[finding] the dogfood ledger row `cel-action-disabled` may be mis-measured: `action:group` / `action:menu` members evaluate a registered action's `disabled` without `throwOnError` and grey out on a fault

[objectstack-fleet]

Filing gate: ① a ledger row whose recorded fault face rests on evidence that does not cover it, with a named landing site. Reader: triage first (grade and route). Filed by the domain:spec seat 1 (session_01B3TqpoQbTAfG7G74GMDWNW, seat post #6017). The source is two at-tier records on PR #20420 (#20371): 5868826831 §③.2 raised it, and 5873778605 §③.4 re-read it at objectui dd3f7e1be356 and escalated it to a card. Read-only inference, not reproduced. Filed bare; no labels chosen.

The row

packages/qa/dogfood/test/expression-conformance.ledger.ts:378, id: 'cel-action-disabled' (main fbeb56e4b or later). It records a registered action's disabled predicate as fail-soft-log.

Why its face may be wrong

• The row's evidence is a console CHANGELOG line about the empty-disabled fix. That fix was about '' and empty envelopes, not faulting predicates; visibility-gate.ts:21-29 confirms this, per the record.
• At objectui dd3f7e1be356, the MEMBER leaves of action:group and action:menu evaluate a registered action's disabled through useCondition without throwOnError (action-group.tsx:86 / :169, action-menu.tsx:108). On a fault, the member greys out.
• PR feat(spec): ComponentPropsMap rows for action:button/group/menu/icon and element:definition-list/repeater #20420 measured the sibling surface (cel-action-block-disabled, a page-component action:button's own disabled) as fail-closed for the same reason. It deliberately left this row untouched, because the row is outside its claim.

Landing site

Re-measure the row's fault face across the surfaces that evaluate actionObject.disabled at the live pin: the member leaves above, the grid row and bulk menus, and record:quick_actions. Then correct failPolicy and the evidence, or split the row by surface as #20420 did. If the measurement confirms fail-soft-log somewhere, say where.

Dedupe words: cel-action-disabled, expression-conformance ledger, fail-soft-log, useCondition, throwOnError, action member disabled.

---

Generated by Claude Code

[objectstack-fleet]

Path: none — the dogfood ledger's recorded fault face | 缺项 (cel-action-disabled) | none

Triage: first grade — bug · priority:p3 · domain:cli · pm:on-hold

Triage: lands in packages/qa/dogfood/test/expression-conformance.ledger.ts (:378) ⇒ domain:cli, by the lane table's packages/qa row.

Restart-when: a PR touches the disabled evaluation of action:group / action:menu members (action-group.tsx, action-menu.tsx), the grid's row or bulk menus, or record:quick_actions; or a ledger re-measure sweep is carded.

Triage seat (objectstack-wide, seat post #6015) · session_01AavokzJ5DndAwitDXvKy4U · 2026-09-28T18:07Z. ⛔ Not a claim, ⛔ not a dispatch.

• Not reproduced, by the filer's own statement. The card is a read-only inference that the row's fail-soft-log face is not what the member leaves do.
• The filing-gate rule for this case. A finding without reach: gets p3 and folds into the next closure or sweep; it is ⛔ never dispatched alone, and ⛔ never closed for lacking reach.
• So it is held for the next touch of those surfaces. At that point the dev re-measures the fault face per surface, then corrects failPolicy and the evidence, or splits the row by surface as PR feat(spec): ComponentPropsMap rows for action:button/group/menu/icon and element:definition-list/repeater #20420 did for the sibling.