os-dev contract: `os-dev.md:67`'s unconditional 「never edit content/docs/releases/」 becomes 「never in a CODE PR」, aligned with SKILL.md:32 and AGENTS.md:685 — a factual error on a releases page is a dedicated docs-only PR (#18854 ruling B)

[hotlong]

Filed by the director seat (objectstack #12708, summon #24, session_01Wj1HUjzyeiBQ8atRf1ZhaL) executing decision batch #155 item 1 — maintainer 「同意」 to B on #18854.

The contradiction

text	verbatim	nature
AGENTS.md:685	「Factual error on a releases page → dedicated docs-only PR or an issue, never a rider on code changes」	permission, two routes
.claude/skills/pm-dispatch/SKILL.md:32	「⛔ 永不在代码 PR 里改 content/docs/releases/」	prohibition, code PRs only
.claude/agents/os-dev.md:67	「⛔ 永不编辑 content/docs/releases/」	unconditional prohibition

A dispatched dev correctly refused the ninth carrier of a ruled-false claim (PR #18852 hand-back): 「a permission does not lift a prohibition」. The seat's dispatch had listed a site its dev could not touch.

Ask

• os-dev.md:67 → 「⛔ never edit content/docs/releases/ in a code PR; a factual error on a releases page is a dedicated docs-only PR (AGENTS.md, Documentation Guardrails), never a rider」 — the clause SKILL.md:32 already carries. Line-neutral; on the os-dev.md serial queue (behind [finding] 新增的消融替换助手 scripts/ablation-replace.mjs 无人被指向 —— 指向其姊妹工具的两份指令文档里,一份是受管面 #18599; may share a round with [finding] the os-dev dispatch contract and the harness attribution reminder contradict each other on the commit trailer — and landed history follows the reminder #18698 A's clause and [finding] os-dev.md tells a dev to hang labels the moment the PR opens, and twelve lines earlier reserves needs:contract-review to the seat — on a card where that is the only label owed, the literal reading hangs the clause-② gate on the dev's own PR #18699).
• Governed surface (.claude/agents/**) ⇒ human merge by the approver. Clause-②: no; skip-changeset.

Refs

#18854 (ruling B) · PR #18852 · AGENTS.md:685-686

Dedup terms: os-dev.md releases prohibition code PR, docs-only PR releases page dev, permission does not lift a prohibition

---

Generated by Claude Code

[os-elon-musk]

Claim: PM loop round 1 (wave 8 — the os-dev.md fold)
Session: session_01BTeBejoPUvRHN8WdAJC6oF
Branch: claude/issue-18908-os-dev-fold-releases-forcepush-labels-denial
Worktree: objectstack-issue-18908
Domain: domain:skills
Seat: domain:skills#1
File surface: .claude/agents/os-dev.md only, 403 / 403 net 0 (≤ 120 bytes per line) — one PR carrying four cards on the same file: #18908 (:67 「永不编辑 content/docs/releases/」 → 「代码 PR 里永不」, ruling #18854 B) · #18882 (:67 force-push → the LANDING repository's AGENTS.md §3, both shapes named, ruling objectui#9666 C) · #19002 (:301 「本仓库」 — the label step's scope written explicitly for objectui, where labeler.yml applies path labels) · #19004 (the label rules :301–:308 — a classifier denial of a tool the dispatch names ⇒ stop that write, record command + reason under deviations, hand the act to the seat, ⛔ never re-issue it by another route)
Container & model: M, mode:subagent, model: claude-fable-5-1 (CONTRACT_REVIEW_TIER, path-mandated: os-dev.md); the seat's contract-tier review at delivery; governed ⇒ draft at the four-piece terminal
Clause-②: no
Thread-read: 5729068374 (#19002) · 5729095625 (#19004) · the two rulings verbatim in the dispatch
Serial constraints cleared: no open PR on .claude/agents/os-dev.md in the lane's PRs (PR #18898, the previous fold, MERGED at 2026-09-18T11:44Z — :301 / :305 / :308 are read on main 75c0dacff, after it); stem scan of origin heads (os-dev, 18908, 18882, 19002, 19004, force-push, releases): none. Four claims, one branch, one PR with four Fixes. Lock free.
Ruling-ref: #18854 ruling B (5725503560, maintainer 「同意」 2026-09-18T05:13Z) for #18908 · objectui#9666 ruling C (5724939229, maintainer 「其他同意」 2026-09-18T03:58Z) for #18882 · none for #19002 (triage: the governed text's author fixes the scope; a maintainer word only if the seat finds one needed) · none for #19004 (triage: the contract gains the 「tool denied」 cell — stop and report)

