rememberstack 0.1.0__py3-none-any.whl

rememberstack/spine/migrations/versions/p3_05_0009_reconcile_stage.py

@@ -0,0 +1,27 @@
+"""Add the `reconcile` pipeline stage (Phase 3, D54/D55).
+
+Reconciliation — currency transitions, the D54 recount, per-shape closure,
+and the `evidence_changed` emission — runs as its own queued stage at the
+end of a version's chain, so it inherits the work ledger's claim/retry/
+idempotency machinery like every other stage (its processing_id doubles as
+the run's `reconciliation_id`, which is what makes a retried run re-emit
+its ledger rows as no-ops).
+"""
+
+from collections.abc import Sequence
+
+from alembic import op
+
+revision: str = "p3_05_0009"
+down_revision: str | None = "p3_01_0008"
+branch_labels: str | Sequence[str] | None = None
+depends_on: str | Sequence[str] | None = None
+
+
+def upgrade() -> None:
+    """Append the enum value (additive; existing rows untouched)."""
+    op.execute("ALTER TYPE pipeline_stage ADD VALUE IF NOT EXISTS 'reconcile'")
+
+
+def downgrade() -> None:
+    """PostgreSQL cannot remove an enum value in place; additive no-op."""

rememberstack/spine/migrations/versions/p3_07_0010_lifecycle_eval_suite.py

@@ -0,0 +1,25 @@
+"""Add the `lifecycle` eval suite (Phase 3, WP-3.7, D22/D35).
+
+The lifecycle pack guards the D54 economy itself: cache-vs-ledger currency
+coherence, cached-count correctness, closure-record coherence, and the
+flag-rate rollout canary — the invariants that must hold on ANY deployment
+state, plus the regression canaries planted by `restore_support` verdicts.
+"""
+
+from collections.abc import Sequence
+
+from alembic import op
+
+revision: str = "p3_07_0010"
+down_revision: str | None = "p3_05_0009"
+branch_labels: str | Sequence[str] | None = None
+depends_on: str | Sequence[str] | None = None
+
+
+def upgrade() -> None:
+    """Append the enum value (additive; existing rows untouched)."""
+    op.execute("ALTER TYPE eval_suite ADD VALUE IF NOT EXISTS 'lifecycle'")
+
+
+def downgrade() -> None:
+    """PostgreSQL cannot remove an enum value in place; additive no-op."""

rememberstack/spine/migrations/versions/p4_01_0011_survivor_view_rewrite.py

@@ -0,0 +1,57 @@
+"""Rewrite `v_graph_survivor` without the per-row correlated subquery.
+
+The WP-4.1 spike battery caught the shipped form being quadratic when its
+columns are actually materialized: the survivor was picked by a correlated
+`(SELECT … ORDER BY depth DESC LIMIT 1)` per output row over the un-indexed
+recursive CTE — invisible to `count(*)` (dead-column elimination) but
+O(n²) for the real export. At 32k entities the projection export took
+50.6 s; the `DISTINCT ON` form below produces the identical terminal-row
+semantics in 0.03 s (`plan/analysis/p2_spike_battery.md`). Same columns,
+same cycle guard, same contract — only the plan shape changes.
+"""
+
+from collections.abc import Sequence
+
+from alembic import op
+
+revision: str = "p4_01_0011"
+down_revision: str | None = "p3_07_0010"
+branch_labels: str | Sequence[str] | None = None
+depends_on: str | Sequence[str] | None = None
+
+_REWRITTEN = """
+CREATE OR REPLACE VIEW v_graph_survivor AS
+WITH RECURSIVE chain(entity_id, cur, depth) AS (
+  SELECT entity_id, entity_id, 0 FROM entities
+  UNION ALL
+  SELECT c.entity_id, e.merged_into, c.depth + 1
+  FROM chain c JOIN entities e ON e.entity_id = c.cur
+  WHERE e.merged_into IS NOT NULL AND c.depth < 64          -- cycle / runaway guard
+)
+SELECT DISTINCT ON (entity_id) entity_id, cur AS survivor
+FROM chain ORDER BY entity_id, depth DESC   -- the terminal row per chain, one pass
+"""
+
+_ORIGINAL = """
+CREATE OR REPLACE VIEW v_graph_survivor AS
+WITH RECURSIVE chain(entity_id, cur, depth) AS (
+  SELECT entity_id, entity_id, 0 FROM entities
+  UNION ALL
+  SELECT c.entity_id, e.merged_into, c.depth + 1
+  FROM chain c JOIN entities e ON e.entity_id = c.cur
+  WHERE e.merged_into IS NOT NULL AND c.depth < 64
+)
+SELECT entity_id,
+       (SELECT cur FROM chain x WHERE x.entity_id = chain.entity_id ORDER BY depth DESC LIMIT 1) AS survivor
+FROM chain GROUP BY entity_id
+"""
+
+
+def upgrade() -> None:
+    """Swap in the single-pass survivor resolution (same columns/semantics)."""
+    op.execute(_REWRITTEN)
+
+
+def downgrade() -> None:
+    """Restore the original (quadratic) form."""
+    op.execute(_ORIGINAL)

