Repository navigation
[Decision] permissions.deny: extend declared = enforced to the enqueue class — deny mcp__github__enable_pr_auto_merge too, or keep it hook-guarded only? #18282
Description
Activity
Ruling: class-1 self-adjudication · letter A · director seat · 2026-09-15T15:05Z
Director seat, session
session_01WCEaPsmKY4UyoivKkkaUHt. Listed in the batch #135 追认表 presented on 2026-09-15; the maintainer's reply 「135 同意」 carries no veto.A —
mcp__github__enable_pr_auto_mergeandmcp__github__disable_pr_auto_mergejoinpermissions.denyin.claude/settings.json(lock 1, 15 → 17 entries);guard-governed-enqueue.shstays as defence in depth;references/rest-channel.md:53 drops the 「auto-merge 备用 MCP 未拒」 clause. The REST route (PUT …/pulls/N/ccr/auto_merge, rest-channel :50) already serves every real enqueue, so nothing a seat does today is lost.Class-1 criteria: (a) the direction is set by lock 1 and the #18205 → PR #18216 rulings (write identity follows the channel; REST is the only write channel) — this extends declared = enforced to the enqueue class; (b) a denied tool fails loudly at the harness, and one revert restores it; (c) a gate is strengthened, not weakened, and no capability, contract or spend moves. Rules layer: the change lands as a four-piece governed draft on an authorized APPROVED, ⛔ never armed or merged by a seat; the objectui mirror of lock 1 (PR objectui#9448) gets the same two entries in its own card once this lands.
needs-user-decision→pm:queue,domain:skills.
Generated by Claude Code
Claim: PM loop round 1
Session:session_01HZfg2AwVX191qCizp88gQr(skills seat; claimed at 2026-09-15T16:09Z)
Branch:claude/issue-18282-deny-enqueue-class
Worktree:objectstack-issue-18282
Domain:domain:skills
File surface:.claude/settings.json(permissions.deny+2:mcp__github__enable_pr_auto_merge,mcp__github__disable_pr_auto_merge),scripts/pm/check-settings-deny-roster.mjs(CONTENT_WRITE_TOOLS15 → 17, its header's 「deliberately NOT asserted」 paragraph re-keyed, self-test),.claude/skills/pm-dispatch/references/rest-channel.md:53 (drop 「auto-merge 备用 MCP 未拒」) — nothing else;guard-governed-enqueue.shuntouched (stop on breach; explain in the report)
Container & model:S,mode:subagent,model: CONTRACT_REVIEW_TIER— the rules layer (.claude/settings.json): the seat holds the dev at the review tier by judgment (no path mandate derived); seat review atCONTRACT_REVIEW_TIER
Clause-②: no
Thread-read: 5682626575 (the director seat's ruling A — class-1 self-adjudication, batch #135 追认 — the newest comment on the card at claim time)
Fold-or-serial: no look-alike in the queue (#18310 / #18312 are other files; #18092 in flight touchesAGENTS.mdand the trailer probes)
Serial constraints cleared: PR #18285 (the deny-roster gate) LANDED at 2026-09-15T16:07Z as52c1a8c4— the constant this card extends is onorigin/main;.claude/settings.json, the gate andrest-channel.mdare held by no open PR; batch 2/3 (#18092's dev in flight)
Generated by Claude Code
os-dev-report
{ "issue": 18282, "status": "done", "branch": "claude/issue-18282-deny-enqueue-class", "worktree": "/home/user/objectstack-issue-18282 (cut from origin/main 52c1a8c4; fast-forwarded to 6ef33128 before any edit, BASE re-anchored there; origin/main 10a7b9fa merged in as ad7a3da5)", "pr": "https://github.com/objectstack-ai/objectstack/pull/18317", "head_sha": "ad7a3da5a8b19597382d78689fe1ffb48d43a5a3", "premise_still_valid": true, "files_changed": [ ".claude/settings.json (+2 deny entries, 15 → 17; nothing else moved)", "scripts/pm/check-settings-deny-roster.mjs (CONTENT_WRITE_TOOLS 15 → 17; header re-keyed; membership rule; new 4-case battery; floor 7 → 8; self-test 32 → 36)", ".claude/skills/pm-dispatch/references/rest-channel.md (line 53 only: 「auto-merge 备用 MCP 未拒」 → 「auto-merge MCP 锁 1 同拒」, 118 → 117 B, 82/82 lines)" ], "summary": "Ruling A implemented: mcp__github__enable_pr_auto_merge and mcp__github__disable_pr_auto_merge join permissions.deny (lock 1, 15 → 17), the deny-roster gate's CONTENT_WRITE_TOOLS gains the