Issues

Record header strip truncates the last `highlightFields` value — `Primary Contact Name: Zoe Ha…`

finding

#84

· os-sam opened

on Sep 8, 2026

A platform administrator cannot create an `ats_employer`: HTTP 500 `ERR_SYSTEM_WRITE_ORGANIZATION_REQUIRED`, and the permission set says they can

needs-user-decision

#83

· os-sam opened

on Sep 8, 2026

Every `Field.user` column reads as a bare id to a platform persona: the readable `sys_user` set is now the caller's own row (1 of 113, was 83)

#82

· os-sam opened

on Sep 8, 2026

"Interviews This Week" is a boot-weekday number, but the screenshot set and the #8 evidence pin it as a fixed 6

#80

· os-sam opened

on Sep 8, 2026

Release screenshots `05` and `06` show a breadcrumb leaf that a boot today renders one word longer

documentation

finding

#75

· claude opened

on Sep 7, 2026

`os i18n check` counts the platform's 773 metadata-form keys against this app and double-counts action keys, so its percentage cannot be the release gate

#60

· os-sam opened

on Sep 7, 2026

Public application form renders the object name `ats_inquiry` as its heading and leaves the form title / section label untranslated

#59

· os-sam opened

on Sep 7, 2026

F5/F6 reminders: on the real cron path the platform refuses the inbox write (run has no organization), so scheduled reminders reach nobody until objectstack#16659 lands

#56

· os-sam opened

on Sep 7, 2026

Employer administrators cannot create `ats_job` (403 `PERMISSION_DENIED`) even with the stamps fixed — the insert-side RLS `check` is compiled without the membership resolver's keys and evaluated on the pre-hook payload (upstream)

#45

· os-sam opened

on Sep 7, 2026

Security bootstrap's first-user carve-out promotes the oldest authenticable user in an unordered 50-row `sys_user` window: with seeded credentials the winner depends on the database driver (sqlite promoted the job seeker)

#40

· os-sam opened

on Sep 7, 2026

On the sqlite driver, tenant-scoped objects (`ats_employer`, `ats_interview`, `ats_offer`) return 0 rows to platform admins holding `viewAllRecords`; the memory driver returns all of them

#39

· os-sam opened

on Sep 7, 2026

Field-level security composes deny-wins across held positions: a platform reviewer who also holds `job_seeker` loses `verification_note` on the employer form

#35

· claude opened

on Sep 7, 2026

Navigation Menu

Uh oh!

All issues

Record header strip truncates the last `highlightFields` value — `Primary Contact Name: Zoe Ha…`

A platform administrator cannot create an `ats_employer`: HTTP 500 `ERR_SYSTEM_WRITE_ORGANIZATION_REQUIRED`, and the permission set says they can

Every `Field.user` column reads as a bare id to a platform persona: the readable `sys_user` set is now the caller's own row (1 of 113, was 83)

"Interviews This Week" is a boot-weekday number, but the screenshot set and the #8 evidence pin it as a fixed 6

Release screenshots `05` and `06` show a breadcrumb leaf that a boot today renders one word longer

`os i18n check` counts the platform's 773 metadata-form keys against this app and double-counts action keys, so its percentage cannot be the release gate

Public application form renders the object name `ats_inquiry` as its heading and leaves the form title / section label untranslated

F5/F6 reminders: on the real cron path the platform refuses the inbox write (run has no organization), so scheduled reminders reach nobody until objectstack#16659 lands

Employer administrators cannot create `ats_job` (403 `PERMISSION_DENIED`) even with the stamps fixed — the insert-side RLS `check` is compiled without the membership resolver's keys and evaluated on the pre-hook payload (upstream)

Security bootstrap's first-user carve-out promotes the oldest authenticable user in an unordered 50-row `sys_user` window: with seeded credentials the winner depends on the database driver (sqlite promoted the job seeker)

On the sqlite driver, tenant-scoped objects (`ats_employer`, `ats_interview`, `ats_offer`) return 0 rows to platform admins holding `viewAllRecords`; the memory driver returns all of them

Field-level security composes deny-wins across held positions: a platform reviewer who also holds `job_seeker` loses `verification_note` on the employer form

Uh oh!

Search results