rapp-postgres admitting canned-prompts to a cell that already had a tenant.
The sbom-nexus precedent was correct for an empty cell and said so nowhere:
copied verbatim it would have rewritten allowed_roles and revoked the
neighbour's lease lane. Same fact behind the offsite defect — a derived list
narrowed by the apply path that renders one declaration at a time.
Draft, awaiting its portrait.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01AmeQ7bwnCZzGGnNtVuv5aN
Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 973735@bnt-lap001
Assistant-Session: 95b6a3b9-1405-4340-b485-13e6e84a04b0