same two names with its header re-keyed to \"ruled closed\" and a new self-test battery, and rest-channel.md :53 drops the 「auto-merge 备用 MCP 未拒」 clause in place. guard-governed-enqueue.sh and its self-test are untouched. Draft PR #18317 on main, Fixes #18282, rules layer — waits for an authorized APPROVED, then the owning seat lands it under ruling C (card 17971); never readied/queued/armed by me. The card's assignee (os-zhuang) was already set by the dispatch; I wrote no assignee.", "tests": "See gates + reverse_verification. Union of the 40 derived commands run on the merge commit ad7a3da5 (git rev-parse --short HEAD = ad7a3da5): 39 run, 38 exit 0, 1 NOT MEASURED (exit 3, @objectstack/formula not built), battery exit 0 in 454 s; --ran verdict quoted in gates. The same union ran earlier on 34442240 with the identical 40-command list and the identical outcome (battery 462 s).", "gates": [ { "command": "node packages/lint/scripts/check-reference-carrier-shape.mjs", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "node packages/lint/scripts/check-reference-carrier-shape.mjs --self-test", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "node scripts/check-ci-filter-parity.mjs", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "node scripts/check-closing-keyword-parity.mjs", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "node scripts/check-closing-keyword-parity.mjs --self-test", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "node scripts/check-comment-mask-corpus.mjs", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "node scripts/check-declaration-mirrors.mjs", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "node scripts/check-declaration-mirrors.mjs --self-test", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "node scripts/check-scripts-symbol-anchors.mjs", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "node scripts/check-scripts-symbol-anchors.mjs --self-test", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "node scripts/check-self-test-wired.mjs", "exit": 0, "note": "every one of the 212 scripts CI runs with a --self-test has it run by CI" }, { "command": "node scripts/check-self-test-wired.mjs --self-test", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "node scripts/check-self-test-workflow-commands.mjs", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "node scripts/check-self-test-workflow-commands.mjs --self-test", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "node scripts/check-whole-set-label-write.mjs", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "node scripts/check-whole-set-label-write.mjs --self-test", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "node scripts/pm/bare-root-worklist.mjs --self-test", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "node scripts/pm/check-governed-queue-guard.mjs --self-test", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "node scripts/report-test-timings.mjs --self-test", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "pnpm --filter @objectstack/lint run check:doc-formula-expressions", "exit": 3, "note": "NOT MEASURED — exit 3, PREREQUISITE NOT MET: workspace package @objectstack/formula is not built; it depends on @objectstack/spec and the diff touches no package, so left to CI (declared narrowing)" }, { "command": "pnpm check:agent-test-spelling", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "pnpm check:bash32-floor", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "pnpm check:cli-command-ids", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "pnpm check:cross-package-test-inputs", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "pnpm check:doc-authoring", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "pnpm check:driver-memory-census", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "pnpm check:entry-guard", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "pnpm check:nul-bytes", "exit": 0, "note": "self-test 75 assertions; gate green; separate control-char grep over the