[objectstack-fleet]

Requested by Elon · project thread

Fixes #25414

Clause-②: no
Metadata-protocol: none

维护者速读(草稿)

• 改了什么:把您 2026-10-23 在「车队机制迁往 Projects」线程的话写进 pm-dispatch 六个细则文件。① 项目席落地 Tier S 的前提多一条:契约复核记录的 Reviewed-by: 会话必须属于 PR 作者之外的账户(记录另带一行 Reviewed-by-account: 写复核账户的 login,须异于 PR 正文 attribution 的 github_login,与 check-governed-queue-guard: a PR landed from a project thread needs a review of record whose Reviewed-by session belongs to a different account from the PR's attribution github_login, else Tier S does not enqueue (maintainer's word 2026-10-23) #25415 队列守卫读的键一致);同账户的隔离子代理只算复核、不作落地记录;只动散文面的 PR 同样欠另一账户一条 TIER_DEFAULT 记录;过渡期没有另一账户在席时,仍以您本人在执行线程逐个点名 PR 编号为替代。② pm:mailbox 信箱 PR 不欠 CI、永不入队、台账查询排除。③ 每个项目的巡查多一项:扫 needs:contract-review 的 open PR、剔除本账户署名的、留 Claim 形评论再复核、PASS 同笔摘标;总监席摘要列等候逾 24 小时的 PR。④ 分诊席缩为薄席:只做 objectstack、objectui 两仓裸卡的首触定级与路由、跨车道查重,只写标签与审计评论;半标卡归所属车道席补齐;应用仓无分诊席;发版板、pin 链、决策箱勤务移到总监席章程,fork PR 扫描与 hold 解锁重验移到车道巡查。⑤ 决策卡留在立卡仓,总监席扫全部仓的 needs-user-decision 按批呈您;pin 链扩到每个应用仓;新仓清单加 GOVERNED_REPOS、车队 App、车道宪章文件。
• 为什么改:您的原话(卡 pm-dispatch: Tier S PR landed from a project needs a contract-review record by another account; triage shrinks to bare cards in the director project; decision cards stay in their repo, the director scans every repo (maintainer's word 2026-10-23) #25414 正文):「分诊不忙不如留给总监管」(12:08Z)、「为什么我们需要区分项目类型?任何一个项目中都可以召唤总监啊,任何一个项目中也可以召唤分诊」(12:25Z)、「你立卡并派发处理所有相关任务,跟踪落地」(12:13Z)。实测依据:06:04Z 至 06:16Z 三个席位的落地只在您本人逐个点名 PR 时放行;feat(spec): ExecutionStatus gains missed, a scheduled due time that passed while no kernel was ticking #25363 由另一账户复核后作者席位一分钟内自落,无人点名。
• 风险与代价(含回滚):纯规则文本;triage-duties.md 120→103 行,lanes/director.md 70→87 行,其余五个文件净零;棘轮以跨文件迁移申报付账,总上限不升;一次 revert 可回。两处要您知道:① 本 PR 在 pm-dispatch: project forms — lane project and director project, lanes read from the seat post's 🟢 line, the maintainer's one-sentence assignment, takeover of a walled account, mailbox PRs, generated roster board (maintainer's word 2026-10-23) #25412(项目形态,写 project-forms.md)之后落地,pm-dispatch: project forms — lane project and director project, lanes read from the seat post's 🟢 line, the maintainer's one-sentence assignment, takeover of a walled account, mailbox PRs, generated roster board (maintainer's word 2026-10-23) #25412 已先合入,main 已并进本 PR,lanes/director.md 的 project-forms.md 指针与「直连无 Routine」那行核对后无需再改;② 分诊席的人工决裁底线(风险判据、工作量判据、人工地板、不呈清单)原文未动。
• 席位意见:(席位复核后填)
• 你要做的(一个动作):等 pm-dispatch: project forms — lane project and director project, lanes read from the seat post's 🟢 line, the maintainer's one-sentence assignment, takeover of a walled account, mailbox PRs, generated roster board (maintainer's word 2026-10-23) #25412 落地、席位对本 PR 新 head 的契约复核 PASS、CI 全绿后,在席位线程回「objectstack-ai/objectstack#本 PR 编号 可以落地」。本 PR 写的规则(另一账户的复核记录即放行)要等它自己合入才生效。

What changed

Seven files under .claude/skills/pm-dispatch/references/** plus the ceiling rows in scripts/pm/check-skill-line-ratchet.mjs; rule text only; every edited line is at or under 120 bytes.

