Renata protected draft pilot planning

Draft Pilot Schema Activation Review

Protected, read-only schema review before any future local migration draft.

This is a protected, read-only schema activation review. It does not activate schemas, create migrations, create tables, collect drafts, create accounts, write data, or enable live workflows.

Purpose

This page reviews whether the planned actor, role mapping, draft, staff review, Morning Sheet visibility, retention/deletion, and audit schemas are ready to move toward a future local migration draft.

It is read-only. It creates no SQL files, no active migrations, no tables, no protected live routes, no protected API routes, no write endpoints, no draft storage, no staff decisions, and no live workflows.

Current Schema Boundary

Planning layers exist, but schemas are not implementation-ready because no approved identity policy, pseudonymous actor policy, role mapping policy, D1 migration package, retention implementation, audit implementation, staff/privacy approval, rollback plan, or live pilot approval exists.

Review status

not-ready

not-ready

Recommendation

do-not-activate

do-not-activate

Decision

no-go

no-go

Go / No-Go Decision

The schema review is no-go. Planning layers are present, but implementation evidence is missing and every schema area remains not-implemented.

Schema Areas Reviewed

Schema area Purpose Planning Implementation Readiness Sensitivity Recommendation
actor-reference-schema Future opaque pseudonymous actor references without real identity values. planning-complete not-implemented not-ready-for-migration identity-adjacent metadata do-not-activate
account-role-mapping-schema Future scoped actor-to-role and permission mapping metadata. planning-complete not-implemented blocked-pending-approval permission metadata do-not-activate
pullup-pushup-draft-schema Future pull-up/push-up draft metadata and content under approved policy. planning-complete not-implemented not-ready-for-migration future-sensitive draft content do-not-activate
staff-review-reference-schema Future staff review reference metadata and review lane/status metadata. planning-complete not-implemented blocked-pending-approval review metadata do-not-activate
morning-sheet-visibility-schema Future staff-only Morning Sheet visibility reference metadata. planning-complete not-implemented not-ready-for-migration visibility metadata do-not-activate
retention-deletion-schema Future retention categories, deletion markers, and rollback metadata. planning-complete not-implemented blocked-pending-approval retention policy metadata do-not-activate
audit-logging-schema Future minimal audit metadata separated from sensitive content. planning-complete not-implemented blocked-pending-approval minimal audit metadata do-not-activate

Readiness Matrix

Area Planning status Implementation status Readiness status Recommendation
actor-reference-schema planning-complete not-implemented not-ready-for-migration do-not-activate
account-role-mapping-schema planning-complete not-implemented blocked-pending-approval do-not-activate
pullup-pushup-draft-schema planning-complete not-implemented not-ready-for-migration do-not-activate
staff-review-reference-schema planning-complete not-implemented blocked-pending-approval do-not-activate
morning-sheet-visibility-schema planning-complete not-implemented not-ready-for-migration do-not-activate
retention-deletion-schema planning-complete not-implemented blocked-pending-approval do-not-activate
audit-logging-schema planning-complete not-implemented blocked-pending-approval do-not-activate

Missing Evidence

  • identity policy approved
  • pseudonymous actor policy approved
  • account role mapping policy approved
  • draft content policy approved
  • staff review procedure approved
  • Morning Sheet visibility policy approved
  • retention policy approved
  • deletion policy approved
  • audit policy approved
  • audit visibility policy approved
  • escalation policy approved
  • AI-use policy resolved
  • D1 schema package reviewed
  • rollback strategy defined
  • staff/privacy approval complete
  • small pilot scope approved

Hard Blockers

no approved identity policyno approved pseudonymous actor policyno approved role mapping policyno D1 migration package reviewedno retention implementation approvedno audit implementation approvedno staff/privacy approval completeno rollback plan approvedno live pilot approvalno active schema may be created in this phaseno active migrations may be addedno database writes may be addedno live draft collection may be addedno protected live routes may be addedno protected API routes may be added

Allowed Future Activation Scope

  • pseudonymous actor refs
  • actor role mapping metadata
  • pull-up/push-up draft metadata and content only under approved policy
  • draft status history
  • staff review reference metadata
  • Morning Sheet visibility reference metadata
  • retention/deletion markers
  • minimal audit metadata
  • future-only scope
  • not active in Phase 9.1

Prohibited Activation Scope

real identity tablesuser profile tablesresident profile tablesstaff profile tablesraw Cloudflare Access claimsemailsnamesJWTstokensattendance trackingparticipation trackingparticipation analyticsscoring/ranking/compliance tablesresident performance dashboardsstaff surveillance dashboardsclinical claimsAI review of real submissions without approved AI policyautomatic staff decisionsautomatic Morning Sheet placement

Required Gates Before Migration Draft

  • identity policy approved
  • pseudonymous actor policy approved
  • account role mapping policy approved
  • draft content policy approved
  • staff review procedure approved
  • Morning Sheet visibility policy approved
  • retention policy approved
  • deletion policy approved
  • audit policy approved
  • audit visibility policy approved
  • escalation policy approved
  • AI-use policy resolved
  • D1 schema package reviewed
  • rollback strategy defined
  • staff/privacy approval complete
  • small pilot scope approved

Required Gates Before Active Migration

  • local migration draft exists
  • local validation harness exists
  • disposable local SQL dry run passes
  • prohibited table scan passes
  • prohibited field scan passes
  • rollback dry run plan exists
  • active migration filename approved
  • active migration limited to approved scope
  • no identity/user/account/submission data outside approved scope
  • staff/privacy approval recorded
  • production deployment plan approved

Recommended Next Phase

Phase 9.2 - Draft Pilot Local Migration Draft, Planning Only

Only after required policy and approval evidence exists should the draft pilot schema move toward a local-only migration draft. The current review remains no-go.

Boundaries: no active schemas; no active migrations; no executable SQL files in active migrations; no D1 tables; no write endpoints; no protected live routes; no protected API routes; no live draft collection; no accounts; no actor storage; no identity capture; no staff decisions; no Morning Sheet placement; no tracking; no analytics; no scoring.

recommended-next