-- Add unique constraint on (device_id, policy_id) for compliance_results upsert
CREATE UNIQUE INDEX IF NOT EXISTS "idx_compliance_device_policy"
  ON "compliance_results" ("device_id", "policy_id");