docs(pm): the dev's writes go through the fleet tools; platform-readings records the relay's first readings

[objectstack-fleet]

Fixes #19739

Clause-②: no

What changed

Two files, both governed (.claude/**, Tier S, CONTRACT_REVIEW_TIER).

.claude/agents/os-dev.md — where the file speaks of the dev's GitHub writes (rule 3):

• the dev's GitHub writes leave through the scripts/pm/ write tools; in a cloud container they take the fleet-write relay and land as objectstack-fleet[bot];
• attribution stays the session id in the text, not user.login; git push is not a REST write and does not take the relay;
• the four-write budget names pr_create (the relay's op for the draft PR) and label-write instead of the raw REST paths.

Net +1 line there, paid in place by retiring the footer-shape-per-channel rule at the file's end (old line 402): AGENTS.md's attribution paragraph states it in full (「what a body write does to the footer depends on the CHANNEL … and the ACTION … ⛔ never generalise one to another … read the body back after every write」), and the line that follows still points at that paragraph. Nothing re-wrapped; the count stays 403 (ceiling 403, headroom 0).

.claude/skills/pm-dispatch/references/platform-readings.md 〈API 配额〉, two readings beside the write-pace rows:

• the relay's first live readings — run created 5 s after the dispatch, job at 17 s, the comment written at 22 s, tool wall 31 s; the OS_FLEET_DISPATCH_START_MS 90 s and OS_FLEET_DISPATCH_TIMEOUT_MS 5 min ceilings unchanged (source: the closure comment on Fleet writes as objectstack-fleet[bot] from cloud seats: a repository_dispatch relay workflow in objectstack + a dispatch transport in the five PM write tools (maintainer direct dispatch, 「方案 1」) #19701, probe 2);
• write-pace counts a dispatch as the write, the 40-per-hour budget unchanged; close-cards spends one dispatch per step (the comment through post-stamped, the label write, the close as one issue_patch).

Paid in place (+2 / −2): the two red-window rows retired are restatements of their neighbours — 「红窗里 draft 翻转与 auto-merge 挂载照常走 ccr REST,⛔ 不为它们守候」 is said by rows 143–144 (「守候只给上面那几件 GraphQL-only 的,⛔ 其余一切不为配额空等」 and 「红窗里照样走 ccr REST 挂载」), and 「其余动作(评论、标签、请审、读、timeline)照常走 REST」 is row 143's 「其余一切」. Count stays 469 (ceiling 469, headroom 0).

Landing order

⛔ Serial: PR #19737 (#19061 step ③) holds both of these files and lowers os-dev.md's ceiling 403 → 402 by retiring one line there. This PR is built on origin/main at 544767d and lands after PR #19737 merges; it will be rebased then (expected: a clean rebase — different lines in both files — and the os-dev.md count landing at 402 against the lowered ceiling). Not enqueued by this dispatch. The director seat renders the ## Contract review of record. skip-changeset: nothing published; this dispatch forbids label writes, so the label is the seat's to apply.

The optional AGENTS.md :417 clause (card item 5, Tier H) is not in this PR; the dev's reading of whether the paragraph is false without it is in the report on the card.

Verification

Gates derived by node scripts/pm/dispatch-gates.mjs --repo objectstack-ai/objectstack --commands on the edited tree at 883e80f; each run alone, exit captured before any pipe (cmd > log 2>&1; ec=$?).

