fix(plugin-audit): a read of the compliance ledger returns only the rows about records the caller can read (#21175) by objectstack-fleet[bot] · Pull Request #21194 · objectstack-ai/objectstack

fix(plugin-audit): a ledger read returns only the rows about records the caller can read

claude

committed

c6610c6

test(plugin-audit): pin the ledger redaction of rows no non-system door serves on its own function

claude

committed

770197c

test(dogfood): pin the ledger's parent-record read gate on the public data doors

claude

committed

a8bb6fa

docs(permissions,changeset): census the ledger read gate's system-context early return

claude

committed

06d48bd

Merge remote-tracking branch 'origin/main' into claude/issue-21175-ledger-parent-read-gate

claude

committed

b0b2f98

Merge remote-tracking branch 'origin/main' into claude/issue-21175-ledger-parent-read-gate

claude

committed

77d3cc0

chore(changeset,plugin-audit): state the ledger read gate as the narrowing it is, and its mount order

claude

committed

56b90ee

docs(permissions): a record-view row is served outside system context only to a caller who can read its record

claude

committed

b415f4d

test(dogfood): the admin-ledger decision pin's readers can open the subject user, as the ledger's parent-record gate requires

claude

committed

d376985

Navigation Menu

Repository navigation

fix(plugin-audit): a read of the compliance ledger returns only the rows about records the caller can read (#21175) - #21194

fix(plugin-audit): a read of the compliance ledger returns only the rows about records the caller can read (#21175)#21194
objectstack-fleet[bot] merged 9 commits into
mainfrom
claude/issue-21175-ledger-parent-read-gate

Commits on Oct 1, 2026

fix(plugin-audit): a ledger read returns only the rows about records the caller can read

test(plugin-audit): pin the ledger redaction of rows no non-system door serves on its own function

test(dogfood): pin the ledger's parent-record read gate on the public data doors

docs(permissions,changeset): census the ledger read gate's system-context early return

Merge remote-tracking branch 'origin/main' into claude/issue-21175-ledger-parent-read-gate

Merge remote-tracking branch 'origin/main' into claude/issue-21175-ledger-parent-read-gate

chore(changeset,plugin-audit): state the ledger read gate as the narrowing it is, and its mount order

docs(permissions): a record-view row is served outside system context only to a caller who can read its record

test(dogfood): the admin-ledger decision pin's readers can open the subject user, as the ledger's parent-record gate requires