File	Before	After
contract-review.md 独立性对 (48 → 53, ceiling 60)	the pair is read off --template	+3: a project seat's Tier S landing needs a Reviewed-by: from an account other than the PR author's: the record carries a Reviewed-by-account: line (the reviewing session's login) beside Reviewed-by:, and it must differ from the PR body attribution github_login (the same key and comparison the #25415 queue guard reads); a same-account isolated subagent is a review, not the record; a prose-only PR owes one cross-account TIER_DEFAULT record. +2 beside 落地前检: ① gains the account condition for project seats; the interim rule while no other account is seated is the maintainer's own message naming each PR number. The card names landing-operations.md for item 2, but the 落地前检两条 lines live here since the rules-only rewrite, so the text went where the rule is
landing-operations.md 入队与落地 (101, net 0)	—	+1 pm:mailbox: owes no CI, never queued, excluded from the landing ledger and orphan-PR queries; paid by folding 「外部评审链降为可选事后审计」 into the design-fork line
dispatch-runbook.md (241, net 0)	〈座位贴活性巡查(分诊轮常设项)〉, six lines run by the triage Routine	〈巡查常设项(每项目巡查与总监席摘要)〉: seat-post liveness goes to the 总监席 digest (3 lines, same tests); the cross-account review pass (3 lines: the is:pr is:open label:needs:contract-review query minus this account's attribution, the Claim:-shaped comment before reviewing, review per contract-review.md, strip the marker on PASS, the digest lists PRs waiting over 24 h); the lane patrol takes hold/closed re-validation and the fork-PR sweep (1 line). Paid by merging two 读数成本 lines. 〈分诊两级盘点细则〉: 四仓 → 两仓; Restart-when: batch scan → lane patrol, inbox back-fill → 总监席; sweep disjuncts ①②③ → ①②
triage-duties.md (120 → 103)	the full triage duty list	the seat keeps bare-card first touch and cross-lane dedupe; disjunct ② stays (queue label, no domain), the half-labelled ③④ go to the owning lane seat; 全仓 → 两仓; the fork-PR sweep, the pin chain (6), the decision-inbox duties (3), the closed/Restart-when: re-validation (2) and the release board (5) leave; line 5 names where the release board and pin chain went (总监席 digest, details now in lanes/director.md) and that the in-flight liveness re-check goes to the same digest with its details staying here. Lines 95–120 (人工地板, 风险判据, 工作量判据, 不呈 list, 例外一/二) are untouched
lanes/triage.md (7, net 0)	pickup alternation and the starvation guard	summoned by the maintainer's sentence into any project, by default beside the 总监席; labels and audit comments only, no PR, no claim; scope = objectstack/objectui bare cards + cross-lane dedupe, app repos have no triage seat; the alternation, 4 h starvation guard, no-second-seat and no-frequency-change rules kept
lanes/director.md (70 → 87)	决裁勤务 inbox line	+1 授权与形态: the 分诊席 is summoned beside this seat by default, its hourly run may share the inbox scan. 职责二 +2: the inbox is every repo's needs-user-decision, cards stay in the repo they were filed in; the two 入箱勤务 lines moved from triage-duties. New 职责四 (+12): the daily digest line (in-flight / awaiting ruling / awaiting landing / wall notes, PRs waiting over 24 h for review, release board, pin lag, cardless fork PRs); seat-post and in-flight liveness; the release board (5 lines moved, main-repo producer now this seat); the pin chain (3 lines, extended to every app repo); the roster regenerated by the digest, pointing at project-forms.md (sibling card #25412)
cross-repo-coordination.md (51, net 0)	「决策收件箱按仓:平台在 objectstack / objectui,元数据项目在本仓」	「决策卡留在立卡仓,总监席扫全部仓 needs-user-decision 呈批」; the new-repo checklist gains GOVERNED_REPOS, the fleet App and the lane charter file, and names 「应用仓无分诊席」; paid by merging the 准入 and hotcrm-charter lines
scripts/pm/check-skill-line-ratchet.mjs	—	triage-duties.md 120 → 103, lanes/director.md 70 → 87, declared as one CROSS_FILE_MOVE (destination director.md, was 70; source triage-duties.md, was 120): +17 against a net source decrease of 17, map total unchanged

Acceptance checks on this head: git grep -n '决策收件箱按仓' -- .claude/skills → no hit; git grep -n 'os-bill\|hotlong\|os-elon-musk' -- .claude/skills/pm-dispatch/references/ → no hit; no rule line names a login.

