QA run · tier1:automated-pins (149/166) · ba4afcc2 · 2026-10-19 · 60 PASS / 89 PARTIAL / 0 FAIL / 0 BLOCKED / 17 NOT-RUN

Second-round 18.0 release-sweep re-test (maintainer-approved), retest trigger 1 of the checklist-test skill §5: "release candidate means a full Tier 1 re-run". Round 1 ran at 5b14b7f3; anchor #24579.

Environment fingerprint

framework ba4afcc2391922a86678bf5e47b1a0e4d2c87ff1 (two commits after round 1: fix(objectql): a runAs:'user' hook sees its organization's members in sys_user, as the user's own request does #24518 04669a4, fix(release): judge a .objectstack-sha console bundle against objectui's own build of that commit #24532 ba4afcc); .objectui-sha 4016370af3c9c9dafec2bc5299afd8e8079701b8
cold container: pnpm install --frozen-lockfile (31 s), pnpm build --concurrency=2 (76/76 tasks, 9 m 36 s), then pnpm objectui:build (objectui dependency build at --concurrency=2, 13 m 32 s; never in parallel with pnpm build). git status stayed clean.
vitest: per package, pnpm exec vitest run --maxWorkers=1 (pinned files), run sequentially. OS_TEST_TIERS=nightly was set for every package except packages/cli (whose tier walk that variable narrows); cli's one nightly-tier file was run separately with it.
non-vitest pins: examples/app-showcase/e2e/showcase-smoke.spec.ts (Playwright, OS_TEST_CHROMIUM_EXECUTABLE_PATH=/opt/pw-browsers/chromium, own showcase dev boot on :47451, own file DB); objectstack verify --rls on examples/app-showcase
objectui-exclusive pins (RUNNER environment fact, option b): run inside the objectui checkout at the pinned revision 4016370af3c9c9dafec2bc5299afd8e8079701b8 (.cache/objectui-4016370af3c9, left by the console build). Unit suites go through objectui's root vitest. Live specs go through playwright.live.config.ts, wrapped only to add executablePath, against a showcase backend at ba4afcc on :47471 and objectui's console Vite dev server on :47472. e2e/import-console and e2e/import-harness specs were not run (they need their own configs and harness servers).
cli.scaffold-first-run's pin is a CI workflow (scaffold-e2e.yml) with no run on ba4afcc, so its scaffold, validate, build and artifact-boot clauses were driven by hand, pre-release variant (details in the clause comments).
no browser was driven for any clause; at most 2 services were alive at once; sequential, one runner

Scope

selector tier1:automated-pins: every item from node scripts/checklist-select.mjs all --json whose area file carries automated.ref (the resolver does not project automated; read per id from areas/(area).json). 166 items. Revisions are in the table.
2 items hidden as blocked by the resolver (access-security.no-active-org-session-semantics, records-forms.record-edit-undo) and 1 planned (records-forms.picklist-shared-across-objects) are outside this selector.
Verdicts rest on pin output only (RUNNER rule 6). A clause is pass only where the pin's own ref text, or its test names and bodies, assert that clause and the pin passed. Everything else is not-run (uncovered), and the item is partial with the uncovered clauses named.

Pin execution summary

framework vitest: 396 test files, 0 failed, 0 files with zero tests. Every pinned file named in a ref was executed, including cli's nightly-tier serve-organization-record-page.e2e.test.ts (2/2).
showcase-smoke.spec.ts: 49 passed, 0 failed (2.6 min), against the console bundle built this round.
objectstack verify --rls: exit 0. CRUD 15 verified, 0 gaps, 0 FAILED, 1 needs-fixture, 8 skipped; probe persona 21 PROVEN (21 consistent, 0 HOLES); 10 of 10 declared position(s) probed; all-personas 38 PROVEN (38 consistent, 0 HOLES) · 226 NOT PROVEN (unit: one object × persona probe).
objectui unit pins at 4016370a: 34 files, 362 tests, all passed.
objectui live specs at 4016370a: 15 passed, 14 failed, 1 skipped. The failures are the specs anchor qa(checklist): 18.0 release sweep anchor at 5b14b7f3 — re-point 5 red-row clauses + the wave's checklist-accuracy findings, fixture gaps and not-run handover (18 records) #24579 §2 already records as stale or red at objectui's own pin: cascading-options (re-filter case), detail-related-list, field-conditional-rules, form-view-subforms, grid-file-upload, inline-edit-polish-2572, screen-flow, studio-object-designer F1/F4, studio-record-page, and user-filters (4 of 6 cases). A clause whose only evidence is one of those failing specs is scored not-run, never fail.

Derived item verdicts

60 PASS / 89 PARTIAL / 0 FAIL / 0 BLOCKED / 17 NOT-RUN. No pin failed, so no clause is fail.

PASS in round 1, FAIL now

None. No item moved from PASS (or any verdict) to FAIL. So there is no regression signal from #24518 or #24532 in the pinned surface, and no rule-7 re-check was owed for this record.

Other verdict movement against round 1 (`5b14b7f`), and why

81 items differ from round 1. Almost all of the movement is scope, not behaviour. Round 1 drove Tier 2 clauses by hand inside the area records, while this record scores pins only.
- PASS to PARTIAL (53) and PASS to NOT-RUN (8): the pin covers only part of the clauses, none of them in full, or rests only on a known-stale live spec.
- PARTIAL to NOT-RUN (2): studio-authoring.record-page-roundtrip and studio-authoring.draft-publish-lifecycle, whose pins cover no full clause.
- NOT-RUN to PARTIAL (2): integration-system.external-schema-browser-ui and records-forms.concurrent-edit-conflict, now evidenced by objectui unit pins run at 4016370a.
- PARTIAL to PASS (8): access-security.walled-environment-metadata-operator-only, access-security.grant-table-write-contract, access-security.parent-and-organization-write-guards, identity-auth.implicit-account-linking-ownership, integration-system.inbound-mailbox-association, platform-core.protocol-18-handshake-and-stored-replay, platform-core.settings-organization-isolation-and-platform-rung, platform-core.serve-composition-v18. Their refs claim whole-item coverage and the pins are green; round 1's PARTIAL came from hand-driven legs that were unrunnable on 18.0 (walled postures, a second organization).
- FAIL to PASS (8): platform-core.v18-boot-refusals, access-security.security-catalog-one-holder-and-boot-report, api-backend.error-sentences-and-unique-violation-wire-code, access-security.share-link-combined-gates, approvals.act-door-and-admin-rescue-slate, attachments-storage.chunked-upload-integrity, automation.flow-authoring-refusals-v18, cli.organization-ownership-ceremony.
⚠ A PASS here means only that the pin is green at ba4afcc. Round 1's red rows on these items came from hand drives and were disposed as assertion defects or stale specs (re-points owed on qa(checklist): 18.0 release sweep anchor at 5b14b7f3 — re-point 5 red-row clauses + the wave's checklist-accuracy findings, fixture gaps and not-run handover (18 records) #24579 §1 and platform-checklist + cli: three findings from the 18.0 QA sweep at 5b14b7f3 — two clauses mis-asserted against documented contracts, and a refusal that prescribes a withdrawn command (family card) #24567), plus the product defect rest/metadata-protocol: POST /api/v1/data/:object/batch withholds a hook's business refusal as a per-row INTERNAL_ERROR, while /data, /createMany and /import return the hook's sentence #24561 and the authorization finding approvals: authorization defect in approval action links (18.0 QA sweep) — detail withheld pending maintainer #24564. None of those is discharged by this record; all are carried forward unchanged.

The full per-item table is below; per-clause evidence (one line per clause) is in the comments.

access-security

item	rev	P	verdict	pass clauses	not-run clauses	round 1
`access-security.rls-both-sides`	6	P0	PARTIAL	0–2,4	3,5	PARTIAL/PARTIAL
`access-security.write-path-guards`	5	P0	PARTIAL	0–3	4–6	PASS/PASS
`access-security.record-access-explain`	2	P1	PARTIAL	1	0,2–4	PASS
`access-security.crud-permission-matrix`	6	P0	PARTIAL	0–4	5–6	PARTIAL/PARTIAL
`access-security.owd-sharing-matrix`	3	P0	PARTIAL	0–1,4	2–3,5–6	PASS/PASS
`access-security.fls-mask-and-strip`	4	P1	PARTIAL	0–1	2–4	PASS
`access-security.scope-depth-asymmetry`	2	P1	PARTIAL	1,4	0,2–3,5	PASS
`access-security.anonymous-deny-surfaces`	3	P0	PARTIAL	0–4,6	5	PASS/PASS
`access-security.public-form-withdrawal-layers`	3	P1	PASS	0–5	—	PASS
`access-security.activation-write-operator-gate`	3	P1	PASS	0–5	—	PASS
`access-security.platform-owner-email-anchor`	3	P1	PARTIAL	4–5	0–3	PASS
`access-security.me-permissions-aggregation-parity`	2	P1	PARTIAL	2	0–1,3–6	PASS
`access-security.record-view-read-audit`	2	P2	PARTIAL	5	0–4	PASS
`access-security.share-link-landing-page`	3	P2	NOT-RUN	—	0–4	PASS
`access-security.anonymous-floor-v18-doors`	1	P1	PASS	0–3	—	PASS/PASS
`access-security.walled-environment-metadata-operator-only`	1	P0	PASS	0–2	—	PARTIAL/PARTIAL/PARTIAL
`access-security.meta-authoring-trail-and-audience-gates`	1	P1	PASS	0–2	—	PASS/PASS
`access-security.security-catalog-activation-and-clone-doors`	1	P1	PASS	0–3	—	PASS/PASS
`access-security.security-catalog-one-holder-and-boot-report`	1	P1	PASS	0–4	—	FAIL/FAIL
`access-security.grant-table-write-contract`	1	P1	PASS	0–4	—	PARTIAL/PASS
`access-security.parent-and-organization-write-guards`	1	P1	PASS	0–3	—	PARTIAL/PASS
`access-security.deployment-tables-platform-only`	1	P1	PASS	0–2	—	PASS/PASS
`access-security.share-link-combined-gates`	1	P2	PASS	0–3	—	PASS/FAIL

ai

item	rev	P	verdict	pass clauses	not-run clauses	round 1
`ai.mcp-http-surface`	3	P1	PARTIAL	3	0–2,4–5	PASS
`ai.mcp-stdio-fail-closed`	6	P0	PARTIAL	0–1,7	2–6	PASS/PASS
`ai.mcp-validate-expression`	3	P2	PASS	0–3	—	PASS
`ai.skill-instructions-mcp-prompts`	2	P1	PASS	0–4	—	PASS
`ai.mcp-oauth-private-host-transport`	3	P1	PARTIAL	0–1,3–4	2	PASS
`ai.mcp-coded-refusals-and-runtime-exposure`	1	P2	PASS	0–3	—	PASS/PASS

api-backend

item	rev	P	verdict	pass clauses	not-run clauses	round 1
`api-backend.query-contract-matrix`	3	P0	PARTIAL	4	0–3,5–8	PASS/PASS
`api-backend.bulk-write-contract`	2	P1	PARTIAL	1	0,2–5	PASS
`api-backend.declarative-endpoint-execution`	3	P1	PASS	0–3	—	PASS
`api-backend.packaged-action-disabled-dispatch`	3	P0	PARTIAL	0,3,6	1–2,4–5	PASS/PASS
`api-backend.action-activation-door-contract`	2	P2	PARTIAL	5–7	0–4	PASS
`api-backend.rest-crud-config-contract`	2	P2	PARTIAL	4–5	0–3	PASS
`api-backend.rest-batch-config-contract`	2	P2	PARTIAL	3,5–6	0–2,4	PASS
`api-backend.rest-metadata-config-contract`	4	P1	PARTIAL	2,5	0–1,3–4	PASS
`api-backend.rest-route-generation-tombstones`	1	P2	PARTIAL	0–1,4	2–3	PASS
`api-backend.second-object-exposure-and-internal-fields`	1	P1	PASS	0–3	—	PASS/PASS
`api-backend.data-request-shape-and-query-arity`	1	P1	PASS	0–4	—	PASS/PASS
`api-backend.meta-read-doors-v18`	1	P2	PASS	0–4	—	PASS/PASS
`api-backend.error-sentences-and-unique-violation-wire-code`	1	P2	PASS	0–3	—	FAIL/FAIL

approvals

item	rev	P	verdict	pass clauses	not-run clauses	round 1
`approvals.decision-action-matrix`	5	P1	PARTIAL	9	0–8	PASS
`approvals.decision-only-via-service`	1	P1	PASS	0–3	—	PASS
`approvals.status-mirror-field`	2	P2	PARTIAL	2	0–1,3–4	PASS
`approvals.request-page-reply-and-reader-visibility`	1	P1	PARTIAL	0–3	4	PASS/PARTIAL
`approvals.act-door-and-admin-rescue-slate`	1	P1	PASS	0–2	—	PASS/FAIL

attachments-storage

item	rev	P	verdict	pass clauses	not-run clauses	round 1
`attachments-storage.presigned-upload-roundtrip`	1	P1	PARTIAL	0–1,4	2–3	PASS
`attachments-storage.download-authz-both-sides`	5	P1	PARTIAL	0–3	4	PASS
`attachments-storage.read-inherits-parent-rls`	5	P1	PASS	0–3	—	PASS
`attachments-storage.attach-requires-parent-edit`	7	P1	PARTIAL	0–4	5	PASS
`attachments-storage.sys-file-status-pipeline`	3	P2	PARTIAL	0–4	5	PASS
`attachments-storage.orphan-tombstone-reap`	1	P2	PARTIAL	2–3	0–1	PASS
`attachments-storage.upload-session-abort`	4	P2	PARTIAL	1	0,2–5	PASS
`attachments-storage.inline-grid-receipt-cells`	3	P1	NOT-RUN	—	0–3	PASS
`attachments-storage.field-accept-maxsize-server-enforced`	2	P1	PARTIAL	0–1,4–6	2–3	PASS
`attachments-storage.upload-limits-scope-and-ownership`	1	P1	PASS	0–5	—	PASS/PASS
`attachments-storage.chunked-upload-integrity`	1	P2	PASS	0–3	—	PARTIAL/FAIL

automation

item	rev	P	verdict	pass clauses	not-run clauses	round 1
`automation.flow-node-type-matrix`	6	P1	NOT-RUN	—	0–5	PASS
`automation.trigger-type-matrix`	4	P1	PARTIAL	5	0–4	PASS
`automation.screen-flow-roundtrip`	4	P1	NOT-RUN	—	0–6	PASS
`automation.durable-suspend-restart`	1	P1	PARTIAL	0–1,4	2–3	PASS
`automation.paused-run-trigger-record-masked`	1	P2	PASS	0–4	—	PASS
`automation.setup-packaged-automation-board`	3	P1	PARTIAL	1,3–4	0,2,5–7	PARTIAL
`automation.flow-registration-verdict-on-read`	1	P1	PASS	0–2	—	PASS/PASS
`automation.flow-authoring-refusals-v18`	1	P1	PASS	0–3	—	PASS/FAIL
`automation.flow-run-semantics-v18`	1	P1	PASS	0–3	—	PASS/PASS
`automation.inbound-hook-timestamped-signature`	1	P1	PASS	0–2	—	PASS/PASS
`automation.scheduled-work-opt-in`	1	P1	PASS	0–2	—	PASS/PASS

cli

item	rev	P	verdict	pass clauses	not-run clauses	round 1
`cli.migrate-plan-apply-json`	4	P1	PARTIAL	2	0–1,3–6	PASS
`cli.verify-verdict-exit-mapping`	1	P1	PARTIAL	4	0–3	PASS
`cli.scaffold-first-run`	5	P1	PARTIAL	0–2	3–4	PASS
`cli.datasource-introspect-codegen`	5	P2	NOT-RUN	—	0–5	PASS
`cli.dev-automigrate-policy`	2	P1	PARTIAL	2	0–1,3–5	PASS
`cli.migrate-meta-write-stored-and-all`	1	P1	PASS	0–4	—	PASS/PASS
`cli.organization-ownership-ceremony`	1	P0	PASS	0–4	—	PARTIAL/PARTIAL/FAIL
`cli.meta-package-flags-and-explain`	1	P2	PASS	0–3	—	PASS/PASS
`cli.validate-v18-authoring-verdicts`	1	P1	PASS	0–2	—	PASS/PASS
`cli.verify-derived-proof-families`	1	P2	PASS	0–2	—	PASS/PASS

dashboards

item	rev	P	verdict	pass clauses	not-run clauses	round 1
`dashboards.dataset-report-authoring`	2	P1	PARTIAL	0	1–7	PARTIAL
`dashboards.empty-null-bucket-boundaries`	1	P2	PARTIAL	3–4	0–2,5	PARTIAL
`dashboards.analytics-exposure-gate-and-measure-aggregate`	1	P1	PASS	0–3	—	PASS/PASS

i18n

item	rev	P	verdict	pass clauses	not-run clauses	round 1
`i18n.surface-matrix`	8	P1	NOT-RUN	—	0–10	PASS
`i18n.flow-copy-translation-and-host-override`	1	P2	PASS	0–4	—	PASS/PASS

identity-auth

item	rev	P	verdict	pass clauses	not-run clauses	round 1
`identity-auth.auth-method-matrix`	8	P1	PARTIAL	7	0–6,8–9	PARTIAL
`identity-auth.invitation-scope-gates`	4	P1	PARTIAL	0–3	4–6	PASS
`identity-auth.admin-lifecycle-operations`	8	P1	PARTIAL	1–5,8–9	0,6–7	PASS
`identity-auth.implicit-account-linking-ownership`	3	P1	PASS	0–4	—	PARTIAL
`identity-auth.auth-gate-held-session-raw-host-families`	1	P1	PASS	0–3	—	PASS/PASS
`identity-auth.api-key-expiry-lifecycle`	1	P1	PASS	0–3	—	PASS/PASS
`identity-auth.cookie-session-renewal-in-process`	1	P2	PASS	0–2	—	PASS/PASS
`identity-auth.default-organization-boot-invariant`	1	P0	PASS	0–3	—	PASS/PASS/PASS
`identity-auth.import-invitation-and-sso-domain-answers`	1	P2	PASS	0–3	—	PASS/PASS

integration-system

item	rev	P	verdict	pass clauses	not-run clauses	round 1
`integration-system.connector-declarative-boot`	2	P1	NOT-RUN	—	0–5	PASS
`integration-system.connector-stdio-default-deny`	2	P1	PASS	0–3	—	PASS
`integration-system.connector-descriptor-audit`	2	P2	PARTIAL	0	1–2	PASS
`integration-system.webhook-lifecycle`	7	P1	PARTIAL	0	1–6	PASS
`integration-system.email-template-render`	7	P2	PARTIAL	0	1–7	PASS
`integration-system.datasource-admin-lifecycle`	3	P1	PARTIAL	2,6–7	0–1,3–5,8	PARTIAL
`integration-system.external-schema-introspection`	3	P1	PARTIAL	1,3–4	0,2	PARTIAL
`integration-system.external-schema-drift-gate`	2	P1	PARTIAL	1–6	0	PARTIAL
`integration-system.connector-auth-kind-application`	1	P1	PARTIAL	0–2	3–4	PARTIAL
`integration-system.external-schema-browser-ui`	3	P1	PARTIAL	6	0–5	NOT-RUN
`integration-system.inbound-mailbox-association`	1	P2	PASS	0–3	—	PARTIAL/PASS
`integration-system.notification-org-and-redeliver-eligibility`	1	P2	PASS	0–3	—	PASS/PASS

platform-core

item	rev	P	verdict	pass clauses	not-run clauses	round 1
`platform-core.nav-surfaces-render`	6	P0	PARTIAL	0	1–3	PASS/PASS
`platform-core.metadata-registry-serving`	2	P1	PARTIAL	0–2	3–6	PASS
`platform-core.metadata-authoring-roundtrip`	3	P1	PARTIAL	3	0–2,4–5	PASS
`platform-core.interrupted-migration-boot-report`	2	P2	PARTIAL	0,2–4	1	PASS
`platform-core.activation-ledger-registration-home`	5	P1	PASS	0–4	—	PASS
`platform-core.activation-ledger-row-contract`	4	P2	PARTIAL	2–3	0–1,4–5	PASS
`platform-core.url-overlay-contract`	1	P1	PARTIAL	5	0–4	PASS
`platform-core.lifecycle-retention-sweep`	4	P1	PARTIAL	1–3	0,4–5	PASS
`platform-core.settings-audit-secret-fingerprint`	2	P1	PASS	0–5	—	PASS
`platform-core.v18-boot-refusals`	1	P0	PASS	0–3	—	FAIL/FAIL/FAIL
`platform-core.protocol-18-handshake-and-stored-replay`	1	P1	PASS	0–3	—	PASS/PARTIAL
`platform-core.settings-organization-isolation-and-platform-rung`	1	P1	PASS	0–3	—	PARTIAL/PARTIAL
`platform-core.serve-composition-v18`	1	P2	PASS	0–5	—	PASS/PARTIAL

records-forms

item	rev	P	verdict	pass clauses	not-run clauses	round 1
`records-forms.crud-roundtrip`	10	P0	NOT-RUN	—	0–7	PASS/PASS
`records-forms.field-type-matrix`	3	P1	PARTIAL	0,3–4	1–2,5–6	PARTIAL
`records-forms.list-view-capabilities`	3	P1	PARTIAL	1	0,2–9	PARTIAL
`records-forms.view-type-gallery`	1	P1	PARTIAL	5	0–4	PARTIAL
`records-forms.conditional-rules-header`	2	P1	PARTIAL	0	1–5	PARTIAL
`records-forms.conditional-rules-grid`	4	P1	PARTIAL	2	0–1,3–4	PARTIAL
`records-forms.cascading-options`	3	P1	PARTIAL	1	0,2–4	PARTIAL
`records-forms.master-detail-atomic-save`	3	P1	PARTIAL	0	1–5	PARTIAL
`records-forms.related-list-server-pagination`	4	P1	NOT-RUN	—	0–5	NOT-RUN
`records-forms.action-param-widgets`	2	P1	PARTIAL	2	0–1,3	PARTIAL
`records-forms.import-wizard-encoding-and-hints`	6	P2	PARTIAL	0–2	3	PARTIAL
`records-forms.action-location-matrix`	11	P1	NOT-RUN	—	0–4	NOT-RUN
`records-forms.gantt-interactions`	4	P2	PARTIAL	1–2	0,3	PARTIAL
`records-forms.form-dirty-guard`	3	P2	PARTIAL	2	0–1	PARTIAL
`records-forms.adhoc-filter-sort-builder`	3	P1	NOT-RUN	—	0–4	NOT-RUN
`records-forms.calendar-interactions`	2	P1	NOT-RUN	—	0–3	NOT-RUN
`records-forms.concurrent-edit-conflict`	3	P1	PARTIAL	3	0–2,4–5	NOT-RUN
`records-forms.record-discussion-mentions`	3	P1	PARTIAL	5–6	0–4,7–8	PARTIAL
`records-forms.grid-personalization`	4	P2	NOT-RUN	—	0–4	NOT-RUN
`records-forms.bulk-select-all-matching`	3	P2	PARTIAL	0,2–3	1,4	PARTIAL
`records-forms.lookup-picker-create-new`	3	P2	NOT-RUN	—	0–3	NOT-RUN
`records-forms.import-job-undo-cancel`	4	P2	NOT-RUN	—	0–3	NOT-RUN
`records-forms.object-hook-lifecycle`	5	P1	PARTIAL	0,6	1–5,7–9	PARTIAL
`records-forms.field-type-constraints`	1	P1	PARTIAL	6	0–5,7	PASS
`records-forms.cascading-multilevel-and-clear`	3	P1	PARTIAL	1–2	0,3–5	PARTIAL
`records-forms.encrypted-field-behavior`	2	P1	PASS	0–4	—	PASS
`records-forms.field-unique-enforcement`	3	P1	PASS	0–5	—	PASS
`records-forms.delete-behavior-matrix`	1	P1	PARTIAL	0–4	5	PASS
`records-forms.record-clone-contract`	1	P2	PARTIAL	2	0–1,3–4	PASS
`records-forms.field-history-tracking`	1	P1	PARTIAL	0,4	1–3	PARTIAL
`records-forms.predicate-relationship-traversal`	3	P1	PARTIAL	3	0–2	PARTIAL
`records-forms.write-time-option-and-element-shape-judgement`	1	P2	PASS	0–4	—	PASS/PASS
`records-forms.write-answer-advisories-rollback-and-tree-delete`	1	P1	PASS	0–3	—	PASS/PASS
`records-forms.comment-reactions-and-edit-stamps`	1	P2	PARTIAL	0,2–3	1	PASS/PASS
`records-forms.v18-semantic-defaults`	1	P2	PARTIAL	0	1–3	PASS/PARTIAL

search

item	rev	P	verdict	pass clauses	not-run clauses	round 1
`search.cross-field-object-search`	3	P1	PASS	0–4	—	PASS
`search.field-scoped-narrowing`	1	P1	PARTIAL	0	1–3	PASS
`search.global-search-skips-unreadable`	2	P1	PARTIAL	0–2	3–4	PARTIAL

studio-authoring

item	rev	P	verdict	pass clauses	not-run clauses	round 1
`studio-authoring.object-designer-roundtrip`	4	P1	PARTIAL	1–2	0,3	PARTIAL
`studio-authoring.record-page-roundtrip`	4	P1	NOT-RUN	—	0–3	PARTIAL
`studio-authoring.draft-publish-lifecycle`	6	P1	NOT-RUN	—	0–11	PARTIAL
`studio-authoring.org-override-registry-gate`	3	P1	PARTIAL	0,2–3	1,4	PASS
`studio-authoring.expression-editors`	3	P1	PARTIAL	0,2–5,7	1,6	PARTIAL
`studio-authoring.permission-matrix-editor-ux`	3	P2	PARTIAL	0–1,5	2–4	PARTIAL
`studio-authoring.metadata-diagnostics-sweep`	4	P2	PARTIAL	3,7	0–2,4–6	PARTIAL
`studio-authoring.meta-save-preconditions-and-draft-rows`	1	P1	PASS	0–3	—	PASS/PASS
`studio-authoring.multi-package-item-rows`	1	P1	PASS	0–4	—	PASS/PASS
`studio-authoring.save-door-runs-authoring-rules`	1	P1	PASS	0–3	—	PASS/PASS

