Validate school calendar inputs and rehearse production ACL repairs

[NewWorldVenture]

School date validation accepted impossible calendar dates through JavaScript normalization, and timetable helpers misclassified early years and accepted invalid clock fields. Reject those dates and clocks while preserving timezone offsets and fixed-epoch week parity.

Extend the production rollout review with read-only ACL/advisor receipts, a rehearsal of existing migration 0456 against harmless PostgreSQL stubs, and supporting indexes for the unallocated wallet-family reference candidate. The rollout remains review-only: schema/history reconciliation and historical-data disposition are outstanding. No production writes, grant changes, deployments or migration allocations were made.

Validation:

• Before repair: 6 impossible-date regressions and 9 timetable regressions failed, with healthy controls retained.
• 128 focused tests pass in UTC, Los Angeles and Tokyo.
• Full UTC suite: 1,956 files / 27,147 tests pass; 2 expected failures and 75 skips.
• Full nonincremental TypeScript passes with an 8GB heap after the default 4GB run exhausted memory; scoped lint and four audit register checks pass.
• PostgreSQL fixtures verify ACL rollback/replay/client denial/service controls/inherited-grant refusal and reference constraint/index rollback/enforcement.
• Offline review reproduces exactly with receipt checksum verification.

Stacked on #972 to preserve its ongoing CI. This PR needs its own hosted validation; overall audit and production readiness remain incomplete.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
bubaly	Ignored		Oct 8, 2026 2:03am UTC

[NewWorldVenture]

Closing as fully contained in PR #969 at 70c8dd6. Exact author head 082f2dd has no commits outside that composition. Fresh combined CI 37768165082 passes Core, Database, Mobile and E2E; E2E records 2,476 passed, one flaky retry and four skipped. Author branch is preserved. This is stacked-PR closeout, not a merge to main, production deployment or activation of reserved migrations. Current production schema and release holds remain recorded in finalaudit.md.