[jonahgabriel]

Summary

OMN-19661. A Postgres-backed delegate-skill claim store now writes the table the node contract declares, omninode_internal.delegate_skill_command_claims. It previously resolved the bare table name against public.

Why

The claim port passes the bare name delegate_skill_command_claims to PostgresSyncProjectionAdapter. That adapter refuses dotted names (postgres_sync_database.py _validate_identifier), and it opened every psycopg2 connection with no search_path. No role or database on the deployed lanes sets one (omnibase_infra docker/migrations/cloud/run-cloud-migrations.sh:44-51 says so). The bare name therefore resolved to public, where the table does not exist. Any lane that bound OMNIMARKET_PROJECTION_RUNTIME_BINDING_OVERLAY would have failed every bus delegation with UndefinedTable, which is why no lane binds it. Deployed claims today go to a per-pod SQLite file in an emptyDir, and that file is lost when the pod is replaced. The loss reopens the crash-redelivery double-bill that OMN-18887 AC4 covers.

Change

• PostgresSyncProjectionAdapter(dsn, *, schema=None) accepts one optional schema. The schema is validated as an identifier (a list is refused, so no fallback relation can answer), and each connection the adapter opens then carries options=-c search_path=<schema>. A caller that passes no schema gets exactly the previous connect(dsn) call, and a test pins that.
• evidence_db_resolution._adapter_for_dsn passes an optional postgres_schema through. SQLite ignores it.
• port_delegation_claim.claims_schema() reads the schema from contract.yaml db_io.db_tables for the claims table. It refuses a missing entry or a duplicate. The binding branch of resolve_delegation_claim_store passes that schema.

Proof

• New file tests/unit/nodes/node_delegate_skill_orchestrator/test_claim_store_contract_schema_omn19661.py. RED before the change: 7 failed, and the pin test failed on 'search_path=omninode_internal' in ''. GREEN after: 9 passed.
• One of the 9 is a real-Postgres case, run against a throwaway local postgres:16-alpine container that has since been removed. It builds the node's own migration into a private schema. The negative control is the unpinned adapter, which raises UndefinedTable. The pinned port wins the first claim and loses the second, and exactly one row is left. The case skips without INTEGRATION_POSTGRES_*, as the sibling real-DB suites do.
• The node test directory plus test_omn18159_sync_upsert_write_contract.py and test_omn19029_claims_migration_shape_and_grant.py: 310 passed, 9 skipped. ruff and mypy --strict pass on the changed source files. pre-commit passes on the changed files.

Runtime-affecting: yes

After merge, nothing changes on any lane until a lane binds the overlay: the no-binding branch is untouched. The binding comes in omninode_infra (OMN-19661, onex-lab overlay first). That binding is safe to apply only once a runtime image carrying this change is on the lane.

Merge order

This PR is stacked on omnimarket#2917 (OMN-19654, which touches the same resolver). Land #2917 first. Until then, this diff shows #2917's commit as well.

Body drafted with onex delegate, run b7334a18-024a-453a-b887-13a6a60c2cb6 (wire correlation 91dbe239-6013-42cc-9cee-db94a793b6ca), then edited by hand.

Evidence-Ticket: OMN-19661
Evidence-Source: OCC#11336

[github-actions]

✅ Architectural Review — PASSED

Errors: 0
Warnings: 0

What this checks

Rule	Description
ARCH-TOPIC-001	No hardcoded Kafka topic strings in handler code
ARCH-DI-001	No event_bus=None bypass
ARCH-DI-002	No direct Handler instantiation outside workflow_runner/adapters
ARCH-DI-003	No reinvented DI containers
ARCH-TOPIC-002	contract.yaml topics follow `onex.{cmd

---

No architectural violations found.

Static architectural lint — no model inference (OMN-14176).

[github-actions]

✅ Hostile Reviewer — PASSED

Blocking findings (critical/error): 0
Total findings: 11
Models succeeded: qwen3-review,qwen3-review-b

---

Gate semantics

Verdict	Meaning	Blocks merge?
passed	>=2 models succeeded, no critical/error findings	No
blocked	CRITICAL or ERROR findings found	Yes
degraded	Fewer than 2 models succeeded (infra unavailable/timeout)	Yes (OMN-15110)

Powered by omniintelligence.review_pairing.cli_review — node-based adversarial review via HandlerLlmCliSubprocess (OMN-8524)