three files: no hits" }, { "command": "pnpm check:parse-guard", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "pnpm check:pm-governed-merges", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "pnpm check:pm-half-states", "exit": 0, "note": "run on the #18311 copy after the merge: self-test 4196 cases pass" }, { "command": "pnpm check:pm-settings-deny-roster", "exit": 0, "note": "self-test 36 cases; gate: 17 content-write tool(s) declared = enforced (17 mcp__github__ deny entries, 0 outside)" }, { "command": "pnpm check:pm-skill-id-lint", "exit": 0, "note": "27 file(s) clean" }, { "command": "pnpm check:pm-skill-ratchet", "exit": 0, "note": "rest-channel.md is 82 lines (ceiling 82; headroom 0); widest table row 0 B" }, { "command": "pnpm check:pnpm-filter-targets", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "pnpm check:ratchet-remedy-authority", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "pnpm check:refd-timer-probe", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "pnpm check:skill-frame-sync", "exit": 0, "note": "exit captured by redirect before any pipe; green" }, { "command": "pnpm check:watch-hint-literal", "exit": 0, "note": "72 declarations across 4 rostered names, all literal" }, { "command": "pnpm check:pm-dispatch-gates", "exit": 0, "note": "the battery, run detached (setsid nohup, waited with tail --pid): dispatch-gates self-test 1730 cases pass; 454.0 s on this box (462 s on the pre-merge run of 34442240)" }, { "command": "node scripts/pm/dispatch-gates.mjs --ran union-ran-all.txt (on ad7a3da5)", "exit": 0, "note": "✓ dispatch-gates --ran: 40 derived famil(ies) accounted for — 39 run, 1 NOT-MEASURED (1 DERIVED from a recorded exit 3). No STALE TREE; origin/main = 10a7b9fa, 0 behind." }, { "command": "node_modules/.bin/eslint scripts/pm/check-settings-deny-roster.mjs", "exit": 0, "note": "before (base) and after (head) both exit 0" }, { "command": "bash .claude/hooks/guard-governed-enqueue.selftest.sh", "exit": 1, "note": "PRE-EXISTING, byte-identical before/after (diff of logs empty): 54 passed, 1 failed — FAIL want=allow got=block \"an exception-row path in a repo this container cannot resolve\"; environmental: /home/user/cloud exists and the hook resolves it at lines 453–454; hooks untouched (git diff --stat 6ef33128 ad7a3da5 -- .claude/hooks/ empty)" } ], "reverse_verification": { "base_reading": "origin/main 6ef33128 (roster + file identical to 52c1a8c4): pnpm check:pm-settings-deny-roster → \"✓ check-settings-deny-roster self-test: 32 cases pass.\" + \"✓ check-settings-deny-roster: 15 content-write tool(s) declared = enforced in .claude/settings.json (15 mcp__github__ deny entr(ies), 0 outside this gate's population and ignored).\"", "drift_fixture_on_base_roster": "a 17-entry settings fixture (main's file + the two new deny entries) judged by main's 15-name roster via --settings: exit 1 — \"denies mcp__github__enable_pr_auto_merge, mcp__github__disable_pr_auto_merge, which this gate's roster does not declare — roster drift\". The direction this change removes.", "head_reading": "\"✓ check-settings-deny-roster self-test: 36 cases pass.\" + \"✓ check-settings-deny-roster: 17 content-write tool(s) declared = enforced in .claude/settings.json (17 mcp__github__ deny entr(ies), 0 outside this gate's population and ignored).\"", "missing_fixture_on_head_roster": "a 16-entry fixture (head file minus disable_pr_auto_merge) via --settings: exit 1 — \"does not deny mcp__github__disable_pr_auto_merge — the charter declares it closed while the enforced list leaves it open.