Line budget

File	Lines	Ceiling	Net
references/contract-review.md	53	60	+5 (headroom was 12)
references/landing-operations.md	101	101	0 (+1 −1)
references/dispatch-runbook.md	241	241	0 (+1 −1, 4 edited in place)
references/triage-duties.md	103	103 (was 120)	−17
references/lanes/triage.md	7	7	0 (rewritten)
references/lanes/director.md	87	87 (was 70)	+17 (cross-file move)
references/cross-repo-coordination.md	51	51	0 (+1 −1, 1 edited)

SKILL.md untouched (319/319). Widest edited line 120 bytes.

Gates

On eadbdfc (after merging main with #25427): pnpm check:pm-skill-ratchet ✓ (self-test 164 cases; declared cross-file moves 3, total ceilings down 488; every covered file at or under its ceiling), pnpm check:pm-skill-id-lint ✓ (87 files clean), pnpm check:skill-frame-sync ✓, pnpm check:skill-frame-freshness ✓, scripts/check-commit-card-trailers.mjs --range origin/main..HEAD ✓. No published package moves (.claude/** and one ceiling file), so skip-changeset.

Ordering and open PRs

• Lands after pm-dispatch: project forms — lane project and director project, lanes read from the seat post's 🟢 line, the maintainer's one-sentence assignment, takeover of a walled account, mailbox PRs, generated roster board (maintainer's word 2026-10-23) #25412 (sibling card, project-forms.md): its PR merged first and main is merged in here (clean, no conflict). The two spots re-read after that merge need no edit: the project-forms.md pointer in lanes/director.md 职责四 now resolves to the file that card added, and the 授权面 line on main already reads 「直连 ⛔ 无 Routine/cron」, which leaves the project-run 总监席's hourly inbox scan and daily digest (project-forms.md 例行) intact. Post-merge counts: SKILL.md 318, lanes/director.md 87, seat-lifecycle.md 95.
• Open PRs on the same tree at push time: docs(pm-dispatch): a project-run seat form beside the Routine form — the seat post as a stub, the dispatch order in the card thread, event wake plus one patrol per project, 项目总监 → 总监席 #25385 (dispatch-runbook.md 〈卡线程〉 L141–L142, lanes/director.md L1), docs(pm-dispatch): a project-coordinator reference — the cross-lane scheduling rules a Claude Code project runs by, so its instructions name only its lanes #25255 (new coordinator.md, runbook L136), docs(pm-dispatch): fold the engine, services and cli lanes into domain:server #25247 (lane files). This PR touches none of their hunks (runbook L39–L46, L52–L53, L64, L69–L70; director.md L22, L51, L68).

Acceptance notes

• The card's acceptance names a record-recognisers.mjs --template run that shows where the account line goes; scripts/pm/record-recognisers.mjs is outside this claim's file surface (devx S card, same stroke as the queue-guard check). Until that lands, the reviewer adds the Reviewed-by-account: line by hand beside Reviewed-by:, as contract-review.md now says; the key name is the one the check-governed-queue-guard: a PR landed from a project thread needs a review of record whose Reviewed-by session belongs to a different account from the PR's attribution github_login, else Tier S does not enqueue (maintainer's word 2026-10-23) #25415 queue guard reads, so the two PRs agree without waiting for the template change.
• seat-post-protocol.md 发版板运维 still reads 「生产者:主仓归分诊座位」; seat-lifecycle.md 〈座位贴协议〉 still says the triage round releases a silent claim, and its 轮次报告 line still counts disjunct ④. All three files are outside this claim's surface (and docs(pm-dispatch): a project-run seat form beside the Routine form — the seat post as a stub, the dispatch order in the card thread, event wake plus one patrol per project, 项目总监 → 总监席 #25385 edits the first two); one-line follow-ups for the seat: 「主仓归总监席」, 「由总监席摘要一笔中继释放」, 「析取④ → 车道席补齐」.
• The 在飞活性复查 lines (knock, RECLAIM_AFTER_HOURS, Release:) stay in triage-duties.md because seat-lifecycle.md points there; line 5 of that file names the 总监席 digest as the run that executes them.
• The body's first line is the HTML-comment attribution block the project session requires; os-dev.md 〈干净收尾〉 forbids HTML comments in GitHub text. Reported as a deviation, not hidden.

Governed surface .claude/** (Tier S): draft, awaiting the seat's CONTRACT_REVIEW_TIER review and the maintainer's word; ⛔ not to be flipped ready, queued or armed by this thread.

🤖 Generated with Claude Code

https://claude.ai/code/session_011XvnQKt7WvdyvD2X4DLc8R