@@ -601,6 +601,21 @@ jobs:
         continue-on-error: true
         run: pnpm check:adr-anchors
 
+      # #26076 ADR index, REPORT-ONLY by the maintainer's ruling (门禁不加).
+      # docs/adr/README.md is generated by scripts/adr-index.mjs from the
+      # records' one `**Status**:` line; the alias runs the generator's
+      # `--self-test` (fixtures only — it never asserts on what the records
+      # say) and then `--report`, which prints a `::warning::` for a stale
+      # index or a record whose status line is missing or unreadable and exits
+      # 0 whatever it finds. So the only red this step can show is a broken
+      # generator, never a record. `pnpm adr:index` regenerates; `--check` is
+      # the gate's spelling for the day a maintainer names one. Alias form per
+      # the GATE INVOCATION IDIOM note at the top of this file.
+      - name: ADR index is current (report-only — warnings, never a red on a record)
+        id: adr-index-current-report-only
+        continue-on-error: true
+        run: pnpm check:adr-index
+
       # @objectstack/verify stand-in erasure guard (#6399). The third and
       # narrowest member of the slot-lookup and query-options erasure ratchets
       # (in the scoped lanes since #22991). `checkReadCoercion` /
 
@@ -1,6 +1,7 @@
 # ADR-0006: Environment & Project as Independent Siblings — v3
 
 **Status**: Superseded by v4 (`0006-project-environment-split.v4.md`) — 2026-05-20
+**Versions of this number**: [v2](./0006-project-environment-split.v2.md) · [v3](./0006-project-environment-split.md) · [v4, current](./0006-project-environment-split.v4.md) — one decision revised twice; the number is shared only by its own revisions (AGENTS.md Prime Directive 13). A version is cited as `ADR-0006 v4` in prose or, stem-qualified, as `ADR-0006-project-environment-split.v4`.
 **Date**: 2026-05-20 (v3)
 **Deciders**: ObjectStack Protocol Architects
 **Supersedes**: v1 (strict tree), v2 (siblings + sys_deployment join)
 
@@ -1,6 +1,7 @@
 # ADR-0006: Three-Layer Tenancy — Organization, Project, Environment
 
 **Status**: Superseded by v4 (`0006-project-environment-split.v4.md`) — 2026-05-20
+**Versions of this number**: [v2](./0006-project-environment-split.v2.md) · [v3](./0006-project-environment-split.md) · [v4, current](./0006-project-environment-split.v4.md) — one decision revised twice; the number is shared only by its own revisions (AGENTS.md Prime Directive 13). A version is cited as `ADR-0006 v4` in prose or, stem-qualified, as `ADR-0006-project-environment-split.v4`.
 **Date**: 2026-05-20 (v1) / 2026-05-20 (v2 — same day revision)
 **Deciders**: ObjectStack Protocol Architects
 **Builds on**: ADR-0002 (Environment-Per-Database Isolation), ADR-0003 (Package as First-Class Citizen), ADR-0005 (Metadata Customization Overlay)
 
@@ -1,6 +1,7 @@
 # ADR-0006: Environment & Project — v4 (drop dev-workspace Project, unify on Package)
 
 **Status**: Accepted (v4 — supersedes v3) — API-surface vocabulary boundary recorded 2026-08-27 (#12473): the v5.0 `project` → `environment` rename stops at the CLI's user-facing vocabulary; three API surfaces keep `project` deliberately (see the addendum). **D1 retired by execution (2026-08-28, #12867 — see the second addendum):** D2 fired on the maintainer's 2026-08-28 ruling; all three of those surfaces are renamed to `environment` / `environments` with no aliases, authored and parked for one coordinated release. Read the first addendum's D1 as history — the boundary it draws no longer exists.
+**Versions of this number**: [v2](./0006-project-environment-split.v2.md) · [v3](./0006-project-environment-split.md) · [v4, current](./0006-project-environment-split.v4.md) — one decision revised twice; the number is shared only by its own revisions (AGENTS.md Prime Directive 13). A version is cited as `ADR-0006 v4` in prose or, stem-qualified, as `ADR-0006-project-environment-split.v4`.
 **Date**: 2026-05-20 (v4)
 **Deciders**: ObjectStack Protocol Architects
 **Supersedes**: v1 (strict tree), v2 (siblings + sys_deployment join), v3 (siblings + deferred dev-workspace `sys_project`)
 
@@ -1,6 +1,6 @@
 # ADR-0009: Execution-Pinned Metadata
 
-**Status:** Accepted
+**Status**: Accepted
 **Date:** 2026-05-22
 **Supersedes:** —
 **Builds on:** ADR-0008 (Metadata Repository & Change Log)
 
