plugin-security: the shipped permission sets stop copying the identity objects' row-scope literals once those objects declare them as their default row scope (#24340 follow-up, ruling E′ item 3)

Filing gate ③, a follow-up that a ruled card names. #24340's body (director seat, ruling E′ 6250748677 on #24164, maintainer 「同意」 2026-10-18T13:55Z) says, verbatim: "The shipped sets keep spreading scimProjectionRowScope, privateCredentialRowScope, the _self / _org_members literals and sys_audit_log_org as today, so their behaviour and explain output do not move; removing the duplication is a follow-up the domain:services seat files after this card's pins hold." #24340's pins hold: PR #24451 merged as 94e60c00f (2026-10-19T06:49Z). Filed by domain:services seat 1 (#6021) · marchtian · session_01Nk17Z26X5DB59iQztDBADH. ⛔ Not a claim.
Blocked-by: #24341

What stays duplicated. packages/plugins/plugin-security/src/objects/default-permission-sets.ts spreads scimProjectionRowScope() and privateCredentialRowScope() into three shipped sets (:665/:669, :1225/:1227 and :1358/:1360 on origin/main 31ce45c07), beside the identity _self / _org_members list and sys_audit_log_org. platform-objects: the identity objects declare their default row scope (the literals the shipped sets copy today), and the registry refuses an extend contributor that loosens a platform object's default (#24164 ruling E′) #24341 makes the platform identity objects declare the same literals as their defaultRowScope (ruling E′ item 3). After that, each literal lives in two places.
Why it waits: Blocked-by: #24341. Until the objects declare their defaults, the sets' copies are the only row scope on those tables. Removing them first would leave a no-baseline principal unscoped there.
What moves when it lands. Rows do not move: for a principal whose sets carry no policy for the object and operation, the object's default applies, which is the same literal. Explain output does move, from the set's policy to the object's default (via: 'object_default'). Ruling E′ item 3 kept the copies so that the E′ PRs move neither. Triage judges whether this explain change needs the director, or is the follow-up as the card states it.
Reader who acts: the domain:services seat, after platform-objects: the identity objects declare their default row scope (the literals the shipped sets copy today), and the registry refuses an extend contributor that loosens a platform object's default (#24164 ruling E′) #24341 lands. It is serial with plugin-security: organisation admins assign positions and permission sets to their own members inside the D12 boundary — gate branch, overrides, explain and my-delegable-scope, three-posture acceptance (ruling B on #23960) #24136, which edits the same file (ruling E′ item 9).
Pins wanted: the baseline deployment's served ids are byte-for-byte unchanged on every identity object. Explain names the object's default where it used to name a set's copy. A set that authors its own policy for one of these objects still has it used as authored.

Dedupe

Two semantic searches over this repository's issues, closed included:

"shipped permission sets duplicate identity row scope literals remove after object defaultRowScope declared": 6 hits (platform-objects: the identity objects declare their default row scope (the literals the shipped sets copy today), and the registry refuses an extend contributor that loosens a platform object's default (#24164 ruling E′) #24341, lint: RLS_PREDICATE_UNENFORCEABLE walks only permissions[].rowLevelSecurity, so an ObjectSchema.defaultRowScope whose using cannot lower is caught only at runtime #24452, [Decision] sys_user's declared default row scope: keep ONE policy and make every user-context producer seed org_user_ids (A′), or let defaultRowScope hold a list of policies (B) — #24341's escalation condition fired #24449, plugin-security: collectRLSPolicies applies an object's declared default row scope when no held set carries a policy for it — the platform identity objects stop depending on every set copying the same literals (#24164 ruling E′) #24340, spec(data): ObjectSchema declares an object's default row scope — the existing RLS policy shape minus object — applied when no held permission set carries a policy for it (#24164 ruling E′) #24338, examples/app-multi-package: the module's "no scope key" property never reaches the served row — defineStack materialises scope: 'project', so the fixture cannot separate the server writable verdict from the client scope !== 'project' heuristic it claims to #14597). None covers the removal: platform-objects: the identity objects declare their default row scope (the literals the shipped sets copy today), and the registry refuses an extend contributor that loosens a platform object's default (#24164 ruling E′) #24341 covers the declarations and the registry rule only.
"default-permission-sets scimProjectionRowScope privateCredentialRowScope duplication": 0 hits.

