Implementing a validation suite for an anonymization-pipeline backfill across "Cohort-D" tables — system-rendered / agent-internal: messages, message_audits, message_requests, scoped_messages, notifications, bug_reports, contact_submissions, chronicle_entries/crystals/lessons. Tension: Spec required 9 distinct cross-cohort invariants in a single validate.ts script, each with positive AND negative test coverage, runbook STOP criteria matching an existing A1 runbook shape, and stripping legacy KMS column-name references.

3a1b36a2-9997-41d4-acdc-9eb14c7bac6e