# Structural Audit Report

## Migration Objective

Enforce a hard boundary between Central Identity (`auth-yes`) and the ED-Droid
subsidiary application (`core`), creating a decoupled zero-trust architecture.

## Audit Checklist

### 1. Database Schema Extraction

- [x] **Extracted:** `users`, `apps`, `grants`, `invites`, `audit_records`,
      `passkeys`, `sessions` schemas moved from `core/db.ts` to
      `auth-yes/server/db.ts`.
- [x] **Decoupled:** Removed `REFERENCES users(id)` foreign key constraint from
      `edge_nodes.user_id` in `core/db.ts`, replacing it with an unconstrained
      UUID linking back to the central Auth identity.
- [x] **Localized Mapping:** Created `user_profiles` table in `core/db.ts` to
      hold subsidiary-specific game metadata (`frontier_token`) mapped
      exclusively by the unconstrained `user_id`.

### 2. API Routing Migration

- [x] **Extracted:** Central Identity endpoints (`/api/register/*`,
      `/api/login/*`) and their corresponding SimpleWebAuthn logic moved to
      `auth-yes/server/main.ts`.
- [x] **Refactored:** Modified `/frontier/callback` inside `core/api-server.ts`
      to perform an `UPSERT` into the localized `user_profiles` table rather
      than the central `users` table.
- [x] **Zero-Trust Implementation:** `sessionMiddleware` in `core/api-server.ts`
      has been refactored to utilize the `AuthSdk` (`auth-yes/sdk/mod.ts`),
      ceasing local queries to the `sessions` table and enforcing network-based
      validation.

### 3. Workspace Validation

- [x] **Packages:** `auth-yes` is strictly designated as a workspace member
      inside `deno.json`.
- [x] **Decoupling:** `auth-yes/sdk/mod.ts` acts as a pure logic client without
      directly importing `auth-yes/server/main.ts` or database connections.

## Conclusion

The root `core/` directory is now completely purged of central identity logic
and schemas. The structural migration was a complete success.