root 3ca1509935 fix(schema): enforce cross-space FK on tasks.project_id via composite key ...

Security review flagged that tasks.project_id could reference a project in
a different space. Added composite FK (project_id, space_id) -> projects(id, space_id)
with ON DELETE SET NULL (project_id) so a deleted project leaves the task in
its space with project_id NULL rather than orphaning into a NULL space.

Added two regression tests: cross-space FK rejection + cascade behavior.

2026-05-31 02:14:20 +10:00

..

001_core.sql

fix(schema): enforce cross-space FK on tasks.project_id via composite key

2026-05-31 02:14:20 +10:00