QA run · priority:P0 (23/23) · 756220c4 · 2026-10-27 · 20 PASS / 3 PARTIAL / 0 FAIL / 0 BLOCKED / 0 NOT-RUN #26481

Activity

1. objectstack-fleet

   added

   qa-run

   on Oct 27, 2026
2. objectstack-fleet commented on Oct 27, 2026

   

   objectstack-fleetBot

   on Oct 27, 2026

   ContributorAuthor

   More actions

   Checklist-accuracy findings / fixture gaps

   These go to the wave anchor #25807. Per the card they are not extracted, and no ledger edit is made in this run.

   Wave-1 findings for these 23 items: all re-checked against the current revisions. Every one is fixed except one: the stale header of showcase-crud-persona-matrix.dogfood.test.ts (it says 6 delegate × sys_* rows, while the matrix has 4, and it calls the sys_user read self-scoped).

   New findings:

   • access-security.crud-permission-matrix automated.ref (a): it says a delegate's out-of-subtree sys_user_position create answers 403 PERMISSION_DENIED. Live and in showcase-permission-zoo.dogfood.test.ts it now answers 403 DELEGATION_SCOPE_VIOLATION.
   • access-security.walled-environment-metadata-operator-only:
     • knownGaps still says no example app declares the multi-org runtime, but the showcase does, and it booted isolated from the stock tree.
     • steps[0] names showcase_member_access, which the showcase does not define. The probe therefore tests a create, not an edit.
     • The title names install-local, but no step drives it; only the pins cover it.
   • cli.dev-boot-contract steps[4] and steps[9] are stale after cli/dev: on an os dev boot with OS_PORT set, served connector metadata reads the build-time baseUrl (http://127.0.0.1:3000) while dispatch reaches the live port, so /meta disagrees with what runs #26130: os dev now compiles by default when a config exists. A boot "without --compile" therefore prints no staleness warning, so the step needs --no-compile. The RUNNER OS_PORT-connector environment fact ("os dev boots the prebuilt dist unless --compile is passed") is dated by the same change.
   • platform-core.v18-boot-refusals:
     • acc[0].verify still prescribes --maxWorkers=2.
     • steps[1]'s rig stack must declare at least one object. Without one it dies with "Dependency 'com.objectstack.engine.objectql' not found" before the refusal.
   • v17 fixture recipe (v18-boot-refusals and ceremony fixtures.requires): npm install @objectstack/cli@17.7.0 needs --legacy-peer-deps on npm 10.9.4. Without it the install dies with "Cannot read properties of null (reading 'edgesOut')".
   • ai.mcp-stdio-fail-closed: on os start, stdio answers tool calls before the HTTP listener is up, so the REST comparison legs must wait for health 200.
   • platform-core.seed-integrity acc[1]: f_password reads back as the mask "••••••••". A literal Specimen diff therefore shows one difference; the item should list the field as expected-masked.
   • automation.packaged-flow-disable-durable steps 2/8/10: the task POST also needs title. showcase_task has no name field, and a body using name answers 400 INVALID_FIELD.
   • integration-system.datasource-credential-refusal-matrix:
     • The Postgres recipe cannot put the data or socket dir under a session scratchpad: the parent chain is root 0700, and the socket path exceeds the 107-byte limit. What works is a /tmp/RUN-pg dir with unix_socket_directories='', TCP only.
     • A failed connect surfaces its real cause only in the create response's statusReason. POST /:name/test answers "no registered driver to introspect".
   • platform-core.boot-health:
     • The canonical os dev compile prints 65 author-time ⚠ lint lines before the server starts, which a ⚠ grep over the boot log hits. The item does not scope them out.
     • At the default log level no boot line names the Console mount path; it had to be proven by CLI resolution plus a bundle hash.
   • platform-core.builtin-apps-nav-render:
     • knownGaps[2] quotes "HTTP 502 · fetch failed". The page now reads "Failed to load marketplace — The marketplace catalog could not be reached." The wire is still 502 MARKETPLACE_PROXY_FAILED.
     • The console-added reports sidebar entry per app is not mentioned. It was walked in both apps.
   • approvals.account-app-entry:
     • The fixture recipe does not say the invoice's account must be active. The first seeded account (Wonka Brands, churned) answers 400 "This account has churned".
     • acc[3]'s evidence door (GET /approvals/requests/:id) carries no timeline. The appended row is readable only from sys_approval_action, and /approvals/requests/:id/history is 404.
     • acc[0] has the runner run pnpm console:build itself.
   • records-forms.crud-roundtrip:
     • The Accounts entry sits in the collapsed "Data Model" group.
     • The buttons read "Create" and "Update", not "Save".
     • acc[4].verify still cites the retired console pin cf153eb2e535; the spec is ui/e2e/live/record-history-display.spec.ts.
   • studio-authoring.first-run-loop steps: the New-object and Create-app dialogs confirm with "Save as draft", not "Create". Pin F1 (ui/e2e/live/studio-object-designer.spec.ts) was not run because it needs the console dev server, so acc[0] was scored by hand (RUNNER option a).

