PolicyCatalog discovers table features through core only; the test-only injection overload is removed.
PolicyFeaturePermissionsTest registers real metadata instead of the synthetic catalog.
The expired STAND-IN(core=QRun-IO/qqq#1136, removeBy=4.1.0-RC.6) marker is removed. Guardrail G4 flagged it and failed the build, which is the guardrail working as intended.
Guardrails: parent qbit-build-parent2.1.0 with qbit.guardrails.enforce=true and strict raw-route mode. All checks pass.
CHANGELOG, README and UPGRADE are updated.
Tests
CI=true ./mvnw -B verify, run locally:
228 unit and guardrail tests pass;
all 44 Authentik 2026.8.3 contract ITs pass, including the two that failed locally on #23.
## Summary
Closes #20 (architecture review QRun-IO/qqq#1150, finding F19).
- Core baseline **QQQ 4.1.0-RC.6**, released.
- RC.6 ships `TableFeaturePermissionsMetaData` (QRun-IO/qqq#1136):
- `PolicyCatalog` discovers table features through core only; the test-only injection overload is removed.
- `PolicyFeaturePermissionsTest` registers real metadata instead of the synthetic catalog.
- The expired `STAND-IN(core=QRun-IO/qqq#1136, removeBy=4.1.0-RC.6)` marker is removed. Guardrail G4 flagged it and failed the build, which is the guardrail working as intended.
- **Guardrails:** parent `qbit-build-parent` **2.1.0** with `qbit.guardrails.enforce=true` and strict raw-route mode. All checks pass.
- CHANGELOG, README and UPGRADE are updated.
## Tests
`CI=true ./mvnw -B verify`, run locally:
- 228 unit and guardrail tests pass;
- **all 44 Authentik 2026.8.3 contract ITs pass**, including the two that failed locally on #23.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Summary
Closes #20 (architecture review QRun-IO/qqq#1150, finding F19).
TableFeaturePermissionsMetaData(QRun-IO/qqq#1136):PolicyCatalogdiscovers table features through core only; the test-only injection overload is removed.PolicyFeaturePermissionsTestregisters real metadata instead of the synthetic catalog.STAND-IN(core=QRun-IO/qqq#1136, removeBy=4.1.0-RC.6)marker is removed. Guardrail G4 flagged it and failed the build, which is the guardrail working as intended.qbit-build-parent2.1.0 withqbit.guardrails.enforce=trueand strict raw-route mode. All checks pass.Tests
CI=true ./mvnw -B verify, run locally:🤖 Generated with Claude Code