@@ -32,4 +32,5 @@ Clause-②: yes (widening) — `PostHookWriteImageCheck` gains the optional publ
 - **A member with no active organization.** Under `group`, such a member with a non-empty membership set can now insert a row naming one of those organizations: it is stored there. It used to be refused `403 PERMISSION_DENIED` under ADR-0123 D2, because the value was taken and the row then named no organization. A row naming none is still refused under D2, and one naming an organization outside the set is still refused by the wall.
 - **An on-behalf-of insert (ADR-0090 D10).** Take a platform operator who crosses the wall and acts for a walled delegator. The named organization is held to the delegator's wall: stored as sent where that wall admits it, refused `403` where it does not. Before, an admitted value was taken and the active organization stored.
 - **An explicit empty value in an array insert.** A row naming `organization_id: null` or `''` is no longer taken, reported, or refused under strict. It is still stored as the active organization, because the driver's stamp fills an empty value.
+- **Only the platform's injected column is spared.** On an object whose author declares its own `organization_id` with `readonly: true`, a caller's value is still taken, reported, and refused under strict, exactly as before. The wall still judges that column. The author's declaration is what keeps the strip, and the injected column is told apart by the registry's provenance reader (`resolveInjectedColumnProvenance`).
 - **Where no wall judges the column, nothing changes.** The value is still taken and reported, and strict still refuses it. That includes `single`, a composition without the security plugin, a tenancy-disabled object, and a platform operator crossing the wall on its own behalf.
@@ -14,7 +14,9 @@
 // What this file holds the engine to:
 //  - the member SET: the value is stored as sent, shown to `beforeInsert`,
 //    handed to the seam, not reported, and not refused under
-//    `strictReadonlyWrites`. Every OTHER read-only key is still taken;
+//    `strictReadonlyWrites`. Every OTHER read-only key is still taken, and so
+//    is an AUTHORED read-only `organization_id`: only the platform's injected
+//    column is spared;
 //  - the member ABSENT or `false` on an installed seam, and no seam at all:
 //    the strip takes the value exactly as before (reported, withheld from the
 //    hook, refused under strict). Seam presence is not the signal: a business
@@ -92,6 +94,7 @@ const OBJECT = 'qa_ledger';
 const ACTIVE = 'org_a';
 const NAMED = 'org_c';
 const SESSION = { userId: 'usr_member', tenantId: ACTIVE };
+const AUTHORED = 'qa_authored';
 
 /** How the stand-in installer behaves on this engine's next insert. */
 type SeamMode = 'judges' | 'judges-false' | 'no-member' | 'none';
@@ -122,6 +125,12 @@ describe('[#24822] engine.insert spares organization_id only where the seam decl
     engine.registerDriver(d.driver, true);
     await engine.init();
     engine.registry.registerObject({ name: OBJECT, fields: { name: { type: 'text' } } } as any);
+    // [#24822] F4: an app object whose AUTHOR declares its own read-only
+    // organization_id. The member alone does not spare it.
+    engine.registry.registerObject({
+      name: AUTHORED,
+      fields: { name: { type: 'text' }, organization_id: { type: 'text', readonly: true } },
+    } as any);
 
     engine.registerHook('beforeInsert', async (ctx: any) => {
       const data = (ctx.input?.data ?? {}) as Record<string, unknown>;
@@ -189,6 +198,26 @@ describe('[#24822] engine.insert spares organization_id only where the seam decl
     expect([...storeFor(OBJECT).values()][0]?.created_by, 'the forged audit value is not stored').not.toBe('usr_forged');
   });
 
