[PM seat] domain:spec (+surface/tooling) — 🟢 os-zhuang (session_01225pUjnCKWqxcc1PeqKFUq) · 在飞 1 · 本班落地 16

[claude]

Spec-lane PM seat post — 🟢 ACTIVE · round 10 in flight (1 dev) · 本班落地 16. Occupant: session session_01225pUjnCKWqxcc1PeqKFUq (os-zhuang), took over 2026-08-16T06:05Z, invoked as /pm-dispatch spec.

Scope

Three routing labels since the 2026-08-14 lane merge (maintainer 「同意」): domain:spec + domain:spec-surface + domain:spec-tooling. Satellites #6298/#6018 stay 🔀 merged here. Exclusivity ruling (「其他人不得接手」) extends over the merged scope.

⭐ Standing tasks

1. 未知键静默剥离仍是全仓默认:把 #3405 的 strict 收紧从一个 schema 推广到整个可授权面(ADR-0078 完整性闸门) #4001 campaign: CLOSED (maintainer 「4001 关了吧」) — terminal re-measure landed (docs(audits): the #4001 strictness campaign's closing record — terminal re-measure, one instrument start to final #9095), closing record on main, posture held by four mechanical gates. Retired.
2. Findings first-touch grading round — every shift. ✅ Run this shift 06:15Z. Next shift runs its own.

Frame: zero-rot, not zero-inventory. Acceleration mandate discharged twice (queue emptied at round 8; refill cleared at round 9).

In flight (round 10, claimed 19:10Z)

• rest emits two error codes outside the closed ADR-0112 vocabulary — FIELD_VISIBILITY_UNRESOLVED has no ledger entry and no test anywhere #8885 (Bug, semantic face) — fable. Branch claude/issue-8885-rest-wire-codes-ledger. REST wire codes outside the ADR-0112 union. Re-priced at claim: FIELD_VISIBILITY_UNRESOLVED already registered by feat(spec): register the dispatcher conformance gate's reported error codes in ERROR_CODE_LEDGER #9170 ⇒ remaining scope = population sweep (count before registering), RECORD_NOT_ACCESSIBLE register-or-collapse (wire fork — dev measures, escalates rather than guesses), tier-3 code+status 503 pin. Scope fence: sendError overload typing is The REST door's own sendError overload does not narrow, so an unregistered error.code reaches the wire there too #9098's (cli). pm:blocking: The REST door's own sendError overload does not narrow, so an unregistered error.code reaches the wire there too #9098 queues behind. May return Part of + decision escalation rather than Fixes — expected outcome, not a deviation.

Queue

• Freeze note on assertControlledByParentWrite — the guard is the sole enforcement for three authorable master-reference shapes until the #8772 ramp completes #9137 / spec builder: force required: true on a master_detail reference under controlled_by_parent (ruled Direction 2 of #8772) #9138 (A controlled_by_parent object may declare its master reference without required, so the master-access guard is the only thing preventing an unreachable orphan detail row #8772 family, 13:28Z) — no domain label yet; triage seat owes them a lane before anyone claims. spec builder: force required: true on a master_detail reference under controlled_by_parent (ruled Direction 2 of #8772) #9138's face reads spec-builder; watch for the label.
• pm:blocked: [contract] GlobalFilterSchema.options: should the spec admit the bare-string shorthand objectui's runtime tolerates, or should the tolerance retire? #7917 (waits on objectui#4356). Decision inbox: An unknown top-level stack key is named but still not rejected — and the diagnostic is not a warning, so objectstack validate --strict cannot catch it either (17.0.0 GA) #8687 (route A/B, recommendation B; label restored 16:34Z after the day's 4th labeler clobber — audit comment on card). On-hold + v18 train unchanged. Parked: 定位裁决:知识库(RAG)= 契约在核心、引擎靠集成、能力归企业版 —— 重启触发条件记录(#3896 移除 agent.knowledge 后的正式定位) #4606.

Shift record (running)

✅ MERGED ×16, all content-probed on origin/main:
Rounds 1–7: #9020 (#8934) · #9045 (#4001 slice) · #9073 (#8836) · #9088 (#8163) · #9095 (#4001 terminal) · #9104 (#9068) · #9113 (#9019) · #9123 (#9040) · #9128 (#8993) · #9136 (#9060) · #9146 (#9041).
Round 8: #9155 (#9078 console-route JSDoc) · #9158 (#9091 postgres URL pg-grammar — pgParseableUrl, dep pg-connection-string, fs-param refusal inherits the ssl-block prescription).
Round 9: #9168 (#9109 hermetic harnesses ×2 — card's "third" was #9104's file; skip-changeset + failed-job rerun) · #9169 (#9125 mysql ssl doc) · #9170 (#8846 — 7 codes registered, ratchet discharged in-PR, exclusions pinned; pm:blocking unlock processed → #8885 round 10).
✅ #4001 anchor closed · findings grading round · cross-lane: #9037→devx #9048 · #9068→#9104 · #9116→pm #9143 · #9109→#9168 · #9074/#9127/#9147 filed by devs · compliance-bundle spec half landed (#8992 seat notified).

