docs(pm-dispatch): contract-review.md's 降档保险丝 never names what IS tier evidence — a commit's `Co-Authored-By` trailer was read as one and held a PR

[os-justin]

Filed by the skills seat (session session_01MoTv7pn338AZ71owsp19gQ, 2026-09-09T12:37Z) on the director seat's instruction left on #16836 (comment 5585423511, os-zhuang, 2026-09-08T12:51Z), which that card's fold PR #17138 deliberately left out (the instruction itself says: 「⛔ Not widening this card's two deliverables; if it does not fit the FAIL-end-state sentence, file it as its own docs-only card」). Self-triaged per the lane rule: domain:skills · Task · priority:p3 · pm:queue.

The instruction, verbatim

one sentence to add wherever references/contract-review.md describes the tier fuse, measured today on PR #16862 (5585321081): build tier is fused from harness model stamps or read from the claim's Container & model: line; a commit's Co-Authored-By trailer is a session attribution constant and never evidence of tier. The director seat held a PR on that trailer (F7) and had to withdraw.

Why it is a gap

references/contract-review.md 〈降档保险丝(机读)〉 says how the seat's own tier is READ (get_session, transcript model stamps) and that a self-description is not a reading — it never says which artefacts are NOT tier evidence. A commit trailer names a model string, so a reader who has not seen the AGENTS.md trailer rule takes it for a tier stamp; that misread stopped a PR once (F7 on PR #16862) and cost a withdrawal.

Deliverable (docs-only, one line)

One line in .claude/skills/pm-dispatch/references/contract-review.md 〈降档保险丝〉, working spelling for the claimant to fit under the 120-byte pin: 「构建档位只取 harness model 盖章或认领的 Container & model 行;commit 的 Co-Authored-By 是署名常量,⛔ 不是档位证据。」 The file sits at its ceiling (60/60): paid by deletion inside the file, ⛔ no re-wrap, ⛔ no ceiling raise. Governed (.claude/**) ⇒ draft PR at the human terminal, skip-changeset.

Serial: contract-review.md is touched by the open draft PR #17138 (fold #16836 + #16995, its 载体纪律 section) — this card lands after that PR merges. Dedup (run by the fold's dev, 2026-09-09 ~12:40Z, and re-read by this seat): REST list of the 16 open domain:skills cards + local grep, control word contract-review hits 6 known cards ⇒ the read is valid; no existing card covers it.

Refs: #16836 (the instruction's home, closed by PR #17138 on merge) · PR #16862 / comment 5585321081 (the measured misread) · references/contract-review.md 〈降档保险丝〉 · AGENTS.md (the model-free trailer rule).

---

Generated by Claude Code

[os-justin]

Claim: PM loop round 3 — one line in .claude/skills/pm-dispatch/references/contract-review.md 〈降档保险丝(机读)〉 naming what is NOT tier evidence (the director seat's instruction on #16836, 5585423511, carried out of PR #17138's fold by design): build tier is read from harness model stamps or the claim's Container & model: line; a commit's Co-Authored-By trailer is a session attribution constant and never evidence of tier. File at its ceiling (60/60) ⇒ paid by deletion inside the file, ⛔ no re-wrap, ⛔ no ceiling raise, each line under the 120-byte pin.
Session: session_01MoTv7pn338AZ71owsp19gQ
Branch: claude/issue-17139-tier-evidence-line
Worktree: objectstack-issue-17139
Domain: domain:skills
File surface: .claude/skills/pm-dispatch/references/contract-review.md only; ⛔ no SKILL.md, no check-skill-line-ratchet.mjs ceiling row
Container & model: S (docs-only, one governed line), mode:subagent, model: opus — --tier at 2026-09-09T15:5xZ on origin/main 7337179d for references/contract-review.md: "no path-derived mandate … floor sonnet · default opus · ceiling fable"; a ruled one-line docs change under a ceiling ⇒ default-tier build, reviewed in the seat at claude-fable-5-1
Clause-②: no
Thread-read: none (0 comments at claim time)
Serial constraints cleared: no open objectstack PR touches references/contract-review.md (14 open PRs' file lists read 2026-09-09T15:5xZ); newest touch 7337179d (PR #17138, MERGED 15:50Z) — this card was serial behind it and is released; the sentence is absent from origin/main (git grep Co-Authored origin/main -- .claude/skills/pm-dispatch/references/contract-review.md = 0, control 降档保险丝 = 2 hits); H17 index does not name this file; not in SINGLE_CLAIM_PATHS. Disjoint from #16688's file.

