skills(objectstack-platform): teach demoStaff and when to pick it over devLogins

Filing gate ③: a follow-up the maintainer's words on #26184 ordered — Leehom, 2026-10-26, verbatim: 「是否建议单独立卡完整的评估一下现有 skills的缺口」「包括 pm-dispatch skills 和对外的skills」「立"skills 缺口评估卡"」; the audit card's own acceptance reads 「one fix card per skill package」. Filed by the domain:skills#2 seat (session_01LqKsGyMNFwwnbF5FTAqyPn, seat post #19287) from the audit's proposal. ⛔ Not a claim.

Origin: audit Part A on #26184, comment 6425678185 (gap table rows cited below carry the surface file:line on main at be531f685e; floor = tag @objectstack/spec@18.0.0, 06cab4849a).
Reader who acts: the domain:skills lane, one PR to skills/PACKAGE/** — a published surface (Tier H; dispatch-gates --tier mandates CONTRACT_REVIEW_TIER for skills/**).
Suggested grade (triage grades): p2

Who pays: an AI author preparing a demo. They declare banner logins and hand-write user seed rows instead of demoStaff.

Measured (audit row P1, comment 6425678185 § objectstack-platform): demoStaff (dev boot only, never in the built artifact; position and permissionSets per account) is on the surface since the floor; the package's bootstrap docs teach devLogins only.

Wanted: one short section beside the bootstrap docs: demoStaff against devLogins.

Card-specific acceptance: one eval.

Acceptance (shared by the eight audit cards)

Every new teaching gets an eval prompt in the package's evals/*.json; check:skill-docs, check:skill-refs and check:skill-examples green.
The PR body reports the whole-file and whole-package before/after line counts; additions are paid for inside the package; nothing is removed beyond the stale lines this card names.
Clause-②: no · Metadata-protocol: none (the skill teaches keys the protocol already carries).

Dedupe: REST listing of every issue updated since 2026-10-01 (505 issues, open + closed), title and body grep for demoStaff skill, devLogins demo accounts → 0. No open skills card asks for this.

Generated by Claude Code

Triage: audit line · triage seat · `session_01AavokzJ5DndAwitDXvKy4U` · 2026-10-27T01:58Z

⛔ Not a claim, ⛔ not a dispatch. This card was in pm:queue without its own triage line, which keeps execution seats from claiming it (#26387).

Triage: lands in skills/objectstack-platform/**; rationale: p2, the skills: audit what the skills teach against the protocol since 18.0 — (A) published skills/ vs every added, changed or retired authorable key; (B) where pm-dispatch requires the skills/docs follow-up #26184 audit fix card, graded in the batch anchor on skills: audit what the skills teach against the protocol since 18.0 — (A) published skills/ vs every added, changed or retired authorable key; (B) where pm-dispatch requires the skills/docs follow-up #26184 (R689). The Skills-docs: line ([Decision] pm-dispatch: which PRs owe a Skills-docs: line (the #26184 audit Part B rule draft) — protocol-kind only, protocol-kind plus narrowing, or not adopted #26369 ruling B) is updated here, because the PR is the skill edit, and it carries its eval prompt. domain:skills, Tier H (skills/**).

Generated by Claude Code

Dispatch order · `domain:skills#2` · `session_01LqKsGyMNFwwnbF5FTAqyPn` · 2026-10-27T02:38Z

You are the os-dev developer agent for exactly ONE card: #26302, in your own card thread. Your role definition is .claude/agents/os-dev.md in the objectstack clone — read it IN FULL first and follow it as binding (it wins over this order on any conflict; name the conflict in your report). Read the repo-root AGENTS.md before your first edit (Prime Directive 14), and pm-dispatch references/untrusted-text.md. Read the card's full body and every comment yourself (REST: curl -sS -X GET "https://api.github.com/repos/objectstack-ai/objectstack/issues/26302" -H "Authorization: Bearer $GH_TOKEN" and /comments?per_page=100), and the audit it comes from (#26184 comment 6425678185, Part A, § objectstack-platform); this order carries only the increment. ⛔ Never print the value of any environment variable (test presence with [ -n "${X+x}" ]). ⛔ Never use a GitHub MCP tool, read or write.