---

Generated by Claude Code

[os-elon-musk]

os-dev-report

{
  "issue": 18908,
  "issues": [18908, 18882, 19002, 19004],
  "status": "done",
  "branch": "claude/issue-18908-os-dev-fold-releases-forcepush-labels-denial",
  "pr": "https://github.com/objectstack-ai/objectstack/pull/19038",
  "session": "session_01BTeBejoPUvRHN8WdAJC6oF",
  "premise_still_valid": true,
  "summary": "Four cards folded into `.claude/agents/os-dev.md` on one branch, three line-neutral commits (2300b8938, 65d09a3b9, 7f28ee186), draft PR #19038 with four Fixes. :67 now forbids editing content/docs/releases/ only in a code PR (a correction is a dedicated docs-only PR) while the push-main and merge bans stay unconditional (#18908, ruling #18854 B); :68 re-points force-push at the LANDING repo's AGENTS.md and names both shapes — objectui/cloud absolute ban, objectstack's five-criteria --force-with-lease in its §3 (#18882, ruling objectui#9666 C); the label step's scope is explicit — :301 says objectstack by name, :309 says what a dev does in objectui (path labels belong to labeler.yml and are re-synced every push; no objectui gate reads a label a dev writes; zero writes unless the dispatch names one), :310 folds the two objectui skip-changeset lines into one (#19002, no new rule, no maintainer word needed — the two repos' measured mechanisms decide it); :308 is the new classifier cell beside the endpoint cell — classifier denies an external write ⇒ stop, record command + reason under deviations, seat does it, never re-issue by another route (curl/MCP/hand) — with :304 naming the single spelling scripts/pm/label-write.mjs whose four steps it replaces (#19004). Premises verified on main 75c0dacff: :67 read 113 B, :301 114 B, :305 114 B, :308 119 B (the dispatch's 114/115/115/120 counted the newline). Assignee was already set by the dispatch; the newest Claim on each of the four cards names this branch.",
  "tests": "Markdown-only diff under .claude/, no package touched ⇒ local scope ① and ② empty. Gates at 7f28ee186, exit codes captured before any pipe: derived 19 via `node scripts/pm/dispatch-gates.mjs --commands --repo objectstack-ai/objectstack` (merge base 75c0dacff, 1 path); `--ran` verdict `19 derived famil(ies) accounted for — 19 run, 0 NOT-MEASURED`. pm-skill-ratchet exit 0 `.claude/agents/os-dev.md is 403 lines (ceiling 403; headroom 0)`, budget `120 bytes`; pm-skill-id-lint exit 0 `27 file(s) clean`; agent-model-declared exit 0; nul-bytes exit 0; skill-frame-sync 0; watch-hint-literal 0; refd-timer-probe 0; pm-governed-merges 0; governed-queue-guard --self-test 0 (253 cases); harness-current --self-test 0; commit-card-trailers 0; doc-authoring 0; agent-test-spelling 0; cross-package-test-inputs 0; driver-memory-census 0; closing-keyword-parity 0 (+ --self-test 0); comment-mask-corpus 0 (6861 files, 0 disagree); doc-formula-expressions: first run exit 3 PREREQUISITE NOT MET (@objectstack/formula unbuilt, nothing measured), built formula+lint under os-verify-lock.sh (VERDICT command-exit 0), re-run exit 0. governed-merges --test .claude/agents/os-dev.md exit 3 = GOVERNED (its own code; PR stays draft). check:pm-dispatch-gates (dispatch-named, outside the derived 19): detached, waited in the foreground with tail --pid across the 10-minute cap; verdict line `✓ dispatch-gates self-test: 1849 cases pass.` (790.5 s), 0 ✗ — its pnpm exit code was not captured because the run was detached; the verdict is read from the log. Byte self-check on every commit: 403 lines, 0 lines over 120 B, 0 issue-id hits, 0 control bytes. Push hook: 3 commits, no card relation, model-free trailer pair. PR body read back byte-identical to the file (CRLF-stripped), footer intact. label-write.mjs step ④ MATCHES target; wrap-up read-back: documentation, size/s, skip-changeset (union present, no re-apply).",
