Filed by the domain:engine execution seat (session_01CqmCgU5RGDoJYhHUMVp2af) out of the #18734 round (PR #18772), from that dev's out_of_scope_findings where it was marked 「to file」. ⛔ Filed bare: finding only; domain:* / type / priority are triage's.
⚠️ This card has a real artefact on origin right now that needs a hand with delete rights — see 「What is on the tree」.
Dedupe words: probe branch undeletable · git push --delete 403 proxy · DELETE git refs not permitted through this proxy · stray claude/issue-* branch · workflow scope probe cleanup.
The reading
A dispatched dev's container can CREATE a remote branch and cannot DELETE one, on either channel:
| channel |
result |
git push origin --delete claude/issue-18734-workflow-scope-probe |
RPC failed; HTTP 403 curl 22, after three backoff retries |
DELETE /repos/objectstack-ai/objectstack/git/refs/heads/… |
403 — 「Write access to this GitHub API path is not permitted through this proxy.」 |
⭐ Reproduced independently, on a different branch, by the dispatching seat earlier the same day (during the #18172 round): the same two channels, the same two answers. ⇒ Two branches, two sessions, one behaviour — ⛔ not a one-off.
What is on the tree, and what it breaks
claude/issue-18734-workflow-scope-probe at f22c63215c6935552f9761d1ec2bd59556c7b656 — one commit ahead of main, a throwaway comment appended to ci.yml, no PR. It is on origin now and will stay until someone with delete rights removes it.
⚠️ It defeats a pre-check AGENTS.md prescribes. Measured by the filing seat:
$ git ls-remote --heads origin | grep -c "issue-18734"
2
⇒ The 「is this card already claimed?」 probe now answers two branches for one card. ⭐ The failure direction is the silent one, and it is the same one already recorded for zero-commit probe branches: a card read as claimed when it is not, with no red signal anywhere.
⛔ The instruction that created it was the SEAT's, not the dev's
The #18734 dispatch order said, verbatim: 「Probe this first, before writing anything」 — about whether the container can push .github/workflows/** at all. The dev did exactly that, on a throwaway branch, because 「before writing anything」 reads as 「not on your working branch」.
⭐ The dev's own lesson is the right one: 「probe on the branch you are going to keep — a probe branch is far easier to create than to remove here.」
⇒ This is a dispatch-order defect, ⛔ not a dev error, and it generalises: any instruction that says 「probe before you start」 in this container manufactures a permanent artefact unless it also says where to probe.
Shape (⛔ a proposal, not a prescription)
Two independent halves, and ⛔ only the first is this repo's to decide:
- The instruction: wherever a probe-before-writing step is prescribed (dispatch orders,
os-dev.md, AGENTS.md), say 「on the branch you will keep」. Cheap, and it stops new instances.
- The capability: whether the proxy policy should permit
DELETE on git/refs/heads/claude/*. ⚠️ That is an infrastructure decision with a blast radius well beyond this repo, and this card ⛔ does not argue for it — it records the cost so whoever owns that policy can price it.
⏹️ And regardless of both: the existing stray branches need a hand with delete rights. At least two are known — this one and claude/issue-18545-formula-can-function (zero commits, also undeletable from here).
⛔ Not measured
- How many
claude/issue-* branches on origin are stray today (⇒ a census would size the accumulation; ⛔ this card asserts two known instances and ⛔ not a population).
- Whether the
grep issue-NNNN pre-check has ever actually caused a seat to skip a live card. ⇒ The failure is available, ⛔ not observed.
Refs: #18734 / PR #18772 (the round that produced the artefact) · #18172 (where the same two 403s were first measured by the seat, on a different branch)
Generated by Claude Code
Filed by the
domain:engineexecution seat (session_01CqmCgU5RGDoJYhHUMVp2af) out of the #18734 round (PR #18772), from that dev'sout_of_scope_findingswhere it was marked 「to file」. ⛔ Filed bare:findingonly;domain:*/ type / priority are triage's.originright now that needs a hand with delete rights — see 「What is on the tree」.Dedupe words:
probe branch undeletable·git push --delete 403 proxy·DELETE git refs not permitted through this proxy·stray claude/issue-* branch·workflow scope probe cleanup.The reading
A dispatched dev's container can CREATE a remote branch and cannot DELETE one, on either channel:
git push origin --delete claude/issue-18734-workflow-scope-probeRPC failed; HTTP 403 curl 22, after three backoff retriesDELETE /repos/objectstack-ai/objectstack/git/refs/heads/…⭐ Reproduced independently, on a different branch, by the dispatching seat earlier the same day (during the #18172 round): the same two channels, the same two answers. ⇒ Two branches, two sessions, one behaviour — ⛔ not a one-off.
What is on the tree, and what it breaks
claude/issue-18734-workflow-scope-probeatf22c63215c6935552f9761d1ec2bd59556c7b656— one commit ahead ofmain, a throwaway comment appended toci.yml, no PR. It is onoriginnow and will stay until someone with delete rights removes it.⇒ The 「is this card already claimed?」 probe now answers two branches for one card. ⭐ The failure direction is the silent one, and it is the same one already recorded for zero-commit probe branches: a card read as claimed when it is not, with no red signal anywhere.
⛔ The instruction that created it was the SEAT's, not the dev's
The #18734 dispatch order said, verbatim: 「Probe this first, before writing anything」 — about whether the container can push
.github/workflows/**at all. The dev did exactly that, on a throwaway branch, because 「before writing anything」 reads as 「not on your working branch」.⭐ The dev's own lesson is the right one: 「probe on the branch you are going to keep — a probe branch is far easier to create than to remove here.」
⇒ This is a dispatch-order defect, ⛔ not a dev error, and it generalises: any instruction that says 「probe before you start」 in this container manufactures a permanent artefact unless it also says where to probe.
Shape (⛔ a proposal, not a prescription)
Two independent halves, and ⛔ only the first is this repo's to decide:
os-dev.md, AGENTS.md), say 「on the branch you will keep」. Cheap, and it stops new instances.DELETEongit/refs/heads/claude/*.⏹️ And regardless of both: the existing stray branches need a hand with delete rights. At least two are known — this one and
claude/issue-18545-formula-can-function(zero commits, also undeletable from here).⛔ Not measured
claude/issue-*branches onoriginare stray today (⇒ a census would size the accumulation; ⛔ this card asserts two known instances and ⛔ not a population).grep issue-NNNNpre-check has ever actually caused a seat to skip a live card. ⇒ The failure is available, ⛔ not observed.Refs: #18734 / PR #18772 (the round that produced the artefact) · #18172 (where the same two 403s were first measured by the seat, on a different branch)
Generated by Claude Code