Checklist-accuracy findings / fixture gaps

Refs that name source files instead of tests. records-forms.object-hook-lifecycle cites "packages/objectql/src/hook-wrappers.ts + hook-binder.ts tests". No resolver can execute a source file, so those clauses read not-run under rule 6. The ref should name the test files.
Bare file-list refs over-claim. About 25 items list pins with no qualifier ("covers the item"), but the pins' own test names assert only part of the clauses. Examples: automation.flow-node-type-matrix (2 tests, one node type), automation.trigger-type-matrix (a ledger ratchet only), cli.migrate-plan-apply-json (one exit-code check), cli.verify-verdict-exit-mapping, records-forms.crud-roundtrip (only the readonly half of clause 6), integration-system.connector-declarative-boot (the mcp variant only), access-security.scope-depth-asymmetry (business-unit depth, not the personas the clauses name), and studio-authoring.draft-publish-lifecycle. Suggest qualifying each ref per clause, or dropping automated on the ones whose pin covers no full clause, so the next Tier 1 run does not read a green file as a covered item.
cli.scaffold-first-run: the pin is a workflow that does not run on every main commit (no run on ba4afcc), so a release-candidate Tier 1 run cannot cite it. The latest scheduled run (on 9112bcd8) failed at "Registry canary: blank / Gate the generated project" on the published path. Not judged here.
packages/cli vitest under OS_TEST_TIERS=nightly selects only the nightly tier (28 of 29 named files ran no tests until the variable was dropped). The guard printed "FILTER SELECTED NOTHING", which made this visible. RUNNER's serve-composition-v18 note (set OS_TEST_TIERS=nightly) should say to run that one file alone with it.
objectui live e2e at 4016370a is still not green at its own pin (14 failed, the same set as anchor §2). Every item whose ref cites those specs cannot be satisfied by its pin today.
import-console and import-harness specs need their own dev servers; they were not run (records-forms.import-job-undo-cancel is NOT-RUN for that reason).

Handover (not-run items and clauses)

17 NOT-RUN items (pin covers no full clause, the pin is a failing known-stale live spec, or the pin was not runnable here): access-security.share-link-landing-page, attachments-storage.inline-grid-receipt-cells, automation.screen-flow-roundtrip, automation.flow-node-type-matrix, cli.datasource-introspect-codegen, i18n.surface-matrix, integration-system.connector-declarative-boot, records-forms.crud-roundtrip, records-forms.related-list-server-pagination, records-forms.action-location-matrix, records-forms.adhoc-filter-sort-builder, records-forms.calendar-interactions, records-forms.grid-personalization, records-forms.lookup-picker-create-new, records-forms.import-job-undo-cancel, studio-authoring.record-page-roundtrip, studio-authoring.draft-publish-lifecycle. Each needs a Tier 2 hand drive, or a pin extension, to be judged.
89 PARTIAL items: the not-run clause indexes are in the table. They are owed a Tier 2 drive (round 1's area records hold the most recent hand verdicts for most of them) or a pin upgrade.

Timing

Environment preparation about 24 min (install 0.5, framework build 9.6, console build 13.5). Pin execution about 60 min wall: framework vitest 38 min in total (dogfood 15.4 min, cli re-run included), objectui unit 4.3 min, objectui live 10.5 min, smoke 2.6 min, verify about 1 min. Scoring was done from the captured output.

Generated by Claude Code

Per-clause evidence, part 3 of 3 (pin output at ba4afcc; objectui pins at 4016370a).

records-forms.field-type-matrix rev 3 · PARTIAL · pins: files 2/2 passed, tests 91

acceptance[0] pass: field-zoo-roundtrip.dogfood.test.ts 46/46 + field-zoo-value-shape.test.ts 45/45 passed
acceptance[1] not-run: not asserted by any passing pin named in ref
acceptance[2] not-run: not asserted by any passing pin named in ref
acceptance[3] pass: field-zoo-roundtrip.dogfood.test.ts 46/46 passed: f_secret/f_password masked = SECRET_MASK
acceptance[4] pass: field-zoo-roundtrip.dogfood.test.ts 46/46 passed: f_autonumber present, f_formula computed 31.5
acceptance[5] not-run: reference ids round-trip verbatim; refusal of a dangling reference not asserted
acceptance[6] not-run: not asserted by any passing pin named in ref
uncovered: 1 per-variant widget DOM, 2 server-side invalid_option/required, 5 dangling-ref refusal, 6 summary carriers (not on the zoo): not pinned

records-forms.list-view-capabilities rev 3 · PARTIAL · pins: files 1/1 passed, tests 5; objectui live e2e per live-summary.txt at objectui 4016370a

acceptance[0] not-run: not asserted by any passing pin named in ref
acceptance[1] pass: objectui live saved-view-filter.spec.ts passed at objectui 4016370a ($filter AST, 200, record-count-bar 2)
acceptance[2] not-run: showcase-search.dogfood.test.ts 5/5 passed but asserts retail/Northwind matching, not CJK/pinyin huaning
acceptance[3] not-run: not asserted by any passing pin named in ref
acceptance[4] not-run: not asserted by any passing pin named in ref
acceptance[5] not-run: only evidence inline-edit-polish-2572.spec.ts FAILED (known stale) -) not consulted
acceptance[6] not-run: not asserted by any passing pin named in ref
acceptance[7] not-run: only evidence user-filters "visualization switcher" spec FAILED (known stale) -) not consulted
acceptance[8] not-run: not asserted by any passing pin named in ref
acceptance[9] not-run: not asserted by any passing pin named in ref
uncovered: 0 per-variant set, 2 pinyin search not in pin, 3 paging, 4 string sort, 5 inline edit (failing stale spec), 6 export, 7 viz switcher (failing stale spec), 8 bulk dispatch, 9 legacy rowActions: no passing pin

records-forms.view-type-gallery rev 1 · PARTIAL · pins: no vitest pin files; showcase-smoke.spec.ts 49/49 passed (extra-evidence)

acceptance[0] not-run: not asserted by any passing pin named in ref
acceptance[1] not-run: not asserted by any passing pin named in ref
acceptance[2] not-run: not asserted by any passing pin named in ref
acceptance[3] not-run: not asserted by any passing pin named in ref
acceptance[4] not-run: not asserted by any passing pin named in ref
acceptance[5] pass: showcase-smoke.spec.ts 49 passed, 0 failed (page-level render, extra-evidence)
uncovered: 0-4 per-variant real visualization/screenshots and data placement not asserted by the page-level smoke

records-forms.conditional-rules-header rev 2 · PARTIAL · pins: no vitest pin files; objectui live e2e per live-summary.txt at objectui 4016370a

acceptance[0] pass: objectui live required-when-submit.spec.ts passed at objectui 4016370a (requiredWhen blocks submit with field error)
acceptance[1] not-run: not asserted by any passing pin named in ref
acceptance[2] not-run: not asserted by any passing pin named in ref
acceptance[3] not-run: not asserted by any passing pin named in ref
acceptance[4] not-run: list-row-action-cel.spec.ts passed but drives showcase_mark_done visible on the task list, not paid-invoice Edit disabledWhen / Delete visibleWhen
acceptance[5] not-run: not asserted by any passing pin named in ref
uncovered: 1,2,3,5: field-conditional-rules.spec.ts FAILED (known stale) and no other pin; 4 passing spec drives a different predicate

records-forms.conditional-rules-grid rev 4 · PARTIAL · pins: no vitest pin files; objectui live e2e per live-summary.txt at objectui 4016370a

acceptance[0] not-run: grid-conditional-rules.spec.ts passed: per-row required flag set/cleared; batch-save-blocked half not asserted
acceptance[1] not-run: not asserted by any passing pin named in ref
acceptance[2] pass: objectui live grid-parent-rules.spec.ts passed at objectui 4016370a (paid locks lines, revert unlocks)
acceptance[3] not-run: not asserted by any passing pin named in ref
acceptance[4] not-run: not asserted by any passing pin named in ref
uncovered: 0 save-blocked half not asserted; 1 server write path not pinned; 3,4 only grid-file-upload.spec.ts which FAILED (known stale)

records-forms.cascading-options rev 3 · PARTIAL · pins: no vitest pin files; objectui live e2e per live-summary.txt at objectui 4016370a

acceptance[0] not-run: only evidence is cascading-options.spec.ts live re-filter test, which FAILED (known stale) -) not consulted
acceptance[1] pass: objectui live cascading-options.spec.ts "server rejects out-of-set, accepts in-set" passed at objectui 4016370a
acceptance[2] not-run: not asserted by any passing pin named in ref
acceptance[3] not-run: not asserted by any passing pin named in ref
acceptance[4] not-run: not asserted by any passing pin named in ref
uncovered: 0 failing stale live test only; 2 role gate, 3 lookup twin, 4 legal cascade persist: not in any passing pin

records-forms.master-detail-atomic-save rev 3 · PARTIAL · pins: no vitest pin files; objectui live e2e per live-summary.txt at objectui 4016370a

acceptance[0] pass: objectui live master-detail.spec.ts 2/2 passed at objectui 4016370a (one atomic batch, child op references parent)
acceptance[1] not-run: not asserted by any passing pin named in ref
acceptance[2] not-run: summary-rollup.spec.ts 2/2 passed but on showcase_project SUM/COUNT, not invoice.total
acceptance[3] not-run: not asserted by any passing pin named in ref
acceptance[4] not-run: only evidence form-view-subforms.spec.ts FAILED (known stale) -) not consulted
acceptance[5] not-run: not asserted by any passing pin named in ref
uncovered: 1 re-read with auto-filled values, 3 failing child aborts, 5 amount expression: not pinned; 2 carrier mismatch (project not invoice); 4 failing stale spec only

records-forms.related-list-server-pagination rev 4 · NOT-RUN · pins: files 0/1 passed, tests 0 passed (detail-related-list.spec.ts live 0p/1f/0s; live = objectui 4016370a, failures known-stale per anchor #24579)

acceptance[0] not-run: only pin detail-related-list.spec.ts failed live at objectui 4016370a (known-stale) -) not consulted
acceptance[1] not-run: only pin detail-related-list.spec.ts failed live at objectui 4016370a (known-stale) -) not consulted
acceptance[2] not-run: only pin detail-related-list.spec.ts failed live at objectui 4016370a (known-stale) -) not consulted
acceptance[3] not-run: only pin detail-related-list.spec.ts failed live at objectui 4016370a (known-stale) -) not consulted
acceptance[4] not-run: only pin detail-related-list.spec.ts failed live at objectui 4016370a (known-stale) -) not consulted
acceptance[5] not-run: only pin detail-related-list.spec.ts failed live at objectui 4016370a (known-stale) -) not consulted
uncovered: [0-5]: sole pin is a failing known-stale live spec

records-forms.action-param-widgets rev 2 · PARTIAL · pins: files 2/2 passed, tests 6 passed (action-modal.spec.ts live 1p/0f/0s; live = objectui 4016370a, failures known-stale per anchor #24579)

acceptance[0] not-run: action-modal.spec.ts (1/1 live pass, objectui 4016370a) only opens/closes Edit modal; no per-variant widget assertion
acceptance[1] not-run: no pin asserts accept/multiple DOM attributes
acceptance[2] pass: action-params-contract.dogfood.test.ts 5/5: 'malformed param bag rejected 400 before the handler runs' + 'conformant bag passes'
acceptance[3] not-run: no pin asserts required p_text on dialog or dispatch
uncovered: [0,1,3]: widget/DOM legs and required-param leg not pinned (action-modal spec only opens Edit modal)

records-forms.import-wizard-encoding-and-hints rev 6 · PARTIAL · pins: files 3/3 passed, tests 62 passed (objectui unit pins at objectui 4016370a)

acceptance[0] pass: objectui importParsers.test.ts 57/57 @4016370a: 'decodes a GBK/GB18030 .csv via fallback'
acceptance[1] pass: objectui importMissingRequiredHint.test.tsx 2/2 @4016370a: names unmapped required field and disables Next
acceptance[2] pass: objectui importLegacyReferenceGuard.test.tsx 3/3 @4016370a: 'shows a downgrade notice on the scalar path' (pin-only by design)
acceptance[3] not-run: API read-back of imported rows needs a live import; no pin
uncovered: [3]: server-row read-back after import is live-only, no pin

records-forms.action-location-matrix rev 11 · NOT-RUN · pins: files 2/2 passed, tests 2 passed (list-row-action-cel.spec.ts live 1p/0f/0s; action-modal.spec.ts live 1p/0f/0s; live = objectui 4016370a, failures known-stale per anchor #24579)

acceptance[0] not-run: no pin walks the six locations
acceptance[1] not-run: no pin asserts exclusive placement
acceptance[2] not-run: action-modal.spec.ts (live pass @objectui 4016370a) proves only the modal Edit leg, not each location/kind
acceptance[3] not-run: list-row-action-cel.spec.ts (live pass @4016370a) asserts mark_done count (=1 only, not per-row done/not-done sides or fail-closed
acceptance[4] not-run: no pin for empty/missing locations
uncovered: [0-4]: live specs pass but assert only Edit-modal open and a (=1 count; no clause evidently asserted

records-forms.gantt-interactions rev 4 · PARTIAL · pins: files 6/6 passed, tests 48 passed (objectui unit pins at objectui 4016370a)

acceptance[0] not-run: ref: acceptance[0] not covered (bar drag PATCH + API re-read)
acceptance[1] pass: objectui GanttView.autoscheduledlg 4/4 ('nothing is written before confirm','cancel discards','confirm applies') + countinterp.i18n 5/5 @4016370a
acceptance[2] pass: objectui scheduling.selfextent 8/8 ('locked violated task reported in skippedLocked') + GanttView.dnd 21/21 ('summary drag skips locked descendants') @4016370a; direct locked-LEAF drag sub-leg unpinned (knownGaps)
acceptance[3] not-run: ref: acceptance[3] not covered (vetoed update restore)
uncovered: [0,3]: ref states not covered by the gantt pins

records-forms.form-dirty-guard rev 3 · PARTIAL · pins: files 1/1 passed, tests 14 passed (objectui unit pins at objectui 4016370a)

acceptance[0] not-run: objectui discardGuard.test.tsx 14/14 @4016370a pins X-intercept, dirty Cancel no-prompt, pristine close; Escape and backdrop not asserted
acceptance[1] not-run: server byte-identical/persist re-read is live-only; unit suite does not reach the API
acceptance[2] pass: objectui discardGuard.test.tsx 14/14 passed @4016370a (Modal/Drawer guard + beforeunload)
uncovered: [0]: Escape/backdrop legs not pinned; [1]: server re-read needs a live run

records-forms.adhoc-filter-sort-builder rev 3 · NOT-RUN · pins: files 1/2 passed, tests 3 passed (user-filters.spec.ts live 2p/4f/0s; saved-view-filter.spec.ts live 1p/0f/0s; live = objectui 4016370a, failures known-stale per anchor #24579)

acceptance[0] not-run: saved-view-filter.spec.ts (live pass @objectui 4016370a) proves saved filter reaches $filter as AST, not merge with toolbar conditions
acceptance[1] not-run: no pin asserts $orderby server order
acceptance[2] not-run: no pin asserts restore after in-app navigation via sys_user_preference
acceptance[3] not-run: no pin asserts user-scoped list state
acceptance[4] not-run: user-filters.spec.ts 'dropdown selection... persists, and restores' passes (uf_priority on reload) but uf__tab leg only in failing known-stale specs
uncovered: [0-4]: passing live specs do not assert these clauses; the rest rest on failing known-stale user-filters specs

records-forms.calendar-interactions rev 2 · NOT-RUN · pins: files 1/1 passed, tests 8 passed (objectui unit pins at objectui 4016370a)

acceptance[0] not-run: objectui CalendarView.dnd.test.tsx 8/8 @4016370a asserts onEventDrop geometry only, no PATCH/API re-read
acceptance[1] not-run: no pin asserts revert + error toast
acceptance[2] not-run: no pin asserts month/week/day re-render
acceptance[3] not-run: onTimeRangeSelect drag-create pinned, not a real row insert/re-read
uncovered: [0-3]: ref scopes the pin to drag geometry; none of the clauses is asserted

records-forms.concurrent-edit-conflict rev 3 · PARTIAL · pins: files 1/2 passed, tests 8 passed (inline-edit-polish-2572.spec.ts live 0p/1f/0s; live = objectui 4016370a, failures known-stale per anchor #24579)

acceptance[0] not-run: no framework pin named for the server 409; occSave mocks it
acceptance[1] not-run: objectui occSave.test.tsx 8/8 @4016370a pins the modal Keep editing/Overwrite dialog; inline ConcurrentUpdateDialog half only in failing inline-edit-polish-2572.spec.ts
acceptance[2] not-run: inline Reload leg only in failing known-stale inline-edit-polish-2572.spec.ts
acceptance[3] pass: objectui occSave.test.tsx 8/8 @4016370a: '409 -) overwrite retries re-keyed to the server currentVersion and completes the save'
acceptance[4] not-run: only failing known-stale inline-edit-polish-2572.spec.ts
acceptance[5] not-run: only failing known-stale inline-edit-polish-2572.spec.ts
uncovered: [0,1,2,4,5]: server 409 unpinned; inline legs rest only on failing known-stale inline-edit-polish-2572 spec

records-forms.record-discussion-mentions rev 3 · PARTIAL · pins: files 2/2 passed, tests 22 passed

acceptance[0] not-run: ref: clauses 1-5 browser-only, no pin
acceptance[1] not-run: ref: no pin
acceptance[2] not-run: ref: no pin
acceptance[3] not-run: ref: no pin
acceptance[4] not-run: ref: no pin
acceptance[5] pass: comments-permission-matrix.dogfood.test.ts 10/10: '(f) enable.feeds:false still answers FEEDS_DISABLED' (own cmt_nofeeds fixture, not showcase)
acceptance[6] pass: capability-gate-update-verb.test.ts 12/12: 're-threading into a feeds-disabled object -) 403 FEEDS_DISABLED' by-id + predicate (own lead_walled fixture)
acceptance[7] not-run: feed filter modes not mentioned by ref, no pin
acceptance[8] not-run: unmapped activity type not mentioned by ref, no pin
uncovered: [0-4]: ref says browser-only, no pin; [7,8]: no pin

records-forms.grid-personalization rev 4 · NOT-RUN · pins: files 3/3 passed, tests 10 passed (objectui unit pins at objectui 4016370a)

acceptance[0] not-run: groupedPagination/groupedBooleanLabel/inlineEditPersistence (objectui 4016370a, all pass) do not assert resize persistence
acceptance[1] not-run: no pin asserts row-height persistence
acceptance[2] not-run: groupedPagination.test.tsx 7/7 pins group paging/headers, not clear or server-count match
acceptance[3] not-run: no pin asserts row-color rules
acceptance[4] not-run: no pin asserts sys_user_preference column state
uncovered: [0-4]: named pins are adjacent (grouping/pagination/inline edit), none asserts a clause

records-forms.bulk-select-all-matching rev 3 · PARTIAL · pins: files 3/3 passed, tests 30 passed (objectui unit pins at objectui 4016370a)

acceptance[0] pass: objectui BulkActionBar.test.tsx 7/7 @4016370a: 'offers Select all N matching when full page is selected and more exist' / no banner when total(=page (total via prop)
acceptance[1] not-run: no pin asserts cross-page id resolution vs filtered API count
acceptance[2] pass: objectui objectBulkActionDispatch.test.tsx 12/12 @4016370a: aggregate 'exactly ONE request carrying every selected id under _selectedIds'; per-record def fans out
acceptance[3] pass: objectui bulkActionRefresh.test.tsx 11/11 @4016370a: 'bulk bar Clear resets both selection sources (main 红：wildcard fall-through 守卫声明了一个已被删除的挂载（#4116 与 #4112 的竞态） #4140)'
acceptance[4] not-run: no pin asserts HARD_CAP 5000
uncovered: [1,4]: paged fan-out across pages and the 5000 cap are not pinned

records-forms.lookup-picker-create-new rev 3 · NOT-RUN · pins: files 2/2 passed, tests 18 passed (objectui unit pins at objectui 4016370a)

acceptance[0] not-run: LookupField.dependsOn/RecordPickerDialog.filterOptions (objectui 4016370a, pass) are adjacent: no create-new assertion
acceptance[1] not-run: no pin asserts adopt-new-id
acceptance[2] not-run: dependsOn scopes the popover query; typed-search server find not asserted
acceptance[3] not-run: no pin asserts system-reference no-create
uncovered: [0-3]: ref names adjacent picker pins only

records-forms.import-job-undo-cancel rev 4 · NOT-RUN · pins: files 0/2 passed, tests 0 passed (import-console-undo.spec.ts NOT RUN; import-undo.spec.ts NOT RUN; live = objectui 4016370a, failures known-stale per anchor #24579)

acceptance[0] not-run: import-console-undo / import-harness import-undo specs NOT run this round
acceptance[1] not-run: import-console-undo / import-harness import-undo specs NOT run this round
acceptance[2] not-run: import-console-undo / import-harness import-undo specs NOT run this round
acceptance[3] not-run: import-console-undo / import-harness import-undo specs NOT run this round
uncovered: [0-3]: both pin specs not run (need own configs/dev servers)

records-forms.object-hook-lifecycle rev 5 · PARTIAL · pins: files 2/2 passed, tests 8 passed

acceptance[0] pass: showcase-public-form.dogfood.test.ts 4/4: anonymous inquiry submit stamps status/source (beforeInsert)
acceptance[1] not-run: ref: not dogfood-pinned (multi-event trim)
acceptance[2] not-run: ref: transition audit LOG oracle NOT yet pinned
acceptance[3] not-run: ref: NOT pinned
acceptance[4] not-run: ref: over-budget warn NOT pinned
acceptance[5] not-run: ref: NOT pinned
acceptance[6] pass: hook-error-format.dogfood.test.ts 4/4: blocked DELETE returns business message + 'ground truth: the blocked delete did not remove the record' (beforeDelete hef_ref_guard, per knownGaps)
acceptance[7] not-run: hook-wrappers/hook-binder unit tests named in ref but not in pin run results; onError:log not evidenced
acceptance[8] not-run: fail-closed condition only claimed for hook-wrappers tests, not in pin results
acceptance[9] not-run: ref: priority-ordering NOT pinned
uncovered: [1-5,9]: ref says log oracles/scratch variants NOT pinned; [7,8]: wrapper unit tests not in the pin results

records-forms.field-type-constraints rev 1 · PARTIAL · pins: files 4/4 passed, tests 137 passed

