Record PostgreSQL collation maintenance

CHANGELOG.md

@@ -7,6 +7,14 @@
 
 # Changelog
 
+## Sprint 37 Tower PostgreSQL collation maintenance (2026-06-17)
+
+- Created a live Tower database backup before collation maintenance: `backups/geointel-before-collation-refresh-20260617-065707.dump`.
+- Ran `REINDEX DATABASE geointel;` and `ALTER DATABASE "geointel" REFRESH COLLATION VERSION;` against the all-in-one PostGIS runtime.
+- Verified the reused database volume now reports matching collation versions: `stored=2.36 actual=2.36`.
+- Re-ran live migration smoke, browser runtime smoke, GIS runtime smoke and demo/export/golden QA workflow smoke successfully against `http://192.168.10.150:1202`.
+- No API contracts, migrations, product features, provider fetching or AI behavior were introduced.
+
 ## Sprint 36 PostgreSQL collation maintenance visibility (2026-06-17)
 
 - Added database collation version reporting to `scripts/live_migration_smoke.sh`.

docs/CODEX_EXECUTION_LOG.md

@@ -1,3 +1,25 @@
+## Sprint 37 Tower PostgreSQL collation maintenance (2026-06-17)
+
+Changed:
+- Performed the manual PostgreSQL collation maintenance action reported by the live migration smoke on the Tower all-in-one runtime.
+- Created a pre-maintenance custom-format database backup at `backups/geointel-before-collation-refresh-20260617-065707.dump`.
+- Ran `REINDEX DATABASE geointel;` followed by `ALTER DATABASE "geointel" REFRESH COLLATION VERSION;`.
+- Confirmed the database collation metadata now matches the runtime collation version: `geointel stored=2.36 actual=2.36`.
+
+Validation:
+- `LIVE_SMOKE_CONTAINER=geointel bash scripts/live_migration_smoke.sh` passed on Tower and reported `Database collation version: ok`.
+- `bash scripts/verify_browser_runtime.sh http://192.168.10.150:1202` passed.
+- `bash scripts/verify_gis_runtime.sh http://192.168.10.150:1202` passed.
+- `bash scripts/verify_demo_export_workflow.sh http://192.168.10.150:1202` passed.
+
+Notes:
+- An initial SSH script attempt was interrupted by PowerShell BOM/stdin handling before reindex or refresh executed; the subsequent base64-delivered script ran without `docker exec -i` stdin interference.
+- Earlier backup attempts were left in `backups/` alongside the final validated backup.
+- No code, API contracts, migrations, product features, provider fetching or AI behavior changed.
+
+Next recommended pass:
+- Continue with export/download polish or frontend export center hardening, using the now-clean Tower runtime as the validation target.
+
 ## Sprint 32 Unraid all-in-one runtime (2026-06-17)
 
 Changed:

docs/TODO.md

@@ -14,6 +14,7 @@ This file now starts with the current implementation status. Older preparation/b
 - [x] Add single-container Unraid runtime with embedded PostGIS, backend and frontend.
 - [x] Remove embedded PostGIS password defaults from all-in-one Docker image metadata.
 - [x] Report reused-volume PostgreSQL collation mismatches in live migration smoke.
+- [x] Execute Tower PostgreSQL collation reindex/refresh after backup.
 
 ## Current implementation status