Migration frontier checks can miss historical ledger drift
A migration guard based on row count and the latest frontier can prove that no suffix migration is pending while still missing internal historical-ledger drift. Audit exact migration identifiers, timestamps, and hashes separately, and corroborate reconciled schema objects.
Report frontier assurance and full-ledger equality as distinct claims. Matching the newest suffix does not establish that every earlier local and remote entry corresponds exactly.