_seen_at TEXT NOT NULL,
+  last_seen_at TEXT NOT NULL,
+  resolved_at TEXT
+);
+
+CREATE TABLE ai_runs (
+  id TEXT PRIMARY KEY,
+  report_id TEXT NOT NULL REFERENCES reports(id),
+  background_job_id TEXT NOT NULL UNIQUE REFERENCES background_jobs(id),
+  config_version_id TEXT NOT NULL REFERENCES ai_queue_config_versions(id),
+  mode TEXT NOT NULL CHECK (mode IN ('shadow', 'assist', 'autonomous_low_priority')),
+  provider TEXT NOT NULL,
+  model TEXT NOT NULL,
+  prompt_version TEXT NOT NULL,
+  policy_version_id TEXT NOT NULL REFERENCES policy_versions(id),
+  status TEXT NOT NULL CHECK (status IN ('running', 'succeeded', 'invalid', 'failed', 'escalated')),
+  input_references_json TEXT NOT NULL,
+  output_json TEXT,
+  error_code TEXT,
+  started_at TEXT NOT NULL,
+  finished_at TEXT,
+  input_units INTEGER,
+  output_units INTEGER,
+  estimated_cost_microusd INTEGER NOT NULL DEFAULT 0 CHECK (estimated_cost_microusd >= 0)
+, output_redacted_at TEXT);
+
+CREATE TABLE ai_results (
+  id TEXT PRIMARY KEY,
+  ai_run_id TEXT NOT NULL UNIQUE REFERENCES ai_runs(id) ON DELETE CASCADE,
+  outcome TEXT NOT NULL,
+  policy_code TEXT,
+  evidence_references_json TEXT NOT NULL,
+  summary TEXT NOT NULL,
+  confidence REAL,
+  uncertain INTEGER NOT NULL CHECK (uncertain IN (0, 1)),
+  message_template_id TEXT REFERENCES message_template_versions(id),
+  message_variables_json TEXT,
+  action_code TEXT,
+  escalation_code TEXT,
+  validation_state TEXT NOT NULL CHECK (validation_state IN ('valid', 'invalid')),
+  validation_errors_json TEXT NOT NULL,
+  created_at TEXT NOT NULL
+, redacted_at TEXT);
+
+CREATE TABLE ai_tool_calls (
+  id TEXT PRIMARY KEY,
+  ai_run_id TEXT NOT NULL REFERENCES ai_runs(id) ON DELETE CASCADE,
+  tool_name TEXT NOT NULL,
+  input_references_json TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('allowed', 'denied', 'succeeded', 'failed')),
+  error_code TEXT,
+  created_at TEXT NOT NULL
+);
+
+CREATE TABLE ai_quality_samples (
+  id TEXT PRIMARY KEY,
+  ai_run_id TEXT NOT NULL UNIQUE REFERENCES ai_runs(id),
+  report_id TEXT NOT NULL REFERENCES reports(id),
+  sample_reason TEXT NOT NULL,
+  state TEXT NOT NULL CHECK (state IN ('pending', 'claimed', 'complete')),
+  selected_at TEXT NOT NULL
+, claimed_by TEXT, claimed_at TEXT, claim_expires_at TEXT);
+
+CREATE TABLE quality_reviews (
+  id TEXT PRIMARY KEY,
+  sample_id TEXT NOT NULL UNIQUE REFERENCES ai_quality_samples(id),
+  reviewer_id TEXT NOT NULL,
+  agrees INTEGER NOT NULL CHECK (agrees IN (0, 1)),
+  notes TEXT NOT NULL,
+  created_at TEXT NOT NULL
+, notes_redacted_at TEXT, issue_codes_json TEXT NOT NULL DEFAULT '[]', corrected_outcome_code TEXT, corrected_policy_code TEXT, idempotency_key TEXT);
+
+CREATE TABLE ai_usage_daily (
+  usage_date TEXT NOT NULL,
+  config_version_id TEXT NOT NULL REFERENCES ai_queue_config_versions(id),
+  reports_started INTEGER NOT NULL DEFAULT 0 CHECK (reports_started >= 0),
+  reports_resolved INTEGER NOT NULL DEFAULT 0 CHECK (reports_resolved >= 0),
+  reports_escalated INTEGER NOT NULL DEFAULT 0 CHECK (reports_escalated >= 0),
+  failures INTEGER NOT NULL DEFAULT 0 CHECK (failures >= 0),
+  estimated_cost_microusd INTEGER NOT NULL DEFAULT 0 CHECK (estimated_cost_microusd >= 0),
+  updated_at TEXT NOT NULL, eligible_reports INTEGER NOT NULL DEFAULT 0 CHECK (eligible_reports >= 0), waiting_for_reporter INTEGER NOT NULL DEFAULT 0 CHECK (waiting_for_reporter >= 0), human_review_requests INTEGER NOT NULL DEFAULT 0 CHECK (human_review_requests >= 0), appeals_filed INTEGER NOT NULL DEFAULT 0 CHECK (appeals_filed >= 0), appeal_reversals INTEGER NOT NULL DEFAULT 0 CHECK (appeal_reversals >= 0), invalid_outputs INTEGER NOT NULL DEFAULT 0 CHECK (invalid_outputs >= 0), provider_errors INTEGER NOT NULL DEFAULT 0 CHECK (provider_errors >= 0), timeouts INTEGER NOT NULL DEFAULT 0 CHECK (timeouts >= 0),
+  PRIMARY KEY (usage_date, config_version_id)
+);
+
+CREATE TABLE legal_holds (
+  id TEXT PRIMARY KEY,
+  report_id TEXT NOT NULL REFERENCES reports(id) ON DELETE CASCADE,
+  reason TEXT NOT NULL,
+  state TEXT NOT NULL CHECK (state IN ('active', 'released')),
+  placed_by TEXT NOT NULL,
+  idempotency_key TEXT NOT NULL UNIQUE,
+  created_at TEXT NOT NULL,
+  released_by TEXT,
+  release_idempotency_key TEXT UNIQUE,
+  released_at TEXT
+);
+
+CREATE TABLE deletion_requests (
+  id TEXT PRIMARY KEY,
+  report_id TEXT NOT NULL REFERENCES reports(id) ON DELETE CASCADE,
+  scope TEXT NOT NULL CHECK (scope IN ('participant_data', 'all_permitted_data')),
+  reason TEXT NOT NULL,
+  state TEXT NOT NULL CHECK (state IN ('pending', 'blocked_by_hold', 'complete', 'failed')),
+  requested_by TEXT NOT NULL,
+  idempotency_key TEXT NOT NULL UNIQUE,
+  requested_at TEXT NOT NULL,
+  completed_at TEXT,
+  last_error_code TEXT
+);
+
+CREATE TABLE retention_jobs (
+  id TEXT PRIMARY KEY,
+  job_kind TEXT NOT NULL CHECK (job_kind IN ('scheduled_retention', 'deletion_request')),
+  state TEXT NOT NULL CHECK (state IN ('running', 'complete', 'failed')),
+  cutoff_at TEXT NOT NULL,
+  messages_redacted INTEGER NOT NULL DEFAULT 0 CHECK (messages_redacted >= 0),
+  reports_anonymized INTEGER NOT NULL DEFAULT 0 CHECK (reports_anonymized >= 0),
+  portal_sessions_revoked INTEGER NOT NULL DEFAULT 0 CHECK (portal_sessions_revoked >= 0),
+  error_code TEXT,
+  started_at TEXT NOT NULL,
+  finished_at TEXT
+);
+
+CREATE TABLE analyst_profiles (
+  actor_id TEXT PRIMARY KEY,
+  display_name TEXT NOT NULL,
+  email TEXT,
+  avatar_url TEXT,
+  avatar_color TEXT NOT NULL,
+  roles_json TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  last_authenticated_at TEXT NOT NULL
+);
+
+CREATE TABLE analyst_sessions (
+  id TEXT PRIMARY KEY,
+  actor_id TEXT NOT NULL REFERENCES analyst_profiles(actor_id) ON DELETE CASCADE,
+  activity_state TEXT NOT NULL DEFAULT 'online'
+    CHECK (activity_state IN ('online', 'viewing', 'editing', 'away')),
+  active_report_id TEXT REFERENCES reports(id) ON DELETE SET NULL,
+  connected_at TEXT NOT NULL,
+  last_seen_at TEXT NOT NULL
+);
+
+CREATE TABLE configuration_mutations (
+  idempotency_key TEXT PRIMARY KEY,
+  action TEXT NOT NULL,
+  actor_id TEXT NOT NULL,
+  target_id TEXT NOT NULL,
+  response_json TEXT NOT NULL,
+  created_at TEXT NOT NULL
+);
+
+CREATE TABLE routing_agent_versions (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id),
+  version INTEGER NOT NULL CHECK (version > 0),
+  enabled INTEGER NOT NULL DEFAULT 0 CHECK (enabled IN (0, 1)),
+  rollout_mode TEXT NOT NULL CHECK (rollout_mode IN ('off', 'shadow', 'active')),
+  provider TEXT NOT NULL DEFAULT 'workers_ai' CHECK (provider = 'workers_ai'),
+  model TEXT NOT NULL,
+  instructions TEXT NOT NULL,
+  candidate_queue_ids_json TEXT NOT NULL,
+  safeguard_queue_id TEXT NOT NULL REFERENCES queue_definitions(id),
+  default_queue_id TEXT NOT NULL REFERENCES queue_definitions(id),
+  confidence_threshold REAL NOT NULL CHECK (confidence_threshold BETWEEN 0 AND 1),
+  allowed_fields_json TEXT NOT NULL,
+  published_at TEXT NOT NULL,
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  idempotency_key TEXT NOT NULL UNIQUE,
+  UNIQUE (installation_id, version)
+);
+
+CREATE TABLE routing_agent_runs (
+  id TEXT PRIMARY KEY,
+  report_id TEXT NOT NULL REFERENCES reports(id) ON DELETE CASCADE,
+  routing_agent_version_id TEXT NOT NULL REFERENCES routing_agent_versions(id),
+  background_job_id TEXT NOT NULL UNIQUE REFERENCES background_jobs(id),
+  status TEXT NOT NULL CHECK (status IN ('running', 'succeeded', 'failed', 'rejected', 'shadowed')),
+  candidate_queue_ids_json TEXT NOT NULL,
+  selected_queue_id TEXT REFERENCES queue_definitions(id),
+  confidence REAL,
+  needs_human INTEGER CHECK (needs_human IN (0, 1)),
+  rationale TEXT,
+  validation_errors_json TEXT NOT NULL DEFAULT '[]',
+  started_at TEXT NOT NULL,
+  finished_at TEXT
+);
+
+CREATE TABLE component_runs (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  report_id TEXT NOT NULL REFERENCES reports(id) ON DELETE CASCADE,
+  workflow_run_id TEXT REFERENCES workflow_runs(id) ON DELETE SET NULL,
+  step_run_id TEXT REFERENCES workflow_step_runs(id) ON DELETE SET NULL,
+  component_version_id TEXT NOT NULL REFERENCES component_versions(id),
+  operation_id TEXT NOT NULL UNIQUE,
+  effect_class TEXT NOT NULL CHECK (effect_class IN ('read_only', 'side_effecting')),
+  state TEXT NOT NULL CHECK (state IN ('pending', 'running', 'succeeded', 'failed', 'timed_out', 'cancelled')),
+  input_json TEXT NOT NULL,
+  input_digest TEXT NOT NULL,
+  output_json TEXT,
+  output_digest TEXT,
+  finding_id TEXT REFERENCES findings(id),
+  cache_hit INTEGER NOT NULL DEFAULT 0 CHECK (cache_hit IN (0, 1)),
+  attempt_count INTEGER NOT NULL DEFAULT 0 CHECK (attempt_count >= 0),
+  error_code TEXT,
+  started_at TEXT,
+  finished_at TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE report_contexts (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  integration_id TEXT NOT NULL REFERENCES application_integrations(id) ON DELETE CASCADE,
+  form_version_id TEXT NOT NULL REFERENCES report_form_versions(id),
+  origin TEXT NOT NULL,
+  reporter_reference TEXT,
+  target_type TEXT NOT NULL,
+  target_reference TEXT NOT NULL,
+  target_owner_reference TEXT,
+  target_customer_url TEXT,
+  trusted_facts_json TEXT NOT NULL DEFAULT '{}',
+  routing_facts_json TEXT NOT NULL DEFAULT '{}',
+  context_schema_version INTEGER NOT NULL DEFAULT 1 CHECK (context_schema_version > 0),
+  assertion_source TEXT NOT NULL DEFAULT 'customer_backend'
+    CHECK (assertion_source IN ('customer_backend', 'resolve_hosted')),
+  created_at TEXT NOT NULL,
+  expires_at TEXT NOT NULL,
+  used_at TEXT,
+  report_id TEXT REFERENCES reports(id) ON DELETE SET NULL
+);
+
+CREATE TABLE owner_setup_rate_limits (
+  bucket_key TEXT PRIMARY KEY,
+  window_start TEXT NOT NULL,
+  request_count INTEGER NOT NULL CHECK (request_count > 0),
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE operator_users (
+  id TEXT PRIMARY KEY,
+  email TEXT NOT NULL COLLATE NOCASE UNIQUE,
+  display_name TEXT NOT NULL,
+  avatar_url TEXT,
+  roles_json TEXT NOT NULL,
+  status TEXT NOT NULL DEFAULT 'active'
+    CHECK (status IN ('active', 'suspended')),
+  invited_by TEXT,
+  accepted_at TEXT,
+  last_login_at TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+, avatar_object_key TEXT, avatar_uploaded_at TEXT);
+
+CREATE TABLE role_bindings (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  principal_type TEXT NOT NULL CHECK (principal_type IN ('operator_user', 'access_group', 'service_identity')),
+  principal_id TEXT NOT NULL,
+  role TEXT NOT NULL CHECK (role IN (
+    'owner', 'administrator', 'workflow_author', 'reviewer', 'appeal_reviewer',
+    'quality_reviewer', 'operations', 'auditor'
+  )),
+  queue_scope_json TEXT NOT NULL DEFAULT '[]',
+  field_scope_json TEXT NOT NULL DEFAULT '{}',
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  revoked_at TEXT
+);
+
+CREATE TABLE "infrastructure_owner_sessions" (
+  id TEXT PRIMARY KEY,
+  user_id TEXT NOT NULL REFERENCES operator_users(id) ON DELETE CASCADE,
+  token_hash TEXT NOT NULL UNIQUE,
+  csrf_hash TEXT NOT NULL,
+  expires_at TEXT NOT NULL,
+  last_seen_at TEXT NOT NULL,
+  revoked_at TEXT,
+  created_at TEXT NOT NULL
+);
+
+CREATE TABLE installation_features (
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  feature_key TEXT NOT NULL,
+  state TEXT NOT NULL CHECK (state IN ('unavailable', 'disabled', 'setup_required', 'ready', 'degraded', 'paused')),
+  capability_json TEXT NOT NULL DEFAULT '{}',
+  checked_at TEXT NOT NULL,
+  error_code TEXT,
+  revision INTEGER NOT NULL DEFAULT 1 CHECK (revision >= 1),
+  PRIMARY KEY (installation_id, feature_key)
+);
+
+CREATE TABLE service_identities (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  identity_key TEXT NOT NULL,
+  display_name TEXT NOT NULL,
+  identity_kind TEXT NOT NULL CHECK (identity_kind IN (
+    'integration', 'workflow_runtime', 'assistant', 'specialist_agent', 'delivery', 'maintenance'
+  )),
+  status TEXT NOT NULL CHECK (status IN ('active', 'paused', 'revoked')),
+  scopes_json TEXT NOT NULL DEFAULT '[]',
+  key_hash TEXT,
+  binding_reference TEXT,
+  created_at TEXT NOT NULL,