---

Generated by Claude Code

[os-justin]

os-dev-report

{
  "issue": 17139,
  "status": "done",
  "branch": "claude/issue-17139-tier-evidence-line",
  "pr": "https://github.com/objectstack-ai/objectstack/pull/17199",
  "premise_still_valid": true,
  "summary": "Added one line to .claude/skills/pm-dispatch/references/contract-review.md under 降档保险丝(机读) naming the two admissible sources of the tier a build ran at (harness `model` stamps; the claim's `Container & model:` line) and the excluded artefact (the `Co-Authored-By` trailer is a session-attribution constant, never tier evidence). The card's working spelling measured 145 bytes against the 120-byte per-line pin, so it was tightened to 118 bytes with both halves intact, using this corpus's own term 施工档 (references/lanes/cli.md) as the counterpart to 服役档 three lines above. The file was at its ratchet ceiling 60/60, so the line is paid by deleting the 外部评审链 bullet inside the same file — a restatement of SKILL.md 「外部评审链降为可选事后审计,非放行前提。」 whose two named chains are stated in references/lanes/director.md :31 and :71. No re-wrap, no ceiling raise, no edit to check-skill-line-ratchet.mjs, no SKILL.md edit, no model identifier in the line, the commit, the PR body or this report. Assignee was already set by the PM's dispatch and was never written by me.",
  "files_changed": [
    ".claude/skills/pm-dispatch/references/contract-review.md (+1/-1)"
  ],
  "line_budget": {
    "file": ".claude/skills/pm-dispatch/references/contract-review.md",
    "ceiling": 60,
    "lines_before": 60,
    "lines_after": 60,
    "headroom": 0,
    "added_line_bytes": 118,
    "per_line_pin_bytes": 120,
    "paid_by": "deleted 「- 外部评审链是可选事后审计:分诊定时轮与总监席召唤 ⛔ 不是放行必要条件。」 — rule already stated in SKILL.md 入队与落地; its named chains stated in references/lanes/director.md :31 and :71; classified as a restatement by check-skill-line-ratchet.mjs's own ceiling narrative, which could not bank it then only because the payment was a byte trim, not a line",
    "re_wrap_used": false,
    "ceiling_raised": false
  },
  "gates": {
    "derived_by": "node scripts/pm/dispatch-gates.mjs --repo objectstack-ai/objectstack (change set read from merge-base c3756ff09, 1 path)",
    "reconciliation": "dispatch-gates.mjs --ran: 14 derived, 14 run, 0 NOT-MEASURED, 0 UNRUN",
    "green": [
      "pnpm check:pm-skill-ratchet — exit 0 — '✓ check-skill-line-ratchet: .claude/skills/pm-dispatch/references/contract-review.md is 60 lines (ceiling 60; headroom 0).'",
      "pnpm check:nul-bytes — exit 0 — 'check-nul-bytes: OK (scanned 8079 text file(s) … no raw ASCII control bytes).'",
      "pnpm check:doc-authoring — exit 0 — '✓ doc authoring guard: 403 files clean'",
      "pnpm check:pm-skill-id-lint — exit 0 — '✓ check-skill-id-lint: 26 file(s) clean'",
      "pnpm check:skill-frame-sync — exit 0 — '✓ check-skill-frame-sync: 2 copies of the decision frame are structurally isomorphic across 2 files'",
      "pnpm check:pm-governed-merges — exit 0 — '✓ check-governed-merges --self-test: 274 assertions'",
      "pnpm check:agent-test-spelling — exit 0",
      "pnpm --filter @objectstack/lint run check:doc-formula-expressions — exit 0 (after the prerequisite build)",
      "pnpm check:driver-memory-census — exit 0 — 'check-driver-memory-census: OK'",
      "pnpm check:refd-timer-probe — exit 0 — 'OK check-refd-timer-probe: 6433 source file(s) swept'",
      "pnpm check:watch-hint-literal — exit 0 — '✓ check-watch-hint-literal: 67 declaration(s) across 4 rostered name(s)'",
      "node scripts/check-closing-keyword-parity.mjs and --self-test — exit 0 both",
      "node scripts/check-comment-mask-corpus.mjs — exit 0 — '6438 files, 0 disagree'"
    ],
    "self_tests": [
      "node scripts/pm/check-half-states.mjs --self-test — exit 0 — 2976 cases pass",
      "node scripts/pm/check-widening-tells.mjs --self-test — exit 0 — 150 cases pass",
      "node scripts/pm/check-clause2-carriers.mjs --self-test — exit 0 — 299 cases pass"
    ],
    "not_measured": [
      "pnpm --filter @objectstack/lint run check:doc-formula-expressions FIRST run exited 3 = PREREQUISITE NOT MET (@objectstack/formula and @objectstack/lint not built). Read as NOT MEASURED, not a finding; re-run green after 'pnpm exec turbo run build --concurrency=2 --filter=@objectstack/formula --filter=@objectstack/lint' under the shared verify lock (VERDICT command-exit 0, held 289s, waited 0s)."
    ],
