fix(plugin-security)!: refuse a sys_user_position write whose position names no sys_position row (#16712) - #20292

Merged

objectstack-fleet[bot] merged 14 commits into

mainfrom

claude/issue-16712-position-catalog-refusal

Sep 28, 2026

Commits on Sep 27, 2026

wip(plugin-security): refuse a sys_user_position write whose position names no sys_position row
claude
committed
166d5f1
test(plugin-security): pin the position catalog refusal on a real engine, with the ruling's control leg
claude
committed
b226d33
chore(changeset): plugin-security minor, BREAKING accept-set narrowing on sys_user_position.position
claude
committed
a093917
fix(plugin-security): census the refusal's isSystem stand-down, stamp the field code where the casing gate owns it, type the test's query options
claude
committed
cbdd0e7
Merge origin/main into claude/issue-16712-position-catalog-refusal
claude
committed
2f03620
docs(system-context): re-derive the census over the merged tree (symbols 88 -> 89)
claude
committed
75804ad
fix(plugin-security): read the position catalog as the writer's organization plus organization-less rows
claude
committed
c8b533d
docs(plugin-security): the changeset and system-context row 23b state the writer's catalog
claude
committed
418b441
test(plugin-security): type the pre-image pin's read options
claude
committed
cb1d5be
docs(plugin-security): state the single-posture catalog premise the code supports
claude
committed
0f4bf26
docs(plugin-security): make the single-posture whole-catalog sentence conditional on one organization
claude
committed
ebf00fd
fix(plugin-security): judge a non-string position by the text it is stored as
claude
committed
6e1ef6a
docs(plugin-security): a non-string position is judged by its string form, not its stored text
claude
committed
0e5f4c7

Commits on Sep 28, 2026

fix(plugin-security): leave an operator object to the engine, and look a placeholder-shaped name up literally
claude
committed
c282e60

Navigation Menu

fix(plugin-security)!: refuse a sys_user_position write whose position names no sys_position row (#16712) - #20292

fix(plugin-security)!: refuse a sys_user_position write whose position names no sys_position row (#16712)#20292
objectstack-fleet[bot] merged 14 commits into
mainfrom
claude/issue-16712-position-catalog-refusal

Commits on Sep 27, 2026

wip(plugin-security): refuse a sys_user_position write whose position names no sys_position row

test(plugin-security): pin the position catalog refusal on a real engine, with the ruling's control leg

chore(changeset): plugin-security minor, BREAKING accept-set narrowing on sys_user_position.position

fix(plugin-security): census the refusal's isSystem stand-down, stamp the field code where the casing gate owns it, type the test's query options

Merge origin/main into claude/issue-16712-position-catalog-refusal

docs(system-context): re-derive the census over the merged tree (symbols 88 -> 89)

fix(plugin-security): read the position catalog as the writer's organization plus organization-less rows

docs(plugin-security): the changeset and system-context row 23b state the writer's catalog

test(plugin-security): type the pre-image pin's read options

docs(plugin-security): state the single-posture catalog premise the code supports

docs(plugin-security): make the single-posture whole-catalog sentence conditional on one organization

fix(plugin-security): judge a non-string position by the text it is stored as

docs(plugin-security): a non-string position is judged by its string form, not its stored text

Commits on Sep 28, 2026

fix(plugin-security): leave an operator object to the engine, and look a placeholder-shaped name up literally