feat(audit): add bounded stable export pages

[seonghobae]

SUPERSEDED historical pagination stack — closed unmerged

This PR is retained as design/test provenance for bounded checkpoint-audit pagination, but its predecessor chain is no longer an integration path to protected main.

Fresh exact topology at closure

• protected main: 9640ab9765db427412f3d108a4fc9eadf4fa1d8c;
• this PR head: 4e7c68fa3e5da050d433395568ab5eb3465a4cbb on agent/bounded-checkpoint-audit-export-pages-v5;
• base branch: agent/checkpoint-migration-operator-v3 at 1d05184be9fe699ef1e3f62068597a26ab88afce;
• GitHub comparison confirms this head is 4 commits ahead / 0 behind that exact base with merge base equal to the base head;
• however predecessor PR feat(migrations): add atomic checkpoint storage operator #95 is closed unmerged, as are historical root feat(checkpoint): persist resumable result progress #60 and downstream feat(audit): rebuild bounded snapshot manifests on current pagination #97; protected main contains none of this historical checkpoint-store/audit stack;
• formal reviews and unresolved inline review threads were zero immediately before closure.

The pagination feature itself remains useful provenance: strict positive PostgreSQL BIGINT keyset cursors, bounded newest-first < continuation with one-row lookahead, exact tenant/consumer/endpoint/batch revalidation, descending identity validation, concurrent-insert stability evidence, public API, and the explicit absence of a false multi-page snapshot claim.

Current reconstruction boundary

Current-main durable checkpoint-store reconstruction is owned separately by Draft #181 (feat/durable-checkpoint-store-current-main). This historical pagination branch must not be retargeted directly to main, merged through a closed predecessor branch, or used to transfer old CI/review/approval evidence.

After the prerequisite durable checkpoint/audit capabilities are integrated on protected main, reconstruct the pagination feature test-first from a freshly read protected head on a new explicit non-default branch, reusing historical code only as design/regression provenance. Reacquire exact live-base ancestry, realistic PostgreSQL pagination/concurrency evidence, Python 3.10/3.12/3.14, exact 100% owned production statement/branch and public-docstring coverage, package/container/security/SAST/SBOM/provenance, every live required organization workflow, Release Acceptance, zero valid unresolved findings, and then-current policy on one unchanged final head.

No historical, predecessor, synthetic, cancelled, queued, status-only, author-only, or stale evidence from #96 or #97 transfers to that future reconstruction.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 149cbb10-8664-45ee-a9e9-cd409981773e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[seonghobae]

@coderabbitai review

[coderabbitai]

⚠️ Action not completed

Review rate limited.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[seonghobae]

@coderabbitai review

[coderabbitai]

⚠️ Action not completed

Review rate limited.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[seonghobae]

@coderabbitai review

Please review exact current replacement head f9062821556715537a028095326544bf234e45ae against exact #95 predecessor 7ada507901cbba6497348812a8c015403a5f38aa. Validate cursor bounds, keyset pagination, tenant/key revalidation, strict descending order, concurrent-insert stability, and that the replay preserves current-stack key validation. Do not transfer evidence from superseded #83.

[coderabbitai]

@seonghobae I will review the exact current head against the exact #95 predecessor. I will validate the requested pagination, revalidation, ordering, and concurrent-insert behavior. I will not transfer evidence from superseded #83.

⚠️ Action not completed

Review rate limited.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[seonghobae]

SUPERSEDED by the current-main durable-checkpoint reconstruction in #181. Fresh topology shows this Draft still depends on closed-unmerged predecessor #95, while #92/#94/#95 are all closed unmerged and #181 now rebuilds the checkpoint-store line from exact protected main without transferring historical stack evidence. Preserve this branch as design/test provenance only; do not retarget or count its historical checks as protected-main acceptance.