Terminal map

• ops.cases.status has one writer, the birth INSERT that sets active, and no code ever changes it; the signed count is really three timestamp columns (quarantined_at, operator_excluded_at, archived_at) that a CI gate must police on every read.
• RELEASE-GO appears only in CLAUDE.md and release-process.md, no workflow or script reads it, and both agent apps sit on the tag bypass list; either Jean or Brick can publish a release alone, while prod migrations refuse without two non-author signatures.
• Meta spend lands in Neon straight from Graph (hourly with a 3-day lookback, nightly with a 28-day restatement), but Google and TikTok still go Hevo to BigQuery to a twice-daily mirror, and the TikTok mirror header says it has been dry since 2025-12-30; every platform then funnels through one join, ops.campaign_ads.external_ad_id, into the hourly matview.
• GHL inbound is a 15-minute poll, not webhooks, and a signing reaches ops.cases only through zenith-events (a separate repo) and the document-events webhook; case freshness depends on two systems outside this repo.
• The schema overview doc stops near migration 498 while the live chain is at 852, and intelligence.tortterminal.com is not in source (the code's intel host is intel.tortterminal.com, marked future); the map shows what the code says, and those two gaps are the first fixes.

A migration file with no history on origin/main is refused outright (both agents count as authors), not "needs a human co-signer". A zero-signature operator path (db:migrate:prod:operator, a human types APPLY) exists, and the audit accepts the row as operator. release-process.md line 141 still says prod needs a human's approval while the section above it accepts Jean plus Brick alone.

The Targets surface reads ops.ad_spend_per_ad, and its own source comment records an $834,499 disagreement with the campaign_daily_spend matview. The formulas/cpsc.ts module built to force an aligned window has no production importer; the services divide inline and resolveRanges aligns the window.

The two KYC-phase moves the cron makes most often (kyc_queued to kyc_processing, and the no-session kyc_failed) are inline UPDATEs outside the state machine and never reach audit.events.

Raw Hevo mirrors are trimmed to money and join columns (counts on the page). ops.campaigns and ghl.contacts predate app/migrations, so their columns come from the sandbox bootstrap and later ALTERs. 13 real foreign keys, 22 logical joins. Schemas: ops and ghl predate app/migrations; twelve more are created in migrations (ad_spend, audit, case_diligence, deel, kyc, lead_resolution, ledger, media_desk, public_intel, system, usage, zenith); nerve and migration were created and later dropped, so 14 are live.

Archify 3.2.0 (Apache-2.0) with its update check off, read-only on the Terminal checkout (git status unchanged before and after), every box and step citing its file and lines at main 2afb20a, Chrome browser-check on every page; the desk look is a post-process (deskify) that leaves each Archify file and its receipts untouched.