- Shipped
- September 25, 2026 at 7:11 PM UTC
- Author
- Kamo
- Commit
- 2371e62
Closes the door around the AI never-grantable floor that the SP02 final review found (IMPORTANT-1). Platform rights and the owner flag are not RoleRightTypes, so neither the floor nor the supervisor ceiling saw them. - PATCH **************** answers 400 {reason: AI_NOT_OWNER} when isOrganizationOwner=true targets an ARTIFICIAL member, after the EDIT_MEMBER_ACCESS_LEVEL check; nothing in the body is applied. Demoting an AI owner stays allowed. - **************** answers DENIED for a session whose intelligenceType is ARTIFICIAL (any case), before the rights spine is read: no owner, god-window or administrator route for an AI session, including an administrator impersonating the AI. - PlatformAdministratorController refuses to add an AI member and to grant an existing AI row any right (400 AI_NOT_PLATFORM_ADMIN); emptying or removing such a row stays allowed.