feat(metadata-protocol)!: managed content is sealed — OS_METADATA_WRITABLE no longer opens an item a managed package ships (ADR-0131 D6, #15206 S2) by objectstack-fleet[bot] · Pull Request #22401 · objectstack-ai/objectstack

feat(metadata-protocol)!: managed content is sealed — OS_METADATA_WRITABLE no longer opens an item a managed package ships (ADR-0131 D6)

claude

committed

42c270c

test(metadata-protocol,rest,runtime,objectql,dogfood): pin the managed-content seal; re-premise the cases the hatch used to carry

claude

committed

73dff5b

chore(metadata-protocol): changeset for the managed-content seal; measured sentence lengths

claude

committed

4ec2d42

Merge remote-tracking branch 'origin/main' into claude/issue-15206-s2-managed-seal

claude

committed

3c4873c

test(runtime): the dispatcher seal pin's find double honours the caller's bound; its engine double joins the pinned ledger

claude

committed

c2d18e5

Merge remote-tracking branch 'origin/main' into claude/issue-15206-s2-managed-seal

claude

committed

d68163d

test(plugin-security): the lock gate's two hatch-OPEN cases read the protocol package door, which now seals a managed item with the hatch open (ADR-0131 D6)

claude

committed

63ea4b2

test(dogfood): the cold-boot catalog control writes its built-in position rows the way an older release left them; the hatch no longer opens that save (ADR-0131 D6)

claude

committed

49f00d1

docs(permissions): an environment overlay of a packaged object is refused in both directions, hatch set or not (ADR-0131 D6)

claude

committed

09eff73

Navigation Menu

Repository navigation

feat(metadata-protocol)!: managed content is sealed — OS_METADATA_WRITABLE no longer opens an item a managed package ships (ADR-0131 D6, #15206 S2) - #22401

feat(metadata-protocol)!: managed content is sealed — OS_METADATA_WRITABLE no longer opens an item a managed package ships (ADR-0131 D6, #15206 S2)#22401
objectstack-fleet[bot] merged 9 commits into
mainfrom
claude/issue-15206-s2-managed-seal

Commits on Oct 9, 2026

feat(metadata-protocol)!: managed content is sealed — OS_METADATA_WRITABLE no longer opens an item a managed package ships (ADR-0131 D6)

test(metadata-protocol,rest,runtime,objectql,dogfood): pin the managed-content seal; re-premise the cases the hatch used to carry

chore(metadata-protocol): changeset for the managed-content seal; measured sentence lengths

Merge remote-tracking branch 'origin/main' into claude/issue-15206-s2-managed-seal

test(runtime): the dispatcher seal pin's find double honours the caller's bound; its engine double joins the pinned ledger

Merge remote-tracking branch 'origin/main' into claude/issue-15206-s2-managed-seal

test(plugin-security): the lock gate's two hatch-OPEN cases read the protocol package door, which now seals a managed item with the hatch open (ADR-0131 D6)

test(dogfood): the cold-boot catalog control writes its built-in position rows the way an older release left them; the hatch no longer opens that save (ADR-0131 D6)

docs(permissions): an environment overlay of a packaged object is refused in both directions, hatch set or not (ADR-0131 D6)