fix(objectql)!: a non-system write may name, in a lookup or user field, only a record the caller can read by objectstack-fleet[bot] · Pull Request #31031 · objectstack-ai/objectstack

Merge the parked caller-read reference work (60e40025b) onto fresh main

claude

committed

6177223

fix(objectql)!: the reference check runs before the record's validation rules

claude

committed

61bba86

feat(plugin-security): a delegate reads the business units its admin scope covers

claude

committed

c9cb46a

fix(objectql): a system write keeps its validation rules before the reference check

claude

committed

129000b

test(plugin-security): suites name users their callers read

claude

committed

6602814

docs(qa): retire the write-without-reading-the-parent persona

claude

committed

eda7ee2

test(plugin-audit): count the audit summary's reads, not the write's reference check

claude

committed

2e53abd

docs: a write names only a record its caller can read; a delegate reads its scope's units

claude

committed

9af142f

Merge origin/main into the #29029 branch before the PR

claude

committed

48a24f8

test(objectql): a header the write names answers the reference check first

claude

committed

d2b3757

test(plugin-security): the rig-users testkit lives under tests, and the delegate-read pins type their options

claude

committed

c614b03

Merge origin/main into claude/project-thread-m0wypr

claude

committed

b513250

Merge origin/main into claude/project-thread-m0wypr

claude

committed

93fce6c

test(plugin-security): the rule's peer carries an expired ban, so the rule is what answers it

claude

committed

75a7c44

docs(qa): the checklist item and the pins name the rule alone

claude

committed

0c2b985

Merge origin/main into claude/project-thread-m0wypr

claude

committed

ecaf3bc

test(plugin-security): the agent-ceiling grant suite names users its writer reads

claude

committed

3ec1f3e

fix(verify): the parent-write-reach personas read the records a create probe names

claude

committed

4ba9107

Merge remote-tracking branch 'origin/main' into claude/project-thread-2l4nno

claude

committed

0e54448

Navigation Menu

Repository navigation

fix(objectql)!: a non-system write may name, in a lookup or user field, only a record the caller can read - #31031

fix(objectql)!: a non-system write may name, in a lookup or user field, only a record the caller can read#31031
objectstack-fleet[bot] merged 32 commits into
mainfrom
claude/sec-hardening-r12

Commits on Nov 2, 2026

fix(objectql)!: a non-system lookup or user write names only a record the caller can read

test(objectql): a system write asks no read door and no probe

fix(objectql): an unresolvable lookup target fails open; forced test edits for the caller-read rule

chore(changeset): objectql lookup and user writes name only a readable record

Commits on Nov 5, 2026

Merge the parked caller-read reference work (60e40025b) onto fresh main

fix(objectql)!: the reference check runs before the record's validation rules

feat(plugin-security): a delegate reads the business units its admin scope covers

fix(objectql): a system write keeps its validation rules before the reference check

test(plugin-security): suites name users their callers read

docs(qa): retire the write-without-reading-the-parent persona

test(plugin-audit): count the audit summary's reads, not the write's reference check

docs: a write names only a record its caller can read; a delegate reads its scope's units

Merge origin/main into the #29029 branch before the PR

test(objectql): a header the write names answers the reference check first

test(plugin-security): the rig-users testkit lives under tests, and the delegate-read pins type their options

Merge origin/main into claude/project-thread-m0wypr

Merge origin/main into claude/project-thread-m0wypr

test(plugin-security): the rule's peer carries an expired ban, so the rule is what answers it

docs(qa): the checklist item and the pins name the rule alone

Merge origin/main into claude/project-thread-m0wypr

test(plugin-security): the agent-ceiling grant suite names users its writer reads

fix(verify): the parent-write-reach personas read the records a create probe names

Merge remote-tracking branch 'origin/main' into claude/project-thread-2l4nno

Commits on Nov 6, 2026

Merge origin/main into claude/sec-hardening-r12

fix(objectql): the update's reference forgiveness compares only stored values the caller may read

test(objectql,plugin-security): the update's reference forgiveness compares only stored values the caller may read

docs(objectql): the update's reference forgiveness compares only stored values the caller may read

Merge origin/main into claude/sec-hardening-r12

docs(permissions): the system-context page's reference-check row names the forgiveness's system-write read

Merge origin/main into claude/sec-hardening-r12

test(verify): the parent-write-reach suite pays the harness's two lazy service loads at module top

Merge origin/main into claude/sec-hardening-r12