fix(core,plugin-security)!: a grants resolution with no active organization applies only global grants (#20515) - #20540

Merged

objectstack-fleet[bot] merged 11 commits into

mainfrom

claude/issue-20515-orgless-grants-global-only

Sep 29, 2026

Commits on Sep 28, 2026

fix(core): an organization-less grants resolution applies only global grants
claude
committed
514e681
test(core): pin the no-tenant grants rule at the resolver, the session arm and the cache
claude
committed
a073cf3
fix(plugin-security): the explainer and the delegator leg resolve grants in an organization
claude
committed
ecf2152
test(plugin-security): pin the explainer, the explain API and the delegator leg resolving in an organization
claude
committed
08d0636
test(runtime): pin the /packages capability gate refusing a removed member's organization-scoped manage_metadata
claude
committed
b96b10f

Commits on Sep 29, 2026