acceptance[0] not-run: field-zoo-roundtrip 46/46 is round-trip only; no max_length reject vector
acceptance[1] not-run: only in-range round-trip pinned; min/max/invalid_number rejects not asserted
acceptance[2] not-run: scale gap observation not asserted by any pin
acceptance[3] not-run: no invalid_option reject vector in field-zoo pins
acceptance[4] not-run: multiselect round-trips only; scalar coercion/invalid_type/invalid_option not asserted
acceptance[5] not-run: engine-lookup-referential-integrity 14/14 pins dangling-)refused (data: a lookup accepts an id that does not exist in the referenced object — including the RBAC permission-set link tables #4441); the existence-only boundary half is not asserted
acceptance[6] pass: engine-autonumber-runtime-owned 32/32: INSERT 'strips a caller-supplied record number and issues the sequence value' + UPDATE strip, stored number unchanged
acceptance[7] not-run: field-zoo matrix checks f_formula computed 31.5; summary maintained-cache half not pinned
uncovered: [0-4]: field-zoo pins are round-trip/masking only, no reject vectors; [5]: existence-only boundary unasserted; [7]: summary half unpinned

records-forms.cascading-multilevel-and-clear rev 3 · PARTIAL · pins: files 1/2 passed, tests 56 passed (cascading-options.spec.ts live 1p/1f/0s; live = objectui 4016370a, failures known-stale per anchor #24579)

acceptance[0] not-run: only cascading-options.spec.ts 'stale value clears' which FAILED live (known-stale) -) not consulted
acceptance[1] pass: rule-validator.option-visibility.test.ts 55/55: 'rejects a province that does not match the chosen country' / accepts valid; live cascading-options 'server rejects out-of-set option' passed @objectui 4016370a
acceptance[2] pass: rule-validator.option-visibility.test.ts 55/55: 'does not check a field the patch never wrote' (gap pinned as behavior)
acceptance[3] not-run: LOOKUP twin re-query/clear not pinned
acceptance[4] not-run: lookup scope gap not pinned for this item
acceptance[5] not-run: persist/reload round-trip not pinned
uncovered: [0]: only a failing known-stale live spec; [3-5]: no pin

records-forms.encrypted-field-behavior rev 2 · PASS · pins: files 2/2 passed, tests 87 passed

acceptance[0] pass: secret-fields.test.ts 41/41: 'encrypts on write: row stores a ref, sys_secret holds ciphertext, no cleartext'
acceptance[1] pass: secret-fields.test.ts: 'masks on read: find/findOne never return plaintext' + password masked; field-zoo-roundtrip f_secret/f_password 46/46
acceptance[2] pass: secret-fields.test.ts: 'update: echoing the read mask back does NOT overwrite the stored secret'
acceptance[3] pass: secret-fields.test.ts: 'fail-closed: writing a secret field with no CryptoProvider throws'
acceptance[4] pass: secret-fields.test.ts: aggregate() rejects secret/password as measure/groupBy, 'even on a better-auth object'

records-forms.field-unique-enforcement rev 3 · PASS · pins: files 3/3 passed, tests 91 passed

acceptance[0] pass: memory-unique-constraint 26/26 (refused, nothing written) + sql-driver-8577 39/39 + respelling 26/26 (409 UNIQUE_VIOLATION over REST); ref claims refusal shape
acceptance[1] pass: memory-unique-constraint: 'NULL stays NULL-DISTINCT, exactly as under SQL UNIQUE'
acceptance[2] pass: memory-unique-constraint: 'update onto a taken value is refused' + 'a row does not collide with ITSELF'
acceptance[3] pass: memory-unique-constraint: 'updateMany refuses BEFORE mutating anything'
acceptance[4] pass: memory-unique-constraint scoping describe (true=organization, global, NULL-org one bucket) + sql-driver-8577/respelling 65 tests
acceptance[5] pass: memory-unique-constraint: 'refusal is recognisable to the ENGINE, so the autonumber resync converges'

records-forms.delete-behavior-matrix rev 1 · PARTIAL · pins: files 3/3 passed, tests 58 passed

acceptance[0] pass: engine-cascade-delete 25/25: 'nulls the FK for an OPTIONAL lookup child and deletes the parent'
acceptance[1] pass: engine-cascade-delete: multi-value 'REMOVES the member when the remainder stays non-empty' + multivalue-probe 20/20
acceptance[2] pass: engine-cascade-delete: master_detail cascades; A hook cannot tell a child delete that a parent's cascade issues from a hand delete: declare the delete twin of referentialFieldClear on the hook context, carried into the QuickJS sandbox #23221 cascaded child delete runs its own hooks; atomic 13/13
acceptance[3] pass: engine-cascade-delete DELETE_RESTRICTED 409 + dependentCount tests (dependentObject asserted in file); ref claims escalation
acceptance[4] pass: engine-cascade-delete: 'refuses to delete a parent with a REQUIRED-FK child (DELETE_RESTRICTED, 409)'
acceptance[5] not-run: coercion + loud log seam pinned (FieldSchema accepts deleteBehavior: 'set_null' on a master_detail, and the engine silently resolves it to cascade #9689 describe); FieldSchema parse-reject seam not among the pins
uncovered: [5]: only the engine coercion/log seam is pinned; the FieldSchema parse-reject seam is not

records-forms.record-clone-contract rev 1 · PARTIAL · pins: files 2/2 passed, tests 14 passed

acceptance[0] not-run: conformance pins do not assert CLONE_DISABLED/default-on gate
acceptance[1] not-run: no pin asserts override vs readonly strip
acceptance[2] pass: search-clone-route-schema-conformance 6/6: '201 body parses against CloneDataResponseSchema... answers bare, no envelope' + metadata-protocol conformance 8/8
acceptance[3] not-run: conformance pins check declared keys, not the internal-field strip
acceptance[4] not-run: no pin asserts 404 RECORD_NOT_FOUND / unregistered object
uncovered: [0,1,3,4]: pins are schema-conformance only

records-forms.field-history-tracking rev 1 · PARTIAL · pins: files 2/3 passed, tests 32 passed (record-history-display.spec.ts live 0p/0f/1s; live = objectui 4016370a, failures known-stale per anchor #24579)

acceptance[0] pass: audit-option-label-summary 13/13: option labels localized on BOTH sides + audit-lookup-summary label half (field label localized)
acceptance[1] not-run: no pin asserts the untracked generic-summary fallback
acceptance[2] not-run: record-history-display.spec.ts SKIPPED live; no tab-gating pin
acceptance[3] not-run: no pin asserts the history operation vocabulary
acceptance[4] pass: audit-lookup-summary 19/19: 'renders BOTH sides of a reference change as titles' + batched/zero-read planning tests
uncovered: [1,3]: no pin; [2]: live spec skipped

records-forms.predicate-relationship-traversal rev 3 · PARTIAL · pins: files 1/1 passed, tests 45 passed

acceptance[0] not-run: ref: acceptance[3] ONLY; others still need the run
acceptance[1] not-run: ref: not covered
acceptance[2] not-run: ref: not covered
acceptance[3] pass: engine-predicate-relationship 45/45: 'reads the related row under SYSTEM authority', 'ACCEPTS and REFUSES on the real write path, per the parent field'
uncovered: [0-2]: ref says acceptance[3] ONLY

records-forms.write-time-option-and-element-shape-judgement rev 1 · PASS · pins: files 7/7 passed, tests 155 passed

acceptance[0] pass: 7 pins all passed (option-visibility 55, field-predicate-fault 19, import-kept 7, kept-option 6, validate-update 18, preview-parent 21, multi-ref-shape 29); ref unqualified
acceptance[1] pass: 7 pins all passed (option-visibility 55, field-predicate-fault 19, import-kept 7, kept-option 6, validate-update 18, preview-parent 21, multi-ref-shape 29); ref unqualified
acceptance[2] pass: 7 pins all passed (option-visibility 55, field-predicate-fault 19, import-kept 7, kept-option 6, validate-update 18, preview-parent 21, multi-ref-shape 29); ref unqualified
acceptance[3] pass: 7 pins all passed (option-visibility 55, field-predicate-fault 19, import-kept 7, kept-option 6, validate-update 18, preview-parent 21, multi-ref-shape 29); ref unqualified
acceptance[4] pass: 7 pins all passed (option-visibility 55, field-predicate-fault 19, import-kept 7, kept-option 6, validate-update 18, preview-parent 21, multi-ref-shape 29); ref unqualified

records-forms.write-answer-advisories-rollback-and-tree-delete rev 1 · PASS · pins: files 5/5 passed, tests 96 passed

acceptance[0] pass: 5 pins all passed (advisory-write-answer 21, after-hook-abort-unit 14, cascade-delete 25, cascade-delete-tree 28, verify referenceless-tree 8); ref unqualified
acceptance[1] pass: 5 pins all passed (advisory-write-answer 21, after-hook-abort-unit 14, cascade-delete 25, cascade-delete-tree 28, verify referenceless-tree 8); ref unqualified
acceptance[2] pass: 5 pins all passed (advisory-write-answer 21, after-hook-abort-unit 14, cascade-delete 25, cascade-delete-tree 28, verify referenceless-tree 8); ref unqualified
acceptance[3] pass: 5 pins all passed (advisory-write-answer 21, after-hook-abort-unit 14, cascade-delete 25, cascade-delete-tree 28, verify referenceless-tree 8); ref unqualified

records-forms.comment-reactions-and-edit-stamps rev 1 · PARTIAL · pins: files 5/5 passed, tests 43 passed

acceptance[0] pass: 5 pins passed: sys-comment-reaction.object 8, own-record-floor 4, comment-edit-stamp 10, reactions-door 2, activity-field-redaction 19
acceptance[1] not-run: own-record-floor pins foreign delete refused + declaration unique/no-update; dup 409 and unreadable 403 RECORD_NOT_ACCESSIBLE not in these pins
acceptance[2] pass: sys-comment-reactions-door.integration 2/2 (INVALID_FIELD)
acceptance[3] pass: comment-edit-stamp.integration 10/10 (is_edited/edited_at server stamp)
uncovered: [1]: 409 duplicate and 403 unreadable-comment legs not asserted by the named pins

records-forms.v18-semantic-defaults rev 1 · PARTIAL · pins: files 3/3 passed, tests 487 passed

acceptance[0] pass: field-autonumber-default-unique 9/9, view.test 463/463, record-surface 15/15 passed
acceptance[1] not-run: browser leg; spec pins cannot assert rendered rows
acceptance[2] not-run: browser screenshot leg, no pin
acceptance[3] not-run: browser screenshot leg, no pin
uncovered: [1-3]: browser legs, spec-layer pins only

search.cross-field-object-search rev 3 · PASS · pins: files 1/1 passed, tests 5 passed

acceptance[0] pass: showcase-search.dogfood.test.ts 5/5 (multi-field+industry-only, OR control Acme Retail, name-narrowed case-fold, label-)value, terms AND)
acceptance[1] pass: showcase-search.dogfood.test.ts 5/5 (multi-field+industry-only, OR control Acme Retail, name-narrowed case-fold, label-)value, terms AND)
acceptance[2] pass: showcase-search.dogfood.test.ts 5/5 (multi-field+industry-only, OR control Acme Retail, name-narrowed case-fold, label-)value, terms AND)
acceptance[3] pass: showcase-search.dogfood.test.ts 5/5 (multi-field+industry-only, OR control Acme Retail, name-narrowed case-fold, label-)value, terms AND)
acceptance[4] pass: showcase-search.dogfood.test.ts 5/5 (multi-field+industry-only, OR control Acme Retail, name-narrowed case-fold, label-)value, terms AND)

search.field-scoped-narrowing rev 1 · PARTIAL · pins: files 1/1 passed, tests 5 passed

acceptance[0] pass: showcase-search.dogfood 5/5: 'restricted to name matches nothing' + industry-restricted still returns Northwind
acceptance[1] not-run: pin never sends a bad $searchFields (400 INVALID_FIELD not asserted)
acceptance[2] not-run: pin does not probe __search
acceptance[3] not-run: pin uses only the POST body spelling
uncovered: [1-3]: pin file read; it exercises only POST-body narrowing

search.global-search-skips-unreadable rev 2 · PARTIAL · pins: files 2/2 passed, tests 16 passed

acceptance[0] pass: search-skip-unreadable.dogfood 4/4: unscoped search never names the walled object + protocol.search-skip-unreadable 12/12
acceptance[1] pass: search-skip-unreadable.dogfood: 'explicit objects= naming the walled object answers the readable hits only'
acceptance[2] pass: search-skip-unreadable.dogfood: control walled object refused at its door + admin negative control
acceptance[3] not-run: ref/knownGaps: row scope has no end-to-end pin (security(search): a field-narrowed search still matches through the name field's pinyin companion #21880)
acceptance[4] not-run: ref/knownGaps: hidden-field case has no end-to-end pin
uncovered: [3,4]: ref says no end-to-end pin yet (security(search): a field-narrowed search still matches through the name field's pinyin companion #21880)

studio-authoring.object-designer-roundtrip rev 4 · PARTIAL · pins: files 0/1 passed, tests 2 passed (studio-object-designer.spec.ts live 2p/2f/0s; live = objectui 4016370a, failures known-stale per anchor #24579)

acceptance[0] not-run: no passing spec reads fields back from the meta API
acceptance[1] pass: studio-object-designer.spec.ts F3 'a field API name derives from its label on blur' passed live @objectui 4016370a (DOM-level)
acceptance[2] pass: studio-object-designer.spec.ts F2 'object Name accepts a typed underscore' passed live @objectui 4016370a
acceptance[3] not-run: F4 FAILED live (known-stale) -) not consulted
uncovered: [0]: not asserted; [3]: only a failing known-stale F4

studio-authoring.record-page-roundtrip rev 4 · NOT-RUN · pins: files 0/1 passed, tests 0 passed (studio-record-page.spec.ts live 0p/1f/0s; live = objectui 4016370a, failures known-stale per anchor #24579)

acceptance[0] not-run: only pin studio-record-page.spec.ts failed live @objectui 4016370a (known-stale)
acceptance[1] not-run: only pin studio-record-page.spec.ts failed live @objectui 4016370a (known-stale)
acceptance[2] not-run: only pin studio-record-page.spec.ts failed live @objectui 4016370a (known-stale)
acceptance[3] not-run: only pin studio-record-page.spec.ts failed live @objectui 4016370a (known-stale)
uncovered: [0-3]: sole pin is a failing known-stale live spec

studio-authoring.draft-publish-lifecycle rev 6 · NOT-RUN · pins: files 1/1 passed, tests 3 passed

acceptance[0] not-run: dashboard-designer-roundtrip 3/3 asserts save 200 only; staged-only/runtime-404 not asserted
acceptance[1] not-run: post-publish read-back pinned; pre-publish non-serving side not asserted
acceptance[2] not-run: not in pin
acceptance[3] not-run: no If-Match 409 in pin
acceptance[4] not-run: no publish-drafts batch in pin
acceptance[5] not-run: no invalid-draft publish refusal in pin
acceptance[6] not-run: screenshot leg, no pin
acceptance[7] not-run: no history in pin
acceptance[8] not-run: no diff in pin
acceptance[9] not-run: no rollback in pin
acceptance[10] not-run: no audit in pin
acceptance[11] not-run: no X-Actor in pin
uncovered: [0-11]: the 3-test pin only proves a layout-less dashboard saves, publishes and reads back

studio-authoring.org-override-registry-gate rev 3 · PARTIAL · pins: files 1/1 passed, tests 26 passed

acceptance[0] pass: overlay-precedence 26/26: 'denied — must throw 403 (not_overridable or not_creatable)'
acceptance[1] not-run: overlay-enabled kinds accepted, but read-precedence not asserted in titles
acceptance[2] pass: overlay-precedence: NOT_CREATABLE 403 for a code-only type
acceptance[3] pass: overlay-precedence: 'runtime-creatable (allowEnvironmentOverlay:false, allowRuntimeCreate:true) — brand-new items succeed' (object)
acceptance[4] not-run: no reset/delete-overlay assertion in pin
uncovered: [1]: precedence-at-read not asserted; [4]: reset leg not pinned

studio-authoring.expression-editors rev 3 · PARTIAL · pins: files 4/4 passed, tests 71 passed (objectui unit pins at objectui 4016370a)

acceptance[0] pass: objectui CelPredicateField 24/24 @4016370a: 'shows the inferred type for a proven-Number formula' / 'reports Unknown'
acceptance[1] not-run: returnType stamp on save is an API leg; not pinned
acceptance[2] pass: objectui celAuthoring 39/39 @4016370a (real engine): bare ref / unknown record.(field) errors, non-pushdownable USING advisory
acceptance[3] pass: objectui CelPredicateField: completes after record., withholds bare suggestions in record scope, no suggest on unknown-shape root
acceptance[4] pass: objectui celAuthoring pushdown advisory + PermissionAdvancedFacets.cel 2/2 'reports blocking CEL errors up so the host can gate Save'
acceptance[5] pass: objectui CelTestRunDialog 6/6 + celAuthoring testRun (real engine): ALLOW/DENY/non-boolean
acceptance[6] not-run: editor-vs-server-engine parity probe (validate_expression) not run
acceptance[7] pass: objectui celAuthoring 'graceful degradation' describe (5 tests) passed @4016370a
uncovered: [1,6]: server-side returnType stamp and editor/server parity need a live run

studio-authoring.permission-matrix-editor-ux rev 3 · PARTIAL · pins: files 2/2 passed, tests 14 passed (objectui unit pins at objectui 4016370a)

acceptance[0] pass: objectui PermissionMatrixEditor.fieldBulk 3/3 @4016370a: filter narrows the field set, '2 / 8' counter, hidden checkboxes absent
acceptance[1] pass: fieldBulk: 'bulk acts only on what is visible'; clearing filter shows untouched fields still at prior grant
acceptance[2] not-run: fieldBulk asserts DOM checkboxes only; saved fields map (server truth) not asserted
acceptance[3] not-run: 'Clear drops the overrides' asserted in DOM only; saved map not asserted
acceptance[4] not-run: narrow-viewport scroll not pinned
acceptance[5] pass: objectui PermissionMatrixEditor.readonly 11/11 @4016370a: locks matrix, hides Save, badge names the gate
uncovered: [2,3]: server saved-map legs not asserted (DOM-only unit); [4]: viewport leg unpinned

studio-authoring.metadata-diagnostics-sweep rev 4 · PARTIAL · pins: files 1/1 passed, tests 10 passed

acceptance[0] not-run: ref: live sweep needs the run
acceptance[1] not-run: ref: needs the run
acceptance[2] not-run: ref: needs the run
acceptance[3] pass: protocol.diagnostics-store-outage 10/10: '[[finding] getMetaDiagnostics scannedTypes still overstates the swept set when a type is benignly skipped — no payload field lets a caller detect partial coverage #8924] an unrecognised spelling of a declared type rejects with the producer's 400' (knownGaps: spelling refusal unit-pinned)
acceptance[4] not-run: severity=warning not in pin
acceptance[5] not-run: browser empty-state leg, no pin
acceptance[6] not-run: blocked(fixture) on stock, no pin
acceptance[7] pass: protocol.diagnostics-store-outage 10/10: 'whole-corpus sweep propagates the 503 instead of answering total: 0'
uncovered: [0-2,4-6]: ref says live sweep, scoping, browser surfaces still need the run

studio-authoring.meta-save-preconditions-and-draft-rows rev 1 · PASS · pins: files 5/5 passed, tests 73 passed

acceptance[0] pass: 5 pins passed (version-token-occ 15, draft-head-inheritance 25, save-preconditions-parity 23, list-drafts 6, row-actor 4); ref unqualified
acceptance[1] pass: 5 pins passed (version-token-occ 15, draft-head-inheritance 25, save-preconditions-parity 23, list-drafts 6, row-actor 4); ref unqualified
acceptance[2] pass: 5 pins passed (version-token-occ 15, draft-head-inheritance 25, save-preconditions-parity 23, list-drafts 6, row-actor 4); ref unqualified
acceptance[3] pass: 5 pins passed (version-token-occ 15, draft-head-inheritance 25, save-preconditions-parity 23, list-drafts 6, row-actor 4); ref unqualified

studio-authoring.multi-package-item-rows rev 1 · PASS · pins: files 9/9 passed, tests 126 passed

acceptance[0] pass: 9 pins passed (drop-storage 5, uninstall-shared 5, runtime-owner-overlay 4, sentinel-owner 15, promote-refusal 8, sealed-first-draft 2, packageless-save 66, sealed-remedy 13, revert-stored 8); ref unqualified
acceptance[1] pass: 9 pins passed (drop-storage 5, uninstall-shared 5, runtime-owner-overlay 4, sentinel-owner 15, promote-refusal 8, sealed-first-draft 2, packageless-save 66, sealed-remedy 13, revert-stored 8); ref unqualified
acceptance[2] pass: 9 pins passed (drop-storage 5, uninstall-shared 5, runtime-owner-overlay 4, sentinel-owner 15, promote-refusal 8, sealed-first-draft 2, packageless-save 66, sealed-remedy 13, revert-stored 8); ref unqualified
acceptance[3] pass: 9 pins passed (drop-storage 5, uninstall-shared 5, runtime-owner-overlay 4, sentinel-owner 15, promote-refusal 8, sealed-first-draft 2, packageless-save 66, sealed-remedy 13, revert-stored 8); ref unqualified
acceptance[4] pass: 9 pins passed (drop-storage 5, uninstall-shared 5, runtime-owner-overlay 4, sentinel-owner 15, promote-refusal 8, sealed-first-draft 2, packageless-save 66, sealed-remedy 13, revert-stored 8); ref unqualified

studio-authoring.save-door-runs-authoring-rules rev 1 · PASS · pins: files 8/8 passed, tests 277 passed

acceptance[0] pass: 8 pins passed (runtime-authoring-gate 152, save-door-protection 12, lock-family 25, default-record-page 34, page-slot-pair 12, view-chart-binding 4, option-visibility-writes 18, props-url-target 20); ref unqualified
acceptance[1] pass: 8 pins passed (runtime-authoring-gate 152, save-door-protection 12, lock-family 25, default-record-page 34, page-slot-pair 12, view-chart-binding 4, option-visibility-writes 18, props-url-target 20); ref unqualified
acceptance[2] pass: 8 pins passed (runtime-authoring-gate 152, save-door-protection 12, lock-family 25, default-record-page 34, page-slot-pair 12, view-chart-binding 4, option-visibility-writes 18, props-url-target 20); ref unqualified
acceptance[3] pass: 8 pins passed (runtime-authoring-gate 152, save-door-protection 12, lock-family 25, default-record-page 34, page-slot-pair 12, view-chart-binding 4, option-visibility-writes 18, props-url-target 20); ref unqualified

Generated by Claude Code

Per-clause evidence, part 1 of 3 (pin output at ba4afcc; objectui pins at 4016370a).

