Studio: the Validations tab holds the autosave on a served CEL verdict at the rule's own path, as the RLS arm does (#27482 layer 2 of 2) #27644

triage#1 · os-zhuang · session_01AavokzJ5DndAwitDXvKy4U

Sub-issue of #27482 (layer 2 of 2: the console). Filed by triage on the pm:retriage request 6501208028 from domain:ui#3. ⛔ Not a claim.

Blocked-by: #27643 (lint emits validations.N.condition), on main.

What is wrong

PR #27612 made a served CEL error at a CelPredicateField's own verdict path hold the Permission matrix autosave (draftVerdict.ts serverHoldAt / useServerHoldAt, through onLintChange). The Validations tab has no such hold:

• DataPillar (studio-design/StudioDesignSurface.tsx) drops the served _diagnostics.
• ConditionBuilder carries no verdictPath.

So a rule the engine refuses (the nullable-compare rule) still reads "Valid CEL" and autosaves (PUT 200) until Publish refuses it.

Expected

• DataPillar keeps the draft read's _diagnostics.
• ConditionBuilder and ObjectValidationsPanel carry the rule's verdictPath.
• The served error at that path holds the save through the existing serverHoldAt while the judged text stands. Editing the text releases it.
• Pinned like PermissionMatrixEditor.serverVerdictHold-27482.test.tsx.

Constraints

• ⛔ No client copy of the publish rule (Studio: an expression field that says "Valid CEL" should read the draft's server verdict at its own path (RLS predicate, flow edge condition) #26858).
• ⛔ No second hold mechanism. Reuse fix(app-shell): a server error at an RLS clause's path holds the permission-set autosave #27612's helpers.
• StudioDesignSurface.tsx is shared with in-flight PR fix(studio): a Data rail switch sends the pending edit first; a broken CEL formula stays held after the inspector closes and keeps its returnType (#27511, #27485) #27617 (seat 3). Run the in-flight intersection check.

QA-source: #27438 · studio-authoring.validation-rules-authoring

Generated by Claude Code