Merge branch 'feature/backend-skeleton' into main
Sprint 0 backend skeleton: Python 3.12 / Flask / SQLAlchemy 2 / Pydantic 2
/ Alembic / pytest. Data model §8 complete, C2Connector ABC, Jinja2
sandbox with google-re2 regex_extract (D-011), CAS gzip blob storage
(D-012), local auth + group-based RBAC (D-003/D-008), F11 tenant scoping,
audit log infrastructure with hash chain anticipated (D-013).
Quality gates: ruff/mypy strict/56 unit tests passing. LGTM code-reviewer
after 2 rounds of remediation (B1 BLOCKER + 6 MAJOR addressed).
Co-Authored-By: backend <backend@mimic.local>
* origin/feature/backend-skeleton:
docs(backend): track sprint-0 follow-ups + flag integration migration gap
feat(backend): wire created_by_id, audit log, F11 scope into CRUD (MA4/5/6)
fix(backend): freeze F11 matrix inline in the initial migration (MA3)
fix(backend): stream store_blob and enforce max_bytes mid-write (MA2)
fix(backend): stop seeding the audit-writer role via postgres-init (MA1)
fix(backend): make google-re2 a hard dependency, drop re fallback (B1)
chore(backend): mypy strict clean + ruff format pass
feat(backend): add content-addressed gzip blob store (D-012)
fix(backend): align regex_extract + outputs.blob() with D-011/D-012
fix(backend): align with D-008/D-009 (drop ttp_version, seed F11 matrix)
docs: update CHANGELOG + tasks for the backend skeleton sprint 0
test(backend): add pytest baseline (B0.8)
feat(backend): add Flask app factory, audit writer, flat CRUD + CLI (B0.7)
feat(backend): add local auth + group-based RBAC matching F11 (B0.6)
feat(backend): add Jinja2 sandbox + regex_extract filter (B0.5)
feat(backend): add C2Connector ABC + payload mapping + factory (B0.4)
feat(backend): add §8 data model + Alembic baseline (B0.2, B0.3)
chore(backend): bootstrap Python 3.12+ project skeleton (B0.1)
ffcac42272