feat(security)!: ADR-0090 P1 breaking wave — position rename, profile removal, secure OWD default, principal/external spec shapes#2697

Merged

os-zhuang merged 9 commits into

mainfrom

claude/adr-0090-p1-breaking-wave

Jul 9, 2026

Commits on Jul 9, 2026

feat(security)!: ADR-0090 P1 breaking wave — position rename, profile removal, secure OWD default, principal/external spec shapes
claude
committed
fix(liveness,contract): position ledger rename + externalSharingModel classification + downstream fixture
claude
committed
fix(examples): showcase stack positions property, coverage kind, position identifiers
claude
committed
fix(runtime,sharing,examples): app-plugin position sections, runtime recipient enum, D1 grandfather stamps — dogfood 39/39 green
claude
committed
fix(spec,automation,core): regenerate API-surface snapshot for the position rename; runas/authz test fixtures to v2 field names
claude
committed
chore(changeset): P1 breaking wave is a MAJOR bump per the API-surface gate
claude
committed
test(plugin-security): RLSCompiler fixtures to current_user.positions (v2 vocabulary)
claude
committed
docs(adr,design): ADR-0090 addendum — assignment-level BU anchor semantics, multi-org benchmark recalibration
claude
committed
test(objectql,runtime,auth): remaining v2-vocabulary fixture updates — overlay whitelist guards, option-visibility positions, standalone surface
claude
committed