rememberstack/spine/migrations/versions/p6_02_0012_knowledge_compile_recovery.py

@@ -0,0 +1,58 @@
+"""Persist the finalize payload needed to recover a published K cycle."""
+
+from collections.abc import Sequence
+
+from alembic import op
+
+revision: str = "p6_02_0012"
+down_revision: str | None = "p4_01_0011"
+branch_labels: str | Sequence[str] | None = None
+depends_on: str | Sequence[str] | None = None
+
+_UPGRADE = """
+ALTER TABLE knowledge_compilations
+  ADD COLUMN cycle_id uuid,
+  ADD COLUMN page_summary text,
+  ADD COLUMN content_hash text,
+  ADD COLUMN citations jsonb,
+  ADD COLUMN failed_at timestamptz,
+  ADD COLUMN failure text;
+
+CREATE INDEX ix_kcompilations_pending_cycle
+  ON knowledge_compilations (deployment_id, cycle_id, compiled_at)
+  WHERE git_commit IS NULL AND failed_at IS NULL;
+
+COMMENT ON COLUMN knowledge_compilations.cycle_id IS
+  'One driver publish batch. Every page in a cycle is finalized in one Postgres transaction.';
+COMMENT ON COLUMN knowledge_compilations.page_summary IS
+  'Recovery copy of the writer summary; required to finalize after a post-publish process crash.';
+COMMENT ON COLUMN knowledge_compilations.content_hash IS
+  'Recovery copy of the compiled markdown hash; also verifies that remote HEAD contains the pending output.';
+COMMENT ON COLUMN knowledge_compilations.citations IS
+  'Recovery copy of the typed binding citation set; counts alone cannot reconstruct citation identities.';
+COMMENT ON COLUMN knowledge_compilations.failed_at IS
+  'Set when a pending cycle was never published or no longer matches remote HEAD.';
+COMMENT ON COLUMN knowledge_compilations.failure IS
+  'Visible reason a pending cycle could not be recovered; its pages remain stale.';
+"""
+
+_DOWNGRADE = """
+DROP INDEX IF EXISTS ix_kcompilations_pending_cycle;
+ALTER TABLE knowledge_compilations
+  DROP COLUMN IF EXISTS failure,
+  DROP COLUMN IF EXISTS failed_at,
+  DROP COLUMN IF EXISTS citations,
+  DROP COLUMN IF EXISTS content_hash,
+  DROP COLUMN IF EXISTS page_summary,
+  DROP COLUMN IF EXISTS cycle_id;
+"""
+
+
+def upgrade() -> None:
+    """Add durable pending-cycle recovery data without rewriting old transcripts."""
+    op.execute(_UPGRADE)
+
+
+def downgrade() -> None:
+    """Remove the WP-6.2 recovery payload and pending-cycle index."""
+    op.execute(_DOWNGRADE)

