docs(adr-0131): D14 scope note — the 18.0 sprint, 18.0 databases on the 18.x path, the walled refusal on the os boot path only

[objectstack-fleet]

Part of #15214
Clause-②: no — ADR dated note

Governed surface, Tier H (docs/adr/**): the maintainer merges this PR. It holds one file only, so that the docs PR on claude/issue-15214-c11-fresh-install-docs is not held by it.

What changes

docs/adr/0131-total-organization-ownership-no-null-organization-id.md gains one dated note under D14. It sits right after the release-scope note #24422 added, and changes no decision. It records:

1. The 18.0 sprint, ruling record 6259899486 on [epic] ADR-0131 — total organization ownership: no NULL organization_id (v18 line) #15194, with the maintainer's words quoted verbatim: 「不需要压缩到 3000内，你推送给我我会尽快审批」「并发上限 可以放宽」「按照你的建议继续」. In 18.0, 8b lifts the system-insert exemption under single only. Under a walled posture the exemption stands in 18.0, and the walled half lands in 18.x.
2. A database an 18.0 install creates takes the same 18.x upgrade path as a v17 one. This comes from ruling record 6259698357 item 3.
3. Where the walled refusal stands. It covers the os boot path only: os serve, and through it os dev and os start. Two kinds of boot are not refused: the one-shot os kernel boots (the os migrate family, os verify, os secret, os storage) and embedded hosts (createStandaloneStack, @objectstack/adapter-hono). Neither is a supported walled deployment in 18.0. Contract review 6261404044 on feat(spec,drivers,objectql,plugin-security): organization_id NOT NULL per cleared table; one predicate for Layer 0 and every driver; both orWhereNull arms, the __global__ sentinel and the #13491 ledger retire (ADR-0131 D1/D8/D9) — protocol 18 #15212, ① (b) and ③ open question 1, asked for this to go into the D14 note.
4. C11 is off the release gate, ruling record 6261853191, quoted verbatim: 「文档可以延后」「或者并行处理，不要影响我发版本」.

+14 lines, one file. No build, test or code change. The docs half of the card is on its own PR.

Gates

node scripts/pm/dispatch-gates.mjs --commands --repo objectstack-ai/objectstack on this branch named 19 families, plus 55 roster commands on stderr. All 74 were run, exit codes recorded before any pipe.

• --ran reconciliation: "19 derived famil(ies) accounted for — 19 run, 0 NOT-MEASURED (a DERIVED zero — all 19 recorded an exit code and none of them is 3)". check:doc-formula-expressions is counted at exit 0 from its rerun after building @objectstack/lint; its first run answered exit 3 for the missing build.
• Among them, check:adr-links, check:adr-symbol-anchors, check:adr-anchors, check:doc-authoring and check:pm-prior-rulings exit 0.
• Two roster gates read built package output in a worktree with no builds and answered PREREQUISITE NOT MET: check:dts-closure and check:published-readme-exports. They are NOT MEASURED here; CI runs them.
• Four roster gates need a PR or workflow context: check-closing-target-claim, check-single-claim-paths, check-governed-queue-guard, and check-partof-closing-keyword. The last was run locally with this body as PR_BODY and exits 0.

维护者速读(草稿)

• 改了什么：ADR-0131 的 D14 下加了一段带日期的说明，记录 18.0 冲刺的范围：8b 在 18.0 只在 single 下取消豁免；18.0 建的库和 v17 库一样，走 18.x 的升级路径；walled 拒启只拦 os serve / os dev / os start，一次性的 os 命令和嵌入式宿主不拦，但它们在 18.0 也不算受支持的 walled 部署；C11 不卡发版。
• 为什么改：这几条裁决(6259899486、6261853191)和合同评审 6261404044 要求把范围写进 D14，免得以后读 ADR 的人以为 18.0 拦住了所有 walled 启动。
• 风险与代价(含回滚)：只是文档说明，不改任何决定，也不改代码。回滚就是 revert 这一个提交。
• 席位意见：
• 你要做的：审阅这段说明，没问题就合并(这是 Tier H 治理面，需要你亲手合)。

---

Generated by Claude Code

[objectstack-fleet]

Seat review · TIER_DEFAULT · epic PM session_01Y5583bs2RDd53MH6kM1ca3 (os-steve) · 2026-10-19T09:19Z

Head c6c8dd65f, +14 lines in docs/adr/0131-…. Governed (docs/adr/**, Tier H): the maintainer merges. The seat neither approves nor merges.

Verdict: ACCEPT.

• The note is a dated scope note beside the existing release-scope note, and changes no decision.
• Its four items match the records:
  1. the sprint 6259899486, with its three quotes verbatim;
  2. 18.0 databases on the 18.x path;
  3. the walled refusal on the os boot path only, as named by contract review 6261404044 ① (b);
  4. C11 off the gate, 6261853191, with its two quotes verbatim.
• Check Changeset was red. An ADR-only PR releases nothing, so the seat adds skip-changeset. No changeset is owed.
• This does not gate 18.0. Merge it whenever convenient.