feat(plugin-auth,objectql,metadata-protocol,runtime)!: under `single` the Default Organization exists before the seeds and the listener; an unowned seed row or system write is derived there or refused (ADR-0131 C1) by objectstack-fleet[bot] · Pull Request #22186 · objectstack-ai/objectstack

Merge remote-tracking branch 'origin/main' into claude/issue-15195-default-org-load-bearing

claude

committed

8b7db6b

wip(plugin-auth,metadata-protocol,runtime): keep the boot invariant internal, stamp only seed rows that carry an organization, real-kernel pin

claude

committed

c49f46b

wip(runtime): the owner pin boots the dev-admin shape, where the reconciler binds the first admin before the owner bind

claude

committed

558793d

Merge remote-tracking branch 'origin/main' into claude/issue-15195-default-org-load-bearing

claude

committed

2fd5764

wip(changesets): column-aware seed stamp, every user bound from the first boot, the measured Clause-② line

claude

committed

955a951

wip(tests,docs): pin the new engine doubles to the engine contracts; the tenant-audit census counts the two new system writes

claude

committed

fff1f03

wip(tests): the seed-stamp fake declares only the verbs the loader calls; the pinned-double ledger records the auth-plugin update double

claude

committed

3e799dc

wip(tests): the pin's probe resolves the engine by its contract type; the seed-stamp double refuses a WHERE combinator

claude

committed

a5cf44a

Merge remote-tracking branch 'origin/main' into claude/issue-15195-default-org-load-bearing

claude

committed

4fc2472

Merge remote-tracking branch 'origin/main' into claude/issue-15195-default-org-load-bearing

claude

committed

cd7f73b

docs(audits): the tenant-audit census regenerated after the main merge, with the two system writes C1 adds (234 to 236)

claude

committed

fbc0e91

wip(verify): bootStack boots the production single shape; orgContext keeps only the vacuity guard

claude

committed

5c97ee0

wip(dogfood): re-pin the 24 fixtures that encoded an org-less single boot, each on its own cause

claude

committed

cee4376

wip(changesets,dogfood): the verify changeset; the memory-driver consequence until C8; two harness comments corrected

claude

committed

98a89bc

Merge remote-tracking branch 'origin/main' into claude/issue-15195-default-org-load-bearing

claude

committed

c2f7e36

test(verify): the default-boot case pins the owner bind — the admin owns the Default Organization

claude

committed

05dedee

Merge remote-tracking branch 'origin/main' into claude/issue-15195-default-org-load-bearing

claude

committed

4b40ca3

docs(audits): the tenant-audit census regenerated after the second main merge, with the two system writes C1 adds (234 to 236)

claude

committed

9aee4d0

test(plugin-approvals,plugin-security): two engine rigs boot the production single shape — the Default Organization exists

claude

committed

b7d0b34

test(service-automation): the SecurityPlugin flip rig holds the Default Organization, the member's own

claude

committed

ede1fbd

Navigation Menu

Repository navigation

feat(plugin-auth,objectql,metadata-protocol,runtime)!: under `single` the Default Organization exists before the seeds and the listener; an unowned seed row or system write is derived there or refused (ADR-0131 C1) - #22186

Commits on Oct 7, 2026

wip(objectql): refuse a single-posture system insert with no organization (ADR-0131 D9)

wip(plugin-auth,metadata-protocol,runtime): Default Organization boot invariant, owner promotion, seed stamping (ADR-0131 D3/D9)

wip(tests): re-pin seed and system-write tests to ADR-0131 D3/D9

wip(runtime,plugin-auth,metadata-protocol): changesets; re-pin first-boot tests to ADR-0131 D3/D9

Merge remote-tracking branch 'origin/main' into claude/issue-15195-default-org-load-bearing

Commits on Oct 8, 2026

Merge remote-tracking branch 'origin/main' into claude/issue-15195-default-org-load-bearing

wip(plugin-auth,metadata-protocol,runtime): keep the boot invariant internal, stamp only seed rows that carry an organization, real-kernel pin

wip(runtime): the owner pin boots the dev-admin shape, where the reconciler binds the first admin before the owner bind

Merge remote-tracking branch 'origin/main' into claude/issue-15195-default-org-load-bearing

wip(changesets): column-aware seed stamp, every user bound from the first boot, the measured Clause-② line

wip(tests,docs): pin the new engine doubles to the engine contracts; the tenant-audit census counts the two new system writes

wip(tests): the seed-stamp fake declares only the verbs the loader calls; the pinned-double ledger records the auth-plugin update double

wip(tests): the pin's probe resolves the engine by its contract type; the seed-stamp double refuses a WHERE combinator

Merge remote-tracking branch 'origin/main' into claude/issue-15195-default-org-load-bearing

Merge remote-tracking branch 'origin/main' into claude/issue-15195-default-org-load-bearing

docs(audits): the tenant-audit census regenerated after the main merge, with the two system writes C1 adds (234 to 236)

wip(verify): bootStack boots the production single shape; orgContext keeps only the vacuity guard

wip(dogfood): re-pin the 24 fixtures that encoded an org-less single boot, each on its own cause

wip(changesets,dogfood): the verify changeset; the memory-driver consequence until C8; two harness comments corrected

Merge remote-tracking branch 'origin/main' into claude/issue-15195-default-org-load-bearing

test(verify): the default-boot case pins the owner bind — the admin owns the Default Organization

Merge remote-tracking branch 'origin/main' into claude/issue-15195-default-org-load-bearing

docs(audits): the tenant-audit census regenerated after the second main merge, with the two system writes C1 adds (234 to 236)

test(plugin-approvals,plugin-security): two engine rigs boot the production single shape — the Default Organization exists

test(service-automation): the SecurityPlugin flip rig holds the Default Organization, the member's own