Command workspace and governance release — 8 October 2026
PR316 merged as ef801bbc788d1f76ceb631f99fabed949d222d20 after exact-head CI37729195038 passed both quality and native PostgreSQL gates on3544028a43eaf08c2af1bf87f23e74f1db0df38b. The initial candidate's campus-staff landing regression was corrected and22 focused navigation/security checks passed before the successful full run.
Applied through Supabase MCP to havugmqmyplqgbrlthhs and read back:
| Local migration | Hosted version |
|---|---|
| 20261011004100_governed_owner_continuity | 20261008050338 |
| 20261011004200_exceptional_staff_access_reviews | 20261008050349 |
| 20261011004300_scoped_command_workspace | 20261008050356 |
| 20261011004400_governed_financial_period_snapshots | 20261008050403 |
The new protected public-schema functions deny EXECUTE to anonymous and authenticated database roles. Application routes authenticate the session and fresh database authority. No owner policy, temporary grant, period closure, customer action, transfer or message was activated for verification.
Railway reports successful deployment. Backend health reports exact revisionef801bbc, database and Redis healthy, /health/live and /health/ready200. New access-governance/staff, command-workspace and financial-period API roots return401 without authentication. The existing Paystack health observation remains unverified; general health therefore remains degraded.
Admin/storefront Cloudflare release37730558360 succeeded on the exact merged revision. Main CI37730558309 also passed. Documentation portal release37730558328 failed separately; custom-domain admin overview, owner continuity and storefront buy pages return 200, and their deployed JavaScript assets embed the exact merged revision ef801bbc788d1f76ceb631f99fabed949d222d20. The preceding documentation deployment identified a missingdebelu-docs Pages project; that independent portal has not been certified deployed.
Native CI exercised owner/access authority races and period writer/reviewer orderings, followed by the isolated synthetic PostgreSQL restore drill. This does not certify a hosted production recovery, storage object-byte restoration, bank settlement or provider delivery. Owner continuity requires existing verified MFA and explicit prior enrollment; it does not bypass account restrictions or recover a lost Supabase authenticator. Temporary access excludes security and money-moving capabilities. Financial period closure seals the declared bounded creation-window evidence and invalidates on relevant subsequent source writes; bankSettlementVerified remainsfalse.
At this historical checkpoint, growth/maintenance045–047, attributes048 and financial authority correction049 were separate unreleased work. Their subsequent releases are recorded below.
Growth and maintenance release
PR317 merged as 3cdb9c4af98c7a097aa393422118dfd0e135f437 after exact-head CI37734237238 passed quality and native PostgreSQL checks on98231d12f298adfcef8577f2bace2ec0cc7b820c. The native checks include real temporary marketing-lease expiry waits, maintenance cancellation/checkout and staff-buyer authority ordering, promotion review/checkout races, financial missing-case preflight, and the synthetic restore drill.
| Local migration | Hosted version |
|---|---|
| 20261011004500_governed_merchandising | 20261008060122 |
| 20261011004600_governed_scheduled_maintenance | 20261008060123 |
| 20261011004700_governed_flash_sale_publication | 20261008060126 |
| 20261011004900_financial_period_authority_preflight | 20261008060127 |
All four migrations were applied through Supabase MCP and hosted history was read back. Protected public functions deny anonymous/authenticated EXECUTE. Railway deployment6928428341 succeeded and backend health reports exact3cdb9c4af98c7a097aa393422118dfd0e135f437. Live and ready endpoints return200; the three new protected merchandising, scheduled-maintenance and promotion API roots return401 without authentication. Cloudflare release37735397541 succeeded. Admin overview and storefront buy pages and their JavaScript assets returned200 and embedded the exact merged revision3cdb9c4af98c7a097aa393422118dfd0e135f437.
Legacy boosts, pins and banners retain historical records and require reviewed publication for live effects in the new application. No merchandising rule, discount, coupon, maintenance interval or customer action was activated as a release probe. Existing manual controls remain authoritative alongside reviewed schedule effects.
Final catalog release
PR318 merged as b846b432f36f2255c1060cac08f6dcd4817d91ab after exact-head CI37788584773 passed quality, application builds, accessibility/routes, native PostgreSQL migration replay, concurrency checks and the synthetic restore drill on23cbac034cc0a6e08e2c488cefe7f3b101ec22f5. The merged Git tree exactly matches the passing candidate tree34d9c5ed2e830ddfdb57dc5d01935050c0a4a9cb.
| Local migration | Hosted version |
|---|---|
| 20261011004800_governed_category_attribute_schemas | 20261008141253 |
| 20261011005000_final_effect_staff_lease_authority | 20261008141255 |
| 20261011005100_governed_listing_change_reviews | 20261008141258 |
| 20261011005200_vendor_branding_owner_mutations | 20261008130910 |
Migrations048,050 and051 were applied sequentially through Supabase MCP to havugmqmyplqgbrlthhs; hosted history was read back. Migration052 was already installed under the hosted name vendor_branding_owner_mutations and was not replayed. All nine replaced existing command functions retain their OIDs, signatures, return types, owners, grants and configuration. Four new protected RPCs are security definers with anonymous/authenticated EXECUTE denied and service-role EXECUTE allowed. All six affected control/log/attribute tables have RLS enabled; all18 table-role combinations deny direct INSERT,UPDATE,DELETE andTRUNCATE.
Reviewed category schemas validate prospective commercial edits while preserving historical captured fields. Atomic listing decisions bind exact content/revisions, independently audit outcomes, and prevent pending or rejected content from bypassing publication gates. Fresh temporary authority is rechecked after protected resource waits. Historical listing observations survive permitted product removal.
Railway deployment6937903629 succeeded at2026-10-08T14:16:10Z. Backend health reports the exact merged revisionb846b432f36f2255c1060cac08f6dcd4817d91ab; live and ready return200, database/Redis are healthy, and queue counts are0/0/0. Category-attribute and listing-change private routes return401 without authentication; public /api/taxonomy returns200. Paystack remains unverified and overall health remains degraded for that existing provider observation.
Cloudflare release37790772624 succeeded on the exact merged revision. Admin overview and storefront buy pages return200; /assets/index-DqQUkBHO.js on admin.debelu.com and /assets/index-DfoOxh7L.js on app.debelu.com return200 and contain the complete merged SHA. The redundant automatic Cloudflare release37790715720 was cancelled after the passing candidate and merged-tree comparison; the manual production release retained credential checks, builds and deployment smoke checks while skipping duplicate quality tests.
The primary New Debelu Marketplace checkout is on main with the final implementation integrated. Pre-existing unrelated local deletions and untracked operational documents were preserved and excluded from this release. All final-batch migrations are applied; no manual database application remains. External channel credentials and controlled delivery evidence, real hosted recovery objectives/restoration, and case-specific retained-system evidence remain operator work described in the operational closeout. No provider messages, customer commands or money movements were used as deployment probes.