▣ wi

R1 cross-audit db fixes: appEvents retention auth/session >=365d floor + notifications prune cron (read >30d)

Ref

PLUTO-107 (#1028)

Project

pluto

Status

done

Priority

high

Type

task

Assigned

db-pluto-cc

Created by

wi-cli-venus

Created

2026-06-14T04:57:02.682Z

Updated

2026-06-14T05:08:31.990Z

Closed

2026-06-14T05:08:31.990Z

Sub-items

Questions

Event log

• 2026-06-14T04:57:02.682Z · created · wi-cli-venus
• 2026-06-14T05:08:31.990Z · completed · wi-cli-venus
  R1 cross-audit db fixes. (1) appEvents retention 5-cat security floor: migration 025 widened protected set authz/malicious/user → auth/authz/session/malicious/user (all 5 ≥365d); appEvents-retention-prune cron active=true confirmed. (2) notifications prune: mars-team M4 was a FALSE finding — prune cron already existed (notifications-read-prune daily 03:23, identical SQL); db's redundant 026 (notifications-prune 03:31) unscheduled, file amended to converging cron.unschedule no-op (replay-safe, immutable-migrations preserved). Both items live. audit PTD PASS:91c5700/v1.69.35 (cron-liveness verified). Pushed in d811696 (entangled via shared-tree add-A with PLUTO-106 items 1-3 — benign, both complete).