+  rotated_at TEXT,
+  revoked_at TEXT,
+  UNIQUE (installation_id, identity_key),
+  CHECK (key_hash IS NULL OR binding_reference IS NULL)
+);
+
+CREATE TABLE connection_definitions (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  connection_key TEXT NOT NULL,
+  name TEXT NOT NULL,
+  description TEXT NOT NULL DEFAULT '',
+  kind TEXT NOT NULL CHECK (kind IN (
+    'webhook', 'external_api', 'customer_worker', 'ai_provider', 'notification', 'email'
+  )),
+  status TEXT NOT NULL DEFAULT 'active' CHECK (status IN ('active', 'paused', 'archived')),
+  active_version_id TEXT,
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  UNIQUE (installation_id, connection_key)
+);
+
+CREATE TABLE connection_versions (
+  id TEXT PRIMARY KEY,
+  connection_id TEXT NOT NULL REFERENCES connection_definitions(id) ON DELETE CASCADE,
+  version INTEGER NOT NULL CHECK (version >= 1),
+  base_url TEXT,
+  service_binding_name TEXT,
+  allowed_hosts_json TEXT NOT NULL DEFAULT '[]',
+  allowed_methods_json TEXT NOT NULL DEFAULT '["POST"]',
+  allowed_path_prefixes_json TEXT NOT NULL DEFAULT '["/"]',
+  redirect_policy_json TEXT NOT NULL DEFAULT '{"follow":false,"maximum":0}',
+  request_limit_bytes INTEGER NOT NULL DEFAULT 65536 CHECK (request_limit_bytes BETWEEN 1 AND 1048576),
+  response_limit_bytes INTEGER NOT NULL DEFAULT 262144 CHECK (response_limit_bytes BETWEEN 1 AND 5242880),
+  response_content_types_json TEXT NOT NULL DEFAULT '["application/json"]',
+  timeout_ms INTEGER NOT NULL DEFAULT 5000 CHECK (timeout_ms BETWEEN 100 AND 120000),
+  concurrency_limit INTEGER NOT NULL DEFAULT 8 CHECK (concurrency_limit BETWEEN 1 AND 1000),
+  requests_per_window INTEGER NOT NULL DEFAULT 60 CHECK (requests_per_window BETWEEN 1 AND 1000000),
+  window_seconds INTEGER NOT NULL DEFAULT 60 CHECK (window_seconds BETWEEN 1 AND 86400),
+  credential_strategy TEXT NOT NULL DEFAULT 'none' CHECK (credential_strategy IN (
+    'none', 'static_header', 'bearer', 'hmac', 'oauth2_client_credentials',
+    'oauth2_authorization_code', 'mutual_tls', 'service_binding'
+  )),
+  secret_reference TEXT,
+  signing_strategy_json TEXT NOT NULL DEFAULT '{}',
+  oauth_configuration_json TEXT NOT NULL DEFAULT '{}',
+  published_at TEXT NOT NULL,
+  retired_at TEXT,
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  UNIQUE (connection_id, version),
+  CHECK ((base_url IS NOT NULL) != (service_binding_name IS NOT NULL))
+);
+
+CREATE TABLE connection_health (
+  connection_version_id TEXT PRIMARY KEY REFERENCES connection_versions(id) ON DELETE CASCADE,
+  state TEXT NOT NULL DEFAULT 'unknown' CHECK (state IN ('unknown', 'healthy', 'degraded', 'open_circuit', 'paused')),
+  consecutive_failures INTEGER NOT NULL DEFAULT 0 CHECK (consecutive_failures >= 0),
+  opened_at TEXT,
+  next_probe_at TEXT,
+  last_success_at TEXT,
+  last_error_code TEXT,
+  revision INTEGER NOT NULL DEFAULT 1 CHECK (revision >= 1),
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE connection_credentials (
+  id TEXT PRIMARY KEY,
+  connection_version_id TEXT NOT NULL REFERENCES connection_versions(id) ON DELETE CASCADE,
+  strategy TEXT NOT NULL CHECK (strategy IN (
+    'static_header', 'bearer', 'hmac', 'oauth2_client_credentials',
+    'oauth2_authorization_code', 'mutual_tls', 'service_binding'
+  )),
+  secret_reference TEXT,
+  encrypted_access_token TEXT,
+  encrypted_refresh_token TEXT,
+  token_type TEXT,
+  granted_scopes_json TEXT NOT NULL DEFAULT '[]',
+  expires_at TEXT,
+  status TEXT NOT NULL DEFAULT 'pending' CHECK (status IN ('pending', 'active', 'refresh_failed', 'revoked')),
+  last_refresh_at TEXT,
+  last_error_code TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  UNIQUE (connection_version_id)
+);
+
+CREATE TABLE connection_oauth_states (
+  id TEXT PRIMARY KEY,
+  connection_id TEXT NOT NULL REFERENCES connection_definitions(id) ON DELETE CASCADE,
+  actor_id TEXT NOT NULL,
+  operator_session_id TEXT,
+  state_hash TEXT NOT NULL UNIQUE,
+  pkce_verifier_ciphertext TEXT,
+  redirect_uri TEXT NOT NULL,
+  requested_scopes_json TEXT NOT NULL DEFAULT '[]',
+  expires_at TEXT NOT NULL,
+  consumed_at TEXT,
+  created_at TEXT NOT NULL
+);
+
+CREATE TABLE component_definitions (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  component_key TEXT NOT NULL,
+  name TEXT NOT NULL,
+  description TEXT NOT NULL DEFAULT '',
+  component_kind TEXT NOT NULL CHECK (component_kind IN (
+    'built_in', 'webhook_enrichment', 'api_enrichment', 'workers_ai',
+    'specialist_agent', 'action', 'message'
+  )),
+  effect_class TEXT NOT NULL CHECK (effect_class IN ('read_only', 'side_effecting')),
+  owner_kind TEXT NOT NULL DEFAULT 'customer' CHECK (owner_kind IN ('safest', 'customer')),
+  status TEXT NOT NULL DEFAULT 'active' CHECK (status IN ('active', 'paused', 'deprecated', 'archived')),
+  active_version_id TEXT,
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  UNIQUE (installation_id, component_key)
+);
+
+CREATE TABLE component_versions (
+  id TEXT PRIMARY KEY,
+  definition_id TEXT NOT NULL REFERENCES component_definitions(id) ON DELETE CASCADE,
+  version INTEGER NOT NULL CHECK (version >= 1),
+  implementation_kind TEXT NOT NULL CHECK (implementation_kind IN (
+    'built_in', 'webhook', 'external_api', 'workers_ai', 'specialist_agent', 'message_template'
+  )),
+  implementation_reference TEXT NOT NULL,
+  input_schema_json TEXT NOT NULL,
+  output_schema_json TEXT NOT NULL,
+  allowed_input_fields_json TEXT NOT NULL DEFAULT '[]',
+  data_classifications_json TEXT NOT NULL DEFAULT '[]',
+  connection_version_id TEXT REFERENCES connection_versions(id),
+  risk_class TEXT NOT NULL DEFAULT 'low' CHECK (risk_class IN ('low', 'medium', 'high', 'critical')),
+  timeout_policy_json TEXT NOT NULL,
+  retry_policy_json TEXT NOT NULL,
+  cache_policy_json TEXT NOT NULL DEFAULT '{"enabled":false}',
+  concurrency_policy_json TEXT NOT NULL DEFAULT '{}',
+  budget_policy_json TEXT NOT NULL DEFAULT '{}',
+  approval_policy_json TEXT NOT NULL DEFAULT '{}',
+  tool_manifest_json TEXT NOT NULL DEFAULT '[]',
+  compatibility_json TEXT NOT NULL DEFAULT '{}',
+  package_digest TEXT,
+  signature_metadata_json TEXT,
+  published_at TEXT NOT NULL,
+  retired_at TEXT,
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  UNIQUE (definition_id, version)
+);
+
+CREATE TABLE component_fixtures (
+  id TEXT PRIMARY KEY,
+  component_version_id TEXT NOT NULL REFERENCES component_versions(id) ON DELETE CASCADE,
+  name TEXT NOT NULL,
+  input_json TEXT NOT NULL,
+  expected_json TEXT NOT NULL,
+  expected_status TEXT NOT NULL DEFAULT 'succeeded' CHECK (expected_status IN ('succeeded', 'failed', 'timed_out')),
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  UNIQUE (component_version_id, name)
+);
+
+CREATE TABLE component_test_runs (
+  id TEXT PRIMARY KEY,
+  component_version_id TEXT NOT NULL REFERENCES component_versions(id) ON DELETE CASCADE,
+  fixture_id TEXT REFERENCES component_fixtures(id) ON DELETE SET NULL,
+  status TEXT NOT NULL CHECK (status IN ('running', 'passed', 'failed')),
+  output_json TEXT,
+  error_code TEXT,
+  started_by TEXT NOT NULL,
+  started_at TEXT NOT NULL,
+  finished_at TEXT
+);
+
+CREATE TABLE workflow_definitions (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  workflow_key TEXT NOT NULL,
+  name TEXT NOT NULL,
+  description TEXT NOT NULL DEFAULT '',
+  purpose TEXT NOT NULL CHECK (purpose IN ('report', 'appeal', 'quality', 'operations')),
+  status TEXT NOT NULL DEFAULT 'active' CHECK (status IN ('active', 'paused', 'archived')),
+  active_version_id TEXT,
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  UNIQUE (installation_id, workflow_key)
+);
+
+CREATE TABLE workflow_drafts (
+  id TEXT PRIMARY KEY,
+  workflow_id TEXT NOT NULL REFERENCES workflow_definitions(id) ON DELETE CASCADE,
+  graph_json TEXT NOT NULL,
+  graph_digest TEXT NOT NULL,
+  revision INTEGER NOT NULL DEFAULT 1 CHECK (revision >= 1),
+  validation_json TEXT NOT NULL DEFAULT '{"valid":false,"errors":[],"warnings":[]}',
+  validation_digest TEXT,
+  validation_status TEXT NOT NULL DEFAULT 'unvalidated' CHECK (validation_status IN ('unvalidated', 'valid', 'invalid')),
+  created_by TEXT NOT NULL,
+  updated_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  UNIQUE (workflow_id)
+);
+
+CREATE TABLE workflow_artifacts (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  compiler_version TEXT NOT NULL,
+  compatibility_date TEXT NOT NULL,
+  graph_digest TEXT NOT NULL,
+  source_digest TEXT NOT NULL,
+  bundle_digest TEXT NOT NULL,
+  manifest_digest TEXT NOT NULL,
+  bundle_r2_key TEXT,
+  inline_source_text TEXT,
+  bundle_size_bytes INTEGER NOT NULL CHECK (bundle_size_bytes >= 0),
+  capability_manifest_json TEXT NOT NULL,
+  compiler_warnings_json TEXT NOT NULL DEFAULT '[]',
+  signature_metadata_json TEXT,
+  status TEXT NOT NULL DEFAULT 'ready' CHECK (status IN ('building', 'ready', 'invalid', 'missing', 'quarantined')),
+  created_at TEXT NOT NULL,
+  verified_at TEXT,
+  UNIQUE (installation_id, bundle_digest),
+  CHECK (bundle_r2_key IS NOT NULL OR inline_source_text IS NOT NULL)
+);
+
+CREATE TABLE workflow_versions (
+  id TEXT PRIMARY KEY,
+  workflow_id TEXT NOT NULL REFERENCES workflow_definitions(id) ON DELETE CASCADE,
+  version INTEGER NOT NULL CHECK (version >= 1),
+  graph_json TEXT NOT NULL,
+  graph_digest TEXT NOT NULL,
+  input_schema_json TEXT NOT NULL DEFAULT '{"type":"object"}',
+  output_schema_json TEXT NOT NULL DEFAULT '{"type":"object"}',
+  authority_mode TEXT NOT NULL DEFAULT 'assist' CHECK (authority_mode IN ('off', 'shadow', 'assist', 'bounded_auto')),
+  dependency_manifest_json TEXT NOT NULL,
+  capability_manifest_json TEXT NOT NULL,
+  artifact_id TEXT NOT NULL REFERENCES workflow_artifacts(id),
+  compiler_version TEXT NOT NULL,
+  test_evidence_json TEXT NOT NULL,
+  published_by TEXT NOT NULL,
+  published_at TEXT NOT NULL,
+  retired_at TEXT,
+  UNIQUE (workflow_id, version)
+);
+
+CREATE TABLE workflow_dependencies (
+  workflow_version_id TEXT NOT NULL REFERENCES workflow_versions(id) ON DELETE CASCADE,
+  dependency_type TEXT NOT NULL CHECK (dependency_type IN (
+    'component', 'connection', 'policy', 'template', 'model_alias', 'agent', 'workflow', 'compiler'
+  )),
+  dependency_key TEXT NOT NULL,
+  dependency_version_id TEXT NOT NULL,
+  dependency_digest TEXT,
+  PRIMARY KEY (workflow_version_id, dependency_type, dependency_key)
+);
+
+CREATE TABLE workflow_fixtures (
+  id TEXT PRIMARY KEY,
+  workflow_id TEXT NOT NULL REFERENCES workflow_definitions(id) ON DELETE CASCADE,
+  name TEXT NOT NULL,
+  input_json TEXT NOT NULL,
+  component_results_json TEXT NOT NULL DEFAULT '{}',
+  human_responses_json TEXT NOT NULL DEFAULT '{}',
+  expected_json TEXT NOT NULL,
+  failure_injection_json TEXT NOT NULL DEFAULT '{}',
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  UNIQUE (workflow_id, name)
+);
+
+CREATE TABLE workflow_test_runs (
+  id TEXT PRIMARY KEY,
+  workflow_id TEXT NOT NULL REFERENCES workflow_definitions(id) ON DELETE CASCADE,
+  workflow_version_id TEXT REFERENCES workflow_versions(id) ON DELETE SET NULL,
+  fixture_id TEXT REFERENCES workflow_fixtures(id) ON DELETE SET NULL,
+  graph_digest TEXT NOT NULL,
+  mode TEXT NOT NULL CHECK (mode IN ('simulation', 'shadow')),
+  status TEXT NOT NULL CHECK (status IN ('running', 'passed', 'failed')),
+  result_json TEXT,
+  error_json TEXT,
+  started_by TEXT NOT NULL,
+  started_at TEXT NOT NULL,
+  finished_at TEXT
+);
+
+CREATE TABLE queue_workflow_pins (
+  id TEXT PRIMARY KEY,
+  queue_id TEXT NOT NULL REFERENCES queue_definitions(id) ON DELETE CASCADE,
+  queue_version_id TEXT REFERENCES queue_versions(id),
+  workflow_version_id TEXT NOT NULL REFERENCES workflow_versions(id),
+  mode TEXT NOT NULL DEFAULT 'primary' CHECK (mode IN ('shadow', 'primary')),
+  rollback_of_pin_id TEXT REFERENCES queue_workflow_pins(id),
+  activated_by TEXT NOT NULL,
+  activated_at TEXT NOT NULL,
+  deactivated_at TEXT
+);
+
+CREATE TABLE workflow_runs (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  report_id TEXT REFERENCES reports(id) ON DELETE SET NULL,
+  appeal_id TEXT REFERENCES appeals(id) ON DELETE SET NULL,
