20260920020000 added active_birth_date / active_birth_timezone_offset / active_birth_provenance without a service_role column grant, while the account PATCH and the report worker's self lookup read them through service_role (42501, recurrence of BUG-039 / BUG-600). Additive SELECT-only grant plus a static contract: every profiles column a service_role reader selects must be granted. BUG-1063 (worker cannot read chart_profiles as service_role) recorded as investigating, not fixed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017eEAG8HD3mm8gsKXgk8uU8