Unattributed full-DB reader on venus Supabase project (~3/day, postgres role, incl. vault.secrets) — attribute or treat as compromise

VENUS-350 venus Blocked urgent

venus-db-backup.sh: trash||rm precedence hard-deletes clinical dumps when trash exists and FAILS

VENUS-359 venus Blocked high

venus-db-backup.sh: prune glob spans plaintext+encrypted lanes, sharing one KEEP budget

VENUS-358 venus Blocked high