SELECT * FROM audit WHERE audit.target = :sender with target: Option<Identity> fails at publish:
failed to create row-level security … Unexpected type: (expected) (__identity__: U256) != (some: … | none: ()).
Nullable owner/target columns are common (system-created rows). Matching Some(sender) would remove the need for
zero-identity sentinels.