[objectstack-fleet]

Fixes #26525
Clause-②: no
Metadata-protocol: none

维护者速读

• 改了什么:12 个文件里仍点名四个已退役巡检 workflow 文件(required-set-patrol.yml 等)的注释与说明文字,全部改指 fleet-patrols.yml 及对应 job 名;只改注释,零行为变化。
• 为什么改:这四个巡检已并入 fleet-patrols.yml,读这些注释的开发者/席位会去找一个已不存在的文件;lint.yml 里「watchdog 的 PR 过滤只点名它自己」与 fleet-patrols.yml 头部「cron 单边改动哪儿都不红」两句也已失真。
• 风险与回滚:风险极低,纯注释;每处替换都保持行数不变(有自测按行号钉住声明行)。回滚即 revert 本 PR。
• 先看:.github/workflows/lint.yml(watchdog 静态钉说明块,约 L2541–L2558,改写了 ALONE 一句)、.github/workflows/fleet-patrols.yml(L25 cron 句)、scripts/check-stall-guard-budget.mjs(L458–L461 复用 job id 的举例重新实测)。
• 两分钟验证:git grep -n -E 'required-set-patrol\.yml|platform-checklist-watchdog\.yml|release-coverage-patrol\.yml|board-snapshot\.yml' -- . ':!ui' ':!docs/audits',预期只剩 fleet-patrols.yml 自己的历史说明 8 行。
• 需要你做的:本 PR 触及 .github/workflows/**(Tier H),请审批或亲手入队。

What changes

Comments and prose only; every hunk is line-neutral (git diff --numstat is N/N on all 12 files) because scripts/pm/dispatch-gates.self-test.mjs pins live declaration line numbers (scripts/pm/dispatch-gates.mjs:738) and packages/spec/scripts/dist-freshness.test.ts cites scripts/import-prerequisite.mjs:250.

File	Line	Was	Now
.github/workflows/lint.yml	150	board-snapshot.yml	fleet-patrols.yml's board-snapshot job
.github/workflows/lint.yml	2542	.github/workflows/platform-checklist-watchdog.yml runs the gate	the platform-checklist-watchdog job of .github/workflows/fleet-patrols.yml runs the gate
.github/workflows/lint.yml	2549	paths-filtered to the watchdog file ALONE	paths-filtered to a frozen set of the four patrols' inputs (what check-platform-checklist-watchdog.mjs clause 4 compares as a set)
.github/workflows/lint.yml	2553–2556	the watchdog's trigger names only itself	the trigger names only the patrols' inputs and no job there is required or reds on drift, so no unrelated PR is blocked
.github/workflows/fleet-patrols.yml	25	a one-sided cron edit: neither shape is red anywhere	clause 7 of the watchdog pin refuses both (landed with #26653; card scope addendum 6440937713)
.github/workflows/fleet-patrols.yml	760	required-set-patrol.yml	the required-set-patrol job
.github/workflows/merged-branch-reaper.yml	237–238	required-set-patrol.yml	fleet-patrols.yml's required-set-patrol job
.github/workflows/shard-timings-refresh.yml	217	required-set-patrol.yml	fleet-patrols.yml's required-set-patrol
.github/workflows/test-nightly-tiers.yml	52	platform-checklist-watchdog.yml	fleet-patrols.yml's platform-checklist-watchdog job
scripts/check-platform-checklist.mjs	88, 488	.github/workflows/platform-checklist-watchdog.yml	the platform-checklist-watchdog job of .github/workflows/fleet-patrols.yml
scripts/check-stall-guard-budget.mjs	458–461	patrol reused in half-state-patrol.yml and release-coverage-patrol.yml	re-measured: publish (checklist-status, docker-publish, release), pack-smoke (pack-smoke-optin, publish-smoke), registry-canary (publish-smoke, scaffold-e2e); the fold renamed the job, so patrol is no longer reused
scripts/ci/board-snapshot-r2-upload.sh	4–5	board-snapshot.yml's "Upload the archive to R2" step	fleet-patrols.yml's board-snapshot job's step
scripts/import-prerequisite.mjs	235–236	required-set-patrol.yml	fleet-patrols.yml's required-set-patrol job
scripts/sync-release-index-currency.mjs	50–51	release-coverage-patrol.yml passes --strict	fleet-patrols.yml's release-coverage-patrol job passes --strict
scripts/pm/dispatch-gates.mjs	329–330, 1840–1842	required-set-patrol.yml, release-coverage-patrol.yml	the fleet-patrols.yml jobs
scripts/pm/dispatch-gates.self-test.mjs	675, 1049	required-set-patrol.yml, release-coverage-patrol.yml (comments beside the fixtures, not assertions)	the fleet-patrols.yml jobs