rememberstack/spine/migrations/versions/p6_04_0013_knowledge_writer_ledger.py

@@ -0,0 +1,46 @@
+"""Record capped writer bundles and inert writer suggestions."""
+
+from collections.abc import Sequence
+
+from alembic import op
+
+revision: str = "p6_04_0013"
+down_revision: str | None = "p6_02_0012"
+branch_labels: str | Sequence[str] | None = None
+depends_on: str | Sequence[str] | None = None
+
+_UPGRADE = """
+ALTER TABLE knowledge_compilations
+  ADD COLUMN claims_cut_count integer NOT NULL DEFAULT 0,
+  ADD COLUMN suggestions jsonb NOT NULL DEFAULT '[]'::jsonb;
+
+ALTER TABLE knowledge_compilations
+  ADD CONSTRAINT ck_kcompilations_claims_cut_nonnegative
+  CHECK (claims_cut_count >= 0);
+
+COMMENT ON COLUMN knowledge_compilations.claims_cut_count IS
+  'Rule-matched D54 claim coordinates omitted by the settings-bound writer bundle cap.';
+COMMENT ON COLUMN knowledge_compilations.suggestions IS
+  'Typed writer suggestions retained as planner inputs; compilation never applies them directly.';
+COMMENT ON COLUMN knowledge_compilations.cited_count IS
+  'Offered fact and D54 claim-coordinate candidates covered by accepted citations.';
+COMMENT ON COLUMN knowledge_compilations.uncited_count IS
+  'Offered fact and D54 claim-coordinate candidates not covered by accepted citations.';
+"""
+
+_DOWNGRADE = """
+ALTER TABLE knowledge_compilations
+  DROP CONSTRAINT IF EXISTS ck_kcompilations_claims_cut_nonnegative,
+  DROP COLUMN IF EXISTS suggestions,
+  DROP COLUMN IF EXISTS claims_cut_count;
+"""
+
+
+def upgrade() -> None:
+    """Add the WP-6.4 bundle-cut and suggestion ledger fields."""
+    op.execute(_UPGRADE)
+
+
+def downgrade() -> None:
+    """Remove the WP-6.4 writer ledger extension."""
+    op.execute(_DOWNGRADE)