access-security.rls-both-sides rev 6 · PARTIAL · pins: files 1/1 passed, tests 5 + verify --rls exit 0

acceptance[0] pass: showcase-private-owd 5/5: 'a member LISTS only the notes they own' (own present, other's absent)
acceptance[1] pass: showcase-private-owd 5/5: 'cannot READ another owner's note by id' (non-200); objectstack verify --rls exit 0 (38 PROVEN, 0 HOLES; CRUD 15 verified 0 FAILED)
acceptance[2] pass: objectstack verify --rls exit 0 (38 PROVEN, 0 HOLES; CRUD 15 verified 0 FAILED): by-id PATCH then admin re-read per object x persona; private-owd foreign PATCH non-2xx
acceptance[3] not-run: no pin asserts the admin reads the full set (verify re-reads single probe rows only)
acceptance[4] pass: objectstack verify --rls exit 0 (38 PROVEN, 0 HOLES; CRUD 15 verified 0 FAILED)
acceptance[5] not-run: skip explanations not in pin output (8 skipped / 226 NOT PROVEN unexplained); D11 spot-check blocked(dependency) per knownGaps
uncovered: 3: admin full-set read not asserted by any pin; 5: skip explainability + private D11 probe not in pin output (D11 needs maintainer channel)

access-security.write-path-guards rev 5 · PARTIAL · pins: files 5/5 passed, tests 72

acceptance[0] pass: pins cover it; owner-anchor-and-bulk-writes.dogfood.test.ts 9/9 passed; showcase-static-readonly.dogfood.test.ts 3/3 passed; showcase-readonly-when-parent.dogfood.test.ts 5/5 passed; engine-insert-static-readonly-strip.test.ts 21/21 passed; engine-readonly-strip-caller-values.test.ts 34/34 passed
acceptance[1] pass: pins cover it; owner-anchor-and-bulk-writes.dogfood.test.ts 9/9 passed; showcase-static-readonly.dogfood.test.ts 3/3 passed; showcase-readonly-when-parent.dogfood.test.ts 5/5 passed; engine-insert-static-readonly-strip.test.ts 21/21 passed; engine-readonly-strip-caller-values.test.ts 34/34 passed
acceptance[2] pass: pins cover it; owner-anchor-and-bulk-writes.dogfood.test.ts 9/9 passed; showcase-static-readonly.dogfood.test.ts 3/3 passed; showcase-readonly-when-parent.dogfood.test.ts 5/5 passed; engine-insert-static-readonly-strip.test.ts 21/21 passed; engine-readonly-strip-caller-values.test.ts 34/34 passed
acceptance[3] pass: pins cover it; owner-anchor-and-bulk-writes.dogfood.test.ts 9/9 passed; showcase-static-readonly.dogfood.test.ts 3/3 passed; showcase-readonly-when-parent.dogfood.test.ts 5/5 passed; engine-insert-static-readonly-strip.test.ts 21/21 passed; engine-readonly-strip-caller-values.test.ts 34/34 passed
acceptance[4] not-run: no pin asserts empty-owner bulk INSERT stamping (owner-anchor 9/9 covers forge/transfer/disown/bulk update+delete only)
acceptance[5] not-run: readonly-when-parent 5/5 pins the paid-invoice line freeze, but the bulk-update PER-ROW judgement is not asserted
acceptance[6] not-run: no pin asserts per-row validation-rule evaluation in a mixed bulk update (Validation rules, requiredWhen and option visibleWhen are silently skipped on multi-row updates (options.multi) #3106)
uncovered: 4,5,6: empty-owner bulk insert stamping, per-row bulk readonlyWhen judgement and per-row bulk validation have no asserting test

access-security.record-access-explain rev 2 · PARTIAL · pins: files 1/1 passed, tests 10

acceptance[0] not-run: not asserted by the pins; see uncovered
acceptance[1] pass: showcase-permission-zoo 10/10: 'explain() reports the vama_bypass layer with the auditor set as contributor'
acceptance[2] not-run: not asserted by the pins; see uncovered
acceptance[3] not-run: not asserted by the pins; see uncovered
acceptance[4] not-run: not asserted by the pins; see uncovered
uncovered: 0,4: console panel render, no pin; 2: plain-member explain not-visible half not asserted; 3: deny-side explain shape not asserted

access-security.crud-permission-matrix rev 6 · PARTIAL · pins: files 2/2 passed, tests 56 + verify --rls exit 0

acceptance[0] pass: showcase-crud-persona-matrix 46/46 (164 persona cells, showcase_* rows); objectstack verify --rls exit 0 (38 PROVEN, 0 HOLES; CRUD 15 verified 0 FAILED) — 4 delegate sys_* rows STILL MANUAL
acceptance[1] pass: showcase-crud-persona-matrix 46/46: every denial asserted 403 PERMISSION_DENIED (showcase_* rows)
acceptance[2] pass: pins cover it; showcase-crud-persona-matrix.dogfood.test.ts 46/46 passed; showcase-permission-zoo.dogfood.test.ts 10/10 passed; objectstack verify --rls exit 0 (38 PROVEN, 0 HOLES; CRUD 15 verified 0 FAILED)
acceptance[3] pass: pins cover it; showcase-crud-persona-matrix.dogfood.test.ts 46/46 passed; showcase-permission-zoo.dogfood.test.ts 10/10 passed; objectstack verify --rls exit 0 (38 PROVEN, 0 HOLES; CRUD 15 verified 0 FAILED)
acceptance[4] pass: pins cover it; showcase-crud-persona-matrix.dogfood.test.ts 46/46 passed; showcase-permission-zoo.dogfood.test.ts 10/10 passed; objectstack verify --rls exit 0 (38 PROVEN, 0 HOLES; CRUD 15 verified 0 FAILED)
acceptance[5] not-run: ref: guest_portal create-without-read unobservable on member persona; knownGaps blocked(fixture)
acceptance[6] not-run: ref STILL MANUAL: 4 showcase_field_ops_delegate x sys_* rows not driven by the pin
uncovered: 5: guest-anchor intake asymmetry blocked(fixture); 6: 4 delegate x sys_* rows STILL MANUAL (so per-cell completeness not met)

access-security.owd-sharing-matrix rev 3 · PARTIAL · pins: files 4/4 passed, tests 16

acceptance[0] pass: showcase-private-owd 5/5: list excludes, by-id GET/PATCH non-2xx, own PATCH 2xx
acceptance[1] pass: showcase-public-read-owd 3/3: B GET 200 by id + list, B PATCH non-2xx, owner PATCH 2xx
acceptance[2] not-run: not asserted by the pins; see uncovered
acceptance[3] not-run: not asserted by the pins; see uncovered
acceptance[4] pass: showcase-invoice-cbp 4/4 + controlled-by-parent 4/4: DERIVED READ/WRITE denied, own line read+edit
acceptance[5] not-run: not asserted by the pins; see uncovered
acceptance[6] not-run: not asserted by the pins; see uncovered
uncovered: 2: modifyAllRecords PATCH of foreign announcement not in any pin; 3: public_read_write project not driven; 5: auditor VAMA on invoice lines not asserted; 6: so not all four models driven

access-security.fls-mask-and-strip rev 4 · PARTIAL · pins: files 2/2 passed, tests 18

acceptance[0] pass: showcase-permission-zoo 10/10: 'FLS: a contributor can edit a project but NOT its budget fields' (name edit (300)
acceptance[1] pass: showcase-permission-zoo 10/10: budget PATCH denied and budget unchanged
acceptance[2] not-run: not asserted by the pins; see uncovered
acceptance[3] not-run: not asserted by the pins; see uncovered
acceptance[4] not-run: not asserted by the pins; see uncovered
uncovered: 2: admin's same budget write not asserted; 3: UI render STILL MANUAL; 4: API strip pinned (fls-read-mask-strip 8/8) but the UI half is STILL MANUAL

access-security.scope-depth-asymmetry rev 2 · PARTIAL · pins: files 3/3 passed, tests 20

acceptance[0] not-run: not asserted by the pins; see uncovered
acceptance[1] pass: showcase-scope-depth-write 9/9: wide readScope readable yet not editable, owner edits own (generic asymmetry)
acceptance[2] not-run: not asserted by the pins; see uncovered
acceptance[3] not-run: not asserted by the pins; see uncovered
acceptance[4] pass: showcase-scope-depth 7/7: 'a lone child member sees only their own'; fallback 4/4 fails closed
acceptance[5] not-run: not asserted by the pins; see uncovered
uncovered: 0,2,3,5: pins drive unit/unit_and_below/own_and_reports BU depth, not the manager/executive/ops org-wide personas the clauses name

access-security.anonymous-deny-surfaces rev 3 · PARTIAL · pins: files 1/1 passed, tests 76

acceptance[0] pass: pins cover it; showcase-anonymous-deny-surfaces.dogfood.test.ts 76/76 passed
acceptance[1] pass: pins cover it; showcase-anonymous-deny-surfaces.dogfood.test.ts 76/76 passed
acceptance[2] pass: pins cover it; showcase-anonymous-deny-surfaces.dogfood.test.ts 76/76 passed
acceptance[3] pass: pins cover it; showcase-anonymous-deny-surfaces.dogfood.test.ts 76/76 passed
acceptance[4] pass: pins cover it; showcase-anonymous-deny-surfaces.dogfood.test.ts 76/76 passed
acceptance[5] not-run: showcase-anonymous-deny-surfaces does not probe a declared-public route (anonymous forms)
acceptance[6] pass: pins cover it; showcase-anonymous-deny-surfaces.dogfood.test.ts 76/76 passed
uncovered: 5: declared-public form surface not probed by the pin

access-security.public-form-withdrawal-layers rev 3 · PASS · pins: files 4/4 passed, tests 373

acceptance[0] pass: ref claims whole-item coverage; showcase-public-form-withdrawal-layers.dogfood.test.ts 3/3 passed; public-form-withdrawal.test.ts 27/27 passed; protocol.org-scoped-write-refused.test.ts 297/297 passed; anonymous-form-intake.test.ts 46/46 passed
acceptance[1] pass: ref claims whole-item coverage; showcase-public-form-withdrawal-layers.dogfood.test.ts 3/3 passed; public-form-withdrawal.test.ts 27/27 passed; protocol.org-scoped-write-refused.test.ts 297/297 passed; anonymous-form-intake.test.ts 46/46 passed
acceptance[2] pass: ref claims whole-item coverage; showcase-public-form-withdrawal-layers.dogfood.test.ts 3/3 passed; public-form-withdrawal.test.ts 27/27 passed; protocol.org-scoped-write-refused.test.ts 297/297 passed; anonymous-form-intake.test.ts 46/46 passed
acceptance[3] pass: ref claims whole-item coverage; showcase-public-form-withdrawal-layers.dogfood.test.ts 3/3 passed; public-form-withdrawal.test.ts 27/27 passed; protocol.org-scoped-write-refused.test.ts 297/297 passed; anonymous-form-intake.test.ts 46/46 passed
acceptance[4] pass: ref claims whole-item coverage; showcase-public-form-withdrawal-layers.dogfood.test.ts 3/3 passed; public-form-withdrawal.test.ts 27/27 passed; protocol.org-scoped-write-refused.test.ts 297/297 passed; anonymous-form-intake.test.ts 46/46 passed
acceptance[5] pass: ref claims whole-item coverage; showcase-public-form-withdrawal-layers.dogfood.test.ts 3/3 passed; public-form-withdrawal.test.ts 27/27 passed; protocol.org-scoped-write-refused.test.ts 297/297 passed; anonymous-form-intake.test.ts 46/46 passed

access-security.activation-write-operator-gate rev 3 · PASS · pins: files 2/2 passed, tests 46

acceptance[0] pass: ref claims whole-item coverage; automation-activation-posture-gate.test.ts 19/19 passed; action-activation-posture-gate.test.ts 27/27 passed
acceptance[1] pass: ref claims whole-item coverage; automation-activation-posture-gate.test.ts 19/19 passed; action-activation-posture-gate.test.ts 27/27 passed
acceptance[2] pass: ref claims whole-item coverage; automation-activation-posture-gate.test.ts 19/19 passed; action-activation-posture-gate.test.ts 27/27 passed
acceptance[3] pass: ref claims whole-item coverage; automation-activation-posture-gate.test.ts 19/19 passed; action-activation-posture-gate.test.ts 27/27 passed
acceptance[4] pass: ref claims whole-item coverage; automation-activation-posture-gate.test.ts 19/19 passed; action-activation-posture-gate.test.ts 27/27 passed
acceptance[5] pass: ref claims whole-item coverage; automation-activation-posture-gate.test.ts 19/19 passed; action-activation-posture-gate.test.ts 27/27 passed

access-security.platform-owner-email-anchor rev 3 · PARTIAL · pins: files 3/3 passed, tests 72

acceptance[0] not-run: not asserted by the pins; see uncovered
acceptance[1] not-run: not asserted by the pins; see uncovered
acceptance[2] not-run: not asserted by the pins; see uncovered
acceptance[3] not-run: not asserted by the pins; see uncovered
acceptance[4] pass: resolve-authz-context.platform-admin-config 37/37 (verified stored-row match envelope)
acceptance[5] pass: resolve-authz-context.platform-admin-config 37/37 ([Design] Re-anchor platform-admin: admin_full_access becomes a kernel metadata declaration; WHO holds it comes from env-configured verified emails — retiring the org-less row anchor #11663 L5 posture split)
uncovered: 0-3: live-HTTP arms over a real boot STILL MANUAL (pins run the derivation in-process)

access-security.me-permissions-aggregation-parity rev 2 · PARTIAL · pins: files 6/6 passed, tests 108

acceptance[0] not-run: not asserted by the pins; see uncovered
acceptance[1] not-run: not asserted by the pins; see uncovered
acceptance[2] pass: me-apps-and-everyone-baseline 6/6 (member gated-app absence, tabPermissions) + position-grants 8/8 (gated app listed for holder)
acceptance[3] not-run: not asserted by the pins; see uncovered
acceptance[4] not-run: not asserted by the pins; see uncovered
acceptance[5] not-run: not asserted by the pins; see uncovered
acceptance[6] not-run: not asserted by the pins; see uncovered
uncovered: 0,1,6: live parity cross-checks STILL MANUAL; 4: self-scoping probe STILL MANUAL; 3: only /me/apps anonymous [] pinned, permissions/localization anonymous shape not; 5: localization not in pins

access-security.record-view-read-audit rev 2 · PARTIAL · pins: files 2/2 passed, tests 54

acceptance[0] not-run: not asserted by the pins; see uncovered
acceptance[1] not-run: not asserted by the pins; see uncovered
acceptance[2] not-run: not asserted by the pins; see uncovered
acceptance[3] not-run: not asserted by the pins; see uncovered
acceptance[4] not-run: not asserted by the pins; see uncovered
acceptance[5] pass: read-audit 33/33: isSystem + no-principal skips
uncovered: 0: stock-boot honest default STILL MANUAL; 1-4: configured live loop STILL MANUAL (fixture-gapped)

access-security.share-link-landing-page rev 3 · NOT-RUN · pins: files 1/1 passed, tests 10 (objectui 4016370a)

acceptance[0] not-run: objectui pin (objectui 4016370a) not asserted by the pins; see uncovered
acceptance[1] not-run: objectui pin (objectui 4016370a) not asserted by the pins; see uncovered
acceptance[2] not-run: objectui pin (objectui 4016370a) not asserted by the pins; see uncovered
acceptance[3] not-run: objectui pin (objectui 4016370a) not asserted by the pins; see uncovered
acceptance[4] not-run: objectui pin (objectui 4016370a) not asserted by the pins; see uncovered
uncovered: 0-4: objectui pin shared-record-shape.test.ts passed 10/10 at objectui 4016370a but covers the envelope fold only; everything rendered stays manual; no live spec

access-security.anonymous-floor-v18-doors rev 1 · PASS · pins: files 5/5 passed, tests 117

acceptance[0] pass: ref claims whole-item coverage; anonymous-door-sweep.dogfood.test.ts 20/20 passed; rest-api-description-anonymous-deny.test.ts 13/13 passed; i18n-anonymous-deny.test.ts 52/52 passed; settings-routes.anonymous-floor.pin.test.ts 30/30 passed; public-form-submit-answer.test.ts 2/2 passed
acceptance[1] pass: ref claims whole-item coverage; anonymous-door-sweep.dogfood.test.ts 20/20 passed; rest-api-description-anonymous-deny.test.ts 13/13 passed; i18n-anonymous-deny.test.ts 52/52 passed; settings-routes.anonymous-floor.pin.test.ts 30/30 passed; public-form-submit-answer.test.ts 2/2 passed
acceptance[2] pass: ref claims whole-item coverage; anonymous-door-sweep.dogfood.test.ts 20/20 passed; rest-api-description-anonymous-deny.test.ts 13/13 passed; i18n-anonymous-deny.test.ts 52/52 passed; settings-routes.anonymous-floor.pin.test.ts 30/30 passed; public-form-submit-answer.test.ts 2/2 passed
acceptance[3] pass: ref claims whole-item coverage; anonymous-door-sweep.dogfood.test.ts 20/20 passed; rest-api-description-anonymous-deny.test.ts 13/13 passed; i18n-anonymous-deny.test.ts 52/52 passed; settings-routes.anonymous-floor.pin.test.ts 30/30 passed; public-form-submit-answer.test.ts 2/2 passed

access-security.walled-environment-metadata-operator-only rev 1 · PASS · pins: files 7/7 passed, tests 130

acceptance[0] pass: ref claims whole-item coverage; meta-migrate-stored-walled-refusal.test.ts 6/6 passed; packages-walled-write-refusal.test.ts 30/30 passed; automation-walled-definition-write.test.ts 12/12 passed; meta-walled-catalog-refusal.test.ts 19/19 passed; wall-environment-metadata-refusal.dogfood.test.ts 23/23 passed; wall-catalog-refusal.dogfood.test.ts 17/17 passed; wall-package-doors-refusal.dogfood.test.ts 23/23 passed
acceptance[1] pass: ref claims whole-item coverage; meta-migrate-stored-walled-refusal.test.ts 6/6 passed; packages-walled-write-refusal.test.ts 30/30 passed; automation-walled-definition-write.test.ts 12/12 passed; meta-walled-catalog-refusal.test.ts 19/19 passed; wall-environment-metadata-refusal.dogfood.test.ts 23/23 passed; wall-catalog-refusal.dogfood.test.ts 17/17 passed; wall-package-doors-refusal.dogfood.test.ts 23/23 passed
acceptance[2] pass: ref claims whole-item coverage; meta-migrate-stored-walled-refusal.test.ts 6/6 passed; packages-walled-write-refusal.test.ts 30/30 passed; automation-walled-definition-write.test.ts 12/12 passed; meta-walled-catalog-refusal.test.ts 19/19 passed; wall-environment-metadata-refusal.dogfood.test.ts 23/23 passed; wall-catalog-refusal.dogfood.test.ts 17/17 passed; wall-package-doors-refusal.dogfood.test.ts 23/23 passed

access-security.meta-authoring-trail-and-audience-gates rev 1 · PASS · pins: files 3/3 passed, tests 69

acceptance[0] pass: ref claims whole-item coverage; meta-history-diff-authoring-door.test.ts 19/19 passed; wall-authoring-trail-doors.dogfood.test.ts 31/31 passed; meta-view-dashboard-audience-gate.test.ts 19/19 passed
acceptance[1] pass: ref claims whole-item coverage; meta-history-diff-authoring-door.test.ts 19/19 passed; wall-authoring-trail-doors.dogfood.test.ts 31/31 passed; meta-view-dashboard-audience-gate.test.ts 19/19 passed
acceptance[2] pass: ref claims whole-item coverage; meta-history-diff-authoring-door.test.ts 19/19 passed; wall-authoring-trail-doors.dogfood.test.ts 31/31 passed; meta-view-dashboard-audience-gate.test.ts 19/19 passed

access-security.security-catalog-activation-and-clone-doors rev 1 · PASS · pins: files 4/4 passed, tests 92

acceptance[0] pass: ref claims whole-item coverage; catalog-activation-door.test.ts 57/57 passed; catalog-activation-door.dogfood.test.ts 8/8 passed; permission-set-clone.test.ts 23/23 passed; permission-set-clone-door.dogfood.test.ts 4/4 passed
acceptance[1] pass: ref claims whole-item coverage; catalog-activation-door.test.ts 57/57 passed; catalog-activation-door.dogfood.test.ts 8/8 passed; permission-set-clone.test.ts 23/23 passed; permission-set-clone-door.dogfood.test.ts 4/4 passed
acceptance[2] pass: ref claims whole-item coverage; catalog-activation-door.test.ts 57/57 passed; catalog-activation-door.dogfood.test.ts 8/8 passed; permission-set-clone.test.ts 23/23 passed; permission-set-clone-door.dogfood.test.ts 4/4 passed
acceptance[3] pass: ref claims whole-item coverage; catalog-activation-door.test.ts 57/57 passed; catalog-activation-door.dogfood.test.ts 8/8 passed; permission-set-clone.test.ts 23/23 passed; permission-set-clone-door.dogfood.test.ts 4/4 passed

access-security.security-catalog-one-holder-and-boot-report rev 1 · PASS · pins: files 6/6 passed, tests 53

acceptance[0] pass: ref claims whole-item coverage; standalone-stack-security-catalog-one-holder.test.ts 6/6 passed; security-catalog-cold-boot-environment-holder.dogfood.test.ts 4/4 passed; security-catalog-overlays.integration.test.ts 6/6 passed; catalog-reference-report.test.ts 14/14 passed; permission-set-owner-binding.test.ts 19/19 passed; permission-set-owner-registration.test.ts 4/4 passed
acceptance[1] pass: ref claims whole-item coverage; standalone-stack-security-catalog-one-holder.test.ts 6/6 passed; security-catalog-cold-boot-environment-holder.dogfood.test.ts 4/4 passed; security-catalog-overlays.integration.test.ts 6/6 passed; catalog-reference-report.test.ts 14/14 passed; permission-set-owner-binding.test.ts 19/19 passed; permission-set-owner-registration.test.ts 4/4 passed
acceptance[2] pass: ref claims whole-item coverage; standalone-stack-security-catalog-one-holder.test.ts 6/6 passed; security-catalog-cold-boot-environment-holder.dogfood.test.ts 4/4 passed; security-catalog-overlays.integration.test.ts 6/6 passed; catalog-reference-report.test.ts 14/14 passed; permission-set-owner-binding.test.ts 19/19 passed; permission-set-owner-registration.test.ts 4/4 passed
acceptance[3] pass: ref claims whole-item coverage; standalone-stack-security-catalog-one-holder.test.ts 6/6 passed; security-catalog-cold-boot-environment-holder.dogfood.test.ts 4/4 passed; security-catalog-overlays.integration.test.ts 6/6 passed; catalog-reference-report.test.ts 14/14 passed; permission-set-owner-binding.test.ts 19/19 passed; permission-set-owner-registration.test.ts 4/4 passed
acceptance[4] pass: ref claims whole-item coverage; standalone-stack-security-catalog-one-holder.test.ts 6/6 passed; security-catalog-cold-boot-environment-holder.dogfood.test.ts 4/4 passed; security-catalog-overlays.integration.test.ts 6/6 passed; catalog-reference-report.test.ts 14/14 passed; permission-set-owner-binding.test.ts 19/19 passed; permission-set-owner-registration.test.ts 4/4 passed

access-security.grant-table-write-contract rev 1 · PASS · pins: files 5/5 passed, tests 75

acceptance[0] pass: ref claims whole-item coverage; grant-permission-set-name.test.ts 16/16 passed; sys-user-permission-set-window-order.test.ts 11/11 passed; permission-set-assignment-window.dogfood.test.ts 7/7 passed; granted-by-writer-provenance.test.ts 20/20 passed; grant-holder-membership-refusal.test.ts 21/21 passed
acceptance[1] pass: ref claims whole-item coverage; grant-permission-set-name.test.ts 16/16 passed; sys-user-permission-set-window-order.test.ts 11/11 passed; permission-set-assignment-window.dogfood.test.ts 7/7 passed; granted-by-writer-provenance.test.ts 20/20 passed; grant-holder-membership-refusal.test.ts 21/21 passed
acceptance[2] pass: ref claims whole-item coverage; grant-permission-set-name.test.ts 16/16 passed; sys-user-permission-set-window-order.test.ts 11/11 passed; permission-set-assignment-window.dogfood.test.ts 7/7 passed; granted-by-writer-provenance.test.ts 20/20 passed; grant-holder-membership-refusal.test.ts 21/21 passed
acceptance[3] pass: ref claims whole-item coverage; grant-permission-set-name.test.ts 16/16 passed; sys-user-permission-set-window-order.test.ts 11/11 passed; permission-set-assignment-window.dogfood.test.ts 7/7 passed; granted-by-writer-provenance.test.ts 20/20 passed; grant-holder-membership-refusal.test.ts 21/21 passed
acceptance[4] pass: ref claims whole-item coverage; grant-permission-set-name.test.ts 16/16 passed; sys-user-permission-set-window-order.test.ts 11/11 passed; permission-set-assignment-window.dogfood.test.ts 7/7 passed; granted-by-writer-provenance.test.ts 20/20 passed; grant-holder-membership-refusal.test.ts 21/21 passed

access-security.parent-and-organization-write-guards rev 1 · PASS · pins: files 6/6 passed, tests 125

acceptance[0] pass: ref claims whole-item coverage; tenant-wall-organization-removal.test.ts 34/34 passed; engine-unreadable-master-detail-header.test.ts 30/30 passed; engine-predicate-related-master-detail-header.test.ts 22/22 passed; cbp-parent-attachment-comment-gates.dogfood.test.ts 10/10 passed; cbp-explain-master-write.dogfood.test.ts 20/20 passed; controlled-by-parent-chain-middle-master.test.ts 9/9 passed
acceptance[1] pass: ref claims whole-item coverage; tenant-wall-organization-removal.test.ts 34/34 passed; engine-unreadable-master-detail-header.test.ts 30/30 passed; engine-predicate-related-master-detail-header.test.ts 22/22 passed; cbp-parent-attachment-comment-gates.dogfood.test.ts 10/10 passed; cbp-explain-master-write.dogfood.test.ts 20/20 passed; controlled-by-parent-chain-middle-master.test.ts 9/9 passed
acceptance[2] pass: ref claims whole-item coverage; tenant-wall-organization-removal.test.ts 34/34 passed; engine-unreadable-master-detail-header.test.ts 30/30 passed; engine-predicate-related-master-detail-header.test.ts 22/22 passed; cbp-parent-attachment-comment-gates.dogfood.test.ts 10/10 passed; cbp-explain-master-write.dogfood.test.ts 20/20 passed; controlled-by-parent-chain-middle-master.test.ts 9/9 passed
acceptance[3] pass: ref claims whole-item coverage; tenant-wall-organization-removal.test.ts 34/34 passed; engine-unreadable-master-detail-header.test.ts 30/30 passed; engine-predicate-related-master-detail-header.test.ts 22/22 passed; cbp-parent-attachment-comment-gates.dogfood.test.ts 10/10 passed; cbp-explain-master-write.dogfood.test.ts 20/20 passed; controlled-by-parent-chain-middle-master.test.ts 9/9 passed

