userGroups write-side liveness is narrower than read-side: future-dated toAt INSERT skips all write guards

ENAMEL-81 enamel In progress high

The admin-minimum guard's advisory lock is an UNFORCED control: its mutual-exclusion effect cannot be rehearsed rollback-only, and forcing it red needs a disposable DB or authorised committed DML on the sole live admin grant

ENAMEL-86 enamel Backlog high

Greenfield transactional email stack: dispatcher chokepoint, admission+egress guards, durable outbox

ENAMEL-16 enamel Blocked high

pg_net ACLs: ask Supabase to apply the hardening its own issue_pg_net_access trigger defines but version-gates out at 0.20.3

ENAMEL-41 enamel Blocked high

Shared support tables have zero DB-side access control: no RLS, owning role, cross-tenant with terra

ENAMEL-28 enamel Blocked high

EVO-83 central build: client CR + questions on the extended supportTickets queue, portal UI, and the appKey-VALIDATED SECURITY DEFINER RPC - the only EVO-83 leg still outstanding

ENAMEL-47 enamel Blocked high ↳ EVO-83

Legal review: HC data residency under Ley 25.326

ENAMEL-1 enamel Backlog high

Memory sweep: split project_enamel_shipped_surface_state.md, re-verify stale memory files

ENAMEL-93 enamel Backlog

EVO-123: convert 10 UPDATE OF invariant guards to AFTER/no-column-list

ENAMEL-87 enamel Backlog

Enamel has exactly one live admin grant with zero headroom - decide whether a second is provisioned

ENAMEL-84 enamel Backlog

Class-A migration artifacts live in untracked db/migrations dirs

ENAMEL-80 enamel Backlog

groups.value is editable with no immutability constraint - the stable-code convention that every lookup-backed gate rests on is unenforced, and a rename silently changes which rows match

ENAMEL-78 enamel Backlog

groupNotPermitted telemetry cannot say which group was refused - report the resolved group identity from SQL

ENAMEL-74 enamel Backlog ↳ ENAMEL-69

Venus-resident monitoring has no external liveness watcher: every enamel alarm dies silently with its host

ENAMEL-44 enamel Todo

Historia clinica: statutory HC-copy export (Ley 26.529) vs no-export scope boundary - needs a ruling

ENAMEL-51 enamel Backlog ↳ ENAMEL-24

Vocabulary guard mirror hole: a piezasDentarias row deleted out from under a scope member

ENAMEL-45 enamel Backlog

Track AR data-protection reform bill + ReNaPDiS registration procedure

ENAMEL-3 enamel Backlog

Confirm if LOINC + DICOM are mandated (not just recommended) for HCE interop

ENAMEL-2 enamel Backlog

Census enamel's functions against the EVO-114 R6 forbidden-set shape (report only, no REVOKE authority)

ENAMEL-92 enamel Backlog low

supautils force-grant census: public functions holding EXECUTE outside their allowed set (R6 forbidden-set read, inventory only)

ENAMEL-91 enamel Backlog low

page_not_found records no requester on enamel: ip, userAgent and actor are all NULL, so every 404 needs a DM to the lane to attribute

ENAMEL-68 enamel Backlog low

Enamel /image 404s x2 organic in 5 minutes - no route, no link on any reachable page, unattributable by construction

ENAMEL-61 enamel Deferred low

Historia clinica: 10-year retention floor has no enforcement mechanism

ENAMEL-55 enamel Backlog low ↳ ENAMEL-24

Historia clinica: mental-health RBAC tier + daily-recording requirement (Ley 26.657)

ENAMEL-54 enamel Backlog low ↳ ENAMEL-24

Historia clinica: FHIR R4 + SNOMED CT AR interop (Ley 27.706)

ENAMEL-53 enamel Backlog low ↳ ENAMEL-24

Historia clinica: firma digital + versioned consent + minors' consent banding (CCyC art.26)

ENAMEL-52 enamel Backlog low ↳ ENAMEL-24