@@ -132,16 +132,15 @@ See [ADR-0005](https://github.com/objectstack-ai/objectstack/blob/main/docs/adr/
 
 ### Packaged flows, actions and permission sets (ADR-0126)
 
-`flow`, `action` and `permission` are behavioral types, in Regime C of [ADR-0126](https://github.com/objectstack-ai/objectstack/blob/main/docs/adr/0126-packaged-metadata-customization-model.md), and `position` is pre-charted there ([ADR-0131](https://github.com/objectstack-ai/objectstack/blob/main/docs/adr/0131-total-organization-ownership-no-null-organization-id.md) D6). A packaged item of one of these types is locked against in-place edits (and, for a flow or an action, against removal). The refusal names the type's sanctioned path, not a redeploy or `OS_METADATA_WRITABLE`, and each type names only the routes it has:
+`flow`, `action` and `permission` are behavioral types, in Regime C of [ADR-0126](https://github.com/objectstack-ai/objectstack/blob/main/docs/adr/0126-packaged-metadata-customization-model.md). A packaged item of one of these types is locked against in-place edits (and, for a flow or an action, against removal). The refusal names the type's sanctioned path, not a redeploy or `OS_METADATA_WRITABLE`, and each type names only the routes it has:
 
 | Type | Sanctioned path the refusal names |
 | :--- | :--- |
 | `flow` | Clone it under a new name (`POST /api/v1/automation/:name/clone`, body `{name, label}`), or switch it off (`POST /api/v1/automation/:name/toggle`, body `{enabled: false}`). A flow that holds a credential (an inbound hook's `secret`, an `http` node's `signingSecret`) is not cloned in one step: the clone door refuses it with `409`, because a copy would share the secret, and the copy is authored as a new flow with its own. |
 | `action` | Switch it off (`POST /api/v1/actions/_activation/:object/:action`, body `{enabled: false}`; `:object` is `global` for an object-less action). No clone is offered. |
 | `permission` | Clone it under a new name: the "Clone" action on the permission set, or `POST /api/v1/data/sys_permission_set` with a new name. |
-| `position` | Switch it off (`POST /api/v1/security/_activation/position/:name`, body `{enabled: false}`). No clone is offered. The audience anchors `everyone` and `guest` are not switchable, so their refusal names no switch. |
 
-A permission set also has a switch, outside the refusal: `POST /api/v1/security/_activation/permission/:name`, body `{enabled: false}`, switches it off for the deployment. The refusal does not name it.
+A permission set and a position also have a switch, outside the refusal: `POST /api/v1/security/_activation/:type/:name` (`:type` = `permission` or `position`), body `{enabled: false}`, switches one off for the deployment. The refusal does not name it: a packaged position's refusal keeps the managed seal's edit remedy. The audience anchors `everyone` and `guest` are not switchable.
 
 The switches are operator-only where one install serves several organizations. The refusal names the same path whichever layer answers it: `403 NOT_OVERRIDABLE` for a write that names no base, and `403 ITEM_LOCKED` for one that names the read-only package. Which writes are refused, and with which code, is unchanged.
 
 
@@ -57,19 +57,11 @@
  *    (`packaged-permission-set-lock.ts`), so one condition reads one way at
  *    every door.
  *
- *  - `position` — the switch only (pre-charted on the regime, ADR-0131 D6):
- *    `POST /security/_activation/position/:name`, body `{ enabled }`, the
- *    security catalog's activation door. ⛔ No clone: a position has no clone
- *    door. Without this row a packaged position's refusal read the generic
- *    managed seal ("edit the source artifact and redeploy") and never named the
- *    switch that exists. The two audience anchors (`everyone`, `guest`) are
- *    the row's `notFor`: the door refuses them, so they keep the generic seal.
- *
- * Every switch route is gated by the ONE §5 write-authority gate
- * (`packages/runtime/src/domains/activation-gate.ts`), so each carries the same
+ * Both switch routes are gated by the ONE §5 write-authority gate
+ * (`packages/runtime/src/domains/activation-gate.ts`), so both carry the same
  * operator-only clause. Still absent: ADR-0126 §3's pre-charted `tool` /
- * `skill` — no sanctioned path is built for them, and a row with no route does
- * not compile ({@link PackagedBaseRegimeCRoutes}).
+ * `skill` / `position` — no sanctioned path is built for them, and a row with no
+ * route does not compile ({@link PackagedBaseRegimeCRoutes}).
  *
  * ## The one origin-gated row
  *
@@ -139,7 +131,6 @@
  */
 
 import { PLURAL_TO_SINGULAR } from '@objectstack/spec/shared';
-import { AUDIENCE_ANCHOR_POSITIONS } from '@objectstack/spec/identity';
 
