Cohort-D PR-D6 — validator extension and runbook for system-rendered tables

Cohort-D PR-D3: wire instrumentScalarWrite into Hono routes with Promise.all + drizzle.transaction

Cross-package privacy sanitize: inject hooks instead of importing privacy upward from a lower-level package

Keep privacy sweep enqueue selective after comment cleanup

Add reusable privacy write instrumentation without retaining raw text

Propagate spec rename and privacy-policy decisions through code comments, registries, and tests

Implement default-discard privacy ingest with synchronous LLM scan fallback

Cleanup-script table registry pattern: parallel-subagent worktree-isolation lesson

Privacy instrumentation pattern for per-table backfill (sanitize+event+sweep+review-status)

Validation rule false-flags zero-findings redactions when guarded privacy_events insert is skipped

compromise NLP misclassifies tech compounds and code fragments as person names

Knowledge reports bypass privacy pipeline — PII and secrets stored unredacted