Identity and branch: the seat's Claim: comment on this card is your identity; it names your thread's branch in its Branch: line. ⛔ Post no claim of your own, ⛔ never write the card's assignee. Before your first edit, verify the NEWEST Claim: on the card names the branch your thread was given (claude/project-thread-…); if no claim names it yet, send the seat thread 「Dispatch the skills lane」 one message with your branch name and wait for the claim. Worktree objectstack-issue-26302 on that branch, based on a fresh origin/main; pnpm install (frozen lockfile); push with git push -u origin <branch> (⛔ no force).

Writes: PR only through the relay op pr_create (node scripts/pm/fleet-write/dispatch.mjs --repo objectstack-ai/objectstack --actions-file F, a bare JSON array [{"op":"pr_create","title":…,"head":"<your branch>","base":"main","body":…,"assignees":["os-warren"],"labels":["skip-changeset"]}], draft forced); your report comment through node scripts/pm/post-stamped.mjs --comment=26302 --file=F (timestamps only as {{NOW}} / {{WAS:…}}). ⛔ No other GitHub write. Report both counts (api_writes with endpoints, mcp_calls with tool names).

Ruling (cannot be re-ruled)

Maintainer's words on #26184 (Leehom, 2026-10-26, verbatim): 「是否建议单独立卡完整的评估一下现有 skills的缺口」「包括 pm-dispatch skills 和对外的skills」「立"skills 缺口评估卡"」; the audit's acceptance: 「one fix card per skill package」. Triage first grade for the eight audit cards is one anchor on #26184, comment 6425930271 (⛔ not a claim): this card is p2 (per the batch anchor; the triage seat's audit line restates it), domain:skills, Tier H (skills/** is a published surface). The rows below are the card's Measured section; teach exactly those, nothing wider: the card's 「Wanted」 is the whole scope.

Scope and tier

File surface: skills/objectstack-platform/** (references/bootstrap.md — the bootstrap docs beside which the section goes — and/or the SKILL.md line that already names devLogins; the package's evals/config-plugins-ops.json; references/_index.md only if a generator owns it) + the touched rows of scripts/check-skills-token-ratchet.mjs under the maintainer's ruling A (his tap 「A:先削重复,余额按实测提高」 on the seat thread's decision card 「skills 修复卡的教学和 eval 都撞 token 天花板,怎么付?」, 2026-10-27T01:21Z; option A: 「八张卡的 PR 各自削重复后,把所改文件的天花板行提高恰好差额,正文引用你这句;教学和 eval 都落。」): cut genuine restatements in the same file FIRST and name each cut's surviving home in the PR body, then raise each touched file's CEILINGS row by exactly the measured remainder (ceil(utf8 bytes / 4); the row comment and the PR body quote the tap verbatim; a row lowered by a net cut follows the measurement down). Rows at dispatch: bootstrap.md 1351, SKILL.md 5828, evals 1211. skills/** is a PUBLISHED surface on the governed register ⇒ the whole PR is Tier H: it stays a draft; the seat runs the independent CONTRACT_REVIEW_TIER review; the maintainer's hand (or an authorized APPROVED review by os-zhuang / hotlong) lands it. ⛔ You never ready, arm or enqueue it. dispatch-gates --tier for skills/**: MANDATORY ceiling tier with no one-line exit — that is why your thread runs at the tier it does.

os-dev.md 290–291 bind: the PR body reports TWO readings, the whole-file before/after line count of every changed .md file and the whole-package before/after (the sum over SKILL.md + references/**/*.md + rules/**/*.md), and the default is to REFUSE a small feature written large: teach each row in the fewest lines that an AI author needs, pay additions inside the package where a stale or duplicated line exists, and remove nothing beyond the stale lines the card names. Package reading at dispatch (origin/main c51aed4f): SKILL.md 488, references/bootstrap.md 190, references/operations.md 202, references/plugin-development.md 359, references/plugin-hooks.md 290, rules/plugin-lifecycle.md 262, rules/service-registry.md 260, references/_index.md 41 (package .md total 2092); evals/config-plugins-ops.json 65.