+  it('SET, but an AUTHORED read-only organization_id: the author\'s declaration keeps the strip, and strict refuses it', async () => {
+    const dropped: Array<{ fields: string[]; reason: string }> = [];
+    await engine.insert(AUTHORED, { name: 'one', organization_id: NAMED } as any, {
+      context: SESSION,
+      onFieldsDropped: (e: any) => dropped.push({ fields: e.fields, reason: e.reason }),
+    } as any);
+
+    expect([...storeFor(AUTHORED).values()].map((r) => r.organization_id), 'the caller\'s value is not stored').toEqual([undefined]);
+    expect(dropped).toEqual([{ fields: ['organization_id'], reason: 'readonly' }]);
+
+    let thrown: { code?: unknown; fields?: unknown } | undefined;
+    try {
+      await engine.insert(AUTHORED, { name: 'two', organization_id: NAMED } as any, { context: SESSION, strictReadonlyWrites: true } as any);
+    } catch (e) {
+      thrown = e as typeof thrown;
+    }
+    expect(thrown?.code).toBe('ERR_READONLY_FIELD_REJECTED');
+    expect(thrown?.fields).toEqual(['organization_id']);
+  });
+
   it('SET: strictReadonlyWrites does not refuse it, because strict refuses only what the strip takes', async () => {
     await insertReporting({ name: 'one', organization_id: NAMED }, { strictReadonlyWrites: true });
 
 
@@ -29,7 +29,7 @@ import type { ValidateDataIssue, ValidateDataResponse } from '@objectstack/spec/
 // [#22646] The ADR-0112 catalog — `rejectCredentialAggregation`'s refusal
 // envelope carries `INVALID_FIELD` from it rather than a bare `Error`.
 import { StandardErrorCode } from '@objectstack/spec/api';
-import { parseAutonumberFormat, renderAutonumber, resolveAutonumberFormat, readAutonumberCounter, missingFieldValues, isTenancyDisabled, FILE_REFERENCE_TYPES, REFERENCE_VALUE_TYPES, referenceTargetOf, referenceCarrierOf, isFileIdToken, RAW_FILE_VALUES_CONTEXT_KEY, isCurrentUserDefaultToken, isNowDefaultToken, isMultiValueField, driverSupportsTransactions, AUDIT_PROVENANCE_FIELDS } from '@objectstack/spec/data';
+import { parseAutonumberFormat, renderAutonumber, resolveAutonumberFormat, readAutonumberCounter, missingFieldValues, isTenancyDisabled, FILE_REFERENCE_TYPES, REFERENCE_VALUE_TYPES, referenceTargetOf, referenceCarrierOf, isFileIdToken, RAW_FILE_VALUES_CONTEXT_KEY, isCurrentUserDefaultToken, isNowDefaultToken, isMultiValueField, driverSupportsTransactions, AUDIT_PROVENANCE_FIELDS, resolveInjectedColumnProvenance } from '@objectstack/spec/data';
 import type { FileRefusedValue } from '@objectstack/spec/data';
 // [#5158] Door 2's lowering sink — the SAME pair the protocol face (Door 1)
 // runs, so `FilterArray` has exactly one lowering in the product.
@@ -2391,7 +2391,8 @@ function callerSuppliedRow(row: unknown, sent: ReadonlySet<string> | undefined):
 /**
  * [#24822] The fields ONE insert's static-`readonly` passes may judge: the
  * {@link staticReadonlyInsertSubject} view, without `organization_id` when the
- * Layer 0 wall judges that column on this insert's stored rows.
+ * Layer 0 wall judges that column on this insert's stored rows AND the column
+ * is the platform's injected tenant column.
  *
  * The wall says so itself, on the seam it installs
  * (`PostHookWriteImageCheck.judgesOrganization`). The caller passes that
@@ -2417,6 +2418,12 @@ function insertStaticReadonlySubject(
   const subject = staticReadonlyInsertSubject(schema as any);
   if (!subject || !wallJudgesOrganization) return subject;
   if (!Object.prototype.hasOwnProperty.call(subject.fields, SystemFieldName.ORGANIZATION_ID)) return subject;
+  // An AUTHORED `organization_id` declared `readonly: true` is the author's
+  // own declaration, and declaration is enforcement: it keeps the strip. Only
+  // the platform's injected tenant column is spared, the one
+  // `TENANT_SCOPE_FIELD_DEF` declares read-only on the platform's behalf. Which
+  // one this is, is the registry's own provenance reader, never a second copy.
+  if (resolveInjectedColumnProvenance(schema, SystemFieldName.ORGANIZATION_ID) === 'author') return subject;
   const fields = { ...subject.fields };
   delete fields[SystemFieldName.ORGANIZATION_ID];
   return Object.keys(fields).length > 0 ? { name: subject.name, fields } : null;
@@ -3752,6 +3759,8 @@ export interface PostHookWriteImageCheck {
    * (the platform's tenant column declares `readonly: true`). Set, the value
    * is stored as sent where the wall admits it and refused where it does not.
    * It is never silently replaced by the active organization (ADR-0105 D5).
+   * Only the platform's injected column is spared. An AUTHORED
+   * `organization_id` declared `readonly: true` keeps the strip.
    * Absent or `false`, the strip runs exactly as before. The engine never
    * sets it, and never derives it from the posture or the context: that
    * would be a mirror of the wall, and a mirror is wider than the wall
 
