DARTH VADER DISPLAY ADDON — 17 October 2026

Applied locally to Dev_AlexForbes_HR on BRENDANDESKTOP after the user confirmed isolation from real payroll. Remote dev unchanged. The manager was resolved from Leia AFORBES/0901633 through the exact Posi Report_Comp_Code/Report_Dept_Code/Reports_To_Posi link: existing employee AFORBES/0007660. Its Employee, Personal and Users display names now read Darth Vader. Job title, position, department OF5300, next-of-kin, IDs, employee/login numbers, credentials, manager links and security were preserved.

This addon has its own private per-target backup table dbo.__Codex_StarWarsManager_20261017 and rollback namespace. It does not alter or depend on the completed three-person package's backup. Original display values and Employee ChangeBy metadata remain inside the target database only; no original staff names or contacts are exported here.

Native triggers stay enabled. Exact ordered JSON guards preserve all12 business/security snapshots, including User_Access_To, Lv_Emp, Lv_Xact, PW_Master, histories and unaffected employee/login/job/contact fields. Normal Employee ChangeBy audit changes are permitted and original values backed up. Queue table locks plus identity snapshots remove only new transaction-owned rows for this manager before commit; all pre-existing scoped queue fields remain exact. This never authorises or sends queued work. Explicit target isolation remains essential because existing pending queues may read live names later.

Validation: retained Rehearse applied3 display records and removed5 new scoped queue entries, verified Darth Vader, restored3 display records and removed6 new queue entries, then rolled back the complete outer transaction. Real Apply committed3 display records, compensated5 new queue entries and passed all12 exact invariants. Next Apply reported0 requested changes and0 new queues. Native verification passed.

Set HRF_SQL_CONNECTION_STRING securely for the target process. Do not retain credentials in this package. Runner default is read-only DryRun.
.\Run-DarthVaderDisplay.ps1 -Mode DryRun -ExpectedDatabase Dev_AlexForbes_HR -ExpectedMachine BRENDANDESKTOP
.\Run-DarthVaderDisplay.ps1 -Mode Rehearse -ExpectedDatabase Dev_AlexForbes_HR -ExpectedMachine BRENDANDESKTOP -AllowDemoChanges -IsolationConfirmed
.\Run-DarthVaderDisplay.ps1 -Mode Apply -ExpectedDatabase Dev_AlexForbes_HR -ExpectedMachine BRENDANDESKTOP -AllowDemoChanges -IsolationConfirmed
.\Run-DarthVaderDisplay.ps1 -Mode Verify -ExpectedDatabase Dev_AlexForbes_HR -ExpectedMachine BRENDANDESKTOP
.\Run-DarthVaderDisplay.ps1 -Mode Rollback -ExpectedDatabase Dev_AlexForbes_HR -ExpectedMachine BRENDANDESKTOP -AllowDemoChanges -IsolationConfirmed

For dev replay use that target's exact expected database/machine and secure connection string, publish prerequisites and confirm isolation first. Per-target IDs are resolved by composite company/employee/reporting keys, never transported from local. Unknown award SQL, missing records, identity/name drift or business/security side effects abort. Runner explicitly selects only named.sql files. Keep backup tables private; they contain original display values. Rollback preserves normal audit evidence and retains the backup table. A fresh sign-in may be required for cached display names.

Identifier-bracketing verification: Passed across 4/4 SQL files.