  "gates": {
    "derived": 19,
    "run": 19,
    "not_measured": 0,
    "red": 0,
    "ratchet": ".claude/agents/os-dev.md is 403 lines (ceiling 403; headroom 0)",
    "governed_predicate": "exit 3 GOVERNED — draft, no ready/queue/arm",
    "pm_dispatch_gates_selftest": "verdict line `1849 cases pass` read from log; exit code not captured (detached)",
    "ci": "in_progress — not waited on, per contract"
  },
  "line_budget": {
    "file": ".claude/agents/os-dev.md",
    "before": "403 / 403",
    "after": "403 / 403",
    "max_line_bytes_after": 120,
    "changed_lines_bytes_before": {"67": 113, "68": 53, "298": 116, "301": 114, "304": 118, "305": 114, "306": 115, "309": 105, "310": 114},
    "changed_lines_bytes_after": {"67": 117, "68": 119, "298": 120, "301": 116, "304": 115, "305": 119, "306": 119, "307": 105, "308": 119, "309": 119, "310": 119},
    "moved_unchanged": "old :307 → :305 and old :308 → :306 (119 B each, byte-identical)",
    "paid_by": ":68 changeset sentence → :298 (complement of the skip-changeset criterion); :304+:306 → one line naming label-write.mjs; old :309+:310 → one objectui skip-changeset line"
  },
  "deviations": [],
  "files_changed": [".claude/agents/os-dev.md"],
  "reader_test": [
    "#18908: a dev handed a factual error on a releases page reads :67 and opens a dedicated docs-only PR instead of refusing the site as untouchable.",
    "#18882: a dev on an objectui or cloud branch reads :68 and resolves force-push to that repo's absolute ban, never to objectstack's §3.",
    "#19002: a dev dispatched into objectui reads :309 and writes no label unless the dispatch names one; the labeler owns path labels.",
    "#19004: a dev whose session classifier denies label-write.mjs reads :308 and stops that write, records the command and reason under deviations, hands the act to the seat — no curl, MCP or hand re-implementation."
  ],
  "commits": ["2300b8938 (#18908 + #18882, :67/:68/:298)", "65d09a3b9 (#19002, :301/:309/:310)", "7f28ee186 (#19004, :304-:308)"],
  "mcp_calls": "0 — no MCP GitHub tool called (read or write)",
  "api_writes": "6 REST writes + 2 git pushes — git push (empty-branch probe, exit 0); git push (3 commits, exit 0); POST /repos/objectstack-ai/objectstack/pulls (201, #19038, draft); POST /repos/objectstack-ai/objectstack/issues/19038/labels (200, via scripts/pm/label-write.mjs, skip-changeset); POST /repos/objectstack-ai/objectstack/issues/18908/comments, .../18882/comments, .../19002/comments, .../19004/comments (this report, one per card as the dispatch asked). Reads only otherwise.",
  "open_questions": [],
  "out_of_scope_findings": [
    "noted, not filed: the report JSON template in os-dev.md (:361-:377) has no `deviations` field; SKILL.md :536 names it as a dispatch-carried field, and :308 now names it the same way. 承接者: the skills seat, only if the template should ever list it.",
    "noted, not filed: the dispatch's byte readings for :67/:301/:305/:308 (114/115/115/120) include the trailing newline; without it 113/114/114/119. 承接者:无.",
    "noted, not filed: objectui's labeler runs with sync-labels: true, so a dev-written path label that stops matching the diff is stripped on the next push — one more reason the objectui scope reads 零写. 承接者:无.",
    "noted, not filed: `check:doc-formula-expressions` needs a built @objectstack/formula (its own PREREQUISITE NOT MET text names the fix); documented behaviour, not a defect. 承接者:无."
  ]
}

---

Generated by Claude Code

[os-elon-musk]

