/solicitar-acceso fully broken: every access-request submission 500s. chk_accessRequests_requesterRole CHECK allows only legacy ('estudiante','docente','otro') but PLUTO-7 changed requesterRole to literal DB role names (SELF_REQUESTABLE_ROLES: alumno/docente_adjunto/docente_jtp/docente_ayudante_primera). Constraint never migrated w/ PLUTO-7 → all new submissions violate it. Real user cecilia.tebes blocked+retried (appEvents submitAccessRequestFailed 18:51 UTC). FIX (db): drop the CHECK (commons bans CHECK on enumerated label sets = native-enum-in-disguise; app already validates via isSelfRequestableRole) OR union legacy+new (49 legacy rows must not trip ALTER). Audit pre-reviews DDL. PUBLIC FRONT DOOR.