ClaudeandClaude Opus 5.5
9b1127c23c
Gate run 6343 refused the invoker v3 on agentic_rectification_cases: since 20260814010000 service_role has no direct rights on cases, every case write goes through owner-held security-definer RPCs. v3 now only checks the person, calls v2 and hands the case to agentic_rectification_bind_case_subject_v1, a service_role-only security-definer function that locks the case, binds a new case and its conversation to the person, and checks the person matches. Migration parsed with pglast (58 statements, 17 PL/pgSQL bodies). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01DbBXoyeZrYn6ryNcSe5Y2Y