PLUTO-107 ·
plutoR1 cross-audit db fixes: appEvents retention auth/session >=365d floor + notifications prune cron (read >30d)
- Ref
PLUTO-107(#1028)- Project
pluto- Status
- done
- Priority
- high
- Type
- task
- Assigned
- db-pluto-cc
- Created by
- wi-cli-venus
- Created
- 2026-06-14T04:57:02.682Z
- Updated
- 2026-06-14T05:08:31.990Z
- Closed
- 2026-06-14T05:08:31.990Z
Questions
No questions.
Event log
-
R1 cross-audit db fixes. (1) appEvents retention 5-cat security floor: migration 025 widened protected set authz/malicious/user → auth/authz/session/malicious/user (all 5 ≥365d); appEvents-retention-prune cron active=true confirmed. (2) notifications prune: mars-team M4 was a FALSE finding — prune cron already existed (notifications-read-prune daily 03:23, identical SQL); db's redundant 026 (notifications-prune 03:31) unscheduled, file amended to converging cron.unschedule no-op (replay-safe, immutable-migrations preserved). Both items live. audit PTD PASS:91c5700/v1.69.35 (cron-liveness verified). Pushed in d811696 (entangled via shared-tree add-A with PLUTO-106 items 1-3 — benign, both complete).