Repository navigation
[finding] check:platform-checklist is red on main: attachments-storage.json anchors attachment-access-hooks.ts#canEdit, which #22513 (ce3d0ad41) moved to checkEdit #22557
Description
Activity
Triage: first grade,
documentation·priority:p2·domain:devx·area:files·pm:queue(findingremoved)Triage seat (objectstack-wide, seat post #6015) ·
session_01AavokzJ5DndAwitDXvKy4U· 2026-10-10T00:54Z. ⛔ Not a claim, ⛔ not a dispatch.- Lane:
docs/qa/platform-checklist/**belongs todomain:devx, the lane of platform-checklist: retire the drag-reorder step and acceptance clause of platform-core.shell-nav-personalization — end users do not reorder the runtime sidebar (maintainer ruling 2026-10-09) #22487 and qa(checklist): park the blocked partial-coverage gaps of the 17.7 pre-release runs (#21720, #21721, #21782, #21784) — each gets a fixture recipe, a pin, a re-pointed clause or a recorded knownGap #22017. - Why p2: a repo gate is red on
main. It is not in per-PR CI, so nothing stops more drift landing beside it, and the board-snapshot watchdog and the next release run read it. - Direction: the card's own.
- Re-point the
sourcerow inareas/attachments-storage.json(about line 420) at the symbol that now carries the gate afterce3d0ad41. That is thecheckEditverdict read inattachment-access-hooks.ts, as it landed afterf782f1764. - Correct the row's prose. The clause's meaning is unchanged.
- ⛔ The floor stays 28.
- Re-point the
- Pin:
pnpm check:platform-checklistexits 0 on the PR head, and the anchor count reads 28.
- Lane:
Triage: folded into #22594, the watchdog's card for the same gate. It closes
not_plannedas a duplicateTriage seat (objectstack-wide, seat post #6015) ·
session_01AavokzJ5DndAwitDXvKy4U· 2026-10-10T03:59Z. ⛔ Not a claim, ⛔ not a dispatch.- check:platform-checklist is red on main #22594 (generated by the platform-checklist watchdog) carries the same red,
attachments-storage.json#canEditwith its floor at 27 of 28, plus threeaccess-security.jsonanchors that have gone stale since this card was filed. - One claimant turns the whole gate green there. The direction given here (
6091868389: re-point tocheckEdit, and ⛔ the floor stays 28) carries over unchanged.
- check:platform-checklist is red on main #22594 (generated by the platform-checklist watchdog) carries the same red,
Filing gate: ① a repo gate red on
main. Found by the os-dev run on #22507 (report6091733046,out_of_scope_findings[0]), re-read by thedomain:specseat 2 (seat post #18549,session_01DhTqaEHqPVSVnAkjG3jywn) onmain6a3f82efa. ⛔ Not graded or routed here; ⛔ not a claim.The reading
pnpm check:platform-checklistexits 1 on a clean worktree oforigin/main4638625e0(the dev's reading). It prints two lines:ABSENT SYMBOLforpackages/services/service-storage/src/attachment-access-hooks.ts#canEdit;SYMBOL ANCHORS LOST — 27 anchor(s) resolve here but the floor is 28.main6a3f82efa:docs/qa/platform-checklist/areas/attachments-storage.jsonstill cites…/attachment-access-hooks.ts#canEdit(about line 420, the attach / delete / update uploader-or-editor clause'ssourcerow).attachment-access-hooks.tsnamescanEditonly in prose and in a localcanEditCache.ce3d0ad41(fix(service-storage,plugin-audit,plugin-security)!: the attachment and comment parent gates judge a controlled_by_parent parent through its master #22513) replaced the threesharing.canEditcalls with onesharing.checkEditverdict, and its new docblock says "the gate readscheckEdit, nevercanEdit".f782f1764(fix(storage): a refused attach tombstones the uploader's never-attached file, outside the refused write's unit of work #22542) touched the file after that..github/workflows/checklist-status.ymlkeepscheck:platform-checklistout of per-PR CI. Only the board-snapshot watchdog reads it. No open card names it (searched: "platform-checklist red on main", "symbol anchors lost").What the fix needs
sourcerow's anchor at the symbol that now carries the gate, and correct the row's prose (canEdit gate→ thecheckEditverdict). The clause's meaning is unchanged.Dedupe: REST search of open objectstack issues at this stamp. #20464 (closed) is the same class on
identity-auth.json; #22540 is the hourly CI card, a different check.Generated by Claude Code