rememberstack/spine/migrations/versions/p6_05_0014_knowledge_planner_runtime.py

@@ -0,0 +1,217 @@
+"""Add transcript-bearing planner runs and compiled-edit quarantine."""
+
+from collections.abc import Sequence
+
+from alembic import op
+
+revision: str = "p6_05_0014"
+down_revision: str | None = "p6_04_0013"
+branch_labels: str | Sequence[str] | None = None
+depends_on: str | Sequence[str] | None = None
+
+_UPGRADE = """
+CREATE TABLE knowledge_plan_runs (
+  run_id                 uuid PRIMARY KEY,
+  deployment_id          uuid NOT NULL REFERENCES deployments,
+  scope_id               uuid,
+  run_kind               text NOT NULL CHECK (run_kind IN ('planner','reflection')),
+  trigger                plan_trigger NOT NULL,
+  component_version      text NOT NULL,
+  input_hash             text NOT NULL,
+  session_transcript_uri text NOT NULL,
+  status                 text NOT NULL CHECK (status IN ('succeeded','failed')),
+  failure                text,
+  tokens                 integer CHECK (tokens IS NULL OR tokens >= 0),
+  cost_usd               numeric CHECK (cost_usd IS NULL OR cost_usd >= 0),
+  completed_at           timestamptz NOT NULL DEFAULT now(),
+  FOREIGN KEY (deployment_id, scope_id)
+    REFERENCES scopes (deployment_id, scope_id) ON DELETE CASCADE,
+  CHECK ((status = 'failed') = (failure IS NOT NULL))
+);
+
+CREATE INDEX ix_kplan_runs_deployment
+  ON knowledge_plan_runs (deployment_id, completed_at DESC);
+
+ALTER TABLE knowledge_plan_decisions
+  ADD COLUMN plan_run_id uuid REFERENCES knowledge_plan_runs (run_id),
+  ADD COLUMN confidence numeric,
+  ADD COLUMN blast_radius integer,
+  ADD COLUMN expected_impact numeric,
+  ADD COLUMN reviewed_by text,
+  ADD COLUMN reviewed_at timestamptz,
+  ADD COLUMN application_commit text;
+
+ALTER TABLE knowledge_plan_decisions
+  ADD CONSTRAINT ck_kplan_confidence
+    CHECK (confidence IS NULL OR confidence BETWEEN 0 AND 1),
+  ADD CONSTRAINT ck_kplan_blast_radius
+    CHECK (blast_radius IS NULL OR blast_radius >= 0),
+  ADD CONSTRAINT ck_kplan_expected_impact
+    CHECK (expected_impact IS NULL OR expected_impact >= 0),
+  ADD CONSTRAINT ck_kplan_review_pair
+    CHECK ((reviewed_by IS NULL) = (reviewed_at IS NULL));
+
+ALTER TABLE knowledge_artifact_evidence
+  ADD COLUMN claim_lineage_id uuid,
+  ADD COLUMN claim_chunk_content_hash text;
+
+UPDATE knowledge_artifact_evidence e
+SET claim_lineage_id = resolved.doc_id,
+    claim_chunk_content_hash = resolved.chunk_content_hash
+FROM (
+  SELECT DISTINCT ON (c.claim_id)
+         c.claim_id, c.doc_id, ch.chunk_content_hash
+  FROM claims c
+  JOIN chunks ch
+    ON ch.deployment_id = c.deployment_id AND ch.chunk_id = c.chunk_id
+  ORDER BY c.claim_id, c.ingested_at DESC
+) resolved
+WHERE e.claim_id = resolved.claim_id;
+
+DO $$
+BEGIN
+  IF EXISTS (
+    SELECT 1 FROM knowledge_artifact_evidence
+    WHERE claim_id IS NOT NULL AND claim_lineage_id IS NULL
+  ) THEN
+    RAISE EXCEPTION
+      'cannot migrate unresolved knowledge_artifact_evidence claim citations';
+  END IF;
+END $$;
+
+DELETE FROM knowledge_artifact_evidence e
+USING (
+  SELECT evidence_link_id
+  FROM (
+    SELECT evidence_link_id,
+           row_number() OVER (
+             PARTITION BY artifact_id, role, claim_lineage_id,
+                          claim_chunk_content_hash, relation_id, doc_id
+             ORDER BY evidence_link_id
+           ) AS duplicate_ordinal
+    FROM knowledge_artifact_evidence
+  ) ranked
+  WHERE duplicate_ordinal > 1
+) duplicates
+WHERE e.evidence_link_id = duplicates.evidence_link_id;
+
+DROP INDEX ux_kae_link;
+DROP INDEX ix_kae_claim;
+ALTER TABLE knowledge_artifact_evidence
+  DROP CONSTRAINT knowledge_artifact_evidence_check,
+  DROP COLUMN claim_id,
+  ADD CONSTRAINT ck_kae_claim_coordinate_pair CHECK (
+    (claim_lineage_id IS NULL) = (claim_chunk_content_hash IS NULL)
+  ),
+  ADD CONSTRAINT ck_kae_exactly_one_target CHECK (
+    num_nonnulls(claim_lineage_id, relation_id, doc_id) = 1
+  );
+CREATE UNIQUE INDEX ux_kae_link ON knowledge_artifact_evidence (
+  artifact_id, role, claim_lineage_id, claim_chunk_content_hash, relation_id, doc_id
+) NULLS NOT DISTINCT;
+CREATE INDEX ix_kae_claim_coordinate ON knowledge_artifact_evidence (
+  claim_lineage_id, claim_chunk_content_hash
+) WHERE claim_lineage_id IS NOT NULL;
+
