The pm branch's model expects these but nothing created them — login 500s with UndefinedColumnError users.username on any volume that predates the RBAC work, including fresh ones (migration.sql never had the column either). The pm author evidently altered his local DB by hand. ensure_rbac_schema() now creates all of it idempotently at startup, alongside the audit/bot_drafts/project_transfers ensures.