Repository navigation
docs(skills): the data skill's current_user table names a declared membership key - #25586
Merged
Merged
Conversation
…mbership key (#25234) Raises the security.md token ceiling 2543 -> 2563 per the maintainer ruling quoted in the ratchet row. Co-Authored-By: Claude <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01M4rJHRAZDFqLYQ9dHMH339
github-actions
Bot
added
size/s
documentation
os-zhuang
approved these changes
Oct 24, 2026
os-zhuang
marked this pull request as ready for review
October 24, 2026 01:57
os-zhuang
enabled auto-merge
October 24, 2026 01:57
… row (#25234) Co-Authored-By: Claude <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01M4rJHRAZDFqLYQ9dHMH339
This was referenced Oct 24, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Requested by Tesla · project thread
Part of #25234
The Tier H follow-up to ruling A on #25234 (landing plan 6370632236). It is governed (
skills/**), so a maintainer merges it. #25528 made a declared membership key (ObjectSchema.membershipKeys) live, and #25550 made its authoring refusals live. The data skill'scurrent_user.*placeholder table still listed only the kernel's keys, so an author reading the bundle alone had no way to learn that a declared key resolves.The change
skills/objectstack-data/rules/security.mdgains one row in the placeholder table:scripts/check-skills-token-ratchet.mjs: the file's ceiling goes from 2543 to 2563, with the ruling quoted in the row's comment.The maintainer ruling
Tesla, 2026-10-24T01:28:57Z, project decision list item 9, verbatim and untranslated (the same message also approved item 8, whose line is elided here):
Why the row is shorter than the one proposed with the ruling
The ruling was asked for a 20-token raise with the shorter row from report 6374979058, measured at 2563 against the file as it stood then. #25429 (0949fe5) then landed on this file and brought it to 2541, leaving 2 tokens of headroom. The proposed row now measures 2602, which is 39 over the ruled ceiling. So the row is trimmed to fit the ruled 2563 exactly, rather than asking for a second raise. The trimmed row drops the resolution detail (the roster's
valueFieldanduserField, the caller's organisation, and the 1,000-value bound that fails closed). That detail is inrls.zod.ts's "Where a membership key comes from" section, which the table's own Source line points to, and in themembershipKeysdescribe inobject.zod.ts.Checks
node scripts/check-skills-token-ratchet.mjs:security.mdis 2563 tokens, ceiling 2563, headroom 0, exit 0.--self-test: 79 cases pass.node scripts/pm/dispatch-gates.mjs --commands --repo objectstack-ai/objectstackderives 52 families on this head (11 changed lines). All 52 ran one at a time underos-verify-lock.sh, exit 0.🤖 Generated with Claude Code
https://claude.ai/code/session_01M4rJHRAZDFqLYQ9dHMH339