feat(plugin-audit): the parent-record read gates write one ReadableIds leaf per parent object, with no pre-scan; D5's three classes keep the bounded probe (ADR-0139 E5) by objectstack-fleet[bot] · Pull Request #23693 · objectstack-ai/objectstack

wip(plugin-audit): the parent-record read gates emit one ReadableIds leaf per parent object; D5's classes keep the probe

claude

committed

b9920fa

wip(plugin-audit): the gate tests pin the leaf path, D5's routing and the no-catch consumers; the stand-in security doubles answer both read halves

claude

committed

a367e0c

test(plugin-audit): the leaf path through a real engine and SQL driver — past the window, a true total, D5's classes on the probe, a refusing driver's read fails

claude

committed

fff15af

fix(plugin-audit): a leaf needs the object-level admission — without canReadObject the whole read is the bounded probe

claude

committed

9e2ebf7

test(dogfood): a ledger non-holder's broad read is exactly the rows about the record it can open, newest first past the old window included

claude

committed

6cb81f3

test(plugin-audit): without canReadObject the withheld-update rule still withholds — the gate writes no leaf for its SYSTEM re-read

claude

committed

8b14e78

test(dogfood): the non-holder's newest-first ledger page carries the rows about a record the old pre-scan window never reached

claude

committed

6d17168

chore(changeset): plugin-audit minor — the parent-record read gates switch to the ReadableIds leaf

claude

committed

601e148

Merge remote-tracking branch 'origin/main' into claude/issue-23673-parent-gate-readable-ids

claude

committed

a2be496

test(plugin-audit): type the gate WHERE the leaf-path case reads

claude

committed

0123e55

test(plugin-audit): the classifying engine doubles override the comment-gate double; the refusing driver keeps only the reads the suite drives

claude

committed

3ecca94

Navigation Menu

Repository navigation

feat(plugin-audit): the parent-record read gates write one ReadableIds leaf per parent object, with no pre-scan; D5's three classes keep the bounded probe (ADR-0139 E5) - #23693

feat(plugin-audit): the parent-record read gates write one ReadableIds leaf per parent object, with no pre-scan; D5's three classes keep the bounded probe (ADR-0139 E5)#23693
objectstack-fleet[bot] merged 11 commits into
mainfrom
claude/issue-23673-parent-gate-readable-ids

Commits on Oct 15, 2026

wip(plugin-audit): the parent-record read gates emit one ReadableIds leaf per parent object; D5's classes keep the probe

wip(plugin-audit): the gate tests pin the leaf path, D5's routing and the no-catch consumers; the stand-in security doubles answer both read halves

test(plugin-audit): the leaf path through a real engine and SQL driver — past the window, a true total, D5's classes on the probe, a refusing driver's read fails

fix(plugin-audit): a leaf needs the object-level admission — without canReadObject the whole read is the bounded probe

test(dogfood): a ledger non-holder's broad read is exactly the rows about the record it can open, newest first past the old window included

test(plugin-audit): without canReadObject the withheld-update rule still withholds — the gate writes no leaf for its SYSTEM re-read

test(dogfood): the non-holder's newest-first ledger page carries the rows about a record the old pre-scan window never reached

chore(changeset): plugin-audit minor — the parent-record read gates switch to the ReadableIds leaf

Merge remote-tracking branch 'origin/main' into claude/issue-23673-parent-gate-readable-ids

test(plugin-audit): type the gate WHERE the leaf-path case reads

test(plugin-audit): the classifying engine doubles override the comment-gate double; the refusing driver keeps only the reads the suite drives