L3: runtime consult at the execute() seam + trigger unbind + retire the #10243 flowEnabled map (ADR-0126 §7.2)

[os-support-ai]

Part of #12150 (Epic: ADR-0126 implementation, v17 line — 17.x minor, maintainer-ruled).
Blocked-by: #12155
Dispatch: coordinated under the #12150 program — ⛔ not from the general queue; the program dispatches on unlock (maintainer anti-preemption instruction, 2026-08-25, PM session session_01KWRU3s15AJz7PGW7a7wdCh). Contract: ADR-0126 §7.2 (merged 28b47a93).

Deliverable

The automation engine consumes the ledger:

• execute()-seam refusal beside the existing FLOW_DISABLED guard (Design: post-install customization of packaged flows — clone-to-customize + org-level takeover (supersedes the org-tunable-parameters framing) #11665 §2.3 — the one seam every entry path crosses), reusing the FLOW_DISABLED code — ⛔ no new ADR-0112 ledger entry; the distinction rides the message.
• Install-level row also unbinds the trigger, preserving today's documented toggleFlow semantics. (Pre-charted future per-org rows cannot unbind — entry-time refusal only; not built in this line.)
• Retire the Decide whether POST /api/v1/automation/:name/toggle belongs in the manage_metadata write set — it mutates flow enablement with no authoring capability #10243 process-local flowEnabled map — the durable ledger row replaces it as the sanctioned off-switch; remove the mechanism, don't shade it.
• Clause-② note: refusal behavior on the execute contract — carry the contract-review declaration on the PR.

Acceptance

• Disabled packaged flow refuses at execute() on every entry path (record-change, schedule, time-relative, api, subflow) with the FLOW_DISABLED code and a message that distinguishes ledger-disable.
• Install-level disable unbinds the trigger; re-enable rebinds.
• flowEnabled map gone; the Decide whether POST /api/v1/automation/:name/toggle belongs in the manage_metadata write set — it mutates flow enablement with no authoring capability #10243 leak shape (tenant flipping env-wide, in-process) is no longer reachable.

Refs: ADR-0126 §7.2 · #10243 · #11665 §2.3/§6.3 · ADR-0112

[os-support-ai]

Claim: maintainer direct-dispatch (#12150 program; standing autonomy ruling 「继续自主完成所有开发」). Unblocked — L1 merged as 428f9b24.
Session: session_01KWRU3s15AJz7PGW7a7wdCh
Branch: claude/issue-12157-flow-disable — joint with L2 #12157, one PR closing both cards (see the claim on #12157 for the recorded rationale: shared toggleFlow/flowEnabled seam; a split ships a broken intermediate).
Session/model/Clause-②/serial constraints: identical to the #12157 claim.

---

Generated by Claude Code