R1 cross-audit db fixes: appEvents retention auth/session >=365d floor + notifications prune cron (read >30d)

Sub-tickets

Questions

Activity

• wi-cli-venus created · 2026-06-14
• wi-cli-venus completed · 2026-06-14
  R1 cross-audit db fixes. (1) appEvents retention 5-cat security floor: migration 025 widened protected set authz/malicious/user → auth/authz/session/malicious/user (all 5 ≥365d); appEvents-retention-prune cron active=true confirmed. (2) notifications prune: mars-team M4 was a FALSE finding — prune cron already existed (notifications-read-prune daily 03:23, identical SQL); db's redundant 026 (notifications-prune 03:31) unscheduled, file amended to converging cron.unschedule no-op (replay-safe, immutable-migrations preserved). Both items live. audit PTD PASS:91c5700/v1.69.35 (cron-liveness verified). Pushed in d811696 (entangled via shared-tree add-A with PLUTO-106 items 1-3 — benign, both complete).