docs(adr-0131): D14 scope note — the 18.0 sprint, 18.0 databases on the 18.x path, the walled refusal on the os boot path only (#24507)

Part of #15214
Clause-②: no — ADR dated note

**Governed surface, Tier H (`docs/adr/**`): the maintainer merges this
PR.** It holds one file only, so that the docs PR on
`claude/issue-15214-c11-fresh-install-docs` is not held by it.

## What changes

`docs/adr/0131-total-organization-ownership-no-null-organization-id.md`
gains one dated note under D14. It sits right after the release-scope
note #24422 added, and changes no decision. It records:

1. **The 18.0 sprint**, ruling record 6259899486 on #15194, with the
maintainer's words quoted verbatim: 「不需要压缩到 3000内，你推送给我我会尽快审批」「并发上限
可以放宽」「按照你的建议继续」. In 18.0, 8b lifts the system-insert exemption under
`single` only. Under a walled posture the exemption stands in 18.0, and
the walled half lands in 18.x.
2. **A database an 18.0 install creates takes the same 18.x upgrade path
as a v17 one.** This comes from ruling record 6259698357 item 3.
3. **Where the walled refusal stands.** It covers the `os` boot path
only: `os serve`, and through it `os dev` and `os start`. Two kinds of
boot are not refused: the one-shot `os` kernel boots (the `os migrate`
family, `os verify`, `os secret`, `os storage`) and embedded hosts
(`createStandaloneStack`, `@objectstack/adapter-hono`). Neither is a
supported walled deployment in 18.0. Contract review 6261404044 on
#15212, ① (b) and ③ open question 1, asked for this to go into the D14
note.
4. **C11 is off the release gate**, ruling record 6261853191, quoted
verbatim: 「文档可以延后」「或者并行处理，不要影响我发版本」.

+14 lines, one file. No build, test or code change. The docs half of the
card is on its own PR.

## Gates

`node scripts/pm/dispatch-gates.mjs --commands --repo
objectstack-ai/objectstack` on this branch named 19 families, plus 55
roster commands on stderr. All 74 were run, exit codes recorded before
any pipe.
- `--ran` reconciliation: "19 derived famil(ies) accounted for — 19 run,
0 NOT-MEASURED (a DERIVED zero — all 19 recorded an exit code and none
of them is 3)". `check:doc-formula-expressions` is counted at exit 0
from its rerun after building `@objectstack/lint`; its first run
answered exit 3 for the missing build.
- Among them, `check:adr-links`, `check:adr-symbol-anchors`,
`check:adr-anchors`, `check:doc-authoring` and `check:pm-prior-rulings`
exit 0.
- Two roster gates read built package output in a worktree with no
builds and answered `PREREQUISITE NOT MET`: `check:dts-closure` and
`check:published-readme-exports`. They are NOT MEASURED here; CI runs
them.
- Four roster gates need a PR or workflow context:
`check-closing-target-claim`, `check-single-claim-paths`,
`check-governed-queue-guard`, and `check-partof-closing-keyword`. The
last was run locally with this body as `PR_BODY` and exits 0.

## 维护者速读(草稿)

- **改了什么**：ADR-0131 的 D14 下加了一段带日期的说明，记录 18.0 冲刺的范围：8b 在 18.0 只在
`single` 下取消豁免；18.0 建的库和 v17 库一样，走 18.x 的升级路径；walled 拒启只拦 `os serve` /
`os dev` / `os start`，一次性的 `os` 命令和嵌入式宿主不拦，但它们在 18.0 也不算受支持的 walled
部署；C11 不卡发版。
- **为什么改**：这几条裁决(6259899486、6261853191)和合同评审 6261404044 要求把范围写进
D14，免得以后读 ADR 的人以为 18.0 拦住了所有 walled 启动。
- **风险与代价(含回滚)**：只是文档说明，不改任何决定，也不改代码。回滚就是 revert 这一个提交。
- **席位意见**：
- **你要做的**：审阅这段说明，没问题就合并(这是 Tier H 治理面，需要你亲手合)。

---
_Generated by [Claude
Code](https://claude.ai/code/session_01L9ZWcgyzEyyKR2nnDzto54)_

Co-authored-by: Claude <noreply@anthropic.com>

Author: objectstack-fleet[bot]

docs/adr/0131-total-organization-ownership-no-null-organization-id.md

@@ -835,6 +835,20 @@ note sits beside them.
    - 8d, `COALESCE` and `__global__`;
    - 8e, the NOT NULL constraint.
 
+**Scope note (2026-10-19, ruling records `6259899486` and `6261853191` on #15194).** ⛔ It changes no
+decision of this record and sits beside the release-scope note above.
+
+1. **The sprint** (record `6259899486`; 「不需要压缩到 3000内，你推送给我我会尽快审批」「并发上限 可以放宽」
+   「按照你的建议继续」). Stage 8b lifts the system-insert exemption under `single` only in 18.0. Under a
+   walled posture the exemption stands in 18.0, and the walled half lands in 18.x.
+2. **Databases.** A database an 18.0 install creates takes the same 18.x upgrade path as a v17 one.
+3. **Where the walled refusal stands.** It covers the `os` boot path only: `os serve`, and through it
+   `os dev` and `os start`. The one-shot `os` kernel boots (the `os migrate` family, `os verify`,
+   `os secret`, `os storage`) and embedded hosts (`createStandaloneStack`, `@objectstack/adapter-hono`)
+   are not refused, and none of them is a supported walled deployment in 18.0.
+4. **Docs are off the release gate** (record `6261853191`; 「文档可以延后」「或者并行处理，不要影响我发版本」).
+   C11 (#15214) runs in parallel to 18.0 and never holds it.
+
 ---
 
 ## 3. Non-goals