review-wave-8 — the pre-release gate passes: one contract-observable divergence found and fixed (pg's negative-seed GREATEST clamp + offsets CHECK contradicted ADR-023 §2's stored-checkpoint annotation; raw seed now, window open until first publish); the close-out's registered suite-duty follow-up discharged (negative heartbeat(extend) leg in job_handle_validity_predicate, negative save_offset seed leg in receiver_close_and_save_arms — stamped, uniform, green on all three columns vs the live harness server); the class-1 termination of record landed in ADR-017 §2 (no undisposed candidate remains; the window closes permanently at the first cargo publish); release-facing spec set flipped stable with dated gate annotations (core-contract, overview, queues, deployment current, the architecture README — Current State through wave 8, engine-mem's table row corrected); implementation.md records updated; N-1/Findings 2–3/flake/publish-prep audits recorded; all gates re-run green incl. fuzz replay, wasm32, doc gate

alkstore-postgres/src/schema.rs

@@ -298,12 +298,13 @@ CREATE INDEX IF NOT EXISTS {events_read_idx} ON {events} (stream, id);
 
 -- Offsets table: (stream, consumer) → offset, the monotone
 -- checkpoint upsert target (the streams task's SQL owns the
--- monotonicity rule, GREATEST-guarded upsert, one owner). The
--- non-negative CHECK bounds the domain (cursors start at 0).
+-- monotonicity rule, WHERE-guarded upsert, one owner). The boundary
+-- argument is total (ADR-023 §2): no domain CHECK — a negative seed
+-- is stored raw, reads anchor at it and resume forward identically.
 CREATE TABLE IF NOT EXISTS {offsets} (
   stream TEXT NOT NULL,
   consumer TEXT NOT NULL,
-  \"offset\" BIGINT NOT NULL DEFAULT 0 CHECK (\"offset\" >= 0),
+  \"offset\" BIGINT NOT NULL DEFAULT 0,
   PRIMARY KEY (stream, consumer)
 );