docs: add parity prep templates for vuln and scheduler

docs/db/reports/scheduler-mongo-request-20251208.md

@@ -0,0 +1,23 @@
+# Scheduler Mongo Snapshot Request · 2025-12-08
+
+**To:** DevOps Guild, Scheduler Guild
+
+**Context:** Scheduler Postgres cutover (Sprint 3402 · PG-T2.9–T2.11) is blocked awaiting Mongo data for backfill/parity. Target dates: snapshot/approval by 2025-12-12; parity run/report by 2025-12-14.
+
+## Request
+1) Provide a MongoDB snapshot (or live read-only connection string) for Scheduler collections covering jobs/triggers/leases/history/metrics.
+2) Confirm whether backfill is required or if a start-clean posture is approved for staging/production.
+3) If snapshot is provided, include:
+   - Connection string or dump location
+   - Snapshot timestamp
+   - List of collections included
+   - Expected row counts by collection
+
+## Delivery
+- Drop details in this file (or reply in the sprint log) and set Action #1 in `SPRINT_3402_0001_0001_postgres_scheduler.md` to DONE.
+
+## Notes
+- Backfill tool: `Scheduler.Backfill` CLI (see sprint doc).
+- Parity report target: `docs/db/reports/scheduler-parity-20251214.md`.
+- Config to flip post-parity: `Persistence:Scheduler=Postgres`.
+

docs/db/reports/vuln-parity-sbom-sample-20251209.md

@@ -0,0 +1,23 @@
+# SBOM & Advisory Sample List · Vulnerability Parity · 2025-12-09
+
+Use this list for PG-T5b.3–5b.4 parity runs (Mongo vs Postgres). Keep counts deterministic and freeze inputs once finalized.
+
+## Advisory sample (10k advisories)
+- Source selection: e.g., NVD 2025-08 snapshot, OSV 2025-09, vendor feeds.
+- Selection method: deterministic (sorted by source + advisory key); document exact query.
+- Export path: <populate>
+- SHA256 of export: <populate>
+
+## SBOM sample set
+| # | SBOM path | Ecosystem | Size | Hash (SHA256) | Notes |
+|---|-----------|-----------|------|---------------|-------|
+| 1 | <populate> | | | | |
+| 2 | <populate> | | | | |
+| 3 | <populate> | | | | |
+| 4 | <populate> | | | | |
+| 5 | <populate> | | | | |
+
+## Determinism guardrails
+- Do not change sample set after hashes recorded.
+- Store exports under `docs/db/reports/assets/vuln-parity-20251211/` with hash manifest.
+