os-hourly-full-run-ci — machine-findable marker for this generated card. ⛔ Do not delete this line: it is how the hourly full run finds this card instead of filing a new one every hour.

hourly full run: red on main (CI)

Swept 2026-10-20T10:30:38.289Z · run log · commit 5cb6e6e0aa54c0d08a340a56c729f4be1beafbcb · conclusion failure.
CI runs the FULL battery on main every hour (#16467). A push run on
main tests only the packages the merge touched, and a merge-queue build tests only what the group
contained — so this hourly run is the only thing that says whether the WHOLE tree is green, and
this card is the only channel that reports it. Nothing is blocked by it.
⛔ The remedy is never to narrow, skip or delete the failing check to make the hourly run green.
Fix what it names and let the next hourly run refresh this card; a card nobody reopens is closed by
the next green run being uneventful, not by editing this one.

What landed since the last green hourly run

Range: 0904d856e3 (run 39362079574, the last green CI schedule run) .. 5cb6e6e0aa — compare

• 4bc3becd5f feat(spec)!: retire the list view's filterableFields — declared as the userFilters.fields shorthand, read as a Filter-panel whitelist; no per-view whitelist replaces it (feat(spec)!: retire the list view's filterableFields — declared as the userFilters.fields shorthand, read as a Filter-panel whitelist; no per-view whitelist replaces it #24721)
• 9b2953d62c fix(runtime)!: PATCH /packages/:id refuses a read-only package with 422 WRITABLE_PACKAGE_REQUIRED (fix(runtime)!: PATCH /packages/:id refuses a read-only package with 422 WRITABLE_PACKAGE_REQUIRED #24719)
• 014863d5d2 fix(types): an unevaluable hook condition's refusal answers 400 VALIDATION_ERROR at every data door (fix(types): an unevaluable hook condition's refusal answers 400 VALIDATION_ERROR at every data door #24714)
• f1298b3487 test(runtime): judge each share-link password pair once in the refusal-order file, so its loop cases fit the 5000 ms default (test(runtime): judge each share-link password pair once in the refusal-order file, so its loop cases fit the 5000 ms default #24704)
• 7e7e605de3 feat(cli,plugin-audit): os migrate audit-mail-bodies masks the mail bodies that pre-fix(platform-objects,plugin-audit,plugin-approvals)!: mail bodies are read only with manage_platform_settings, and the audit mirrors never copy them in clear #24688 audit and activity copies still hold in clear (feat(cli,plugin-audit): os migrate audit-mail-bodies masks the mail bodies that pre-#24688 audit and activity copies still hold in clear #24722)
• 4b114eda57 fix(metadata-core, metadata-protocol): two refusals say what 18.0 supports, not the ownership command 18.0 refuses (fix(metadata-core, metadata-protocol): two refusals say what 18.0 supports, not the ownership command 18.0 refuses #24726)
• b27f8ded5c feat(plugin-security): organization administrators assign positions and permission sets inside the D12 organization boundary (feat(plugin-security): organization administrators assign positions and permission sets inside the D12 organization boundary #24732)
• 4a2ca57e74 docs(data-modeling): field-types and validation-rules say what expression means on a stored field, beside its formula meaning (docs(data-modeling): field-types and validation-rules say what expression means on a stored field, beside its formula meaning #24734)
• 39e93b9ef9 fix(plugin-sharing,plugin-webhooks): by_object lists sort by object instead of grouping on its API name (fix(plugin-sharing,plugin-webhooks): by_object lists sort by object instead of grouping on its API name #24733)
• f7005cbd8c feat(runtime): PATCH /api/v1/packages/:id edits a package's manifest dependencies (feat(runtime): PATCH /api/v1/packages/:id edits a package's manifest dependencies #24703)
• fc34d000fc feat(objectql,cli,plugin-webhooks)!: 18.x step 4: the walled lift (8b walled half, the os serve lift, the declared-webhook name guard, declared webhooks deployment-wide) (feat(objectql,cli,plugin-webhooks)!: 18.x step 4: the walled lift (8b walled half, the os serve lift, the declared-webhook name guard, declared webhooks deployment-wide) #24667)
• 9bc4ddeb84 docs(pm-dispatch): retire rule A — the spec floor follows the commit pin since tooling: objectui's publish computes each @objectstack/* floor from .objectstack-sha — the first published release that contains the pinned commit — and stops when none does (ruling B on objectui#12955, step 2) objectui#12958 (docs(pm-dispatch): retire rule A — the spec floor follows the commit pin since objectstack-ai/objectui#12958 #24742)
