What we shipped

Merge pull request #322 from fahimmahnij/fahim/region-packs

Merge pull request #321 from fahimmahnij/fahim/embeddings-probe-degraded

region packs — regional behaviour as data, set per organisation

the a11y focus guard was scanning zero files on CI

a rate limit is not a dead key

Merge pull request #320 from fahimmahnij/fahim/school-drop-applied

drop_school is applied — record it, and what was verified after

Merge pull request #319 from fahimmahnij/fahim/school-drop-rls

the school drop must rewrite an RLS policy, not CASCADE over it

Merge pull request #318 from fahimmahnij/fahim/remove-school

retire the six-US-film-schools enum, and the cohort model built on it

Merge pull request #317 from fahimmahnij/fahim/readiness-department-breadth

readiness counts departments staffed, not Hollywood's five

Merge pull request #316 from fahimmahnij/fahim/address-unlocks-the-band

stop calling the address optional when five fields depend on it

Merge pull request #315 from fahimmahnij/fahim/cast-table-uses-resolved-band

the printed Cast table stops listing one actor twice

Merge pull request #314 from fahimmahnij/fahim/realtime-update-semantics

obligation 2 is blocked on a decision, and here is its price

Merge pull request #313 from fahimmahnij/fahim/departmentid-write-path

new crew rows populate departmentId, so they never need the backfill

Merge pull request #312 from fahimmahnij/fahim/explicit-tombstones

a row you did not send is no longer a row you deleted

Merge pull request #311 from fahimmahnij/fahim/crew-graph-charter

what the crew graph may and may not know — written against the code

Merge pull request #310 from fahimmahnij/fahim/apply-staged-migrations

apply the two staged migrations, and stop calling them staged

Merge pull request #309 from fahimmahnij/fahim/partial-links-fix

partial scene-character links no longer drop cast

Merge pull request #308 from fahimmahnij/fahim/department-vocabulary-gate

one department vocabulary, enforced

Merge pull request #307 from fahimmahnij/fahim/marketplace-departments

a choreographer can post, and apply for, choreography work

Merge pull request #306 from fahimmahnij/fahim/jurisdiction-rest-rules

stop judging a Mumbai unit against a Los Angeles agreement

Merge pull request #305 from fahimmahnij/fahim/provenance-lock

a re-upload no longer overwrites what a producer corrected

Merge pull request #304 from fahimmahnij/fahim/scene-character-ssot

resolve the day's cast by identity, not by spelling

Merge pull request #303 from fahimmahnij/fahim/departments-as-data

a choreographer can finally be filed as a choreographer

Merge pull request #302 from fahimmahnij/fahim/identity-and-conflict-adrs

18·6 is decided, not done — record which half landed

decide canonical identity and the conflict model — Pillar 18·6

Merge pull request #301 from fahimmahnij/fahim/call-sheet-doc-accuracy

prove the printed sheet opens, instead of that it starts with %PDF

the safety-fields migration is applied, so stop saying it is not

Merge pull request #296 from fahimmahnij/dependabot/npm_and_yarn/production-dependencies-9c521c0d6d

Merge pull request #297 from fahimmahnij/dependabot/npm_and_yarn/development-dependencies-4e37bb5169

Merge pull request #295 from fahimmahnij/dependabot/github_actions/actions/setup-node-7

Merge pull request #299 from fahimmahnij/fahim/call-sheet-crew-facts

show what we know, and say plainly what is missing

the hospital, lunch and sunrise now reach the crew

bump the development-dependencies group with 8 updates

bump the production-dependencies group with 22 updates

draft-to-draft diffing, in what a change costs — 19·4

bump actions/setup-node from 4 to 7

correct §2's count, §3's cost, and §4's stale row

one lost heading no longer discards a script's numbering — 19·3

every exception now names its deploy — 7·2

the charter-drift gate was blind to every real claim

Unicode safety on names and text input — 10·7

detach pins on scene deletion instead of hard-deleting them

session handoff — wave execution, two PRs, five staged migrations

read-spike load harness for the public sheet (4·1)

invite → active conversion, measured honestly (12·4, 13·3)

circuit breakers on the dispatch-path dependencies (2·8)

stage the org RLS identity reconciliation (invariant 3)

time-bounded access expiry for day players (6·2, 19·6 half)

units within a shoot day (Phase 3, item 16)

coordinator-supplied crew groups (Phase 3, item 15)

call-sheet versioning and supersession (19·2)

scene-pin stable-id plumbing + staged phase-3 FK (5·2)

append-only drafts — re-analysis preserves scene identity (5·3)

Merge pull request #294 from fahimmahnij/cursor/coordinator-groups-273a

Merge pull request #293 from fahimmahnij/cursor/append-only-drafts-273a

Merge pull request #292 from fahimmahnij/cursor/ios-ci-manual-only-4ae1

Merge pull request #285 from fahimmahnij/fahim/next-security-bump

make the iOS workflow manual-only until Actions billing is sorted

disable immutable assets for preview comments

Merge remote-tracking branch 'origin/main' into fahim/next-security-bump

Merge pull request #291 from fahimmahnij/fahim/correct-alerting-env-claims

ALERT_EMAIL and the webhook secret are set — I said otherwise

Merge pull request #290 from fahimmahnij/fahim/pillar-10-14-cost-and-strings

Merge pull request #289 from fahimmahnij/fahim/one-palette

the note you read at 03:00, not the one you write — 8·7

watch the one URL a crew member must be able to open — 7·5

the app emitted no analytics at all — 13·1, 16·2

one event catalog, enforced — 18·3

the April–July AI spend is not understated, it is unknown — 14·6

a wake-up call now comes with instructions — 7·6

the throttle was there; nobody looked at the address — 6·1, 6·8

a second opinion on every subscription — 11·2

the webhook survived replay but not reordering — 11·3

Maps was billing us invisibly — 14·1

cap the retrofit bill at 509 — 10·1

the audit that had never run once — 9·8

audit every token pair for contrast — 9·3

stop the spread of ad-hoc colour — 9·2, and what 9·1 really is

Merge remote-tracking branch 'origin/main' into fahim/next-security-bump

Merge pull request #288 from fahimmahnij/fahim/pillar-17-paper-soak-matrix

Merge remote-tracking branch 'origin/main' into fahim/pillar-17-paper-soak-matrix

defend the focus return nobody wrote — 9·6

crew-is-free as a check, not a convention — 11·7

the DSAR export was handing out two bearer credentials — 5·7, 19·7

delete api-client.ts — 18·9

the upgrade wall, and the one thing it must not block — 8·2, 16·1

Merge pull request #287 from fahimmahnij/cursor/pillar-15-continuity-c264

stop measuring the simulator's cold start instead of the time box

Revert "fix(ios): the time box stepped over the cost it was meant to bound"

the time box stepped over the cost it was meant to bound

the debt queue's second item was already done

the charter gate broke its own PR — shallow clones see no history

the iOS kill switch — GET /api/config and the client's verdict

the charters were wrong by a third — audit, correct, gate

Pillar 17 was 4 of 8, recorded as 0 of 8

put Safari in the browser matrix — 17·8

a leak detector for the fourteen-hour tab — 17·4

the PDF was Letter for every production on earth — 17·3

pin authorship evidence to base commit