Connected as “postgres” — a role with write access. The app still refuses to write (read-only sessions, SELECT-only queries, guarded SQL), but the database is no longer the backstop. Run setup/sales_ro.sql and switch SALES_DB_URL to the sales_ro role in .env.local to restore the full guarantee.