• 580fd4ed3c docs(pm-skill): record the intermittent REST-read reference expansion in platform-readings (docs(pm-skill): record the intermittent REST-read reference expansion in platform-readings #24744)
• 1f949daeda feat(service-storage, plugin-audit): the parent gates ask the parent's by-id update alone; explain composes the on-behalf-of write (feat(service-storage, plugin-audit): the parent gates ask the parent's by-id update alone; explain composes the on-behalf-of write #24745)
• 7a7a43516c ci(scheduled-full-run): the release gate retries a transient 5xx or connection reset on a run listing, inside one budget per gate run (ci(scheduled-full-run): the release gate retries a transient 5xx or connection reset on a run listing, inside one budget per gate run #24748)
• 4e0f5f50dc docs(qa): 18.0 sweep round 9 — three pin over-claims narrowed, comma-range line citations re-pointed (docs(qa): 18.0 sweep round 9 — three pin over-claims narrowed, comma-range line citations re-pointed #24752)
• 576d0f3733 fix(showcase): a paid invoice's lines can no longer be added, removed or moved, so its total stays what was paid (fix(showcase): a paid invoice's lines can no longer be added, removed or moved, so its total stays what was paid #24731)
• 795ff708d8 docs(adr): ADR-0047 records the 18.0 retirement of filterableFields — no replacement key, no rewrite (docs(adr): ADR-0047 records the 18.0 retirement of filterableFields — no replacement key, no rewrite #24756)
• 74f78159af fix(dogfood): the wall CONTROL cases' packages declare the CRM dependency and their publish lines read the receipt (fix(dogfood): the wall CONTROL cases' packages declare the CRM dependency and their publish lines read the receipt #24777)
• 7d45c8e29a fix(plugin-security): the shipped sets stop copying the identity objects' declared row scopes (fix(plugin-security): the shipped sets stop copying the identity objects' declared row scopes #24761)
• 3230d66cc1 fix(types,rest): a /data write's NOT NULL refusal names the field by its label (fix(types,rest): a /data write's NOT NULL refusal names the field by its label #24759)
• 46bb5e3e54 docs(qa): 18.0 sweep round 10 — the walled boot's release attribution, two comma-range citations, the console-dist fact re-measured (docs(qa): 18.0 sweep round 10 — the walled boot's release attribution, two comma-range citations, the console-dist fact re-measured #24788)
• a43405d596 docs(pm-dispatch): concentrated test runs file one card per defect, with no per-fire quota (docs(pm-dispatch): concentrated test runs file one card per defect, with no per-fire quota #24743)
• faead58f45 fix(lint)!: the overlay save door refuses a list view bound to an object that exists nowhere (lint: an overlay write (no package) of a list view bound to an object that exists nowhere answers 200 with no issue — validateListViewFieldRefs skips it and no other rule judges a view write's binding #24668) (fix(lint)!: the overlay save door refuses a list view bound to an object that exists nowhere (#24668) #24789)
• 0b7286ff91 fix(plugin-sharing): re-evaluate position and team sharing rules for the user whose membership changes (fix(plugin-sharing): re-evaluate position and team sharing rules for the user whose membership changes #24790)
• 9d13b5fc83 fix(plugin-auth,platform-objects): revoke a session by its row id, resolved server-side (fix(plugin-auth,platform-objects): revoke a session by its row id, resolved server-side #24791)
• 12d14765c7 feat(cli,runtime)!: the upgrade ceremony opens — v17 and 18.0 databases take it, and a server serves only a database it created or one the ceremony certified (18.x steps 5 and 6) (feat(cli,runtime)!: the upgrade ceremony opens — v17 and 18.0 databases take it, and a server serves only a database it created or one the ceremony certified (18.x steps 5 and 6) #24681)
• 605b3e28b7 fix(plugin-security): an on-behalf-of by-id write never admits a row its delegator's own by-id write refuses (ADR-0090 D10) (fix(plugin-security): an on-behalf-of by-id write never admits a row its delegator's own by-id write refuses (ADR-0090 D10) #24792)
• 307ce4c4b4 docs(qa): 18.0 sweep round 11 — the walled pass of QA round 3: RUNNER's walled boot under serve, and eight items' producers, recipes and refusals (docs(qa): 18.0 sweep round 11 — the walled pass of QA round 3: RUNNER's walled boot under serve, and eight items' producers, recipes and refusals #24801)
