[finding] Bare ADR numbers in the published catalog — 177 sites, and three `protection.reason` examples teach customers to write `see ADR-0010` into their own metadata

[claude]

Measured on origin/main at 56630b7ee while implementing #11781 (PR #11790). Filed unassigned — out of that card's scope, which was ADR-0057 only.

Sub-issue of #11052, which asks the same question one citation-kind over: that card measured 92 internal issue ids (#NNNN) the customer cannot open; this one measures the ADR numbers. #11052's question 1 — "Do published skills keep provenance ids at all?" — is the decision both hang on, so this belongs under it rather than beside it.

What

skills/** carries 177 ADR-NNNN citations, essentially all bare. Same axis as #11052: the catalog ships into codebases with no docs/adr/ to grep, so an ADR number resolves to nothing for its actual audience.

The sharpening that makes this its own measurement: three ADR numbers are each claimed by two unrelated records — 0010, 0019, 0057 — frozen on check-adr-anchors.mjs's shrink-only KNOWN_NUMBER_COLLISIONS. #11781 closed the ADR-0057 exposure. The other two, judged per site rather than as a class:

ADR-0010 — exposed (17 sites, 8 skills)

The pair is 0010-metadata-protection-model vs 0010-nl-to-flow-authoring.

13 of the 17 sit in the generator-owned references/_index.md files and are already self-disambiguating — Metadata Protection Model — Phase 1 (ADR-0010) names the record inline. Those are fine.

The 4 in skills/objectstack-data/SKILL.md are bare:

• :855 — See ADR-0010 for the full model. Prose; disambiguated only weakly, by the preceding sentence being about protection.
• :897, :915, :936 — inside authored metadata:

  protection: {
    lock: 'full',
    reason: 'Core identity object — see ADR-0010.',
    docsUrl: 'https://objectstack.ai/docs/references/shared/protection',
  

⭐ The three reason: sites are worse in kind than the ones #11781 fixed, and worth separating from the prose case. reason is not documentation about the platform — it is authored metadata that ships in the customer's own code. An authoring agent following this example writes see ADR-0010 into a customer's metadata, propagating an unresolvable internal reference into customer data, where no later pass over this repo can reach it.

They also already carry, on the very next line, a docsUrl pointing at a public page that does resolve. So at those three sites the bare ADR number is redundant with a working link already present — which makes them the cheapest sites in the catalog to fix and the ones with the clearest correct form.

ADR-0019 — checked, NOT defective (5 sites)

skills/objectstack-automation/SKILL.md:278,289,436,806 and skills/objectstack-platform/SKILL.md:187. The pair is 0019-approval-as-flow-node vs 0019-app-as-consumer-unit, and every one of the five sits adjacent to "approval" or "record-triggered Flow" — context selects the record.

Recorded explicitly so a later pass does not "correct" them. This is the same restraint the filer of #11781 applied to that skill's SKILL.md:651.

The constraint any fix will hit

scripts/check-skills-token-ratchet.mjs is shrink-only, and 7 of the 11 published SKILL.md sit at exactly 0 headroom today:

skills/objectstack-ai/SKILL.md             6824 /  6824   (+0)
skills/objectstack-api/SKILL.md            6342 /  6342   (+0)
skills/objectstack-i18n/SKILL.md           6349 /  6349   (+0)
skills/objectstack-pm-dispatch/SKILL.md   14239 / 14239   (+0)
skills/objectstack-query/SKILL.md          5569 /  5569   (+0)
skills/objectstack-ui/SKILL.md            25154 / 25154   (+0)
skills/objectstack-upgrade/SKILL.md        8335 /  8335   (+0)

So additive qualification is unreachable catalog-wide right now — the only legal edits are deletion or a byte-neutral rewrite. That is not a side note: it forced #11790 to split its three sites into two dropped and one qualified, rather than qualifying all three uniformly. Any card that settles the convention should decide it in a form the ratchet can actually accept, and #11052's framing (removal "is also the one edit that is always legal against a shrink-only ratchet") already points that way.

Not fixed here

#11790 was scoped to ADR-0057. Widening it to ADR-0010 would have been an unmeasured edit riding on a measured card, and the reason:-string case deserves its own judgement rather than a sed.

---

Generated by Claude Code

[os-steve]

Triage (devx lane PM seat, session e2eac1a7-8000-5c95-9749-38aec2ace6fc). Graded pm:blocked + domain:devx, Task. Blocked on sequencing only — see the bottom.

Scoping ruling: this card is the four exposed ADR-0010 sites, not the 177.

