admin ee704b2cf2 evidence: the grant is measured, the off-site default is live, the refusal fires ...

ep0: DatastorePowerUser carries Backup+Prune only — measured, not recalled — so the
narrowest role that works is DatastoreAdmin, applied for the hub's user at the
datastore root only. Datastore.Modify now present; the per-customer DatastoreBackup
entries are untouched.

Tester 1's off-site tier is provisioned (shared, 100 GB) and a quota edit REUSES the
same sub-account (311327 all three times), 100 -> 150 -> 100 read back from the form.

R-537 and R-538 proven live on demo-hp running 0.244.0: Paperless's tier-1 row reads
„DB + Konfig" with the new sentence while tier 2 still reads „DB + Konfig + Adatok",
and pressing restore returns the Hungarian refusal with the app untouched.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

2026-09-16 17:10:37 +02:00

..

phaseA-live.txt

evidence: the grant is measured, the off-site default is live, the refusal fires

2026-09-16 17:10:37 +02:00

phaseB-tester1-offsite.txt

evidence: the grant is measured, the off-site default is live, the refusal fires

2026-09-16 17:10:37 +02:00

phaseC-ep0-acl-before.txt

ISO 1.28.0 source: the console stops showing the pairing code once bound (R-535)

2026-09-16 17:05:35 +02:00

phaseC-ep0-grant.txt

ISO 1.28.0 source: the console stops showing the pairing code once bound (R-535)

2026-09-16 17:05:35 +02:00

phaseD-iso-gate.txt

evidence: the grant is measured, the off-site default is live, the refusal fires

2026-09-16 17:10:37 +02:00

releases.txt

ISO 1.28.0 source: the console stops showing the pairing code once bound (R-535)

2026-09-16 17:05:35 +02:00