- auth.sql: user lookups, counts, register/mirror inserts, profile update
- security.sql: access EXISTS, vulnerability list/metrics/status,
framework list, latest scan/report, project-id guards
- NULL description/service_id rows stay filtered, matching the original
scan-error-and-skip behavior
- auth_users probe and filtered audit-log queries stay raw: one is a
Better Auth table outside the schema, the other is dynamically built
- TestSecurityLiveInvariants covers the access predicate, severity
ordering, upsert conflict path, and latest-row lookups against live
Postgres
Authored By: TDvorak <[email protected]>