docs(spec): the ADR-0087 ledger states the component-props gate's tier as the head enforces it

The contract-tier review of the retired-key error upgrade found two
conversion docblocks this change made false: page-header-breadcrumb-removed
and object-master-detail-form-detail-sort-field-removed said the tombstone
refuses the key "advisory, via the props lint". Both now say os validate,
os build and os lint refuse it as an error, the load path keeping the open
properties bag.

The sweep of registry.ts and migrations/entries for the same class found
three pre-existing false sentences, folded in under the seat's amendment:
element-text-variant-heading-levels said an author is refused at parse (a
retired enum value is an advisory finding); page-tabs-type-to-tab-style said
the tombstone refuses at load (the load path does not parse the props bag);
time-default-utc-suffix-dropped said refused at parse for an element:button
inline action (an advisory finding there). The breadcrumb retired-key note
keeps its residue argument and now says the lint was advisory in every
release that shipped the default.

Comment-only.

Claude-Session: https://claude.ai/code/session_012uFegdfR6K6uqvLzt7XsdZ
Co-authored-by: Claude <noreply@anthropic.com>

Author: claude

packages/spec/src/conversions/registry.ts

@@ -5834,7 +5834,9 @@ const inlineActionApiParamsToBodyExtra: MetadataConversion = {
  * component's inner `type` (an action's `type: 'url'`, a tab item's fields)
  * into a rewrite target: only `properties.type` on a node whose own `type` is
  * `page:tabs` moves. The tombstone still carries the refusal at the authoring
- * site (`tsc`) and at load (the parse), whatever the walk reached.
+ * site (`tsc`) and at `os validate` / `os build` / `os lint`, where the
+ * component-props gate refuses it as an `error` (the load path keeps the open
+ * `properties` bag as written), whatever the walk reached.
  *
  * `retiredFromLoadPath: true`: no alias window, deliberately. The tombstone owns
  * the refusal; this entry exists so `spec-changes.json`, the upgrade guide and
@@ -8027,8 +8029,12 @@ const translationPerAppSettingsRemoved: MetadataConversion = {
  * Reach: the literal defaults the narrowed gates judge — a `time` field's
  * (`objects[]`, `objectExtensions[]`) and an action param typed `time`
  * (`actions[]`, `objects[].actions[]`, an `element:button`'s inline action).
- * Retired from the load path: an author is refused at parse, and data at rest
- * and `os migrate meta` replay it.
+ * Retired from the load path: an author is refused at parse — except on an
+ * `element:button`'s inline action, which sits in the open `properties` bag the
+ * load path keeps as written, where the refusal is an advisory
+ * `component-props-invalid` finding at `os validate` / `os build` / `os lint`
+ * (the component-props gate, `@objectstack/lint`) — and data at rest and
+ * `os migrate meta` replay it.
  */
 const timeDefaultUtcSuffixDropped: MetadataConversion = {
   id: 'time-default-utc-suffix-dropped',
@@ -8324,8 +8330,12 @@ const translationComponentSubmitLabelRemoved: MetadataConversion = {
  * positions the component-props gate judges. `variant` on any other component
  * type is that component's own vocabulary and is never read here.
  *
- * `retiredFromLoadPath`: an author is refused at parse with the prescription
- * rather than silently rewritten; stored rows replay it at rehydration
+ * `retiredFromLoadPath`: an author is not silently rewritten — `os validate`,
+ * `os build` and `os lint` report an old spelling as an advisory
+ * `component-props-invalid` finding carrying the prescription (the
+ * component-props gate, `@objectstack/lint`: a retired enum value is a value
+ * verdict, a warning; the load path keeps the open `properties` bag as
+ * written); stored rows replay it at rehydration
  * (`applyConversionsToStoredItem`) and `os migrate meta` lists the edit for
  * existing sources. Idempotent by construction: the rewrite's output is
  * outside its own input set.
@@ -10609,8 +10619,10 @@ const objectKanbanQuickAddRemoved: MetadataConversion = {
  * nothing fills the slot. The console draws the navigation trail once, in the
  * shell (`@object-ui/app-shell` `AppHeader`, inside `/apps/:appName/*`), so the
  * retirement takes the key away rather than building a second trail. The
- * tombstone on `PageHeaderProps` refuses it for a live author (advisory, via
- * the props lint: `PageComponentSchema.properties` is an open bag).
+ * tombstone on `PageHeaderProps` refuses it for a live author: `os validate`,
+ * `os build` and `os lint` refuse it as an `error` with the prescription (the
+ * component-props gate, `@objectstack/lint`; the load path keeps the open
+ * `properties` bag as written).
  *
  * **A delete of both values.** `true` and `false` go alike: neither ever drew
  * a trail, so there is no value to preserve and no rewrite target. The one
@@ -13551,8 +13563,10 @@ const dashboardWidgetChartConfigStructureRemoved: MetadataConversion = {
  * `sort_field` (`:874`). An authored value changed nothing on that console, so
  * deleting it preserves observed behaviour exactly; the line order is kept by
  * the child object's own field, which the entry's tombstone names. The
- * tombstone refuses the key for a live author (advisory, via the props lint:
- * `PageComponentSchema.properties` is an open bag).
+ * tombstone refuses the key for a live author: `os validate`, `os build` and
+ * `os lint` refuse it as an `error` with the prescription (the component-props
+ * gate, `@objectstack/lint`; the load path keeps the open `properties` bag as
+ * written).
  *
  * ⚠️ Scoped by component `type` and by POSITION — `properties.details[]` of an
  * `object-master-detail-form` — never by key name: `sortField` is an ordinary

packages/spec/src/migrations/entries/retired-keys/18.ui__PageHeaderProps__breadcrumb.ts

@@ -14,8 +14,9 @@
 // ⭐ RETIRED-DEFAULT RESIDUE: not owed, although the key carried
 // `.default(true)`. The default was never materialized: a page parses its
 // component `properties` as an open bag, and this row is parsed only by the
-// advisory props lint, which writes nothing back — so no released toolchain
-// emitted `breadcrumb: true` into an artifact nobody authored.
+// props lint (advisory in every release that shipped the default), which
+// writes nothing back — so no released toolchain emitted `breadcrumb: true`
+// into an artifact nobody authored.
 //
 // Registered under 18, not 17: v17.0.0 was cut before this landed, so the
 // removal ships on the 17.x line (launch-window convention: accept-set