access-security.deployment-tables-platform-only rev 1 · PASS · pins: files 2/2 passed, tests 25

acceptance[0] pass: ref claims whole-item coverage; deployment-level-no-tenant-column.test.ts 22/22 passed; authz-identity-objects-boot-refusal.test.ts 3/3 passed
acceptance[1] pass: ref claims whole-item coverage; deployment-level-no-tenant-column.test.ts 22/22 passed; authz-identity-objects-boot-refusal.test.ts 3/3 passed
acceptance[2] pass: ref claims whole-item coverage; deployment-level-no-tenant-column.test.ts 22/22 passed; authz-identity-objects-boot-refusal.test.ts 3/3 passed

access-security.share-link-combined-gates rev 1 · PASS · pins: files 2/2 passed, tests 69

acceptance[0] pass: ref claims whole-item coverage; share-link-eligibility.test.ts 43/43 passed; share-link-envelope.conformance.test.ts 26/26 passed
acceptance[1] pass: ref claims whole-item coverage; share-link-eligibility.test.ts 43/43 passed; share-link-envelope.conformance.test.ts 26/26 passed
acceptance[2] pass: ref claims whole-item coverage; share-link-eligibility.test.ts 43/43 passed; share-link-envelope.conformance.test.ts 26/26 passed
acceptance[3] pass: ref claims whole-item coverage; share-link-eligibility.test.ts 43/43 passed; share-link-envelope.conformance.test.ts 26/26 passed

ai.mcp-http-surface rev 3 · PARTIAL · pins: files 1/1 passed, tests 6

acceptance[0] not-run: not asserted by the pins; see uncovered
acceptance[1] not-run: not asserted by the pins; see uncovered
acceptance[2] not-run: not asserted by the pins; see uncovered
acceptance[3] pass: showcase-mcp-http-identity 6/6: 'denies an anonymous MCP request before any tool runs (fail-closed, 401)'
acceptance[4] not-run: not asserted by the pins; see uncovered
acceptance[5] not-run: not asserted by the pins; see uncovered
uncovered: 0: opted-out boot 404, 1: /mcp/skill serve, 2: 405, 5: OAuth scopes - not in the pin; 4: tools/list asserts only 2 names, not the documented set

ai.mcp-stdio-fail-closed rev 6 · PARTIAL · pins: files 1/1 passed, tests 17

acceptance[0] pass: plugin.test 17/17: 'refuses to start stdio when enabled without OS_MCP_STDIO_API_KEY'
acceptance[1] pass: plugin.test 17/17: 'refuses to start stdio when the key does not resolve to an identity'
acceptance[2] not-run: not asserted by the pins; see uncovered
acceptance[3] not-run: not asserted by the pins; see uncovered
acceptance[4] not-run: not asserted by the pins; see uncovered
acceptance[5] not-run: not asserted by the pins; see uncovered
acceptance[6] not-run: not asserted by the pins; see uncovered
acceptance[7] pass: plugin.test 17/17: 'does NOT require a key when stdio is not enabled'
uncovered: 2: principal-bound log line not asserted; 3-6: member-keyed RLS/FLS/aggregate/revocation parity not in the unit pin

ai.mcp-validate-expression rev 3 · PASS · pins: files 1/1 passed, tests 8

acceptance[0] pass: ref claims whole-item coverage; mcp-validate-expression.test.ts 8/8 passed
acceptance[1] pass: ref claims whole-item coverage; mcp-validate-expression.test.ts 8/8 passed
acceptance[2] pass: ref claims whole-item coverage; mcp-validate-expression.test.ts 8/8 passed
acceptance[3] pass: ref claims whole-item coverage; mcp-validate-expression.test.ts 8/8 passed

ai.skill-instructions-mcp-prompts rev 2 · PASS · pins: files 1/1 passed, tests 12

acceptance[0] pass: ref claims whole-item coverage; skill-prompts.test.ts 12/12 passed
acceptance[1] pass: ref claims whole-item coverage; skill-prompts.test.ts 12/12 passed
acceptance[2] pass: ref claims whole-item coverage; skill-prompts.test.ts 12/12 passed
acceptance[3] pass: ref claims whole-item coverage; skill-prompts.test.ts 12/12 passed
acceptance[4] pass: ref claims whole-item coverage; skill-prompts.test.ts 12/12 passed

ai.mcp-oauth-private-host-transport rev 3 · PARTIAL · pins: files 1/1 passed, tests 77

acceptance[0] pass: pins cover it; auth-manager.mcp-oauth.test.ts 77/77 passed
acceptance[1] pass: pins cover it; auth-manager.mcp-oauth.test.ts 77/77 passed
acceptance[2] not-run: auth-manager.mcp-oauth 77/77 has no case asserting the plain-HTTP warning line
acceptance[3] pass: pins cover it; auth-manager.mcp-oauth.test.ts 77/77 passed
acceptance[4] pass: pins cover it; auth-manager.mcp-oauth.test.ts 77/77 passed
uncovered: 2: the one-warning-per-boot log clause is not asserted

ai.mcp-coded-refusals-and-runtime-exposure rev 1 · PASS · pins: files 3/3 passed, tests 23

acceptance[0] pass: ref claims whole-item coverage; plugin.record-resource-exposure.test.ts 8/8 passed; mcp-action-refusal-details.test.ts 5/5 passed; plugin-runtime-object-metadata-copy.test.ts 10/10 passed
acceptance[1] pass: ref claims whole-item coverage; plugin.record-resource-exposure.test.ts 8/8 passed; mcp-action-refusal-details.test.ts 5/5 passed; plugin-runtime-object-metadata-copy.test.ts 10/10 passed
acceptance[2] pass: ref claims whole-item coverage; plugin.record-resource-exposure.test.ts 8/8 passed; mcp-action-refusal-details.test.ts 5/5 passed; plugin-runtime-object-metadata-copy.test.ts 10/10 passed
acceptance[3] pass: ref claims whole-item coverage; plugin.record-resource-exposure.test.ts 8/8 passed; mcp-action-refusal-details.test.ts 5/5 passed; plugin-runtime-object-metadata-copy.test.ts 10/10 passed

api-backend.query-contract-matrix rev 3 · PARTIAL · pins: files 3/3 passed, tests 212

acceptance[0] not-run: not asserted by the pins; see uncovered
acceptance[1] not-run: not asserted by the pins; see uncovered
acceptance[2] not-run: not asserted by the pins; see uncovered
acceptance[3] not-run: not asserted by the pins; see uncovered
acceptance[4] pass: engine.test 136/136: [Security: $expand bypasses RLS/FLS on the referenced object (data leak on lookups) #2850] expand sub-read through the secured find path (C4)
acceptance[5] not-run: not asserted by the pins; see uncovered
acceptance[6] not-run: not asserted by the pins; see uncovered
acceptance[7] not-run: not asserted by the pins; see uncovered
acceptance[8] not-run: not asserted by the pins; see uncovered
uncovered: 0-3,5-8: REST-contract clauses NOT reached by the engine suites, remain manual (ref)

api-backend.bulk-write-contract rev 2 · PARTIAL · pins: files 1/1 passed, tests 9

acceptance[0] not-run: not asserted by the pins; see uncovered
acceptance[1] pass: owner-anchor-and-bulk-writes 9/9: 'a member bulk UPDATE only touches their own rows, never a peer's'
acceptance[2] not-run: not asserted by the pins; see uncovered
acceptance[3] not-run: not asserted by the pins; see uncovered
acceptance[4] not-run: not asserted by the pins; see uncovered
acceptance[5] not-run: not asserted by the pins; see uncovered
uncovered: 0: createMany stamping, 2: RECORD_NOT_FOUND per-row no-op, 3: BATCH_TOO_LARGE, 4: per-row delete-permission refusal, 5: ERR_BULK_RESULT_MISMATCH - not asserted by the bulk halves

api-backend.declarative-endpoint-execution rev 3 · PASS · pins: files 4/4 passed, tests 131

acceptance[0] pass: ref claims whole-item coverage; showcase-declarative-endpoints.dogfood.test.ts 24/24 passed; declarative-endpoint-policy.dogfood.test.ts 8/8 passed; endpoint-executor.test.ts 51/51 passed; apis-publish-gates.test.ts 48/48 passed
acceptance[1] pass: ref claims whole-item coverage; showcase-declarative-endpoints.dogfood.test.ts 24/24 passed; declarative-endpoint-policy.dogfood.test.ts 8/8 passed; endpoint-executor.test.ts 51/51 passed; apis-publish-gates.test.ts 48/48 passed
acceptance[2] pass: ref claims whole-item coverage; showcase-declarative-endpoints.dogfood.test.ts 24/24 passed; declarative-endpoint-policy.dogfood.test.ts 8/8 passed; endpoint-executor.test.ts 51/51 passed; apis-publish-gates.test.ts 48/48 passed
acceptance[3] pass: ref claims whole-item coverage; showcase-declarative-endpoints.dogfood.test.ts 24/24 passed; declarative-endpoint-policy.dogfood.test.ts 8/8 passed; endpoint-executor.test.ts 51/51 passed; apis-publish-gates.test.ts 48/48 passed

api-backend.packaged-action-disabled-dispatch rev 3 · PARTIAL · pins: files 2/2 passed, tests 22

acceptance[0] pass: pins cover it; packaged-activation-ledger-reach.dogfood.test.ts 11/11 passed; action-activation-dispatch.test.ts 11/11 passed
acceptance[1] not-run: ref: param-ordering contrast stays manual
acceptance[2] not-run: no pin asserts the record-load ordering (knownGaps: no contrasting refusal)
acceptance[3] pass: pins cover it; packaged-activation-ledger-reach.dogfood.test.ts 11/11 passed; action-activation-dispatch.test.ts 11/11 passed
acceptance[4] not-run: ref: LIVE MCP transport call stays manual (unit asserts envelope only)
acceptance[5] not-run: ref: RESTART leg stays manual
acceptance[6] pass: pins cover it; packaged-activation-ledger-reach.dogfood.test.ts 11/11 passed; action-activation-dispatch.test.ts 11/11 passed
uncovered: 1: param-ordering contrast, 4: live MCP call, 5: restart durability - manual per ref; 2: record-load ordering not pinned

api-backend.action-activation-door-contract rev 2 · PARTIAL · pins: files 3/3 passed, tests 43

acceptance[0] not-run: not asserted by the pins; see uncovered
acceptance[1] not-run: not asserted by the pins; see uncovered
acceptance[2] not-run: not asserted by the pins; see uncovered
acceptance[3] not-run: not asserted by the pins; see uncovered
acceptance[4] not-run: not asserted by the pins; see uncovered
acceptance[5] pass: packaged-activation-ledger-reach 11/11: 'writes ONE deployment-level row, and the TABLE has no tenant column', re-enable updates
acceptance[6] pass: action-activation-posture-gate 27/27: ambiguity 409 + no write
acceptance[7] pass: action-activation-posture-gate 27/27: 501 no-projection, 503 non-durable
uncovered: 0-4: live-server body/authority arm sweep stays manual (ref); live pin covers only 2-seg 400 + undeclared 404, not the 4-seg router 404 or other arms

api-backend.rest-crud-config-contract rev 2 · PARTIAL · pins: files 1/1 passed, tests 25

acceptance[0] not-run: not asserted by the pins; see uncovered
acceptance[1] not-run: not asserted by the pins; see uncovered
acceptance[2] not-run: not asserted by the pins; see uncovered
acceptance[3] not-run: not asserted by the pins; see uncovered
acceptance[4] pass: rest-sub-config-parse-not-cast 25/25: §E refuses crud.patterns and crud.objectParamStyle
acceptance[5] pass: rest-sub-config-parse-not-cast 25/25: §C empty config defaults, §D partial crud.operations kept
uncovered: 0-3: mount-table half has no pin (ref); stock boot not driven

api-backend.rest-batch-config-contract rev 2 · PARTIAL · pins: files 2/2 passed, tests 33

acceptance[0] not-run: not asserted by the pins; see uncovered
acceptance[1] not-run: not asserted by the pins; see uncovered
acceptance[2] not-run: not asserted by the pins; see uncovered
acceptance[3] pass: rest-batch-size-cap 8/8: cap on all doors, follows config, protocol never called
acceptance[4] not-run: not asserted by the pins; see uncovered
acceptance[5] pass: rest-sub-config-parse-not-cast 25/25: §E upsertMany/defaultAtomic refused
acceptance[6] pass: rest-sub-config-parse-not-cast 25/25: §A maxBatchSize 0/2000/2.5 refused
uncovered: 0,4: live stock-boot mounts/cap not driven; 1,2: mount-table half has no pin (ref)

api-backend.rest-metadata-config-contract rev 4 · PARTIAL · pins: files 2/2 passed, tests 49

acceptance[0] not-run: not asserted by the pins; see uncovered
acceptance[1] not-run: not asserted by the pins; see uncovered
acceptance[2] pass: rest-config-mount-table.pin 24/24: each switch removes exactly its routes, incl. all four endpoints.* rows
acceptance[3] not-run: not asserted by the pins; see uncovered
acceptance[4] not-run: not asserted by the pins; see uncovered
acceptance[5] pass: rest-sub-config-parse-not-cast 25/25: §E metadata.cacheTtl + endpoints.schema refused
uncovered: 0: stock-boot live mounts not driven; 1: prefix advertisement move not asserted; 3: masking-effect half no pin; 4: cache-branch half no pin

api-backend.rest-route-generation-tombstones rev 1 · PARTIAL · pins: files 1/1 passed, tests 25

acceptance[0] pass: rest-sub-config-parse-not-cast 25/25: §E refuses every routes.* key
acceptance[1] pass: rest-sub-config-parse-not-cast 25/25: §B/§E plugin path refuses the same keys
acceptance[2] not-run: not asserted by the pins; see uncovered
acceptance[3] not-run: not asserted by the pins; see uncovered
acceptance[4] pass: rest-sub-config-parse-not-cast 25/25: empty routes constructs; §C strips unknown key
uncovered: 2: accuracy of each prescription's replacement not asserted; 3: tsc build-time error has no pin

api-backend.second-object-exposure-and-internal-fields rev 1 · PASS · pins: files 4/4 passed, tests 75

acceptance[0] pass: ref claims whole-item coverage; protocol.relation-condition-target-exposure.test.ts 13/13 passed; protocol.expand-target-exposure.test.ts 15/15 passed; protocol.data-door-internal-field-positions.test.ts 41/41 passed; internal-field-positions.test.ts 6/6 passed
acceptance[1] pass: ref claims whole-item coverage; protocol.relation-condition-target-exposure.test.ts 13/13 passed; protocol.expand-target-exposure.test.ts 15/15 passed; protocol.data-door-internal-field-positions.test.ts 41/41 passed; internal-field-positions.test.ts 6/6 passed
acceptance[2] pass: ref claims whole-item coverage; protocol.relation-condition-target-exposure.test.ts 13/13 passed; protocol.expand-target-exposure.test.ts 15/15 passed; protocol.data-door-internal-field-positions.test.ts 41/41 passed; internal-field-positions.test.ts 6/6 passed
acceptance[3] pass: ref claims whole-item coverage; protocol.relation-condition-target-exposure.test.ts 13/13 passed; protocol.expand-target-exposure.test.ts 15/15 passed; protocol.data-door-internal-field-positions.test.ts 41/41 passed; internal-field-positions.test.ts 6/6 passed

api-backend.data-request-shape-and-query-arity rev 1 · PASS · pins: files 6/6 passed, tests 183

acceptance[0] pass: ref claims whole-item coverage; request-schema-gate.conformance.test.ts 16/16 passed; data-write-request-gate.test.ts 73/73 passed; data-delete-expected-version.test.ts 34/34 passed; dispatcher-query-arity.test.ts 33/33 passed; packages-write-flag-arity.test.ts 11/11 passed; data-conflict-caller-visibility.test.ts 16/16 passed
acceptance[1] pass: ref claims whole-item coverage; request-schema-gate.conformance.test.ts 16/16 passed; data-write-request-gate.test.ts 73/73 passed; data-delete-expected-version.test.ts 34/34 passed; dispatcher-query-arity.test.ts 33/33 passed; packages-write-flag-arity.test.ts 11/11 passed; data-conflict-caller-visibility.test.ts 16/16 passed
acceptance[2] pass: ref claims whole-item coverage; request-schema-gate.conformance.test.ts 16/16 passed; data-write-request-gate.test.ts 73/73 passed; data-delete-expected-version.test.ts 34/34 passed; dispatcher-query-arity.test.ts 33/33 passed; packages-write-flag-arity.test.ts 11/11 passed; data-conflict-caller-visibility.test.ts 16/16 passed
acceptance[3] pass: ref claims whole-item coverage; request-schema-gate.conformance.test.ts 16/16 passed; data-write-request-gate.test.ts 73/73 passed; data-delete-expected-version.test.ts 34/34 passed; dispatcher-query-arity.test.ts 33/33 passed; packages-write-flag-arity.test.ts 11/11 passed; data-conflict-caller-visibility.test.ts 16/16 passed
acceptance[4] pass: ref claims whole-item coverage; request-schema-gate.conformance.test.ts 16/16 passed; data-write-request-gate.test.ts 73/73 passed; data-delete-expected-version.test.ts 34/34 passed; dispatcher-query-arity.test.ts 33/33 passed; packages-write-flag-arity.test.ts 11/11 passed; data-conflict-caller-visibility.test.ts 16/16 passed

api-backend.meta-read-doors-v18 rev 1 · PASS · pins: files 7/7 passed, tests 115

acceptance[0] pass: ref claims whole-item coverage; meta-object-sortability-caller-fls.test.ts 13/13 passed; meta-object-sortability-caller-fls.test.ts 8/8 passed; protocol.app-package-id-key.test.ts 8/8 passed; meta-app-package-id-key.test.ts 12/12 passed; rest-server-meta-member-selector.test.ts 32/32 passed; rest-server-meta-door-closed-sets.test.ts 29/29 passed; meta-package-all-fold.test.ts 13/13 passed
acceptance[1] pass: ref claims whole-item coverage; meta-object-sortability-caller-fls.test.ts 13/13 passed; meta-object-sortability-caller-fls.test.ts 8/8 passed; protocol.app-package-id-key.test.ts 8/8 passed; meta-app-package-id-key.test.ts 12/12 passed; rest-server-meta-member-selector.test.ts 32/32 passed; rest-server-meta-door-closed-sets.test.ts 29/29 passed; meta-package-all-fold.test.ts 13/13 passed
acceptance[2] pass: ref claims whole-item coverage; meta-object-sortability-caller-fls.test.ts 13/13 passed; meta-object-sortability-caller-fls.test.ts 8/8 passed; protocol.app-package-id-key.test.ts 8/8 passed; meta-app-package-id-key.test.ts 12/12 passed; rest-server-meta-member-selector.test.ts 32/32 passed; rest-server-meta-door-closed-sets.test.ts 29/29 passed; meta-package-all-fold.test.ts 13/13 passed
acceptance[3] pass: ref claims whole-item coverage; meta-object-sortability-caller-fls.test.ts 13/13 passed; meta-object-sortability-caller-fls.test.ts 8/8 passed; protocol.app-package-id-key.test.ts 8/8 passed; meta-app-package-id-key.test.ts 12/12 passed; rest-server-meta-member-selector.test.ts 32/32 passed; rest-server-meta-door-closed-sets.test.ts 29/29 passed; meta-package-all-fold.test.ts 13/13 passed
acceptance[4] pass: ref claims whole-item coverage; meta-object-sortability-caller-fls.test.ts 13/13 passed; meta-object-sortability-caller-fls.test.ts 8/8 passed; protocol.app-package-id-key.test.ts 8/8 passed; meta-app-package-id-key.test.ts 12/12 passed; rest-server-meta-member-selector.test.ts 32/32 passed; rest-server-meta-door-closed-sets.test.ts 29/29 passed; meta-package-all-fold.test.ts 13/13 passed

api-backend.error-sentences-and-unique-violation-wire-code rev 1 · PASS · pins: files 4/4 passed, tests 620

acceptance[0] pass: ref claims whole-item coverage; rest-write-route-hook-refusal-sentence.ledger.test.ts 577/577 passed; rest-hook-script-fault-envelope.test.ts 18/18 passed; dispatcher-unique-violation-wire-code.test.ts 7/7 passed; storage-routes.server-fault-withheld.test.ts 18/18 passed
acceptance[1] pass: ref claims whole-item coverage; rest-write-route-hook-refusal-sentence.ledger.test.ts 577/577 passed; rest-hook-script-fault-envelope.test.ts 18/18 passed; dispatcher-unique-violation-wire-code.test.ts 7/7 passed; storage-routes.server-fault-withheld.test.ts 18/18 passed
acceptance[2] pass: ref claims whole-item coverage; rest-write-route-hook-refusal-sentence.ledger.test.ts 577/577 passed; rest-hook-script-fault-envelope.test.ts 18/18 passed; dispatcher-unique-violation-wire-code.test.ts 7/7 passed; storage-routes.server-fault-withheld.test.ts 18/18 passed
acceptance[3] pass: ref claims whole-item coverage; rest-write-route-hook-refusal-sentence.ledger.test.ts 577/577 passed; rest-hook-script-fault-envelope.test.ts 18/18 passed; dispatcher-unique-violation-wire-code.test.ts 7/7 passed; storage-routes.server-fault-withheld.test.ts 18/18 passed

approvals.decision-action-matrix rev 5 · PARTIAL · pins: files 1/1 passed, tests 367

acceptance[0] not-run: ref: acceptance[9] ONLY; other clauses still need the run
acceptance[1] not-run: ref: acceptance[9] ONLY; other clauses still need the run
acceptance[2] not-run: ref: acceptance[9] ONLY; other clauses still need the run
acceptance[3] not-run: ref: acceptance[9] ONLY; other clauses still need the run
acceptance[4] not-run: ref: acceptance[9] ONLY; other clauses still need the run
acceptance[5] not-run: ref: acceptance[9] ONLY; other clauses still need the run
acceptance[6] not-run: ref: acceptance[9] ONLY; other clauses still need the run
acceptance[7] not-run: ref: acceptance[9] ONLY; other clauses still need the run
acceptance[8] not-run: ref: acceptance[9] ONLY; other clauses still need the run
acceptance[9] pass: approval-service.test.ts passed (367); describe 'org-filtered read-back refuses loudly (approvals: ten service endpoints return request: fresh! — a non-null assertion that is false whenever the read-back is org-filtered out, shipping { "request": null } with HTTP 200 #12769)'
uncovered: 0-8: ref pins only clause 9

approvals.decision-only-via-service rev 1 · PASS · pins: files 1/1 passed, tests 22

acceptance[0] pass: pins passed: resume-authority-gate.test.ts 22/22
acceptance[1] pass: pins passed: resume-authority-gate.test.ts 22/22
acceptance[2] pass: pins passed: resume-authority-gate.test.ts 22/22
acceptance[3] pass: pins passed: resume-authority-gate.test.ts 22/22

approvals.status-mirror-field rev 2 · PARTIAL · pins: files 1/1 passed, tests 2

acceptance[0] not-run: pin has 2 tests, both Approvals status mirror drops the acting user, forcing every downstream record-change flow to runAs:'system' #3783 cascade; per-transition stamping not asserted
acceptance[1] not-run: whitelist lock crossing not in test names
acceptance[2] pass: status-mirror-cascade.integration.test.ts passed (2): approve mirror carries trigger user; dead-run release user-less and refused
acceptance[3] not-run: opt-in absence not in test names
acceptance[4] not-run: non-fatal loud mirror failure not in test names
uncovered: 0,1,3,4: pin file only asserts the Approvals status mirror drops the acting user, forcing every downstream record-change flow to runAs:'system' #3783 acting-user cascade

approvals.request-page-reply-and-reader-visibility rev 1 · PARTIAL · pins: files 5/5 passed, tests 68