 /**
  * An ADR-0126 customization regime a packaged-base refusal speaks for — only the
@@ -164,17 +155,7 @@ export type PackagedBaseRegimeCRoutes =
  * type's sanctioned routes, or an origin-gated type's owning source.
  */
 export type PackagedBaseRegimeRow =
-    | {
-        readonly regime: 'C';
-        readonly routes: PackagedBaseRegimeCRoutes;
-        /**
-         * Names the row does NOT speak for, each with why. A name listed here
-         * reads the generic managed seal ({@link managedItemSealedSentence}'s
-         * own sentence) instead of the row's routes, because those routes refuse
-         * it — a refusal must never name a path that refuses the caller too.
-         */
-        readonly notFor?: Readonly<Record<string, string>>;
-    }
+    | { readonly regime: 'C'; readonly routes: PackagedBaseRegimeCRoutes }
     | {
         readonly regime: 'origin-gated';
         /** The type's noun, opening the sentence the way the type's own admin door opens it. */
@@ -217,20 +198,6 @@ export const PACKAGED_BASE_REGIME: Readonly<Record<string, PackagedBaseRegimeRow
                 + 'or POST /api/v1/data/sys_permission_set with a new name',
         },
     },
-    position: {
-        regime: 'C',
-        routes: {
-            switchOff: 'POST /api/v1/security/_activation/position/:name, body {enabled: false}; '
-                + 'operator-only where one install serves several organizations',
-        },
-        // The activation door refuses the two audience anchors (ADR-0090 D5/D9),
-        // so their refusal must not name it: switching one off would remove the
-        // authenticated or anonymous baseline of every principal in one write.
-        notFor: Object.fromEntries(AUDIENCE_ANCHOR_POSITIONS.map((anchor) => [
-            anchor,
-            'an audience anchor: the activation door refuses it, so the switch is not its remedy',
-        ])),
-    },
     datasource: {
         regime: 'origin-gated',
         noun: 'Datasource',
@@ -340,7 +307,7 @@ export function isOriginGatedType(type: string): boolean {
  * Kept under the REST door's 500-character client-message bound
  * (`truncateClientMessage`, `packages/rest/src/error-response.ts`), past which
  * the tail is truncated. Characters outside the item's name, save / removal:
- * `flow` 395 / 388, `action` 349 / 342, `permission` 301 / 294, `position` 307 / 300,
+ * `flow` 395 / 388, `action` 349 / 342, `permission` 301 / 294,
  * `datasource` 192 / 193 — so a name of up to 88 characters arrives whole for
  * every row (pinned). [#21944] A row's `hostOwned` name is a fixed, short name
  * with its own remedy (`default`: under 300 characters whole).
@@ -351,9 +318,6 @@ export function packagedBaseRegimeSentence(
     const singular = PLURAL_TO_SINGULAR[type] ?? type;
     const row = packagedBaseRegimeRow(singular);
     if (row === undefined) return undefined;
-    if (row.regime === 'C' && row.notFor !== undefined && Object.prototype.hasOwnProperty.call(row.notFor, name)) {
-        return undefined;
-    }
     const lock = row.regime === 'origin-gated'
         ? `${row.noun} '${name}' is code-defined and cannot be `
             + (operation === 'delete' ? 'removed' : 'edited') + ' at runtime: it is read-only. '
 
