Q114: goal audits use the org's own auditor model and see pointers, not the executor's account

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

src/main/database/migrations/087-goal-auditor.ts

@@ -0,0 +1,7 @@
+export const goalAuditorSchema = `
+  alter table organizations add column audit_provider_id text;
+  alter table organizations add column audit_model_id text;
+
+  insert into schema_migrations(version, name, applied_at)
+  values (87, 'goal_auditor', datetime('now'));
+`;

src/main/database/schema.ts

@@ -85,6 +85,7 @@ import { connectorAccountLabelsSchema } from "./migrations/083-connector-account
 import { connectorGrantLimitsSchema } from "./migrations/084-connector-grant-limits";
 import { approvalSubjectSnapshotSchema } from "./migrations/085-approval-subject-snapshot";
 import { heldDeliverablesSchema } from "./migrations/086-held-deliverables";
+import { goalAuditorSchema } from "./migrations/087-goal-auditor";
 
 interface Migration {
   version: number;
@@ -179,6 +180,7 @@ const MIGRATIONS: Migration[] = [
   { version: 84, name: "connector_grant_limits", sql: connectorGrantLimitsSchema },
   { version: 85, name: "approval_subject_snapshot", sql: approvalSubjectSnapshotSchema },
   { version: 86, name: "held_deliverables", sql: heldDeliverablesSchema },
+  { version: 87, name: "goal_auditor", sql: goalAuditorSchema },
 ];
 
 const SCHEMA_VERSION = MIGRATIONS[MIGRATIONS.length - 1].version;