feat(audit): add bounded stable export pages

[seonghobae]

Linearized replacement for #65

This Draft replays the exact bounded checkpoint-audit pagination delta onto replacement migration predecessor #80 exact head 3cac073cc791b78fafa0005b820e0206fe168a63 without force-pushing or choosing conflict sides.

RCA and feasibility

Old #65 remained based on superseded #63 history. Direct reconciliation probes in both orientations (#81 and #82) were deterministically non-mergeable on unchanged exact refs, so merge/rebase-as-a-shortcut was rejected and both probes were closed unmerged. Before replay, every modified baseline blob was compared between old #63 exact head f7f187c261f74d5b96022a17e7670d8db5db9f2c and replacement #80; the overlapping baselines were byte-identical. The replacement therefore reuses the exact reviewed #65 result blobs rather than hand-resolving conflicts.

The replacement head 0d3366de78c6b1373588d682560d3d50a6ee8a9a is exactly one commit ahead and zero behind #80 and reproduces exactly the same 12-file delta and aggregate 1012 additions / 11 deletions as old #65: strict PostgreSQL BIGINT cursor validation, bounded keyset pagination with one-row lookahead, trusted-key and descending-order revalidation, stable continuation semantics, live concurrent-insert regression, public exports, and authoritative ADR/operator/assurance documentation.

Old #65 is now closed as superseded. No checks, reviews, or approvals from #65 transfer to this PR.

Current exact-head staged evidence

• Head: 0d3366de78c6b1373588d682560d3d50a6ee8a9a.
• Exact base: feat(migrations): add atomic checkpoint storage operator #80 head 3cac073cc791b78fafa0005b820e0206fe168a63.
• Ancestry: one commit ahead, zero behind; merge base equals the exact base.
• CI 31286717072: completed / success on this exact source head. Python 3.10, 3.12, and 3.14, compilation, Ruff, public-docstring and 100% production coverage gates, lock freshness, package build, Compose/container builds, and the live checkpoint-audit PostgreSQL integration all succeeded.
• Release Acceptance 31286717075: completed / success on the exact source head.
• The PR is currently mergeable and intentionally Draft.

Merge boundary

This is stacked-stage evidence, not protected-main acceptance. Keep Draft while #80 and its earlier prerequisites remain unintegrated. Final protected-main integration requires reconciliation onto the actual integrated base, fresh exact-head/exact-base CI, security, dependency, SBOM/provenance, packaging, automated-review, branch-protection and repository-policy evidence, zero unresolved valid findings, and a qualifying independent non-author GitHub APPROVED review. Queued, pending, failed, cancelled, skipped-required, neutral-required, absent, stale-head/base, predecessor, status-only, or synthetic-only evidence is never success.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: ca14e9b2-639c-4cff-9199-08734713cf87

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[seonghobae]

Superseded by #96. Fresh comparison proves #96 descends from current migration replacement #95 and reproduces exactly the same 12-file pagination delta, every per-file addition/deletion count, and aggregate 1,012 additions / 11 deletions as this PR while preserving the current audit-row key revalidation and checkpoint-DSN changelog boundary. Historical checks/reviews/approvals do not transfer; #96 must reacquire exact-head/exact-base evidence.