@@ -45,11 +45,6 @@ const ARTIFACTS = new Map<string, Map<string, unknown>>([
     ['page', new Map([['pkg_page', shipped('pkg_page')]])],
     ['action', new Map([['pkg_action', shipped('pkg_action')]])],
     ['permission', new Map([['pkg_perm', shipped('pkg_perm')]])],
-    ['position', new Map([
-        ['pkg_position', shipped('pkg_position')],
-        ['everyone', shipped('everyone')],
-        ['guest', shipped('guest')],
-    ])],
 ]);
 
 function protocolOn(environmentId: string | undefined): ObjectStackProtocolImplementation {
@@ -384,49 +379,13 @@ describe('packagedBaseRefusal — each Regime C type names its OWN sanctioned pa
         });
     }
 
-    for (const environmentId of [undefined, 'env_1']) {
-        it(`\`position\` — save names the security catalog's activation switch and no clone `
-            + `(${environmentId ? 'environment' : 'host-config'} kernel)`, () => {
-            // [ADR-0131 D6] Without its row a packaged position read the generic
-            // managed seal ("edit the source artifact and redeploy"), naming no switch.
-            const message = expectRegimeC(refusalOn(environmentId, 'position', 'pkg_position', 'save'), 'position', 'pkg_position', 'save');
-            expect(message).toBe(
-                `${LOCKED('position', 'pkg_position', 'save')} `
-                + 'Switch it off (POST /api/v1/security/_activation/position/:name, body {enabled: false}; '
-                + `${OPERATOR_ONLY}). See ${ADR_0126}.`,
-            );
-            expect(message.toLowerCase()).not.toContain('clone');
-        });
-    }
-
     it('`permission` removal stays the #6960 carve-out — the row adds no refusal where there was none', () => {
         // `permission` merges its overlay at read (`supportsOverlay: true`), so
         // removing its overlay row is repair, never refused on this ground.
         expect(refusal('permission', 'pkg_perm', 'delete')).toBeNull();
         expect(refusalOnHostConfig('permission', 'pkg_perm', 'delete')).toBeNull();
     });
 
-    it('`position` — an audience anchor keeps the generic managed seal: the switch refuses it, so it is not named', () => {
-        // The activation door refuses `everyone` and `guest` (the row's `notFor`).
-        for (const anchor of ['everyone', 'guest']) {
-            const r = refusal('position', anchor, 'save');
-            expect(shape(r), anchor).toEqual({ code: 'NOT_OVERRIDABLE', status: 403 });
-            expect(r.message, anchor).toBe(
-                `Metadata item 'position/${anchor}' is provided by a managed package and is sealed against in-place edits: `
-                + 'its type takes no environment overlay (allowOrgOverride=false), and OS_METADATA_WRITABLE does not open '
-                + 'a managed item. Edit the source artifact and redeploy. '
-                + 'See docs/adr/0131-total-organization-ownership-no-null-organization-id.md.',
-            );
-            expect(r.message, anchor).not.toContain('_activation');
-        }
-    });
-
-    it('`position` removal is the same #6960 carve-out — its row adds no refusal where there was none', () => {
-        // `position` merges its overlay at read (`supportsOverlay: true`), like `permission`.
-        expect(refusal('position', 'pkg_position', 'delete')).toBeNull();
-        expect(refusalOnHostConfig('position', 'pkg_position', 'delete')).toBeNull();
-    });
-
     it('the /meta doors throw the row\'s sentence for an action, on save and on removal (one emitter)', async () => {
         const p = protocolOn('env_1');
         const thrownBy = (run: Promise<unknown>) => run.then(() => undefined, (e: any) => e);
@@ -477,12 +436,11 @@ describe('packagedBaseRefusal — each Regime C type names its OWN sanctioned pa
         expect(longName).toHaveLength(88);
         const registry = {
             getArtifactItem: (type: string, name: string) =>
-                (['flow', 'action', 'permission', 'position'].includes(type) && name === longName ? shipped(name) : undefined),
+                (['flow', 'action', 'permission'].includes(type) && name === longName ? shipped(name) : undefined),
         };
         const p = new ObjectStackProtocolImplementation({ registry } as never, () => new Map(), 'env_1');
         for (const [type, operation] of [
             ['flow', 'save'], ['flow', 'delete'], ['action', 'save'], ['action', 'delete'], ['permission', 'save'],
-            ['position', 'save'],
         ] as const) {
             const message = String((p.packagedBaseRefusal({ type, name: longName, operation }) as any).message);
             expect(message.length, `${type} ${operation}`).toBeLessThan(500);