docs(audits): data/ firm-site batch verdict — field.zod.ts re-verdicted no door, the IndexSchema hold re-based on #5247 alone (#4001)

[qq9340100]

Part of #4001 — the campaign anchor stays open.

What this batch measured, and why the diff is ledger-only

The dispatch was the data/ firm authorable strip sites (the campaign's "data/ firm 3" remainder, i.e. Batch C plus the held site). The mandatory re-measure on today's main (fresh gen:strictness-ledger run, zero drift against the committed counts) confirms the count of 3 — and the per-site read shows none of the three is a conversion:

1. object.zod.ts / IndexSchema (1 site) — the hold is still correct, but its stated basis was stale: ADR-0049 enforce-or-remove:IndexSchema.type 与 IndexSchema.partial 没有任何 DDL 消费者 #5248 is answered (remove — PR refactor(spec)!: retire indexes[].type 与 indexes[].partial —— 两个零 DDL 消费者的声明键 (#5248, #4943) #5842 retired indexes[].type / indexes[].partial with tombstones and the protocol-17 migration), so the hold now rests on console 的内嵌索引编辑器与 IndexSchema 漂移:where vs partial、枚举里的 brin —— 阻塞 #4001 对 IndexSchema 的收紧 #5247 alone. Re-verified 2026-08-13 that objectui's EmbeddedItemEditor.tsxFALLBACK_SCHEMAS.index still ships the drifted where + brin controls, so tightening would still 422 a control the console itself renders. The row now records the discharged half.
2. field.zod.ts / LocationCoordinatesSchema + CurrencyValueSchema (2 sites) — the row's own instruction was "check whether they are record data before closing", and the measured answer is the third one: both are @deprecated dead exports contradicting the enforced value contract (ADR-0104 "Reality wins": currency stores a bare number; location stores {lat, lng}). Carrier absent (no schema references either — unreachable by construction, no BFS needed), parse absent outside their own tests, zero objectui references; field-value.test.ts pins from the other side that the enforced contract rejects the retired object shape. That is the ledger's no door class verbatim — out of the ratchet's scope. Converting them would be datasource 账本判定的 20 条死键至今无人处置：三个块整块无人读，其中 readOnly 让一个 shipped 示例的「只读副本」可写（ADR-0049 enforce-or-remove） #4583's precisely-validated dead slot: a surface name and did-you-mean suggestions on the exact spellings the real contract rejects. The row is re-verdicted no door and points at spec: remove the deprecated LocationCoordinatesSchema / CurrencyValueSchema dead exports at the next spec major (ADR-0104) #8562 (the removal tracker this class requires; the ADR-0049 answer is already ADR-0104's, deprecations on main, removal rides the next spec major).

Ledger arithmetic (regenerated, never hand-patched): data/ authorable 3 → 1, no door 0 → 2; global authorable 4 → 2. The remaining data/ authorable site is the deliberately held IndexSchema.

Verification

• check:strictness-ledger green, and reverse-verified in the predicted direction: flipping the field.zod.ts Class cell back to authorable against the regenerated counts turns the gate red (counts no longer current); restoring from the commit turns it green.
• check:generated: all 13 artifacts up to date. check:nul-bytes clean. check:doc-authoring and check:doc-formula-expressions (the two path-derived gate families for docs/audits/**) green after building the lint dependency closure.
• No schema, test, or runtime code changes — the consumer-evidence battery (spec suite, example-app validate, direct-parse probes) is not implicated by a ledger-verdict diff; no acceptance surface moved.

No changeset: releases nothing (docs/audits only) — skip-changeset applied.

Out of scope, untouched: IndexSchema itself, metadata-type-redaction.ts, datasource-credential-redaction.ts, stack.zod.ts / ui/view.zod.ts view vocabulary. #8562 remains open; #4001 remains open.

---

Generated by Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
objectstack	Ignored		Aug 13, 2026 9:31pm