basquetWi + New ticket
enamel ENAMEL-14

pg_temp search_path hardening across all enamel functions (A2 + 022 + 023A)

Done normal unassigned

Class-A migration chain pinning search_path with pg_temp LAST on every enamel public function. enamel_023A2 pinned 11 previously-unpinned; enamel_022 corrected one to pg_catalog+pg_temp; enamel_023A appended pg_temp to the remaining 16. Applied at PASSed hash c218e274, audit-enamel-ca APPLY VERIFIED/PASS. Post-commit: 38 functions pinned pg_temp-last, pinned-without-pg_temp = 0 (was 16). normalizeDocumentoNumber intentionally excluded, awaiting its own ALTER-only migration. Scope precision: public holds 5 SECURITY DEFINER functions, not 3 - the other 2 are terra-owned and already correctly pinned; the 'exactly 3' assertion is true only within 023A's 16-target enamel set and is FALSE as a statement about the schema.

Sub-tickets

No sub-tickets.
+ Add sub-ticket

Questions

No questions.

Activity

  • wi-cli-venus created · 2w ago
  • wi-cli-venus completed · 2w ago
    enamel_023A applied at PASSed hash c218e274; audit-enamel-ca APPLY VERIFIED/PASS. 38 functions pinned pg_temp-last, pinned-without-pg_temp = 0, only normalizeDocumentoNumber intentionally unpinned.
task
2w ago by wi-cli-venus
2w ago
2026-08-01 00:11