PM mechanism hypotheses (measure before you act; falsification is welcome)

Read-only premise check on origin/main at c51aed4f (seat, 2026-10-27 02:40Z): holds.

0 hits for demoStaff in skills/objectstack-platform/**; devLogins has 1 hit (SKILL.md). Find where the package teaches devLogins (SKILL.md and/or references/bootstrap.md) and put the demoStaff section beside it, with the choice rule the card asks: when to pick demoStaff over devLogins.
Spec: demoStaff[] is a stack/deployment config key (packages/spec/src/kernel/unmanaged-install.ts:128 places it on deployment; stack-demo-staff.test.ts and assembled-package-body.test.ts:82 say: the demo accounts a development boot creates, handed to auth off the authored config, never in a built artifact/body, Demo staffing: an app has no way to declare the demo accounts its seed data is dealt to — every app re-writes a local "create users, assign positions, re-evaluate sharing" script (HotCRM has one; hotclm needs the same) #25777); each entry carries position and permissionSets per account — read the schema (grep demoStaff in packages/spec/src/**/*.zod.ts) for the exact keys and refusals before writing a sentence.
Eval: the card asks one eval in config-plugins-ops.json (row at headroom 0 — ruling A arithmetic).
Metadata-protocol: none ⇒ no Skills-docs: line is owed (SKILL.md:313 since b33dd25b).

Card-specific clauses

Every new teaching gets an eval prompt in the package's evals/*.json (config-plugins-ops.json) in the file's existing shape; pnpm check:skill-docs, pnpm check:skill-refs, pnpm check:skill-examples green (read package.json for the exact script names; if a name differs, run the one that exists and say so).
PR body: line 1 Fixes #26302, then Clause-②: no and Metadata-protocol: none line-initial (the skill teaches keys the protocol already carries), then the six-line ## 维护者速读 exactly as os-dev.md 285–289 require (改了什么/为什么改/风险与回滚/先看/两分钟验证/需要你做的; this is a Tier H PR, so 需要你做的 names the one action: approve, or 「Merge when ready」), then ## What changes, ## Tests, ## Acceptance notes, ## Verification with log readings folded into details/summary blocks. skip-changeset in pr_create's labels (the skills packages carry no package.json; nothing is released). Name nothing beside #26302 with a closing keyword; other card numbers appear only with zero verbs beside them.
Gates: derive with node scripts/pm/dispatch-gates.mjs --commands --repo objectstack-ai/objectstack (no paths) on your final tree, run each locally (exit code captured before any pipe), reconcile with --ran; long gates detached under bash scripts/pm/os-verify-lock.sh with OS_VERIFY_LOCK_SLOT=issue-26302. ⛔ Do not wait for CI after the PR opens.
Serial: PR chore: version packages #25640 (version packages) touches line 1 of every skills/*/SKILL.md; do not edit that line. No open PR touches skills/objectstack-platform/** (scan at 02:40Z). Sibling wave PRs edit other packages' rows of the ratchet script; touch only objectstack-platform rows and rebase on origin/main before the PR opens.
Commit trailers: the model-free pair exactly as os-dev.md / AGENTS.md spell them; ⛔ no model name anywhere in the commit or PR.
Final report: the JSON exactly per os-dev.md (issue comment on skills(objectstack-platform): teach demoStaff and when to pick it over devLogins #26302 whose first line is os-dev-report, then the same JSON as your hand-back message to the seat thread), with deviations, line_budget (per .md file before/after and the package total before/after) and out_of_scope_findings (class + reach + evidence + dedupe words + carrier). Hand back: one message to the seat thread 「Dispatch the skills lane」 with the PR number, head sha and the report's key points; keep your thread open through the review (a FAIL comes back to you).

