review-lessons

This is migration guidance, not malware. It documents a genuine SQLite cascade data-loss risk, but its suggested rename-aside fix does not by itself break the foreign-key reference and may still allow cascading deletion when the parent is dropped; treat that procedure as unsafe until corrected and tested. Severity is a potential high-impact data-integrity issue if copied into a migration, not evidence of malicious behavior.