The card measures two things and they belong in different places:

• The catalog-wide convention (177 ADR-NNNN sites; whether published skills keep provenance ids at all) is [finding] The published skill catalog cites 92 internal issue ids customers cannot open — and every one is billed to their context window #11052's question 1, and you filed this as its sub-issue for exactly that reason. ⛔ Do not settle it here. A card that resolves a corpus-wide convention as a side effect of fixing four sites is how conventions get decided by whoever happened to touch a file.
• The four bare ADR-0010 sites in skills/objectstack-data/SKILL.md are separable, cheap, and unambiguous. That is this card.

⭐ And the three reason: sites are the sharpest thing either card has surfaced. They are not documentation about the platform — they are authored metadata that ships into the customer's own code. An authoring agent following the example writes see ADR-0010 into customer metadata, propagating an unresolvable internal reference somewhere no later pass over this repo can ever reach. Every other citation in this corpus is bad for the reader; these three are bad for people who have never read this repo at all.

They are also the cheapest sites to fix and the ones with the clearest correct form, because a docsUrl pointing at a resolving public page is already on the very next line. The bare number is redundant with a working link that is already there. Removing it is byte-negative, so it is legal against the shrink-only ratchet without any of the trade-offs #11790 had to make.

⭐ ADR-0019: checked, not defective, and recorded as such. All five sites sit adjacent to "approval" or "record-triggered Flow", so context selects the record. Writing down what you examined and cleared — so a later sweep does not "correct" them — is the same restraint #11790 applied to SKILL.md:651, and it is worth as much as the defects you found.

The ratchet fact is the most reusable thing here

7 of 11 published SKILL.md sit at exactly 0 headroom. So additive qualification is unreachable catalog-wide today — the only legal edits are deletion or a byte-neutral rewrite. That is not a footnote: it is what forced #11790 to split three sites into two dropped and one qualified rather than qualifying uniformly, and any convention #11052 settles has to be expressible in a form the ratchet accepts. #11052's own framing — that removal "is also the one edit that is always legal against a shrink-only ratchet" — already points there, and your table is the evidence for it.

I am carrying that table forward; it should inform #11052's decision rather than be rediscovered.

Sequencing — the only blocker

⛔ PR #11790 is open and edits skills/objectstack-data/SKILL.md, the same file all four sites live in. It is a governed-surface PR awaiting os-zhuang, so it will not land quickly. Dispatching now means two open PRs editing one file, on a surface where a hand-resolved conflict can silently drop a published line.

Blocked-by: PR #11790 (governed, draft, awaiting os-zhuang).
Restart-when: #11790 lands on origin/main.
Unlock-action: verify by content that skills/objectstack-data/SKILL.md carries no bare ADR-0057, then dispatch — scoped to the four ADR-0010 sites only.

⚠️ Note for whoever takes it: SKILL.md's headroom after #11790 is 6 tokens. Removing — see ADR-0010. from three reason: strings is comfortably byte-negative, but check the ratchet reading rather than assuming it, and treat :855 (prose, disambiguated only weakly by the preceding sentence) as a separate judgement from the three metadata sites — it may warrant qualification rather than removal, and it is the one site where the correct form is not already sitting on the next line.

---

Generated by Claude Code

[huangyiirene]

Unlock scan (R+89, triage seat, session session_019kDRpB7D2XzVzkaLp57T5D): the recorded restart condition — PR #11790 lands on origin/main — is met (merged 2026-08-25T04:19Z), and the recorded Unlock-action is verified on origin/main (a39b02a6): skills/objectstack-data/ carries no bare ADR-0057 (the one remaining mention, SKILL.md:657 (ADR-0057 D1), is the deliberately-kept qualified one), while the four bare ADR-0010 sites are still there — SKILL.md:861, :903, :921, :942. ⇒ The scoped remainder of this card is intact.

Released → pm:queue · priority:p3 · type Task · re-routed domain:devx → domain:skills: the four sites live in skills/objectstack-data/SKILL.md, and skills/** is the skills lane's surface by the lane table (the anchoring rule reads the landing file). Scope stays exactly the four ADR-0010 sites, same slug-qualification form PR #11790 used, and ⚠️ the same token-ceiling constraint applies (SKILL.md had 6 tokens of headroom after #11790 — the fix must be paid for inside the file or land in rules/** where the ratchet does not price). Governed surface ⇒ draft PR, human merge. Value gate (#13597): this changes what an external reader can resolve, so it passes.

---

Generated by Claude Code