@@ -3277,7 +3277,7 @@
       "title": "Error answers made honest on v18: a hook refusal on a hand-built write route answers 400 with the hook's own sentence, a crash answers a generic 500 that withholds the caught message, and a unique-constraint refusal is 409 UNIQUE_VIOLATION with details at the action door, MCP and sandboxed bodies too",
       "since": "v18",
       "status": "active",
-      "revision": 5,
+      "revision": 6,
       "priority": "P2",
       "surface": "api",
       "personas": [
@@ -3304,9 +3304,9 @@
           "evidence": "the vitest summary line per pin file, with the package name and the subject sha"
         },
         {
-          "clause": "the hook refusal answers 400 carrying the hook's own sentence — not 500. On a /data door (the live leg) the envelope carries no `code` when the hook declared none, by pinned design; the hand-built nested-envelope rows (sharing rules, suggested bindings, approvals, package publish) re-dress the same refusal as 400 VALIDATION_ERROR — pin-only, since no package-authorable hook reaches their objects",
+          "clause": "the hook refusal answers 400 carrying the hook's own sentence — not 500. On a /data door (the live leg) a hook that declared no code is answered with the ledgered ADR-0112 code `HOOK_ABORTED` (UNDECLARED_HOOK_REFUSAL_CODE in @objectstack/types, #27597) — never a code-less 400 and never the status-derived VALIDATION_ERROR; the hand-built nested-envelope rows (sharing rules, suggested bindings, approvals, package publish) re-dress the same refusal as 400 HOOK_ABORTED with the hook's sentence (package publish through resolveThrownHttpError, #27672) — pin-only, since no package-authorable hook reaches their objects",
           "oracle": "api",
-          "verify": "status + message on the live /data door, and the absence of error.code when the hook declared none, read on the live door's body: error-sentences-live.dogfood.test.ts drives POST /data/OBJECT and /createMany on a scratch app whose sandboxed beforeInsert hook throws a sentence, over HTTP, and asserts 400, the sentence verbatim, no `code` key and no row written (rest-hook-script-fault-envelope.test.ts pins the same design at unit through mapDataError); the VALIDATION_ERROR rows of the hand-built nested-envelope routes from rest-write-route-hook-refusal-sentence.ledger.test.ts (REFUSED_400) — both in automated.ref",
+          "verify": "status + message + code on the live /data door, read on the live door's body: error-sentences-live.dogfood.test.ts drives POST /data/OBJECT and /createMany on a scratch app whose sandboxed beforeInsert hook throws a sentence and declares no code, over HTTP, and asserts 400, the sentence verbatim as `error`, `code` equal to HOOK_ABORTED and no row written (rest-hook-script-fault-envelope.test.ts pins the same answer at unit through mapDataError: `code` HOOK_ABORTED and no `declaredCode`); the hand-built nested-envelope rows from rest-write-route-hook-refusal-sentence.ledger.test.ts §2, each answering 400 HOOK_ABORTED (HOOK_ABORTED_400) with the hook's sentence after its named downstream was called — both in automated.ref",
           "evidence": "the body"
         },
         {
@@ -3324,7 +3324,7 @@
       ],
       "automated": {
         "kind": "dogfood",
-        "ref": "packages/rest/src/rest-write-route-hook-refusal-sentence.ledger.test.ts + packages/rest/src/rest-hook-script-fault-envelope.test.ts + packages/runtime/src/dispatcher-unique-violation-wire-code.test.ts + packages/services/service-storage/src/storage-routes.server-fault-withheld.test.ts (acceptance[0], unit and engine) + packages/qa/dogfood/test/error-sentences-live.dogfood.test.ts (acceptance[1]–[3] over HTTP on the scratch app packages/qa/dogfood/test/fixtures/error-sentences-fixture.ts: the hook's sentence at 400 with no code on the /data doors, 409 UNIQUE_VIOLATION with details exactly developerMessage + object at the action door, and a storage route's 500 INTERNAL withholding the caught text)"
+        "ref": "packages/rest/src/rest-write-route-hook-refusal-sentence.ledger.test.ts + packages/rest/src/rest-hook-script-fault-envelope.test.ts + packages/runtime/src/dispatcher-unique-violation-wire-code.test.ts + packages/services/service-storage/src/storage-routes.server-fault-withheld.test.ts (acceptance[0], unit and engine; the first two also hold acceptance[1]'s HOOK_ABORTED below HTTP — the nested-envelope rows at 400 HOOK_ABORTED, and mapDataError's HOOK_ABORTED with no declaredCode) + packages/qa/dogfood/test/error-sentences-live.dogfood.test.ts (acceptance[1]–[3] over HTTP on the scratch app packages/qa/dogfood/test/fixtures/error-sentences-fixture.ts: the hook's sentence at 400 with code HOOK_ABORTED on the /data doors, 409 UNIQUE_VIOLATION with details exactly developerMessage + object at the action door, and a storage route's 500 INTERNAL withholding the caught text)"
       },
       "source": [
         "packages/types/src/sandbox-business-message.ts#sandboxBusinessMessage",
@@ -3363,6 +3363,12 @@
           "date": "2026-10-27",
           "change": "acceptance[1]–[3] are pinned at the layer their oracle names (the release-18.2.0 Tier 1 sweep #26468 scored a1–a3 partial: mapDataError called directly, HttpDispatcher with no Hono adapter, storage handlers over a fake request). The new error-sentences-live.dogfood.test.ts boots the scratch app the fixtures name (fixtures/error-sentences-fixture.ts: a sandboxed refusing hook, a unique email with a declarative update action, a storage root under a regular file) and drives each clause over HTTP; automated.ref and the three verify texts name it. Measured at base 74db43ef. No clause changed",
           "ref": "#26572"
+        },
+        {
+          "revision": 6,
+          "date": "2026-11-02",
+          "change": "acceptance[1] (clause, verify) and the automated.ref prose re-pointed to HOOK_ABORTED — stale spec from QA run #28929 (release-18.3.0-w4-c2a, at 7fa9873f), api-backend.error-sentences-and-unique-violation-wire-code acceptance[1], re-point card #28936. r5 asserted the pre-ruling shape: no `code` on the /data doors and 400 VALIDATION_ERROR (REFUSED_400) on the nested-envelope rows. #27597 gave an undeclared hook abort the ledgered ADR-0112 code HOOK_ABORTED (UNDECLARED_HOOK_REFUSAL_CODE in packages/types/src/thrown-http-error.ts, stamped by mapDataError) and #27672 carried it to the doors that resolve through resolveThrownHttpError (package publish). Re-read at base 135054ebaa: error-sentences-live.dogfood.test.ts asserts code HOOK_ABORTED on both /data doors, rest-hook-script-fault-envelope.test.ts asserts HOOK_ABORTED and no declaredCode through mapDataError, and rest-write-route-hook-refusal-sentence.ledger.test.ts answers HOOK_ABORTED_400 on every sharing-rule, suggested-binding, approval and package-publish row (no REFUSED_400 remains). Status and sentence unchanged; the clause now names the code instead of its absence, so it is narrower, not weaker. No other clause changed",
+          "ref": "#28936"
         }
       ]
     }