command	exit	verdict line
node scripts/check-closing-keyword-parity.mjs	0	• packages/spec/CHANGELOG.md -- 6080503 bytes exceeds the sweep's 2097152-byte cutoff for UNREGISTERED files
node scripts/check-closing-keyword-parity.mjs --self-test	0	✓ check-closing-keyword-parity --self-test: 40 assertions, 5 mutations of the shipped parsers each driven to r
node scripts/check-comment-mask-corpus.mjs	0	✓ comment-mask corpus sweep [scripts/js-comment-mask.mjs]: 7011 files, 0 disagree, 0 unparseable, 93.4s (compa
node scripts/pm/check-governed-queue-guard.mjs --self-test	0	✓ check-governed-queue-guard self-test: 312 cases pass (register-driven verdicts, the queue/PR event split, la
node scripts/pm/check-harness-current.mjs --self-test	0	check-harness-current --self-test: all 26 cases passed.
pnpm --filter @objectstack/lint run check:doc-formula-expressions	0	#11673).
pnpm check:agent-model-declared	0	0 justified inherit(s); no definition leaves its tier to the dispatching session.
pnpm check:agent-test-spelling	0	which drives this same sweep RED over a temp tree on disk.
pnpm check:commit-card-trailers	0	✓ check-commit-card-trailers self-test: 81 cases pass.
pnpm check:cross-package-test-inputs	0	OK: 29 package(s) read outside themselves, all declared, and turbo.json hashes every declared glob (6 of them
pnpm check:doc-authoring	0	✓ doc authoring guard: sibling-package prose ids hold the baseline — 819 pinned site(s) across 231 file(s), 90
pnpm check:driver-memory-census	0	check-driver-memory-census: OK — every declaration is ledgered, every ledger entry is live, and every ruled fi
pnpm check:gitlink-declared	0	check-gitlink-declared: OK (9246 index entries -- 0 gitlink(s) at mode 160000; no .gitmodules in the index, so
pnpm check:nul-bytes	0	check-nul-bytes: OK (scanned 9239 text file(s) -- 9239 tracked, 0 untracked-not-ignored; skipped 7 binary; no
pnpm check:pm-governed-merges	0	live: the real generator declared 9 output(s) and certified this tree
pnpm check:pm-half-states	0	✓ check-half-states self-test: 5170 cases pass. Batteries: H66 released queue card 183/172, H19 judged-set fou
pnpm check:pm-skill-id-lint	0	✓ check-skill-id-lint: 30 file(s) clean (pattern /#[0-9]{3,}/g).
pnpm check:pm-skill-ratchet	0	✓ check-skill-line-ratchet: declared cross-file moves: 1, total ceilings down 9 lines.
pnpm check:refd-timer-probe	0	1 code site(s), all inside the approved module, which is present and still reads it.
pnpm check:required-contexts	0	governed-surface-guard.yml:governed-surface-guard → 'Governed Surface Queue Guard'
pnpm check:skill-frame-sync	0	binding sentence present in it; 1 count mention(s) agree; 77 markdown files scanned for undeclared copies.
pnpm check:watch-hint-literal	0	✓ check-watch-hint-literal: 71 declaration(s) across 4 rostered name(s) -- ROOT_DIR_WATCH_HINTS 47, ROOT_FILE_

Also run on this tree, named by the dispatch and not in the derived list: pnpm check:skill-frame-freshness exit 0 · pnpm check:pm-governed-prose exit 0. --ran reconciliation: ✓ dispatch-gates --ran: 22 derived famil(ies) accounted for — 22 run, 0 NOT-MEASURED (a DERIVED zero — all 22 recorded an exit code and none of them is 3).

维护者速读(草稿)

改了什么:两处文字。① dev agent 定义:dev 自己的 GitHub 写(报告评论、开 draft PR、打标签)一律经 scripts/pm/ 的写工具,云容器里这些工具走 fleet-write 中继、以 objectstack-fleet[bot] 落地;git push 不是 REST 写、不走中继。② 平台读数表:中继首批实测(dispatch 后 5 s 建 run、17 s 起 job、22 s 评论落地、墙钟 31 s;90 s / 5 min 两个上限不动),write-pace 把一次 dispatch 记作一笔写(40/时不变),close-cards 每步一次 dispatch。行数预算在本文件内付清,各退一到两行已在别处原样陈述的规则。

为什么改:中继已在 main 上活着(探针 2 以 App 身份落地),fleet-write 派生会话那张卡落地后云席位不再导出任何变量;但 dev 定义里仍写着「curl 带 GITHUB_TOKEN 直写」,读数表里没有中继的任何数字。文字不改,dev 会照旧直写、以自己的用户身份落地。

风险与代价(含回滚):只改文字,不加门禁、不加钩子、不动上限。风险一:本 PR 与 PR #19737 同持两文件,本 PR 在其后落地、届时 rebase(预期无冲突,os-dev.md 行数落到 402 与降后上限相符)。风险二:os-dev.md 里 pr_create 是中继的 op 名,本地检出的 dev 仍走 with-fleet.sh -- … 直连,文字未展开这一分支。回滚 = revert 本 PR,无状态残留。

席位意见:(留空,席位定稿)

你要做的:等 PR #19737 合并后,由席位 rebase 本 PR 并出 ## Contract review;AGENTS.md :417 那一句是否要加(item 5)由总监席按报告决定,不在本 PR。

---

Generated by Claude Code

[objectstack-fleet]

Contract review

Served-tier: CONTRACT_REVIEW_TIER
Head-sha: 883e80f2dc18666e072d4ebf453c206bd2180af9

① Derived judgments

Rendered in-seat by the director seat (summon #27, session_0129ZpnaBcYZZ51rCvQiXg6C, the fable tier). The contract is #19739's re-ruled body, items 2 and 4: the dev's own writes go through the fleet tools (and so the relay in a cloud container; git push unchanged), and platform-readings.md 〈API 配额〉 records the relay's first live readings; ⛔ nothing else.

