func referencedTables(lowerSQL string) []string

	// single aggregate base rate intent; the win rate it returns is advisory market context, never a candidate
	// score or an employment decision number.
	"bid_outcomes": true,
	// Phase 2 Vendor Intelligence (migration 0042), tenant tables, RLS scoped. staffing_vendors is the org's
	// vendor registry (no person data); vendor_submissions is the append friendly fact of a vendor submitting a
	// candidate for a requirement (a candidate id and a requirement id, tenant business data, NOT eeo and NOT a
	// protected attribute). The vendor_performance_scorecard TAG intent reads them for outcome aggregates; the
	// vendor_quality_distribution BENCH intent joins them to the frozen candidate_evaluations band and is k=10
	// suppressed because it partitions candidate headcounts per vendor per band. Neither ever rescores a person.
	"staffing_vendors":   true,
	"vendor_submissions": true,
	// MAG (Model Augmented Generation) coefficient and calibration store (migration 0036), the serving surface
	// for model backed intents. A reviewed decision: these three tables hold GLOBAL model parameters (the
	// interpretable numeric coefficients, the champion registry, and the monotone calibration map), NOT eeo,
	// NOT a person table, and NO protected attribute; they carry no PII, so they are safe cross tenant reference
	// reads the MAG executor loads the champion coefficients from. They are migrator owned and app SELECT only,
	// so the app can read them to serve but never write them.
	"aedt_learned_models":     true,

vendor_quality_distribution BENCH intent joins them to the frozen candidate_evaluations band and is k=10