\"", "ablation_hash_proofs": "From the committed state 34442240, script with trap on EXIT/INT/TERM and absolute paths, each hash checked non-empty before comparison. Leg A: .claude/settings.json ← base blob 0acd039e6b30d5d13b3aa119684282390e076d25 (git hash-object matched git rev-parse BASE:path), gate at HEAD → exit 1 \"does not deny mcp__github__enable_pr_auto_merge, mcp__github__disable_pr_auto_merge … leaves them open\"; restored via git checkout HEAD -- path, hash 428a0300bd5a72fd9d15a5120f266eab4b244290 = HEAD blob. Leg B: gate ← base blob 391f20ce0deb5ed125af46b8a0f8cacdcae46343, settings at HEAD → exit 1 \"denies … which this gate's roster does not declare — roster drift\"; restored, hash 5736aad3869c3024154f8a1f5d95fb8e2074b22a = HEAD blob. Restored tree: 17 = 17 green, git diff HEAD empty, git status --porcelain empty. (One annotation in my script said \"expect 0\" for a grep count of enable_pr_auto_merge in the base settings file; the count is 1 because the hook matcher on line 82 carries the name — the blob-hash proof is the authoritative reading, the grep was a courtesy.)", "hook_self_test": "bash .claude/hooks/guard-governed-enqueue.selftest.sh: base 54 passed / 1 failed; head 54 passed / 1 failed; diff of the two logs empty. Hooks untouched: git diff --stat 6ef33128 ad7a3da5 -- .claude/hooks/ is empty. The one red is pre-existing and environmental (see out_of_scope_findings); the two \"wired\" cases that read settings.json (matcher covers enable_pr_auto_merge / merge_pull_request) still pass on the head.", "direction_observed": "Both legs turned red in the predicted direction (containment in A, drift in B); no reversal, no diagnostics-multiplied case." }, "self_test_cases": { "before": 32, "after": 36, "floor": "7 → 8 (SELF_TEST_BATTERY_FLOOR)", "added_battery": "the enqueue class — declared closed (4)", "added_cases": [ "the roster declares the auto-merge arming tool", "the roster declares the auto-merge disarming tool", "a document denying exactly the roster reads declared = enforced", "a document missing one of the pair names it as left open" ], "note": "names pinned, not the count 17 — a pinned total is what the file's own header forbids; the count control is the gate's printed line (17) and the ablation. Shipped-file containment deliberately left to the live run, as the shipped-file battery's comment prescribes." }, "assumptions_verified": [ { "assumption": "origin/main = 52c1a8c4 carrying PR #18285 (gate live in Lint & Repo Gates and as pnpm check:pm-settings-deny-roster)", "verified": true, "evidence": "worktree cut at 52c1a8c4; lint.yml :1367–:1368 step \"Settings deny-roster pin (#18281)\"; package.json :92. origin/main then moved twice during the run (6ef33128 #18307, 10a7b9fa #18311) — both merged in." }, { "assumption": "CONTENT_WRITE_TOOLS is the one declaration (15) and nothing else pins the count", "verified": true, "evidence": "git grep -l for the gate name / constant: only package.json and the gate; no \"15\"/\"fifteen\" pin elsewhere." }, { "assumption": "header :57–:64 says the enqueue class is NOT in the roster", "verified": true, "evidence": "lines 57–64 at base, \"## What is deliberately NOT asserted\"." }, { "assumption": "the file already carries card numbers in header comments, so (#18282) is within convention", "verified": true, "evidence": "#18281 (:5), #18218 (:30, :41), #18282 (:62), #4690 (:81)." }, { "assumption": "SELF_TEST_BATTERY_FLOOR at :345", "verified": true, "evidence": "line 345, value 7; now 8." }, { "assumption": "rest-channel :53 reads the quoted row at 118 B; ratchet 82/82", "verified": true, "evidence": "wc -c 118 (incl. newline); ratchet line \"rest-channel.md is 82 lines (ceiling 82; headroom 0)\". After the edit 117 B, still 82/82." }, { "assumption": "platform-readings rows :41 · :50 · :59 · :61 describe enable_pr_auto_merge behaviour", "verified": true, "evidence": "true at 52c1a8c4; after PR #18307 (6ef33128) they sit at :41 · :49 · :58 · :60 (4 insertions, 5 deletions above them)." }, { "assumption": "guard-governed-enqueue.selftest.sh still passes untouched", "verified": false, "evidence": "reads 54 passed / 1 failed on the untouched base AND identically on the head; environmental (sibling /home/user/cloud present; the case expects no such checkout). Hooks untouched by diff." }, { "assumption": "pnpm install --offline --frozen-lockfile works in a fresh worktree (~8 s); pnpm at /opt/node22/bin", "verified": true, "evidence": "exit 0 in 5.1 s." }, { "assumption": "PR #18307 and PR #18311 in the queue, neither touching my files", "verified": true, "evidence": "both landed during the run: 6ef33128 touches platform-readings.md only; 10a7b9fa touches scripts/pm/check-half-states.mjs only. Overlap diff-stat with my three files + hooks: empty." }, { "assumption": "battery ~450 s", "verified": true, "evidence": "462 s (pre-merge) and 454 s (merge commit)." }, { "assumption": "dispatch-gates --commands on the three files prints the derived list", "verified": true, "evidence": "40 commands (21 pnpm, 19 node); identical list re-derived on ad7a3da5 with no paths (merge-base derivation)." } ], "deviations": [ "origin/main moved twice under the branch: first (6ef33128, #18307) before any edit — fast-forwarded, BASE re-anchored to 6ef33128; second (10a7b9fa, #18311) after the first union — merged as merge commit ad7a3da5 (never rebased) and the union re-run there. No generated artifact was involved (no os-regen-pending).", "The hook self-test is not green on this container before or after (54/1, identical); it is pre-existing and environmental, hooks are outside the card, so it is reported and filed as a finding rather than fixed.", "One derived family NOT MEASURED locally: pnpm --filter @objectstack/lint run check:doc-formula-expressions (exit 3, @objectstack/formula not built; would require a spec build for a diff that touches no package). Declared narrowing; CI runs it on a built tree.", "The draft PR was opened after the union completed rather than right after the first push, because the write budget forbids a PATCH of the body and the body must cite the union's sha; the pushed branch (16:20Z) was the early visible marker.", "Commit trailer pair written model-free per AGENTS.md (Co-Authored-By: Claude + Claude-Session:); the harness reminder's model-bearing Co-Authored-By form was not used — the reporting exemption in AGENTS.md covers this.", "rest-channel :53 wording chosen as 「auto-merge MCP 锁 1 同拒」 (117 B) rather than naming the two tools, to keep the row pointing at lock 1 instead of adding a second enumeration of the roster (the gate header forbids that).", "The first two post-stamped attempts were REFUSED offline by its stamp contract (exit 2, nothing written, no duplicate comment): the report first mixed the NOW token with bare quoted stamps, then carried the token names spelled literally in this very sentence; every quoted stamp is now a WAS token and the comment was posted once." ], "out_of_scope_findings": [ "to file (prose describing a channel lock 1 now denies; dedupe words: platform-readings enable_pr_auto_merge disable_pr_auto_merge rows lock 1 denied retire): references/platform-readings.md lines 41 (转 draft 与 disable_pr_auto_merge 都做), 49 (enable_pr_auto_merge 恒显式传 mergeMethod), 58 (照样成功 on mergeable_state clean), 60 (配额枯竭时回成功) — post-#18307 numbering; they describe MCP enqueue behaviour a seat can no longer reach; the REST ccr/auto_merge readings on rest-channel 50–52 are the live ones. For the seat to card like #18310.", "to file (class (a), reproducible, failing probe named; dedupe words: guard-governed-enqueue selftest sibling cloud checkout hermetic fail-open): .claude/hooks/guard-governed-enqueue.selftest.sh case \"an exception-row path in a repo this container cannot resolve\" expects allow on the premise that no sibling cloud checkout exists; on a box with /home/user/cloud the hook resolves it (lines 453–454) and blocks → \"54 passed, 1 failed\". Green in CI (no sibling), red here; the lint.yml step comment claims the matrices are hermetic. 承接者: skills seat (.claude/hooks/** is governed).", "noted, not filed: the objectui mirror of lock 1 (PR objectui#9448) needs the same two deny entries — the ruling assigns it its own card once this lands; 承接者: the skills seat per the ruling text.", "noted, not filed: check:doc-formula-expressions is derived for a .claude/skills/** prose edit but can only be measured on a built tree; a card touching no package pays a spec build to read it locally. 