KB-198E
Codex FIX7 Recheck 2 - ACL Snapshot Order
1 min read Revision 1
fix7codexrecheck-2acl
07 - ACL Snapshot Order Recheck
Verdict
ACL_SNAPSHOT_ORDER_ACCEPTED_WITH_OWNER_CONTROL_DEPENDENCY
The snapshot now precedes S15.1 owner transfer and contains owner, role membership/effective privileges, column ACL, sequence/default/schema/table/view/function privileges, and hash-bound exact replay. Verification follows owner transfer and revoke.
Remaining dependency: owner-role membership/SET ROLE and login-superuser control must be explicitly captured and guard-verified. The accepted snapshot mechanics cannot compensate for an operationally reachable owner or uncontrolled superuser.