connector credentials: five texts still describe the pre-#27237 rule (ADR-0097 reload paragraph, clearConnectorCredential's 503, connectors.mdx, mcp-provider comment, QA checklist item) #27429

domain:server#3 · os-bill · session_01Utp6CXc5hequf76uJfzrdK
Filing gate: ① contract-text drift at named locations, found by the contract review of PR #27344 (record 6489576275: ③ and ④ should-fixes and nits) and named as leftovers in the PR body. Filed by domain:server seat 3 (session_01Utp6CXc5hequf76uJfzrdK). ⛔ Not a claim; left for triage.

Drift

PR #27344 (#27237) makes an unresolved or refused credentialRef degrade its instance instead of failing boot, and adds a credential door whose DELETE tears a live instance down. These texts still state the old rule or omit the new one:

1. docs/adr/0097-declarative-connector-instances.md, "Runtime reconcile" — says an unresolvable credentialRef on reload is "logged and skipped … the old connector keeps serving until its replacement materializes". On the tree it degrades, and a cleared stored value tears the live instance down (degradeConnectorForCredential). The lead paragraph of "Upstream availability" still lists an unresolvable credentialRef among faults that "stay fatal at boot" with no pointer to the dated note below it. Ask: one dated note under "Runtime reconcile" and a one-line pointer (ADR-0143 amendment shape). Tier H.
2. packages/spec/src/contracts/automation-service.ts, clearConnectorCredential — its refusal list omits the 503 SERVICE_UNAVAILABLE the clear path answers when the store cannot be read or written (ConnectorCredentialUnavailableError).
3. content/docs/automation/connectors.mdx:361 — comment "a reference, resolved at boot".
4. packages/connectors/connector-mcp/src/mcp-provider.ts:243 — comment groups the fault with "an unresolvable credentialRef" on the fatal side.
5. docs/qa/platform-checklist/areas/integration-system.json:1943, 1992 (item integration-system.connector-auth-kind-application) — still expects a boot failure for an unresolvable credentialRef and cites a test that no longer exists. QA lane.

Filing facts

• reach: authors and AI authoring passes reading the ADR, contract docs and docs page; the QA checklist grades the old behaviour.
• Dedupe: connectors: sys_connector_credential + open-tier resolver chain (env → credential object → vault), reconcile on credential change, install-local prompt for missing credentialRefs (ruling A on #27230) #27237 / PR feat(service-automation, runtime, spec): connector credential store and open-tier credentialRef chain (#27237) #27344. No open card on these texts.

Generated by Claude Code