+  parent_run_id TEXT REFERENCES workflow_runs(id),
+  workflow_version_id TEXT NOT NULL REFERENCES workflow_versions(id),
+  queue_id TEXT REFERENCES queue_definitions(id),
+  queue_version_id TEXT REFERENCES queue_versions(id),
+  pin_id TEXT REFERENCES queue_workflow_pins(id),
+  run_kind TEXT NOT NULL CHECK (run_kind IN ('primary', 'appeal', 'shadow', 'quality', 'linked', 'test')),
+  authority_mode TEXT NOT NULL CHECK (authority_mode IN ('off', 'shadow', 'assist', 'bounded_auto')),
+  state TEXT NOT NULL CHECK (state IN (
+    'created', 'dispatch_pending', 'queued', 'running', 'waiting', 'paused',
+    'succeeded', 'failed', 'terminated', 'superseded', 'repair_required'
+  )),
+  cloudflare_instance_id TEXT,
+  graph_digest TEXT NOT NULL,
+  artifact_digest TEXT NOT NULL,
+  input_json TEXT NOT NULL,
+  output_json TEXT,
+  current_node_id TEXT,
+  error_code TEXT,
+  error_summary TEXT,
+  started_at TEXT,
+  waiting_at TEXT,
+  finished_at TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  revision INTEGER NOT NULL DEFAULT 1 CHECK (revision >= 1),
+  UNIQUE (cloudflare_instance_id)
+);
+
+CREATE TABLE workflow_run_links (
+  parent_run_id TEXT NOT NULL REFERENCES workflow_runs(id) ON DELETE CASCADE,
+  child_run_id TEXT NOT NULL REFERENCES workflow_runs(id) ON DELETE CASCADE,
+  link_type TEXT NOT NULL CHECK (link_type IN ('handoff', 'appeal', 'shadow', 'quality', 'subworkflow')),
+  node_id TEXT,
+  created_at TEXT NOT NULL,
+  PRIMARY KEY (parent_run_id, child_run_id)
+);
+
+CREATE TABLE workflow_step_runs (
+  id TEXT PRIMARY KEY,
+  run_id TEXT NOT NULL REFERENCES workflow_runs(id) ON DELETE CASCADE,
+  node_id TEXT NOT NULL,
+  node_type TEXT NOT NULL,
+  branch_key TEXT NOT NULL DEFAULT '',
+  occurrence INTEGER NOT NULL DEFAULT 1 CHECK (occurrence >= 1),
+  state TEXT NOT NULL CHECK (state IN (
+    'pending', 'running', 'waiting', 'succeeded', 'failed', 'skipped', 'timed_out', 'cancelled'
+  )),
+  input_digest TEXT,
+  output_digest TEXT,
+  started_at TEXT,
+  waiting_at TEXT,
+  finished_at TEXT,
+  updated_at TEXT NOT NULL,
+  UNIQUE (run_id, node_id, branch_key, occurrence)
+);
+
+CREATE TABLE workflow_step_attempts (
+  id TEXT PRIMARY KEY,
+  step_run_id TEXT NOT NULL REFERENCES workflow_step_runs(id) ON DELETE CASCADE,
+  attempt INTEGER NOT NULL CHECK (attempt >= 1),
+  operation_id TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('running', 'succeeded', 'retryable_failed', 'permanent_failed', 'timed_out')),
+  request_digest TEXT,
+  response_digest TEXT,
+  error_code TEXT,
+  error_class TEXT,
+  retry_at TEXT,
+  started_at TEXT NOT NULL,
+  finished_at TEXT, external_request_id TEXT, cost_microusd INTEGER NOT NULL DEFAULT 0 CHECK (cost_microusd >= 0),
+  UNIQUE (step_run_id, attempt),
+  UNIQUE (operation_id)
+);
+
+CREATE TABLE workflow_step_outputs (
+  step_run_id TEXT PRIMARY KEY REFERENCES workflow_step_runs(id) ON DELETE CASCADE,
+  inline_json TEXT,
+  r2_object_key TEXT,
+  digest TEXT NOT NULL,
+  size_bytes INTEGER NOT NULL CHECK (size_bytes >= 0),
+  data_classification_json TEXT NOT NULL DEFAULT '[]',
+  created_at TEXT NOT NULL,
+  CHECK (inline_json IS NOT NULL OR r2_object_key IS NOT NULL)
+);
+
+CREATE TABLE workflow_event_inbox (
+  id TEXT PRIMARY KEY,
+  run_id TEXT NOT NULL REFERENCES workflow_runs(id) ON DELETE CASCADE,
+  event_type TEXT NOT NULL,
+  event_key TEXT NOT NULL,
+  source_type TEXT NOT NULL,
+  source_id TEXT,
+  payload_json TEXT NOT NULL,
+  payload_digest TEXT NOT NULL,
+  received_at TEXT NOT NULL,
+  delivered_at TEXT,
+  delivery_attempts INTEGER NOT NULL DEFAULT 0 CHECK (delivery_attempts >= 0),
+  last_error_code TEXT,
+  UNIQUE (run_id, event_type, event_key)
+);
+
+CREATE TABLE workflow_waits (
+  id TEXT PRIMARY KEY,
+  run_id TEXT NOT NULL REFERENCES workflow_runs(id) ON DELETE CASCADE,
+  step_run_id TEXT NOT NULL REFERENCES workflow_step_runs(id) ON DELETE CASCADE,
+  wait_type TEXT NOT NULL CHECK (wait_type IN ('event', 'delay', 'human_task', 'participant_reply', 'deadline')),
+  event_type TEXT,
+  state TEXT NOT NULL CHECK (state IN ('waiting', 'satisfied', 'timed_out', 'cancelled')),
+  deadline_at TEXT,
+  satisfied_event_id TEXT REFERENCES workflow_event_inbox(id),
+  created_at TEXT NOT NULL,
+  satisfied_at TEXT,
+  UNIQUE (step_run_id)
+);
+
+CREATE TABLE workflow_dispatch_outbox (
+  id TEXT PRIMARY KEY,
+  run_id TEXT NOT NULL REFERENCES workflow_runs(id) ON DELETE CASCADE,
+  operation TEXT NOT NULL CHECK (operation IN ('start', 'event', 'pause', 'resume', 'terminate', 'reconcile')),
+  event_inbox_id TEXT REFERENCES workflow_event_inbox(id),
+  operation_key TEXT NOT NULL UNIQUE,
+  state TEXT NOT NULL DEFAULT 'pending' CHECK (state IN ('pending', 'leased', 'delivered', 'failed', 'dead_letter')),
+  attempt_count INTEGER NOT NULL DEFAULT 0 CHECK (attempt_count >= 0),
+  available_at TEXT NOT NULL,
+  lease_expires_at TEXT,
+  last_error_code TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE findings (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  report_id TEXT NOT NULL REFERENCES reports(id) ON DELETE CASCADE,
+  run_id TEXT REFERENCES workflow_runs(id) ON DELETE SET NULL,
+  step_run_id TEXT REFERENCES workflow_step_runs(id) ON DELETE SET NULL,
+  component_version_id TEXT REFERENCES component_versions(id),
+  ai_run_id TEXT REFERENCES ai_runs(id),
+  finding_type TEXT NOT NULL,
+  subject_type TEXT NOT NULL,
+  subject_reference TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('available', 'unavailable', 'invalid', 'stale', 'superseded')),
+  confidence REAL CHECK (confidence IS NULL OR (confidence >= 0 AND confidence <= 1)),
+  summary TEXT NOT NULL,
+  data_json TEXT NOT NULL,
+  provenance_json TEXT NOT NULL,
+  uncertainty_json TEXT NOT NULL DEFAULT '[]',
+  input_digest TEXT,
+  output_digest TEXT NOT NULL,
+  expires_at TEXT,
+  created_at TEXT NOT NULL,
+  superseded_at TEXT
+);
+
+CREATE TABLE human_tasks (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  report_id TEXT REFERENCES reports(id) ON DELETE SET NULL,
+  appeal_id TEXT REFERENCES appeals(id) ON DELETE SET NULL,
+  run_id TEXT NOT NULL REFERENCES workflow_runs(id) ON DELETE CASCADE,
+  step_run_id TEXT NOT NULL REFERENCES workflow_step_runs(id) ON DELETE CASCADE,
+  task_type TEXT NOT NULL CHECK (task_type IN (
+    'review', 'approval', 'appeal_review', 'quality_review', 'operations', 'information_request'
+  )),
+  state TEXT NOT NULL CHECK (state IN ('open', 'claimed', 'completed', 'expired', 'cancelled')),
+  queue_id TEXT REFERENCES queue_definitions(id),
+  assigned_operator_id TEXT,
+  context_json TEXT NOT NULL,
+  context_digest TEXT NOT NULL,
+  response_schema_json TEXT NOT NULL,
+  action_proposal_id TEXT,
+  due_at TEXT,
+  escalation_at TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  completed_at TEXT,
+  UNIQUE (step_run_id)
+);
+
+CREATE TABLE human_task_claims (
+  id TEXT PRIMARY KEY,
+  task_id TEXT NOT NULL REFERENCES human_tasks(id) ON DELETE CASCADE,
+  operator_id TEXT NOT NULL,
+  claimed_at TEXT NOT NULL,
+  expires_at TEXT NOT NULL,
+  released_at TEXT,
+  release_reason TEXT
+);
+
+CREATE TABLE human_task_responses (
+  id TEXT PRIMARY KEY,
+  task_id TEXT NOT NULL REFERENCES human_tasks(id) ON DELETE CASCADE,
+  claim_id TEXT REFERENCES human_task_claims(id),
+  operator_id TEXT NOT NULL,
+  response_json TEXT NOT NULL,
+  response_digest TEXT NOT NULL,
+  idempotency_key TEXT NOT NULL,
+  submitted_at TEXT NOT NULL,
+  UNIQUE (task_id),
+  UNIQUE (operator_id, idempotency_key)
+);
+
+CREATE TABLE action_proposals (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  report_id TEXT NOT NULL REFERENCES reports(id) ON DELETE CASCADE,
+  appeal_id TEXT REFERENCES appeals(id) ON DELETE SET NULL,
+  run_id TEXT REFERENCES workflow_runs(id) ON DELETE SET NULL,
+  step_run_id TEXT REFERENCES workflow_step_runs(id) ON DELETE SET NULL,
+  decision_id TEXT REFERENCES decisions(id),
+  action_code TEXT NOT NULL,
+  target_json TEXT NOT NULL,
+  payload_json TEXT NOT NULL,
+  preconditions_json TEXT NOT NULL DEFAULT '{}',
+  payload_digest TEXT NOT NULL,
+  component_version_id TEXT REFERENCES component_versions(id),
+  authority_mode TEXT NOT NULL CHECK (authority_mode IN ('assist', 'bounded_auto')),
+  approval_policy_json TEXT NOT NULL,
+  state TEXT NOT NULL CHECK (state IN (
+    'proposed', 'approval_required', 'approved', 'rejected', 'queued',
+    'applying', 'applied', 'failed', 'cancelled', 'compensation_required', 'compensated'
+  )),
+  operation_id TEXT NOT NULL UNIQUE,
+  compensates_proposal_id TEXT REFERENCES action_proposals(id),
+  created_by_type TEXT NOT NULL,
+  created_by_id TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+, delivery_attempt_count INTEGER NOT NULL DEFAULT 0 CHECK (delivery_attempt_count >= 0), next_attempt_at TEXT, lease_expires_at TEXT, last_error_code TEXT, delivery_terminal INTEGER NOT NULL DEFAULT 0 CHECK (delivery_terminal IN (0, 1)));
+
+CREATE TABLE action_approvals (
+  id TEXT PRIMARY KEY,
+  proposal_id TEXT NOT NULL REFERENCES action_proposals(id) ON DELETE CASCADE,
+  task_id TEXT REFERENCES human_tasks(id),
+  approver_id TEXT NOT NULL,
+  payload_digest TEXT NOT NULL,
+  decision TEXT NOT NULL CHECK (decision IN ('approved', 'rejected')),
+  reason TEXT,
+  idempotency_key TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  UNIQUE (proposal_id),
+  UNIQUE (approver_id, idempotency_key)
+);
+
+CREATE TABLE appeal_workflow_links (
+  appeal_id TEXT PRIMARY KEY REFERENCES appeals(id) ON DELETE CASCADE,
+  run_id TEXT NOT NULL UNIQUE REFERENCES workflow_runs(id) ON DELETE CASCADE,
+  original_run_id TEXT REFERENCES workflow_runs(id),
+  original_decision_id TEXT REFERENCES decisions(id),
+  created_at TEXT NOT NULL
+);
+
+CREATE TABLE conversations (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  report_id TEXT NOT NULL REFERENCES reports(id) ON DELETE CASCADE,
+  audience TEXT NOT NULL CHECK (audience IN ('internal', 'reporter', 'affected_user')),
+  participant_id TEXT REFERENCES report_participants(id),
+  status TEXT NOT NULL DEFAULT 'open' CHECK (status IN ('open', 'closed', 'suppressed')),
+  locale TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  UNIQUE (report_id, audience)
+);
+
+CREATE TABLE email_deliveries (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  message_id TEXT NOT NULL REFERENCES case_messages(id) ON DELETE CASCADE,
+  notification_outbox_id TEXT REFERENCES notification_outbox(id),
+  audience TEXT NOT NULL CHECK (audience IN ('operator', 'reporter', 'affected_user')),
+  recipient_hash TEXT NOT NULL,
+  provider TEXT NOT NULL,
+  provider_message_id TEXT,
+  state TEXT NOT NULL CHECK (state IN ('pending', 'sending', 'delivered', 'failed', 'suppressed', 'bounced')),
+  attempt_count INTEGER NOT NULL DEFAULT 0 CHECK (attempt_count >= 0),
+  last_error_code TEXT,
+  next_attempt_at TEXT,
+  delivered_at TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE model_aliases (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  alias_key TEXT NOT NULL,
+  name TEXT NOT NULL,
+  status TEXT NOT NULL DEFAULT 'active' CHECK (status IN ('active', 'paused', 'archived')),
+  active_version_id TEXT,
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  UNIQUE (installation_id, alias_key)
+);
+
+CREATE TABLE model_alias_versions (
+  id TEXT PRIMARY KEY,
+  alias_id TEXT NOT NULL REFERENCES model_aliases(id) ON DELETE CASCADE,
+  version INTEGER NOT NULL CHECK (version >= 1),
+  provider TEXT NOT NULL,
+  model TEXT NOT NULL,
+  connection_version_id TEXT REFERENCES connection_versions(id),
+  fallback_alias_version_id TEXT REFERENCES model_alias_versions(id),
+  input_cost_microusd_per_million INTEGER NOT NULL DEFAULT 0 CHECK (input_cost_microusd_per_million >= 0),
+  output_cost_microusd_per_million INTEGER NOT NULL DEFAULT 0 CHECK (output_cost_microusd_per_million >= 0),
+  capability_json TEXT NOT NULL DEFAULT '{}',
+  data_policy_json TEXT NOT NULL DEFAULT '{}',
+  published_at TEXT NOT NULL,
+  retired_at TEXT,
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  UNIQUE (alias_id, version)
+);
+
+CREATE TABLE agent_definitions (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  agent_key TEXT NOT NULL,