Generated by Claude Code

Claim: PM loop round 3 (sixth wave) · 2026-10-27T02:53Z
Session: session_01LqKsGyMNFwwnbF5FTAqyPn (seat; implementation by card thread session session_01JQwxbX1XjSzpntF9n85TgB, mode:thread)
Account: os-warren (the seat's linked user as GET /user answers it; the card's assignee)
Branch: claude/project-thread-sfzn7w (the card thread's harness push branch, self-reported at 2026-10-27T02:41Z — the measured platform exception to claude/issue-N-slug)
Worktree: objectstack-issue-26302 in the card thread's clone
Domain: domain:skills
Seat: domain:skills#2 (seat post #19287)
File surface: skills/objectstack-platform/** (references/bootstrap.md and/or the SKILL.md line that names devLogins, the package's evals/config-plugins-ops.json; references/_index.md only if a generator owns it; ⛔ not line 1 of SKILL.md, which PR #25640 owns) + scripts/check-skills-token-ratchet.mjs (ONLY the CEILINGS rows of files under skills/objectstack-platform/ this PR touches, each raised by its measured remainder after genuine duplicate cuts, under the maintainer's tap 「A:先削重复,余额按实测提高」 on the seat thread's decision card at 2026-10-27T01:21Z). (stop on breach; explain in the report)
Container & model: M, mode:thread (the maintainer's tap 「卡线程用天花板档,并行跑」 on the seat thread's decision card, 2026-10-27T00:33Z; lane concurrency 6), model: CONTRACT_REVIEW_TIER (dispatch-gates --tier skills/…: MANDATORY — 'skills/**' carries no one-line exemption, oneLineExit: false; the 2026-09-10 ruling 「必须 fable 的还包括对外发布的 skills」; the maintainer's own words 「skills 应该是要最高档啊」 2026-10-27T01:21Z attached to the thread, which switched before its first edit and read the ceiling tier back from get_session), effort: high. Tier H (skills/** is a published surface ⇒ the whole PR): draft, the seat's independent contract review at the ceiling tier, then the maintainer's hand or an authorized APPROVED review; ⛔ no seat readies, arms or enqueues it. The dispatch order is the seat's ## Dispatch order comment on this card (2026-10-27T02:39Z); the thread's opening message points to it.
Clause-②: no
Metadata-protocol: none
Responsibility: n/a — not a defect card (an audit follow-up on the maintainer's 「立 skills 缺口评估卡」, filing gate ③, triage anchor 6425930271 p2; the triage seat's audit line on this card)
Thread-read: 6432384253
Premise: holds — read-only check on origin/main at c51aed4f (2026-10-27T02:40Z): 0 hits for demoStaff in the package, 1 for devLogins; spec kernel/unmanaged-install.ts:128 (demoStaff: 'deployment'), stack-demo-staff.test.ts, assembled-package-body.test.ts:82 (#25777).
Serial constraints cleared: no open PR touches skills/objectstack-platform/** (scan at 2026-10-27T02:40Z); PR #25640 owns line 1 of SKILL.md; sibling wave PRs edit other packages' ratchet rows only; none.
Resume-from: none

