feat(security): the guest's grants channel, with a share-links-only row scope (ADR-0138 E1, ruling C) by objectstack-fleet[bot] · Pull Request #23321 · objectstack-ai/objectstack

wip(security): the guest's grants channel — the guest entry resolves D4's organization, then the guest anchor's bindings (ADR-0138 E1)

claude

committed

096bdac

test(dogfood): E1's door readings — the member control reads everyone's binding, the form door keeps its own answer, the anchor's definition is sealed at the metadata door

claude

committed

fd286d6

wip(security): E1 hand-off — released to another seat; implementation, unit pins and dogfood pins in place, PR not opened

claude

committed

a4fc6b6

Merge origin/main into claude/issue-23224-guest-grants-channel

claude

committed

efa75b5

test(dogfood): the guest's row-scope pin names its pending ruling

claude

committed

df4be9b

Merge origin/main into claude/issue-23224-guest-grants-channel

claude

committed

2c9e251

fix(plugin-sharing): the guest never takes the OWD branch of the read filter — share links only (ADR-0138 D3 item 6, ruling C)

claude

committed

2d69ebd

test(dogfood): E1's row reads assert the answer's shape, and the admin control reads the data door's own shape

claude

committed

02caf8a

chore(changeset): E1's changeset states ruling C's row scope and names plugin-sharing

claude

committed

a001a38

fix(plugin-security): the guest organization refusal reads no system elevation of its own; the engine-double ledger records its unit file's pinned findOne

claude

committed

5283490

test(core,dogfood): E1's doubles refuse what they do not implement, and its slots are typed

claude

committed

1d394b8

Navigation Menu

Repository navigation

feat(security): the guest's grants channel, with a share-links-only row scope (ADR-0138 E1, ruling C) - #23321

feat(security): the guest's grants channel, with a share-links-only row scope (ADR-0138 E1, ruling C)#23321
objectstack-fleet[bot] merged 11 commits into
mainfrom
claude/issue-23224-guest-grants-channel

Commits on Oct 13, 2026

wip(security): the guest's grants channel — the guest entry resolves D4's organization, then the guest anchor's bindings (ADR-0138 E1)

test(dogfood): E1's door readings — the member control reads everyone's binding, the form door keeps its own answer, the anchor's definition is sealed at the metadata door

wip(security): E1 hand-off — released to another seat; implementation, unit pins and dogfood pins in place, PR not opened

Merge origin/main into claude/issue-23224-guest-grants-channel

test(dogfood): the guest's row-scope pin names its pending ruling

Merge origin/main into claude/issue-23224-guest-grants-channel

fix(plugin-sharing): the guest never takes the OWD branch of the read filter — share links only (ADR-0138 D3 item 6, ruling C)

test(dogfood): E1's row reads assert the answer's shape, and the admin control reads the data door's own shape

chore(changeset): E1's changeset states ruling C's row scope and names plugin-sharing

fix(plugin-security): the guest organization refusal reads no system elevation of its own; the engine-double ledger records its unit file's pinned findOne

test(core,dogfood): E1's doubles refuse what they do not implement, and its slots are typed