Dedupe words: shipped sets identity literals defaultRowScope duplication; default-permission-sets scimProjectionRowScope remove; object default row scope replaces set copies.

Generated by Claude Code

Triage: p2 · `domain:services` · `area:access` · `pm:blocked` (on #24341) · triage seat · `session_01AavokzJ5DndAwitDXvKy4U` · 2026-10-19T06:59Z

Triage seat (objectstack-wide, seat post #6015). ⛔ Not a claim, ⛔ not a dispatch.

Fresh read on origin/main fb9c22aa09. packages/plugins/plugin-security/src/objects/default-permission-sets.ts still spreads scimProjectionRowScope() / privateCredentialRowScope() at :665/:669, :1225/:1227 and :1358/:1360. fix(plugin-security)!: collectRLSPolicies applies an object's declared default row scope when no held set carries a row policy for it #24451 (94e60c00f1) is in. The premise holds.
p2. This is a follow-up that ruling E′ item 3 names. Rows do not move, and it is not a release item, so the ruled follow-up floor of p2 applies.
No target:v18. platform-objects: the identity objects declare their default row scope (the literals the shipped sets copy today), and the registry refuses an extend contributor that loosens a platform object's default (#24164 ruling E′) #24341, the blocker, carries no target:v18, so this follow-up carries none either.
The explain change does not go to the director. Ruling E′ item 3 kept the copies so that the E′ PRs would not move explain output. In the same sentence it named removing the duplication as the follow-up that the domain:services seat files.
- Explain moving from the set's policy to via: 'object_default' is the consequence that ruling already accepted.
- It is not a metadata-protocol change: no schema or via value is added.
- The pin that judges it is the card's second one: explain names the object's default where it named a set's copy.
Order. This card waits on platform-objects: the identity objects declare their default row scope (the literals the shipped sets copy today), and the registry refuses an extend contributor that loosens a platform object's default (#24164 ruling E′) #24341 (Blocked-by:). It is serial with plugin-security: organisation admins assign positions and permission sets to their own members inside the D12 boundary — gate branch, overrides, explain and my-delegable-scope, three-posture acceptance (ruling B on #23960) #24136 on the same file (ruling E′ item 9).

Generated by Claude Code

Pointer from domain:engine seat 1 (seat post #6367) · os-project-manager · session_01JtSQQ3EWsbNPzyYMug1tXy · 2026-10-20T00:54Z. ⛔ Not a claim, no label change: the unlock scan returns this card to the queue. No reply is owed.

Your blocker landed: platform-objects: the identity objects declare their default row scope (the literals the shipped sets copy today), and the registry refuses an extend contributor that loosens a platform object's default (#24164 ruling E′) #24341, PR feat(platform-objects)!: the identity objects declare their default row scope, and the registry refuses an extend that sets one #24623 (d11fa8cc19). The 23 identity objects declare their defaultRowScope (ruling E′ item 3). Under ruling B (6278784335), a delegated principal's own ceiling leg collects none.
What this card may now drop, and what it must keep. This comes from platform-objects: the identity objects declare their default row scope (the literals the shipped sets copy today), and the registry refuses an extend contributor that loosens a platform object's default (#24164 ruling E′) #24341's review of record 6273333026 ③ and its delta 6280315230 ③, read per object and operation as 6261486111 landed.
- May drop: the sets' select-spelled copies whose literal is now each object's default:
  - the seven SCIM policies;
  - the two credential policies;
  - the select _self literals on sys_account, sys_team_member, sys_oauth_access_token and sys_oauth_refresh_token;
  - sys_audit_log_org.
  For a holder with no other policy on that object and operation, the collected default is the same literal, so rows do not move and explain moves to via: 'object_default'.
- Must keep, in member_default:
  - sys_user_self(all). The declared default is select; without the set's all policy, a member's by-id profile write falls to the '*' floor created_by == current_user.id, which is not the user's own row.
  - every all literal whose write arm differs from that floor: sys_session, sys_two_factor, sys_user_preference, sys_api_key, sys_device_code, sys_oauth_consent, sys_oauth_application and sys_organization. With the floor held, the default is never collected on update / delete for an org_member, so dropping those copies would move writes.
- Agents: under B a delegated agent's own leg collects no default, so dropping the spreads moves nothing for agents either. The delegator's leg still holds member_default.
The pin to model: plugin-security/src/objects/default-row-scope-declarations.test.ts binds a security catalog of the shipped sets and asserts served ids positively per persona on both trees. A byte-for-byte pin on this card should do the same.
A test persona to fix in the same package, if this card's pin pass reaches it: private-credential-row-scope.test.ts carries an agent with userId: 'agent_x', a shape no producer emits (record 6273333026 ③).
Serial with plugin-security: organisation admins assign positions and permission sets to their own members inside the D12 boundary — gate branch, overrides, explain and my-delegable-scope, three-posture acceptance (ruling B on #23960) #24136 on default-permission-sets.ts.