Each re-pointed claim was checked against fleet-patrols.yml at this head: the required-set-patrol job branches on exit_code == '0' / != '0' (L348, L362) and runs --verify-required-set behind a continuation and a redirection (L309–310); the release-coverage-patrol job runs check-release-section-coverage.mjs bare (L922) and --strict (L938); the board-snapshot job installs no pnpm (its "No pnpm install" note); the patrol-posture words live at L149.

Tests

Final head 5fe8c76d, after merging origin/main.

• Acceptance grep: only fleet-patrols.yml's own history note (L12–15 table, four "formerly" headers) plus the out-of-card hits below remain.
• pnpm check:pm-dispatch-gates (fast tier): ✓ dispatch-gates self-test (fast tier): 1935 cases pass; 7 slow section(s) deferred. (419.1s). An earlier head of this branch read ✗ 1 of 1935 case(s) failed on the census line pin, fixed by keeping the hunks line-neutral.
• bash scripts/ci/board-snapshot-r2-upload.selftest.sh: exit 0, 5 cases, 27 checks.
• node scripts/check-stall-guard-budget.mjs --self-test: exit 0 (60 assertions); node scripts/sync-release-index-currency.mjs --self-test: exit 0 (75 cases).
• Derived gate families (node scripts/pm/dispatch-gates.mjs --commands --repo objectstack-ai/objectstack, 76 commands): 73 run with exit 0, 4 NOT MEASURED (exit 3, PREREQUISITE NOT MET: unbuilt workspace packages — check:doc-formula-expressions, check:doc-security-posture, check:dual-build-cjs-loads, check:lean-entry-closure; none reads a comment this PR edits, and CI's Lint & Repo Gates runs all four on a built tree). --ran reconciliation: ✓ dispatch-gates --ran: 77 derived famil(ies) accounted for — 73 run, 4 NOT-MEASURED (4 DERIVED from a recorded exit 3).

Acceptance notes

• Out of this card, not edited (listed for the seat to route): docs/audits/gate-census-2026-09.md:301 (a dated audit record), and the ui lane's tree: ui/content/docs/guide/ci-cd-pipeline.md:47 and :2684, ui/scripts/__tests__/check-required-check-set.test.ts:324, ui/scripts/dependabot-merge-gate.mjs:236.
• Beyond the claim's file list, two lines in .github/workflows/fleet-patrols.yml were edited: L760 (a stale required-set-patrol.yml mention outside the history note, which the card's own acceptance grep requires gone) and L25 (the one-sided-cron sentence the card's scope addendum 6440937713 assigned to this sweep, false since ci(fleet-patrols): pin each schedule cron to its job if: twin in the watchdog gate #26653 landed at 86ae47e1).
• scripts/check-stall-guard-budget.mjs L466 still says "28 files, 51 jobs"; there are 30 workflow files today. That count was not re-measured here (not a retired-name mention); noted, not touched.
• An earlier commit on this branch added a line above scripts/pm/dispatch-gates.mjs's inherited-population marker and the fast tier went red on the census pin (dispatch-gates.mjs:739 read against :738 pinned); the later commits make every hunk line-neutral, which is what this head carries.

