fix(plugin-security): an organization administrator's assignment removal is judged on the stored row, and its refusal names only values the caller can read by objectstack-fleet[bot] · Pull Request #30248 · objectstack-ai/objectstack

fix(plugin-security): an organization administrator's assignment removal is judged on the stored row, and its refusal names only values the caller can read

claude

committed

37b2be3

test(plugin-security): an organization administrator's removal is judged on the stored row, and its refusal names only values the caller can read

claude

committed

b1aebac

chore(changeset): an organization administrator's assignment removal is judged on the stored row

claude

committed

a6e4046

Merge remote-tracking branch 'origin/main' into claude/sec-hardening-r2

claude

committed

a672bd6

test(plugin-security): the stored-row describe's not-found control pins removals only

claude

committed

ff7fa36

test(plugin-security): the stored-row describe's masked cases use an enrolled organization administrator with no field rules

claude

committed

5fd3195

Merge remote-tracking branch 'origin/main' into claude/sec-hardening-r2

claude

committed

0dde0ae

docs(plugin-security): the stored-row changeset and the re-pinned test state the rule only

claude

committed

a491a3c

docs(changeset): the stored-row note claims the admission only for the columns it holds for end to end

claude

committed

a3cdc6f

Merge remote-tracking branch 'origin/main' into claude/sec-hardening-r2

claude

committed

d33de91

fix(plugin-security): contract-review findings — the stored-row verdict cites its governing ruling record, and the corrected pending note is true of the tree

claude

committed

0cc6f17

docs(plugin-security): every stored-row-verdict and naming-rule citation in the package names ruling of record 6649064874

claude

committed

0b0d0e2

Navigation Menu

Repository navigation

fix(plugin-security): an organization administrator's assignment removal is judged on the stored row, and its refusal names only values the caller can read - #30248

fix(plugin-security): an organization administrator's assignment removal is judged on the stored row, and its refusal names only values the caller can read#30248
objectstack-fleet[bot] merged 12 commits into
mainfrom
claude/sec-hardening-r2

Commits on Nov 5, 2026

fix(plugin-security): an organization administrator's assignment removal is judged on the stored row, and its refusal names only values the caller can read

test(plugin-security): an organization administrator's removal is judged on the stored row, and its refusal names only values the caller can read

chore(changeset): an organization administrator's assignment removal is judged on the stored row

Merge remote-tracking branch 'origin/main' into claude/sec-hardening-r2

test(plugin-security): the stored-row describe's not-found control pins removals only

test(plugin-security): the stored-row describe's masked cases use an enrolled organization administrator with no field rules

Merge remote-tracking branch 'origin/main' into claude/sec-hardening-r2

docs(plugin-security): the stored-row changeset and the re-pinned test state the rule only

docs(changeset): the stored-row note claims the admission only for the columns it holds for end to end

Merge remote-tracking branch 'origin/main' into claude/sec-hardening-r2

fix(plugin-security): contract-review findings — the stored-row verdict cites its governing ruling record, and the corrected pending note is true of the tree

docs(plugin-security): every stored-row-verdict and naming-rule citation in the package names ruling of record 6649064874