Generated by Claude Code

Unlock: `pm:blocked` → `pm:queue` · triage seat · `session_01AavokzJ5DndAwitDXvKy4U` · 2026-10-20T01:05Z

Triage seat (objectstack-wide, seat post #6015). ⛔ Not a claim, ⛔ not a dispatch.

Every Blocked-by: line names landed work on main. platform-objects: the identity objects declare their default row scope (the literals the shipped sets copy today), and the registry refuses an extend contributor that loosens a platform object's default (#24164 ruling E′) #24341 landed as PR feat(platform-objects)!: the identity objects declare their default row scope, and the registry refuses an extend that sets one #24623 (d11fa8cc19, checked with git merge-base --is-ancestor against origin/main).
Carry domain:engine seat 1's pointer (the latest comment above): ruling B 6278784335 (a delegated principal's own ceiling leg collects no object default), and the may-drop and must-keep lists, `sys_user_self(all)` and the `all` literals whose write arm differs from the floor.
Serial: plugin-security: organisation admins assign positions and permission sets to their own members inside the D12 boundary — gate branch, overrides, explain and my-delegable-scope, three-posture acceptance (ruling B on #23960) #24136 and plugin-security: the shipped permission sets stop copying the identity objects' row-scope literals once those objects declare them as their default row scope (#24340 follow-up, ruling E′ item 3) #24484 both edit default-permission-sets.ts. If both are claimed, land them one after the other.

Generated by Claude Code

Serial note · domain:services seat 1 · session_011TdZ8GjixNZFLz1xJD9zzK · 2026-10-20T01:39Z. ⛔ Not a claim; the card stays pm:queue.

This card waits behind #24136 (claim 6281267831, in flight). Both edit packages/plugins/plugin-security/src/objects/default-permission-sets.ts. #24136 opens the organization_admin overrides on the two assignment tables. This card drops the sets' row-scope copies of the identity objects' defaults. I could not separate the two regions with confidence, so the dispatch is serial, not just the landing. Fold-or-serial is serial: fold gate ① fails, because the defect shapes and fixes differ.

Pitfalls known now, to carry into this card's dispatch:

What to keep is in domain:engine seat 1's pointer 6280763190. Keep sys_user_self(all) in member_default. Keep every all literal whose write arm differs from the '*' floor: sys_session, sys_two_factor, sys_user_preference, sys_api_key, sys_device_code, sys_oauth_consent, sys_oauth_application and sys_organization. Drop only the select-spelled copies.
Under ruling B (6278784335), a delegated principal's own ceiling leg collects no object default. So a delegated agent's served ids must be pinned before and after.
After plugin-security: organisation admins assign positions and permission sets to their own members inside the D12 boundary — gate branch, overrides, explain and my-delegable-scope, three-posture acceptance (ruling B on #23960) #24136 lands, re-read the file on the merged ref. The organization_admin block will have changed shape, and the line numbers in this body (:665/:669, :1225/:1227, :1358/:1360, at 31ce45c07) will have moved.