• 21301a3406 fix(plugin-security): the delegated walk counts the permission set of the position's own name (fix(plugin-security): the delegated walk counts the permission set of the position's own name #24793)
• 25e16ab00c fix(plugin-auth): the auth IP allow-list judges the client address the server established (fix(plugin-auth): the auth IP allow-list judges the client address the server established #24795)
• 6b222464ce fix(pm): read-back judge collapses the read path's own-repo reference expansion before calling a body mutated (fix(pm): read-back judge collapses the read path's own-repo reference expansion before calling a body mutated #24804)
• 3465ad49db fix(plugin-audit,plugin-auth): a refused sign-in and an account lockout each write an audit row (fix(plugin-audit,plugin-auth): a refused sign-in and an account lockout each write an audit row #24797)
• ab98901690 ci: an opt-in label lane runs the 18.x upgrade harness on a line PR's merge preview (step 0 wiring) (ci: an opt-in label lane runs the 18.x upgrade harness on a line PR's merge preview (step 0 wiring) #24554)
• c56115bf96 fix(dogfood): the audit-capability fixture's grant writes carry their holder's organization (fix(dogfood): the audit-capability fixture's grant writes carry their holder's organization #24805)
• 3983965d6e fix(lint)!: a lookup or master_detail into a stored-metadata-body table is refused at author time (fix(lint)!: a lookup or master_detail into a stored-metadata-body table is refused at author time #24800)
• 6387793057 fleet-write: the executor applies write-pace rule ⑤ to a stroke of 5+ content-creating actions, and the seat budgets for it (fleet-write: the executor applies write-pace rule ⑤ to a stroke of 5+ content-creating actions, and the seat budgets for it #24810)
• ddb3360a49 docs(readme): say "ontology-driven" beside "the ontology is the software" (docs(readme): say "ontology-driven" beside "the ontology is the software" #24771)
• 87c09ebb7a qa(checklist): clauses for three round-3 defects outside the ledger, plus two RUNNER rules — a pin scores only the layer it drives, and an off-clause probe budget (qa(checklist): clauses for three round-3 defects outside the ledger, plus two RUNNER rules — a pin scores only the layer it drives, and an off-clause probe budget #24811)
• c3a8e07b6a docs(qa): 18.0 sweep round 12 — QA round 3's api and build checklist-accuracy findings outside cli.json: refs narrowed per clause, stale steps and wording corrected (docs(qa): 18.0 sweep round 12 — QA round 3's api and build checklist-accuracy findings outside cli.json: refs narrowed per clause, stale steps and wording corrected #24824)
• 7282a950b1 fix(plugin-approvals): the decision that ends an approval tells its submitter the outcome (fix(plugin-approvals): the decision that ends an approval tells its submitter the outcome #24816)
• 8a058d85a3 fix(plugin-security): under group, a no-active-organization insert gets the ADR-0123 D2 403, not a 500 (fix(plugin-security): under group, a no-active-organization insert gets the ADR-0123 D2 403, not a 500 #24819)
• 08d201a80e test(dogfood): the persona matrix hangs its invoice lines off an unpaid invoice (test(dogfood): the persona matrix hangs its invoice lines off an unpaid invoice #24832)
• 1366740c6c fix(plugin-security): every delegable-scope branch leaves out the built-in identity positions (fix(plugin-security): every delegable-scope branch leaves out the built-in identity positions #24826)
• 0c910d5e97 fix(spec): field and object form expression help states what the engine does (fix(spec): field and object form expression help states what the engine does #24803)
• 7697ddcf94 fix(service-settings): register the ai.test_embedder and knowledge.test handlers by default (fix(service-settings): register the ai.test_embedder and knowledge.test handlers by default #24830)
• 99e4eaa227 fix(plugin-sharing): a record share's Recipient column names the recipient through the recipient-picker face (fix(plugin-sharing): a record share's Recipient column names the recipient through the recipient-picker face #24831)
• 5fcc794972 fix(rest)!: POST /batch answers an update or delete op whose id names no row with the missing-id 400, not a 500 (fix(rest)!: POST /batch answers an update or delete op whose id names no row with the missing-id 400, not a 500 #24820)
• 5cb6e6e0aa fix(plugin-approvals): the delegation form's Delegator picker offers only the signed-in user (fix(plugin-approvals): the delegation form's Delegator picker offers only the signed-in user #24834)
  Filed by .github/workflows/scheduled-full-run-card.yml. Generated by Claude Code