• (a) Two files, +3 / −3 and +2 / −2, each paid in place — right. os-dev.md rule 3: the REST-with-GITHUB_TOKEN sentence becomes 「经 scripts/pm/ 写工具;云容器里经 fleet-write 中继落为 objectstack-fleet[bot]」, attribution stays the session id, git push named as not a REST write, the four-write budget re-spelled with pr_create and label-write; the retired footer-shape line (old :402) is stated in full by AGENTS.md's attribution paragraph, and the next line still points there. platform-readings.md: the two readings (5 s / 17 s / 22 s / 31 s from Fleet writes as objectstack-fleet[bot] from cloud seats: a repository_dispatch relay workflow in objectstack + a dispatch transport in the five PM write tools (maintainer direct dispatch, 「方案 1」) #19701's closure 5780144988; write-pace counts a dispatch as the write, close-cards one dispatch per step) beside the write-pace rows; the two retired red-window rows are restated by :143–144.
• (b) No behaviour is asserted that main does not have — right. Every named mechanism is on main since ed4b655e.
• (c) Serial constraint stated and honoured — right. PR pm: retire the needs:contract-review label from the tree (ruling B step ③) #19737 (Retire the in-seat clause-② contract review — the rule, its gate label, and the 9k-line checker's gate role #19061 step ③, Tier H) holds both files and lowers os-dev.md's ceiling by one; this PR stays draft until pm: retire the needs:contract-review label from the tree (ruling B step ③) #19737 merges and is rebased then (expected clean: different lines). ⛔ Not enqueued by this review.
• (d) AGENTS.md :417 (card item 5) is outside this PR; the dev's reading on the card decides the sibling — the director's call, recorded on the card.

② Verdict

PASS, held. Lands after PR #19737 merges; the seat re-reads the rebased head against this record before enqueuing.

---

Generated by Claude Code

[objectstack-fleet]

Contract review

_{Record of record for this head, re-posted with the Reviewed-by: line and the **VERDICT: PASS** spelling the queue guard reads (the 02:04Z record lacked both — the guard removed PR #19770 from the queue at 02:05Z on that omission). Judgments unchanged.}

Served-tier: CONTRACT_REVIEW_TIER
Head-sha: 883e80f2dc18666e072d4ebf453c206bd2180af9

① Derived judgments

Rendered in-seat by the director seat (summon #27, session_0129ZpnaBcYZZ51rCvQiXg6C, the fable tier). The contract is #19739's re-ruled body, items 2 and 4: the dev's own writes go through the fleet tools (and so the relay in a cloud container; git push unchanged), and platform-readings.md 〈API 配额〉 records the relay's first live readings; ⛔ nothing else.

• (a) Two files, +3 / −3 and +2 / −2, each paid in place — right. os-dev.md rule 3: the REST-with-GITHUB_TOKEN sentence becomes 「经 scripts/pm/ 写工具;云容器里经 fleet-write 中继落为 objectstack-fleet[bot]」, attribution stays the session id, git push named as not a REST write, the four-write budget re-spelled with pr_create and label-write; the retired footer-shape line (old :402) is stated in full by AGENTS.md's attribution paragraph, and the next line still points there. platform-readings.md: the two readings (5 s / 17 s / 22 s / 31 s from Fleet writes as objectstack-fleet[bot] from cloud seats: a repository_dispatch relay workflow in objectstack + a dispatch transport in the five PM write tools (maintainer direct dispatch, 「方案 1」) #19701's closure 5780144988; write-pace counts a dispatch as the write, close-cards one dispatch per step) beside the write-pace rows; the two retired red-window rows are restated by :143–144.
• (b) No behaviour is asserted that main does not have — right. Every named mechanism is on main since ed4b655e.
• (c) Serial constraint stated and honoured — right. PR pm: retire the needs:contract-review label from the tree (ruling B step ③) #19737 (Retire the in-seat clause-② contract review — the rule, its gate label, and the 9k-line checker's gate role #19061 step ③, Tier H) holds both files and lowers os-dev.md's ceiling by one; this PR stays draft until pm: retire the needs:contract-review label from the tree (ruling B step ③) #19737 merges and is rebased then (expected clean: different lines). ⛔ Not enqueued by this review.
• (d) AGENTS.md :417 (card item 5) is outside this PR; the dev's reading on the card decides the sibling — the director's call, recorded on the card.

② Verdict

Reviewed-by: session_0129ZpnaBcYZZ51rCvQiXg6C

VERDICT: PASS (held) — lands after PR #19737 merges; the seat re-reads the rebased head against this record before enqueuing.

---

Generated by Claude Code