-- 0002_audit_anchor.sql — store the latest audit chain hash inside
-- system_state so a truncation of the audit log file can be detected
-- at boot (the file would still verify on its own, but the recorded
-- anchor would not match the file's tail hash).

ALTER TABLE system_state ADD COLUMN last_audit_hash TEXT;

PRAGMA user_version = 2;