Reauthorize cached previews through immutable indexed evidence IDs
When a Postgres projection is append-only and cached previews require fresh authorization, retain exact representative evidence IDs in private immutable server metadata. Recheck those IDs through primary-key lookups under current RLS, together with the owning person, session and …