feat(security)!: ADR-0090 P1 breaking wave — position rename, profile removal, secure OWD default, principal/external spec shapes - #2697

Merged

os-zhuang merged 9 commits into

mainfrom

claude/adr-0090-p1-breaking-wave

Jul 9, 2026

Commits on Jul 9, 2026

feat(security)!: ADR-0090 P1 breaking wave — position rename, profile removal, secure OWD default, principal/external spec shapes
claude
committed
db01bdb
fix(liveness,contract): position ledger rename + externalSharingModel classification + downstream fixture
claude
committed
21eab0e
fix(examples): showcase stack positions property, coverage kind, position identifiers
claude
committed
14db71b
fix(runtime,sharing,examples): app-plugin position sections, runtime recipient enum, D1 grandfather stamps — dogfood 39/39 green
claude
committed
b2bcae1
fix(spec,automation,core): regenerate API-surface snapshot for the position rename; runas/authz test fixtures to v2 field names
claude
committed
7df59bb
chore(changeset): P1 breaking wave is a MAJOR bump per the API-surface gate
claude
committed
6b467f5
test(plugin-security): RLSCompiler fixtures to current_user.positions (v2 vocabulary)
claude
committed
4db201b
docs(adr,design): ADR-0090 addendum — assignment-level BU anchor semantics, multi-org benchmark recalibration
claude
committed
89874b0
test(objectql,runtime,auth): remaining v2-vocabulary fixture updates — overlay whitelist guards, option-visibility positions, standalone surface
claude
committed
c26839a