fix(security): make a refused RBAC catalog write boot-visible instead of a silent seed of zero by os-litant · Pull Request #12967 · objectstack-ai/objectstack

fix(security): surface refused RBAC catalog writes instead of reporting a seed of zero

claude

committed

9a12f1f

test(security): pin the refused-catalog-write warning (loud, aggregated, classified)

claude

committed

ff7e829

chore(security): changeset for the refused-catalog-write repair

claude

committed

3a65c1a

Merge remote-tracking branch 'origin/main' into claude/issue-12923-rbac-seeder-silent-unique-violation

claude

committed

40e8deb

test(security): conform the seed-refusal double to the engine/where/limit contracts

claude

committed

d745e36

fix(security): split the refused-catalog-write level — error for unique violations, warn for the rest

claude

committed

eddfb23

fix(security): make SeedLogger.warn non-optional so the durability fallback is guaranteed by the type

claude

committed

c9bfc54

test(security): pin SeedLogger's guaranteed warn channel at the type level

claude

committed

b4ca453

test(security): pin SeedLogger's guaranteed warn channel as a runtime AST assertion

claude

committed

bbb160f

Navigation Menu

Repository navigation

fix(security): make a refused RBAC catalog write boot-visible instead of a silent seed of zero - #12967

fix(security): make a refused RBAC catalog write boot-visible instead of a silent seed of zero#12967
os-litant merged 10 commits into
mainfrom
claude/issue-12923-rbac-seeder-silent-unique-violation

Commits on Aug 28, 2026

fix(security): surface refused RBAC catalog writes instead of reporting a seed of zero

test(security): pin the refused-catalog-write warning (loud, aggregated, classified)

chore(security): changeset for the refused-catalog-write repair

Merge remote-tracking branch 'origin/main' into claude/issue-12923-rbac-seeder-silent-unique-violation

test(security): conform the seed-refusal double to the engine/where/limit contracts

fix(security): split the refused-catalog-write level — error for unique violations, warn for the rest

fix(security): make SeedLogger.warn non-optional so the durability fallback is guaranteed by the type

test(security): pin SeedLogger's guaranteed warn channel at the type level

test(security): pin SeedLogger's guaranteed warn channel as a runtime AST assertion

Commits on Aug 29, 2026

Merge remote-tracking branch 'origin/main' into claude/issue-12923-rbac-seeder-silent-unique-violation