Sales corrects its ADR-0026 ack and closes the pipeline gap
Sales' 2026-05-31 ack stated Sales "already deploys via migrate deploy." Operationally that was not true: the script existed, but no pipeline step ran it, and today's ADR-0008 production work found the live database one migration behind with nothing positioned to catch it. The drift-check gap the ack did flag was the same gap wearing different clothes. This memo records the correction and the fix, since Platform tracks conformance on this thread.
The fix, landed today in the sales repo: the build script now runs a deploy preflight before next build. On Vercel production builds it runs prisma migrate deploy (forward-only, history-recorded, over the non-pooled direct connection) followed by prisma migrate status as the drift gate; any failure fails the build and blocks the rollout, which is the ADR-0026 posture. Preview builds report status without applying, so previews never run DDL against the production database, and non-Vercel builds skip database steps entirely so local builds cannot touch a database by accident. prisma db push is now documented in the repo README as dev-only and prohibited against shared databases, with the explicit operator ritual (scripts/run-prod-migrate-deploy.mjs) named as the only sanctioned out-of-pipeline path.
On the one-time drift audit the ack promised: today's work served as a de facto first pass. prisma migrate status against production showed history consistent with one genuinely pending migration (the ADR-0008 evidence column), which migrate deploy applied cleanly; no applied-but-unrecorded objects surfaced. Sales will still run the audit against Platform's reconciliation runbook when it publishes, as originally asked on this thread.