+  name TEXT NOT NULL,
+  description TEXT NOT NULL DEFAULT '',
+  agent_kind TEXT NOT NULL CHECK (agent_kind IN ('routing', 'specialist', 'assistant', 'shadow')),
+  status TEXT NOT NULL DEFAULT 'active' CHECK (status IN ('active', 'paused', 'archived')),
+  active_version_id TEXT,
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  UNIQUE (installation_id, agent_key)
+);
+
+CREATE TABLE agent_versions (
+  id TEXT PRIMARY KEY,
+  agent_id TEXT NOT NULL REFERENCES agent_definitions(id) ON DELETE CASCADE,
+  version INTEGER NOT NULL CHECK (version >= 1),
+  prompt_version_id TEXT NOT NULL,
+  model_alias_version_id TEXT REFERENCES model_alias_versions(id),
+  tool_manifest_json TEXT NOT NULL,
+  memory_policy_json TEXT NOT NULL DEFAULT '{}',
+  maximum_turns INTEGER NOT NULL DEFAULT 8 CHECK (maximum_turns BETWEEN 1 AND 100),
+  approval_policy_json TEXT NOT NULL DEFAULT '{}',
+  input_schema_json TEXT NOT NULL,
+  output_schema_json TEXT NOT NULL,
+  published_at TEXT NOT NULL,
+  retired_at TEXT,
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  UNIQUE (agent_id, version)
+);
+
+CREATE TABLE assistant_sessions (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  principal_id TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('active', 'closed', 'expired')),
+  timezone TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  expires_at TEXT NOT NULL
+, idempotency_key TEXT);
+
+CREATE TABLE assistant_messages (
+  id TEXT PRIMARY KEY,
+  session_id TEXT NOT NULL REFERENCES assistant_sessions(id) ON DELETE CASCADE,
+  role TEXT NOT NULL CHECK (role IN ('user', 'assistant', 'system', 'tool')),
+  body TEXT NOT NULL,
+  citations_json TEXT NOT NULL DEFAULT '[]',
+  model_alias_version_id TEXT REFERENCES model_alias_versions(id),
+  created_at TEXT NOT NULL
+, idempotency_key TEXT);
+
+CREATE TABLE assistant_tool_calls (
+  id TEXT PRIMARY KEY,
+  session_id TEXT NOT NULL REFERENCES assistant_sessions(id) ON DELETE CASCADE,
+  message_id TEXT REFERENCES assistant_messages(id) ON DELETE SET NULL,
+  tool_name TEXT NOT NULL,
+  permission_snapshot_json TEXT NOT NULL,
+  input_json TEXT,
+  input_digest TEXT NOT NULL,
+  output_summary_json TEXT,
+  output_digest TEXT,
+  status TEXT NOT NULL CHECK (status IN ('running', 'succeeded', 'failed', 'denied')),
+  error_code TEXT,
+  started_at TEXT NOT NULL,
+  finished_at TEXT,
+  audit_event_id TEXT REFERENCES audit_events(id)
+);
+
+CREATE TABLE shadow_comparisons (
+  id TEXT PRIMARY KEY,
+  report_id TEXT NOT NULL REFERENCES reports(id) ON DELETE CASCADE,
+  primary_run_id TEXT REFERENCES workflow_runs(id) ON DELETE SET NULL,
+  shadow_run_id TEXT NOT NULL REFERENCES workflow_runs(id) ON DELETE CASCADE,
+  primary_decision_id TEXT REFERENCES decisions(id),
+  shadow_finding_id TEXT REFERENCES findings(id),
+  comparison_codes_json TEXT NOT NULL,
+  severity TEXT NOT NULL CHECK (severity IN ('info', 'low', 'medium', 'high', 'critical')),
+  status TEXT NOT NULL CHECK (status IN ('pending', 'quality_task_created', 'reviewed', 'dismissed')),
+  created_at TEXT NOT NULL,
+  reviewed_at TEXT
+);
+
+CREATE TABLE budget_policies (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  scope_type TEXT NOT NULL CHECK (scope_type IN (
+    'installation', 'queue', 'workflow', 'component', 'connection', 'agent', 'assistant', 'shadow'
+  )),
+  scope_id TEXT NOT NULL,
+  metric TEXT NOT NULL CHECK (metric IN (
+    'reports', 'calls', 'concurrent_calls', 'input_units', 'output_units', 'cost_microusd',
+    'emails', 'actions', 'evidence_fetches', 'storage_bytes'
+  )),
+  limit_value INTEGER NOT NULL CHECK (limit_value >= 0),
+  window_seconds INTEGER NOT NULL CHECK (window_seconds BETWEEN 1 AND 2678400),
+  behavior TEXT NOT NULL CHECK (behavior IN ('block', 'fallback', 'defer', 'sample', 'pause')),
+  fallback_reference TEXT,
+  published_at TEXT NOT NULL,
+  retired_at TEXT,
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL
+);
+
+CREATE TABLE budget_usage (
+  policy_id TEXT NOT NULL REFERENCES budget_policies(id) ON DELETE CASCADE,
+  window_start TEXT NOT NULL,
+  reserved_value INTEGER NOT NULL DEFAULT 0 CHECK (reserved_value >= 0),
+  consumed_value INTEGER NOT NULL DEFAULT 0 CHECK (consumed_value >= 0),
+  revision INTEGER NOT NULL DEFAULT 1 CHECK (revision >= 1),
+  updated_at TEXT NOT NULL,
+  PRIMARY KEY (policy_id, window_start)
+);
+
+CREATE TABLE budget_reservations (
+  id TEXT PRIMARY KEY,
+  policy_id TEXT NOT NULL REFERENCES budget_policies(id) ON DELETE CASCADE,
+  window_start TEXT NOT NULL,
+  operation_type TEXT NOT NULL,
+  operation_id TEXT NOT NULL,
+  attempt_id TEXT NOT NULL,
+  reserved_value INTEGER NOT NULL CHECK (reserved_value >= 0),
+  committed_value INTEGER CHECK (committed_value IS NULL OR committed_value >= 0),
+  status TEXT NOT NULL CHECK (status IN ('reserved', 'committed', 'released', 'expired')),
+  expires_at TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  UNIQUE (policy_id, operation_id, attempt_id)
+);
+
+CREATE TABLE intake_decisions (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  integration_id TEXT REFERENCES application_integrations(id),
+  report_id TEXT REFERENCES reports(id) ON DELETE SET NULL,
+  request_id TEXT NOT NULL,
+  decision TEXT NOT NULL CHECK (decision IN ('accept', 'challenge', 'reject', 'quarantine', 'group')),
+  reason_codes_json TEXT NOT NULL,
+  source TEXT NOT NULL CHECK (source IN ('signed_widget', 'public_page', 'server_api', 'connector')),
+  network_key_hash TEXT,
+  contact_key_hash TEXT,
+  target_key_hash TEXT,
+  campaign_fingerprint TEXT,
+  turnstile_outcome TEXT,
+  rate_summary_json TEXT NOT NULL DEFAULT '{}',
+  created_at TEXT NOT NULL,
+  UNIQUE (installation_id, request_id)
+);
+
+CREATE TABLE duplicate_groups (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  fingerprint_version TEXT NOT NULL,
+  fingerprint TEXT NOT NULL,
+  target_type TEXT NOT NULL,
+  target_reference_hash TEXT NOT NULL,
+  reason_family TEXT,
+  state TEXT NOT NULL CHECK (state IN ('active', 'split', 'merged', 'closed')),
+  canonical_report_id TEXT REFERENCES reports(id) ON DELETE SET NULL,
+  member_count INTEGER NOT NULL DEFAULT 0 CHECK (member_count >= 0),
+  first_seen_at TEXT NOT NULL,
+  last_seen_at TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  UNIQUE (installation_id, fingerprint_version, fingerprint)
+);
+
+CREATE TABLE duplicate_group_members (
+  group_id TEXT NOT NULL REFERENCES duplicate_groups(id) ON DELETE CASCADE,
+  report_id TEXT NOT NULL UNIQUE REFERENCES reports(id) ON DELETE CASCADE,
+  similarity_basis_json TEXT NOT NULL,
+  added_at TEXT NOT NULL,
+  removed_at TEXT,
+  PRIMARY KEY (group_id, report_id)
+);
+
+CREATE TABLE abuse_surge_states (
+  installation_id TEXT PRIMARY KEY REFERENCES installations(id) ON DELETE CASCADE,
+  state TEXT NOT NULL CHECK (state IN ('normal', 'elevated', 'surge', 'recovery')),
+  reason_codes_json TEXT NOT NULL,
+  activated_at TEXT,
+  recover_after TEXT,
+  revision INTEGER NOT NULL DEFAULT 1 CHECK (revision >= 1),
+  updated_by TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+);
+
+CREATE TABLE report_queue_assignments (
+  id TEXT PRIMARY KEY,
+  report_id TEXT NOT NULL REFERENCES reports(id) ON DELETE CASCADE,
+  queue_id TEXT NOT NULL REFERENCES queue_definitions(id),
+  queue_version_id TEXT REFERENCES queue_versions(id),
+  routing_rule_version_id TEXT REFERENCES routing_rule_versions(id),
+  routing_agent_version_id TEXT,
+  assignment_kind TEXT NOT NULL CHECK (assignment_kind IN ('initial', 'reassignment', 'handoff', 'fallback')),
+  reason_json TEXT NOT NULL,
+  assigned_by_type TEXT NOT NULL,
+  assigned_by_id TEXT NOT NULL,
+  assigned_at TEXT NOT NULL,
+  ended_at TEXT
+);
+
+CREATE TABLE evidence_fetch_requests (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  report_id TEXT NOT NULL REFERENCES reports(id) ON DELETE CASCADE,
+  evidence_reference_id TEXT NOT NULL REFERENCES evidence_references(id) ON DELETE CASCADE,
+  run_id TEXT REFERENCES workflow_runs(id) ON DELETE SET NULL,
+  step_run_id TEXT REFERENCES workflow_step_runs(id) ON DELETE SET NULL,
+  connection_version_id TEXT NOT NULL REFERENCES connection_versions(id),
+  requested_fields_json TEXT NOT NULL,
+  freshness_requirement_seconds INTEGER CHECK (freshness_requirement_seconds IS NULL OR freshness_requirement_seconds >= 0),
+  state TEXT NOT NULL CHECK (state IN ('pending', 'fetching', 'available', 'unavailable', 'failed')),
+  operation_id TEXT NOT NULL UNIQUE,
+  next_attempt_at TEXT NOT NULL,
+  attempt_count INTEGER NOT NULL DEFAULT 0 CHECK (attempt_count >= 0),
+  last_error_code TEXT,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL
+, request_method TEXT NOT NULL DEFAULT 'POST', request_path TEXT NOT NULL DEFAULT '/v1/evidence/fetch');
+
+CREATE TABLE evidence_fetch_attempts (
+  id TEXT PRIMARY KEY,
+  request_id TEXT NOT NULL REFERENCES evidence_fetch_requests(id) ON DELETE CASCADE,
+  attempt_number INTEGER NOT NULL CHECK (attempt_number >= 1),
+  request_digest TEXT NOT NULL,
+  response_status INTEGER,
+  response_digest TEXT,
+  response_class TEXT NOT NULL,
+  error_code TEXT,
+  started_at TEXT NOT NULL,
+  finished_at TEXT NOT NULL,
+  UNIQUE (request_id, attempt_number)
+);
+
+CREATE TABLE evidence_snapshots (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  report_id TEXT NOT NULL REFERENCES reports(id) ON DELETE CASCADE,
+  evidence_reference_id TEXT REFERENCES evidence_references(id) ON DELETE SET NULL,
+  fetch_request_id TEXT REFERENCES evidence_fetch_requests(id) ON DELETE SET NULL,
+  r2_object_key TEXT NOT NULL UNIQUE,
+  content_type TEXT NOT NULL,
+  size_bytes INTEGER NOT NULL CHECK (size_bytes >= 0),
+  digest TEXT NOT NULL,
+  encryption_key_reference TEXT,
+  retention_class TEXT NOT NULL,
+  access_policy_json TEXT NOT NULL,
+  source_observed_at TEXT,
+  created_by_type TEXT NOT NULL,
+  created_by_id TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  deleted_at TEXT
+);
+
+CREATE TABLE evidence_access_events (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  report_id TEXT NOT NULL REFERENCES reports(id) ON DELETE CASCADE,
+  evidence_reference_id TEXT REFERENCES evidence_references(id) ON DELETE SET NULL,
+  snapshot_id TEXT REFERENCES evidence_snapshots(id) ON DELETE SET NULL,
+  actor_type TEXT NOT NULL,
+  actor_id TEXT NOT NULL,
+  purpose_code TEXT NOT NULL,
+  request_id TEXT NOT NULL,
+  accessed_at TEXT NOT NULL
+);
+
+CREATE TABLE operations_incidents (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  incident_key TEXT NOT NULL,
+  severity TEXT NOT NULL CHECK (severity IN ('info', 'low', 'medium', 'high', 'critical')),
+  category TEXT NOT NULL,
+  state TEXT NOT NULL CHECK (state IN ('open', 'acknowledged', 'mitigated', 'resolved')),
+  title TEXT NOT NULL,
+  summary TEXT NOT NULL,
+  entity_type TEXT,
+  entity_id TEXT,
+  occurrence_count INTEGER NOT NULL DEFAULT 1 CHECK (occurrence_count >= 1),
+  first_seen_at TEXT NOT NULL,
+  last_seen_at TEXT NOT NULL,
+  acknowledged_by TEXT,
+  acknowledged_at TEXT,
+  resolved_by TEXT,
+  resolved_at TEXT,
+  resolution_summary TEXT,
+  metadata_json TEXT NOT NULL DEFAULT '{}',
+  UNIQUE (installation_id, incident_key)
+);
+
+CREATE TABLE reconciliation_runs (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  reconciliation_kind TEXT NOT NULL,
+  state TEXT NOT NULL CHECK (state IN ('running', 'succeeded', 'failed', 'partial')),
+  cursor_json TEXT NOT NULL DEFAULT '{}',
+  scanned_count INTEGER NOT NULL DEFAULT 0 CHECK (scanned_count >= 0),
+  repaired_count INTEGER NOT NULL DEFAULT 0 CHECK (repaired_count >= 0),
+  incident_count INTEGER NOT NULL DEFAULT 0 CHECK (incident_count >= 0),
+  error_code TEXT,
+  started_at TEXT NOT NULL,
+  finished_at TEXT
+);
+
+CREATE TABLE repair_actions (
+  id TEXT PRIMARY KEY,
+  reconciliation_run_id TEXT REFERENCES reconciliation_runs(id) ON DELETE SET NULL,
+  incident_id TEXT REFERENCES operations_incidents(id) ON DELETE SET NULL,
+  action_type TEXT NOT NULL,
+  entity_type TEXT NOT NULL,
+  entity_id TEXT NOT NULL,
+  operation_key TEXT NOT NULL UNIQUE,
+  state TEXT NOT NULL CHECK (state IN ('planned', 'applied', 'failed', 'skipped')),
