[objectstack-fleet]

Fixes #96 · Fixes #100 · Fixes #20 — Refs #11 · Refs #38 · Refs #82 · Refs #107 · Refs #109 · Refs #28 · Refs #31 · Refs #133 · Refs #134 · Refs #169 · Refs #43 · Refs #19 · Refs #186

⚠️ Governed surface (DESIGN.md §03 / §04, AGENTS.md, docs/design/**): the seat opens it; the maintainer merges it. Every line below is copied from a recorded ruling or from the dev's measured proposal that the ruling assigned to this PR — no new decision is taken here.

What changed

Card · ruling	File · place	Change
#96 · 6395827965 step 1	DESIGN.md §03 clm_contract_version	is_current boolean（每份合同至多一个当前版本：标记一个即取消其余，hook 强制，各入口一致；新的谈判版本默认为当前；final_signed 不夺取当前标记） (code: PR #112)
#96 · same	docs/design/00 §5.5 rule, state diagram, guard table	「存在清稿」→「当前版本为清稿」 — the guard contract.hook.ts actually runs
#100 · 6393735625	DESIGN.md §04 permission matrix + sharing table	records: R（approved 及之后）U（signing 及之后；执行与归档字段）; contract_records_execution row reads the approved read window (code: PR #113, two rules because a rule carries one access level)
#11 · 6395821523 step 1	DESIGN.md §04, after the action-gate line	the 门控 × 持有者 table, verbatim from the ruling (code unchanged; matches src/profiles/*.profile.ts)
#20 · 6396457129 step 3	DESIGN.md §03 clm_contract	our_entity* lookup sys_business_unit（签约主体：kind = company 且启用的业务单元；演示种子三家） (code: PR #118)
#38 · 6396324694 + 6398275254	DESIGN.md §03	clm_contract_type.template_placeholders removed; 「模板文件和占位符」→「模板文件」; clm_signature.notes removed (ruling C — code: PR #121); envelope_id / signers carry their scheduled consumer (#83 / objectstack-ai/objectstack#25747); clm_party row matches the object (verified_at → country_code and screening_status)
#38 · same	DESIGN.md §08 相对方筛查	writes screening_status only (screened_at removed by PR #116)
#107 · 6398591124 (batch 7, lane follow-through)	DESIGN.md §13 Q6	the 落实 cell gains a pointer to the ruled HotCRM → CLM category map and selection rule; the 裁定 cell is unchanged (§13 keeps ruled answers as written)
#109 · #20 ruling 6396457129 step 5	DESIGN.md §03 clm_contract	department lookup sys_business_unit（发起部门：kind = department，可选；演示种子七个） (code: PR #128)
#134 · 6422705361 (A, finance half)	DESIGN.md §04 sharing table	contract_finance_routed row: route_finance == true → position clm_finance_controller — read（审批中只读；编辑仍自 approved 起，§13 Q1） (code: PR #153)
#134 · same (A, rung-1 half)	DESIGN.md §04 sharing table	contract_manager_reports row: the pending direct manager's read comes from the platform from 18.2.0 (objectstack#26180); the app declares no rule (code: none — README by PR #164)
#133 · 6422701531 (A)	DESIGN.md §04 permission matrix + FLS table	clm_party requester cell RC（不含银行账号与电话；风险标记、风险说明、筛查结果、启用状态与开户行只读）; new FLS row for risk_flag · risk_note · screening_status · is_active · bank_name (clm_requester 只读) — the dev's measured proposal (code: PR #154)
#31 · 6396322580 (C; 1C + 2B stand)	DESIGN.md §02 Insights row, §09 dataset + 法务工作台 bullets and the durations paragraph, §12 gap table	durations delivered on the 18.2.0 duration measure; 平均审批周转 replaces 审批吞吐; per-type 「超 SLA」 tracked at objectstack#26601, fixed 30-day tile stays; new §12 row — the dev's measured proposal (code: PR #168)
#28 · 6396320437 (D)	DESIGN.md §10 last paragraph	demo accounts are declared in demoStaff and created by the platform on the demo boot; the roster; the line manager stays a manual step (objectstack#26616) — the dev's measured proposal (code: PR #171)
#169 · triaged defect	DESIGN.md §03 clm_contract roll-ups + state-machine note	approved_legal_review_count · current_clean_version_count · final_signed_version_count; the three buttons read them through disabled, the hook still refuses — the dev's measured proposal (code: PR #173)
#43 · 6395823636 (A)	DESIGN.md §04 action-gate line + holders table, §06 F16 row	new backfill_contract gate (records, legal, admin) on the F16 action and the executed_upload flow; the dialog asks for the business owner owner_id, and legal still sets legal_owner on the record — the dev's measured proposal (code: PR #177)
#19 · 6396327991 (D) · #186 · seat call	DESIGN.md §10 clm_contract_version and clm_review rows	the 300 versions carry demo PDFs via seedFile, one current version per contract; seeded reviews are dealt by stage (legal owner, finance or the legal head before approval, legal head, requester) — the devs' measured proposals (code: PRs #185, #189)
#82 · 6393739591 (「AGENTS.md 那句启动告警规则需要维护者补一句豁免」)	AGENTS.md boot rule	one sentence: the NOT bound — disabled by deployment policy notice under the platform default is by design; pnpm demo binds the sweeps (code: PR #111)

Not here: #11 step 3 (isDefault + declared capabilities) is code only and landed as PR #122.

Gates

Docs only; CI Validate on the head runs pnpm verify's four gates.

Acceptance notes

• Every code PR this text describes is on main (Turn on the platform's scheduled work for pnpm demo; README says how a deployment does the same #111, The contract page's new-version form defaults "Current" off, and two versions of one contract can both be current #112, Records reads approved contracts so the holder of execute_contract can press Start Signing #113, Remove clm_party.screened_at and clm_contract_type.template_placeholders; note the e-sign fields' scheduled consumer (#38 groups 3 and 1) #116, our_entity is a lookup to the platform's sys_business_unit (kind company), seeded as data #118, Remove clm_signature.notes, which only the demo seed fills (#38 ruling C) #121, Every member holds clm_requester by default; the app declares its eleven capability tokens #122, clm_contract.department is a fixed option list — make it a lookup to the platform's sys_business_unit, as #20 ruled for our_entity #128, The finance approver can open the contract it is asked to approve #153, The launch wizard offers every business requester a "new counterparty" step that always fails — create_party is refused for clm_requester #154, The direct manager can open the contract they are asked to approve #164, Stage durations on the 18.2.0 duration measure; per-type over-SLA still blocked #168, pnpm demo creates its demo staff, so every persona opens 我的合同 out of the box #171, Send for Approval, Start Signing and Activate are offered while their precondition is unmet, then refused after the click — grey them out with disabled #173, §06 F16 说补录动作「档案岗或法务可用」，但实现只能给档案岗——权限是 AND，没有两边都持有的能力 #177, The demo seeds 300 contract versions and documents that download #185, Seeded reviews name the Dev Admin as reviewer instead of the legal staff #189), so the text and the code now agree on merge.

🤖 Generated with Claude Code

https://claude.ai/code/session_017nzWFRUo2U7evMkPdVniAn