[first-assist]

Configured keysets and authorized scans support composite primary keys. The declared order ends with every key component in declaration order, rejects repeated columns and retains typed values through nullable ordering, forward/backward windows and cursor identity.

Every configured ordering field and complete key component requires current authority before SQL and before releasing cursors or scan metadata, even for cursor-only selections. Explicit repository surface flags cannot publish a private GraphQL cursor field; repository policy remains independent.

Owned SQLite regressions cover tuple collisions, nullable ordering, reverse traversal, generated read surfaces and zero-SELECT rejection for denied cursor fields. The exact two indentation suggestions from hosted job 120200514199 are applied without changing assertions or runtime code. No local formatter or Rust command ran; current-head CI/backend/Clippy/Rustdoc qualification remains pending. Keep draft; Root alone merges.

After #187 merged at 5c860fc, this branch was rebased onto that exact main commit. The paired ORM/macros capability advances to 0.59.0. All seven workspace/fixture lockfiles change only those two local package versions; external package records are unchanged. The generated workspace inventory changes only the matching two version cells pending confirmation by fresh hosted Cargo metadata. Documentation (210), package release policy and diff checks pass. Prior green CI applied to ec58025 and does not qualify this new head; fresh CI is pending Root relay. No local Rust/Cargo/fmt command ran during the a17 blackout.

Documentation impact

• Documentation updated
• No documentation impact

Current source: dbb82f29c5f5b99bb19489d99a61addbbe531b15 (tree 17a9f5c35f8faa1f01e3af35d8adab9c37e6120d).