+  before_json TEXT,
+  after_json TEXT,
+  error_code TEXT,
+  planned_by TEXT NOT NULL,
+  planned_at TEXT NOT NULL,
+  applied_at TEXT
+);
+
+CREATE TABLE security_events (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  event_type TEXT NOT NULL,
+  severity TEXT NOT NULL CHECK (severity IN ('info', 'low', 'medium', 'high', 'critical')),
+  actor_type TEXT,
+  actor_id TEXT,
+  source_key_hash TEXT,
+  entity_type TEXT,
+  entity_id TEXT,
+  details_json TEXT NOT NULL,
+  created_at TEXT NOT NULL
+);
+
+CREATE TABLE export_jobs (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  requested_by TEXT NOT NULL,
+  export_type TEXT NOT NULL CHECK (export_type IN ('reports_csv', 'reports_ndjson', 'audit_ndjson', 'configuration')),
+  filters_json TEXT NOT NULL,
+  redaction_policy_json TEXT NOT NULL,
+  state TEXT NOT NULL CHECK (state IN ('pending', 'running', 'ready', 'failed', 'expired', 'deleted')),
+  r2_object_key TEXT,
+  digest TEXT,
+  size_bytes INTEGER CHECK (size_bytes IS NULL OR size_bytes >= 0),
+  row_count INTEGER CHECK (row_count IS NULL OR row_count >= 0),
+  error_code TEXT,
+  requested_at TEXT NOT NULL,
+  ready_at TEXT,
+  expires_at TEXT,
+  deleted_at TEXT
+, idempotency_key TEXT);
+
+CREATE TABLE backup_manifests (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  environment TEXT NOT NULL,
+  schema_version INTEGER NOT NULL CHECK (schema_version >= 1),
+  application_version TEXT NOT NULL,
+  d1_export_reference TEXT NOT NULL,
+  d1_digest TEXT NOT NULL,
+  r2_manifest_reference TEXT,
+  r2_manifest_digest TEXT,
+  encryption_metadata_json TEXT NOT NULL DEFAULT '{}',
+  state TEXT NOT NULL CHECK (state IN ('planned', 'running', 'complete', 'failed', 'verified')),
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  completed_at TEXT,
+  verified_at TEXT
+);
+
+CREATE TABLE deletion_proofs (
+  id TEXT PRIMARY KEY,
+  deletion_request_id TEXT NOT NULL REFERENCES deletion_requests(id) ON DELETE CASCADE,
+  proof_json TEXT NOT NULL,
+  proof_digest TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  UNIQUE (deletion_request_id)
+);
+
+CREATE TABLE connection_attempts (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  connection_version_id TEXT NOT NULL REFERENCES connection_versions(id),
+  component_run_id TEXT REFERENCES component_runs(id) ON DELETE SET NULL,
+  action_proposal_id TEXT REFERENCES action_proposals(id) ON DELETE SET NULL,
+  operation_id TEXT NOT NULL,
+  attempt_number INTEGER NOT NULL CHECK (attempt_number >= 1),
+  method TEXT NOT NULL,
+  destination_origin TEXT NOT NULL,
+  destination_path_hash TEXT NOT NULL,
+  request_digest TEXT NOT NULL,
+  response_status INTEGER,
+  response_digest TEXT,
+  response_class TEXT NOT NULL CHECK (response_class IN (
+    'success', 'retryable', 'permanent', 'timeout', 'circuit_open', 'denied', 'invalid'
+  )),
+  error_code TEXT,
+  started_at TEXT NOT NULL,
+  finished_at TEXT NOT NULL,
+  UNIQUE (operation_id, attempt_number)
+);
+
+CREATE TABLE component_cache_entries (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  component_version_id TEXT NOT NULL REFERENCES component_versions(id) ON DELETE CASCADE,
+  subject_key_hash TEXT NOT NULL,
+  input_digest TEXT NOT NULL,
+  finding_id TEXT NOT NULL REFERENCES findings(id) ON DELETE CASCADE,
+  output_json TEXT NOT NULL,
+  output_digest TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  expires_at TEXT NOT NULL,
+  UNIQUE (component_version_id, subject_key_hash, input_digest)
+);
+
+CREATE TABLE operator_invitations (
+  id TEXT PRIMARY KEY,
+  email TEXT NOT NULL COLLATE NOCASE,
+  role TEXT NOT NULL CHECK (role IN (
+    'administrator', 'workflow_author', 'reviewer', 'appeal_reviewer',
+    'quality_reviewer', 'operations', 'auditor'
+  )),
+  token_hash TEXT NOT NULL UNIQUE,
+  status TEXT NOT NULL DEFAULT 'pending' CHECK (status IN ('pending', 'accepted', 'revoked')),
+  invited_by TEXT NOT NULL,
+  accepted_by TEXT REFERENCES operator_users(id),
+  expires_at TEXT NOT NULL,
+  accepted_at TEXT,
+  revoked_at TEXT,
+  created_at TEXT NOT NULL
+);
+
+CREATE TABLE workflow_ai_runs (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  report_id TEXT NOT NULL REFERENCES reports(id) ON DELETE CASCADE,
+  workflow_run_id TEXT NOT NULL REFERENCES workflow_runs(id) ON DELETE CASCADE,
+  step_run_id TEXT NOT NULL REFERENCES workflow_step_runs(id) ON DELETE CASCADE,
+  component_version_id TEXT REFERENCES component_versions(id),
+  agent_version_id TEXT REFERENCES agent_versions(id),
+  authority_mode TEXT NOT NULL CHECK (authority_mode IN ('shadow', 'assist', 'bounded_auto')),
+  provider TEXT NOT NULL,
+  model TEXT NOT NULL,
+  prompt_version_id TEXT,
+  output_schema_digest TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('running', 'succeeded', 'invalid', 'failed', 'timed_out')),
+  input_digest TEXT NOT NULL,
+  output_json TEXT,
+  output_digest TEXT,
+  validation_errors_json TEXT NOT NULL DEFAULT '[]',
+  input_units INTEGER CHECK (input_units IS NULL OR input_units >= 0),
+  output_units INTEGER CHECK (output_units IS NULL OR output_units >= 0),
+  estimated_cost_microusd INTEGER NOT NULL DEFAULT 0 CHECK (estimated_cost_microusd >= 0),
+  provider_request_id TEXT,
+  started_at TEXT NOT NULL,
+  finished_at TEXT,
+  UNIQUE (step_run_id, component_version_id, agent_version_id)
+);
+
+CREATE TABLE connection_execution_leases (
+  id TEXT PRIMARY KEY,
+  connection_version_id TEXT NOT NULL REFERENCES connection_versions(id) ON DELETE CASCADE,
+  operation_id TEXT NOT NULL,
+  attempt_number INTEGER NOT NULL CHECK (attempt_number >= 1),
+  expires_at TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  UNIQUE (operation_id, attempt_number)
+);
+
+CREATE TABLE prompt_versions (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  prompt_key TEXT NOT NULL,
+  version INTEGER NOT NULL CHECK (version >= 1),
+  name TEXT NOT NULL,
+  template_text TEXT NOT NULL,
+  variable_schema_json TEXT NOT NULL DEFAULT '{"type":"object"}',
+  prompt_digest TEXT NOT NULL,
+  status TEXT NOT NULL DEFAULT 'published' CHECK (status IN ('published', 'retired')),
+  published_at TEXT NOT NULL,
+  retired_at TEXT,
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  UNIQUE (installation_id, prompt_key, version),
+  UNIQUE (installation_id, prompt_digest)
+);
+
+CREATE TABLE ai_registry_mutations (
+  idempotency_key TEXT PRIMARY KEY,
+  action TEXT NOT NULL,
+  actor_id TEXT NOT NULL,
+  target_id TEXT NOT NULL,
+  response_json TEXT NOT NULL,
+  created_at TEXT NOT NULL
+);
+
+CREATE TABLE configuration_drafts (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  configuration_type TEXT NOT NULL CHECK (configuration_type IN ('form', 'policy', 'template', 'routing_rules')),
+  configuration_key TEXT NOT NULL,
+  content_json TEXT NOT NULL,
+  content_digest TEXT NOT NULL,
+  validation_json TEXT NOT NULL DEFAULT '{"valid":false,"errors":[{"code":"not_validated"}]}',
+  validation_status TEXT NOT NULL DEFAULT 'not_validated' CHECK (validation_status IN ('not_validated', 'valid', 'invalid')),
+  revision INTEGER NOT NULL DEFAULT 1 CHECK (revision >= 1),
+  last_published_version_id TEXT,
+  created_by TEXT NOT NULL,
+  updated_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  UNIQUE (installation_id, configuration_type, configuration_key)
+);
+
+CREATE TABLE assistant_drafts (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  session_id TEXT NOT NULL REFERENCES assistant_sessions(id) ON DELETE CASCADE,
+  principal_id TEXT NOT NULL,
+  draft_type TEXT NOT NULL CHECK (draft_type IN ('workflow', 'form', 'policy', 'template', 'routing_rules')),
+  target_id TEXT,
+  title TEXT NOT NULL,
+  content_json TEXT NOT NULL,
+  content_digest TEXT NOT NULL,
+  status TEXT NOT NULL DEFAULT 'draft' CHECK (status IN ('draft', 'adopted', 'expired')),
+  idempotency_key TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  adopted_at TEXT,
+  adopted_target_id TEXT,
+  UNIQUE (session_id, idempotency_key)
+);
+
+CREATE TABLE integration_api_keys (
+  id TEXT PRIMARY KEY,
+  integration_id TEXT NOT NULL REFERENCES application_integrations(id) ON DELETE CASCADE,
+  key_id TEXT NOT NULL UNIQUE,
+  key_hash TEXT NOT NULL UNIQUE,
+  status TEXT NOT NULL DEFAULT 'active' CHECK (status IN ('active', 'revoked', 'expired')),
+  valid_from TEXT NOT NULL,
+  expires_at TEXT,
+  created_by TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  revoked_by TEXT,
+  revoked_at TEXT
+);
+
+CREATE TABLE saved_views (
+  id TEXT PRIMARY KEY,
+  installation_id TEXT NOT NULL REFERENCES installations(id) ON DELETE CASCADE,
+  principal_id TEXT NOT NULL,
+  name TEXT NOT NULL,
+  filters_json TEXT NOT NULL,
+  created_at TEXT NOT NULL,
+  updated_at TEXT NOT NULL,
+  UNIQUE (installation_id, principal_id, name)
+);
+
+PRAGMA defer_foreign_keys = ON;
+
+INSERT INTO "installations" ("id", "display_name", "default_locale", "anonymous_reporting_enabled", "created_at", "updated_at", "timezone", "settings_json") VALUES ('default', 'Safest Resolve', 'en', 1, '2026-09-02T00:46:58.042Z', '2026-09-02T00:46:58.875Z', 'UTC', '{}');
+
+INSERT INTO "application_integrations" ("id", "installation_id", "name", "key_id", "allowed_origins_json", "enabled", "created_at", "updated_at", "scopes_json", "channel_mode", "form_version_id", "context_schema_json") VALUES ('default', 'default', 'Default integration', 'default', '["http://localhost:8787","http://localhost:8788"]', 1, '2026-09-02T00:46:58.042Z', '2026-09-02T00:46:58.042Z', '["submit_reports","mint_context_tokens"]', 'contextual', NULL, '{"version":1,"allow_unknown":true,"fields":[]}');
+
+INSERT INTO "report_form_versions" ("id", "installation_id", "form_key", "version", "title", "description", "target_types_json", "reasons_json", "fields_json", "consent_notice", "published_at", "retired_at", "created_by", "created_at") VALUES ('general-v1', 'default', 'general', 1, 'Report a safety concern', 'Tell the service owner about abuse or a safety concern.', '["message","profile","listing","account","file","transaction","service"]', '[{"code":"harassment","label":"Harassment"},{"code":"spam","label":"Spam or scam"},{"code":"threat","label":"Threat or immediate danger"},{"code":"other","label":"Something else"}]', '[{"key":"details","label":"What happened?","type":"long_text","required":true,"max_length":4000}]', 'Your report will be shared with authorized safety reviewers and handled according to the service privacy policy.', '2026-09-02T00:46:58.042Z', NULL, 'system', '2026-09-02T00:46:58.042Z');
+
+INSERT INTO "policy_versions" ("id", "installation_id", "policy_key", "version", "title", "rules_json", "published_at", "created_by", "created_at") VALUES ('general-policy-v1', 'default', 'general', 1, 'General safety policy', '[{"code":"GENERAL-1","title":"Customer review required"}]', '2026-09-02T00:46:58.042Z', 'system', '2026-09-02T00:46:58.042Z');
+
+INSERT INTO "queue_definitions" ("id", "installation_id", "queue_key", "name", "queue_kind", "enabled", "created_at", "updated_at", "description", "purpose", "status", "position", "active_version_id", "created_by") VALUES ('urgent-human', 'default', 'urgent-human', 'Urgent human', 'human', 1, '2026-09-02T00:46:58.042Z', '2026-09-02T00:46:58.042Z', 'Protected, uncertain, urgent, or high-impact reports requiring human review.', 'reports', 'active', 10, 'urgent-human-v1', 'system');
+INSERT INTO "queue_definitions" ("id", "installation_id", "queue_key", "name", "queue_kind", "enabled", "created_at", "updated_at", "description", "purpose", "status", "position", "active_version_id", "created_by") VALUES ('standard-human', 'default', 'standard-human', 'Standard human', 'human', 1, '2026-09-02T00:46:58.042Z', '2026-09-02T00:46:58.042Z', 'General reports requiring a human decision.', 'reports', 'active', 20, 'standard-human-v1', 'system');
+INSERT INTO "queue_definitions" ("id", "installation_id", "queue_key", "name", "queue_kind", "enabled", "created_at", "updated_at", "description", "purpose", "status", "position", "active_version_id", "created_by") VALUES ('low-priority-ai', 'default', 'low-priority-ai', 'Low-priority AI', 'ai', 1, '2026-09-02T00:46:58.042Z', '2026-09-02T00:46:58.042Z', 'Bounded low-priority automation with mandatory human fallback.', 'reports', 'active', 30, 'low-priority-ai-v1', 'system');