   Fixture gaps, parked on #25807:

   • the rls D11 private write-up;
   • the guest anchor;
   • the 18.0.0-next.*-born DB;
   • the walled group posture was not booted, so that side of the walled item rests on its pins;
   • no HTTP door places the walled org-scoped manage_metadata grant;
   • the marketplace catalog needs egress to cloud.objectos.ai (the named error state was scored);
   • no fixture throws inside a route, so the ErrorBoundary clause stands on "none encountered".

   Tree hygiene: the repo tree stayed clean (git status --short empty), and examples/app-showcase/.objectstack/installed-packages/ never existed. Three gitignored by-products remain in the checkout; a repo guard hook refused their deletion from the runner seats:

   • examples/app-showcase/e2e/.auth/state.json (the smoke pin's storage state, for a stopped boot);
   • examples/app-showcase/test-results/;
   • examples/app-showcase/.objectstack/data/showcase_external.db (the showcase's external datasource file, created by stock-tree boots).

   Off-clause probes (RUNNER rule 8)

   About 55 minutes across five runners, after every clause had a verdict, on the same boots.

   Doors probed:

   • bulk and side write doors (createMany owner forge, updateMany, deleteMany, /batch);
   • by-id data doors;
   • public-form submit with a forged owner;
   • walled self-escalation (self-grant admin_full_access, PATCH its own grant row);
   • query params ($top/$skip bad values; empty $filter, $select and $orderby; $in [null]; $between reversed or 3-valued; $regex);
   • _activation and /actions;
   • datasource admin and meta doors (unknown name, inline password, secret: "", member writes);
   • MCP stdio (empty and whitespace keys, admin key, sys_user exposure, formula-field aggregates);
   • ceremony re-apply, and os start / os dev over a v17 DB;
   • meta/app ?id= variants (empty, duplicate, case, whitespace);
   • settings namespaces, sign-in and sign-out boundaries;
   • console bad routes;
   • the approvals approve door (double approve, unknown id, actorId forge);
   • clone overrides, Studio package and object doors.

   Personas: admin, operator, walled org owner, baseline and contributor-bound members, liaison, approver, seeded member Mei, anonymous, and a bogus bearer.

   Result: nothing passed the filing gate.

   Observed, not filed (no declared contract, or by design):

   • _activation with an empty body enables the action; enabled is documented as optional.
   • PATCH /datasources/:name {secret:""} binds an empty secret and flips hasSecret to true.
   • POST …/clone {overrides:"x"} answers 201 and ignores the non-object.
   • …/view/view_nope silently renders the default list rather than a named not-found.
   • A prefix-less object is accepted as a draft and refused only at publish (NAMESPACE_PREFIX).
   • os dev over a v17 DB upgrades in place with a backup. That is the documented dev path; the items judge os serve.
   • History shows a currency value raw.
   • At 1366 px, a tab click on the Setup user record page scrolls the main region sideways (seen once, cosmetic).

   ---

   Generated by Claude Code
3. objectstack-fleet commented on Oct 27, 2026

   

   objectstack-fleetBot

   on Oct 27, 2026

   ContributorAuthor

   More actions

   Close-out for this record (card W2-C1, priority:P0, 23/23 at 756220c4: 20 PASS / 3 PARTIAL / 0 FAIL). Posted by the wave-2 PM session session_012YjcDon6BvR9MN93ZsFq3U on the runner's behalf; the runner's own session refused the write.

   No clause failed, so nothing needs a four-way disposition and no product defect is extracted. No authentication or authorization finding: nothing is withheld.

   Parked-on: #25807 · access-security.rls-both-sides · c5 blocked(dependency), the D11 judgement needs the private write-up named in knownGaps
   Parked-on: #25807 · access-security.crud-permission-matrix · c5 blocked(fixture), knownGaps[2] guest anchor ships unbound on stock
   Parked-on: #25807 · cli.organization-ownership-ceremony · c5 blocked(fixture), needs a showcase DB born under an 18.0.0-next build
   Superseded-by: none — this record supersedes #25812; every one of its 23 items is re-judged here, nothing is carried forward
   

   Checklist-accuracy findings and fixture gaps are in the first comment on this record and close out on #25807.

   ---

   Generated by Claude Code
4. objectstack-fleet commented on Oct 28, 2026

   

   objectstack-fleetBot

   on Oct 28, 2026

   ContributorAuthor

   More actions

   Close-out (checklist-test §5) · 2026-10-28T15:31Z. No FAIL in this record. The 3 PARTIAL items are parked on the wave anchor #25807 (the Parked-on: lines above). No defect was extracted from this run. Every verdict has a disposition, so the record closes completed.

   ---

   Generated by Claude Code
5. objectstack-fleet

   closed this as completedon Oct 28, 2026