@@ -350,6 +350,12 @@ const READERS: Record<string, Row> = {
   },
   // [#24822] The insert's static-`readonly` subject, without the tenant column
   // where the Layer 0 wall's seam declares it judges the insert's organization.
+  'engine.ts#insertStaticReadonlySubject :: resolveInjectedColumnProvenance()': {
+    disposition: 'not-a-read',
+    why:
+      "asks whether the insert's organization_id is the platform's injected column or the author's; " +
+      'it reads a registered definition, never storage',
+  },
   'engine.ts#insertStaticReadonlySubject :: organization_id': {
     disposition: 'not-a-read',
     why:
 
@@ -77,6 +77,7 @@ const DECLARED = 'qa_assignment';
 const INJECTED = 'qa_ledger';
 const PRIVATE = 'qa_vault';
 const UNWALLED = 'qa_catalog';
+const AUTHORED = 'qa_authored';
 
 const OBJECTS = [
   {
@@ -108,6 +109,18 @@ const OBJECTS = [
       name: { name: 'name', type: 'text' },
     },
   },
+  // [#24822] A tenancy-enabled app object whose AUTHOR declares its own
+  // read-only `organization_id`. The wall still judges it, and the author's
+  // declaration keeps the static-`readonly` strip.
+  {
+    name: AUTHORED,
+    label: 'Authored',
+    fields: {
+      id: { name: 'id', type: 'text', primaryKey: true },
+      name: { name: 'name', type: 'text' },
+      organization_id: { name: 'organization_id', type: 'text', readonly: true },
+    },
+  },
   // [#24822] Tenancy switched off, and an AUTHORED read-only `organization_id`:
   // Layer 0 composes nothing on it, so no wall judges the column.
   {
@@ -629,6 +642,26 @@ describe('[#24822] an explicit organization_id the wall judges is stored as sent
     });
   });
 
+  describe('an AUTHORED read-only organization_id on a walled object (F4)', () => {
+    // [#24822] F4: the wall judges this column too (the object stays walled on
+    // an authored `organization_id`), and the seam declares it. But the
+    // author declared the column read-only, and declaration is enforcement:
+    // only the platform's injected column is spared.
+    it('an AUTHORED read-only organization_id on a walled object keeps the strip: taken, reported, the active organization stored, and refused under strict', async () => {
+      const b = await boot('group');
+
+      const { outcome, dropped } = await createReporting(b, AUTHORED, { id: 'r2', name: 'new', organization_id: SISTER_ORG }, GROUP_CTX);
+      expect(outcome.ok, outcome.message).toBe(true);
+      expect(await b.table(AUTHORED), 'the author\'s read-only column is not written by the caller').toEqual([{ id: 'r2', organization_id: OWN_ORG }]);
+      expect(dropped).toEqual(READONLY_DROP(AUTHORED));
+      expect(organizationWarnings(b)).toHaveLength(1);
+
+      await expectStrictRefusal(b, AUTHORED, { id: 'r3', name: 'strict', organization_id: SISTER_ORG }, GROUP_CTX);
+      expect(await b.table(AUTHORED)).toEqual([{ id: 'r2', organization_id: OWN_ORG }]);
+      expect(b.seams, 'the wall still judges an authored column and declares it').toEqual([...WALL_JUDGES, ...WALL_JUDGES]);
+    });
+  });
+
   // [#24822 · ADR-0123 D2] F1: a member with a membership set and NO active
   // organization. Before this change the strip took the named organization, the
   // stored row named none, and the D2 arm refused it. The arm's scope is a row