4 untracked Terra access reports, 10 days open, noProfile - check registry before assuming absent

TERRA-295 terra In progress high

Terra production pool connects as the postgres TABLE OWNER - no GRANT or trigger containment is enforceable in that schema until a non-owner app role exists (twin of PLUTO-670)

TERRA-281 terra In progress high

vUserGroups role gate uses a bare toAt IS NULL, so a future-end grant confers no app role while still conferring clinical write

TERRA-286 terra In progress high

MISSING PRIMITIVE: terraPracticas has no validation state, so three ruled rows reference a boundary that does not exist (TERRA-254/150/146)

TERRA-276 terra In progress high

Pure antecedente soft-delete blocked by later required-detail catalog change

TERRA-272 terra In progress

Every create in the shared registry needs Elazar personally: the only live admin grants on enamel and terra are one human row

TERRA-268 terra In progress