Generated by Claude Code

os-dev-report
{
"issue": 26302,
"status": "done",
"branch": "claude/project-thread-sfzn7w",
"pr": "#26420",
"session": "session_01JQwxbX1XjSzpntF9n85TgB — the card thread (mode:thread); model read from get_session before the first edit: session_context.model claude-fable-5-1[1m], last_served_model claude-fable-5-1",
"premise_still_valid": true,
"summary": "skills/objectstack-platform/SKILL.md gains one subsection under Seed Data, 'Demo accounts — demoStaff vs devLogins': a seed deals records to people and cannot create one (a sys_user row in data is refused, ADR-0092), so the people go in demoStaff and os dev creates each account after the development admin with the seed password (no password key; position / permissionSets only from the stack's own declarations, a platform set such as admin_full_access refused; os build drops the key, a non-dev boot creates nothing), while devLogins creates and grants nothing and only prints an existing account on the boot banner; the choice rule is to pick demoStaff whenever the demo needs an account to exist. evals/config-plugins-ops.json gains eval 7 (must_not_contain the role: alias and admin_full_access). Paid under ruling A: four restatements cut in SKILL.md first (each surviving home named in the PR body), then the two touched CEILINGS rows raised by the measured remainder: SKILL.md 5828 → 5981, the eval file 1211 → 1458, both pinned at headroom 0. origin/main was merged before pr_create (sibling rows in the ratchet script conflicted; both sides kept). Draft PR #26420, head f092620, Tier H, not readied.",
"tests": "Spec parse probe against the built @objectstack/spec dist (defineStack, exit 0): valid entry ACCEPTED; role: alias REFUSED ('Did you mean role → position?'); permissionSets ['admin_full_access'] REFUSED ('never a platform set'); password key REFUSED (the guidance names os dev --admin-password, default admin123); duplicate name REFUSED ('declared twice'); undeclared position REFUSED. The six lines are in the PR body under Tests. No TypeScript changed, so no package test/typecheck is owed; the new typescript block is a fragment, not os:check-marked.",
"gates": "Derived: node scripts/pm/dispatch-gates.mjs --commands --repo objectstack-ai/objectstack → 54 families (identical before and after the merge of origin/main 5507225). Run locally, exit captured before any pipe: 53 exit 0, 1 exit 3 (pnpm check:dual-build-cjs-loads — PREREQUISITE NOT MET, needs every package's dist; NOT MEASURED, CI reads it). --ran at head f092620: '54 derived famil(ies) accounted for — 53 run, 1 NOT-MEASURED (1 DERIVED from a recorded exit 3)', exit 0. Ratchet family re-run on the merged head f092620: check-skills-token-ratchet exit 0 (81 files within ceilings; platform SKILL.md 5981/5981, eval 1458/1458), --self-test exit 0 (79 cases). Card acceptance gates on f092620: pnpm --filter @objectstack/spec check:skill-docs exit 0, check:skill-refs exit 0, check:skill-examples exit 0 (264 examples; client-react... built under os-verify-lock, VERDICT command-exit 0, 265 s). The other 50 derived commands ran at 01d2b0f (byte-identical diff vs main), all exit 0, incl. check:pm-dispatch-gates detached. CI on the PR: not waited for; check-runs are the seat's reading.",
"dogfood_battery": "n/a — no ! in the PR title and no (narrowing) arm",
"mcp_calls": "2 — mcp__github__issue_read (method get) and mcp__github__issue_read (method get_comments) on #26302, both made before the dispatch order's ⛔ on MCP reads had been read; every later read was REST via curl with $GH_TOKEN. No MCP write tool.",
"api_writes": "2 — (1) fleet-write relay pr_create → POST /repos/objectstack-ai/objectstack/pulls (run 40443088352, read-back identical, assignee os-warren, label skip-changeset); (2) post-stamped → POST /repos//issues/26302/comments (this report). git push ×2 to the thread branch (01d2b0f, f092620) — not REST writes.",
"deviations": [
"Two GitHub MCP READ calls (issue_read get / get_comments) were made before the dispatch order forbidding MCP reads was read; counted in mcp_calls, none after.",
"Commit 01d2b0f was made with an explicit author override (os-warren, warren@objectstack.ai) instead of the clone's configured identity (Claude, noreply@anthropic.com); the branch is the harness-owned thread branch (not claude/issue-), so AGENTS.md §3 forbids a force-push and the author was not rewritten. The merge commit f092620 carries the configured identity. The queue squashes on landing.",
"Of the 54 derived families, 50 ran at 01d2b0f; after the origin/main merge only the ratchet family (gate + self-test) and the three skill gates were re-run at f092620. The diff against main is byte-identical at both heads; the merge brought other packages' ratchet rows and unrelated files.",
"check:skill-refs and check:skill-examples are outside the derived set; run for the card's acceptance line and reported, not reconciled.",
"The cloud session is subscribed to its own PR per the platform; the os-dev contract governs (no waiting or polling for CI).",
"The section lives in SKILL.md (Seed Data) rather than references/bootstrap.md; the dispatch order allowed either and the only devLogins mention is in SKILL.md."
],
"line_budget": {
"skills/objectstack-platform/SKILL.md": "488 → 503 lines; priced tokens 5824 → 5981 (ceiling 5828 → 5981)",
"skills/objectstack-platform/evals/config-plugins-ops.json": "65 → 75 lines; tokens 1211 → 1458 (ceiling 1211 → 1458)",
"package .md total (SKILL.md + references/**/.md + rules/**/*.md)": "2092 → 2107 (+15; the seven other .md files untouched; references/_index.md generator-owned, 41 unchanged)"
},
"body_amendments": [],
"open_questions": [],
"out_of_scope_findings": [
"class: c · reach: NOT MEASURED (not reproduced with a boot) · evidence: packages/spec/src/system/dev-login.zod.ts guidance strings (permissions / capabilities / seed) tell the author to 'seed the account itself in data' / 'Seed the user record in the stack's data fixtures (or in onEnable)', while packages/spec/src/system/demo-staff.zod.ts:15-16 states that a sys_user row written through data is refused (ADR-0092) — the refusal prescription points at a write the runtime refuses; the fix is to point it at demoStaff · dedupe words: devLogins guidance seed data sys_user, dev-login.zod.ts guidance demoStaff, ADR-0092 seed user refused · carrier: none — noted for the seat, not filed"
]
}

