docs(spec): drop the internal issue id from the four epoch-instant tombstone prescriptions (#15676)

`check:doc-authoring` rule 3 forbids an internal issue id in customer-facing
spec text (maintainer ruling 2026-08-12). The four `retiredKey()` prescriptions
this stack card added each opened with a `(#14478 ruling B)` parenthetical — a
citation-shaped token that resolves to nothing for the author who meets it the
moment their key is refused, and which the generated reference pages publish
verbatim.

The parenthetical goes; the sentence keeps everything actionable it carried —
the FROM to TO rename, that the value is unchanged, and the
`SimplePresenceState.lastSeen` neighbour caveat — matching the shape the
campaign's already-compliant tombstones use (`hook.timeout`, `job.timeout`,
`DriverOptions.timeout`). The internal anchor is untouched in the adjacent `//`
and `/** */` comments, which are not customer-facing and were never findings.

`content/docs/references/**` regenerated with `pnpm --filter @objectstack/spec
gen:docs` — no generated artifact was hand-edited.

check:doc-authoring: 4 findings before, exit 0 after.
check:duration-unit-keys: unmoved — 48 offender(s) among 215 duration-shaped
numeric key(s), (6 declared `EpochMs` instant(s), 11 declared
`externalVocabulary` mirror(s)).

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01G4138K1EG7kQ81FNba5Kp4

Author: claude

content/docs/references/api/websocket.mdx

@@ -363,7 +363,7 @@ Event pattern (supports wildcards like "record.*" or "*.created")
 | **userName** | `string` | ✅ | User display name |
 | **status** | `Enum<'online' \| 'away' \| 'offline'>` | ✅ | User presence status |
 | **lastSeenAt** | `integer` | ✅ | Unix timestamp of last activity in milliseconds |
-| **lastSeen** | `never` | optional | [REMOVED] `SimplePresenceState.lastSeen` was renamed to `lastSeenAt` in @objectstack/spec 17 (#14478 ruling B) — the last-activity INSTANT now carries the shared `EpochMs` schema, which declares the epoch-millisecond unit. Rename the key to `lastSeenAt`; the value is unchanged (`Date.now()`). Note the neighbouring `PresenceState.lastSeen` (api/realtime-shared.zod.ts) is a different key with a different type — an ISO-8601 datetime STRING — and is untouched. |
+| **lastSeen** | `never` | optional | [REMOVED] `SimplePresenceState.lastSeen` was renamed to `lastSeenAt` in @objectstack/spec 17 — the last-activity INSTANT now carries the shared `EpochMs` schema, which declares the epoch-millisecond unit. Rename the key to `lastSeenAt`; the value is unchanged (`Date.now()`). Note the neighbouring `PresenceState.lastSeen` (api/realtime-shared.zod.ts) is a different key with a different type — an ISO-8601 datetime STRING — and is untouched. |
 | **metadata** | `Record<string, any>` | optional | Additional presence metadata (e.g., current page, custom status) |
 
 
@@ -452,7 +452,7 @@ Event pattern (supports wildcards like "record.*" or "*.created")
 | **channel** | `string` | ✅ | Channel identifier (e.g., "record.account.123", "user.456") |
 | **payload** | `any` | ✅ | Event payload data |
 | **occurredAt** | `integer` | ✅ | Unix timestamp in milliseconds when the event occurred |
-| **timestamp** | `never` | optional | [REMOVED] `WebSocketEvent.timestamp` was renamed to `occurredAt` in @objectstack/spec 17 (#14478 ruling B) — the event INSTANT now carries the shared `EpochMs` schema, which declares the epoch-millisecond unit the bare key name left to the describe prose. Rename the key to `occurredAt`; the value is unchanged (`Date.now()`). |
+| **timestamp** | `never` | optional | [REMOVED] `WebSocketEvent.timestamp` was renamed to `occurredAt` in @objectstack/spec 17 — the event INSTANT now carries the shared `EpochMs` schema, which declares the epoch-millisecond unit the bare key name left to the describe prose. Rename the key to `occurredAt`; the value is unchanged (`Date.now()`). |
 