@@ -2,7 +2,8 @@
 
 > **Protocol 18 update (2026-10-12, ADR-0131 C5, #22340):** The per-type overlay opt-in on `MetadataTypeRegistryEntry` is spelled `allowEnvironmentOverlay` from protocol 18 (`packages/spec/src/kernel/metadata-plugin.zod.ts#allowEnvironmentOverlay`). [ADR-0131](./0131-total-organization-ownership-no-null-organization-id.md) D6 retired the per-organization overlay axis, so the key now names the one scope it governs — whether an environment may overlay an item of this type that a managed package ships. The old key `allowOrgOverride` stays on the registry entry schema only as a tombstone that refuses at parse with the new name in its prescription: no second key, no alias, no conversion. The lines below that name `allowOrgOverride` describe the field as it was spelled when they were written and are preserved verbatim.
 
-**Status:** Proposed
+**Status**: Proposed
+**Shares its number with**: [`0010-nl-to-flow-authoring`](./0010-nl-to-flow-authoring.md) (Natural-Language → Flow Authoring) — an unrelated decision under the same number. Numbers are never reassigned (AGENTS.md Prime Directive 13); cite this record unambiguously as `ADR-0010-metadata-protection-model`.
 **Date:** 2026-05-29
 **Supersedes:** —
 **Builds on:** ADR-0005 (Metadata Customization Overlay), ADR-0008 (Metadata Repository & Change Log), ADR-0009 (Execution-Pinned Metadata)
 
@@ -1,6 +1,7 @@
 # ADR-0010: Natural-Language → Flow Authoring (Platform Capability)
 
 **Status**: Draft (2026-05-24)
+**Shares its number with**: [`0010-metadata-protection-model`](./0010-metadata-protection-model.md) (Metadata Protection Model) — an unrelated decision under the same number. Numbers are never reassigned (AGENTS.md Prime Directive 13); cite this record unambiguously as `ADR-0010-nl-to-flow-authoring`.
 **Authors**: HotCRM (objectstack-ai/hotcrm) — surfacing requirements from the v1 launch story
 **Consumers**: `@objectstack/service-ai`, `@objectstack/spec` (automation), `objectui` (plugin-designer, plugin-chatbot), every app that ships flows
 
 
@@ -1,6 +1,6 @@
 # ADR-0014 — `record` Form Field Type
 
-- **Status:** Accepted
+**Status**: Accepted
 - **Date:** 2026-04-17
 - **Supersedes:** —
 - **Related:** ADR-0005 (Metadata Customization Overlay), Prime Directive #1 (Zod First)
 
@@ -1,6 +1,7 @@
 # ADR-0019: App as the Consumer-Facing Unit
 
 **Status**: Proposed (v3 — narrowed to the consumer-surface decision)
+**Shares its number with**: [`0019-approval-as-flow-node`](./0019-approval-as-flow-node.md) (Collapse Approval into Flow — approval as a durable-pause node) — an unrelated decision under the same number. Numbers are never reassigned (AGENTS.md Prime Directive 13); cite this record unambiguously as `ADR-0019-app-as-consumer-unit`.
 **Date**: 2026-05-31
 **Deciders**: ObjectStack Protocol Architects
 **Builds on**: ADR-0003 (Package as First-Class Citizen), ADR-0006 (Three-Layer Tenancy), ADR-0016 (Studio Package Authoring & Publish)
 
@@ -1,6 +1,7 @@
 # ADR-0019: Collapse Approval into Flow — one engine, approval as a durable-pause node
 
 **Status**: Accepted (2026-05-31) — fully implemented (A1–A5)
+**Shares its number with**: [`0019-app-as-consumer-unit`](./0019-app-as-consumer-unit.md) (App as the Consumer-Facing Unit) — an unrelated decision under the same number. Numbers are never reassigned (AGENTS.md Prime Directive 13); cite this record unambiguously as `ADR-0019-approval-as-flow-node`.
 **Deciders**: ObjectStack Protocol Architects
 **Builds on**: [ADR-0018](./0018-unified-node-action-registry.md) (open action registry — approval becomes a consumer), [ADR-0009](./0009-execution-pinned-metadata.md) (execution pinning — reconcile to one mechanism), [ADR-0012](./0012-notification-platform.md) (outbox / `notify`), [ADR-0010](./0010-nl-to-flow-authoring.md) + [ADR-0011](./0011-actions-as-ai-tools.md) (AI authoring — the design center)
 **Revises**: ADR-0018's premise that Approval stays a separate paradigm with its own closed `ApprovalActionType` enum, and the "Workflow-Rule → Flow compiler" (M5) — both dropped here (greenfield, no legacy).