On-chain MOVEUSD LEAVING a ledger account: the debits no platform
transaction explains, plus the settlement debits of rails that already
account for the signature.
The mirror of blockchain_deposit_view, generated from the same body — see
blockchainArmSql. Before this arm existed the scan discarded every
negative leg, so money leaving reached no view and was unsearchable by
signature.
Declaration order IS load-bearing: UNION ALL matches arms by position, not
name, so this must stay in the sibling arms' projection order.
securityInvoker is required, not cosmetic — every underlying table has RLS
enabled, and without it the view would run with the owner's row visibility
and silently bypass the querying role's policies.
On-chain MOVEUSD LEAVING a ledger account: the debits no platform transaction explains, plus the settlement debits of rails that already account for the signature.
The mirror of
blockchain_deposit_view, generated from the same body — see blockchainArmSql. Before this arm existed the scan discarded every negative leg, so money leaving reached no view and was unsearchable by signature.Declaration order IS load-bearing: UNION ALL matches arms by position, not name, so this must stay in the sibling arms' projection order.
securityInvokeris required, not cosmetic — every underlying table has RLS enabled, and without it the view would run with the owner's row visibility and silently bypass the querying role's policies.