diff --git a/.changeset/adr-0057-erp-authz.md b/.changeset/adr-0057-erp-authz.md
index c31847699f..c060e297f3 100644
--- a/.changeset/adr-0057-erp-authz.md
+++ b/.changeset/adr-0057-erp-authz.md
@@ -1,16 +1,25 @@
 ---
+"@objectstack/platform-objects": major
+"@objectstack/plugin-sharing": major
 "@objectstack/spec": minor
 "@objectstack/plugin-security": minor
-"@objectstack/plugin-sharing": minor
 "@objectstack/runtime": minor
-"@objectstack/platform-objects": minor
 "@objectstack/objectql": minor
 "@objectstack/plugin-approvals": patch
 ---
 
+**BREAKING:** the system object `sys_department` is renamed to `sys_business_unit`
+— object + member table (`sys_department_member` → `sys_business_unit_member`),
+fields, and i18n — with **no compatibility alias**. Any deployment holding
+`sys_department` rows, or metadata that references the object by name (lookups,
+list views, queries, sharing/approval scopes), must migrate to `sys_business_unit`.
+A renamed shipped system object is a breaking change to the platform's public
+data surface, so this lands as a **major**. Verified per ADR-0059's pre-publish
+hotcrm gate: no published downstream consumer references the old name.
+
 ADR-0057 — ERP authorization core. Adds permission-grant access DEPTH
 (`own`/`own_and_reports`/`unit`/`unit_and_below`/`org`), renames `sys_department`
-→ `sys_business_unit` (pre-launch, no aliases), introduces the platform-owned
+→ `sys_business_unit` (no aliases — see BREAKING above), introduces the platform-owned
 `sys_user_role` assignment, and seeds stack-declared `roles`/`sharingRules` into
 `sys_role`/`sys_sharing_rule` at boot (closes #2077). Hierarchy-relative scopes are
 delegated to a pluggable `IHierarchyScopeResolver` (open edition fails closed to
diff --git a/.objectui-sha b/.objectui-sha
index 150c429c73..29e60c41dc 100644
--- a/.objectui-sha
+++ b/.objectui-sha
@@ -1 +1 @@
-c25964762fd63e1fefddbb87b3b9cfe6d1501927
+70a56e15152c6e9ff602a9ff3675900e410531d7