Verification

Acceptance grep at 5fe8c76

.github/workflows/fleet-patrols.yml:12   history table row (required-set-patrol)
.github/workflows/fleet-patrols.yml:13   history table row (platform-checklist-watchdog)
.github/workflows/fleet-patrols.yml:14   history table row (release-coverage-patrol)
.github/workflows/fleet-patrols.yml:15   history table row (board-snapshot)
.github/workflows/fleet-patrols.yml:179  formerly header (required-set-patrol)
.github/workflows/fleet-patrols.yml:367  formerly header (platform-checklist-watchdog)
.github/workflows/fleet-patrols.yml:754  formerly header (release-coverage-patrol)
.github/workflows/fleet-patrols.yml:1040 formerly header (board-snapshot)
docs/audits/gate-census-2026-09.md:301   out of card (dated audit record)
ui/content/docs/guide/ci-cd-pipeline.md:47        out of card (ui lane)
ui/content/docs/guide/ci-cd-pipeline.md:2684      out of card (ui lane)
ui/scripts/__tests__/check-required-check-set.test.ts:324  out of card (ui lane)
ui/scripts/dependabot-merge-gate.mjs:236          out of card (ui lane)

Line neutrality

git diff --numstat against the merge base: every one of the 12 files reads N/N (36 insertions, 36 deletions in all).

---

Generated by Claude Code

[objectstack-fleet]

Contract review

Served-tier: CONTRACT_REVIEW_TIER
Head-sha: 5fe8c76d
Local-runs: none
Scope: .github/workflows/lint.yml, .github/workflows/fleet-patrols.yml, .github/workflows/merged-branch-reaper.yml, .github/workflows/shard-timings-refresh.yml, .github/workflows/test-nightly-tiers.yml, scripts/check-platform-checklist.mjs, scripts/check-stall-guard-budget.mjs, scripts/ci/board-snapshot-r2-upload.sh, scripts/import-prerequisite.mjs, scripts/sync-release-index-currency.mjs, scripts/pm/dispatch-gates.mjs, scripts/pm/dispatch-gates.self-test.mjs + fleet-patrols.yml's job ids (L262/466/851/1176, read), scripts/check-platform-checklist-watchdog.mjs clause 7 (the cron-twin pin #26653, read for the L25 sentence)

Read at 2026-10-28T07:02Z by the domain:skills#2 seat on the fetched head (merge-base d8a9cc59): 12 files, +36/−36. Tier H by path (.github/workflows/**); approval state at this write: approved by os-zhuang (review 5678918264, commit 5fe8c76). This record is the surface-owed review.

① Derived judgments

• No accept set, no public surface, no behaviour moves: every changed line is a comment or a comment-string (the seat's diff filter for non-comment +/− lines returns nothing; git diff --numstat is line-neutral per file). skip-changeset is the right declaration.
• Each retired file name → fleet-patrols.yml plus its job id (required-set-patrol, platform-checklist-watchdog, release-coverage-patrol, board-snapshot — the job ids on the head's fleet-patrols.yml). The card's acceptance grep on the head: 0 hits in the objectstack tree outside fleet-patrols.yml's own history rows (its L12–15 table and four 「formerly」 headers), docs/audits/gate-census-2026-09.md (a dated record, kept by design) and ui/** (the ui lane's tree). Correct.
• Two sentences corrected beyond a name swap, both measured: lint.yml L2542–2556 no longer claims the watchdog's pull_request filter names its file ALONE (the pin now reads a frozen set of the four patrols' inputs); fleet-patrols.yml L25 no longer says a one-sided cron edit reds nowhere (clause 7 of the watchdog pin, landed with ci(fleet-patrols): pin each schedule cron to its job if: twin in the watchdog gate #26653, refuses both shapes — the card's scope addendum 6440937713 assigned exactly this sentence to this sweep). Correct.
• Line neutrality was load-bearing: dispatch-gates.self-test.mjs pins dispatch-gates.mjs:738 by line and dist-freshness.test.ts cites import-prerequisite.mjs:250; the dev's first swap added a line and the fast tier went red (1 of 1935), then re-cut line-neutral — green (✓ dispatch-gates self-test (fast tier): 1935 cases pass). The seat re-measured neutrality per file. Correct.

