Certified copy · The County Vault

Registry Database Evidence Report

Alpenglow Land & Records Registry (fictional) · filed 2026-07-31T20:30:32.593Z · aws-boardwalk plank 11 · every proof below is a live engine response, not an assertion.

Book 01 · Cluster

• Engine: aurora-postgresql 17.7 (available)
• Serverless v2 scales to ZERO: 0–1 ACU, auto-pause after 300s idle
• RDS Data API enabled: access is HTTPS + IAM, no database sockets
• Security group has zero ingress rules (nothing can open a connection)
• Storage encrypted at rest
• IAM database authentication enabled
• Automated backups: 7 days
• Cluster was already awake when this report ran

Book 02 · Seeded system of record

parcels 20000 · contractors 150 · permits 6000 · inspections 12000, generated in-engine by the migration Lambda (generate_series), no fixture files.

Book 03 · Migration ledger

id	checksum	applied
001-schema	44030ab6ee8f…	2026-07-31 16:42:59.082084
002-indexes-views	1b5ecf30a62f…	2026-07-31 16:42:59.480029
004-seed-data	bfd065e6e005…	2026-07-31 16:43:01.619687
005-chain-of-title	ccf4827be2a0…	2026-07-31 16:43:02.092138
006-history-backfill	114c8d1cc5ce…	2026-07-31 16:43:02.712208
007-district-desks	9b10994b0579…	2026-07-31 16:43:03.144900
R-analyze	c60cfb6be37b…	2026-07-31 20:27:45.218370
R-app-role	25f8a8f965f9…	2026-07-31 20:27:44.467581

Book 04 · Integrity proofs (run as the least-privilege app role)

• Foreign key: orphan permit INSERT rejected by the engine
• CHECK constraint: invalid inspection result rejected
• Transaction atomicity: failed two-step transfer left balances untouched
• Least privilege: app role's DELETE and DROP attempts both denied

ERROR: insert or update on table "permits" violates foreign key constraint "permits_parcel_id_fkey"; SQLState: 23503
ERROR: new row for relation "inspections" violates check constraint "inspections_result_check"; SQLState: 23514
ERROR: permission denied for table permits; SQLState: 42501
ERROR: must be owner of table inspections; SQLState: 42501

Book 05 · Query plans

• Lookup by unique parcel_number uses an Index Scan (0.026 ms)
• Lookup by unindexed address falls back to a Seq Scan (1.023 ms)

Index Scan using parcels_parcel_number_key on parcels  (cost=0.29..8.30 rows=1 width=72) (actual time=0.013..0.013 rows=1 loops=1)
  Index Cond: (parcel_number = 'AP-01207'::text)
Planning Time: 0.049 ms
Execution Time: 0.026 ms

Seq Scan on parcels  (cost=0.00..511.00 rows=1 width=72) (actual time=1.009..1.009 rows=0 loops=1)
  Filter: (address = '1 Nowhere Ln'::text)
  Rows Removed by Filter: 20000
Planning Time: 0.049 ms
Execution Time: 1.023 ms

Book 06 · Chain of title, concurrency, and district desks

• Chain of title: 1310 amendment records on file; fullest chain holds 3 superseded versions; as-of reconstruction reads 'submitted' then vs 'closed' today; live trigger fired as app_user and was voided by rollback
• Lock timeout: a second writer waiting on a held row lock was refused by the engine after its 2s allowance
• Deadlock: a genuine lock cycle was detected and exactly one transaction cancelled
• Row-level security: north desk sees 5 cases, south desk 3, an unassigned session sees 0; a cross-district write died on the policy
• Parameterized title search: '' OR '1'='1' bound as data matched 0 rows while a real name matched 12; trigram index carried the fuzzy match

ERROR: canceling statement due to lock timeout; SQLState: 55P03
ERROR: deadlock detected; Hint: See server log for query details.; SQLState: 40P01
ERROR: new row violates row-level security policy for table "case_files"; SQLState: 42501

Fictional demo built by Planetek, not affiliated with any real government agency. Between demo windows the cluster is destroyed entirely; this certified copy persists on the always-on site.