- Shipped
- 3 ஆகஸ்ட், 2026 அன்று 1:26 AM UTC
- Author
- Kamo
- Commit
- bf2f5c4
Backs PhiTenantGuard with a real column. HANDLES_PHI is NOT NULL DEFAULT FALSE following the **************** pattern, so every existing tenant is explicitly outside the compliance boundary rather than silently inside it. PHI_EFFECTIVE_DATE scopes a breach assessment and a retention obligation to the right window — "since when" is the first question asked after "what was exposed". Convert to policy with **************** The guard itself stays free of the entity, so a caller holding only a session-cached flag does not have to load a row. Safe to push: both columns already exist in the cluster and every one of the 12 organizations reads false. Verified against information_schema before landing — handles_phi boolean NOT NULL DEFAULT false, phi_effective_date timestamp NULL. See the KamoInitializer migration for the reproducible form.