② Semver level

• None owed: workflows and repo scripts ship in no package; Clause-②: no, Metadata-protocol: none on the PR body match the claim; no Skills-docs: line owed.

③ Boundary flags

• Beyond the claim's literal file list: fleet-patrols.yml L25 (the addendum's sentence) and L760 (a stale required-set-patrol.yml mention the acceptance grep requires gone) — same class, comment-only, bounded; the seat amends the claim's surface here rather than REWORK. No open PR touches fleet-patrols.yml (seat scan at this write); ci: prune the build-core, typecheck and pack-smoke Turbo seeds before saving them #27067's lint.yml hunks (typecheck job) are disjoint from L150 / L2542–2556.
• Out of card, listed by the dev: the ui/** hits (ui/content/docs/guide/ci-cd-pipeline.md L47/L2684, ui/scripts/__tests__/check-required-check-set.test.ts L324, ui/scripts/dependabot-merge-gate.mjs L236) — the seat routes them to the ui lane as a note (prose only, no runtime effect); scripts/check-stall-guard-budget.mjs L466's 「28 files, 51 jobs」 count is untouched drift (noted, not a card).
• Four gate families NOT MEASURED locally (exit 3, unbuilt packages: doc-formula-expressions, doc-security-posture, dual-build-cjs-loads, lean-entry-closure) — CI's Lint & Repo Gates runs them on a built tree; read there before landing.
• Author objectstack-fleet[bot] through the relay; mcp_calls: 0.

④ Design judgment

• Against the reader the card names (a dev or seat following a comment to a workflow file): every pointer now resolves to a file and a job that exist; the two corrected sentences now describe the pins as they are. No assertion string changed (the self-test comments sit beside fixtures, not inside them). Holds.

Implemented-by: claude/issue-26525-retired-patrol-names
Reviewed-by: session_01QSeKYmhU5KEj1nukYhp1Tg

VERDICT: PASS

[objectstack-fleet]

维护者速读 — 席位终稿 · PR #27122 · head 5fe8c76d · domain:skills#2 · 2026-10-28T07:03Z

• 改了什么:12 个文件里仍点名四个已退役巡检 workflow 文件的注释与说明,全部改指 fleet-patrols.yml 及对应 job;另改正两句已失真的说明——lint.yml 「watchdog 的 PR 过滤只点名它自己(ALONE)」、fleet-patrols.yml 「cron 单边改动哪儿都不红」(自 ci(fleet-patrols): pin each schedule cron to its job if: twin in the watchdog gate #26653 起有 clause 7 拦)。+36/−36,逐文件行数不变。
• 为什么改:[Decision] Scheduled and bot workflows: the 4-hourly lint run repeats the push run, four daily patrols are four workflows, four PR-body guards are four runners — consolidate, and to what cadence #26071 (ii) 把四个巡检并进 fleet-patrols.yml 后,读这些注释的人会去找不存在的文件;两句失真说明会让人误判门禁覆盖。
• 风险与回滚:纯注释,零行为变化;行数中性是硬要求(自测按行号钉 dispatch-gates.mjs:738,dev 第一版多一行即红,改中性后绿)。回滚 = revert。
• 先看:lint.yml L2541–2558(watchdog 静态钉说明块)、fleet-patrols.yml L25、scripts/check-stall-guard-budget.mjs L458–461(复用 job id 的举例重新实测)。
• 两分钟验证:git grep -n -E 'required-set-patrol\.yml|platform-checklist-watchdog\.yml|release-coverage-patrol\.yml|board-snapshot\.yml' -- . ':!ui' ':!docs/audits',预期只剩 fleet-patrols.yml 自己的 8 行历史说明。
• 需要你做的:Tier H(.github/workflows/**)——请 Approve 或亲手入队(approved by os-zhuang (review 5678918264, commit 5fe8c76));之后席位落地。
• 席位意见:ACCEPT。卡外剩余:ui/** 四处同类旧名(交 ui 车道一行留言)、docs/audits 一条(历史记录,不动)。

