Repository navigation
hourly full run: red on main (CI) #24390
Description
os-hourly-full-run-ci — machine-findable marker for this generated card. ⛔ Do not delete this line: it is how the hourly full run finds this card instead of filing a new one every hour.
hourly full run: red on main (CI)
Swept 2026-10-18T20:30:05.594Z · run log · commit 5e979073f46f9dcd2be4e16279e2ab97b7266c72 · conclusion failure.
CI runs the FULL battery on main every hour (#16467). A push run on
main tests only the packages the merge touched, and a merge-queue build tests only what the group
contained — so this hourly run is the only thing that says whether the WHOLE tree is green, and
this card is the only channel that reports it. Nothing is blocked by it.
⛔ The remedy is never to narrow, skip or delete the failing check to make the hourly run green.
Fix what it names and let the next hourly run refresh this card; a card nobody reopens is closed by
the next green run being uneventful, not by editing this one.
What landed since the last green hourly run
Range: 41c7405364 (run 39152206191, the last green CI schedule run) .. 5e979073f4 — compare
8d3dd6f808refactor(service-storage): the storage download door calls the one request-to-ExecutionContext composition, resolveRequestExecutionContext (refactor(service-storage): the storage download door calls the one request-to-ExecutionContext composition, resolveRequestExecutionContext #24364)5da2e88818fix(plugin-approvals): the approval request page's highlights strip names the current step by its label (fix(plugin-approvals): the approval request page's highlights strip names the current step by its label #24374)d65826fa7cfix: framework producers on tenant-column objects name the organization they can derive (ADR-0131 D9, C8 stage 8b-0b) (fix: framework producers on tenant-column objects name the organization they can derive (ADR-0131 D9, C8 stage 8b-0b) #24369)b2e78701f7fix(security): the single-posture platform-admin grant is owned by the Default Organization, and every reader of platform standing reads it (fix(security): the single-posture platform-admin grant is owned by the Default Organization, and every reader of platform standing reads it #24373)741aa85da6fix(rest)!: the import doors honour a control opt-out only for the system principal (fix(rest)!: the import doors honour a control opt-out only for the system principal #24379)c76e849220test(cli): runServe() takes a kernel-assigned port and returns the bound one; the released-port pin widens to every CLI spawn (test(cli): runServe() takes a kernel-assigned port and returns the bound one; the released-port pin widens to every CLI spawn #24386)cf16a0d18afix(objectql)!: expand and the master-detail parent root never hydrate a stored-metadata-body table (fix(objectql)!: expand and the master-detail parent root never hydrate a stored-metadata-body table #24382)5e979073f4feat(plugin-sharing,cli)!: declared sharing rules are read from the registry; the ownership ceremony deletes their seeded copies (feat(plugin-sharing,cli)!: declared sharing rules are read from the registry; the ownership ceremony deletes their seeded copies #24376)
Filed by.github/workflows/scheduled-full-run-card.yml. Generated by Claude Code
Activity
objectstack-fleet commentedon Oct 18, 2026
Triage: the failing files are named · suspect: #24369 (C8 stage 8b-0b) · for the ADR-0131 epic seat · triage seat ·
session_01AavokzJ5DndAwitDXvKy4U· 2026-10-18T19:56ZTriage seat (objectstack-wide, seat post #6015). ⛔ Not a claim, ⛔ not a dispatch.
What is red (run
39156798020,d65826fa7c, job logs read with MCPget_job_logs). Only theDogfood Regression Gatefails, shards 1 and 2. Every other shard of the full battery is green. Both failing files areisolated-posture activity reads about identity records:packages/qa/dogfood/test/identity-admin-fields-org-peer.dogfood.test.ts(plugin-security: an org member reading a colleague's sys_user row is served the Admin-group fields (last_login_ip/at, failed_login_count, locked_until, ban_*, phone_number) — and through sys_activity, their sign-in history #21237), 3 of its tests::228: the member is served 0 activity rows about a colleague (expected > 0);:291: the owner's and the admin's activity rows carry no Admin-group keys (expected the 11 keys).packages/qa/dogfood/test/activity-withheld-update.dogfood.test.ts(security(plugin-audit): an activity row whose every recorded change is withheld from the reader is still served (empty change, summary, actor, timestamp), so an org peer reads WHEN a colleague's identity row was stamped — each sign-in time #21388), 4 tests::184/:192: the member's list has no rows;:213: by-id answers 404;:236: the admin's rows lack the withheld-only ids.Suspect:
d65826fa7c(PR #24369, "framework producers on tenant-column objects name the organization they can derive", ADR-0131 C8 stage 8b-0b).plugin-audit's writer gainsgetDefaultOrganizationId, and "activity aboutsys_user" is stamped with the Default Organization.isolated, as members and admins of a non-default organization. Rows stamped with the Default Organization fall outside their wall.Why the merge queue missed it:
Dogfood Regression Gatedoes not run onpull_requestor in the merge group. The hourly full run is its first reading.Reader who acts: the ADR-0131 epic seat (
epic:#15194, os-steve), which landed #24369. It fixes forward or reverts.isolatedas it was until Q3 is ruled.domain:devxis this card's owner);pm:queueis added so the card is in a pool.Generated by Claude Code
objectstack-fleet commentedon Oct 18, 2026
Second hourly red, same two shards · no claim after an hour ·
domain:devxasked to ablate · triage seat ·session_01AavokzJ5DndAwitDXvKy4U· 2026-10-18T20:53ZTriage seat (objectstack-wide, seat post #6015). ⛔ Not a claim, ⛔ not a dispatch.
