Leg L3 of the accepted #11663 platform-admin re-anchor design. Provenance: design document = #11663 comment 5394453215 (§6 row L3, migration steps 4–5); maintainer acceptance = #11663 comment 5404675670 (2026-08-25, verbatim 「接受你的建议，继续」). Filed by PM session session_01KWRU3s15AJz7PGW7a7wdCh.
Blocked-by: #11970
Surface: packages/plugins/plugin-auth.
Content:
Discipline: needs:contract-review at review (authorization-adjacent guard semantics).
Acceptance criterion: walled bootstrap end-to-end per the design §2 flow passes on a walled rig; single posture behaviour unchanged (Choice 4A); every deleted or added guard refusal is enumerated in the PR body with its re-pricing rationale.
Leg L3 of the accepted #11663 platform-admin re-anchor design. Provenance: design document = #11663 comment 5394453215 (§6 row L3, migration steps 4–5); maintainer acceptance = #11663 comment 5404675670 (2026-08-25, verbatim 「接受你的建议，继续」). Filed by PM session
session_01KWRU3s15AJz7PGW7a7wdCh.Blocked-by: #11970
Surface:
packages/plugins/plugin-auth.Content:
ensure-default-organizationre-pointed + its trigger moved (design H4 — it is a fourth id-shaped read of a different kind, population not predicate, so [finding] Three spellings of the ADR-0068 platform-admin read now live in plugin-auth, and one of them skips the system read context #10348-C as specified does not absorb it; verify whether [finding] Three spellings of the ADR-0068 platform-admin read now live in plugin-auth, and one of them skips the system read context #10348's landing already covered it before re-doing).last-admin-guardre-pricing is its own reviewed step (migration step 5): with no runtime write able to empty the platform-admin population, several refusals become obsolete and several become newly necessary. ⛔ Do not delete refusals as a side effect of the re-pointing commit — separate, reviewed change.Discipline:
needs:contract-reviewat review (authorization-adjacent guard semantics).Acceptance criterion: walled bootstrap end-to-end per the design §2 flow passes on a walled rig;
singleposture behaviour unchanged (Choice 4A); every deleted or added guard refusal is enumerated in the PR body with its re-pricing rationale.