Agent-Security

A nullable unique key admits two rows for tenant-a and NULL. Explicit NOT NULL rejects the missing key before admission.

Your agent retry ledger has a unique key. NULL still gets through.

A SQLite UNIQUE constraint can admit repeated missing operation IDs. Run a small fixture, repair the schema and keep duplicate admission separate from remote execution.