 
 ---

content/docs/references/kernel/context.mdx

@@ -36,7 +36,7 @@ const result = KernelContextSchema.parse(data);
 | **startedAt** | `integer` | ✅ | Boot timestamp — Unix milliseconds |
 | **features** | `Record<string, boolean>` | optional (default: `{}`) | Global feature toggles |
 | **previewMode** | `never` | optional | [REMOVED] `context.previewMode` was removed in @objectstack/spec 17 (ADR-0049 enforce-or-remove) — nothing ever read the block: none of its six keys (`autoLogin`, `simulatedRole`, `simulatedUserName`, `readOnly`, `expiresInSeconds`, `bannerMessage`) had a consumer in any repo, so an authored block parsed cleanly and configured NOTHING, while its own docstring promised an auth bypass ("skips authentication screens", "simulates an admin identity") and named a production guard no runtime ever received. Delete the key. Preview/demo deployments belong to the deployment layer, which owns auth per-project (`ArtifactKernelFactory` in the cloud distribution); `OS_PREVIEW_MODE` stays there as a routing-only switch. If a preview experience becomes a product capability it re-declares fresh, with the production-posture hard-refusal as the first-landed half (ruling record). |
-| **startTime** | `never` | optional | [REMOVED] `context.startTime` was renamed to `context.startedAt` in @objectstack/spec 17 (#14478 ruling B) — the boot INSTANT now carries the shared `EpochMs` schema, which declares the epoch-millisecond unit the key name used to leave to the describe prose. Rename the key to `startedAt`; the value is unchanged (`Date.now()`). `*At` rather than `startTimeMs` deliberately: every `*Ms` key in this package is a DURATION, so spelling an instant that way would move it into the family the rule exists to separate it from. |
+| **startTime** | `never` | optional | [REMOVED] `context.startTime` was renamed to `context.startedAt` in @objectstack/spec 17 — the boot INSTANT now carries the shared `EpochMs` schema, which declares the epoch-millisecond unit the key name used to leave to the describe prose. Rename the key to `startedAt`; the value is unchanged (`Date.now()`). `*At` rather than `startTimeMs` deliberately: every `*Ms` key in this package is a DURATION, so spelling an instant that way would move it into the family the rule exists to separate it from. |
 
 
 ---
@@ -72,7 +72,7 @@ Tenant-aware kernel runtime context
 | **startedAt** | `integer` | ✅ | Boot timestamp — Unix milliseconds |
 | **features** | `Record<string, boolean>` | optional (default: `{}`) | Global feature toggles |
 | **previewMode** | `never` | optional | [REMOVED] `context.previewMode` was removed in @objectstack/spec 17 (ADR-0049 enforce-or-remove) — nothing ever read the block: none of its six keys (`autoLogin`, `simulatedRole`, `simulatedUserName`, `readOnly`, `expiresInSeconds`, `bannerMessage`) had a consumer in any repo, so an authored block parsed cleanly and configured NOTHING, while its own docstring promised an auth bypass ("skips authentication screens", "simulates an admin identity") and named a production guard no runtime ever received. Delete the key. Preview/demo deployments belong to the deployment layer, which owns auth per-project (`ArtifactKernelFactory` in the cloud distribution); `OS_PREVIEW_MODE` stays there as a routing-only switch. If a preview experience becomes a product capability it re-declares fresh, with the production-posture hard-refusal as the first-landed half (ruling record). |
-| **startTime** | `never` | optional | [REMOVED] `context.startTime` was renamed to `context.startedAt` in @objectstack/spec 17 (#14478 ruling B) — the boot INSTANT now carries the shared `EpochMs` schema, which declares the epoch-millisecond unit the key name used to leave to the describe prose. Rename the key to `startedAt`; the value is unchanged (`Date.now()`). `*At` rather than `startTimeMs` deliberately: every `*Ms` key in this package is a DURATION, so spelling an instant that way would move it into the family the rule exists to separate it from. |
+| **startTime** | `never` | optional | [REMOVED] `context.startTime` was renamed to `context.startedAt` in @objectstack/spec 17 — the boot INSTANT now carries the shared `EpochMs` schema, which declares the epoch-millisecond unit the key name used to leave to the describe prose. Rename the key to `startedAt`; the value is unchanged (`Date.now()`). `*At` rather than `startTimeMs` deliberately: every `*Ms` key in this package is a DURATION, so spelling an instant that way would move it into the family the rule exists to separate it from. |
 | **tenantId** | `string` | ✅ | Resolved tenant identifier |
 | **tenantPlan** | `Enum<'free' \| 'pro' \| 'enterprise'>` | ✅ | Tenant subscription plan |
 | **tenantRegion** | `string` | optional | Tenant deployment region |

