diff --git a/PR_POLICY_BODY.md b/PR_POLICY_BODY.md
index 55f30f8bc..c43a3a523 100644
--- a/PR_POLICY_BODY.md
+++ b/PR_POLICY_BODY.md
@@ -23,9 +23,15 @@
 
 ## Clinical Governance Preflight
 
-Touched extractors/document.ts (fail-closed process-tree cleanup only). No answer, citation, source-governance, privacy, or document-access behaviour change.
-
-<!-- GOVERNANCE_PREFLIGHT -->
+Touched extractors/document.ts (fail-closed process-tree cleanup only) and Supabase migration history placeholders (no-op history reconciliation for hosted Preview). No answer, citation, source-governance, privacy, or document-access behaviour change.
+
+- [x] Source-backed claims still require linked source verification before clinical use
+- [x] No patient-identifiable document workflow was introduced or expanded without explicit governance approval
+- [x] Supabase target remains `Clinical KB Database` (`sjrfecxgysukkwxsowpy`)
+- [x] Service-role keys and private document access remain server-only
+- [x] Demo/synthetic content remains clearly separated from real clinical sources
+- [x] Source metadata, review status, and outdated/unknown-source behavior remain conservative
+- [x] Deployment classification/TGA SaMD impact was checked when clinical decision-support behavior changed
 
 ## Notes