Skip to content

docs(devx): re-point authorization.mdx ADR cite to ADR-0066 D1 - #8437

Merged
qq9340100 merged 1 commit into
mainfrom
claude/issue-8386-authz-docs-d5-cite
Aug 13, 2026
Merged

docs(devx): re-point authorization.mdx ADR cite to ADR-0066 D1#8437
qq9340100 merged 1 commit into
mainfrom
claude/issue-8386-authz-docs-d5-cite

Conversation

@qq9340100

Copy link
Copy Markdown
Collaborator

Part of #8386

content/docs/permissions/authorization.mdx:190 cited "ADR-0094 D5" for the
"retire the implicit managed_by-guessing back-doors in favour of explicit,
attributable declarations" direction. ADR-0094 D5 ("Env-scope overlays of
package-owned sets are FIRST-CLASS customizations") never discusses
capabilities, placeholder derivation, or back-doors at all — a grep -ni "capabilit\|guess\|back-door" over its body (lines 197-236) returns no hits —
and it is now RETIRED (#6858 / PR #6962), so the cite sent readers to a
section headed RETIRED 2026-08-09.

The claim is real and correct — it is ADR-0066 D1's own direction (the
capability registry decision: "This retires the implicit back-door where a
capability existed only as an untitled placeholder derived from a permission
set's systemPermissions[] … DEFINE/GRANT/REQUIRE stay decoupled"). This PR
re-points the citation to ADR-0066 D1. One sentence changed, no other prose
touched.

#8386 is not addressed here for its ADR half — docs/adr/0066-*.md:45
carries the same wrong cite and lands separately as an ADR-class,
maintainer-merged draft PR (two-PR split per the #8290/#8291 /
#8384/#8385 precedent).

Tests

Local gates (scoped, per repo convention — CI runs the full farm):

  • pnpm check:docs-audit-scope — pass
  • pnpm check:quick-reference-counts — pass
  • pnpm check:role-word — pass
  • pnpm --filter @objectstack/lint run check:doc-formula-expressions — pass (built packages/spec + packages/formula first)
  • pnpm check:nul-bytes — pass
  • node scripts/pm/dispatch-gates.mjs content/docs/permissions/authorization.mdx — re-derived; surfaces exactly the four families above, no addition

Generated by Claude Code


Generated by Claude Code

ADR-0094 D5 is RETIRED and never discussed capability declaration or
managed_by-guessing back-doors in the first place; the claim being made
("retire the implicit managed_by-guessing back-doors in favour of
explicit, attributable declarations") is ADR-0066 D1's own direction.

Part of #8386

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Jqe56GnYFddggeAyfkZFVz
@vercel

vercel Bot commented Aug 13, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated (UTC)
objectstack Ignored Ignored Aug 13, 2026 1:09pm

Request Review

@qq9340100 qq9340100 added the skip-changeset PR has no user-facing published change; bypasses the changeset gate label Aug 13, 2026 — with Claude
@github-actions github-actions Bot added size/xs documentation Improvements or additions to documentation labels Aug 13, 2026
@qq9340100
qq9340100 marked this pull request as ready for review August 13, 2026 13:28
@qq9340100
qq9340100 added this pull request to the merge queue Aug 13, 2026
Merged via the queue into main with commit 10e0d99 Aug 13, 2026
25 checks passed
@qq9340100
qq9340100 deleted the claude/issue-8386-authz-docs-d5-cite branch August 13, 2026 13:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation size/xs skip-changeset PR has no user-facing published change; bypasses the changeset gate

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants