fleet-write: relay pr_create asks the governed approvers to review a Tier H draft before any contract review exists, so an approver can approve and merge it unreviewed (#26566, #26570) #26617

Filed by the domain:skills#2 seat (session_01LqKsGyMNFwwnbF5FTAqyPn, seat post #19287) on the maintainer's word in the seat thread, 2026-10-27 10:28Z: 「关键是还没有契约复审,你就推送给我审核了,这个是skills 的问题」, then 「只开卡,不要派发」. ⛔ Not a claim, ⛔ not a dispatch — the maintainer asked for the card only. Dedupe: the 400 most recently updated issues and PRs (open + closed), title and body grepped for requested_reviewers, governedReview, GOVERNED_REVIEW, review request, 请审, before the contract review → no card asks for this.

Business reason: a Tier H PR is put in front of an approver the moment it opens as a draft, before the independent contract review and the seat's ## 席位核对 exist. The approver reads a request to review as "ready for my approval", approves, readies and enqueues it, and it lands with no contract-review record. That happened twice on 2026-10-27 10:05Z: PR #26566 (card #26502, skills/**) and PR #26570 (card #26071 step iii, .github/workflows/**) were approved by os-zhuang at 2026-10-27 09:49Z–2026-10-27 09:51Z and merged with no ## Contract review on either (landing records 6439075580 on #26502, 6439087515 on #26071). The maintainer called it a pm-dispatch (skills lane) defect.

Where (origin/main at f9867020)

• scripts/pm/fleet-write/ops.mjs: the pr_create row carries governedReview: true (L867, comment 「The draft open is the moment the platform's CODEOWNERS is silent」); pr_ready carries it too (L904). GOVERNED_REVIEW_OPS (L969) derives ['pr_create', 'pr_ready'] from those flags. The header section 「The governed-review follow-up」 (L95–L130) states the design: on a Tier H hit, request every GOVERNED_APPROVERS account not already requested, assigned or reviewed — at the draft create, so 「a seat-driven Tier H pull」 does not wait 「on an approver nobody told」.
• scripts/pm/fleet-write/execute.mjs: requestGovernedReview (header L189–L210, body around L820–L858) reads the file list, plans against the register and sends the requested_reviewers POST plus the author-assignee fallback.
• .claude/skills/pm-dispatch/SKILL.md L198: 「③ 中继 pr_create/pr_ready 命中 Tier H 即向 GOVERNED_APPROVERS 中未请/派/审者请审」 — the skill teaches the same timing.
• Measured on the two PRs: the dev reports for skills(automation): the runAs 'system' guidance in objectstack-automation never says a system flow, hook or action body is refused identity-assignment writes #26502 (6437384338) and [Decision] Scheduled and bot workflows: the 4-hourly lint run repeats the push run, four daily patrols are four workflows, four PR-body guards are four runners — consolidate, and to what cadence #26071 (6437417906) both read 「reviewers hotlong and os-zhuang requested by the relay」 at pr_create, hours before any review was due.

Wanted

The approver request for a Tier H PR moves from the draft open to the hand-off: it is sent only after the contract review PASS on the current head and the seat's ACCEPT are on the PR. Shapes for the implementer to choose between (say which in the PR body):

1. pr_create loses governedReview; the follow-up runs at pr_ready only, and the seat, at Tier H hand-off, sends pr_request_reviewers (the existing op) as the step that puts the PR in front of the approver. SKILL.md L198 and its neighbours say so, ⛔ inside the line ratchet (check:pm-skill-ratchet, SKILL.md at its ceiling — reword inside lines).
2. Or the follow-up stays on pr_create but sends nothing for a Tier H draft, and a new seat-side step (or pr_request_reviewers) requests the approvers once the records exist.

Either way: the H43 half-state row in check-half-states.mjs (the 「approver nobody told」 gap) must read the new timing — a Tier H draft with no contract review yet is NOT a half state; a Tier H PR with PASS + ACCEPT and no approver request IS. The execute.mjs / validate.mjs self-tests pin the new rows. ⛔ No change to GOVERNED_APPROVERS, to the queue guard, or to the draft-forcing of pr_create.

Acceptance: a relay pr_create of a Tier H draft sends no requested_reviewers POST (self-test and one live run quoted); the seat's hand-off step requests the approvers and the H43 row agrees; pnpm check:pm-dispatch-gates, execute.mjs --self-test, validate.mjs --self-test, check-half-states self-test and check:pm-skill-ratchet green.

Tier: .claude/skills/pm-dispatch/SKILL.md is a MANDATORY_TIER_GLOB row (CONTRACT_REVIEW_TIER); scripts/pm/fleet-write/** lands Tier S. ⚠️ The ceiling tier is exhausted for this account today (the maintainer's word 2026-10-27 07:14Z); the maintainer asked for this card to be filed only, not dispatched. Size: S. Clause-②: no. Metadata-protocol: none.

Related open reading, not this card: the approver can still enqueue a Tier H PR with no review record at all — the queue guard admits an authorised enqueue (#26230). This card only stops the relay from inviting that early.

Generated by Claude Code