"""Repository layer: database access. Each aggregate gets its own module (e.g. ``dsr_repository.py``) exposing a single class with intent-named methods. Repositories own SQLAlchemy session usage; they do not run business logic, and they do not import anything from ``compliance.api`` or ``compliance.services``. Phase 1 refactor target: ``compliance.db.repository`` (1547 lines) is being decomposed into per-aggregate modules under this package. """