nice find though! if you haven't already, I would also try to print out the actual uids in the constraint. If we see that there is a different uid here each time the table is hit, sqlite might be working "as advertised" https://github.com/directionless/osquery/commit/89f6362da88cd5076ec929b5d01d87c535a1cbfe#diff-522abfd174db752f382dd00cc073c429R138