+INSERT INTO "queue_definitions" ("id", "installation_id", "queue_key", "name", "queue_kind", "enabled", "created_at", "updated_at", "description", "purpose", "status", "position", "active_version_id", "created_by") VALUES ('appeals', 'default', 'appeals', 'Appeals', 'appeal', 1, '2026-09-02T00:46:58.042Z', '2026-09-02T00:46:58.042Z', 'Human-only review of contested decisions.', 'appeals', 'active', 40, 'appeals-v1', 'system');
+INSERT INTO "queue_definitions" ("id", "installation_id", "queue_key", "name", "queue_kind", "enabled", "created_at", "updated_at", "description", "purpose", "status", "position", "active_version_id", "created_by") VALUES ('operations', 'default', 'operations', 'Operations', 'operations', 1, '2026-09-02T00:46:58.042Z', '2026-09-02T00:46:58.042Z', 'Delivery failures and operational recovery work.', 'operations', 'active', 50, 'operations-v1', 'system');
+
+INSERT INTO "queue_versions" ("id", "queue_id", "version", "mode", "priority", "response_sla_minutes", "resolution_sla_minutes", "claim_ttl_minutes", "fallback_queue_id", "configuration_json", "published_at", "created_by", "created_at", "management_mode", "routing_criteria_json", "reviewer_instructions", "ai_instructions", "enrichment_requirements_json", "ai_bounds_json", "retired_at") VALUES ('urgent-human-v1', 'urgent-human', 1, 'off', 100, 15, 240, 15, NULL, '{}', '2026-09-02T00:46:58.042Z', 'system', '2026-09-02T00:46:58.042Z', 'human', '{"match":"all","conditions":[]}', 'Review promptly. Treat the submission as an allegation, preserve uncertainty, and do not delegate the final decision to AI.', NULL, '[]', '{}', NULL);
+INSERT INTO "queue_versions" ("id", "queue_id", "version", "mode", "priority", "response_sla_minutes", "resolution_sla_minutes", "claim_ttl_minutes", "fallback_queue_id", "configuration_json", "published_at", "created_by", "created_at", "management_mode", "routing_criteria_json", "reviewer_instructions", "ai_instructions", "enrichment_requirements_json", "ai_bounds_json", "retired_at") VALUES ('standard-human-v1', 'standard-human', 1, 'off', 50, 1440, 10080, 15, NULL, '{}', '2026-09-02T00:46:58.042Z', 'system', '2026-09-02T00:46:58.042Z', 'human', '{"match":"all","conditions":[]}', 'Review the allegation and referenced evidence against the published customer policy. Record the evidence considered and rationale.', NULL, '[]', '{}', NULL);
+INSERT INTO "queue_versions" ("id", "queue_id", "version", "mode", "priority", "response_sla_minutes", "resolution_sla_minutes", "claim_ttl_minutes", "fallback_queue_id", "configuration_json", "published_at", "created_by", "created_at", "management_mode", "routing_criteria_json", "reviewer_instructions", "ai_instructions", "enrichment_requirements_json", "ai_bounds_json", "retired_at") VALUES ('low-priority-ai-v1', 'low-priority-ai', 1, 'shadow', 20, 1440, 10080, 15, 'standard-human', '{"allowed_outcomes":[],"protected_categories":[],"daily_volume_budget":0}', '2026-09-02T00:46:58.042Z', 'system', '2026-09-02T00:46:58.042Z', 'ai', '{"match":"all","conditions":[]}', 'Review AI output and all referenced evidence before accepting or changing the recommendation.', 'Assess only eligible low-priority reports against the published policy. Escalate uncertainty, missing evidence, protected cases, failures, and out-of-bound outcomes to a human.', '[]', '{"allowed_outcomes":[],"confidence_threshold":0.85,"max_follow_up_turns":1,"autonomous_actions":false}', NULL);
+INSERT INTO "queue_versions" ("id", "queue_id", "version", "mode", "priority", "response_sla_minutes", "resolution_sla_minutes", "claim_ttl_minutes", "fallback_queue_id", "configuration_json", "published_at", "created_by", "created_at", "management_mode", "routing_criteria_json", "reviewer_instructions", "ai_instructions", "enrichment_requirements_json", "ai_bounds_json", "retired_at") VALUES ('appeals-v1', 'appeals', 1, 'off', 60, 1440, 10080, 30, NULL, '{}', '2026-09-02T00:46:58.042Z', 'system', '2026-09-02T00:46:58.042Z', 'human', '{"match":"all","conditions":[]}', 'A human appeal reviewer must independently assess the contested decision and record a reasoned outcome.', NULL, '[]', '{}', NULL);
+INSERT INTO "queue_versions" ("id", "queue_id", "version", "mode", "priority", "response_sla_minutes", "resolution_sla_minutes", "claim_ttl_minutes", "fallback_queue_id", "configuration_json", "published_at", "created_by", "created_at", "management_mode", "routing_criteria_json", "reviewer_instructions", "ai_instructions", "enrichment_requirements_json", "ai_bounds_json", "retired_at") VALUES ('operations-v1', 'operations', 1, 'off', 80, 60, 1440, 30, NULL, '{}', '2026-09-02T00:46:58.042Z', 'system', '2026-09-02T00:46:58.042Z', 'human', '{"match":"all","conditions":[]}', 'Investigate the failed job, preserve accepted reports, and record any recovery action.', NULL, '[]', '{}', NULL);
+
+INSERT INTO "routing_rule_versions" ("id", "installation_id", "version", "rules_json", "fixture_results_json", "published_at", "created_by", "created_at") VALUES ('default-routing-v1', 'default', 1, '{"default_queue_id":"standard-human","safeguard_queue_id":"urgent-human","rules":[],"fixtures":[],"intake_enrichments":[]}', '{"valid":true,"tested_at":"migration"}', '2026-09-02T00:47:05.861Z', 'system', '2026-09-02T00:47:05.861Z');
+
+INSERT INTO "message_template_versions" ("id", "installation_id", "template_key", "version", "audience", "purpose", "locale", "body_template", "published_at", "created_by", "created_at", "automation_allowed", "variables_schema_json") VALUES ('reporter-follow-up-v1', 'default', 'reporter-follow-up', 1, 'reporter', 'follow_up', 'en', '{{message}}', '2026-09-02T00:46:58.477Z', 'system', '2026-09-02T00:46:58.477Z', 0, '{}');
+INSERT INTO "message_template_versions" ("id", "installation_id", "template_key", "version", "audience", "purpose", "locale", "body_template", "published_at", "created_by", "created_at", "automation_allowed", "variables_schema_json") VALUES ('reporter-outcome-v1', 'default', 'reporter-outcome', 1, 'reporter', 'outcome', 'en', '{{message}}', '2026-09-02T00:46:58.477Z', 'system', '2026-09-02T00:46:58.477Z', 0, '{}');
+INSERT INTO "message_template_versions" ("id", "installation_id", "template_key", "version", "audience", "purpose", "locale", "body_template", "published_at", "created_by", "created_at", "automation_allowed", "variables_schema_json") VALUES ('affected-user-notice-v1', 'default', 'affected-user-notice', 1, 'affected_user', 'affected_user_notice', 'en', '{{message}}', '2026-09-02T00:46:58.477Z', 'system', '2026-09-02T00:46:58.477Z', 0, '{}');
+INSERT INTO "message_template_versions" ("id", "installation_id", "template_key", "version", "audience", "purpose", "locale", "body_template", "published_at", "created_by", "created_at", "automation_allowed", "variables_schema_json") VALUES ('appeal-outcome-v1', 'default', 'appeal-outcome', 1, 'affected_user', 'appeal_outcome', 'en', '{{message}}', '2026-09-02T00:46:58.477Z', 'system', '2026-09-02T00:46:58.477Z', 0, '{}');
+INSERT INTO "message_template_versions" ("id", "installation_id", "template_key", "version", "audience", "purpose", "locale", "body_template", "published_at", "created_by", "created_at", "automation_allowed", "variables_schema_json") VALUES ('ai-more-context-v1', 'default', 'ai-more-context', 1, 'reporter', 'follow_up', 'en', 'Automated review needs one more detail: {{missing_item}}. Reply here, or request review by a person.', '2026-09-02T00:46:59.302Z', 'system', '2026-09-02T00:46:59.302Z', 1, '{"missing_item":{"type":"string","minLength":3,"maxLength":160}}');
+INSERT INTO "message_template_versions" ("id", "installation_id", "template_key", "version", "audience", "purpose", "locale", "body_template", "published_at", "created_by", "created_at", "automation_allowed", "variables_schema_json") VALUES ('ai-no-violation-v1', 'default', 'ai-no-violation', 1, 'reporter', 'outcome', 'en', 'Automated review did not find a violation under {{policy_code}}. You may request review by a person.', '2026-09-02T00:46:59.302Z', 'system', '2026-09-02T00:46:59.302Z', 1, '{"policy_code":{"type":"string","minLength":1,"maxLength":100}}');
+INSERT INTO "message_template_versions" ("id", "installation_id", "template_key", "version", "audience", "purpose", "locale", "body_template", "published_at", "created_by", "created_at", "automation_allowed", "variables_schema_json") VALUES ('ai-out-of-scope-v1', 'default', 'ai-out-of-scope', 1, 'reporter', 'outcome', 'en', 'This report is outside the scope of {{policy_code}}. You may request review by a person.', '2026-09-02T00:46:59.302Z', 'system', '2026-09-02T00:46:59.302Z', 1, '{"policy_code":{"type":"string","minLength":1,"maxLength":100}}');
+
+INSERT INTO "ai_queue_config_versions" ("id", "queue_id", "version", "mode", "enabled", "provider", "model", "input_cost_microusd_per_million", "output_cost_microusd_per_million", "prompt_version", "policy_version_id", "eligible_form_versions_json", "eligible_sources_json", "eligible_reason_codes_json", "eligible_target_types_json", "allowed_fields_json", "allowed_outcomes_json", "allowed_action_codes_json", "allowed_template_ids_json", "confidence_threshold", "max_follow_up_turns", "max_wait_hours", "daily_report_budget", "daily_cost_budget_microusd", "quality_sample_rate", "fallback_queue_id", "pause_state", "published_at", "retired_at", "created_by", "created_at", "idempotency_key", "minimum_shadow_runs", "minimum_quality_reviews", "maximum_failure_rate", "maximum_disagreement_rate", "pause_reason", "paused_at", "queue_version_id") VALUES ('low-priority-ai-v1', 'low-priority-ai', 1, 'shadow', 0, 'workers_ai', '@cf/meta/llama-3.1-8b-instruct-fast', 0, 0, 'safest-low-priority-v1', 'general-policy-v1', '["general-v1"]', '["widget","public_page","server_api"]', '["spam"]', '["message","profile","listing","account"]', '["answers.details","target.type","evidence.references"]', '["out_of_scope","insufficient_information","no_violation_found","escalate_to_human"]', '[]', '["ai-more-context-v1","ai-no-violation-v1","ai-out-of-scope-v1"]', 0.85, 1, 72, 100, 1000000, 0.1, 'standard-human', 'ready', '2026-09-02T00:46:59.302Z', NULL, 'system', '2026-09-02T00:46:59.302Z', 'seed:low-priority-ai-v1', 25, 5, 0.05, 0.1, NULL, NULL, 'low-priority-ai-v1');
+
+INSERT INTO "routing_agent_versions" ("id", "installation_id", "version", "enabled", "rollout_mode", "provider", "model", "instructions", "candidate_queue_ids_json", "safeguard_queue_id", "default_queue_id", "confidence_threshold", "allowed_fields_json", "published_at", "created_by", "created_at", "idempotency_key") VALUES ('report-router-v1', 'default', 1, 0, 'off', 'workers_ai', '@cf/meta/llama-3.1-8b-instruct-fast', 'Choose only among the supplied eligible queue identifiers. Route uncertainty or protected cases to a human. Do not decide the report.', '["urgent-human","standard-human","low-priority-ai"]', 'urgent-human', 'standard-human', 0.85, '["reason_code","source","target_type","answers.details","trusted_facts"]', '2026-09-02T00:47:00.813Z', 'system', '2026-09-02T00:47:00.813Z', 'seed:report-router-v1');
+
+INSERT INTO "installation_features" ("installation_id", "feature_key", "state", "capability_json", "checked_at", "error_code", "revision") VALUES ('default', 'database', 'ready', '{}', '2026-09-02T00:47:05.486Z', NULL, 1);
+INSERT INTO "installation_features" ("installation_id", "feature_key", "state", "capability_json", "checked_at", "error_code", "revision") VALUES ('default', 'workflow_runtime', 'setup_required', '{}', '2026-09-02T00:47:05.486Z', NULL, 1);
+INSERT INTO "installation_features" ("installation_id", "feature_key", "state", "capability_json", "checked_at", "error_code", "revision") VALUES ('default', 'workers_ai', 'setup_required', '{}', '2026-09-02T00:47:05.486Z', NULL, 1);
+INSERT INTO "installation_features" ("installation_id", "feature_key", "state", "capability_json", "checked_at", "error_code", "revision") VALUES ('default', 'object_storage', 'setup_required', '{}', '2026-09-02T00:47:05.486Z', NULL, 1);