acceptance[0] pass: pins passed: all 5 files (68 tests), e.g. sys-approval-request-page.test.ts 19/19, component-record-approval-decision-22472.test.ts 8/8
acceptance[1] pass: pins passed: all 5 files (68 tests), e.g. sys-approval-request-page.test.ts 19/19, component-record-approval-decision-22472.test.ts 8/8
acceptance[2] pass: pins passed: all 5 files (68 tests), e.g. sys-approval-request-page.test.ts 19/19, component-record-approval-decision-22472.test.ts 8/8
acceptance[3] pass: pins passed: all 5 files (68 tests), e.g. sys-approval-request-page.test.ts 19/19, component-record-approval-decision-22472.test.ts 8/8
acceptance[4] not-run: (screenshot) console decision panel; no console pin; knownGap: needs vendored console
uncovered: 4: console screenshot, no pin

approvals.act-door-and-admin-rescue-slate rev 1 · PASS · pins: files 4/4 passed, tests 37

acceptance[0] pass: pins passed: all 4 files (37 tests), e.g. approvals-act.test.ts 13/13, action-page-member.integration.test.ts 12/12
acceptance[1] pass: pins passed: all 4 files (37 tests), e.g. approvals-act.test.ts 13/13, action-page-member.integration.test.ts 12/12
acceptance[2] pass: pins passed: all 4 files (37 tests), e.g. approvals-act.test.ts 13/13, action-page-member.integration.test.ts 12/12

attachments-storage.presigned-upload-roundtrip rev 1 · PARTIAL · pins: files 1/1 passed, tests 19

acceptance[0] pass: pins passed: attachments-permission-matrix.dogfood.test.ts 19/19
acceptance[1] pass: pins passed: attachments-permission-matrix.dogfood.test.ts 19/19
acceptance[2] not-run: envelope asserted in matrix (e-read) but served bytes never compared
acceptance[3] not-run: 302 redirect not asserted (only anon 401 on the 302 route)
acceptance[4] pass: pins passed: attachments-permission-matrix.dogfood.test.ts 19/19
uncovered: 2 (bytes round-trip), 3 (302 redirect): not asserted by matrix test

attachments-storage.download-authz-both-sides rev 5 · PARTIAL · pins: files 2/2 passed, tests 27

acceptance[0] pass: pins passed: attachments-permission-matrix.dogfood.test.ts 19/19, attachments-public-read-acl.dogfood.test.ts 8/8
acceptance[1] pass: pins passed: attachments-permission-matrix.dogfood.test.ts 19/19, attachments-public-read-acl.dogfood.test.ts 8/8
acceptance[2] pass: pins passed: attachments-permission-matrix.dogfood.test.ts 19/19, attachments-public-read-acl.dogfood.test.ts 8/8
acceptance[3] pass: pins passed: attachments-permission-matrix.dogfood.test.ts 19/19, attachments-public-read-acl.dogfood.test.ts 8/8
acceptance[4] not-run: ref: STILL MANUAL, no pin (objectui RecordAttachmentsPanel screenshot)
uncovered: 4: STILL MANUAL per ref

attachments-storage.read-inherits-parent-rls rev 5 · PASS · pins: files 5/5 passed, tests 59

acceptance[0] pass: pins passed: all 5 files (59 tests), e.g. attachments-permission-matrix.dogfood.test.ts 19/19, attachments-parent-rls-count-parity.dogfood.test.ts 7/7
acceptance[1] pass: pins passed: all 5 files (59 tests), e.g. attachments-permission-matrix.dogfood.test.ts 19/19, attachments-parent-rls-count-parity.dogfood.test.ts 7/7
acceptance[2] pass: pins passed: all 5 files (59 tests), e.g. attachments-permission-matrix.dogfood.test.ts 19/19, attachments-parent-rls-count-parity.dogfood.test.ts 7/7
acceptance[3] pass: pins passed: all 5 files (59 tests), e.g. attachments-permission-matrix.dogfood.test.ts 19/19, attachments-parent-rls-count-parity.dogfood.test.ts 7/7

attachments-storage.attach-requires-parent-edit rev 7 · PARTIAL · pins: files 5/5 passed, tests 222

acceptance[0] pass: pins passed: all 5 files (222 tests), e.g. attachments-permission-matrix.dogfood.test.ts 19/19, attachments-unscoped-delete-gate.dogfood.test.ts 10/10
acceptance[1] pass: pins passed: all 5 files (222 tests), e.g. attachments-permission-matrix.dogfood.test.ts 19/19, attachments-unscoped-delete-gate.dogfood.test.ts 10/10
acceptance[2] pass: pins passed: all 5 files (222 tests), e.g. attachments-permission-matrix.dogfood.test.ts 19/19, attachments-unscoped-delete-gate.dogfood.test.ts 10/10
acceptance[3] pass: pins passed: all 5 files (222 tests), e.g. attachments-permission-matrix.dogfood.test.ts 19/19, attachments-unscoped-delete-gate.dogfood.test.ts 10/10
acceptance[4] pass: pins passed: all 5 files (222 tests), e.g. attachments-permission-matrix.dogfood.test.ts 19/19, attachments-unscoped-delete-gate.dogfood.test.ts 10/10
acceptance[5] not-run: ref: capability-gate-update-verb.test.ts is engine-level, NOT evidence about the wired REST PATCH lane the clause drives
uncovered: 5: only engine-level pin; wired REST lane stays manual per ref

attachments-storage.sys-file-status-pipeline rev 3 · PARTIAL · pins: files 2/2 passed, tests 28

acceptance[0] pass: pins passed: attachments-permission-matrix.dogfood.test.ts 19/19, tombstone-download-live-reference.test.ts 9/9
acceptance[1] pass: pins passed: attachments-permission-matrix.dogfood.test.ts 19/19, tombstone-download-live-reference.test.ts 9/9
acceptance[2] pass: pins passed: attachments-permission-matrix.dogfood.test.ts 19/19, tombstone-download-live-reference.test.ts 9/9
acceptance[3] pass: pins passed: attachments-permission-matrix.dogfood.test.ts 19/19, tombstone-download-live-reference.test.ts 9/9
acceptance[4] pass: pins passed: attachments-permission-matrix.dogfood.test.ts 19/19, tombstone-download-live-reference.test.ts 9/9
acceptance[5] not-run: scope-restriction (field-owned untouched by join-row counting) not in test names
uncovered: 5: not asserted by either pin

attachments-storage.orphan-tombstone-reap rev 1 · PARTIAL · pins: files 1/1 passed, tests 19

acceptance[0] not-run: migration-gate-closed and byte-delete-failure variants not asserted
acceptance[1] not-run: sweep test asserts row+bytes both gone, not the ORDER
acceptance[2] pass: pins passed: attachments-permission-matrix.dogfood.test.ts 19/19
acceptance[3] pass: pins passed: attachments-permission-matrix.dogfood.test.ts 19/19
uncovered: 0 (two verdict variants unpinned), 1 (bytes-before-row ordering not asserted)

attachments-storage.upload-session-abort rev 4 · PARTIAL · pins: files 1/1 passed, tests 19

acceptance[0] not-run: matrix test inits + one chunk PUT only; no progress/complete round-trip
acceptance[1] pass: attachments-permission-matrix.dogfood.test.ts passed (19): abandoned chunked upload reaped AND parts aborted
acceptance[2] not-run: no-abort reap paths not asserted
acceptance[3] not-run: abort-failure veto not asserted
acceptance[4] not-run: status enum reachability not asserted
acceptance[5] not-run: 410 UPLOAD_SESSION_EXPIRED not asserted
uncovered: 0,2,3,4,5: matrix test only pins the abort-then-reap path

attachments-storage.inline-grid-receipt-cells rev 3 · NOT-RUN · pins: no framework pin; objectui 4016370a live spec e2e/live/grid-file-upload.spec.ts FAILED (known-stale, not consulted)

acceptance[0] not-run: only pin objectui 4016370a e2e/live/grid-file-upload.spec.ts FAILED (known-stale) -) not consulted
acceptance[1] not-run: only pin objectui 4016370a e2e/live/grid-file-upload.spec.ts FAILED (known-stale) -) not consulted
acceptance[2] not-run: only pin objectui 4016370a e2e/live/grid-file-upload.spec.ts FAILED (known-stale) -) not consulted
acceptance[3] not-run: only pin objectui 4016370a e2e/live/grid-file-upload.spec.ts FAILED (known-stale) -) not consulted
uncovered: 0-3: only evidence is a failing known-stale objectui live spec

attachments-storage.field-accept-maxsize-server-enforced rev 2 · PARTIAL · pins: files 1/1 passed, tests 51

acceptance[0] pass: pins passed: file-reference-lifecycle.test.ts 51/51
acceptance[1] pass: pins passed: file-reference-lifecycle.test.ts 51/51
acceptance[2] not-run: ref: NOT evidence about the wired REST lane or wire envelope
acceptance[3] not-run: UPDATE path not claimed by ref
acceptance[4] pass: pins passed: file-reference-lifecycle.test.ts 51/51
acceptance[5] pass: pins passed: file-reference-lifecycle.test.ts 51/51
acceptance[6] pass: pins passed: file-reference-lifecycle.test.ts 51/51
uncovered: 2 (wire envelope, disclaimed), 3 (update path, not claimed)

attachments-storage.upload-limits-scope-and-ownership rev 1 · PASS · pins: files 7/7 passed, tests 114

acceptance[0] pass: pins passed: all 7 files (114 tests), e.g. storage-limits.test.ts 18/18, upload-scope-vocabulary.test.ts 6/6
acceptance[1] pass: pins passed: all 7 files (114 tests), e.g. storage-limits.test.ts 18/18, upload-scope-vocabulary.test.ts 6/6
acceptance[2] pass: pins passed: all 7 files (114 tests), e.g. storage-limits.test.ts 18/18, upload-scope-vocabulary.test.ts 6/6
acceptance[3] pass: pins passed: all 7 files (114 tests), e.g. storage-limits.test.ts 18/18, upload-scope-vocabulary.test.ts 6/6
acceptance[4] pass: pins passed: all 7 files (114 tests), e.g. storage-limits.test.ts 18/18, upload-scope-vocabulary.test.ts 6/6
acceptance[5] pass: pins passed: all 7 files (114 tests), e.g. storage-limits.test.ts 18/18, upload-scope-vocabulary.test.ts 6/6

Generated by Claude Code

Per-clause evidence, part 2 of 3 (pin output at ba4afcc; objectui pins at 4016370a).

attachments-storage.chunked-upload-integrity rev 1 · PASS · pins: files 3/3 passed, tests 41

acceptance[0] pass: pins passed: chunked-upload-integrity.test.ts 13/13, storage-chunked-resume-integrity.dogfood.test.ts 4/4, chunk-part-record-concurrency.test.ts 24/24
acceptance[1] pass: pins passed: chunked-upload-integrity.test.ts 13/13, storage-chunked-resume-integrity.dogfood.test.ts 4/4, chunk-part-record-concurrency.test.ts 24/24
acceptance[2] pass: pins passed: chunked-upload-integrity.test.ts 13/13, storage-chunked-resume-integrity.dogfood.test.ts 4/4, chunk-part-record-concurrency.test.ts 24/24
acceptance[3] pass: pins passed: chunked-upload-integrity.test.ts 13/13, storage-chunked-resume-integrity.dogfood.test.ts 4/4, chunk-part-record-concurrency.test.ts 24/24

automation.flow-node-type-matrix rev 6 · NOT-RUN · pins: files 1/1 passed, tests 2

acceptance[0] not-run: flow-node.dogfood.test.ts (2 tests) only runs an update_record node; matrix not asserted
acceptance[1] not-run: flow-node.dogfood.test.ts (2 tests) only runs an update_record node; matrix not asserted
acceptance[2] not-run: flow-node.dogfood.test.ts (2 tests) only runs an update_record node; matrix not asserted
acceptance[3] not-run: flow-node.dogfood.test.ts (2 tests) only runs an update_record node; matrix not asserted
acceptance[4] not-run: flow-node.dogfood.test.ts (2 tests) only runs an update_record node; matrix not asserted
acceptance[5] not-run: flow-node.dogfood.test.ts (2 tests) only runs an update_record node; matrix not asserted
uncovered: 0-5: pin only exercises one node type

automation.trigger-type-matrix rev 4 · PARTIAL · pins: files 1/1 passed, tests 2

acceptance[0] not-run: flow-trigger-conformance.test.ts is the ledger ratchet only; no live trigger runs
acceptance[1] not-run: flow-trigger-conformance.test.ts is the ledger ratchet only; no live trigger runs
acceptance[2] not-run: flow-trigger-conformance.test.ts is the ledger ratchet only; no live trigger runs
acceptance[3] not-run: flow-trigger-conformance.test.ts is the ledger ratchet only; no live trigger runs
acceptance[4] not-run: flow-trigger-conformance.test.ts is the ledger ratchet only; no live trigger runs
acceptance[5] pass: flow-trigger-conformance.test.ts passed (2): ledger + ratchet, every flow type classified
uncovered: 0-4: pin is the build ratchet only

automation.screen-flow-roundtrip rev 4 · NOT-RUN · pins: no framework pin; objectui 4016370a live spec e2e/live/screen-flow.spec.ts FAILED (known-stale, not consulted)

acceptance[0] not-run: only pin objectui 4016370a e2e/live/screen-flow.spec.ts FAILED (known-stale) -) not consulted
acceptance[1] not-run: only pin objectui 4016370a e2e/live/screen-flow.spec.ts FAILED (known-stale) -) not consulted
acceptance[2] not-run: only pin objectui 4016370a e2e/live/screen-flow.spec.ts FAILED (known-stale) -) not consulted
acceptance[3] not-run: only pin objectui 4016370a e2e/live/screen-flow.spec.ts FAILED (known-stale) -) not consulted
acceptance[4] not-run: only pin objectui 4016370a e2e/live/screen-flow.spec.ts FAILED (known-stale) -) not consulted
acceptance[5] not-run: only pin objectui 4016370a e2e/live/screen-flow.spec.ts FAILED (known-stale) -) not consulted
acceptance[6] not-run: only pin objectui 4016370a e2e/live/screen-flow.spec.ts FAILED (known-stale) -) not consulted
uncovered: 0-6: only evidence is a failing known-stale objectui live spec

automation.durable-suspend-restart rev 1 · PARTIAL · pins: files 1/1 passed, tests 11

acceptance[0] pass: pins passed: flow-durable-suspend.dogfood.test.ts 11/11
acceptance[1] pass: pins passed: flow-durable-suspend.dogfood.test.ts 11/11
acceptance[2] not-run: pin uses a screen pause; no timer wait / notify after restart
acceptance[3] not-run: no nested approval/subflow pause in pin
acceptance[4] pass: pins passed: flow-durable-suspend.dogfood.test.ts 11/11
uncovered: 2 (timer wait), 3 (nested subflow+approval): not in pin

automation.paused-run-trigger-record-masked rev 1 · PASS · pins: files 1/1 passed, tests 7

acceptance[0] pass: pins passed: flow-trigger-record-credential-mask.dogfood.test.ts 7/7
acceptance[1] pass: pins passed: flow-trigger-record-credential-mask.dogfood.test.ts 7/7
acceptance[2] pass: pins passed: flow-trigger-record-credential-mask.dogfood.test.ts 7/7
acceptance[3] pass: pins passed: flow-trigger-record-credential-mask.dogfood.test.ts 7/7
acceptance[4] pass: pins passed: flow-trigger-record-credential-mask.dogfood.test.ts 7/7

automation.setup-packaged-automation-board rev 3 · PARTIAL · pins: files 3/3 passed, tests 33 (objectui files at objectui 4016370a)

acceptance[0] not-run: framework nav pin proves the contribution only; served body + sidebar click still need the live run (ref)
acceptance[1] pass: objectui 4016370a PackagedAutomationPage.test.tsx + PackagedActionsSection.test.tsx passed (mocked): packaged flows rendered, tenant flow absent
acceptance[2] not-run: persistence: mocked tests cannot evidence it (ref)
acceptance[3] pass: objectui 4016370a mocked tests passed: clone describe + "no clone for actions"
acceptance[4] pass: objectui 4016370a mocked tests passed: "no ancestry or drift surface" on both
acceptance[5] not-run: mocked faked bodies; ref: cannot evidence live refusal bodies
acceptance[6] not-run: dialog-validation half mocked-pinned; live server-refused name text not
acceptance[7] not-run: posture record needs live member run
uncovered: 0,2,5,6,7: live nav/persistence/refusal bodies/posture outside the mocked half

automation.flow-registration-verdict-on-read rev 1 · PASS · pins: files 2/2 passed, tests 8

acceptance[0] pass: pins passed: meta-flow-cached-registration.test.ts 3/3, flow-refused-registration-read.integration.test.ts 5/5
acceptance[1] pass: pins passed: meta-flow-cached-registration.test.ts 3/3, flow-refused-registration-read.integration.test.ts 5/5
acceptance[2] pass: pins passed: meta-flow-cached-registration.test.ts 3/3, flow-refused-registration-read.integration.test.ts 5/5

automation.flow-authoring-refusals-v18 rev 1 · PASS · pins: files 9/9 passed, tests 662

acceptance[0] pass: pins passed: all 9 files (662 tests), e.g. flow-value-slot-template.test.ts 172/172, flow-text-slot-template.test.ts 32/32
acceptance[1] pass: pins passed: all 9 files (662 tests), e.g. flow-value-slot-template.test.ts 172/172, flow-text-slot-template.test.ts 32/32
acceptance[2] pass: pins passed: all 9 files (662 tests), e.g. flow-value-slot-template.test.ts 172/172, flow-text-slot-template.test.ts 32/32
acceptance[3] pass: pins passed: all 9 files (662 tests), e.g. flow-value-slot-template.test.ts 172/172, flow-text-slot-template.test.ts 32/32

automation.flow-run-semantics-v18 rev 1 · PASS · pins: files 5/5 passed, tests 105

acceptance[0] pass: pins passed: all 5 files (105 tests), e.g. flow-cel-current-user.test.ts 14/14, flow-cel-record-binding.test.ts 17/17
acceptance[1] pass: pins passed: all 5 files (105 tests), e.g. flow-cel-current-user.test.ts 14/14, flow-cel-record-binding.test.ts 17/17
acceptance[2] pass: pins passed: all 5 files (105 tests), e.g. flow-cel-current-user.test.ts 14/14, flow-cel-record-binding.test.ts 17/17
acceptance[3] pass: pins passed: all 5 files (105 tests), e.g. flow-cel-current-user.test.ts 14/14, flow-cel-record-binding.test.ts 17/17

automation.inbound-hook-timestamped-signature rev 1 · PASS · pins: files 3/3 passed, tests 47

acceptance[0] pass: pins passed: inbound-hook-member.test.ts 12/12, http-signature.test.ts 16/16, automation-hooks.test.ts 19/19
acceptance[1] pass: pins passed: inbound-hook-member.test.ts 12/12, http-signature.test.ts 16/16, automation-hooks.test.ts 19/19
acceptance[2] pass: pins passed: inbound-hook-member.test.ts 12/12, http-signature.test.ts 16/16, automation-hooks.test.ts 19/19

automation.scheduled-work-opt-in rev 1 · PASS · pins: files 2/2 passed, tests 22

acceptance[0] pass: pins passed: per-kernel-scheduled-work-policy.test.ts 10/10, per-kernel-scheduled-work-policy.test.ts 12/12
acceptance[1] pass: pins passed: per-kernel-scheduled-work-policy.test.ts 10/10, per-kernel-scheduled-work-policy.test.ts 12/12
acceptance[2] pass: pins passed: per-kernel-scheduled-work-policy.test.ts 10/10, per-kernel-scheduled-work-policy.test.ts 12/12

cli.migrate-plan-apply-json rev 4 · PARTIAL · pins: files 1/1 passed, tests 4

acceptance[0] not-run: pin is emitJson/emitText exit-code only
acceptance[1] not-run: plan --json shape not asserted
acceptance[2] pass: format.exit-code.test.ts passed (4): duration can no longer reach the exit-code slot (os migrate 成功时退出码是随机非零值(208/171/176/163/62…),--version / --help 却干净退出 0 #4873)
acceptance[3] not-run: destructive skip not asserted
acceptance[4] not-run: idempotent re-run not asserted
acceptance[5] not-run: busy DB refusal not asserted
acceptance[6] not-run: confirmation_required not asserted
uncovered: 0,1,3,4,5,6: pin only asserts os migrate 成功时退出码是随机非零值(208/171/176/163/62…),--version / --help 却干净退出 0 #4873 exit-code honesty

cli.verify-verdict-exit-mapping rev 1 · PARTIAL · pins: files 1/1 passed, tests 7

acceptance[0] not-run: verdict vocabulary not in pin
acceptance[1] not-run: hardFailures mapping not in pin
acceptance[2] not-run: needs-fixture split not in pin
acceptance[3] not-run: --rls hole-)fail not in pin
acceptance[4] pass: verify-tenancy-posture.test.ts passed (7): walled isolated/group posture runs multi-tenant suite (普查:plugin-auth 之外还有 6 处把被降级的 OS_MULTI_ORG_ENABLED 当「是不是多组织」在读 —— 只设 OS_TENANCY_POSTURE 的部署会静默走错分支 #5262)
uncovered: 0-3: pin only covers 普查:plugin-auth 之外还有 6 处把被降级的 OS_MULTI_ORG_ENABLED 当「是不是多组织」在读 —— 只设 OS_TENANCY_POSTURE 的部署会静默走错分支 #5262 posture selection

cli.scaffold-first-run rev 5 · PARTIAL · pins: pin .github/workflows/scaffold-e2e.yml: no run on ba4afcc; hand-driven pre-release scaffold per extra-evidence.txt (exit 0, health/ready 200, skills 10==10)

acceptance[0] pass: workflow not run on ba4afcc; extra-evidence hand-driven pre-release (verdaccio): scaffold/validate/build exit 0, health 200, /ready 200
acceptance[1] pass: extra-evidence: blank is the only template; validate 0, build 0
acceptance[2] pass: extra-evidence: os start --artifact booted, health 200 in 11s (accept arm; no RC skew)
acceptance[3] not-run: GitHub-path npx skills add boundary probe NOT done (extra-evidence)
acceptance[4] not-run: never-healthy negative not exercised
uncovered: 3 (GitHub-path skills probe not done), 4 (negative not exercised); pin workflow itself has no run on sha

cli.datasource-introspect-codegen rev 5 · NOT-RUN · pins: files 3/3 passed, tests 64

acceptance[0] not-run: ref pins only the NARROWING half (service/route level); list-tables output and CLI flag forwarding unpinned
acceptance[1] not-run: still needs the run (ref)
acceptance[2] not-run: still needs the run (ref)
acceptance[3] not-run: still needs the run (ref)
acceptance[4] not-run: still needs the run (ref)
acceptance[5] not-run: still needs the run (ref)
uncovered: 0 (only narrowing half pinned, CLI forwarding unpinned), 1-5 still need the run

cli.dev-automigrate-policy rev 2 · PARTIAL · pins: files 1/1 passed, tests 13

acceptance[0] not-run: no test shows a safe diff applied+logged
acceptance[1] not-run: off-mode boots not in test names
acceptance[2] pass: sql-driver-schema-drift.test.ts passed (13): force-disabled under NODE_ENV=production
acceptance[3] not-run: destructive-never half pinned; schemaMode managed gate not
acceptance[4] not-run: ADR-0120 D4 pre-flight probe not in test names
acceptance[5] not-run: CLI dev-only injection not in this driver pin
uncovered: 0,1,3,4,5: driver pin covers only production force-off fully

cli.migrate-meta-write-stored-and-all rev 1 · PASS · pins: files 5/5 passed, tests 152

acceptance[0] pass: pins passed: all 5 files (152 tests), e.g. migrate-meta-write.test.ts 23/23, meta.report-order.test.ts 21/21
acceptance[1] pass: pins passed: all 5 files (152 tests), e.g. migrate-meta-write.test.ts 23/23, meta.report-order.test.ts 21/21
acceptance[2] pass: pins passed: all 5 files (152 tests), e.g. migrate-meta-write.test.ts 23/23, meta.report-order.test.ts 21/21
acceptance[3] pass: pins passed: all 5 files (152 tests), e.g. migrate-meta-write.test.ts 23/23, meta.report-order.test.ts 21/21
acceptance[4] pass: pins passed: all 5 files (152 tests), e.g. migrate-meta-write.test.ts 23/23, meta.report-order.test.ts 21/21

cli.organization-ownership-ceremony rev 1 · PASS · pins: files 7/7 passed, tests 162