content/docs/references/kernel/startup-orchestrator.mdx

@@ -37,7 +37,7 @@ const result = HealthStatusSchema.parse(data);
 | :--- | :--- | :--- | :--- |
 | **healthy** | `boolean` | ✅ | Whether the plugin is healthy |
 | **checkedAt** | `integer` | ✅ | Unix timestamp in milliseconds when health check was performed |
-| **timestamp** | `never` | optional | [REMOVED] `HealthStatus.timestamp` was renamed to `checkedAt` in @objectstack/spec 17 (#14478 ruling B) — the instant the check RAN now carries the shared `EpochMs` schema, which declares the epoch-millisecond unit the bare key name left to the describe prose. Rename the key to `checkedAt`; the value is unchanged (`Date.now()`). |
+| **timestamp** | `never` | optional | [REMOVED] `HealthStatus.timestamp` was renamed to `checkedAt` in @objectstack/spec 17 — the instant the check RAN now carries the shared `EpochMs` schema, which declares the epoch-millisecond unit the bare key name left to the describe prose. Rename the key to `checkedAt`; the value is unchanged (`Date.now()`). |
 | **details** | `Record<string, any>` | optional | Optional plugin-specific health details |
 | **message** | `string` | optional | Error message if plugin is unhealthy |
 
@@ -71,7 +71,7 @@ const result = HealthStatusSchema.parse(data);
 | :--- | :--- | :--- | :--- |
 | **healthy** | `boolean` | ✅ | Whether the plugin is healthy |
 | **checkedAt** | `integer` | ✅ | Unix timestamp in milliseconds when health check was performed |
-| **timestamp** | `never` | optional | [REMOVED] `HealthStatus.timestamp` was renamed to `checkedAt` in @objectstack/spec 17 (#14478 ruling B) — the instant the check RAN now carries the shared `EpochMs` schema, which declares the epoch-millisecond unit the bare key name left to the describe prose. Rename the key to `checkedAt`; the value is unchanged (`Date.now()`). |
+| **timestamp** | `never` | optional | [REMOVED] `HealthStatus.timestamp` was renamed to `checkedAt` in @objectstack/spec 17 — the instant the check RAN now carries the shared `EpochMs` schema, which declares the epoch-millisecond unit the bare key name left to the describe prose. Rename the key to `checkedAt`; the value is unchanged (`Date.now()`). |
 | **details** | `Record<string, any>` | optional | Optional plugin-specific health details |
 | **message** | `string` | optional | Error message if plugin is unhealthy |
 

packages/spec/src/api/websocket.zod.ts

@@ -480,10 +480,10 @@ export const WebSocketEventSchema = lazySchema(() => z.object({
 
   /** Tombstone for the rename above (#15676, ruling B on #14478). */
   timestamp: retiredKey(
-    '`WebSocketEvent.timestamp` was renamed to `occurredAt` in @objectstack/spec 17 '
-    + '(#14478 ruling B) — the event INSTANT now carries the shared `EpochMs` schema, '
-    + 'which declares the epoch-millisecond unit the bare key name left to the describe '
-    + 'prose. Rename the key to `occurredAt`; the value is unchanged (`Date.now()`).',
+    '`WebSocketEvent.timestamp` was renamed to `occurredAt` in @objectstack/spec 17 — the '
+    + 'event INSTANT now carries the shared `EpochMs` schema, which declares the '
+    + 'epoch-millisecond unit the bare key name left to the describe prose. Rename the key '
+    + 'to `occurredAt`; the value is unchanged (`Date.now()`).',
   ),
 }));
 
