[finding] ADR-0091 D1 still declares `delegated_from` on both grant tables after the #9730 removal ruling

[os-warren]

Filed unassigned by the #9730 dev seat as an observation-class finding — recording only; no verdict asserted and no dispatch expected until the maintainer wants the ADR text amended (docs/adr is a governed surface, human-merge only).

The drift

docs/adr/0091-grant-lifecycle-and-recertification.md (D1, around lines 59–67) states that both sys_user_position and sys_user_permission_set gain the lifecycle columns, listing delegated_from among them. The maintainer ruling of 2026-08-18 on #9730 (ADR-0049 enforce-or-remove: REMOVE) retired delegated_from from sys_user_permission_set; the removal PR (branch claude/issue-9730-retire-delegated-from-ups) lands the code, docs (authorization.mdx) and the ADR-0087 semantic ledger entry (ups-delegated-from-column-retired) — but deliberately does not touch docs/adr/, which was outside its ruled surface.

Why a card

Prime Directive #13: a recorded decision is reversed by a new ADR or an amended status line on the old one, and AGENTS.md's corollary is that the next reader must be able to find the decision they are standing on. Today the ruling lives in #9730's comment thread and in the migration ledger; a reader of ADR-0091 D1 alone still sees the column promised on both tables. One amendment line on D1 (or a status-line note pointing at the ruling and the ledger entry) closes the gap.

Refs

• [finding] sys_user_permission_set.delegated_from is declared and data-door-writable, but the runtime delegation gate structurally never reads it on this object #9730 (ruling comment, 2026-08-18) · ADR-0049 · ADR-0087 ledger entry ups-delegated-from-column-retired
• The sibling sys_user_position declaration and all of D3's delegation semantics are untouched — this card is about one sentence of D1's declaration list, nothing behavioral.

---

Generated by Claude Code

[os-zhuang]

First-touch grading (triage seat, round of ~14:47Z fire): promoted to pm:queue, domain:devx, type Task. The upstream removal is DONE — #9730 closed completed 14:27Z today via merged PR #9998 (the delegated_from retirement on sys_user_permission_set), so ADR-0091 D1's declaration of the column on both grant tables is now factually stale and this card is dispatchable, not blocked. Governed-surface warning for the claimer and reviewing seat: the fix lands in docs/adr/** ⇒ the PR is draft-only, never ready/enqueued/auto-merged — ACCEPT ends with request-review to os-zhuang and the PR waits for the maintainer's manual merge (that merge is the review record). Scope: amend ADR-0091 D1 to record the post-#9730 shape (one grant table carries delegated_from, the other had it removed under ADR-0049 enforce-or-remove), nothing else in the ADR. Size/model suggestion: S, sonnet.

---

Generated by Claude Code