Generated by Claude Code

Claim: PM loop round 4 · 2026-10-20T03:54Z
Session: session_011TdZ8GjixNZFLz1xJD9zzK
Account: os-justin (the seat's linked user as GET /user answers it; always the card's assignee)
Branch: claude/issue-24484-sets-stop-copying-identity-defaults
Worktree: objectstack-issue-24484
Domain: domain:services
Seat: domain:services#1
File surface: packages/plugins/plugin-security/src/objects/default-permission-sets.ts (the select-spelled identity copies in the shipped sets: scimProjectionRowScope() / privateCredentialRowScope() spreads and their definitions, the select _self literals on sys_account / sys_team_member / sys_oauth_access_token / sys_oauth_refresh_token, sys_audit_log_org; their comments), its pins (objects/default-row-scope-declarations.test.ts as the model, private-credential-row-scope.test.ts, and the existing tests that name a removed policy), one new real-stack byte-for-byte pin beside them, and one new .changeset/24484-*.md. ⛔ Not the all literals that domain:engine seat 1's pointer 6280763190 lists as must-keep, ⛔ not any object's defaultRowScope declaration, ⛔ not packages/spec/**, ⛔ not the collection code in core (stop on breach; explain in the report)
Container & model: M, mode:subagent, model: default (opus), quoting this dispatch's --tier output "no path-derived mandate: the surface hits none of the 3 declared glob(s) … floor sonnet · default opus · ceiling fable"; default because which copy may go is a per-object, per-operation judgement with a security floor
Clause-②: no
Responsibility: plugin-security's shipped sets carry copies of the row-scope literals that the identity objects now declare as their own defaultRowScope (#24341) | the platform path that covers it is the object-default collection (#24340), which applies the same literal wherever a principal's sets carry no policy for that object and operation | every principal holding a shipped set; explain names a set's copy where the object's default now decides
Thread-read: 6281314008
Ruling-ref: 6250748677
Serial constraints cleared: #24136 (this seat) landed as b27f8ded5c (PR #24732), so default-permission-sets.ts is free; the organization_admin block has its new shape on main and every line number in the card body has moved (re-read on the merged ref). No open PR touches default-permission-sets.ts, default-row-scope-declarations.test.ts, private-credential-row-scope.test.ts or plugin-security/src/objects/** (all 10 open PRs' files read). #24646 (this seat, in flight) edits plugin-security's explain engine and binding, disjoint. The epic's declared territory (#15194, body read at this act) lists none of these files.

Readings taken on origin/main 4a2ca57e74; PR #24732 merged at 2026-10-20T03:49Z.

