- Mark Phase 0 as complete with actual CI outcomes (CodeQL 0 findings,
  deny clean, 47 Semgrep alerts triaged)
- Mark Phase 1 as complete with list of completed tasks
- Update Implementation Checklist: restructure into Phase 0 done /
  Phase 1 done / Phase 2 next / Phase 3 pending
- Update Phase completion criteria table with checkmarks
- Add Triage Log section documenting all 47 alert dismissals:
  - 2 CodeQL CWE-312 false positives (salary in test fixtures)
  - 13 Semgrep security-definer hits in plan/doc markdown files
  - 32 Semgrep SPI dynamic-format hits (all pre-quoted, not user input)
- Update Table of Contents
- Replace stale Recommendation text with Phase 2 roadmap

Phase 2 — Extension-specific privilege-context Semgrep rules:
- sql.row-security.disabled: flag SET LOCAL row_security = off
- sql.set-role.present: flag SET ROLE / RESET ROLE
- Update sql.security-definer.present message with SET search_path guidance
  (search-path hijacking risk explicitly called out for reviewers)
- All three rules advisory (WARNING/INFO), scoped to src/** + sql/**,
  excluding *.md / plans/** / docs/**

Phase 3 — Unsafe block inventory:
- scripts/unsafe_inventory.sh: per-file grep-based unsafe { counter
  with --report-only and --update modes; writes GITHUB_STEP_SUMMARY in CI
- .unsafe-baseline: committed baseline (1309 blocks across 6 files)
- .github/workflows/unsafe-inventory.yml: advisory CI workflow that runs
  on PRs touching src/**; fails if any file exceeds its baseline count
- just unsafe-inventory recipe for local use

Docs:
- plans/testing/PLAN_SAST.md: Phase 2 and 3 marked complete
- CHANGELOG.md: Phase 2+3 entries added
- ROADMAP.md: SAST section added tracking all S1-S8 items

.unwrap(), .expect(), and panic!() abort the PostgreSQL backend process
if reached from a SQL-callable function. The new advisory rule surfaces
all ~37 existing callsites in src/** for triage.

Known patterns in the existing hits:
- expect("unreachable after error!()") — valid pgrx idiom post-error!()
- expect() inside #[cfg(test)] mod tests blocks (recursive_cte.rs:3270+)
- a handful of genuine candidates in api.rs and parser.rs

All hits are advisory; none block CI.