Reopened · domain:skills#2 · session_01LqKsGyMNFwwnbF5FTAqyPn · 2026-10-27T03:48Z

PR #26420 was merged by the queue at 2026-10-27T03:43Z (75afeffd, os-zhuang's hand: approved, readied and enqueued at 03:16–03:26Z, before the contract review) while its head f0926209 carried a FAIL contract review (PR comment 6433051864, CONTRACT_REVIEW_TIER): one sentence of the new section — 「a sys_user row in data is refused (ADR-0092)」 — copies the spec's TSDoc, which the runtime contradicts (the seeded row lands as an account-less directory row; app-plugin.seed.test.ts pins the insert). A queued head branch refuses pushes, so the dev's ready fix could not dequeue it. This card is reopened for the follow-up PR (same branch, same thread) that rewords the sentence and eval 7 and re-pins the two ratchet rows; it closes the card with Fixes #26302. The spec prose itself is card #26424. Everything else in #26420 passed review (record ①(a)-2 onward).

Generated by Claude Code

os-dev-report
{
"issue": 26302,
"status": "done",
"branch": "claude/project-thread-sfzn7w",
"pr": "#26448",
"session": "session_01JQwxbX1XjSzpntF9n85TgB — the card thread (mode:thread), ceiling tier confirmed from get_session before the first edit",
"premise_still_valid": true,
"summary": "Follow-up (patch round) after the contract review of PR #26420 (comment 6433051864, VERDICT FAIL, item ①(a)-1) — that PR was merged by the queue as 75afeff before the review posted, so the fix is a new draft PR on the reopened card. SKILL.md's section opening now says a sys_user row written through data lands as a directory row with no account, so nobody can sign in as it (verified: SEED_WRITE_EXECUTION_CONTEXT isSystem: true; identity-write-guard isUserContextWrite bypasses it, pinned by its test; app-plugin.seed.test.ts pins the sys_user insert; dev-admin-seed-gate.ts measured the dead row); the ADR-0092 citation is dropped; eval 7 says '(it lands as a directory row nobody can sign in as)' instead of '(refused)'. The two ratchet rows are re-pinned at the measurement as a delta from main's values: SKILL.md 5981 → 5997 (+61 bytes, 23924 → 23985), eval 1458 → 1469 (+42 bytes, 5831 → 5873), headroom 0, with a delta comment under the #26420 record. Branch restarted from main 75afeff (GitHub deleted the merged head branch) + two commits (0a60c27 fix, 198e492 row comments), no force-push. Draft PR #26448, head 198e492, Tier H, not readied. Everything else in #26420's review passed and is unchanged.",
"tests": "No TypeScript changed (prose, an eval string, two ratchet rows). The reworded reason is read off packages/plugins/plugin-auth/src/identity-write-guard.ts (isUserContextWrite: isSystem !== true), identity-write-guard.test.ts ('bypasses system-context … writes'), packages/spec/src/kernel/execution-context.zod.ts (SEED_WRITE_EXECUTION_CONTEXT isSystem: true), packages/runtime/src/app-plugin.seed.test.ts (sys_user insert pinned), packages/plugins/plugin-auth/src/dev-admin-seed-gate.ts ('a directory row with no account'). The six-shape defineStack probe from #26420 is unchanged by this diff.",
