Columns
| Column | Type | Size | Nulls | Auto | Default | Children | Parents | Comments |
|---|---|---|---|---|---|---|---|---|
| id | text | 2147483647 | (gen_random_uuid())::text |
|
|
{“what”:“UUID text from gen_random_uuid; primary key for the certification record.”,“why”:“Without it, rows cannot be uniquely referenced for updates or joins.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:21:08.909629237+00:00”} |
||
| cert_type | text | 2147483647 | null |
|
|
{“what”:“Category of certification; selects the applicable workflow and checks.”,“why”:“Without it, the certification process and required gates are ambiguous.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:21:09.090625810+00:00”} |
||
| subject | text | 2147483647 | null |
|
|
{“what”:“Entity being certified, e.g., a domain name or service identifier.”,“why”:“Without it, it is unknown which resource the certification applies to.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:21:09.120579669+00:00”} |
||
| subject_domain | text | 2147483647 | √ | null |
|
|
{“what”:“Domain of the subject, e.g., ‘example.com’, when applicable; null otherwise.”,“why”:“Without it, subjects cannot be grouped or filtered by domain for reporting.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:21:09.153638117+00:00”} |
|
| decision | text | 2147483647 | null |
|
|
{“what”:“Outcome of the certification, e.g., ‘approved’, ‘rejected’, ‘pending’.”,“why”:“Without it, the current state of the certification is unknown, blocking next steps.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:21:09.203410006+00:00”} |
||
| gates | jsonb | 2147483647 | '[]'::jsonb |
|
|
{“what”:“JSON array of gate check results, each with status and details; empty if none.”,“why”:“Without it, the specific checks that passed or failed are lost, hindering audit.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:21:09.224162662+00:00”} |
||
| report | jsonb | 2147483647 | '{}'::jsonb |
|
|
{“what”:“JSON object with detailed certification output, such as scan results or errors.”,“why”:“Without it, the evidence for the decision is unavailable for review.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:21:09.246420425+00:00”} |
||
| approval_token | text | 2147483647 | √ | null |
|
|
{“what”:“Secret token required to approve the certification; null if not yet issued.”,“why”:“Without it, approval cannot be securely authorized, risking unauthorized changes.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:21:09.266628856+00:00”} |
|
| emailed_at | timestamptz | 35,6 | √ | null |
|
|
{“what”:“Timestamp when the notification email was sent to the subject; null if not sent.”,“why”:“Without it, it is unknown whether the subject was notified, causing missed communications.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:21:09.300516846+00:00”} |
|
| approved_at | timestamptz | 35,6 | √ | null |
|
|
{“what”:“Timestamp when the certification was approved; null if not approved.”,“why”:“Without it, the approval time is unknown, affecting expiry and audit.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:21:09.365883216+00:00”} |
|
| approved_by | text | 2147483647 | √ | null |
|
|
{“what”:“User or system that approved the certification; null if not approved.”,“why”:“Without it, accountability for the approval decision is lost.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:21:09.443709829+00:00”} |
|
| deployed_at | timestamptz | 35,6 | √ | null |
|
|
{“what”:“Timestamp when the certification was deployed; null if not deployed.”,“why”:“Without it, the effective start time of the certification is unknown.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:21:09.589738937+00:00”} |
|
| created_at | timestamptz | 35,6 | now() |
|
|
{“what”:“Timestamp when the certification record was created; defaults to now.”,“why”:“Without it, the order and age of certifications cannot be determined.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:21:09.617915501+00:00”} |
||
| expires_at | timestamptz | 35,6 | √ | null |
|
|
{“what”:“Timestamp when the certification expires; null if it does not expire.”,“why”:“Without it, renewal scheduling is impossible, risking expired certifications.”,“by”:“fleet-annotator-worker”,“at”:“2026-09-23T04:21:09.643170191+00:00”} |
Indexes
| Constraint Name | Type | Sort | Column(s) |
|---|---|---|---|
| certifications_pkey | Primary key | Asc | id |
| idx_cert_source | Performance | ||
| idx_cert_stealth_fresh | Performance | Asc/Asc | subject + expires_at |
| idx_cert_subject | Performance | Asc | subject |