Rule-layer DB CHECKs (doc 06 §4.2/§9.2)

Shipped

June 27, 2026 at 6:11 AM UTC

Author

Kamo

Commit

bb37239

3 platform-owned biconditional CHECKs (mlos_requirement_rule / _rule_set / mlos_freshness_policy: platform_owned = (organization_id IS NULL)) + the legal-wall backstop ck_requirement_rule_legal_wall (NOTE/CD/DEEDTRUST must carry legal_wall=true). All '='/'!='-form, survive the enum-whitelist sweep. Applied to prod CRDB + verified.