Janady13/missionmatch / db/migrations/0010_aedt_governance.sql

Source identity

Field	Recorded value
Source type	GitHub source
Original record	Janady13/missionmatch / db/migrations/0010_aedt_governance.sql
Date	Not specified in source
Repository	Janady13/missionmatch
Revision	720d47fae476b0d38477ae4401697d372b1ea2bc
Branch	feature/opportunity-to-outcome
Path or archive member	db/migrations/0010_aedt_governance.sql
Original SHA-256	6cf5c4e60af8e8ab8a7b03810e0031348c1bdde90157c805b4313a0ddc14b308
Git blob SHA	dd746c07f2b66d9e49f70e1ea1e279829450bad5
Reading-copy SHA-256	6cf5c4e60af8e8ab8a7b03810e0031348c1bdde90157c805b4313a0ddc14b308

Original source ↗

Every recorded occurrence

These 36 records contain identical original source bytes. Their paths and revisions remain part of the archive.

Original record	Branch or archive	Revision / identifier	Original location
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	feature/opportunity-to-outcome	720d47fae476b0d38477ae4401697d372b1ea2bc	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	per-tenant-routing	9bde0f9a74b89d01980fa658e5253acda7528d0c	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	collision-deconfliction	4ee5a09972608ed89f8377c6665542d5f450f0a6	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	ws6-retrieval	6c56e29231ec05735927fa265c97d517499dfeaf	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	workstream-a-shared-core	e0de03ac3a1ec826bd15d0e048e3b02baa23eeff	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	m5-price-to-win	41000ad30fff4129fdaf5ec84e15ba14c27d4890	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	workstream-c-slatematch	5cd60c918301b46ecd6ed3e03e20c395da0062e2	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	ws1-ontology-sync	b596f449a32a1016fbd403c36505cc00a1ac9ee6	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	master	1e9249840a4302ec82e123b9c9cb6f75badea3e4	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	ws8-teaching-loop	c823f0fb6bb2aba0f39001eb6de96f4000d9321f	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	w3-ai-staffing-recommendations	43d56387270ef4da4cabd794d97ca6a49909bc7d	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	mag-substrate	b82c7100a492dec67dfd1eda6b3f53def859be35	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	ws3-clearance	4b8e7ce594c068621867f9c9deed0ec64ae6c553	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	workstream-d-command-center	255e7d1d420abf5e277d0cd8c9b14f6f72b6acb9	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	phase2-eval-fairness	d361af254701975fe239927656ababb56374655e	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	workstream-e-dataflow-deploy	433815a042f9741411e60fa553fe72143e9b10db	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	ruthless-debug-sweep	b7d742f8f032984be3817efffa3eb8b13b651c1f	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	time-to-fill-survival	b66e1e505863d4f17741a4b9ede73509e45bd6c6	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	ai-intelligence-layer	5d5ddff70393a197c5f54a45280bb5dd42b24755	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	graphrag-foundation	b0ddeb9f633fd138d09309d1a17b7d13bc3a67f7	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	workstream-a-opportunity-intelligence	1675031db74316e100782d063e9eda1a597fe3a1	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	deploy-and-ops	bdacd9d0b4d5998d25fc74bf4007f4c3ec538c7a	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	ws9-bench-ingestion	f585a9ef32fa554663ce1fba9a414a54b6e49cf0	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	ws2-alias-relationship	e4dada4601c6eb101830f9d223a9655dfa120616	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	presentation-readiness	eb574acaa29d71ce4d0f852572e87c275c79fdb7	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	vendor-intelligence	fe9796a19c261951d3f2565206c0c1b5ac294465	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	workstream-b-screenmatch	09015496d565a172bcaa15cfe9a8e4b072b13df0	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	ws7-federal-signal	6a9f6ce9cfb13345ffb47770d4960e7c2d9c17c2	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	workstream-e-commercial-stubs	4437da660539284a400ee380b9b427a300c369ee	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	ai-brain-live	aac32fc49c878cc5bca099459307611562d0bac1	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	workstream-d-missionmatch	3be46ba89edb737182075a2b320509b42dc916f8	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	phase2-connectors	e038d4c687aec16f8bd9bc4d907eea14d91f8704	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	workstream-b-sam-contract-awards	d5101cceb98e70000cebb31d3e7ac73d747d3a6d	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	w0-aedt-compliance	39df94f92b2a33f852481fe1954dabed841524bb	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	feature/aioe-upgrade	2178e7298d0e5d9af83afa12402fd587f0ba6ed8	Open original
Janady13/missionmatch / db/migrations/0010_aedt_governance.sql	capture-readiness	bae6af7cb2997e819174a9e9cfff5e16067a1975	Open original

Recovered source transcript

Download complete source text ↓110 lines · 6.5 KB

-- +goose Up
-- W0 AEDT governance and auditability. Run as the BYPASSRLS migrator role.
--
-- The single highest impact change is the compliance read grant. The eeo schema (db/migrations_eeo)
-- assumes it can join eeo.candidate_demographics to public.slate_members for adverse impact, but the
-- missionmatch_compliance role had NO grant on the public outcome tables, so the join would fail with
-- permission denied. This grants the compliance role SELECT only (it can read outcomes, never alter a
-- decision) on the tables the adverse impact and screening stage analyses need. The app and scoring
-- role still gets NOTHING on the eeo schema, so demographics flow one way: into compliance reporting,
-- never into scoring.