+CREATE TABLE knowledge_quarantines (
+  quarantine_id          uuid PRIMARY KEY,
+  decision_id            uuid NOT NULL UNIQUE
+    REFERENCES knowledge_plan_decisions (decision_id),
+  deployment_id          uuid NOT NULL REFERENCES deployments,
+  artifact_id            uuid NOT NULL,
+  recorded_content_hash  text NOT NULL,
+  detected_content_hash  text NOT NULL,
+  proposed_sidecar_entry text NOT NULL,
+  status                 text NOT NULL DEFAULT 'proposed'
+    CHECK (status IN ('proposed','curation_accepted','adopted','rejected')),
+  resolution_note        text,
+  curation_content_hash  text,
+  detected_at            timestamptz NOT NULL DEFAULT now(),
+  resolved_at            timestamptz,
+  FOREIGN KEY (deployment_id, artifact_id)
+    REFERENCES knowledge_artifacts (deployment_id, artifact_id) ON DELETE CASCADE,
+  CHECK ((status = 'proposed') = (resolved_at IS NULL)),
+  CHECK (status <> 'curation_accepted' OR curation_content_hash IS NOT NULL)
+);
+
+CREATE UNIQUE INDEX ux_kquarantine_open_artifact
+  ON knowledge_quarantines (artifact_id) WHERE status = 'proposed';
+
+COMMENT ON TABLE knowledge_plan_runs IS
+  'Append-only D52 transcript ledger for planner and independent reflection sessions, including terminal failures.';
+COMMENT ON COLUMN knowledge_plan_decisions.expected_impact IS
+  'D24-style blast_radius * (1 - confidence), computed by the deterministic driver rather than the proposing agent.';
+COMMENT ON COLUMN knowledge_plan_decisions.application_commit IS
+  'Git revision whose tree first reflects an applied structural decision; NULL while driver reconciliation is pending.';
+COMMENT ON TABLE knowledge_quarantines IS
+  'Direct compiled-body edits preserved verbatim as proposed curation, excluded from compilation until explicit curation, adoption, or rejection triage.';
+COMMENT ON COLUMN knowledge_artifact_evidence.claim_lineage_id IS
+  'D54-stable claim citation coordinate; paired with claim_chunk_content_hash, never a raw extraction-generation claim ID.';
+"""
+
+_DOWNGRADE = """
+DROP TABLE IF EXISTS knowledge_quarantines;
+
+ALTER TABLE knowledge_artifact_evidence ADD COLUMN claim_id uuid;
+UPDATE knowledge_artifact_evidence e
+SET claim_id = resolved.claim_id
+FROM (
+  SELECT DISTINCT ON (c.doc_id, ch.chunk_content_hash)
+         c.doc_id, ch.chunk_content_hash, c.claim_id
+  FROM claims c
+  JOIN chunks ch
+    ON ch.deployment_id = c.deployment_id AND ch.chunk_id = c.chunk_id
+  ORDER BY c.doc_id, ch.chunk_content_hash, c.is_current_testimony DESC,
+           c.ingested_at DESC
+) resolved
+WHERE e.claim_lineage_id = resolved.doc_id
+  AND e.claim_chunk_content_hash = resolved.chunk_content_hash;
+DO $$
+BEGIN
+  IF EXISTS (
+    SELECT 1 FROM knowledge_artifact_evidence
+    WHERE claim_lineage_id IS NOT NULL AND claim_id IS NULL
+  ) THEN
+    RAISE EXCEPTION
+      'cannot downgrade unresolved knowledge_artifact_evidence claim coordinates';
+  END IF;
+END $$;
+DROP INDEX ix_kae_claim_coordinate;
+DROP INDEX ux_kae_link;
+ALTER TABLE knowledge_artifact_evidence
+  DROP CONSTRAINT ck_kae_exactly_one_target,
+  DROP CONSTRAINT ck_kae_claim_coordinate_pair,
+  DROP COLUMN claim_chunk_content_hash,
+  DROP COLUMN claim_lineage_id,
+  ADD CHECK (num_nonnulls(claim_id, relation_id, doc_id) = 1);
+CREATE UNIQUE INDEX ux_kae_link ON knowledge_artifact_evidence (
+  artifact_id, role, claim_id, relation_id, doc_id
+) NULLS NOT DISTINCT;
+CREATE INDEX ix_kae_claim ON knowledge_artifact_evidence (claim_id)
+  WHERE claim_id IS NOT NULL;
+
+ALTER TABLE knowledge_plan_decisions
+  DROP CONSTRAINT IF EXISTS ck_kplan_review_pair,
+  DROP CONSTRAINT IF EXISTS ck_kplan_expected_impact,
+  DROP CONSTRAINT IF EXISTS ck_kplan_blast_radius,
+  DROP CONSTRAINT IF EXISTS ck_kplan_confidence,
+  DROP COLUMN IF EXISTS application_commit,
+  DROP COLUMN IF EXISTS reviewed_at,
+  DROP COLUMN IF EXISTS reviewed_by,
+  DROP COLUMN IF EXISTS expected_impact,
+  DROP COLUMN IF EXISTS blast_radius,
+  DROP COLUMN IF EXISTS confidence,
+  DROP COLUMN IF EXISTS plan_run_id;
+
+DROP TABLE IF EXISTS knowledge_plan_runs;
+"""
+
+
+def upgrade() -> None:
+    """Add the WP-6.5 planner ledger, impact routing, and quarantine records."""
+    op.execute(_UPGRADE)
+
+
+def downgrade() -> None:
+    """Remove the WP-6.5 planner runtime schema extension."""
+    op.execute(_DOWNGRADE)