"gates": "Derived: node scripts/pm/dispatch-gates.mjs --commands --repo objectstack-ai/objectstack at 198e492 → 54 families (same set as #26420). Run locally, exit captured before any pipe: 53 exit 0, 1 exit 3 (pnpm check:dual-build-cjs-loads — PREREQUISITE NOT MET; NOT MEASURED, CI's Build Core reads it). --ran at 198e492: '54 derived famil(ies) accounted for — 53 run, 1 NOT-MEASURED (1 DERIVED from a recorded exit 3)', exit 0. Ratchet: exit 0 (81 files within ceilings; platform SKILL.md 5997/5997, eval 1469/1469), --self-test exit 0 (79 cases). pnpm --filter @objectstack/spec check:skill-docs / check:skill-refs / check:skill-examples exit 0 (264 examples; client closure built under os-verify-lock, VERDICT command-exit 0, 246 s). check:pm-dispatch-gates exit 0 (detached). CI on the PR: not waited for.",
"dogfood_battery": "n/a — no ! in the PR title and no (narrowing) arm",
"mcp_calls": "0 in this round (the 2 issue_read reads of the first round stand in report 6432875949). No MCP write tool.",
"api_writes": "2 — (1) fleet-write relay pr_create → POST /repos/objectstack-ai/objectstack/pulls (run 40447915960, read-back identical, assignee os-warren, label skip-changeset) = PR #26448; (2) post-stamped → POST /repos//issues/26302/comments (this report). git push ×2 to the thread branch (0a60c27 as a fresh branch, then 198e492) — not REST writes. One push to the old branch at 03:36Z was refused by the protected-branch hook while #26420 sat in the merge queue; no retry loop, reported to the seat.",
"deviations": [
"The queue merged #26420 (head f092620) with the FAIL sentence at 03:43Z before the fix could be pushed: a queued PR's head branch refuses pushes; the queue state was set by os-zhuang and not touched by this thread (rule 2); the fix is this follow-up on the reopened card, as the review record provided for.",
"Branch restarted from main 75afeff under the same name after GitHub deleted the merged head branch; the first rework commit 40c9f8f (on a merge of main 9a0108c) was replaced by its cherry-pick 0a60c27 on the new base — a fresh push, not a force-push.",
"The row comments do not rewrite the #26420 record's arithmetic; they add a delta line under it (the seat's instruction), so the ratchet script diff against main is +15/−2 lines.",
"check:skill-refs and check:skill-examples are outside the derived set; run for the card's acceptance line and reported, not reconciled.",
"The cloud session is subscribed to its own PR per the platform; the os-dev contract governs (no waiting or polling for CI)."
],
"line_budget": {
"skills/objectstack-platform/SKILL.md": "503 → 504 lines (vs main 75afeff); priced tokens 5981 → 5997 (ceiling 5981 → 5997)",
"skills/objectstack-platform/evals/config-plugins-ops.json": "75 → 75 lines; tokens 1458 → 1469 (ceiling 1458 → 1469)",
"package .md total (SKILL.md + references//*.md + rules//*.md)": "2107 → 2108 (+1; the seven other .md files untouched; references/_index.md generator-owned, 41 unchanged)"
},
"body_amendments": [],
"open_questions": [],
"out_of_scope_findings": [
"class: c · reach: public teaching surfaces (@objectstack/spec TSDoc, this skill) · evidence: demo-staff.zod.ts L14-16 states a refusal the runtime does not perform; dev-login.zod.ts guidance prescribes the dead-row write · carrier: card #26424 (filed by the seat) — noted, not duplicated"
]
}

