fix(spec): the D3 filter-rule-array entry states the per-door refusal and the TODO listing

Claude-Session: https://claude.ai/code/session_01CiCTczDo7tGhafXjf61dUJ
Co-authored-by: Claude <noreply@anthropic.com>

Author: claude

packages/metadata-protocol/src/protocol.stored-migration.test.ts

@@ -767,7 +767,11 @@ describe('migrateStoredMetadata — a site the chain leaves as stored is a TODO,
             grid({ stage: 'open' }),
             { type: 'object-kanban', dataSource: { object: 'deal', filter: COMBINATOR }, properties: { objectName: 'deal' } },
         ]);
-        const { engine, tables } = makeStubEngine([mixedPage, bindingMixed]);
+        // The third door: `defaultFilters` on the grid, the same open bag.
+        const defaultsMixed = pageRow('deal_grid', [
+            { type: 'object-grid', properties: { objectName: 'deal', filter: { stage: 'open' }, defaultFilters: COMBINATOR } },
+        ]);
+        const { engine, tables } = makeStubEngine([mixedPage, bindingMixed, defaultsMixed]);
         const protocol = new ObjectStackProtocolImplementation(engine);
 
         const report = await protocol.migrateStoredMetadata({ apply: true });
@@ -778,6 +782,11 @@ describe('migrateStoredMetadata — a site the chain leaves as stored is a TODO,
         const binding = report.rows.find((r) => r.name === 'deal_room')!;
         expect(binding.outcome).toBe('failed');
         expect(binding.todos.map((t) => t.path)).toEqual(['pages[0].regions[0].components[1].dataSource.filter']);
+        const defaults = report.rows.find((r) => r.name === 'deal_grid')!;
+        expect(defaults.outcome).toBe('rewritten');
+        expect(defaults.todos.map((t) => t.path)).toEqual(['pages[0].regions[0].components[0].properties.defaultFilters']);
+        const storedDefaults = JSON.parse(metaRows(tables).find((r) => r.name === 'deal_grid')!.metadata);
+        expect(storedDefaults.regions[0].components[0].properties.defaultFilters).toEqual(COMBINATOR);
 
         // The rewritten row persisted its lossless half; the combinator is byte-identical.
         const stored = JSON.parse(metaRows(tables).find((r) => r.name === 'deal_desk')!.metadata);

packages/spec/src/migrations/entries/semantic/18.element-data-source-and-object-block-filter-rule-array.ts

@@ -76,10 +76,14 @@ export const entry: SemanticMigration = {
     + 'their own rows in an in-memory data source that reads the record form and excludes '
     + 'EVERY row for a rule array, so a rewrite there would empty the block. Such a row keeps loading unchanged '
     + '(`applyConversionsToStoredItem` replays the chain without validating, by its own '
-    + 'contract) and is refused at the `filter` door on its next save — for a combinator '
-    + 'record, a refusal that names the combinator and says why no rule spells it. '
-    + '`os migrate meta --stored` does not list these rows yet: a row the conversion leaves '
-    + 'as stored reports there as already on protocol.',
+    + 'contract), and its `filter` door refuses the form: at `dataSource.filter` on the page\'s '
+    + 'next save; at a block\'s `properties.filter` — like `properties.defaultFilters`, a key of '
+    + 'the open `properties` bag — only as the component-props gate\'s advisory finding '
+    + '(`os validate`), since a re-save through the metadata API is not refused there. For a '
+    + 'combinator record that refusal names the combinator and says why no rule spells it. '
+    + '`os migrate meta --stored` lists each filter left as stored as a TODO under its row, '
+    + 'naming the block and what blocks the rewrite; a row whose only finding is such a TODO is '
+    + 'reported `skipped`, and the run\'s exit code does not change for it.',
   acceptanceCriteria:
     '`ElementDataSourceSchema.safeParse({ object, filter: [{ field: \'status\', operator: '
     + '\'equals\', value: \'active\' }] })` succeeds and the parsed `filter` is the same rule '