rememberstack/spine/migrations/versions/p6_06_0015_authored_dispatch_runtime.py

@@ -0,0 +1,38 @@
+"""Add the D67 work-ledger route for WP-6.6 knowledge dispatches."""
+
+from collections.abc import Sequence
+
+from alembic import op
+
+revision: str = "p6_06_0015"
+down_revision: str | None = "p6_05_0014"
+branch_labels: str | Sequence[str] | None = None
+depends_on: str | Sequence[str] | None = None
+
+
+def upgrade() -> None:
+    """Append the dispatch target and stage used by the generic D12 worker."""
+    op.execute(
+        "ALTER TYPE processing_target ADD VALUE IF NOT EXISTS 'knowledge_dispatch'"
+    )
+    op.execute("ALTER TYPE pipeline_stage ADD VALUE IF NOT EXISTS 'dispatch_knowledge'")
+    op.execute(
+        """
+        CREATE UNIQUE INDEX ux_krefresh_open_authored_review
+        ON knowledge_refresh_queue (deployment_id, artifact_id)
+        WHERE trigger = 'authored_review' AND processed_at IS NULL
+        """
+    )
+    op.execute(
+        """
+        CREATE UNIQUE INDEX ux_kdispatch_pending_subscription
+        ON knowledge_dispatches (deployment_id, subscription_id)
+        WHERE status = 'pending'
+        """
+    )
+
+
+def downgrade() -> None:
+    """PostgreSQL enum additions are intentionally additive across downgrades."""
+    op.execute("DROP INDEX IF EXISTS ux_kdispatch_pending_subscription")
+    op.execute("DROP INDEX IF EXISTS ux_krefresh_open_authored_review")

rememberstack/spine/migrations/versions/p7_02_0016_operational_eval_suite.py

@@ -0,0 +1,19 @@
+"""Add the WP-7.2 operational scale eval suite."""
+
+from collections.abc import Sequence
+
+from alembic import op
+
+revision: str = "p7_02_0016"
+down_revision: str | None = "p6_06_0015"
+branch_labels: str | Sequence[str] | None = None
+depends_on: str | Sequence[str] | None = None
+
+
+def upgrade() -> None:
+    """Append the provider-neutral operational measurement suite."""
+    op.execute("ALTER TYPE eval_suite ADD VALUE IF NOT EXISTS 'operational'")
+
+
+def downgrade() -> None:
+    """PostgreSQL cannot remove an enum value in place; additive no-op."""

