| 2026-03-02 | • FORCE ROW LEVEL SECURITY completeness sweep on all RLS-enabled tables | |
| 2026-03-02 | • GIN indexes (jsonb_path_ops) on JSONB columns | |
| 2026-03-02 | • JSONB column defaults audit (fix double-stringified defaults) | |
| 2026-03-02 | • Dynamic FK index detection + creation | |
| 2026-03-02 | • Standardized RLS on 12 tables — 4-policy has_tenant_access | |
| 2026-02-10 | Hardcoded service keys removed from 4 files (17 occurrences) | |
| 2026-02-10 | Auth rate limiting added to /register, /login, /forgot-password | |
| 2026-02-10 | PII console.log purged from 4 files | See Change Policy and Upcoming Changes. |