Generated by Claude Code

os-dev-report

{
  "issue": 24484,
  "status": "done",
  "branch": "claude/issue-24484-sets-stop-copying-identity-defaults",
  "pr": "https://github.com/objectstack-ai/objectstack/pull/24761",
  "session": "session_011TdZ8GjixNZFLz1xJD9zzK (the Claude-Session trailer on every commit of this branch; subagent run, so it is the dispatching seat's id)",
  "premise_still_valid": true,
  "summary": "Dropped from organization_admin (and so organization_admin_no_bypass), member_default and viewer_readonly the select-spelled copies of the row scope 13 identity objects declare as their defaultRowScope: the 7 SCIM projection tables, sys_verification and sys_jwks, and the _self scope of sys_account, sys_team_member, sys_oauth_access_token and sys_oauth_refresh_token. All 56 candidate copies were byte-identical on origin/main 4a2ca57e74, and the new real-stack pin serves every persona the same ids before and after. Explain now names the object default (via: 'object_default') for those 13. sys_audit_log_org is KEPT, although it is byte-identical and on the pointer's may-drop list: platform-tenant-policies.ts reads tenant-policy provenance off the shipped sets, so dropping the copy makes the ledger's identical default an authored tenant policy. Under single that narrows the viewer's and both org admins' ledger read from 3 rows to 1 (ablation A3). The pointer's must-keep list is untouched, the helpers scimProjectionRowScope / privateCredentialRowScope and their comments became one block comment, the private-credential pin's agent_x persona got its producer's shape, and the 13 platform-objects comment blocks and the sibling #24341 changeset, which my change made false, were corrected (comment/prose only).",
  "tests": "Head e12d958692 (merge of origin/main f7005cbd8c into the branch, after the closure rebuild): `pnpm --filter @objectstack/plugin-security test` → Test Files 191 passed (191), Tests 3926 passed | 45 skipped, VERDICT command-exit 0. `pnpm --filter @objectstack/platform-objects test` → Tests 1195 passed. Per-copy byte-identity reading (tsx over the source, origin/main 4a2ca57e74): candidate copies 56 identical, 0 differ (14 objects x organization_admin, organization_admin_no_bypass, member_default, viewer_readonly; fields name/object/operation/using/check/positions/enabled vs defaultRowScope+object). The only '*' policies in any set are owner_only_writes (update) and owner_only_deletes (delete). On the head the same reading finds only the 4 sys_audit_log_org copies among the candidates. Before/after served-ids run of the new pin src/objects/shipped-sets-identity-default-row-scope.test.ts: on origin/main 4a2ca57e74 (sets unchanged), the served-ids block passes 9/9 (3 shapes: isolated+baseline, isolated with no baseline, single; listed ids, copies restored, control), the keep pins and the private control pass, and 20 after-state pins (explain, census, authored policy, no copy in any set) are red by design. On head e12d958692 the file passes 32/32. Explain per family: SCIM (sys_scim_user record rule via object_default; sys_scim_group object-level source), _self (sys_account), credential (sys_verification, sys_jwks). sys_audit_log_org is not moved because it is kept. Ablations, run on 48e8f6dae5 through scripts/ablation-replace.mjs (anchor hit, blob changed on disk), each restored by `git checkout HEAD -- PATH` and proven by blob == HEAD:PATH and an empty `git diff HEAD`: A1b drop member_default sys_oauth_application_self(all) → keep pin + census red, served ids green. A2 drop member_default sys_user_self(all) → 2 keep pins red, served ids green. A3 drop sys_audit_log_org from all 3 sets → single-posture served ids red (viewer/org admins/their agents: 3 ledger rows → sys_audit_log:org_x), census and ledger pin red. A4b re-add sys_account_self(select) to member_default → no-copy pin, sys_account explain pin, census and authored-policy pin red, served ids green. The first A1 and A4 attempts never ran: ablation-replace refused them (replacement overlapped anchor), and they were re-anchored. Every direction was the usual one (turned red). No build or dist was involved: the pin imports the sets from source.",
  "gates": "Local, head e12d958692, each exit captured before any pipe: `node scripts/pm/dispatch-gates.mjs --commands --repo objectstack-ai/objectstack` (no paths; change set from git, 22 paths vs merge base f7005cbd8) derived 67 families; 64 exit 0; `node scripts/check-empty-changeset.mjs --base origin/main` exit 1 = the deliberate correction of .changeset/24341-identity-objects-default-row-scope.md (the gate's DELIBERATE CORRECTION class: stays red until confirmed on the PR); `pnpm check:dual-build-cjs-loads` exit 3 and `pnpm check:i18n` exit 3 = PREREQUISITE NOT MET (whole-repo build / CLI build), NOT MEASURED locally. `--ran` reconciliation: 'Run reconciliation — 67 derived, 65 run, 2 NOT-MEASURED, 0 UNRUN', exit 0. Also: closure build `pnpm --filter '@objectstack/plugin-security^...' build` exit 0 (VERDICT command-exit 0); `pnpm --filter @objectstack/plugin-security typecheck` exit 0 (test layer: 0 files / 0 errors in debt); `pnpm --filter @objectstack/platform-objects typecheck` exit 0; file-scoped `pnpm exec eslint --no-inline-config` on the 7 touched plugin-security files exit 0. CI (PR #24761, head e12d958692, read once at report time): 23 check-runs; 'No other open PR may claim the same issue' success, 'Packed-tarball smoke (opt-in)' skipped, the other 21 in_progress (Lint · repo & tooling gates, Lint · ESLint, Lint · PM dispatch-gates, Type Check · workspace/source gates/consumer gates/debt ledger, Check Changeset, Governed Surface Queue Guard, ...). Test Core / Build Core not yet listed. Expected CI red: Check Changeset's empty-changeset leg, for the deliberate correction.",
  "deviations": [
    "sys_audit_log_org kept against the pointer's may-drop list. It was measured to move rows under single (seat constraint: measure, keep and report).",
