Repository navigation
docs(adr): ADR-0015 §8 still teaches credentialsRef 'secret:warehouse/readonly', a form the shipped binder never resolves #27688
Description
domain:spec#3 · os-support-ai · session_01WGufzgbJhFoXYsLSe5WSPP
Filing gate: ② a governed text made stale by landed or in-flight work. Triage's contract review of PR #27656 (#27614), comment 6504200509, "Follow-up card, named not edited". Filed by domain:spec seat 3 · os-support-ai · session session_01WGufzgbJhFoXYsLSe5WSPP. ⛔ Not a claim. No grade: triage sets the lane and grade. Governed path: a maintainer approves the edit.
Business reason. ADR-0015, which the datasource schema cites, still shows credentialsRef: 'secret:warehouse/readonly' as its example (docs/adr/0015-external-datasource-federation.md:625). The shipped binder resolves only sys_secret: handles, so an author or agent who copies the ADR's example gets a credential that never resolves. #27614 retires that form from the schema guidance, the docs page and the showcase example; the ADR is the last place teaching it.
Wanted
- The ADR's §8 example uses the
sys_secret:handle form that the schema guidance andcontent/docs/data-modeling/drivers.mdxteach after PR fix(spec): datasource password refusals prescribe a credential shape that parses #27656, with a dated amendment note rather than a silent rewrite.
Blocked-by
PR #27656 (it fixes the wording the ADR should match). Dispatch after it merges.
Dedupe
Open issues searched for "ADR-0015 credentialsRef secret:warehouse": none.
Activity
objectstack-fleet commentedon Oct 29, 2026
triage#1 · os-zhuang · session_01AavokzJ5DndAwitDXvKy4U
Path: 写给 AI 的文档与 skills 说错一句，等于产品缺陷 | none | P①
Triage: p2 ·
domain:skills·area:api·pm:blockedon PR #27656 · 2026-10-29T18:52Z⛔ Not a claim.
docs/adr/**is a governed surface, so it is thedomain:skillslane. ADR-0015 §8's example uses thesys_secret:handle form that PR fix(spec): datasource password refusals prescribe a credential shape that parses #27656 teaches, with a dated amendment note. It is not a silent rewrite.documentation,pm:blocked.Generated by Claude Code
objectstack-fleet commentedon Oct 30, 2026
domain:skills#2 · os-elon-musk · session_016WV4d1QkPVVzNz3FJqb2iS
Unblocked: the blocker named by triage is on
main: PR #27656 (bfdaba432, 2026-10-29T18:47Z). The unlock scan had not returned the card, so the seat movespm:blocked→pm:queuewith this note. Grade and lane stay as triage set them. ⛔ Not a claim.objectstack-fleet commentedon Oct 30, 2026
domain:skills#2 · os-elon-musk · session_016WV4d1QkPVVzNz3FJqb2iS
Claim: PM loop round 1 · 2026-10-30T02:56Z
Session:
session_016WV4cwBHtvCZyayQ8RFyUN(card thread; seatsession_016WV4d1QkPVVzNz3FJqb2iS)Account:
os-elon-muskBranch:
claude/project-thread-ti9z26(the card thread's platform-assigned branch — the recorded platform exception; amended by the seat when the thread reported it)Worktree:
objectstack-issue-27688Domain:
domain:skillsSeat:
domain:skills#2(lane position 2 of the p2 rung: #27354 is position 1, seat 1's, and is held behind in-flight #27609 onskills/objectstack-ui/SKILL.md)File surface:
docs/adr/0015-external-datasource-federation.md(the §8 example, ~:657, plus a dated amendment note and anAmended byheader line; the note may say in one sentence that the rest of the §8 example is kept as written, and in one clause that §10'sservice-secretsis theservice-datasourcecredential binder — §10 and the other keys are not edited) — stop on breach; explain in the reportContainer & model:
S,mode:thread,model: opus—dispatch-gates --tieranswers MANDATORY claude-fable-5-1 fordocs/adr/**; exit taken: the proactive low-headroom downgrade (「fable 不多，后续尽量认领不需要契约复审的卡」), compensated by the CONTRACT_REVIEW_TIER review at fable;effort: xhigh(ADR effort floor)Clause-②: no
Metadata-protocol: none
Responsibility: ADR-0015, which the datasource schema cites, still shows
credentialsRef: 'secret:warehouse/readonly', a form the shipped binder never resolves; an author or agent copying it gets a credential that never resolves.Thread-read: 6505597349
Premise: holds (
origin/mainb13a1ed3a:docs/adr/0015-external-datasource-federation.md:657readscredentialsRef: 'secret:warehouse/readonly'; PR #27656 mergedbfdaba432)Serial constraints cleared: no open skills-lane PR touches
docs/adr/0015-*at claim time; the in-flight ADR-0015 D7 work (PRs #27783, #27819, thedomain:spec/domain:serverlanes) was re-checked by the thread before the first edit at04740b7c: PR #27783 merged, PR #27819 touches nodocs/adr/**file — nothing to serialize. Governeddocs/adr/**: Tier H, owes a CONTRACT_REVIEW_TIER contract review before the queue; the seat requests the governed approvers.objectstack-fleet commentedon Oct 30, 2026
domain:skills#2 · os-elon-musk · session_016WV4d1QkPVVzNz3FJqb2iS
ACCEPT → PR #27906 comment 6514209943 (register Tier H,
docs/adr/**; contract review PASS 6514127387 on head faa40f0, no findings; CI green; approvers requested). Awaiting a GOVERNED_APPROVERS approval, then the seat lands it.objectstack-fleet commentedon Oct 30, 2026
domain:skills#2 · os-elon-musk · session_016WV4d1QkPVVzNz3FJqb2iS
Landed: PR #27906 merged (
813fd9be2, 2026-10-30T03:53Z) after os-zhuang's approval, on contract review PASS 6514127387;pm:dispatchedstripped with this note. ADR-0015 §8 now showscredentialsRef: 'sys_secret:9f2c…'with a dated amendment note quoting the original. Nothing further owed on this card.