+INSERT INTO "installation_features" ("installation_id", "feature_key", "state", "capability_json", "checked_at", "error_code", "revision") VALUES ('default', 'queues', 'setup_required', '{}', '2026-09-02T00:47:05.486Z', NULL, 1);
+INSERT INTO "installation_features" ("installation_id", "feature_key", "state", "capability_json", "checked_at", "error_code", "revision") VALUES ('default', 'email', 'disabled', '{}', '2026-09-02T00:47:05.486Z', NULL, 1);
+
+INSERT INTO "component_definitions" ("id", "installation_id", "component_key", "name", "description", "component_kind", "effect_class", "owner_kind", "status", "active_version_id", "created_by", "created_at", "updated_at") VALUES ('safest-builtin-phishing-url', 'default', 'safest-builtin-phishing-url', 'Phishing URL specialist', 'Deterministic, read-only URL normalization and phishing-risk signals. It never fetches the submitted URL and records unavailable reputation/content checks as uncertainty.', 'specialist_agent', 'read_only', 'safest', 'active', 'safest-builtin-phishing-url-v1', 'system', '2026-09-02T00:47:06.045Z', '2026-09-02T00:47:06.046Z');
+
+INSERT INTO "component_versions" ("id", "definition_id", "version", "implementation_kind", "implementation_reference", "input_schema_json", "output_schema_json", "allowed_input_fields_json", "data_classifications_json", "connection_version_id", "risk_class", "timeout_policy_json", "retry_policy_json", "cache_policy_json", "concurrency_policy_json", "budget_policy_json", "approval_policy_json", "tool_manifest_json", "compatibility_json", "package_digest", "signature_metadata_json", "published_at", "retired_at", "created_by", "created_at") VALUES ('safest-builtin-phishing-url-v1', 'safest-builtin-phishing-url', 1, 'specialist_agent', 'phishing-url-v1', '{"type":"object","additionalProperties":false,"required":["url"],"properties":{"url":{"type":"string","minLength":1,"maxLength":2048}}}', '{"type":"object","additionalProperties":false,"required":["normalized_url","normalized_url_hash","hostname_hash","scheme","signals","conclusion","summary","uncertainty","confidence"],"properties":{"normalized_url":{"type":"string"},"normalized_url_hash":{"type":"string"},"hostname_hash":{"type":"string"},"scheme":{"type":"string","enum":["http","https"]},"signals":{"type":"array","items":{"type":"string"}},"conclusion":{"type":"string","enum":["likely_phishing","suspicious","no_phishing_signal","unavailable","escalate"]},"summary":{"type":"string"},"uncertainty":{"type":"array","items":{"type":"string"}},"confidence":{"type":"number","minimum":0,"maximum":1}}}', '["target.customer_url","answers.url"]', '["report_operational","potentially_sensitive_url"]', NULL, 'low', '{"timeout_ms":1500}', '{"maximum_attempts":1}', '{"enabled":true,"ttl_seconds":3600,"key_fields":["url"]}', '{"maximum_concurrency":20}', '{"metric":"calls","maximum_per_day":10000}', '{}', '["url_parser","hostname_heuristics"]', '{"fixture_evidence":{"passed":true,"validated_by":"safest_release","fixtures":["suspicious-login-url"]},"network_access":false,"runtime_protocol":"1"}', 'sha256:a2072d7111273ad5038ae0f2e11c3e3e227972a56b8ed71162a5f402d889829d', '{"publisher":"safest","source":"built_in","digest_basis":"src/component-executor.ts"}', '2026-09-02T00:47:06.046Z', NULL, 'system', '2026-09-02T00:47:06.046Z');
+
+INSERT INTO "component_fixtures" ("id", "component_version_id", "name", "input_json", "expected_json", "expected_status", "created_by", "created_at") VALUES ('safest-builtin-phishing-url-v1-fixture-suspicious', 'safest-builtin-phishing-url-v1', 'suspicious-login-url', '{"url":"http://login.verify.example.com/account"}', '{"normalized_url":"http://login.verify.example.com/account","normalized_url_hash":"sha256:f19ea3e9f98e298edbff77f8bd16194a45dc0b8677fc43ef1430904cd91a8355","hostname_hash":"sha256:852ead493ae4fd09da4de58d1f1ba7f9f96a464fc73662f110fb8a1044ebd249","scheme":"http","signals":["credential_lure_term","plaintext_transport"],"conclusion":"suspicious","summary":"Observed 2 deterministic phishing-risk signal(s).","uncertainty":["dns_reputation_and_content_not_checked"],"confidence":0.69}', 'succeeded', 'system', '2026-09-02T00:47:06.046Z');
+
+INSERT INTO "component_test_runs" ("id", "component_version_id", "fixture_id", "status", "output_json", "error_code", "started_by", "started_at", "finished_at") VALUES ('safest-builtin-phishing-url-v1-test-suspicious', 'safest-builtin-phishing-url-v1', 'safest-builtin-phishing-url-v1-fixture-suspicious', 'passed', '{"mode":"simulated","validated_by":"safest_release","network_access":false}', NULL, 'system', '2026-09-02T00:47:06.046Z', '2026-09-02T00:47:06.046Z');
+
+INSERT INTO "workflow_definitions" ("id", "installation_id", "workflow_key", "name", "description", "purpose", "status", "active_version_id", "created_by", "created_at", "updated_at") VALUES ('standard-manual-review', 'default', 'standard-manual-review', 'Standard manual review', 'Compatibility workflow representing the existing human review path.', 'report', 'active', 'standard-manual-review-v1', 'system:migration', '2026-09-02T00:47:02.128Z', '2026-09-02T00:47:02.128Z');
+
+INSERT INTO "workflow_artifacts" ("id", "installation_id", "compiler_version", "compatibility_date", "graph_digest", "source_digest", "bundle_digest", "manifest_digest", "bundle_r2_key", "inline_source_text", "bundle_size_bytes", "capability_manifest_json", "compiler_warnings_json", "signature_metadata_json", "status", "created_at", "verified_at") VALUES ('standard-manual-review-artifact-v1', 'default', 'migration-seed-v1', '2026-08-28', 'sha256:standard-manual-review-graph-v1', 'sha256:standard-manual-review-source-v1', 'sha256:standard-manual-review-bundle-v1', 'sha256:standard-manual-review-manifest-v1', NULL, 'export const migrationSeed = true;', 34, '{"version":1,"capabilities":["task.create","decision.record","message.send","action.propose"]}', '["Seed artifact is replaced by a compiler-produced artifact before primary activation."]', NULL, 'quarantined', '2026-09-02T00:47:02.128Z', NULL);
+
+INSERT INTO "workflow_versions" ("id", "workflow_id", "version", "graph_json", "graph_digest", "input_schema_json", "output_schema_json", "authority_mode", "dependency_manifest_json", "capability_manifest_json", "artifact_id", "compiler_version", "test_evidence_json", "published_by", "published_at", "retired_at") VALUES ('standard-manual-review-v1', 'standard-manual-review', 1, '{"schema_version":"1","purpose":"report","entry_node_id":"start","nodes":[{"id":"start","kind":"start","name":"Start","input_mapping":{},"config":{}},{"id":"review","kind":"human_task","name":"Manual review","input_mapping":{},"config":{"task_type":"review","queue_id":"run-queue","response_schema":{"type":"object"}}},{"id":"decision","kind":"decision","name":"Record decision","input_mapping":{},"error_port":"error","config":{"policy_version_id":"general-policy-v1"}},{"id":"end","kind":"end","name":"Resolved","input_mapping":{},"config":{"terminal_code":"resolved"}}],"edges":[{"id":"e1","from":{"node_id":"start","port":"success"},"to":{"node_id":"review","port":"input"}},{"id":"e2","from":{"node_id":"review","port":"completed"},"to":{"node_id":"decision","port":"input"}},{"id":"e3","from":{"node_id":"review","port":"timeout"},"to":{"node_id":"decision","port":"input"}},{"id":"e4","from":{"node_id":"decision","port":"recorded"},"to":{"node_id":"end","port":"input"}},{"id":"e5","from":{"node_id":"decision","port":"error"},"to":{"node_id":"end","port":"input"}}],"input_schema":{"type":"object"},"terminal_codes":["resolved"],"default_policies":{}}', 'sha256:standard-manual-review-graph-v1', '{"type":"object"}', '{"type":"object"}', 'assist', '{"components":[],"connections":[],"policies":[],"templates":[],"models":[],"agents":[],"workflows":[],"compiler":"migration-seed-v1"}', '{"version":1,"capabilities":["task.create","decision.record","message.send","action.propose"]}', 'standard-manual-review-artifact-v1', 'migration-seed-v1', '{"passed":false,"reason":"compatibility_seed_requires_compiler_republish"}', 'system:migration', '2026-09-02T00:47:02.128Z', NULL);
+
+CREATE INDEX action_proposals_delivery_due_idx
+  ON action_proposals(state, delivery_terminal, next_attempt_at, id);
+
+CREATE INDEX action_proposals_report_idx
+  ON action_proposals(report_id, created_at DESC, id DESC);
+
+CREATE INDEX action_proposals_state_idx
+  ON action_proposals(state, updated_at, id);
+
+CREATE INDEX agent_definitions_admin_idx
+  ON agent_definitions(installation_id, status, agent_kind, name, id);
+
+CREATE INDEX ai_quality_samples_work_idx
+  ON ai_quality_samples(state, claim_expires_at, selected_at, id);
+
+CREATE INDEX ai_queue_config_active_idx
+  ON ai_queue_config_versions(queue_id, enabled, pause_state, published_at, retired_at, version DESC);
+
+CREATE UNIQUE INDEX ai_queue_config_queue_version_idx
+  ON ai_queue_config_versions(queue_version_id)
+  WHERE queue_version_id IS NOT NULL;
+
+CREATE INDEX ai_runs_config_status_idx ON ai_runs(config_version_id, status, started_at DESC, id DESC);
+
+CREATE INDEX ai_runs_report_idx ON ai_runs(report_id, started_at DESC, id DESC);
+
+CREATE INDEX analyst_sessions_presence_idx
+  ON analyst_sessions(last_seen_at DESC, actor_id, id);
+
+CREATE INDEX analyst_sessions_report_idx
+  ON analyst_sessions(active_report_id, last_seen_at DESC, id);
+
+CREATE UNIQUE INDEX appeal_decisions_idempotency_idx
+  ON appeal_decisions(appeal_id, idempotency_key) WHERE idempotency_key IS NOT NULL;
+
+CREATE UNIQUE INDEX appeals_idempotency_idx ON appeals(report_id, idempotency_key) WHERE idempotency_key IS NOT NULL;
+
+CREATE INDEX appeals_queue_state_idx ON appeals(queue_id, state, submitted_at ASC, id ASC);
+
+CREATE INDEX assistant_drafts_principal_idx
+  ON assistant_drafts(principal_id, status, created_at DESC, id DESC);
+
+CREATE UNIQUE INDEX assistant_messages_idempotency_idx
+  ON assistant_messages(session_id, idempotency_key) WHERE idempotency_key IS NOT NULL;
+
+CREATE INDEX assistant_messages_session_idx
+  ON assistant_messages(session_id, created_at, id);
+
+CREATE UNIQUE INDEX assistant_sessions_idempotency_idx
+  ON assistant_sessions(principal_id, idempotency_key) WHERE idempotency_key IS NOT NULL;
+
+CREATE INDEX assistant_sessions_principal_idx
+  ON assistant_sessions(installation_id, principal_id, status, updated_at DESC, id DESC);
+
+CREATE INDEX assistant_tool_calls_session_idx
+  ON assistant_tool_calls(session_id, started_at DESC, id DESC);
+
+CREATE INDEX audit_entries_target_idx
+  ON audit_entries(target_type, target_id, sequence DESC);
+
+CREATE INDEX audit_events_pending_idx ON audit_events(chained_at, created_at, id);
+
+CREATE INDEX background_jobs_reconcile_idx ON background_jobs(state, available_at, id);
+
+CREATE INDEX backup_manifests_created_idx
+  ON backup_manifests(installation_id, created_at DESC, id DESC);
+
+CREATE INDEX budget_policies_scope_idx
+  ON budget_policies(installation_id, scope_type, scope_id, metric, retired_at, published_at DESC, id);
+
+CREATE INDEX budget_reservations_expiry_idx
+  ON budget_reservations(status, expires_at, id);
+
+CREATE INDEX case_messages_conversation_idx
+  ON case_messages(conversation_id, created_at, id);
+
+CREATE UNIQUE INDEX case_messages_idempotency_idx ON case_messages(report_id, idempotency_key) WHERE idempotency_key IS NOT NULL;
+
+CREATE INDEX case_messages_report_audience_idx
+  ON case_messages(report_id, audience, created_at ASC, id ASC);
+
+CREATE INDEX component_cache_entries_expiry_idx
+  ON component_cache_entries(expires_at, id);
+
+CREATE INDEX component_definitions_admin_idx
+  ON component_definitions(installation_id, status, component_kind, effect_class, name, id);
+
+CREATE INDEX component_runs_due_idx
+  ON component_runs(state, updated_at, id);
+
+CREATE INDEX component_runs_report_idx
+  ON component_runs(report_id, created_at DESC, id DESC);
+
+CREATE INDEX component_test_runs_version_idx
+  ON component_test_runs(component_version_id, started_at DESC, id DESC);
+
+CREATE INDEX component_versions_connection_idx
+  ON component_versions(connection_version_id, definition_id, id);
+
+CREATE INDEX component_versions_lookup_idx
+  ON component_versions(definition_id, version DESC, id);
+