@@ -519,12 +519,12 @@ export const SimplePresenceStateSchema = lazySchema(() => z.object({
 
   /** Tombstone for the rename above (#15676, ruling B on #14478). */
   lastSeen: retiredKey(
-    '`SimplePresenceState.lastSeen` was renamed to `lastSeenAt` in @objectstack/spec 17 '
-    + '(#14478 ruling B) — the last-activity INSTANT now carries the shared `EpochMs` '
-    + 'schema, which declares the epoch-millisecond unit. Rename the key to `lastSeenAt`; '
-    + 'the value is unchanged (`Date.now()`). Note the neighbouring '
-    + '`PresenceState.lastSeen` (api/realtime-shared.zod.ts) is a different key with a '
-    + 'different type — an ISO-8601 datetime STRING — and is untouched.',
+    '`SimplePresenceState.lastSeen` was renamed to `lastSeenAt` in @objectstack/spec 17 — '
+    + 'the last-activity INSTANT now carries the shared `EpochMs` schema, which declares '
+    + 'the epoch-millisecond unit. Rename the key to `lastSeenAt`; the value is unchanged '
+    + '(`Date.now()`). Note the neighbouring `PresenceState.lastSeen` '
+    + '(api/realtime-shared.zod.ts) is a different key with a different type — an '
+    + 'ISO-8601 datetime STRING — and is untouched.',
   ),
   metadata: z.record(z.string(), z.unknown()).optional().describe('Additional presence metadata (e.g., current page, custom status)'),
 }));

packages/spec/src/kernel/context.zod.ts

@@ -29,10 +29,10 @@ const RUNTIME_MODE_PREVIEW_RETIRED =
   + 'experience becomes a product capability it re-declares fresh, with the '
   + 'production-posture hard-refusal as the first-landed half.';
 const START_TIME_RENAMED =
-  '`context.startTime` was renamed to `context.startedAt` in @objectstack/spec 17 '
-  + '(#14478 ruling B) — the boot INSTANT now carries the shared `EpochMs` schema, which '
-  + 'declares the epoch-millisecond unit the key name used to leave to the describe prose. '
-  + 'Rename the key to `startedAt`; the value is unchanged (`Date.now()`). `*At` rather '
+  '`context.startTime` was renamed to `context.startedAt` in @objectstack/spec 17 — the '
+  + 'boot INSTANT now carries the shared `EpochMs` schema, which declares the '
+  + 'epoch-millisecond unit the key name used to leave to the describe prose. Rename the '
+  + 'key to `startedAt`; the value is unchanged (`Date.now()`). `*At` rather '
   + 'than `startTimeMs` deliberately: every `*Ms` key in this package is a DURATION, so '
   + 'spelling an instant that way would move it into the family the rule exists to '
   + 'separate it from.';

packages/spec/src/kernel/startup-orchestrator.zod.ts

@@ -103,11 +103,10 @@ export const HealthStatusSchema = lazySchema(() => z.object({
 
   /** Tombstone for the rename above (#15676, ruling B on #14478). */
   timestamp: retiredKey(
-    '`HealthStatus.timestamp` was renamed to `checkedAt` in @objectstack/spec 17 '
-    + '(#14478 ruling B) — the instant the check RAN now carries the shared `EpochMs` '
-    + 'schema, which declares the epoch-millisecond unit the bare key name left to the '
-    + 'describe prose. Rename the key to `checkedAt`; the value is unchanged '
-    + '(`Date.now()`).',
+    '`HealthStatus.timestamp` was renamed to `checkedAt` in @objectstack/spec 17 — the '
+    + 'instant the check RAN now carries the shared `EpochMs` schema, which declares the '
+    + 'epoch-millisecond unit the bare key name left to the describe prose. Rename the key '
+    + 'to `checkedAt`; the value is unchanged (`Date.now()`).',
   ),
 
   /**