Greenfield transactional email stack: dispatcher chokepoint, admission+egress guards, durable outbox

ENAMEL-16 enamel Blocked high

pg_net ACLs: ask Supabase to apply the hardening its own issue_pg_net_access trigger defines but version-gates out at 0.20.3

ENAMEL-41 enamel Blocked high

Shared support tables have zero DB-side access control: no RLS, owning role, cross-tenant with terra

ENAMEL-28 enamel Blocked high

EVO-83 central build: client CR + questions on the extended supportTickets queue, portal UI, and the appKey-VALIDATED SECURITY DEFINER RPC - the only EVO-83 leg still outstanding

ENAMEL-47 enamel Blocked high ↳ EVO-83