rememberstack/spine/migrations/versions/p7_05_0017_hard_forget.py

@@ -0,0 +1,55 @@
+"""Add the D74 hard-forget manifest materialization and worker vocabulary."""
+
+from collections.abc import Sequence
+
+from rememberstack.spine.migrations._helpers import apply_ddl
+from rememberstack.spine.migrations._helpers import drop_tables
+from rememberstack.spine.migrations._helpers import drop_types
+
+revision: str = "p7_05_0017"
+down_revision: str | None = "p7_02_0016"
+branch_labels: str | Sequence[str] | None = None
+depends_on: str | Sequence[str] | None = None
+
+_DDL = r"""ALTER TYPE pipeline_component ADD VALUE IF NOT EXISTS 'forgetter';
+ALTER TYPE pipeline_stage ADD VALUE IF NOT EXISTS 'hard_forget';
+CREATE TYPE forget_manifest_status AS ENUM ('preparing','accepted','complete');
+
+CREATE TABLE forget_manifests (
+  forget_id            uuid PRIMARY KEY,                 -- stable portable intent identity
+  deployment_id        uuid NOT NULL REFERENCES deployments, -- deployment that owns the lineage
+  doc_id                uuid NOT NULL,                    -- lineage target; intentionally retained for replay
+  schema_version        smallint NOT NULL,                -- portable manifest schema version
+  manifest_hash         text,                             -- set with manifest before portable append
+  manifest              jsonb,                            -- content-free immutable IDs, hashes, and keys
+  source_identity_hash  text,                             -- irreversible stable-source ingest guard
+  content_hashes        text[] NOT NULL DEFAULT '{}',     -- irreversible raw-content ingest guards
+  status                forget_manifest_status NOT NULL DEFAULT 'preparing', -- admission lifecycle
+  prepared_at           timestamptz NOT NULL DEFAULT now(), -- barrier establishment time
+  accepted_at           timestamptz,                      -- portable append acknowledgement time
+  completed_at          timestamptz,                      -- latest successful full purge time
+  last_verified_at      timestamptz,                      -- latest all-store readiness re-honor
+  UNIQUE (deployment_id, doc_id),
+  UNIQUE (deployment_id, forget_id),
+  CHECK ((status = 'preparing') OR
+         (manifest_hash IS NOT NULL AND manifest IS NOT NULL AND accepted_at IS NOT NULL)),
+  CHECK ((status = 'complete') = (completed_at IS NOT NULL))
+);
+COMMENT ON TABLE forget_manifests IS
+  'D74 hard-forget manifest materialization: preparing is the admission barrier; accepted means portable intent is durable; complete never lets readiness skip external-store re-honor.';
+CREATE INDEX ix_forget_source_guard
+  ON forget_manifests (deployment_id, source_identity_hash)
+  WHERE source_identity_hash IS NOT NULL;
+CREATE INDEX ix_forget_content_guard ON forget_manifests USING gin (content_hashes);
+"""
+
+
+def upgrade() -> None:
+    """Add one manifest table plus the unlaned hard-forget work identity."""
+    apply_ddl(sql=_DDL)
+
+
+def downgrade() -> None:
+    """Drop reversible D74 objects; additive pipeline enum values remain."""
+    drop_tables(table_names=("forget_manifests",))
+    drop_types(type_names=("forget_manifest_status",))