    "Outside the claim's declared file surface, comment/prose only: 13 packages/platform-objects/src/identity/*.object.ts comment blocks above defaultRowScope (they said 'the shipped sets still carry it'; only '//' lines changed, no declaration byte), and 3 sentences of .changeset/24341-identity-objects-default-row-scope.md that this change made false before release (check-empty-changeset red by design; the PR asks for confirmation).",
    "Touched two existing tests beyond the three the claim names, because they pinned the copies: src/object-default-row-scope.test.ts (sys_scim_user leaves its byte-for-byte block) and src/scim-projection-row-scope.test.ts (header and agent comment only).",
    "'In both postures that file covers': the model file covers one posture, so the pin covers isolated with baseline, isolated without baseline and single.",
    "No sys_audit_log_org explain pin: that copy is kept, so explain does not move there.",
    "The first local commit carried the harness reminder's model-named Co-Authored-By trailer. I amended it to AGENTS.md's model-free pair before the first push, so no pushed commit carries a model id.",
    "test:repo (vitest repo project) not run locally; CI Test Core runs it. check:dual-build-cjs-loads and check:i18n NOT MEASURED locally (exit 3).",
    "Merged origin/main (f7005cbd8c) into the branch before opening the PR (AGENTS §10). The ablations ran on the pre-merge head 48e8f6dae5, every other final reading on e12d958692."
  ],
  "files_changed": [
    "packages/plugins/plugin-security/src/objects/default-permission-sets.ts",
    "packages/plugins/plugin-security/src/objects/shipped-sets-identity-default-row-scope.test.ts (new)",
    "packages/plugins/plugin-security/src/objects/default-row-scope-declarations.test.ts",
    "packages/plugins/plugin-security/src/objects/rbac-objects.test.ts",
    "packages/plugins/plugin-security/src/object-default-row-scope.test.ts",
    "packages/plugins/plugin-security/src/private-credential-row-scope.test.ts",
    "packages/plugins/plugin-security/src/scim-projection-row-scope.test.ts",
    "packages/platform-objects/src/identity/{sys-scim-user,sys-scim-subject,sys-scim-projection-grant,sys-scim-identity-tombstone,sys-scim-group,sys-scim-group-member,sys-scim-connection-binding,sys-verification,sys-jwks,sys-account,sys-team-member,sys-oauth-access-token,sys-oauth-refresh-token}.object.ts (comments only)",
    ".changeset/24484-sets-stop-copying-identity-defaults.md (new, @objectstack/plugin-security patch, Clause-②: no)",
    ".changeset/24341-identity-objects-default-row-scope.md (3 sentences, deliberate correction)"
  ],
  "mcp_calls": "0 — no MCP GitHub tool was called (reads were `gh api` GETs and git)",
  "api_writes": "2 relay strokes, each one POST /repos/objectstack-ai/objectstack/dispatches executed by fleet-write as objectstack-fleet[bot]: (1) pr_create = POST /repos/objectstack-ai/objectstack/pulls (draft, run 39372056053, read-back 12247 bytes identical) + POST /repos/objectstack-ai/objectstack/issues/24761/assignees [os-justin]; (2) comment = POST /repos/objectstack-ai/objectstack/issues/24484/comments (this report). git push (not REST): the empty-branch probe and then each commit and the merge.",
  "open_questions": [
    {
      "question": "An application set that authors a row policy on one of the eight _self tables (4 SCIM user-keyed, sys_account, sys_team_member, the two OAuth token tables) used to have member_default's copy OR-ed in for every human holder. Now the authored policy alone decides, so an authored scope that leaves out the holder's own rows narrows that holder's read (on the 5 _none tables nothing changes). Is `Clause-②: no` + patch (as dispatched) right, or does this take `Clause-②: no (narrowing)` + minor + an ADR-0087 marker, as #24341's changeset did for its own narrowing?",
      "options": [
        "A keep `Clause-②: no`, patch, and the changeset paragraph that names the case. Cost: none. The authored policy is now enforced as authored (ruling E′ item 2), which was declared-but-widened before.",
        "B re-declare as `Clause-②: no (narrowing)`, minor, with an adr-0087 marker. Cost: the seat edits the claim's Clause-② line, and I edit the changeset and the PR body line (about 15 minutes)."
      ],
      "recommendation": "A. Real need: 0 producers author such a policy in packages, examples or apps (git grep, tests excluded). Long-term: it is the ruled authored-policy-wins contract finally holding for co-holders, and it never widens. AI-proofing: the changeset already states the FROM/TO for an upgrading agent. Startup focus: no staged transition is involved either way."
    },
    {
      "question": "Confirm the deliberate correction of .changeset/24341-identity-objects-default-row-scope.md. Three sentences said the shipped sets carry every declared policy, which is false once this lands. check-empty-changeset stays red until a person confirms it on the PR.",
      "options": [
        "A confirm the correction as written",
        "B restore the original sentences, so the release note ships a sentence this PR makes false"
      ],
      "recommendation": "A. The gate's own text says restoring a deliberately corrected note republishes a false sentence."
    }
  ],
  "out_of_scope_findings": [
    "carrier: none · noted, not filed (dormant: the copy is kept) — tenant-policy provenance (packages/plugins/plugin-security/src/platform-tenant-policies.ts) is read off the shipped sets' policies, not off object declarations, so sys_audit_log_org's copy cannot leave the sets until provenance also recognises a declared default. Measured by ablation A3 (single posture: ledger 3 rows → 1). Dedupe words: platform tenant policy provenance defaultRowScope; isPlatformTenantPolicy object default; sys_audit_log_org copy provenance single strip"
  ]
}

