os-4-hourly-full-run-ci — machine-findable marker for this generated card. ⛔ Do not delete this line: it is how the 4-hourly full run finds this card instead of filing a new one every 4 hours.

4-hourly full run: red on main (CI)

Swept 2026-11-01T00:25:33.184Z · run log · commit 9b4d1933185822e4acb90e9af6f7a57b5e5f82cb · conclusion failure.
CI runs the FULL battery on main every 4 hours (#16467, #25771). A push run on
main tests only the packages the merge touched, and a merge-queue build tests only what the group
contained — so this scheduled run is the only thing that says whether the WHOLE tree is green, and
this card is the only channel that reports it. Nothing is blocked by it.
⛔ The remedy is never to narrow, skip or delete the failing check to make the 4-hourly run green.
Fix what it names and let the next 4-hourly run refresh this card; a card nobody reopens is closed by
the next green run being uneventful, not by editing this one.

What landed since the last green 4-hourly run

Range: 80a9f99222 (run 41237094739, the last green CI schedule run) .. 9b4d193318 — compare

• 50015d84da fix(objectql)!: the registry fold merges validation rules by name; a tenant's same-named copy carries only its message and active, and a changed condition is reported at load, never run (fix(objectql)!: the registry fold merges validation rules by name; a tenant's same-named copy carries only its message and active, and a changed condition is reported at load, never run #28445)
• a99de4402a docs(adr): ADR-0090 D10 rule 5, the agent forward credential (step 1 of [Decision] auth: an agent forward credential — a server-constructed, target-bound, single-use credential so an OAuth- or API-key-connected agent can run an api action whose target is an identity route (ADR-0090 D10 amendment) #28367) (docs(adr): ADR-0090 D10 rule 5, the agent forward credential (step 1 of #28367) #28455)
• 52306d40bd docs(adr-0143): D5 records manage_connector_connections' default holders (ruling B) (docs(adr-0143): D5 records manage_connector_connections' default holders (ruling B) #28456)
• 7e3822cab3 feat(spec)!: an action's description, param helpText and outcomeMessages are {{ }} template slots; ${…} refused at publish (feat(spec)!: an action's description, param helpText and outcomeMessages are {{ }} template slots; ${…} refused at publish #28463)
• 22663cab50 docs(skills,adr): teach the code-defined datasource credential route (OS_DATASOURCE_NAME_PASSWORD behind the host switch) (docs(skills,adr): teach the code-defined datasource credential route (OS_DATASOURCE_NAME_PASSWORD behind the host switch) #28432)
• 36436fae70 docs(skills): teach the derived-measure fixed-currency refusal beside the two fixed-currency refusals (docs(skills): teach the derived-measure fixed-currency refusal beside the two fixed-currency refusals #28431)
• 6e0b16acb4 feat(objectql,metadata-protocol,rest,spec): the object read names the objects a delete can cascade into (feat(objectql,metadata-protocol,rest,spec): the object read names the objects a delete can cascade into #28451)
• 96d12ec3ce docs(skills): the os package publish row points app authors at the marketplace handbook (docs(skills): the os package publish row points app authors at the marketplace handbook #28429)
• 8e6acf4bed docs(adr): ADR-0070 D2 amended — a type: module sub-package of an installed app may be disabled, not authored into, by an admin (docs(adr): ADR-0070 D2 addendum — a type: module sub-package of an installed app may be disabled by an admin (#28117 item 6) #28285) (docs(adr): ADR-0070 D2 amended — a type: module sub-package of an installed app may be disabled, not authored into, by an admin (#28285) #28430)
• 9b1dc992c7 feat(spec,lint): a form's thank-you panel names the record's engine-generated fields, and the public submit answer has a declared shape (feat(spec,lint): a form's thank-you panel names the record's engine-generated fields, and the public submit answer has a declared shape #28440)
• 119931d828 fix(objectql,rest,metadata-core)!: a datasource definition's stored row is served only to datasource administrators ([Decision] secrets: should a read of a datasource's definition keep serving external.credentialsRef to every reader that can read the definition? (item 3 of #27818, the maintainer's) #27884) (fix(objectql,rest,metadata-core)!: a datasource definition's stored row is served only to datasource administrators (#27884) #28465)
• f79fa7429c feat(spec,service-automation): alipay-v3 joins the signed connector auth schemes, with response verification (ADR-0143 D2.3, slice 3 of connectors: request-signing auth kind for the openapi and rest providers (RSA2 / HMAC canonical-request signers: Alipay, WeChat Pay, Aliyun, Tencent Cloud, e签宝) — the vendor-auth half that #26702 does not cover #26710) (feat(spec,service-automation): alipay-v3 joins the signed connector auth schemes, with response verification (ADR-0143 D2.3, slice 3 of #26710) #28446)
• 5e706e7a9e fix(runtime)!: connector connection door refuses delegated or agent callers on begin and revoke (ADR-0143 D5, ruling A) (fix(runtime)!: connector connection door refuses delegated or agent callers on begin and revoke (ADR-0143 D5, ruling A) #28474)
• 768ec4bf6f feat(console): a stored view filter's OR group filters the list, and the filter builder saves and reads it (feat(console): a stored view filter's OR group filters the list, and the filter builder saves and reads it #28475)
• 82b29fe5f4 feat(types): a related list's filter and add-picker filter take a view filter's any-of group (feat(types): a related list's filter and add-picker filter take a view filter's any-of group #28466)
• ee29ac39e8 feat(app-shell,components): on a phone the record is always a page, with a compact header, a bottom action bar and related records pushed as pages (feat(app-shell,components): on a phone the record is always a page, with a compact header, a bottom action bar and related records pushed as pages #28477)
• f5e69532a7 feat(metadata-protocol)!: the save door refuses a tenant's copy of a packaged validation rule that changes the rule's condition, type or any other key the package owns (feat(metadata-protocol)!: the save door refuses a tenant's copy of a packaged validation rule that changes the rule's condition, type or any other key the package owns #28478)
• 93c0a6397c feat(rest): the public form submit answer carries the engine-generated fields its thank-you panel names (feat(rest): the public form submit answer carries the engine-generated fields its thank-you panel names #28479)
• 2bba35a396 fix(cli): os migrate record-currency-codes judges --code before the probe, prompt and boot; document the command and the record-mode switch (fix(cli): os migrate record-currency-codes judges --code before the probe, prompt and boot; document the command and the record-mode switch #28416)
• ba0084e414 feat(spec): one override declaration for code and Studio, with the .custom pairing helpers and the closed overridable-type list (ADR-0146) (feat(spec): one override declaration for code and Studio, with the .custom pairing helpers and the closed overridable-type list (ADR-0146) #28467)
• 9b4d193318 fix(platform-objects): enabling two-factor and copying an invitation link are human-only identity actions (fix(platform-objects): enabling two-factor and copying an invitation link are human-only identity actions #28386)
  Filed by .github/workflows/scheduled-full-run-card.yml. Generated by Claude Code