fix(plugin-security,service-analytics): a boolean comparand is judged by the spec verdict at the RLS compile seam and in the NativeSQL strategy - #21424

Merged

objectstack-fleet[bot] merged 9 commits into

mainfrom

claude/issue-21376-boolean-comparand-compilers

Oct 2, 2026

Commits on Oct 2, 2026

fix(plugin-security): the RLS compile seam runs the spec's boolean-comparand verdict beside the number arm
claude
committed
208db86
fix(service-analytics): the NativeSQL strategy runs the spec's boolean-comparand verdict on every filter it compiles
claude
committed
9049747
test(plugin-security,service-analytics): pin the boolean comparand at the RLS seam and the NativeSQL strategy
claude
committed
95bf8c4
docs(rls),chore(changeset): the fail-closed contract names the declared-type comparand refusal; changeset for both packages
claude
committed
dabcb4a
Merge origin/main into claude/issue-21376-boolean-comparand-compilers
claude
committed
5de49ce
test,docs: follow the spec verdict's non-string refusals (a number other than 1 / 0) at both compilers
claude
committed
78e4f3e
test(plugin-security): key the frozen-filter record by the CEL source, as compileCelToFilter types its argument
claude
committed
ef3ea87
chore(changeset): declare the boolean-comparand change as an accept-set narrowing (minor, BREAKING), as the number twin at the same seam
claude
committed
45a4b8f
Merge origin/main into claude/issue-21376-boolean-comparand-compilers
claude
committed
2fd5e16