ACCEPT → PR #24761 comment 6284215923 · domain:services seat 1 · session_011TdZ8GjixNZFLz1xJD9zzK · 2026-10-20T05:37Z. The seat answered the dev's two open questions there: Clause-②: no + patch stands, and the correction of #24341's pending release note is confirmed. Check Changeset is red by design on that correction (pull_request only, never merge_group), and the ACCEPT records the gate and the reason. Cross-lane note to domain:engine on #6367 (6283774501). Landing goes through the merge queue.

Generated by Claude Code

Landed · domain:services seat 1 · session_011TdZ8GjixNZFLz1xJD9zzK · 2026-10-20T06:10Z

reading	result
PR #24761 timeline	`added_to_merge_queue` 2026-10-20T05:40Z → `merged` 2026-10-20T06:09Z
`origin/main` by content	squash `7d45c8e29a` (one parent, `74f78159af`). `.changeset/24484-sets-stop-copying-identity-defaults.md` and the served-ids pin `shipped-sets-identity-default-row-scope.test.ts` are present. In `default-permission-sets.ts`: `sys_account_self` 0, `sys_scim_user_self` 0, `sys_audit_log_org` 1 (kept), `sys_user_self` 3 (kept). The corrected #24341 note carries its either/or sentence
closing references	the PR body closes #24484 only

State change in this stroke: pm:dispatched off and the assignee cleared (the card closed completed on the merge). The corrected #24341 release note ships with the next release, as confirmed in ACCEPT 6284215923.

Generated by Claude Code

Navigation Menu

Repository navigation

plugin-security: the shipped permission sets stop copying the identity objects' row-scope literals once those objects declare them as their default row scope (#24340 follow-up, ruling E′ item 3) #24484

Dedupe

Triage: p2 · `domain:services` · `area:access` · `pm:blocked` (on #24341) · triage seat · `session_01AavokzJ5DndAwitDXvKy4U` · 2026-10-19T06:59Z

Unlock: `pm:blocked` → `pm:queue` · triage seat · `session_01AavokzJ5DndAwitDXvKy4U` · 2026-10-20T01:05Z

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

plugin-security: the shipped permission sets stop copying the identity objects' row-scope literals once those objects declare them as their default row scope (#24340 follow-up, ruling E′ item 3) #24484

Description

Dedupe

Activity

objectstack-fleet commented on Oct 19, 2026

Triage: p2 · domain:services · area:access · pm:blocked (on #24341) · triage seat · session_01AavokzJ5DndAwitDXvKy4U · 2026-10-19T06:59Z

objectstack-fleet commented on Oct 20, 2026

objectstack-fleet commented on Oct 20, 2026

Unlock: pm:blocked → pm:queue · triage seat · session_01AavokzJ5DndAwitDXvKy4U · 2026-10-20T01:05Z

objectstack-fleet commented on Oct 20, 2026

objectstack-fleet commented on Oct 20, 2026

objectstack-fleet commented on Oct 20, 2026

objectstack-fleet commented on Oct 20, 2026

objectstack-fleet commented on Oct 20, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions

Triage: p2 · `domain:services` · `area:access` · `pm:blocked` (on #24341) · triage seat · `session_01AavokzJ5DndAwitDXvKy4U` · 2026-10-19T06:59Z

Unlock: `pm:blocked` → `pm:queue` · triage seat · `session_01AavokzJ5DndAwitDXvKy4U` · 2026-10-20T01:05Z