    "ci_owned": "repo-wide pnpm lint (eslint . --no-inline-config) is CI's run, never owed here; the diff adds no source file. CI gate status at report time is in_progress — the PR was opened at 16:22Z and CI convergence is the reviewing seat's read, not mine.",
    "no_build_closure": "no package touched; the only build run was the declared prerequisite for check:doc-formula-expressions"
  },
  "pm_assumptions": {
    "A": "HOLDS — both the 60-line ceiling and the 120-byte per-line pin live in scripts/pm/check-skill-line-ratchet.mjs (MAX_LINE_BYTES = 120; ['.claude/skills/pm-dispatch/references/contract-review.md', 60]). Measured before and after the edit; both runs print 'is 60 lines (ceiling 60; headroom 0)'.",
    "B": "HOLDS and is inert for this diff — check-half-states.mjs and check-clause2-carriers.mjs do pin strings in this file, but only in 载体纪律 (L16, L19, L20, L23) and 复核归属 (L29, L44). check-widening-tells.mjs pins none of its lines. Neither the deleted line nor any line of the edited 降档保险丝 section is pinned; measured by scanning every 5-char-and-longer CJK run of all 60 lines against all 407 text files under scripts/ and .claude/.",
    "C": "STALE in the safe direction — origin/main is c3756ff0, 4 commits past the dispatched 7337179d, and NONE of the 4 touches this file. Worked from c3756ff0; the target section was re-read from that tree rather than from the card's line numbers."
  },
  "dedup_increment": "Re-checked only the increment after the PM's 15:55Z reading: 'git grep Co-Authored origin/main -- .claude/skills/pm-dispatch/references/contract-review.md' = 0 hits with control word 降档保险丝 = 2 hits; 'git log 7337179d..origin/main -- ' that path = empty. The PM's reading stands.",
  "labels": "skip-changeset applied additively via REST POST /issues/17199/labels (HTTP 200) after a repo-scoped REST read probe returned 200. Comparative read-back: ['size/xs', 'skip-changeset'] — the union of the read set and the target set is present, nothing stripped. size/xs is the size-labeler's, not mine, and was left alone. needs:contract-review NOT applied — the claim declares Clause-②: no.",
  "deviations": [
    "Dispatch ruling 4 assigns the skip-changeset label to the PM; my binding agent file assigns label application to the dev at PR-open time. Per the precedence clause (agent file wins over dispatch wording, and conflicts are named rather than silently chosen) I applied it myself. The write is additive and idempotent, so a second application by the PM costs nothing.",
    "The harness attribution block for this session names a model in the commit trailer. AGENTS.md :440 mandates the model-free pair 'Claude-Session: …' + 'Co-authored-by: Claude ' and ruling 3 forbids model identifiers anywhere. The commit carries the AGENTS.md pair; no model identifier is in the commit, the PR title or body, this report, or the added line. Naming this since the card is itself about that trailer rule.",
    "Channel: reads went through git and the local tree; MCP was used for the two card reads, the PR create and the PR body read-back. Label writes went through REST after an in-container probe."
  ],
  "tests": "Docs-only change, no package touched, so no unit suite is owed and no build closure exists. Evidence is the gate set above: 14/14 derived families run and reconciled by 'dispatch-gates.mjs --ran' ('14 derived, 14 run, 0 NOT-MEASURED, 0 UNRUN'), plus three PM gate self-tests. The load-bearing before/after measurement is check-skill-line-ratchet: before the edit '✓ … contract-review.md is 60 lines (ceiling 60; headroom 0).' exit 0, after the edit the same verdict line, exit 0 — the line was paid, not absorbed. Added-line width measured at 118 bytes against MAX_LINE_BYTES = 120. Extra self-scan for control bytes over the C0 range plus DEL on the edited file: no match. No ablation is applicable — nothing executable changed.",
  "mcp_calls": "4 — the two card reads, the PR create and the PR body read-back; the report comment and the label write went through REST",
  "open_questions": [],
  "out_of_scope_findings": [
    "noted, not filed: check-skill-line-ratchet.mjs's ceiling narrative still describes the 外部评审链 bullet as a candidate payment it rejected. That is a record of a past raise, not a live claim about the tree, and the gate reads line counts rather than that prose. 承接者:无 — no PR or person has reason to open that comment block for this."
  ]
}