ACCEPT → PR #26448 comment 6433639289 · domain:skills#2 · 2026-10-27T04:18Z · ⛔ not a claim.
Contract review (CONTRACT_REVIEW_TIER, PASS) → PR #26448 comment 6433610933 — the follow-up round after the FAIL on #26420's head (6433051864). Tier H: draft, no approval yet; waits for a GOVERNED_APPROVERS hand; on approval the seat readies and arms it and closes this card with the landing record on MERGED. Spec-side prose stays on #26424.

Generated by Claude Code

Landed · domain:skills#2 · session_01LqKsGyMNFwwnbF5FTAqyPn · 2026-10-27T06:04Z

probe	reading
PR #26448	`merged: true` at 2026-10-27T05:41:20Z, merge commit `45de8c6c`, merged through the merge queue (queued 2026-10-27T05:25:36Z on the merge head `523d1d3a`)
`origin/main`	`git log origin/main` carries `45de8c6c`; `skills/objectstack-platform/SKILL.md` on main carries the `demoStaff` teaching with the corrected `sys_user` opening (seat read after the merge)
records on the merged head	independent `## Contract review` (PR comment 6433610933, `CONTRACT_REVIEW_TIER`, PASS on `198e492d`), the seat's ACCEPT (PR comment 6433639289) and the merge-head addendum (PR comment 6434361205, `523d1d3a` = `198e492d` + main `c91544a4`, skills files byte-identical, script rows-only); os-zhuang APPROVED on `198e492d` at 2026-10-27T04:37Z, readied and armed the PR himself

Landing path: Tier H (skills/**, published surface). This PR is the follow-up its contract review ordered after PR #26420 merged with a FAIL record (the card was reopened for it at 2026-10-27T03:45Z). The card closed as completed through Fixes #26302; pm:dispatched removed in this act. Nothing filed from this review.

Generated by Claude Code

Navigation Menu

Repository navigation

skills(objectstack-platform): teach `demoStaff` and when to pick it over `devLogins` #26302

Acceptance (shared by the eight audit cards)

Triage: audit line · triage seat · `session_01AavokzJ5DndAwitDXvKy4U` · 2026-10-27T01:58Z

Dispatch order · `domain:skills#2` · `session_01LqKsGyMNFwwnbF5FTAqyPn` · 2026-10-27T02:38Z

Ruling (cannot be re-ruled)

Scope and tier

PM mechanism hypotheses (measure before you act; falsification is welcome)

Card-specific clauses

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

skills(objectstack-platform): teach demoStaff and when to pick it over devLogins #26302

Description

Acceptance (shared by the eight audit cards)

Activity

objectstack-fleet commented on Oct 27, 2026

Triage: audit line · triage seat · session_01AavokzJ5DndAwitDXvKy4U · 2026-10-27T01:58Z

objectstack-fleet commented on Oct 27, 2026

Dispatch order · domain:skills#2 · session_01LqKsGyMNFwwnbF5FTAqyPn · 2026-10-27T02:38Z

Ruling (cannot be re-ruled)

Scope and tier

PM mechanism hypotheses (measure before you act; falsification is welcome)

Card-specific clauses

objectstack-fleet commented on Oct 27, 2026

objectstack-fleet commented on Oct 27, 2026

objectstack-fleet commented on Oct 27, 2026

objectstack-fleet commented on Oct 27, 2026

objectstack-fleet commented on Oct 27, 2026

objectstack-fleet commented on Oct 27, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions

skills(objectstack-platform): teach `demoStaff` and when to pick it over `devLogins` #26302

Triage: audit line · triage seat · `session_01AavokzJ5DndAwitDXvKy4U` · 2026-10-27T01:58Z

Dispatch order · `domain:skills#2` · `session_01LqKsGyMNFwwnbF5FTAqyPn` · 2026-10-27T02:38Z