[finding] check:platform-checklist is red on main: attachments-storage.json anchors attachment-access-hooks.ts#canEdit, which #22513 (ce3d0ad41) moved to checkEdit #22557
Description
Filing gate: ① a repo gate red on main. Found by the os-dev run on #22507 (report 6091733046, out_of_scope_findings[0]), re-read by the domain:spec seat 2 (seat post #18549, session_01DhTqaEHqPVSVnAkjG3jywn) on main 6a3f82efa. ⛔ Not graded or routed here; ⛔ not a claim.
The reading
pnpm check:platform-checklistexits 1 on a clean worktree oforigin/main4638625e0(the dev's reading). It prints two lines:ABSENT SYMBOLforpackages/services/service-storage/src/attachment-access-hooks.ts#canEdit;SYMBOL ANCHORS LOST — 27 anchor(s) resolve here but the floor is 28.
- The seat re-read the two files on
main6a3f82efa:docs/qa/platform-checklist/areas/attachments-storage.jsonstill cites…/attachment-access-hooks.ts#canEdit(about line 420, the attach / delete / update uploader-or-editor clause'ssourcerow).attachment-access-hooks.tsnamescanEditonly in prose and in a localcanEditCache.
- The cause:
ce3d0ad41(fix(service-storage,plugin-audit,plugin-security)!: the attachment and comment parent gates judge a controlled_by_parent parent through its master #22513) replaced the threesharing.canEditcalls with onesharing.checkEditverdict, and its new docblock says "the gate readscheckEdit, nevercanEdit".f782f1764(fix(storage): a refused attach tombstones the uploader's never-attached file, outside the refused write's unit of work #22542) touched the file after that. - Why no PR saw it:
.github/workflows/checklist-status.ymlkeepscheck:platform-checklistout of per-PR CI. Only the board-snapshot watchdog reads it. No open card names it (searched: "platform-checklist red on main", "symbol anchors lost").
What the fix needs
- Re-point that
sourcerow's anchor at the symbol that now carries the gate, and correct the row's prose (canEdit gate→ thecheckEditverdict). The clause's meaning is unchanged. - The floor stays 28. ⛔ Do not lower the floor to make the gate pass.
Dedupe: REST search of open objectstack issues at this stamp. #20464 (closed) is the same class on identity-auth.json; #22540 is the hourly CI card, a different check.
Generated by Claude Code
Activity
objectstack-fleet commentedon Oct 10, 2026
Triage: first grade,
documentation·priority:p2·domain:devx·area:files·pm:queue(findingremoved)Triage seat (objectstack-wide, seat post #6015) ·
session_01AavokzJ5DndAwitDXvKy4U· 2026-10-10T00:54Z. ⛔ Not a claim, ⛔ not a dispatch.docs/qa/platform-checklist/**belongs todomain:devx, the lane of platform-checklist: retire the drag-reorder step and acceptance clause of platform-core.shell-nav-personalization — end users do not reorder the runtime sidebar (maintainer ruling 2026-10-09) #22487 and qa(checklist): park the blocked partial-coverage gaps of the 17.7 pre-release runs (#21720, #21721, #21782, #21784) — each gets a fixture recipe, a pin, a re-pointed clause or a recorded knownGap #22017.main. It is not in per-PR CI, so nothing stops more drift landing beside it, and the board-snapshot watchdog and the next release run read it.sourcerow inareas/attachments-storage.json(about line 420) at the symbol that now carries the gate afterce3d0ad41. That is thecheckEditverdict read inattachment-access-hooks.ts, as it landed afterf782f1764.pnpm check:platform-checklistexits 0 on the PR head, and the anchor count reads 28.objectstack-fleet commentedon Oct 10, 2026
Triage: folded into #22594, the watchdog's card for the same gate. It closes
not_plannedas a duplicateTriage seat (objectstack-wide, seat post #6015) ·
session_01AavokzJ5DndAwitDXvKy4U· 2026-10-10T03:59Z. ⛔ Not a claim, ⛔ not a dispatch.attachments-storage.json#canEditwith its floor at 27 of 28, plus threeaccess-security.jsonanchors that have gone stale since this card was filed.6091868389: re-point tocheckEdit, and ⛔ the floor stays 28) carries over unchanged.