acceptance[0] pass: pins passed: all 7 files (162 tests), e.g. organization-ownership.apply-flags.test.ts 7/7, organization-ownership-apply.test.ts 112/112
acceptance[1] pass: pins passed: all 7 files (162 tests), e.g. organization-ownership.apply-flags.test.ts 7/7, organization-ownership-apply.test.ts 112/112
acceptance[2] pass: pins passed: all 7 files (162 tests), e.g. organization-ownership.apply-flags.test.ts 7/7, organization-ownership-apply.test.ts 112/112
acceptance[3] pass: pins passed: all 7 files (162 tests), e.g. organization-ownership.apply-flags.test.ts 7/7, organization-ownership-apply.test.ts 112/112
acceptance[4] pass: pins passed: all 7 files (162 tests), e.g. organization-ownership.apply-flags.test.ts 7/7, organization-ownership-apply.test.ts 112/112

cli.meta-package-flags-and-explain rev 1 · PASS · pins: files 5/5 passed, tests 65

acceptance[0] pass: pins passed: all 5 files (65 tests), e.g. register-package.test.ts 8/8, delete-reset-carriers.test.ts 29/29
acceptance[1] pass: pins passed: all 5 files (65 tests), e.g. register-package.test.ts 8/8, delete-reset-carriers.test.ts 29/29
acceptance[2] pass: pins passed: all 5 files (65 tests), e.g. register-package.test.ts 8/8, delete-reset-carriers.test.ts 29/29
acceptance[3] pass: pins passed: all 5 files (65 tests), e.g. register-package.test.ts 8/8, delete-reset-carriers.test.ts 29/29

cli.validate-v18-authoring-verdicts rev 1 · PASS · pins: files 7/7 passed, tests 319

acceptance[0] pass: pins passed: all 7 files (319 tests), e.g. define-seed-record-keys.test.ts 9/9, validate-field-existence-spellings.test.ts 31/31
acceptance[1] pass: pins passed: all 7 files (319 tests), e.g. define-seed-record-keys.test.ts 9/9, validate-field-existence-spellings.test.ts 31/31
acceptance[2] pass: pins passed: all 7 files (319 tests), e.g. define-seed-record-keys.test.ts 9/9, validate-field-existence-spellings.test.ts 31/31

cli.verify-derived-proof-families rev 1 · PASS · pins: files 5/5 passed, tests 15

acceptance[0] pass: pins passed: all 5 files (15 tests), e.g. verify-reference-shapes.test.ts 3/3, verify-delete-behaviors.test.ts 3/3
acceptance[1] pass: pins passed: all 5 files (15 tests), e.g. verify-reference-shapes.test.ts 3/3, verify-delete-behaviors.test.ts 3/3
acceptance[2] pass: pins passed: all 5 files (15 tests), e.g. verify-reference-shapes.test.ts 3/3, verify-delete-behaviors.test.ts 3/3

dashboards.dataset-report-authoring rev 2 · PARTIAL · pins: files 1/1 passed, tests 3

acceptance[0] pass: dashboard-designer-roundtrip.dogfood.test.ts passed (3): layout-less draft saves 200 and publishes 200
acceptance[1] not-run: read-back asserts widget count/no layout, not dataset+dimensions form
acceptance[2] not-run: screenshot
acceptance[3] not-run: report reconciliation not in pin
acceptance[4] not-run: matrix not in pin
acceptance[5] not-run: joined report not in pin
acceptance[6] not-run: screenshot
acceptance[7] not-run: screenshot
uncovered: 1-7: pin only covers save+publish

dashboards.empty-null-bucket-boundaries rev 1 · PARTIAL · pins: files 1/1 passed, tests 8

acceptance[0] not-run: screenshot
acceptance[1] not-run: network re-query not in pin
acceptance[2] not-run: KPI tile not in pin
acceptance[3] pass: date-bucket-parity-conformance.test.ts passed (8): pushed-down vs in-memory identical
acceptance[4] pass: date-bucket-parity-conformance.test.ts passed (8): null-sentinel bucket mismatch flagged
acceptance[5] not-run: screenshot
uncovered: 0,1,2,5: UI/network clauses unpinned

dashboards.analytics-exposure-gate-and-measure-aggregate rev 1 · PASS · pins: files 4/4 passed, tests 66

acceptance[0] pass: pins passed: all 4 files (66 tests), e.g. api-exposure-door.test.ts 30/30, unexposed-definition-registration.test.ts 12/12
acceptance[1] pass: pins passed: all 4 files (66 tests), e.g. api-exposure-door.test.ts 30/30, unexposed-definition-registration.test.ts 12/12
acceptance[2] pass: pins passed: all 4 files (66 tests), e.g. api-exposure-door.test.ts 30/30, unexposed-definition-registration.test.ts 12/12
acceptance[3] pass: pins passed: all 4 files (66 tests), e.g. api-exposure-door.test.ts 30/30, unexposed-definition-registration.test.ts 12/12

i18n.surface-matrix rev 8 · NOT-RUN · pins: files 2/2 passed, tests 7 (objectui files at objectui 4016370a)

acceptance[0] not-run: still needs the run (ref)
acceptance[1] not-run: still needs the run (ref)
acceptance[2] not-run: still needs the run (ref)
acceptance[3] not-run: still needs the run (ref)
acceptance[4] not-run: still needs the run (ref)
acceptance[5] not-run: only the CONFIRM half pinned (objectui 4016370a page-header-action-i18n + record-quick-actions.actionText-i18n passed); success toast + executed result unpinned
acceptance[6] not-run: still needs the run (ref)
acceptance[7] not-run: still needs the run (ref)
acceptance[8] not-run: still needs the run (ref)
acceptance[9] not-run: still needs the run (ref)
acceptance[10] not-run: still needs the run (ref)
uncovered: 0-10: ref pins only the confirm half of 5; everything else needs the run

i18n.flow-copy-translation-and-host-override rev 1 · PASS · pins: files 5/5 passed, tests 184

acceptance[0] pass: pins passed: all 5 files (184 tests), e.g. end-node-refusal-translation.test.ts 11/11, flow-run-locale.test.ts 6/6
acceptance[1] pass: pins passed: all 5 files (184 tests), e.g. end-node-refusal-translation.test.ts 11/11, flow-run-locale.test.ts 6/6
acceptance[2] pass: pins passed: all 5 files (184 tests), e.g. end-node-refusal-translation.test.ts 11/11, flow-run-locale.test.ts 6/6
acceptance[3] pass: pins passed: all 5 files (184 tests), e.g. end-node-refusal-translation.test.ts 11/11, flow-run-locale.test.ts 6/6
acceptance[4] pass: pins passed: all 5 files (184 tests), e.g. end-node-refusal-translation.test.ts 11/11, flow-run-locale.test.ts 6/6

identity-auth.auth-method-matrix rev 8 · PARTIAL · pins: files 1/1 passed, tests 3

acceptance[0] not-run: not asserted by any passing pin named in ref
acceptance[1] not-run: not asserted by any passing pin named in ref
acceptance[2] not-run: not asserted by any passing pin named in ref
acceptance[3] not-run: not asserted by any passing pin named in ref
acceptance[4] not-run: not asserted by any passing pin named in ref
acceptance[5] not-run: not asserted by any passing pin named in ref
acceptance[6] not-run: not asserted by any passing pin named in ref
acceptance[7] pass: oidc-authorization-code-flow.dogfood.test.ts 3/3 passed (authorize/token exchange/userinfo)
acceptance[8] not-run: not asserted by any passing pin named in ref
acceptance[9] not-run: not asserted by any passing pin named in ref
uncovered: 0-6,8,9: the only pin is the OIDC code-flow suite; no assertion on auth/config parity, password/phone/OTP, login UI, server-side refusal, 2FA, .well-known (no well-known fetch in pin), change-email/delete-user

identity-auth.invitation-scope-gates rev 4 · PARTIAL · pins: files 1/1 passed, tests 6

acceptance[0] pass: delegated-admin-invite.dogfood.test.ts 6/6 passed: delegate CAN invite member, sys_invitation row asserted (role member; status field not asserted)
acceptance[1] pass: delegated-admin-invite.dogfood.test.ts 6/6 passed: delegate issuing admin REFUSED
acceptance[2] pass: delegated-admin-invite.dogfood.test.ts 6/6 passed: refusal leaves no invitation row
acceptance[3] pass: delegated-admin-invite.dogfood.test.ts 6/6 passed: plain member cannot invite at all
acceptance[4] not-run: not asserted by any passing pin named in ref
acceptance[5] not-run: not asserted by any passing pin named in ref
acceptance[6] not-run: not asserted by any passing pin named in ref
uncovered: 4 screenshot (manual), 5 invitation lifecycle transitions and 6 my-delegable-scope: not asserted by the pin

identity-auth.admin-lifecycle-operations rev 8 · PARTIAL · pins: files 5/5 passed, tests 28

acceptance[0] not-run: admin-platform-admin-standing C0 asserts ban/unban persistence in sys_user only; the banned user's sign-in refusal and post-unban sign-in are not asserted
acceptance[1] pass: admin-credential-lifecycle.dogfood.test.ts 5/5 passed: set-user-password new signs in, old refused
acceptance[2] pass: admin-credential-lifecycle.dogfood.test.ts 5/5 passed: explicit password wins over generatePassword, generated-only contrast
acceptance[3] pass: admin-platform-admin-standing.dogfood.test.ts 7/7 passed: set-role pinned 403 + ruled code, role scalar unmoved (ruled impersonate_user and set_user_role still 403 every platform admin — neither route is safely raw-mountable, and each blocks for a different reason #9968)
acceptance[4] pass: admin-platform-admin-standing.dogfood.test.ts 7/7 passed: revoke-user-sessions pinned 403 + ruled code (ruled finding: seven better-auth /admin/ routes refuse platform admins and have no ObjectStack consumer — decide whether they are capability or just vendor surface #9969); live-session half not separately asserted
acceptance[5] pass: admin-platform-admin-standing.dogfood.test.ts 7/7 (remove-user 403, row kept) + remove-user-atomicity.test.ts 6/6 passed (exemption pin)
acceptance[6] not-run: C6 asserts impersonated_by recorded; stop-impersonating returning the admin to own session is not asserted (route classified not-an-authorization-answer)
acceptance[7] not-run: STILL MANUAL per ref (screenshot)
acceptance[8] pass: admin-identity-audit-trail.dogfood.test.ts 3/3 passed (create-user/set-user-password/import-users audit rows)
acceptance[9] pass: admin-route-nonadmin-refusal.dogfood.test.ts 7/7 passed (31 derived routes, anon+member never 2xx)
uncovered: 0 sign-in enforcement half of ban not asserted; 6 stop-impersonating half not asserted; 7 STILL MANUAL (screenshot)

identity-auth.implicit-account-linking-ownership rev 3 · PASS · pins: files 1/1 passed, tests 23

acceptance[0] pass: implicit-account-linking.test.ts 23/23 passed (ref names the decision table + end-to-end cases for every clause)
acceptance[1] pass: implicit-account-linking.test.ts 23/23 passed (ref names the decision table + end-to-end cases for every clause)
acceptance[2] pass: implicit-account-linking.test.ts 23/23 passed (ref names the decision table + end-to-end cases for every clause)
acceptance[3] pass: implicit-account-linking.test.ts 23/23 passed (ref names the decision table + end-to-end cases for every clause)
acceptance[4] pass: implicit-account-linking.test.ts 23/23 passed (ref names the decision table + end-to-end cases for every clause)

identity-auth.auth-gate-held-session-raw-host-families rev 1 · PASS · pins: files 11/11 passed, tests 228

acceptance[0] pass: storage-routes.auth-gate.pin.test.ts 42/42 passed + settings-routes.auth-gate.pin.test.ts 22/22 passed + share-link-routes.auth-gate.pin.test.ts 33/33 passed + webhook-redeliver-auth-gate.pin.test.ts 8/8 passed + admin-routes-auth-gate.pin.test.ts 45/45 passed + cloud-connection-auth-gate.pin.test.ts 12/12 passed + http-dispatcher.auth-gate-outage.pin.test.ts 9/9 passed + held-session-vendor-admin-doors.pin.test.ts 28/28 passed + rest-api-key-account-posture.pin.test.ts 5/5 passed + http-dispatcher.api-key-account-posture.pin.test.ts 5/5 passed + api-key-account-posture.test.ts 19/19 passed (ref is the item's pin list, no qualifier)
acceptance[1] pass: storage-routes.auth-gate.pin.test.ts 42/42 passed + settings-routes.auth-gate.pin.test.ts 22/22 passed + share-link-routes.auth-gate.pin.test.ts 33/33 passed + webhook-redeliver-auth-gate.pin.test.ts 8/8 passed + admin-routes-auth-gate.pin.test.ts 45/45 passed + cloud-connection-auth-gate.pin.test.ts 12/12 passed + http-dispatcher.auth-gate-outage.pin.test.ts 9/9 passed + held-session-vendor-admin-doors.pin.test.ts 28/28 passed + rest-api-key-account-posture.pin.test.ts 5/5 passed + http-dispatcher.api-key-account-posture.pin.test.ts 5/5 passed + api-key-account-posture.test.ts 19/19 passed (ref is the item's pin list, no qualifier)
acceptance[2] pass: storage-routes.auth-gate.pin.test.ts 42/42 passed + settings-routes.auth-gate.pin.test.ts 22/22 passed + share-link-routes.auth-gate.pin.test.ts 33/33 passed + webhook-redeliver-auth-gate.pin.test.ts 8/8 passed + admin-routes-auth-gate.pin.test.ts 45/45 passed + cloud-connection-auth-gate.pin.test.ts 12/12 passed + http-dispatcher.auth-gate-outage.pin.test.ts 9/9 passed + held-session-vendor-admin-doors.pin.test.ts 28/28 passed + rest-api-key-account-posture.pin.test.ts 5/5 passed + http-dispatcher.api-key-account-posture.pin.test.ts 5/5 passed + api-key-account-posture.test.ts 19/19 passed (ref is the item's pin list, no qualifier)
acceptance[3] pass: storage-routes.auth-gate.pin.test.ts 42/42 passed + settings-routes.auth-gate.pin.test.ts 22/22 passed + share-link-routes.auth-gate.pin.test.ts 33/33 passed + webhook-redeliver-auth-gate.pin.test.ts 8/8 passed + admin-routes-auth-gate.pin.test.ts 45/45 passed + cloud-connection-auth-gate.pin.test.ts 12/12 passed + http-dispatcher.auth-gate-outage.pin.test.ts 9/9 passed + held-session-vendor-admin-doors.pin.test.ts 28/28 passed + rest-api-key-account-posture.pin.test.ts 5/5 passed + http-dispatcher.api-key-account-posture.pin.test.ts 5/5 passed + api-key-account-posture.test.ts 19/19 passed (ref is the item's pin list, no qualifier)

identity-auth.api-key-expiry-lifecycle rev 1 · PASS · pins: files 3/3 passed, tests 21

acceptance[0] pass: rest-api-key-lifecycle.pin.test.ts 4/4 passed + api-key-lifecycle.pin.test.ts 14/14 passed + api-key-lifecycle.dogfood.test.ts 3/3 passed (ref is the item's pin list, no qualifier)
acceptance[1] pass: rest-api-key-lifecycle.pin.test.ts 4/4 passed + api-key-lifecycle.pin.test.ts 14/14 passed + api-key-lifecycle.dogfood.test.ts 3/3 passed (ref is the item's pin list, no qualifier)
acceptance[2] pass: rest-api-key-lifecycle.pin.test.ts 4/4 passed + api-key-lifecycle.pin.test.ts 14/14 passed + api-key-lifecycle.dogfood.test.ts 3/3 passed (ref is the item's pin list, no qualifier)
acceptance[3] pass: rest-api-key-lifecycle.pin.test.ts 4/4 passed + api-key-lifecycle.pin.test.ts 14/14 passed + api-key-lifecycle.dogfood.test.ts 3/3 passed (ref is the item's pin list, no qualifier)

identity-auth.cookie-session-renewal-in-process rev 1 · PASS · pins: files 2/2 passed, tests 14

acceptance[0] pass: in-process-session-renewal.pin.test.ts 11/11 passed + in-process-session-read.pin.test.ts 3/3 passed (ref is the item's pin list, no qualifier)
acceptance[1] pass: in-process-session-renewal.pin.test.ts 11/11 passed + in-process-session-read.pin.test.ts 3/3 passed (ref is the item's pin list, no qualifier)
acceptance[2] pass: in-process-session-renewal.pin.test.ts 11/11 passed + in-process-session-read.pin.test.ts 3/3 passed (ref is the item's pin list, no qualifier)

identity-auth.default-organization-boot-invariant rev 1 · PASS · pins: files 2/2 passed, tests 59

acceptance[0] pass: ensure-default-organization.test.ts 55/55 passed + identity-objects-default-organization.pin.test.ts 4/4 passed (ref is the item's pin list, no qualifier)
acceptance[1] pass: ensure-default-organization.test.ts 55/55 passed + identity-objects-default-organization.pin.test.ts 4/4 passed (ref is the item's pin list, no qualifier)
acceptance[2] pass: ensure-default-organization.test.ts 55/55 passed + identity-objects-default-organization.pin.test.ts 4/4 passed (ref is the item's pin list, no qualifier)
acceptance[3] pass: ensure-default-organization.test.ts 55/55 passed + identity-objects-default-organization.pin.test.ts 4/4 passed (ref is the item's pin list, no qualifier)

identity-auth.import-invitation-and-sso-domain-answers rev 1 · PASS · pins: files 3/3 passed, tests 55

acceptance[0] pass: sso-domain-verification-unknown-provider.pin.test.ts 25/25 passed + admin-import-users-invite-link.test.ts 2/2 passed + auth-account-invitation-template.test.ts 28/28 passed (ref is the item's pin list, no qualifier)
acceptance[1] pass: sso-domain-verification-unknown-provider.pin.test.ts 25/25 passed + admin-import-users-invite-link.test.ts 2/2 passed + auth-account-invitation-template.test.ts 28/28 passed (ref is the item's pin list, no qualifier)
acceptance[2] pass: sso-domain-verification-unknown-provider.pin.test.ts 25/25 passed + admin-import-users-invite-link.test.ts 2/2 passed + auth-account-invitation-template.test.ts 28/28 passed (ref is the item's pin list, no qualifier)
acceptance[3] pass: sso-domain-verification-unknown-provider.pin.test.ts 25/25 passed + admin-import-users-invite-link.test.ts 2/2 passed + auth-account-invitation-template.test.ts 28/28 passed (ref is the item's pin list, no qualifier)

integration-system.connector-declarative-boot rev 2 · NOT-RUN · pins: files 1/1 passed, tests 2

acceptance[0] not-run: showcase-declarative-mcp asserts origin declarative+ready for mcp only; rest/openapi siblings asserted ready but origin not asserted (clause demands per-variant)
acceptance[1] not-run: pin asserts mcp echo_upper derived; openapi getHealth derivation not asserted
acceptance[2] not-run: pin dispatches the MCP flow only; the rest ping flow is not asserted
acceptance[3] not-run: not asserted by any passing pin named in ref
acceptance[4] not-run: not asserted by any passing pin named in ref
acceptance[5] not-run: not asserted by any passing pin named in ref
uncovered: 0-2 only the mcp variant is fully asserted by showcase-declarative-mcp.dogfood.test.ts (2/2 passed); 3 build rejections, 4 unknown-provider boot error, 5 disable/reload tracking: not in pin

integration-system.connector-stdio-default-deny rev 2 · PASS · pins: files 1/1 passed, tests 19

acceptance[0] pass: mcp-provider.test.ts 19/19 passed (feat(connector-mcp): policy-gate declarative stdio transports — default-deny + host allowlist (ADR-0097 security follow-up) #3055 stdio policy: default deny as plain fault, allowlist exact-match, http exempt; tools mapped to actions)
acceptance[1] pass: mcp-provider.test.ts 19/19 passed (feat(connector-mcp): policy-gate declarative stdio transports — default-deny + host allowlist (ADR-0097 security follow-up) #3055 stdio policy: default deny as plain fault, allowlist exact-match, http exempt; tools mapped to actions)
acceptance[2] pass: mcp-provider.test.ts 19/19 passed (feat(connector-mcp): policy-gate declarative stdio transports — default-deny + host allowlist (ADR-0097 security follow-up) #3055 stdio policy: default deny as plain fault, allowlist exact-match, http exempt; tools mapped to actions)
acceptance[3] pass: mcp-provider.test.ts 19/19 passed (feat(connector-mcp): policy-gate declarative stdio transports — default-deny + host allowlist (ADR-0097 security follow-up) #3055 stdio policy: default deny as plain fault, allowlist exact-match, http exempt; tools mapped to actions)

integration-system.connector-descriptor-audit rev 2 · PARTIAL · pins: files 1/1 passed, tests 9

acceptance[0] pass: connector-descriptor-audit.test.ts 9/9 passed: warns once at boot naming the inert connector
acceptance[1] not-run: (a) enabled:false and (b) same-name registration are pinned quiet; (c) provider-bound instances never audited is not in the pin
acceptance[2] not-run: not asserted by any passing pin named in ref
uncovered: 1 sub-case (c) provider-bound not pinned; 2 re-run on metadata reload not pinned

integration-system.webhook-lifecycle rev 7 · PARTIAL · pins: files 1/1 passed, tests 1

acceptance[0] pass: webhook-materialization.dogfood.test.ts 1/1 passed: sys_webhook row with object_name/active remaps, definition_json parsed
acceptance[1] not-run: not asserted by any passing pin named in ref
acceptance[2] not-run: not asserted by any passing pin named in ref
acceptance[3] not-run: not asserted by any passing pin named in ref
acceptance[4] not-run: not asserted by any passing pin named in ref
acceptance[5] not-run: not asserted by any passing pin named in ref
acceptance[6] not-run: not asserted by any passing pin named in ref
uncovered: 1-6: pin covers materialization only (per-event delivery, bulk shape, envelope/HMAC, redeliver matrix, retired trigger parse, seed-not-clobber not asserted)

integration-system.email-template-render rev 7 · PARTIAL · pins: files 1/1 passed, tests 4

acceptance[0] pass: email-template-materialization.dogfood.test.ts 4/4 passed: authored template renders through sendTemplate, built-in copy does not reach the wire
acceptance[1] not-run: not asserted by any passing pin named in ref
acceptance[2] not-run: not asserted by any passing pin named in ref
acceptance[3] not-run: not asserted by any passing pin named in ref
acceptance[4] not-run: not asserted by any passing pin named in ref
acceptance[5] not-run: pin asserts a Studio save sends on the next mail without restart; neither survival across redeploy nor declared-source reload is asserted
acceptance[6] not-run: not asserted by any passing pin named in ref
acceptance[7] not-run: not asserted by any passing pin named in ref
uncovered: 1 requireVars, 2 TEMPLATE_INACTIVE, 3 exact locale resolution, 4 fromOverride/replyTo, 5 provenance pair, 6 authoring rejections, 7 /email/send door: not asserted by the pin

integration-system.datasource-admin-lifecycle rev 3 · PARTIAL · pins: files 2/2 passed, tests 54

acceptance[0] not-run: drivers catalog pinned; the anonymous 401 half is not in these pins
acceptance[1] not-run: not asserted by any passing pin named in ref
acceptance[2] pass: admin-routes.test.ts 30/30 passed: POST /datasources/test splits inline secret out of the draft
acceptance[3] not-run: envelope.conformance pins refusal-as-200 envelope; the re-home (hasSecret, cleartext dropped) is mocked, live half not pinned
acceptance[4] not-run: route 201 + listing with mocked service only; ref: LIVE-mount half not pinned
acceptance[5] not-run: credential-stripped read is a mocked service; live no-echo not pinned
acceptance[6] pass: admin-routes.test.ts 30/30 + envelope.conformance.test.ts 24/24 passed: lifecycle error 400 DATASOURCE_ADMIN_ERROR
acceptance[7] pass: admin-routes.test.ts 30/30 passed: introspection routes degrade 503 naming external-datasource (Three datasource-admin routes answer 503 naming the wrong service (carried out of #3973 so it is not buried) #4225)
acceptance[8] not-run: 404 RESOURCE_NOT_FOUND pinned (envelope.conformance); the route-ledger conformance half is not among these pins
uncovered: 0,1 capability floor (anon 401/403) not in these pins; 3,4,5,8 live-mount halves not pinned (ref: drive os dev)

integration-system.external-schema-introspection rev 3 · PARTIAL · pins: files 2/2 passed, tests 40