-- ---------------------------------------------------------------------------
-- model_version stamps the frozen decision with the scoring model that produced it, so a slate_members
-- row joins to the version in the registry. Existing rows predate versioning; backfill to the first
-- version. anonymized_at on candidates supports anonymize in place erasure: PII fields are wiped and
-- this is set, while the de identified statistical rows (slate_members, eeo bucket) are retained.
-- ---------------------------------------------------------------------------
ALTER TABLE slate_members ADD COLUMN model_version text;
UPDATE slate_members SET model_version = 'v1.0.0' WHERE model_version IS NULL;
ALTER TABLE candidates ADD COLUMN anonymized_at timestamptz;

-- ---------------------------------------------------------------------------
-- Compliance role can now read the public outcome tables to run the adverse impact join, plus the
-- audit trail (for the screening stage analysis over aedt.score.served events). SELECT only, so the
-- compliance role can never alter a decision or the trail.
-- ---------------------------------------------------------------------------
GRANT SELECT ON candidates, slates, slate_members, audit_logs TO missionmatch_compliance;

-- ---------------------------------------------------------------------------
-- aedt_model_versions: the platform scoring model registry. Global (no org), like the public data
-- catalogs: app reads, the migrator and governance path write. Each row snapshots the weights and band
-- cuts a version used, so a frozen decision is reproducible.
-- ---------------------------------------------------------------------------
CREATE TABLE aedt_model_versions (
    version        text PRIMARY KEY,
    weights        jsonb NOT NULL,
    band_cuts      jsonb NOT NULL,
    notes          text,
    effective_from timestamptz NOT NULL DEFAULT now(),
    created_at     timestamptz NOT NULL DEFAULT now()
);
GRANT SELECT ON aedt_model_versions TO missionmatch_app;
GRANT SELECT ON aedt_model_versions TO missionmatch_compliance;

-- ---------------------------------------------------------------------------
-- aedt_inventory: the org's register of automated employment decision tools in use, each tied to a
-- model version. Tenant scoped under RLS.
-- ---------------------------------------------------------------------------
CREATE TABLE aedt_inventory (
    id              uuid PRIMARY KEY DEFAULT gen_random_uuid(),
    organization_id uuid NOT NULL REFERENCES organizations(id),
    tool_key        text NOT NULL,
    display_name    text NOT NULL,
    purpose         text NOT NULL,
    model_version   text,
    active          boolean NOT NULL DEFAULT true,
    created_at      timestamptz NOT NULL DEFAULT now(),
    updated_at      timestamptz NOT NULL DEFAULT now(),
    CONSTRAINT uq_aedt_inventory_org_tool UNIQUE (organization_id, tool_key)
);
CREATE INDEX idx_aedt_inventory_org ON aedt_inventory (organization_id, created_at DESC);
ALTER TABLE aedt_inventory ENABLE ROW LEVEL SECURITY;
ALTER TABLE aedt_inventory FORCE  ROW LEVEL SECURITY;
CREATE POLICY aedt_inventory_isolation ON aedt_inventory
    USING      (organization_id = NULLIF(current_setting('app.current_org_id', true), '')::uuid)
    WITH CHECK (organization_id = NULLIF(current_setting('app.current_org_id', true), '')::uuid);
GRANT SELECT, INSERT, UPDATE ON aedt_inventory TO missionmatch_app;

-- ---------------------------------------------------------------------------
-- aedt_candidate_notices: the candidate notice and disclosure record (what the tool assesses, the data
-- categories used, the retention disclosed). Public schema, tenant scoped, because the candidate
-- consent itself lives in the unreadable eeo schema and the notice must be readable by the app. No PII
-- beyond the candidate link.
-- ---------------------------------------------------------------------------
CREATE TABLE aedt_candidate_notices (
    id              uuid PRIMARY KEY DEFAULT gen_random_uuid(),
    organization_id uuid NOT NULL,
    candidate_id    uuid NOT NULL,
    notice_version  text NOT NULL,
    data_categories jsonb NOT NULL DEFAULT '[]',
    retention_days  int  NOT NULL,
    disclosed_by    uuid,
    disclosed_at    timestamptz NOT NULL DEFAULT now(),
    CONSTRAINT fk_notice_candidate FOREIGN KEY (organization_id, candidate_id)
        REFERENCES candidates (organization_id, id) ON DELETE CASCADE
);
CREATE INDEX idx_notice_candidate ON aedt_candidate_notices (organization_id, candidate_id);
ALTER TABLE aedt_candidate_notices ENABLE ROW LEVEL SECURITY;
ALTER TABLE aedt_candidate_notices FORCE  ROW LEVEL SECURITY;
CREATE POLICY aedt_notices_isolation ON aedt_candidate_notices
    USING      (organization_id = NULLIF(current_setting('app.current_org_id', true), '')::uuid)
    WITH CHECK (organization_id = NULLIF(current_setting('app.current_org_id', true), '')::uuid);
GRANT SELECT, INSERT ON aedt_candidate_notices TO missionmatch_app;

-- Seed the first model version snapshot (the fixed engine weights and band cuts).
INSERT INTO aedt_model_versions (version, weights, band_cuts, notes) VALUES (
    'v1.0.0',
    '{"clearance":0.25,"skills":0.25,"certifications":0.15,"customer_experience":0.15,"experience":0.10,"location_availability":0.10}',
    '{"green":90,"yellow":75}',
    'Initial fixed weight deterministic scoring engine. Clearance is a self reported indicator, never an input proxy for a protected attribute.'
) ON CONFLICT (version) DO NOTHING;

-- +goose Down
DROP TABLE IF EXISTS aedt_candidate_notices;
DROP TABLE IF EXISTS aedt_inventory;
DROP TABLE IF EXISTS aedt_model_versions;
REVOKE SELECT ON candidates, slates, slate_members, audit_logs FROM missionmatch_compliance;
ALTER TABLE candidates DROP COLUMN IF EXISTS anonymized_at;
ALTER TABLE slate_members DROP COLUMN IF EXISTS model_version;