fix(runtime)!: an app-authored body may not read the stored-metadata tables; it reaches them through the metadata API only (#21594) - #21660

Merged

objectstack-fleet[bot] merged 9 commits into

mainfrom

claude/issue-21594-body-read-refusal

Oct 4, 2026

Commits on Oct 4, 2026

fix(runtime)!: an app-authored body may not read the stored-metadata tables (wip)
claude
committed
39a0503
test(runtime): pin the body read refusal (wip)
claude
committed
2162634
test(runtime): the reader-context pin refuses a body's family read at every door (wip)
claude
committed
269f49d
chore(changeset): the body read refusal ships as a narrowing (wip)
claude
committed
9d95500
chore(changeset): state the route in the release's shape (wip)
claude
committed
9c87884
test(runtime): the body-read pin's double reads findOne through the engine's own predicate (wip)
claude
committed
d5b8902
fix(runtime): an action body is not handed a stored-metadata row as its subject record (wip)
claude
committed
694f4ce
test(runtime): pin the subject-record refusal at the /actions door, with host and ordinary controls (wip)
claude
committed
5e8fd37
Merge origin/main into claude/issue-21594-body-read-refusal
claude
committed
f5d575d