+CREATE INDEX configuration_drafts_type_idx
+  ON configuration_drafts(installation_id, configuration_type, configuration_key);
+
+CREATE INDEX connection_attempts_component_idx
+  ON connection_attempts(component_run_id, attempt_number, id);
+
+CREATE INDEX connection_attempts_connection_idx
+  ON connection_attempts(connection_version_id, started_at DESC, id DESC);
+
+CREATE INDEX connection_credentials_refresh_idx
+  ON connection_credentials(status, expires_at, id);
+
+CREATE INDEX connection_definitions_admin_idx
+  ON connection_definitions(installation_id, status, kind, name, id);
+
+CREATE INDEX connection_execution_leases_expiry_idx
+  ON connection_execution_leases(connection_version_id, expires_at, id);
+
+CREATE INDEX connection_health_probe_idx
+  ON connection_health(state, next_probe_at, connection_version_id);
+
+CREATE INDEX connection_oauth_states_expiry_idx
+  ON connection_oauth_states(expires_at, consumed_at, id);
+
+CREATE INDEX connection_versions_lookup_idx
+  ON connection_versions(connection_id, version DESC, id);
+
+CREATE INDEX conversations_report_idx
+  ON conversations(report_id, audience, id);
+
+CREATE INDEX dead_letter_items_incident_idx
+  ON dead_letter_items(incident_id, state, last_seen_at DESC, id DESC);
+
+CREATE INDEX dead_letter_items_report_idx
+  ON dead_letter_items(report_id, last_seen_at DESC, id DESC);
+
+CREATE INDEX dead_letter_items_state_idx
+  ON dead_letter_items(state, last_seen_at DESC, id DESC);
+
+CREATE INDEX decision_action_outbox_due_idx
+  ON decision_action_outbox(status, next_attempt_at, id);
+
+CREATE INDEX decision_action_outbox_reconcile_idx
+  ON decision_action_outbox(terminal, status, next_attempt_at, lease_expires_at, id);
+
+CREATE UNIQUE INDEX decisions_idempotency_idx ON decisions(report_id, idempotency_key) WHERE idempotency_key IS NOT NULL;
+
+CREATE INDEX decisions_report_idx ON decisions(report_id, created_at DESC, id DESC);
+
+CREATE INDEX deletion_requests_report_state_idx
+  ON deletion_requests(report_id, state, requested_at, id);
+
+CREATE INDEX deletion_requests_state_idx ON deletion_requests(state, requested_at, id);
+
+CREATE INDEX duplicate_group_members_report_idx
+  ON duplicate_group_members(report_id, group_id);
+
+CREATE INDEX duplicate_groups_activity_idx
+  ON duplicate_groups(installation_id, state, last_seen_at DESC, id DESC);
+
+CREATE INDEX email_deliveries_due_idx
+  ON email_deliveries(state, next_attempt_at, id);
+
+CREATE INDEX email_deliveries_message_idx
+  ON email_deliveries(message_id, created_at, id);
+
+CREATE INDEX evidence_access_events_actor_idx
+  ON evidence_access_events(actor_id, accessed_at DESC, id DESC);
+
+CREATE INDEX evidence_access_events_report_idx
+  ON evidence_access_events(report_id, accessed_at DESC, id DESC);
+
+CREATE INDEX evidence_fetch_requests_due_idx
+  ON evidence_fetch_requests(state, next_attempt_at, id);
+
+CREATE INDEX evidence_fetch_requests_report_idx
+  ON evidence_fetch_requests(report_id, created_at DESC, id DESC);
+
+CREATE INDEX evidence_snapshots_report_idx
+  ON evidence_snapshots(report_id, created_at DESC, id DESC);
+
+CREATE UNIQUE INDEX export_jobs_idempotency_idx
+  ON export_jobs(installation_id, requested_by, idempotency_key)
+  WHERE idempotency_key IS NOT NULL;
+
+CREATE INDEX export_jobs_state_idx
+  ON export_jobs(installation_id, state, requested_at DESC, id DESC);
+
+CREATE INDEX findings_report_idx
+  ON findings(report_id, created_at DESC, id DESC);
+
+CREATE INDEX findings_run_idx
+  ON findings(run_id, step_run_id, created_at, id);
+
+CREATE INDEX findings_shadow_comparison_idx
+  ON findings(run_id, status, created_at DESC, id DESC);
+
+CREATE UNIQUE INDEX human_task_claims_one_active_idx
+  ON human_task_claims(task_id) WHERE released_at IS NULL;
+
+CREATE INDEX human_task_claims_operator_idx
+  ON human_task_claims(operator_id, released_at, expires_at, task_id);
+
+CREATE INDEX human_tasks_report_idx
+  ON human_tasks(report_id, created_at DESC, id DESC);
+
+CREATE INDEX human_tasks_work_idx
+  ON human_tasks(state, queue_id, due_at, created_at, id);
+
+CREATE INDEX infrastructure_owner_sessions_expiry_idx
+  ON infrastructure_owner_sessions(revoked_at, expires_at, id);
+
+CREATE INDEX infrastructure_owner_sessions_user_idx
+  ON infrastructure_owner_sessions(user_id, revoked_at, expires_at DESC, id);
+
+CREATE INDEX installation_features_state_idx
+  ON installation_features(installation_id, state, feature_key);
+
+CREATE INDEX intake_decisions_campaign_idx
+  ON intake_decisions(installation_id, campaign_fingerprint, created_at DESC, id);
+
+CREATE INDEX intake_decisions_installation_idx
+  ON intake_decisions(installation_id, created_at DESC, id DESC);
+
+CREATE INDEX intake_rate_limits_expiry_idx ON intake_rate_limits(window_start, updated_at);
+
+CREATE INDEX integration_api_keys_auth_idx
+  ON integration_api_keys(integration_id, status, valid_from, expires_at, id);
+
+CREATE UNIQUE INDEX legal_holds_one_active_idx ON legal_holds(report_id) WHERE state = 'active';
+
+CREATE INDEX legal_holds_state_idx ON legal_holds(state, created_at, id);
+
+CREATE INDEX model_aliases_admin_idx
+  ON model_aliases(installation_id, status, name, id);
+
+CREATE UNIQUE INDEX notices_idempotency_idx ON notices(report_id, audience, idempotency_key) WHERE idempotency_key IS NOT NULL;
+
+CREATE INDEX notification_outbox_due_idx ON notification_outbox(status, next_attempt_at, id);
+
+CREATE INDEX notification_outbox_reconcile_idx
+  ON notification_outbox(terminal, status, next_attempt_at, lease_expires_at, id);
+
+CREATE INDEX operations_incidents_state_idx
+  ON operations_incidents(installation_id, state, severity, last_seen_at DESC, id DESC);
+
+CREATE UNIQUE INDEX operator_invitations_pending_email_idx
+  ON operator_invitations(email) WHERE status = 'pending';
+
+CREATE INDEX operator_invitations_status_idx
+  ON operator_invitations(status, expires_at, created_at DESC, id);
+
+CREATE INDEX operator_users_status_idx
+  ON operator_users(status, email, id);
+
+CREATE INDEX owner_setup_rate_limits_expiry_idx
+  ON owner_setup_rate_limits(window_start, updated_at);
+
+CREATE INDEX owner_setup_tokens_expiry_idx
+  ON owner_setup_tokens(status, expires_at, created_at DESC, id);
+
+CREATE UNIQUE INDEX owner_setup_tokens_pending_email_purpose_idx
+  ON owner_setup_tokens(email, purpose)
+  WHERE status = 'pending';
+
+CREATE INDEX prompt_versions_lookup_idx
+  ON prompt_versions(installation_id, prompt_key, status, version DESC, id);
+
+CREATE UNIQUE INDEX quality_reviews_idempotency_idx ON quality_reviews(idempotency_key);
+
+CREATE INDEX queue_definitions_admin_idx
+  ON queue_definitions(purpose, status, position, name, id);
+
+CREATE INDEX queue_versions_policy_idx
+  ON queue_versions(queue_id, published_at DESC, version DESC, id);
+
+CREATE UNIQUE INDEX queue_workflow_pins_one_active_idx
+  ON queue_workflow_pins(queue_id, mode) WHERE deactivated_at IS NULL;
+
+CREATE INDEX queue_workflow_pins_version_idx
+  ON queue_workflow_pins(workflow_version_id, deactivated_at, queue_id);
+
+CREATE INDEX reconciliation_runs_kind_idx
+  ON reconciliation_runs(installation_id, reconciliation_kind, started_at DESC, id DESC);
+
+CREATE INDEX report_contexts_expiry_idx
+  ON report_contexts(expires_at, used_at, id);
+
+CREATE INDEX report_contexts_integration_idx
+  ON report_contexts(integration_id, created_at DESC, id);
+
+CREATE UNIQUE INDEX report_queue_assignments_one_active_idx
+  ON report_queue_assignments(report_id) WHERE ended_at IS NULL;
+
+CREATE INDEX report_queue_assignments_queue_idx
+  ON report_queue_assignments(queue_id, ended_at, assigned_at, report_id);
+
+CREATE INDEX report_state_history_report_idx
+  ON report_state_history(report_id, created_at ASC, id ASC);
+
+CREATE INDEX report_targets_reference_idx
+  ON report_targets(target_type, target_reference, report_id);
+
+CREATE INDEX reports_duplicate_group_idx
+  ON reports(duplicate_group_id, received_at DESC, id DESC);
+
+CREATE INDEX reports_queue_state_priority_idx
+  ON reports(queue_id, state, priority DESC, received_at ASC, id ASC);
+
+CREATE INDEX reports_routing_status_idx
+  ON reports(routing_status, received_at ASC, id ASC);
+
+CREATE INDEX reports_target_time_idx
+  ON reports(installation_id, received_at DESC, id DESC);
+
+CREATE INDEX retention_jobs_state_idx ON retention_jobs(state, started_at DESC, id DESC);
+
+CREATE INDEX role_bindings_principal_idx
+  ON role_bindings(installation_id, principal_type, principal_id, revoked_at, role);
+
+CREATE INDEX routing_agent_runs_report_idx
+  ON routing_agent_runs(report_id, started_at DESC, id DESC);
+
+CREATE INDEX routing_agent_versions_active_idx
+  ON routing_agent_versions(installation_id, published_at DESC, version DESC, id);
+
+CREATE INDEX saved_views_principal_idx
+  ON saved_views(installation_id, principal_id, updated_at DESC, id DESC);
+
+CREATE INDEX security_events_type_idx
+  ON security_events(installation_id, event_type, created_at DESC, id DESC);
+
+CREATE UNIQUE INDEX shadow_comparisons_one_per_shadow_run_idx
+  ON shadow_comparisons(shadow_run_id);
+
+CREATE INDEX shadow_comparisons_status_idx
+  ON shadow_comparisons(status, severity, created_at, id);
+
+CREATE UNIQUE INDEX workflow_ai_runs_agent_once_idx
+  ON workflow_ai_runs(step_run_id, agent_version_id)
+  WHERE agent_version_id IS NOT NULL;
+
+CREATE UNIQUE INDEX workflow_ai_runs_component_once_idx
+  ON workflow_ai_runs(step_run_id, component_version_id)
+  WHERE component_version_id IS NOT NULL;
+
+CREATE INDEX workflow_ai_runs_report_idx
+  ON workflow_ai_runs(report_id, started_at DESC, id DESC);
+
+CREATE INDEX workflow_ai_runs_run_idx
+  ON workflow_ai_runs(workflow_run_id, step_run_id, id);
+
+CREATE INDEX workflow_artifacts_status_idx
+  ON workflow_artifacts(installation_id, status, created_at DESC, id DESC);
+
+CREATE INDEX workflow_definitions_admin_idx
+  ON workflow_definitions(installation_id, status, purpose, name, id);
+
+CREATE INDEX workflow_dependencies_version_idx
+  ON workflow_dependencies(dependency_type, dependency_version_id, workflow_version_id);
+
+CREATE INDEX workflow_dispatch_outbox_due_idx
+  ON workflow_dispatch_outbox(state, available_at, id);
+
+CREATE INDEX workflow_event_inbox_delivery_idx
+  ON workflow_event_inbox(delivered_at, received_at, run_id, id);
+
+CREATE UNIQUE INDEX workflow_run_links_parent_node_idx
+  ON workflow_run_links(parent_run_id, node_id) WHERE node_id IS NOT NULL;
+
+CREATE INDEX workflow_runs_instance_idx
+  ON workflow_runs(cloudflare_instance_id, id);
+
+CREATE UNIQUE INDEX workflow_runs_one_active_primary_idx
+  ON workflow_runs(report_id)
+  WHERE report_id IS NOT NULL AND run_kind = 'primary'
+    AND state IN ('created', 'dispatch_pending', 'queued', 'running', 'waiting', 'paused', 'repair_required');
+
+CREATE INDEX workflow_runs_report_idx
+  ON workflow_runs(report_id, created_at DESC, id DESC);
+
+CREATE UNIQUE INDEX workflow_runs_report_pin_once_idx
+  ON workflow_runs(report_id, pin_id) WHERE report_id IS NOT NULL AND pin_id IS NOT NULL;
+
+CREATE INDEX workflow_runs_state_idx
+  ON workflow_runs(state, updated_at, id);
+
+CREATE INDEX workflow_step_attempts_retry_idx
+  ON workflow_step_attempts(status, retry_at, id);
+
+CREATE INDEX workflow_step_runs_run_idx
+  ON workflow_step_runs(run_id, updated_at, node_id, occurrence);
+
+CREATE INDEX workflow_step_runs_waiting_idx
+  ON workflow_step_runs(state, waiting_at, run_id, id);
+
+CREATE INDEX workflow_test_runs_workflow_idx
+  ON workflow_test_runs(workflow_id, started_at DESC, id DESC);
+
+CREATE INDEX workflow_versions_lookup_idx
+  ON workflow_versions(workflow_id, version DESC, id);
+
+CREATE INDEX workflow_waits_due_idx
+  ON workflow_waits(state, deadline_at, run_id, id);
+
+CREATE TRIGGER report_participants_reject_portal_insert
+BEFORE INSERT ON report_participants
+WHEN NEW.contact_mode = 'portal'
+BEGIN
+  SELECT RAISE(ABORT, 'portal contact mode has been removed');
+END;
+
+CREATE TRIGGER report_participants_reject_portal_update
+BEFORE UPDATE OF contact_mode ON report_participants
+WHEN NEW.contact_mode = 'portal'
+BEGIN
+  SELECT RAISE(ABORT, 'portal contact mode has been removed');
+END;
+
+PRAGMA defer_foreign_keys = OFF;
+