Repository navigation

fix(runtime)!: an app-authored body may not bind a hook to, or write, the stored-metadata tables (#21520) - #21563

Merged

objectstack-fleet[bot] merged 14 commits into

mainfrom

claude/issue-21520-family-body-boundary

Oct 3, 2026

Commits on Oct 3, 2026

wip(runtime): evaluate-shape refusals + write-return serve at stored-metadata reader seam
claude
committed
50adc74
wip(runtime): pins for evaluate refusals, write-return serve, search narrowing, execute reach
claude
committed
f906474
chore(changeset): reader-context evaluate refusals and write-return serve (#21454)
claude
committed
3ec6afd
test(runtime): fix seam test types (double arity, seen shape, drop unused helper)
claude
committed
05fb578
docs(runtime): name the #21520 write-verb refusal attach point on the seam
claude
committed
bc231a8
test(runtime): route the seam double's update/delete through engine dispatch predicates; record pinned coverage
claude
committed
1a6fbf7
chore(changeset): declare the reader-context evaluate refusals as a narrowing (#21454)
claude
committed
19b2cb6
fix(runtime): refuse binding an app-authored hook body to a stored-metadata table
claude
committed
700cfda
Merge the reader-context seam's evaluate-refusals head (19b2cb6e50) to stack the body write refusal on it
claude
committed
1fc382c
wip(runtime): refuse a sandboxed body's write of a stored-metadata table at the seam
claude
committed
99c9a41
test(runtime): composed pins for the stored-metadata body boundary
claude
committed
0d8af06
chore(changeset): declare the stored-metadata body boundary as a narrowing
claude
committed
d111f49
Merge origin/main (6cf1154a65) into claude/issue-21520-family-body-boundary
claude
committed
6094c89
Merge origin/main (ce532184d1), which carries the reader-context seam's evaluate refusals
claude
committed
9a95e45

Navigation Menu

Repository navigation

fix(runtime)!: an app-authored body may not bind a hook to, or write, the stored-metadata tables (#21520) - #21563

fix(runtime)!: an app-authored body may not bind a hook to, or write, the stored-metadata tables (#21520)#21563
objectstack-fleet[bot] merged 14 commits into
mainfrom
claude/issue-21520-family-body-boundary

Commits on Oct 3, 2026

wip(runtime): evaluate-shape refusals + write-return serve at stored-metadata reader seam

wip(runtime): pins for evaluate refusals, write-return serve, search narrowing, execute reach

chore(changeset): reader-context evaluate refusals and write-return serve (#21454)

test(runtime): fix seam test types (double arity, seen shape, drop unused helper)

docs(runtime): name the #21520 write-verb refusal attach point on the seam

test(runtime): route the seam double's update/delete through engine dispatch predicates; record pinned coverage

chore(changeset): declare the reader-context evaluate refusals as a narrowing (#21454)

fix(runtime): refuse binding an app-authored hook body to a stored-metadata table

Merge the reader-context seam's evaluate-refusals head (19b2cb6e50) to stack the body write refusal on it

wip(runtime): refuse a sandboxed body's write of a stored-metadata table at the seam

test(runtime): composed pins for the stored-metadata body boundary

chore(changeset): declare the stored-metadata body boundary as a narrowing

Merge origin/main (6cf1154a65) into claude/issue-21520-family-body-boundary

Merge origin/main (ce532184d1), which carries the reader-context seam's evaluate refusals