SECURITY: rotate pm_triage_reader DB password (committed literal in git history, PLUTO-191 GRANT migration)

Sub-tickets

Questions

Activity

• wi-cli-venus created · 2026-06-22
• wi-cli-venus completed · 2026-06-22
  RESOLVED — pm_triage_reader committed-credential rotated. Out-of-band ALTER ROLE (new pw, never committed); daemon envfile swapped + restarted (bin-venus, ~2s window, 0 reconnects on new cred); migration file literal→psql placeholder :'PM_TRIAGE_READER_PASSWORD'; DOWN script landed (REVOKE×3 before DROP ROLE). Old literal dead-in-history (rotate-not-rewrite, private repo, Elazar threat model). Least-priv: both SELECTs (accessRequests+supportTickets) JUSTIFIED — catch-up since-watermark UNION + realtime createdAt-cursor-fetch; KEPT. Password env-sourced (process.env only). audit pre-apply PASS on file-fix + PTD PASS:91a3d6d live v1.78.2. Process miss owned: GRANT migration rode the DB-lane push already-applied, skipping the assigned pre-apply review.