acceptance[0] not-run: not asserted by any passing pin named in ref
acceptance[1] pass: remote-tables-twin.equivalence.test.ts 10/10 + admin-routes.test.ts 30/30 passed (finding: the two listRemoteTables route twins diverge on ?schema= — the admin spelling drops it #7955 ?schema= honoured)
acceptance[2] not-run: not asserted by any passing pin named in ref
acceptance[3] pass: remote-tables-twin.equivalence.test.ts 10/10 passed: both spellings one operation
acceptance[4] pass: remote-tables-twin.equivalence.test.ts 10/10 passed (finding: the external-datasource federation HTTP family mounts outside the enforceAuth seam with no guard of its own — read and write #9686/security(service-datasource): datasource-admin routes require a platform-settings capability beyond authentication #9593 admission both spellings)
uncovered: 0 and 2 need the real showcase fixture / sqlite introspection (ref: LIVE-mount half not pinned)

integration-system.external-schema-drift-gate rev 2 · PARTIAL · pins: files 3/3 passed, tests 39

acceptance[0] not-run: fail-default is unit-pinned, but the ref says the LIVE boot-abort arm is not pinned (induced-drift boot required)
acceptance[1] pass: external-validation-plugin.test.ts 17/17 passed (warn)
acceptance[2] pass: external-validation-plugin.test.ts 17/17 passed (ignore)
acceptance[3] pass: external-validation-checkonboot.test.ts 13/13 passed (fix(runtime): honour external.validation.checkOnBoot in the boot validation sweep #13149 checkOnBoot gate)
acceptance[4] pass: external-validation-checkonboot.test.ts 13/13 passed (boot-step-only scope)
acceptance[5] pass: list-diagnosed-consumer-sweep.test.ts 9/9 passed (IMetadataService.list() presents a known-partial answer as a complete one — the #5840 shape on the plural read #6504 withheld all-clear)
acceptance[6] pass: external-validation-plugin.test.ts 17/17 passed (drift-event emission)
uncovered: 0 live boot-abort arm not pinned per ref

integration-system.connector-auth-kind-application rev 1 · PARTIAL · pins: files 2/2 passed, tests 60

acceptance[0] pass: rest-connector.test.ts 10/10 passed (per-kind wire shapes via stubbed fetch)
acceptance[1] pass: connector-materialization.test.ts 50/50 passed (credentialRef resolution incl. env fallback)
acceptance[2] pass: connector-materialization.test.ts 50/50 passed (boot-fatal missing ref)
acceptance[3] not-run: not asserted by any passing pin named in ref
acceptance[4] not-run: not asserted by any passing pin named in ref
uncovered: 3 oauth2 authoring refusal not named in ref or pins; 4 served-body secret grep is the live leg (ref: not pinned)

integration-system.external-schema-browser-ui rev 3 · PARTIAL · pins: files 1/1 passed, tests 16

acceptance[0] not-run: not asserted by any passing pin named in ref
acceptance[1] not-run: not asserted by any passing pin named in ref
acceptance[2] not-run: not asserted by any passing pin named in ref
acceptance[3] not-run: not asserted by any passing pin named in ref
acceptance[4] not-run: not asserted by any passing pin named in ref
acceptance[5] not-run: not asserted by any passing pin named in ref
acceptance[6] pass: objectui api.test.ts 16/16 passed at objectui 4016370a (503 -) ExternalServiceUnavailableError)
uncovered: 0-5: ref pins acceptance[6] ONLY; every other clause needs the browser run

integration-system.inbound-mailbox-association rev 1 · PASS · pins: files 5/5 passed, tests 52

acceptance[0] pass: mailbox-service-kernel.test.ts 1/1 passed + mailbox-sync-kernel.test.ts 4/4 passed + inline-forward.test.ts 24/24 passed + mailbox-attachments-kernel.test.ts 7/7 passed + field-mail-association.test.ts 16/16 passed (ref is the item's pin list, no qualifier)
acceptance[1] pass: mailbox-service-kernel.test.ts 1/1 passed + mailbox-sync-kernel.test.ts 4/4 passed + inline-forward.test.ts 24/24 passed + mailbox-attachments-kernel.test.ts 7/7 passed + field-mail-association.test.ts 16/16 passed (ref is the item's pin list, no qualifier)
acceptance[2] pass: mailbox-service-kernel.test.ts 1/1 passed + mailbox-sync-kernel.test.ts 4/4 passed + inline-forward.test.ts 24/24 passed + mailbox-attachments-kernel.test.ts 7/7 passed + field-mail-association.test.ts 16/16 passed (ref is the item's pin list, no qualifier)
acceptance[3] pass: mailbox-service-kernel.test.ts 1/1 passed + mailbox-sync-kernel.test.ts 4/4 passed + inline-forward.test.ts 24/24 passed + mailbox-attachments-kernel.test.ts 7/7 passed + field-mail-association.test.ts 16/16 passed (ref is the item's pin list, no qualifier)

integration-system.notification-org-and-redeliver-eligibility rev 1 · PASS · pins: files 4/4 passed, tests 108

acceptance[0] pass: notification-organization-follows-event.integration.test.ts 4/4 passed + messaging-service.test.ts 79/79 passed + webhook-redeliver-member.test.ts 18/18 passed + mcp-stdio-cwd.test.ts 7/7 passed (ref is the item's pin list, no qualifier)
acceptance[1] pass: notification-organization-follows-event.integration.test.ts 4/4 passed + messaging-service.test.ts 79/79 passed + webhook-redeliver-member.test.ts 18/18 passed + mcp-stdio-cwd.test.ts 7/7 passed (ref is the item's pin list, no qualifier)
acceptance[2] pass: notification-organization-follows-event.integration.test.ts 4/4 passed + messaging-service.test.ts 79/79 passed + webhook-redeliver-member.test.ts 18/18 passed + mcp-stdio-cwd.test.ts 7/7 passed (ref is the item's pin list, no qualifier)
acceptance[3] pass: notification-organization-follows-event.integration.test.ts 4/4 passed + messaging-service.test.ts 79/79 passed + webhook-redeliver-member.test.ts 18/18 passed + mcp-stdio-cwd.test.ts 7/7 passed (ref is the item's pin list, no qualifier)

platform-core.nav-surfaces-render rev 6 · PARTIAL · pins: no vitest pin files; showcase-smoke.spec.ts 49/49 passed (extra-evidence)

acceptance[0] pass: showcase-smoke.spec.ts 49 passed, 0 failed (Playwright, extra-evidence)
acceptance[1] not-run: not asserted by any passing pin named in ref
acceptance[2] not-run: not asserted by any passing pin named in ref
acceptance[3] not-run: not asserted by any passing pin named in ref
uncovered: 1 coverage-currency vs meta/app, 2 bad-route not-found, 3 ErrorBoundary screenshot: not asserted by the smoke

platform-core.metadata-registry-serving rev 2 · PARTIAL · pins: files 1/1 passed, tests 6

acceptance[0] pass: meta-types-create-seed.dogfood.test.ts 6/6 passed: same body as GET /meta
acceptance[1] pass: meta-types-create-seed.dogfood.test.ts 6/6 passed: dashboard/action seeds, report no seed
acceptance[2] pass: meta-types-create-seed.dogfood.test.ts 6/6 passed: /meta/types is not the /meta/:type catch-all
acceptance[3] not-run: not asserted by any passing pin named in ref
acceptance[4] not-run: not asserted by any passing pin named in ref
acceptance[5] not-run: not asserted by any passing pin named in ref
acceptance[6] not-run: not asserted by any passing pin named in ref
uncovered: 3-6 (view by name, type listing, object extension merge, overlay columns round-trip): not in the pin

platform-core.metadata-authoring-roundtrip rev 3 · PARTIAL · pins: files 1/1 passed, tests 5; objectui live e2e per live-summary.txt at objectui 4016370a

acceptance[0] not-run: not asserted by any passing pin named in ref
acceptance[1] not-run: not asserted by any passing pin named in ref
acceptance[2] not-run: only evidence is objectui live studio-record-page.spec.ts, which FAILED at objectui 4016370a (known stale) -) not consulted
acceptance[3] pass: package-first-authoring.dogfood.test.ts 5/5 passed: writable_package_required
acceptance[4] not-run: not asserted by any passing pin named in ref
acceptance[5] not-run: not asserted by any passing pin named in ref
uncovered: 0,1 draft/_drafts/publish over HTTP not asserted; 2 only a failing stale live spec; 4 overlay gate, 5 validateOnWrite: not in pin

platform-core.interrupted-migration-boot-report rev 2 · PARTIAL · pins: files 1/1 passed, tests 11

acceptance[0] pass: migration-recovery-plugin.test.ts 11/11 passed: warns per interrupted run and names the command
acceptance[1] not-run: pin asserts booting never writes to the journal; health/ready 200 after warning is not asserted
acceptance[2] pass: migration-recovery-plugin.test.ts 11/11 passed: says nothing when every run concluded
acceptance[3] pass: migration-recovery-plugin.test.ts 11/11 passed: skips silently when sys_migration_journal not registered
acceptance[4] pass: migration-recovery-plugin.test.ts 11/11 passed: reports a scan FAILURE
uncovered: 1 healthy-boot (health/ready 200) half not asserted

platform-core.activation-ledger-registration-home rev 5 · PASS · pins: files 3/3 passed, tests 35

acceptance[0] pass: packaged-activation-ledger-reach.dogfood.test.ts 11/11 + activation-ledger-registration.test.ts 2/2 + plugin.test.ts 22/22 passed (ref maps both describes, the MOVE negative, manifest triple)
acceptance[1] pass: packaged-activation-ledger-reach.dogfood.test.ts 11/11 + activation-ledger-registration.test.ts 2/2 + plugin.test.ts 22/22 passed (ref maps both describes, the MOVE negative, manifest triple)
acceptance[2] pass: packaged-activation-ledger-reach.dogfood.test.ts 11/11 + activation-ledger-registration.test.ts 2/2 + plugin.test.ts 22/22 passed (ref maps both describes, the MOVE negative, manifest triple)
acceptance[3] pass: packaged-activation-ledger-reach.dogfood.test.ts 11/11 + activation-ledger-registration.test.ts 2/2 + plugin.test.ts 22/22 passed (ref maps both describes, the MOVE negative, manifest triple)
acceptance[4] pass: packaged-activation-ledger-reach.dogfood.test.ts 11/11 + activation-ledger-registration.test.ts 2/2 + plugin.test.ts 22/22 passed (ref maps both describes, the MOVE negative, manifest triple)

platform-core.activation-ledger-row-contract rev 4 · PARTIAL · pins: files 3/3 passed, tests 76

acceptance[0] not-run: not asserted by any passing pin named in ref
acceptance[1] not-run: not asserted by any passing pin named in ref
acceptance[2] pass: packaged-activation-ledger-reach.dogfood.test.ts 11/11 passed (no tenant column, DDL reading) + action-activation.test.ts 18/18 (no organization_id key)
acceptance[3] pass: action-activation.test.ts 18/18 + flow-activation-ledger.test.ts 47/47 passed (re-enable UPDATES, not deletes)
acceptance[4] not-run: not asserted by any passing pin named in ref
acceptance[5] not-run: absence-reads-active and cross-boot hydration pinned; the no-lifecycle-block posture is not asserted
uncovered: 0 generic-write 405s, 1 unique:global index refusal, 4 metadata_type scope wall: not in ref/pins; 5 no-lifecycle-block half not asserted

platform-core.url-overlay-contract rev 1 · PARTIAL · pins: files 2/2 passed, tests 17

acceptance[0] not-run: not asserted by any passing pin named in ref
acceptance[1] not-run: ref cites useUrlOverlay.test.tsx (8/8 passed at objectui 4016370a) for replace semantics, but its test names/assertions cover open/close/alias params, not history replace vs push
acceptance[2] not-run: not asserted by any passing pin named in ref
acceptance[3] not-run: not asserted by any passing pin named in ref
acceptance[4] not-run: not asserted by any passing pin named in ref
acceptance[5] pass: objectui FormPage.recordObject.test.tsx 9/9 passed at objectui 4016370a (ci(spec): retire the generated paths filter — every artifact gate moves to the unfiltered required job #4292 fail-closed matrix)
uncovered: 0-4 browser history/cold-load/drill-trail screenshots not pinned (1: hook test does not assert history replace)

platform-core.lifecycle-retention-sweep rev 4 · PARTIAL · pins: files 1/1 passed, tests 114

acceptance[0] not-run: not asserted by any passing pin named in ref
acceptance[1] pass: lifecycle-service.test.ts 114/114 passed (retention.onlyWhen merged into reap filter)
acceptance[2] pass: lifecycle-service.test.ts 114/114 passed (archive-pending skip)
acceptance[3] pass: lifecycle-service.test.ts 114/114 passed (finding(objectql): LifecycleService 的无 guard reap 每次 sweep 发一条无上限 DELETE —— 首次给存量大表加 retention 时是一条长事务 #5194 bounded first sweep, drains later)
acceptance[4] not-run: not asserted by any passing pin named in ref
acceptance[5] not-run: not asserted by any passing pin named in ref
uncovered: 0 live hourly timer sweep, 4 OS_LIFECYCLE_DISABLED scored only against a live armed control boot, 5 class vocabulary (spec/engine constants) not in pin

platform-core.settings-audit-secret-fingerprint rev 2 · PASS · pins: files 1/1 passed, tests 7

acceptance[0] pass: settings-audit-secret-digest.test.ts 7/7 passed (ref names cases for keyed digest both ledgers, stable/distinct, reset, non-secret, refusing provider)
acceptance[1] pass: settings-audit-secret-digest.test.ts 7/7 passed (ref names cases for keyed digest both ledgers, stable/distinct, reset, non-secret, refusing provider)
acceptance[2] pass: settings-audit-secret-digest.test.ts 7/7 passed (ref names cases for keyed digest both ledgers, stable/distinct, reset, non-secret, refusing provider)
acceptance[3] pass: settings-audit-secret-digest.test.ts 7/7 passed (ref names cases for keyed digest both ledgers, stable/distinct, reset, non-secret, refusing provider)
acceptance[4] pass: settings-audit-secret-digest.test.ts 7/7 passed (ref names cases for keyed digest both ledgers, stable/distinct, reset, non-secret, refusing provider)
acceptance[5] pass: settings-audit-secret-digest.test.ts 7/7 passed (ref names cases for keyed digest both ledgers, stable/distinct, reset, non-secret, refusing provider)

platform-core.v18-boot-refusals rev 1 · PASS · pins: files 3/3 passed, tests 29

acceptance[0] pass: organization-ownership-boot-guard.test.ts 17/17 passed + organization-ownership-boot-guard.kernel.test.ts 9/9 passed + authz-identity-objects-boot-refusal.test.ts 3/3 passed (ref is the item's pin list, no qualifier)
acceptance[1] pass: organization-ownership-boot-guard.test.ts 17/17 passed + organization-ownership-boot-guard.kernel.test.ts 9/9 passed + authz-identity-objects-boot-refusal.test.ts 3/3 passed (ref is the item's pin list, no qualifier)
acceptance[2] pass: organization-ownership-boot-guard.test.ts 17/17 passed + organization-ownership-boot-guard.kernel.test.ts 9/9 passed + authz-identity-objects-boot-refusal.test.ts 3/3 passed (ref is the item's pin list, no qualifier)
acceptance[3] pass: organization-ownership-boot-guard.test.ts 17/17 passed + organization-ownership-boot-guard.kernel.test.ts 9/9 passed + authz-identity-objects-boot-refusal.test.ts 3/3 passed (ref is the item's pin list, no qualifier)

platform-core.protocol-18-handshake-and-stored-replay rev 1 · PASS · pins: files 5/5 passed, tests 98

acceptance[0] pass: packages-install-protocol-incompatible.test.ts 6/6 passed + migrate-meta-protocol-range.test.ts 19/19 passed + stored.test.ts 23/23 passed + protocol.stored-migration.test.ts 47/47 passed + plugin-artifact-forward-conversion-major-step.test.ts 3/3 passed (ref is the item's pin list, no qualifier)
acceptance[1] pass: packages-install-protocol-incompatible.test.ts 6/6 passed + migrate-meta-protocol-range.test.ts 19/19 passed + stored.test.ts 23/23 passed + protocol.stored-migration.test.ts 47/47 passed + plugin-artifact-forward-conversion-major-step.test.ts 3/3 passed (ref is the item's pin list, no qualifier)
acceptance[2] pass: packages-install-protocol-incompatible.test.ts 6/6 passed + migrate-meta-protocol-range.test.ts 19/19 passed + stored.test.ts 23/23 passed + protocol.stored-migration.test.ts 47/47 passed + plugin-artifact-forward-conversion-major-step.test.ts 3/3 passed (ref is the item's pin list, no qualifier)
acceptance[3] pass: packages-install-protocol-incompatible.test.ts 6/6 passed + migrate-meta-protocol-range.test.ts 19/19 passed + stored.test.ts 23/23 passed + protocol.stored-migration.test.ts 47/47 passed + plugin-artifact-forward-conversion-major-step.test.ts 3/3 passed (ref is the item's pin list, no qualifier)

platform-core.settings-organization-isolation-and-platform-rung rev 1 · PASS · pins: files 4/4 passed, tests 80

acceptance[0] pass: settings-organization-isolation.pin.test.ts 18/18 passed + settings-read-door.pin.test.ts 27/27 passed + settings-admission-tenancy-posture.test.ts 18/18 passed + config-change-audit.test.ts 17/17 passed (ref is the item's pin list, no qualifier)
acceptance[1] pass: settings-organization-isolation.pin.test.ts 18/18 passed + settings-read-door.pin.test.ts 27/27 passed + settings-admission-tenancy-posture.test.ts 18/18 passed + config-change-audit.test.ts 17/17 passed (ref is the item's pin list, no qualifier)
acceptance[2] pass: settings-organization-isolation.pin.test.ts 18/18 passed + settings-read-door.pin.test.ts 27/27 passed + settings-admission-tenancy-posture.test.ts 18/18 passed + config-change-audit.test.ts 17/17 passed (ref is the item's pin list, no qualifier)
acceptance[3] pass: settings-organization-isolation.pin.test.ts 18/18 passed + settings-read-door.pin.test.ts 27/27 passed + settings-admission-tenancy-posture.test.ts 18/18 passed + config-change-audit.test.ts 17/17 passed (ref is the item's pin list, no qualifier)

platform-core.serve-composition-v18 rev 1 · PASS · pins: files 6/6 passed, tests 41

acceptance[0] pass: serve-config-boot-residual.integration.test.ts 14/14 passed + serve-organization-record-page.e2e.test.ts 2/2 passed + serve-datasource-mapping-before-sync.integration.test.ts 2/2 passed + datasource-mapping-before-schema-sync.test.ts 3/3 passed + serve-no-storage-boot-guard.integration.test.ts 5/5 passed + console.not-built.test.ts 15/15 passed (ref is the item's pin list, no qualifier)
acceptance[1] pass: serve-config-boot-residual.integration.test.ts 14/14 passed + serve-organization-record-page.e2e.test.ts 2/2 passed + serve-datasource-mapping-before-sync.integration.test.ts 2/2 passed + datasource-mapping-before-schema-sync.test.ts 3/3 passed + serve-no-storage-boot-guard.integration.test.ts 5/5 passed + console.not-built.test.ts 15/15 passed (ref is the item's pin list, no qualifier)
acceptance[2] pass: serve-config-boot-residual.integration.test.ts 14/14 passed + serve-organization-record-page.e2e.test.ts 2/2 passed + serve-datasource-mapping-before-sync.integration.test.ts 2/2 passed + datasource-mapping-before-schema-sync.test.ts 3/3 passed + serve-no-storage-boot-guard.integration.test.ts 5/5 passed + console.not-built.test.ts 15/15 passed (ref is the item's pin list, no qualifier)
acceptance[3] pass: serve-config-boot-residual.integration.test.ts 14/14 passed + serve-organization-record-page.e2e.test.ts 2/2 passed + serve-datasource-mapping-before-sync.integration.test.ts 2/2 passed + datasource-mapping-before-schema-sync.test.ts 3/3 passed + serve-no-storage-boot-guard.integration.test.ts 5/5 passed + console.not-built.test.ts 15/15 passed (ref is the item's pin list, no qualifier)
acceptance[4] pass: serve-config-boot-residual.integration.test.ts 14/14 passed + serve-organization-record-page.e2e.test.ts 2/2 passed + serve-datasource-mapping-before-sync.integration.test.ts 2/2 passed + datasource-mapping-before-schema-sync.test.ts 3/3 passed + serve-no-storage-boot-guard.integration.test.ts 5/5 passed + console.not-built.test.ts 15/15 passed (ref is the item's pin list, no qualifier)
acceptance[5] pass: serve-config-boot-residual.integration.test.ts 14/14 passed + serve-organization-record-page.e2e.test.ts 2/2 passed + serve-datasource-mapping-before-sync.integration.test.ts 2/2 passed + datasource-mapping-before-schema-sync.test.ts 3/3 passed + serve-no-storage-boot-guard.integration.test.ts 5/5 passed + console.not-built.test.ts 15/15 passed (ref is the item's pin list, no qualifier)

records-forms.crud-roundtrip rev 10 · NOT-RUN · pins: files 2/2 passed, tests 32

acceptance[0] not-run: not asserted by any passing pin named in ref
acceptance[1] not-run: not asserted by any passing pin named in ref
acceptance[2] not-run: not asserted by any passing pin named in ref
acceptance[3] not-run: not asserted by any passing pin named in ref
acceptance[4] not-run: not asserted by any passing pin named in ref
acceptance[5] not-run: not asserted by any passing pin named in ref
acceptance[6] not-run: protocol.readonly-insert.test.ts 11/11 + engine-insert-static-readonly-strip.test.ts 21/21 passed pin the READONLY half only; new id, engine-owned re-derivation, cloner ownership not pinned
acceptance[7] not-run: not asserted by any passing pin named in ref
uncovered: 0-5,7 still need the run per ref; 6 only its readonly half is pinned

Generated by Claude Code

Parked-on: #24579 · this record's checklist-accuracy findings (refs that name source files, bare file-list refs that over-claim, the scaffold-e2e pin with no run on the candidate, OS_TEST_TIERS narrowing packages/cli), the 89 PARTIAL coverage gaps and the 17 NOT-RUN handover, handed to the dispatching session for the anchor
Carried-forward: #24579 · round-1 red-row dispositions on v18-boot-refusals, security-catalog-one-holder-and-boot-report, error-sentences-and-unique-violation-wire-code, share-link-combined-gates, act-door-and-admin-rescue-slate, chunked-upload-integrity, flow-authoring-refusals-v18, organization-ownership-ceremony · unchanged (this record is pin-only)

Generated by Claude Code

Closure complete (checklist-test §5): every FAIL in this record has a disposition (the Extracted: / Parked-on: lines above), and its partial coverage gaps and not-run handover are parked on #24579.
Closed by: the 18.0 QA wave dispatch session session_01CfRDy7SuTfUqaTu2AEH2Hi, on the maintainer's instruction there on 2026-10-19, verbatim 「qa-run的卡片处理完的是不是可以关闭」.

Generated by Claude Code

docs(qa): 18.0 sweep round 7 — integration-system checklist-accuracy …

Navigation Menu

Repository navigation

QA run · tier1:automated-pins (149/166) · ba4afcc2 · 2026-10-19 · 60 PASS / 89 PARTIAL / 0 FAIL / 0 BLOCKED / 17 NOT-RUN #24598

Environment fingerprint

Scope

Pin execution summary

Derived item verdicts

PASS in round 1, FAIL now

Other verdict movement against round 1 (`5b14b7f`), and why

access-security

ai

api-backend

approvals

attachments-storage

automation

cli

dashboards

i18n

identity-auth

integration-system

platform-core

records-forms

search

studio-authoring

Checklist-accuracy findings / fixture gaps

Handover (not-run items and clauses)

Timing

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

QA run · tier1:automated-pins (149/166) · ba4afcc2 · 2026-10-19 · 60 PASS / 89 PARTIAL / 0 FAIL / 0 BLOCKED / 17 NOT-RUN #24598

Description

Environment fingerprint

Scope

Pin execution summary

Derived item verdicts

PASS in round 1, FAIL now

Other verdict movement against round 1 (5b14b7f), and why

access-security

ai

api-backend

approvals

attachments-storage

automation

cli

dashboards

i18n

identity-auth

integration-system

platform-core

records-forms

search

studio-authoring

Checklist-accuracy findings / fixture gaps

Handover (not-run items and clauses)

Timing

Activity

objectstack-fleet commented on Oct 19, 2026

objectstack-fleet commented on Oct 19, 2026

objectstack-fleet commented on Oct 19, 2026

objectstack-fleet commented on Oct 19, 2026

objectstack-fleet commented on Oct 19, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions

Other verdict movement against round 1 (`5b14b7f`), and why