Deploy AIOS web (React glide grid + FastAPI slice)

web/src/customer-grid/CustomerGrid.tsx

@@ -2985,6 +2985,13 @@ function CustomerGridSurface({
     [cohortMode, linkCandidateRows, cohortMemberSet]
   );
 
+  // W42-T27 — display mode deliberately ignores an unresolved condition so an
+  // owner's existing view stays unchanged. A view granted to this reader is a
+  // permission boundary instead: an unavailable field must narrow the result,
+  // never make the shared view show extra rows.
+  const activeViewForPermissions = views.find((view) => view.id === activeViewId);
+  const receiverSharedView = activeViewForPermissions?.shared === true;
+
   const { visibleRows, pidToIndex } = useVisibleRows(
     scopedRows,
     fields,
@@ -3006,7 +3013,8 @@ function CustomerGridSurface({
     // wave17 R1 / C-LOCKV: the view's SAVED lock is now the only source. A locked view is a
     // saved view whose `config.cohortLock` names its own id, so opening it IS applying the
     // lock — the wave-15 transient rail pick that used to outrank this is gone with its rail.
-    config.cohortLock
+    config.cohortLock,
+    receiverSharedView
   );
 
   // Owner item 8 — the DISPLAY cap. The pipeline above still ran over the whole book (counts,
@@ -7528,7 +7536,7 @@ function CustomerGridSurface({
     );
   }
 
-  const activeView = views.find((view) => view.id === activeViewId);
+  const activeView = activeViewForPermissions;
   // Cohort mode's toolbar control (rendered by Toolbar via the `cohortAction` slot; the popover
   // it opens is with the other overlays at the bottom). Disabled without an active cohort —
   // zero cohorts is the host page's near-empty state, not this button's error to explain.

web/wiring_rows/wave42_c.py

@@ -175,5 +175,14 @@ ROWS: list[tuple[str, str, str, str, str]] = [
      "customer-grid/CustomerGrid.tsx", r"outcome\.results"),
 ]
 
+# W42-T27: strict is only effective once the grid passes it into the row
+# pipeline for a receiver's shared view. The owner remains in display mode.
+ROWS.append(
+    ("W42-T27 a receiver's shared-view filters reach the fail-closed row pipeline",
+     "customer-grid/useVisibleRows.ts", r"strict\?: boolean",
+     "customer-grid/CustomerGrid.tsx",
+     r"useVisibleRows\([\s\S]*config\.cohortLock,\s*receiverSharedView")
+)
+
 #: (what was deleted, file, the pattern that must NOT match, why it matters)
 DELETIONS: list[tuple[str, str, str, str]] = []