feat(plugin-security,cli,spec)!: retire sys_user_permission_set.permission_set_id; the grant key is unique per organization; the boot grant-name backfill is deleted (C7b S3) by objectstack-fleet[bot] · Pull Request #23503 · objectstack-ai/objectstack

feat(plugin-security,cli,spec): sys_user_permission_set.permission_set_id retired; unique grant index on the name; the ceremony drops the column (ADR-0131 D4/D10, C7b S3)

claude

committed

ddb97b1

Merge remote-tracking branch 'origin/main' into claude/issue-23430-grant-column

claude

committed

512cf54

wip(plugin-security): the platform-wide duplicate refusal covers every writer; fixtures drop the retired id; write-door pins

claude

committed

ac80b9e

wip(plugin-security): fixture triage for the retired grant id column

claude

committed

e6c6f5e

wip(plugin-security): unused fixture read

claude

committed

22618ee

wip: plugin-auth pins and comments, dogfood pin, i18n bundles, ADR anchor for the retired grant id

claude

committed

00fb359

wip: changeset for the retired grant id column

claude

committed

6ece6b2

fix(plugin-security): declare the objectql dependency the write door's 409 needs; re-measure the tenant-audit census

claude

committed

c38af85

Merge commit '4e0838d99' into claude/issue-23430-grant-column

claude

committed

fe84a70

fix(cli): the grant rewrite never names a legacy grant into a held key; the plan counts grant keys without the name column; the retired indexes drop before the column

claude

committed

ea68dc4

fix(plugin-security): the platform-wide duplicate refusal sees repeats within one batch or multi-row write

claude

committed

bc15097

docs(plugin-security,cli,spec): restate the grant key's enforcement; the unnamed-grant report leads with the ceremony; operators restart after --apply

claude

committed

b1afc46

Revert "fix(plugin-security): the platform-wide duplicate refusal sees repeats within one batch or multi-row write"

claude

committed

b3420c9

fix(plugin-security): the grant key's unique index is unique 'organization', and the door's platform-wide check retires

claude

committed

32971a8

fix(plugin-security): the organization-administrator reconcile writes nothing for a pair holding an unnamed grant in that organization

claude

committed

3dd068f

docs(plugin-security,cli,spec): the grant key's index is the guard for every writer; restate the changeset, the ADR-0087 entry and the anchor

claude

committed

4b980ec

test(cli): the ceremony fixture's engine shim routes delete through assertEngineDeleteDispatch; the pinned-double ledger learns it

claude

committed

5a9d40f

Merge remote-tracking branch 'origin/main' into claude/issue-23430-grant-column

claude

committed

95898bb

fix: re-measure the tenant-audit census on the merged tree; the changeset's reconcile bullet moves out of the --plan list

claude

committed

7b50158

Navigation Menu

Repository navigation

feat(plugin-security,cli,spec)!: retire sys_user_permission_set.permission_set_id; the grant key is unique per organization; the boot grant-name backfill is deleted (C7b S3) - #23503

feat(plugin-security,cli,spec)!: retire sys_user_permission_set.permission_set_id; the grant key is unique per organization; the boot grant-name backfill is deleted (C7b S3)#23503
os-zhuang merged 19 commits into
mainfrom
claude/issue-23430-grant-column

Commits on Oct 14, 2026

feat(plugin-security,cli,spec): sys_user_permission_set.permission_set_id retired; unique grant index on the name; the ceremony drops the column (ADR-0131 D4/D10, C7b S3)

Merge remote-tracking branch 'origin/main' into claude/issue-23430-grant-column

wip(plugin-security): the platform-wide duplicate refusal covers every writer; fixtures drop the retired id; write-door pins

wip(plugin-security): fixture triage for the retired grant id column

wip(plugin-security): unused fixture read

wip: plugin-auth pins and comments, dogfood pin, i18n bundles, ADR anchor for the retired grant id

wip: changeset for the retired grant id column

fix(plugin-security): declare the objectql dependency the write door's 409 needs; re-measure the tenant-audit census

Merge commit '4e0838d99' into claude/issue-23430-grant-column

fix(cli): the grant rewrite never names a legacy grant into a held key; the plan counts grant keys without the name column; the retired indexes drop before the column

fix(plugin-security): the platform-wide duplicate refusal sees repeats within one batch or multi-row write

docs(plugin-security,cli,spec): restate the grant key's enforcement; the unnamed-grant report leads with the ceremony; operators restart after --apply

Revert "fix(plugin-security): the platform-wide duplicate refusal sees repeats within one batch or multi-row write"

fix(plugin-security): the grant key's unique index is unique 'organization', and the door's platform-wide check retires

fix(plugin-security): the organization-administrator reconcile writes nothing for a pair holding an unnamed grant in that organization

docs(plugin-security,cli,spec): the grant key's index is the guard for every writer; restate the changeset, the ADR-0087 entry and the anchor

test(cli): the ceremony fixture's engine shim routes delete through assertEngineDeleteDispatch; the pinned-double ledger learns it

Merge remote-tracking branch 'origin/main' into claude/issue-23430-grant-column

fix: re-measure the tenant-audit census on the merged tree; the changeset's reconcile bullet moves out of the --plan list