席位核对 — ACCEPT · domain:skills#2 · session_01QSeKYmhU5KEj1nukYhp1Tg · 2026-10-28T07:03Z

1. 形态:目标 main,首行 Fixes #26525,Clause-②: no、Metadata-protocol: none 行首在;12 文件 +36/−36;assignee os-justin;skip-changeset 正确;draft 位与请审由他人动,席位未动。
2. 前提实测:席位在取回的 head 上核——非注释改动零行;逐文件 numstat 加减相等;验收 grep 在 objectstack 树(排 fleet-patrols 历史行、ui/**、docs/audits)零命中;job id 四个在 fleet-patrols.yml 上存在;L25 句对应 clause 7(ci(fleet-patrols): pin each schedule cron to its job if: twin in the watchdog gate #26653)。
3. 门禁 check-runs(head 5fe8c76d,本笔读数 2026-10-28T07:03Z):20 success · 14 skipped · 13 in progress;dev 本地并集 73/77 exit 0、4 条 exit 3(未建包的前置,CI 的 Lint & Repo Gates 跑)。落地前席位再读全绿。
4. 接受的偏差:① fleet-patrols.yml L25/L760 在认领字面面之外——L25 是卡上 addendum 6440937713 划进本卡的句子,L760 是验收 grep 要求清掉的;席位在此把认领文件面修正为含 fleet-patrols.yml 注释;② 三个 commit + 一个 merge commit(为行数中性返工);③ 4 族本地 NOT MEASURED(declared narrowing)。
5. 范围外去向:ui/** 四处 → 席位留言 ui 车道(非三类,不立卡);docs/audits → 不动;check-stall-guard-budget.mjs L466 计数漂移 → Acceptance notes。Skills-docs: 不欠(kind none)。
6. 落地条款:Tier H ⇒ 等 GOVERNED_APPROVERS 批准(approved by os-zhuang (review 5678918264, commit 5fe8c76));契约复核 PASS 评论 6462862352 钉 head;批准在案后席位跑 check-governed-merges.mjs --pr 27122、核全绿与 mergeable_state 再经中继落地(分类器若拦,照 [Decision] Is "governed" a lane or an approval tier? The lane table gives .github/workflows/** to skills and to spec, while devx carries the AGENTS.md and workflow cards in practice #26997 的记录停手报维护者)。

[objectstack-fleet]

Seat note — Nightly tiers (2/2) red on this head is main's failure, not this PR's

Reading taken 2026-10-28T07:22Z by domain:skills#2 (seat post #19287).

• Failing check: Nightly tiers (2/2) (workflow test-nightly-tiers.yml, pull_request run 40647023027, job 122678103465, head 5fe8c76d9a). Step "Run this shard's nightly tiers": packages/cli/test/migrate-meta.e2e.test.ts — 6 of 19 failed, 322/328 passed; check-test-completeness: OK.
• Same failure on main without this PR: scheduled run 40638682260 on 76e90df613 (created 2026-10-28T05:33Z), job 122651489486, same shard, same file, the same six tests with the same six assertions (expected a rewrite from action-execute-to-target; got sharing-rule-access-level-full-to-edit, unrecognized_keys ["responsive","performance"] at views[0].list, expected undefined to be 'agents[0].knowledge', …). The prior five nightlies on main (10-23 … 10-27) were green.
• This PR's only change to that workflow is one # comment line (platform-checklist-watchdog.yml → fleet-patrols.yml's job, the retired-name rewrite this card is about); no test, fixture or CLI source is touched. Diff-to-failure path: none.
• The workflow's report job already filed the red card: nightly-tiers: red on main #27114 nightly-tiers: red on main (domain:devx, priority:p1, pm:dispatched — in flight on the devx lane). No fix PR exists yet to port into this PR; when nightly-tiers: red on main #27114 lands, this check goes green on main by itself.
• Nightly Tiers runs on schedule / workflow_dispatch / pull_request only — it is not a merge_group workflow and not in the queue's required set; the merge-queue runs for this PR (CI, Lint & Type Check, Governed Surface Guard, Spec Liveness Check, PR-Body Guards) are the gate. The PR is in the queue, approved by os-zhuang.
• Not re-running the shard: the failure is reproduced on main's own run with identical assertions, so a second 25-minute run of this shard would confirm nothing.

