Repository navigation
QA run · access-security (12/35) · c91af8ed · 2026-10-17 · 1 PASS / 11 PARTIAL / 0 FAIL / 0 BLOCKED / 23 NOT-RUN #24104
Description
Targeted re-run for the ledger revisions of #24036 (half A), per checklist-test §3: an item whose revision changed a fixture, a step's request or an oracle is re-run once, scoped to what the revision changed. Clauses of those items that the revision did not touch are skipped (out of this run's scope), so an item is pass only where every clause was driven, and partial where the driven clauses passed and the rest were skipped.
Environment
- framework: objectstack
c91af8ed6(origin/main at run start), worktree branchclaude/issue-24036-ledger-a; the branch changes ledger JSON only, no product code - console: objectui
f8267df93aba(this repo's.objectui-sha), bundle built at that sha (check-console-shaOK) - app: showcase under
objectstack dev --ui --seed-admin, posturesingle, file databases in the run's scratch directory. Boot A port 48731 (stock env,OS_PORTexported,OS_LOG_LEVEL=infoafter the first restart). Boot B port 48732 (fresh DB,OS_SEARCH_PINYIN_ENABLED=false,OS_SERVER_TIMING=true,OS_AUTOMATION_SCHEDULED_WORK_ENABLED=1, debug log; laterobjectstack starton the same DB). Port 48733: scratch showcase copy and minimal scratch stacks for build and boot-config legs. Port 48734: a freshcreate-objectstack@nextscaffold - seed: stock showcase seed plus the dev admin; QA personas minted by admin invite plus sign-up (
qa-…-24036@verify.test); area recipesqa-scratch-authz(pinned setsqa_att_reader,qa_att_baseline,qa_att_editor),qa-media-constraints,qa-flow-status-doorsandsearch:qa-contributor-bound-memberas each item names them - window: 2026-10-16 23:08Z to 2026-10-17 01:00Z
Scope
- selector
access-security(the bare form ofarea:access-security): 35 runnable items pernode scripts/checklist-select.mjs area:access-security --json; each row below carries the revision the parser reported; excluded by the parser as blocked:access-security.no-active-org-session-semantics,access-security.packaged-permission-set-lifecycle - judged 12 of 35; the 23 not-run items are the 20 items this card did not revise plus the revised items whose change was wording only (no re-run owed)
Per-item verdicts
| item | rev | clauses driven | verdict | text oracle evidence |
|---|---|---|---|---|
access-security.write-path-guards |
r5 | clause 7 mixed-outcome leg (continueOnError) + the createMany/updateMany wire shapes | partial | invoice-line [valid, quantity -1, valid]: default succeeded 1 / failed 2 (VALIDATION_FAILED, NOT_ATTEMPTED); continueOnError succeeded 2 / failed 1, rows 0 and 2 changed |
access-security.readonly-package-locks-studio |
r5 | step 5 writable contrast | partial | POST /packages without manifest.type 400 VALIDATION_ERROR, with type app 201; scratch object without sharingModel 422 INVALID_METADATA security-owd-unset, with it 200; packaged forge still 403 |
access-security.crud-permission-matrix |
r6 | A1 delegate cells + the 45-row count | partial | access-matrix.json 45 rows (41 showcase + 4 delegate); delegate in-subtree sys_user_position create 201, out-of-subtree 403 |
access-security.fls-mask-and-strip |
r4 | clause 4 browser lock | partial | contributor Edit Project dialog: Budget 600000 and Spent 420000 disabled, Project Name enabled, no budget_remaining control |
access-security.sharing-rules-widen |
r2 | unit-audience widening, A13 edit of the sys_sharing_rule row, manual-share read gate | partial | bu_west_coast member reads exactly the one status new inquiry (rule share row); sys_record_share PATCH 405; rule description edit survives restart; contact share to a baseline member reads 403 |
access-security.audit-log-browser |
r5 | clause 1 non-holder arm | partial | fresh member GET /data/sys_audit_log and the action filter both 403 PERMISSION_DENIED |
access-security.public-form-intake |
r3 | clause 2 stamp + step 6 route | partial | anonymous submit row owner_id null, created_by null, forged values stripped; /forms/contact-us 302 to /_console/f/contact-us |
access-security.share-link-capability-tokens |
r7 | clause 9 Vary + clause 4 email audience | partial | public outcomes carry Vary X-Share-Password, X-Share-Password-Encoding, Origin with no-store; off-allowlist caller 404 INVALID_OR_EXPIRED; mint without emailAllowlist refused |
access-security.capability-declaration-lifecycle |
r4 | clauses 0-3 incl. the build-oracle legs | partial | GET /data/sys_capability 404; /actions holder 200, member 403 naming the capability; clone regrant 200/403/200; scope galaxy os validate exit 1; platform-name shadow refused at boot (security catalog name conflict) |
access-security.activation-write-operator-gate |
r3 | step 1 posture oracle + the door clauses | partial | banner Tenancy: single; flow and action doors 403 PERMISSION_DENIED for the plain member; invalid body 403 |
access-security.platform-owner-email-anchor |
r3 | clauses 1-5 live legs (clause 6 unit pins not run) | partial | unset, unverified, non-matching: M 403 and []; verified match 200 with 9 system permissions; malformed list with M verified 403 and [] plus the whole-variable refusal line |
access-security.record-view-read-audit |
r2 | every clause: 0-4 live, 5 on its pin (read-audit.test.ts green) | pass | stock boot at info: 0 read rows, no install line; configured copy: install line on showcase_account, sys_job exclusion warning, one row per detail read with null values and the view instant, list and un-opted reads add none |
access-security.record-share-grant-revoke |
r5 | none (anchor and wording only) | not-run | revised without a re-run owed |
access-security.sharing-rule-authoring-ui |
r3 | none (knownGap and citation wording) | not-run | revised without a re-run owed |
access-security.share-link-landing-page |
r3 | none (pin wording) | not-run | revised without a re-run owed |
Not run (outside this run's scope, not revised by #24036): 20 items.
Derived verdicts and gaps
- 1 pass, 11 partial, 0 fail, 0 blocked, 23 not-run. No clause failed, so there is no reproduction rule to record and nothing to extract.
- The item edits these runs measured land in the half-A pull request for platform-checklist: revise the items the #23878 full run and the #23879 since:v18 run found stale (knownGaps, steps, fixtures, oracles, source anchors across 15 areas; no clause red) — ledger follow-up #24036; the per-item
historyrows carry the full readings. - Fixture gaps met on the way are recorded in the items' own knownGaps where the revision touched them.
Generated by Claude Code
Activity
objectstack-fleet commentedon Oct 17, 2026
Close-out (
domain:devxseat 2): nofail. Ruling C on #24127 (maintainer): a verification re-run of a ledger edit no longer carries aqa-runrecord, and the existing ones close out now. This was a scoped re-run of the items #24118 revised (50ccfa6697, Part of #24036). Itspartialverdicts mean that clauses the revision did not touch were skipped as out of scope, as this record's table shows; they are not coverage gaps. Itsnot-runitems were unrevised, or revised in wording only.Parked-on: #24036 · access-security (12/35) · 11 partial by scope (untouched clauses skipped), named in this record's table; the unmeasured legs the seat record on #24118 lists are carried in the items'
historyrowsGenerated by Claude Code