Shared support tables have zero DB-side access control: no RLS, owning role, cross-tenant with terra

ENAMEL-28 enamel Backlog high

Agent-operable ticket API: REST handlers over /soporte, single auth definition

ENAMEL-27 enamel Blocked high

User + group administration: no UI exists, every grant is a hand-written DB row

ENAMEL-22 enamel Blocked high

Live schema and db/migrations have drifted: full both-directions inventory needed

ENAMEL-26 enamel Backlog high

Greenfield transactional email stack: dispatcher chokepoint, admission+egress guards, durable outbox

ENAMEL-16 enamel Backlog high

Whole-DB pg_dump insurance for eprpywqwzsvrjeaforei (enamel+terra shared project) does not exist

ENAMEL-12 enamel Blocked high

Legal review: HC data residency under Ley 25.326

ENAMEL-1 enamel Backlog high

Historia clinica: the stated initial focus, zero app surface, pacientes table empty

ENAMEL-24 enamel Backlog

supportTicketCounters has no guard - the instrument used to bound a disclosure incident is itself unprotected

ENAMEL-19 enamel Backlog

Track AR data-protection reform bill + ReNaPDiS registration procedure

ENAMEL-3 enamel Backlog

Confirm if LOINC + DICOM are mandated (not just recommended) for HCE interop

ENAMEL-2 enamel Backlog

Wire applog-listen@enamel error rail when enamel is built

ENAMEL-11 enamel Backlog low