test: add PostgreSQL migration integration coverage

README.md

@@ -13,9 +13,10 @@ contracts, deterministic schema aggregation, and a cloneable backend-only module
 artifacts now have module-owned Drizzle contracts, deterministic offline discovery, explicit
 destructive-change declarations, and exact checksums. Core now provides read-only applied-history
 planning and a locked, whole-batch transactional PostgreSQL runner with exact external destructive
-approval matching. Live PostgreSQL runner integration coverage, production approval-provider
-composition, identity, HTTP routing, jobs, physical storage provisioning, surfaces, and feature
-modules remain later vertical slices.
+approval matching. A hermetic live PostgreSQL suite now proves history, rollback, statement
+breakpoints, advisory-lock concurrency and release, exact destructive approvals, and sanitization
+against the production adapter. Production approval-provider composition, identity, HTTP routing,
+jobs, physical storage provisioning, surfaces, and feature modules remain later vertical slices.
 
 ## Quick start
 
@@ -28,6 +29,7 @@ pnpm infrastructure:up
 pnpm modules:validate
 pnpm migrations:validate
 pnpm migrations:plan
+pnpm test:migrations:integration
 pnpm verify
 ```
 
@@ -36,8 +38,9 @@ pnpm verify
 advisory lock and one transaction. Review the plan before applying. Destructive migrations are
 blocked by default and require an exact externally supplied approval; there is no force flag.
 
-The runner currently has deterministic unit coverage through a database port. Live PostgreSQL
-migration-runner tests are deferred and are not yet claimed by `pnpm verify`.
+The runner has both deterministic unit coverage through a narrow database port and a separate live
+PostgreSQL integration suite. The live command creates and destroys disposable Docker
+infrastructure; it remains separate from the Docker-free `pnpm verify` gate.
 
 Run `pnpm infrastructure:smoke` for an isolated end-to-end PostgreSQL and authenticated S3 check.
 
@@ -54,6 +57,7 @@ environment.
 - [Platform architecture](docs/architecture/platform-architecture.md)
 - [Repository boundaries](docs/architecture/repository-boundaries.md)
 - [Repository workflow](docs/development/repository-workflow.md)
+- [Testing](docs/development/testing.md)
 - [Module development](docs/module-development/README.md)
 - [Architecture decisions](docs/architecture/decisions/README.md)