Propagate spec rename and privacy-policy decisions through code comments, registries, and tests

Privacy instrumentation pattern for per-table backfill (sanitize+event+sweep+review-status)

Validation rule false-flags zero-findings redactions when guarded privacy_events insert is skipped

Bootstrap endpoint skips knowledge reports — only backfills Q&A extraction pipeline