State ownership

PostgreSQL owns Payne’s durable records and append-only history. DataHub remains authoritative for current catalog facts. The browser owns no evidence or gate state, and a health response is not a verified gate outcome.

See Architecture: State ownership for the full trust map and lifecycle.