[DoRmAmMu1997]

Migration checks previously compared too little of the schema, and deployment smoke only proved the web process started. This adds semantic migration/ORM comparison, populated upgrade and repository smoke tests, and mandatory disposable PostgreSQL verification in each Python CI job and the final container image.

Stacked on #150 (codex/scanner-ipo-scoring-state) so the migration and transaction checks include IPO-013. The schema-changing chain remains VALID-005 → IPO-013 → the separate forthcoming IPO-014 package. This PR adds no ORM fields or migration revision and does not rewrite application history.

• Compare defaults, checks, uniqueness, primary keys, complete reflected indexes and foreign keys. SQLite PRAGMAs retain index collations/directions and FK actions omitted by generic reflection; unsupported expression-index reflection fails closed.
• Provision only UUID-named PostgreSQL databases through an explicit test-server setting. Refuse database-routing query overrides before connecting, preserve TLS settings, sanitize errors, and clean up owned databases even when connection cleanup fails after CREATE.
• Verify upgrades preserve seeded IDs, Decimal prices and JSON, then exercise committed repository operations, rollback, uniqueness and database cascade. Final-image smoke also reads curated CSVs with relocated DATA_DIR.
• Add real-session PostgreSQL tests for identical concurrent IPO publication, stale calculation retry, and caller rollback. No network providers or production databases are used.

Independent review closed the SQLite collation and PostgreSQL URL-override findings after demonstrated regressions. Google-style contracts, Beginner notes, inline transaction/safety explanations and test-intent documentation are included.

Validation at 17b86250 with current main 9ded279 dependency pins: 2,388 passed, seven skipped; 90.58% coverage including app.py, using twelve commit-locked restartable Python 3.12 groups. Pre-commit configuration, compileall, Ruff, full mypy, Bandit, dependency audit and diff checks passed. Fresh focused schema/migration/smoke/concurrency checks passed 48 tests with five local PostgreSQL skips on each of Python 3.13 and 3.14.

Hosted run 39584096696 executed 2,393 tests with two platform skips on each supported Python, including required PostgreSQL tests; the final-image Docker/Compose smoke passed. The quality jobs later failed the dependency audit: Pillow 12.3.0 now has eight reported advisories whose listed fix is 13.0.0. This is an unresolved shared dependency gate, not a PostgreSQL test failure. No local skip is treated as hosted execution evidence.

As verified on October 21, latest stable Streamlit 1.66.0 requires Pillow below 13. The official Pillow 13 compatibility change has merged upstream but is not in a stable release yet. No audit suppression, conflicting dependency override or unreleased framework substitution has been applied. Current full security-gate closure remains blocked pending a supported compatible release and re-verification.

The initial workflow validation failure was corrected by placing runner.temp at test-step scope, where GitHub exposes the runner context; the policy regression first failed and then passed. The workflow now starts and completes its required tests. Local Docker/PostgreSQL remain unavailable, so hosted results are the corresponding evidence. No merge or deployment is included.

Co-authored-by: Codex codex@openai.com