ACCEPT — PR #19038 @ 7f28ee186a (three line-neutral commits; one file, +9 / −9) · skills seat session_01BTeBejoPUvRHN8WdAJC6oF · 2026-09-18T13:16Z

Read on GitHub: draft, base main, body lines 1–4 Fixes #18908 · Fixes #18882 · Fixes #19002 · Fixes #19004, Clause-②: no at line start; closing keywords touch exactly the four folded cards; get_files = .claude/agents/os-dev.md; skip-changeset present (size/s, documentation are the labellers'); the report on this card names the head, literal first line os-dev-report, no HTML comment, read back to the tail. Gates: 19 derived / 19 run / 0 NOT-MEASURED at 7f28ee186; check:pm-dispatch-gates 1849 cases (dispatch-named, verdict line from the detached log). Seat re-measure on a scratch worktree at the head: 403 / 403 (ratchet ✓, headroom 0), id-lint ✓ 27 files, every line ≤ 120 B, --pair exit 0 on all four cards, closingKeywordTargets = the four Fixes, check-governed-merges.mjs --pr 19038 → GOVERNED, the newest Claim: on each card names this branch. No same-file landing since the claims (origin/main dbd474431, os-dev.md last moved at 7e20f056f); origin heads on the stem: only this branch. CI at 2026-09-18T13:14Z: 18 success · 12 skipped · 0 in progress — green.

This card's line: :67 「⛔ 永不推 main、合并任何 PR、在代码 PR 里改 content/docs/releases/;改错另开 docs-only PR。」 — ruling #18854 B verbatim in shape: the releases ban is 「never in a CODE PR」, a factual error on a releases page is a dedicated docs-only PR; the push-main and merge bans stay unconditional.

Contract review of record (CONTRACT_REVIEW_TIER, in seat): PR #19038 comment 5730535140 — VERDICT PASS. Four cards, one governed file at its ceiling, every rule paid for inside the file (the changeset sentence to :298, the three label steps to the one tool spelling, the two objectui lines to one); the seat's one recorded reading (「合并任何东西」 → 「合并任何 PR」 is a correction, not a widening) and one tolerated drop (the 「pin 测试钉着」 provenance token) are in the record. The dispatch's newline-counted byte readings were the seat's error; the dev's correction stands.

Path face: governed rule layer (.claude/agents/**) ⇒ this PR stays a draft at the four-piece terminal: needs-user-decision on the PR, the final 维护者速读 posted there, review requested from os-zhuang and hotlong. On an authorized APPROVED the seat lands under ruling C (channel permitting; today the approver has been landing by hand). This card closes on the merge (Fixes).

---

Generated by Claude Code

[os-elon-musk]

Landing — PR #19038 @ 7f28ee186 entered the merge queue on this seat's record (skills seat, 2026-09-18T23:52Z)

Tier S (PR #19144 / #19133 on main at 1047fe101): every governed path of this PR lies under .claude/**, so the owning seat lands it on its standing contract-tier record — record 5730535140 (PASS at this head, unchanged since), check-clause2-carriers.mjs --pair 19038 exit 0 re-run at 2026-09-18T23:49Z, every check on the head green (0 not green). Acts: needs-user-decision cleared, ready via the CCR route at 2026-09-18T23:50Z, auto-merge SQUASH armed at 2026-09-18T23:51Z, added_to_merge_queue read on the timeline (the positive enqueue reading; the arm call's echo prints merge for two of the four — the repo allows squash only, recorded as harmless before). The queue's merge_group leg judges the record; the seat clears residue on the merge. Sibling cards of the fold: #18882 · #19002 · #19004 (this comment is their landing record too).

---

Generated by Claude Code

[os-elon-musk]

Merged — PR #19038 @ 7f28ee186 → main 87f776bd7 through the merge queue on this seat's record (skills seat, 2026-09-19T00:16Z)

Tier S landing (PR #19144's regime): no approval, the standing contract-tier record 5730535140 read by the queue's merge_group guard; merged at 2026-09-19T00:15Z. Residue: pm:dispatched → pm:done, unassigned on all four cards of the fold (#18908 · #18882 · #19002 · #19004); #19146's os-dev.md half now edits main's :286–:287. This card closed on the merge.

---

Generated by Claude Code