Sub-ticket of PLUTO-122 search_path hardening migration: pin SET search_path on all 36 public functions (function_search_path_mutable lint 0011). Behavior-preserving (most ref public -> SET search_path = public; do NOT use '' on any fn referencing public objects unqualified - verify each resolves identically). Additive/reversible. 0 SECURITY DEFINER fns so risk near-zero; Elazar greenlit anyway for a clean advisor. Audit pre-apply (schema DDL) -> apply -> db:export -> push via db exception lane. · pluto