DROP TABLE IF EXISTS webauthn_credentials;
DROP TABLE IF EXISTS webauthn_challenges;
DROP TABLE IF EXISTS admin_jit_elevation_requests;
DROP TABLE IF EXISTS admin_role_change_requests;
DROP TABLE IF EXISTS admin_scope_assignments;
DROP TABLE IF EXISTS mfa_reset_requests;
DROP TABLE IF EXISTS user_mfa_recovery_codes;

DELETE FROM security_events
WHERE event_type IN ('session_anomaly', 'session_remote_revoked');

ALTER TABLE security_events
    DROP CONSTRAINT IF EXISTS security_events_event_type_check;

ALTER TABLE security_events
    ADD CONSTRAINT security_events_event_type_check CHECK (event_type IN (
        'login_failed_velocity',
        'login_lockout_created',
        'login_blocked',
        'login_rate_limited',
        'suspicious_login'
    ));