---

Generated by Claude Code

[os-justin]

ACCEPT — #17139 (skills seat, session session_01MoTv7pn338AZ71owsp19gQ, review taken 16:26–16:43Z at claude-fable-5-1; seat tier read by get_session this shift)

Delivery: draft PR #17199, head 41788860, one file +1/−1 (.claude/skills/pm-dispatch/references/contract-review.md); os-dev-report 5605184255 read to the last field.

Verified on the branch, not on the report:

• The added line under 〈降档保险丝(机读)〉 carries both halves of the director's instruction (5585423511): the two admissible sources of the build tier (harness model stamps; the claim's Container & model: line) and the exclusion (Co-Authored-By is an attribution constant, ⛔ never tier evidence). 施工档 is the corpus's own term (references/lanes/cli.md:18), paired with 服役档 three lines above. Measured 120 bytes without the newline — exactly at MAX_LINE_BYTES — and check-skill-line-ratchet on the head reads 60 lines (ceiling 60; headroom 0), exit 0.
• The payment is a real restatement: the deleted bullet 「外部评审链是可选事后审计…」 is stated at SKILL.md:646 「外部评审链降为可选事后审计,非放行前提。」 and its two named chains at references/lanes/director.md:31 and :71 (read on origin/main). No gate pins it: check-half-states --self-test 2976, check-clause2-carriers --self-test 299, check-widening-tells --self-test 150 — all green on the head.
• No model identifier in the commit, the line, the PR body or the report (grep 0/0); the commit carries the AGENTS.md model-free trailer pair — the dev's deviation from the harness attribution block is the repo rule, recorded in the report and correct for a card about that very trailer.
• git merge-tree --write-tree origin/main (d61139f1) × head: clean. CI on 41788860: 25 distinct checks, all success/skipped at 16:42Z. skip-changeset applied by the dev (additive, read back; .claude/** publishes nothing). PM assumptions A/B/C all measured (A, B hold; C stale in the safe direction).

Verdict: ACCEPT. GOVERNED (check-governed-merges.mjs --test → .claude/** ×1) ⇒ draft stays at the human terminal: needs-user-decision label, 终稿「维护者速读」 on the PR, reviews requested from os-zhuang and hotlong. This seat does not flip, queue, arm or approve. Out-of-scope note from the report (the ratchet's ceiling narrative still describes the deleted bullet as a rejected payment candidate) stays a note — 承接者:无.

---

Generated by Claude Code