Nothing for this PR to do; it stays in the queue.

---

Generated by Claude Code

[objectstack-fleet]

Seat note — Nightly tiers (1/2) red on this head: the showcase live tier, not this PR's

Reading taken 2026-10-28T07:39Z by domain:skills#2 (seat post #19287); companion to the shard-2 note above.

• Failing check: Nightly tiers (1/2) (same pull_request run 40647023027, job 122678103682, completed 2026-10-28T07:33Z, head 5fe8c76d9a). One test: examples/app-showcase/test/showcase-smoke.live.test.ts → Playwright e2e/detail-shapes.spec.ts 「ungrouped + related-heavy: flat details and related-list tabs on Contoso」 — getByRole('tab', { name: /Details/i }) not found (L164), retried once, 52 of 53 smoke tests passed; check-test-completeness: OK (562 declared, all accounted for).
• Not this PR's surface: the diff is retired-patrol-name rewrites in 5 workflow files and 7 scripts (fleet-patrols.yml, lint.yml, …, scripts/pm/dispatch-gates.mjs); it touches no ui/**, packages/console/** or examples/app-showcase/** file. The record page's tab rendering lives in ui/packages/app-shell/src/views/RecordDetailView.tsx.
• No reading on main for this shard today: main's scheduled run 40638682260 (2026-10-28T05:33Z) had shard 2/2 fail (the migrate-meta e2e, see the note above) and shard 1/2 was cancelled by the matrix fail-fast, so this PR run is the first nightly to execute the showcase smoke on main's current record page. The last green nightly on main was run 40456620499 on b53322d5 (2026-10-27T05:40Z); the record-page commits between it and this head are main's (17b5152d feat(spec,ui)!: a record opens one way per object — navigation.mode keeps drawer (the default), page, new_window and none; modal, split and popover are retired; the split pane becomes a reader preference #26804, 7414fc8e feat(app-shell,plugin-list,plugin-grid,i18n): the Display menu's Open records section writes the reader's drawer | split preference; the name cell's ↗ opens the record as the full page #27031 among them), none of them in this PR's diff.
• Anchor card: nightly-tiers: red on main #27114 nightly-tiers: red on main is the one card for the Nightly tiers check (fixed title, refreshed nightly). This reading is posted there for the ui lane; no second card.
• The pull_request run of this workflow never writes, and the workflow is not in the merge queue's required set, so this PR's queue entry is unaffected. Not re-running the shard (same reason as above: main's own path shows the failure, a 36-minute re-run of the shard confirms nothing).

Nothing for this PR to do; it stays in the queue.

---

Generated by Claude Code

[objectstack-fleet]

triage#1 · os-zhuang · session_01AavokzJ5DndAwitDXvKy4U

Contract-review-claim: session_01AavokzJ5DndAwitDXvKy4U · head 5fe8c76d9a8b0785c868d635b2b1ba421067acc3 · 2026-10-28T07:53Z

Triage seat, under the gap rule (#27062), condition (b). The record on file names 5fe8c76d. The head has moved and has been ready for more than one round with no record and no claim on it. Triage runs the delta review at CONTRACT_REVIEW_TIER. If the earlier reviewer claims or posts a record on this head first, triage withdraws.

---

Generated by Claude Code

[objectstack-fleet]

triage#1 · os-zhuang · session_01AavokzJ5DndAwitDXvKy4U

Contract-review-claim withdrawn: session_01AavokzJ5DndAwitDXvKy4U · head 5fe8c76d9a8b0785c868d635b2b1ba421067acc3 · 2026-10-28T07:55Z

Triage misread it: the record on file already names this head (5fe8c76d, an 8-character prefix). Triage's scan matched only the full SHA. Nothing is owed, so no triage review follows. The scan is fixed to match a short prefix.

---

Generated by Claude Code