派发前必查

• ⚠️ [Decision] sys_* objects silently default to PUBLIC row visibility — should the platform's own objects keep an unstated default at all, and is isSystem even the right predicate? #8641 trigger files: sys-verification* / sys-jwks* / sys-oauth* / new record-bearing *.object.ts.
• ⚠️ [spec] 13 of 49 declared field types have no Field.* builder, so authors silently drop to the literal { type: … } form #8656 opportunistic trigger: Field builder object edits in field.zod.ts only ⇒ declared rider (Field.time), fable-tier, never on a sonnet card.
• Hot files: packages/spec/src/migrations/registry.ts (generated; second lander runs scripts/pm/os-regen-merge.sh) · packages/spec/src/api/error-code-ledger.zod.ts is warm (feat(spec): register the dispatcher conformance gate's reported error codes in ERROR_CODE_LEDGER #9170 landed, rest emits two error codes outside the closed ADR-0112 vocabulary — FIELD_VISIBILITY_UNRESOLVED has no ledger entry and no test anywhere #8885 in flight on it — serialize any third card).
• ⚠️ Labeler whole-group PUT eats fresh manual labels (4 hits 2026-08-16, latest: An unknown top-level stack key is named but still not rejected — and the diagnostic is not a warning, so objectstack validate --strict cannot catch it either (17.0.0 GA) #8687 needs-user-decision). Every label write: read back after ~30s; restore with audit comment, never re-adjudicate.
• ⚠️ Platform facts: MCP list_issues multi-label = OR ([finding] The GitHub MCP list_issues multi-label filter is OR (union), not AND — a two-label query returns every issue carrying either label #8942) · big tool results spill to file · sanitizer eats angle-bracket tokens · zero-hit prose grep must control for backtick spelling · event delivery can lag ~100min (measured 17:07 events at 18:47) — on any wake, re-fetch state before acting; timers expose true clock via fire_at.

Standing rules (carried)

Merge-queue-triage comment = ONE build signal · negated closing keyword still closes · generated reference page isn't the defect — the schema is · a card's remedy can be ahead of main · retirement on non-strict object = retiredKey() tombstone · labels can lie dispatchable — read the thread · unpushed commit is the only fragile state · a key's verdict doesn't generalise across components · closure-comment scope tables can be stale — re-verify EVERY row · calendar-date fixture = time bomb (#8937) · a source revert isn't a revert when the consumer resolves from dist/ · an optional hook whose absence is silent re-creates the defect it guards · measure the producer against the INSTALLED package (#5247) · fixture git harnesses must be hermetic (#9068/#9109 — class CLOSED this shift) · an inherited route fork isn't re-asked (#9040/#8082/#8337) · setup-step death before test bodies = infra, requeue; other new signatures = card + single justified requeue · a card filed before a sibling lands can be part-discharged by it — re-price the premise at claim, not at review (#8885/#9170).

Timers

• Patrol shot 19:30Z (trig_01WyfSWjcAXT4WUMtGEBDa2M) — round-10 dev probe + closeout text; re-arms itself.

[qq9340100]

审计:座位贴说明段刷新(session_011M7UwH25Unfi73UHim7ajY,2026-08-06 15:5xZ)。要点:第 1 轮 5/5 MERGED 零返工收官(#5964/#5967/#5976/#5973/#5983);第 2 轮 8/8 在飞(维护者 batch:8 清队指令,含维护者指定接管的 #5837 分片 P0 与提前的 #5551);落地闸序与跨车道通知(#5859/#5541 解锁、objectui#3499)已登记于正文。仅动本贴。

---

Generated by Claude Code

[qq9340100]

审计:正文刷新为 ⏸️ 暂停态(2026-08-07 05:5xZ,维护者指示「rc.4 门集 + 在飞收完即暂停」)。班次终账:三轮 20 PR MERGED、rc.4 门清、SKILL 沉淀三条、唯一悬置 #6160 等维护者表态(正文有处置分支)。重启条件与队列余量见正文。经办:会话 session_011M7UwH25Unfi73UHim7ajY。

---

Generated by Claude Code

[qq9340100]

审计:班次收官刷贴(2026-08-07 08:2xZ)。终账 21 PR MERGED / 零实现级返工 / rc.4 门清 / v17 协议盘子扩编 10+2 单 / SKILL 沉淀三条 / 转席核可一单(#6184)/ findings 七张。悬置清零,定时器链与 PR 订阅全清,座位维持 ⏸️ 暂停,重启条件 = 维护者示意。经办:会话 session_011M7UwH25Unfi73UHim7ajY。

---

Generated by Claude Code

[qq9340100]

审计:复岗(2026-08-07,rc.5 发布后维护者示意)。轮 4 = v17 协议面收口战役,开工序见正文;首批派发 #5867 ADR 卡(M,subagent)+ #6083 裸名翻转(XL,mode:cloud 单容器)。经办:会话 session_011M7UwH25Unfi73UHim7ajY。

---

Generated by Claude Code