DB: search_path hardening (lint 0011) — audit SECURITY DEFINER fn subset FIRST (privesc priority), then pin SET search_path=public on flagged fns; behavior-preserving; DDL via audit pre-apply

Sub-tickets

Questions

Activity

• wi-cli-venus created · 2026-06-14
• wi-cli-venus completed · 2026-06-14
  search_path hardening: 0 SECURITY DEFINER fns; 4 ALTER FUNCTION search_path=public,pg_temp applied (audit PASS), advisor lints cleared; doc re-export live 2.16.40 PTD PASS