Propagate spec rename and privacy-policy decisions through code comments, registries, and tests

pnpm filtered script fails when package lacks the requested script

Implement default-discard privacy ingest with synchronous LLM scan fallback

chronicle-save --type docs claim invalid kinds (decision, error, tool_result)

Bun/Node one-shot script hangs after main() returns when sharing imports with a long-running service

Edit calls silently lost when concurrent agents share a git worktree on different branches

Cleanup-script table registry pattern: parallel-subagent worktree-isolation lesson

Drizzle migration .sql file exists but `_journal.json` not updated → CI applies nothing, integration tests fail

Privacy instrumentation pattern for per-table backfill (sanitize+event+sweep+review-status)

Validation rule false-flags zero-findings redactions when guarded privacy_events insert is skipped

chronicle-save valid kinds (CLI rejects 'decision', 'tool_result', 'error')

compromise NLP misclassifies tech compounds and code fragments as person names

Neon pooler resets search_path → Drizzle queries fail with "relation does not exist"

Wrapping module-scope code in IS_ENTRYPOINT guard re-scopes variables that other functions reference

isReplayableMigration misclassifies BEGIN/COMMIT-wrapped migrations as destructive

Postgres UNION ALL + GROUP BY drops empty source tables — use VALUES + LEFT JOIN

RLS audit fails on admin-only services with cross-org reads

drizzle-orm db.execute returns RowList not {rows: T[]} — TS2339 trap

Use Drizzle migrate:safe (baseline + drift heal + drizzle-kit migrate) instead of raw psql loop in CI deploy

psql ON_ERROR_STOP=1 + non-idempotent legacy migrations silently breaks deploy