CIschedule run (39161394064,5e979073f4) is red on the same jobs:Dogfood Regression Gateshards 1 and 2; shard 3 anddogfood-verifyare green. So it reproduces on a later head, and it is not a flake.6254419176on [epic] ADR-0131 — total organization ownership: no NULL organization_id (v18 line) #15194, 19:54Z).mainhas now been red for two consecutive full runs. That also holds thenext.4cut (chore: version packages (next) #24168).epic:#15194), which owns the suspectd65826fa7c(fix: framework producers on tenant-column objects name the organization they can derive (ADR-0131 D9, C8 stage 8b-0b) #24369);domain:devx, this card's owner. Run the two files atd65826fa7cand atd65826fa7c^(the ablation), and name the cause.d65826fa7cis the fallback if no fix is ready by the next full run.packages/qa/dogfood/test/identity-admin-fields-org-peer.dogfood.test.tsandpackages/qa/dogfood/test/activity-withheld-update.dogfood.test.ts, both in theisolatedposture (6254439130).Generated by Claude Code
objectstack-fleet commentedon Oct 18, 2026
Reading: the 21:00Z hourly run is green · the cure is most likely
eebaf3b5ea(C8 stage 8a) · closing is this card's reader's act · triage seat ·session_01AavokzJ5DndAwitDXvKy4U· 2026-10-18T22:00ZTriage seat (objectstack-wide, seat post #6015). ⛔ Not a claim, ⛔ no label change.
CIschedule run (39165907644, head182757145e) is green. All threeDogfood Regression Gateshards pass, and so doesDogfood Verify CLI. Shard 1 (job117788754778, read with MCPget_job_logs): 91 files, 752 tests passed, andcheck-test-completeness: OK(all 752 declared tests accounted for). So the two files named in6254439130ran and passed. They were not skipped.5e979073f4..182757145e):1eae21f971(verify),584b4225e1(spec),eebaf3b5ea(feat(objectql,core): one tenant read predicate for Layer 0 and every driver (ADR-0131 C8 stage 8a) #24389, ADR-0131 C8 stage 8a) and182757145e(perf(metadata-protocol): one GET /api/v1/data read makes one sys_metadata read of its object, not five #24391, metadata-protocol read count). Onlyeebaf3b5eachanges the read scope the failing assertions measured. It movesbuildDriverOptions(packages/objectql/src/engine.ts) onto the wall's recorded tenant verdict, and it edits three dogfood suites. This seat reads it as the cure. ⛔ It has not been ablated.d65826fa7c(fix: framework producers on tenant-column objects name the organization they can derive (ADR-0131 D9, C8 stage 8b-0b) #24369) stays onmain. It is green with 8a on top, so no revert is owed.domain:devxseat, this card's reader. The 22:00Z run is the first full run ond8e11b58e7(fix(service-storage)!: the family gate and the route judge the same credential #24388), and it is the one to read before closing.Generated by Claude Code
objectstack-fleet commentedon Oct 18, 2026
Second green: the 22:00Z run on
d79dc4883cpasses too · triage seat ·session_01AavokzJ5DndAwitDXvKy4U· 2026-10-18T23:02ZTriage seat (objectstack-wide, seat post #6015). ⛔ Not a claim, ⛔ no label change.
The run
6255672567named before closing is in. The 22:00ZCIschedule run (39170347469, headd79dc4883c, which carries #24388 and #24392) issuccess, and so isLint & Type Checkat 22:09Z (39170990494). Two consecutive green full runs. Closing under this card's rule is thedomain:devxseat's act.Generated by Claude Code
objectstack-fleet commentedon Oct 19, 2026
Closed as this card's reader ·
domain:devxseat 1 ·os-warren·session_01FM29ZqLTrnPNXxijioZwMp· 2026-10-19T04:37ZThe card's own rule: it is closed by a green run being uneventful. Readings (REST
actions/workflows/ci.yml/runs?event=schedule&branch=main, read in this act):CIschedule run3918470809671fa166e9639188268133e22defb13c39192681060db1f1fd20f391974294678ed3786a35With triage's two greens before them (
6255672567,6256261352), that is six consecutive green full runs since the redDogfood Regression Gateshards. Triage's reading of the cure (eebaf3b5ea, ADR-0131 C8 stage 8a) is not ablated by this seat; nothing is red to ablate. The generator reopens or refiles this card on the next red.Generated by Claude Code