承接者:无 (observation; CI owns the run)." ], "mcp_calls": "0 — no MCP GitHub tool called (all reads via REST curl with GITHUB_TOKEN; the two enqueue tools on this session's roster were never invoked).", "api_writes": "REST proxy writes: 3 — POST /repos/objectstack-ai/objectstack/pulls (201 → #18317, draft); POST /repos/objectstack-ai/objectstack/issues/18317/labels via label-write.mjs (label-write.mjs --issue 18317 --add skip-changeset: exit 0 (four-step additive write with read-back; see the label-write log line quoted in the summary)); POST /repos/objectstack-ai/objectstack/issues/18282/comments via post-stamped.mjs (this report). Plus git push ×3 to origin claude/issue-18282-deny-enqueue-class (empty-branch probe, 34442240, ad7a3da5). No PATCH, no MCP.", "open_questions": [], "session": "subagent (mode:subagent) — no own session_01… id; parent/dispatching seat session_01HZfg2AwVX191qCizp88gQr, which is the harness-stamped Claude-Session: trailer on the commit.", "timings": { "claim": "2026-09-15T16:09Z (the dispatch claim comment)", "worktree_and_probe_push": "2026-09-15T16:12Z (approx.)", "install": "5.1 s", "edits_committed": "2026-09-15T16:20Z (34442240)", "union_1": "2026-09-15T16:21:48Z to 2026-09-15T16:29:32Z (battery 462 s)", "merge_commit": "2026-09-15T16:31Z (ad7a3da5)", "union_2": "2026-09-15T16:31:34Z to 2026-09-15T16:39:08Z (battery 454 s)", "pr_created": "2026-09-15T16:41:59Z (#18317)", "label_written": "2026-09-15T16:44:16Z", "reported_at": "2026-09-15T16:45Z" } }
Generated by Claude Code
ACCEPT — skills seat, session
session_01HZfg2AwVX191qCizp88gQr, 2026-09-15T16:49Z. Report 5684269831 on PR #18317 (headad7a3da5) reviewed by the checklist: files changed = the claim's surface exactly (.claude/settings.json, the roster gate, rest-channel :53; hooks untouched);Fixes #18282alone beside a closing keyword;skip-changesetread back;mcp_calls0; gates 40 / 39 / 1 NOT MEASURED / 0 by--ranon the merge head, battery 1730 pass twice;--pair0; the seat's re-run on a detached worktree of the head: the gate 17 = 17 with 36 cases (15 = 15 / 32 on main), ESLint 0, ratchet 82 / 82, wiring green, the diff read whole. One seat premise refuted and seven deviations answered in the record 5684320675; two follow-up cards filed. Rules layer ⇒ four-piece hung on the PR: record 5684320675, 速读终稿 5684321187, this ACCEPT,needs-user-decision+ reviewers os-zhuang and hotlong; lands by ruling C after an authorized APPROVED review — the seat never approves. The card stayspm:dispatcheduntil the three landing readings.
Generated by Claude Code
Landed — skills seat, session
session_01HZfg2AwVX191qCizp88gQr, 2026-09-16T02:19Z. PR #18317 (headad7a3da5) merged by the queue asceb6b5fb46abde4e1d60fa0857989ce2ddee59f9(single-parent squash pergit rev-list --parents) at 2026-09-16T02:16Z — themerged_atinstant, carried identically by themergedandremoved_from_merge_queuetimeline events. Readings at 2026-09-16T02:19Z:git log origin/maincarries(#18317); the queue refrefs/heads/gh-readonly-queue/main/pr-18317-*is gone from origin; theremoved_from_merge_queueevent is on the timeline. Governed rules layer, ruling C after the director seat's ruling A: APPROVED by os-zhuang (5217679727 at 2026-09-16T01:54Z), who flipped it ready and enqueued it; record 5684320675 PASS on that head, 速读终稿 5684321187, ACCEPT 5684321543 on this card, ruling-C provenance 5690861787; the seat clearedneeds-user-decision. Now onorigin/main:mcp__github__enable_pr_auto_mergeandmcp__github__disable_pr_auto_mergeare inpermissions.deny(lock 1, 15 → 17), the deny-roster gate's constant reads 17 = 17, rest-channel :53 reads 「auto-merge MCP 锁 1 同拒」. Residue (pm:dispatched, assignee) stripped throughlabel-write.mjsand read back; the objectui mirror card for lock 1 is filed next per the ruling, and #18320 (the platform-readings enqueue rows) is dispatchable now.
Generated by Claude Code
Filed by the
domain:skillsexecution PM seat, sessionsession_01HZfg2AwVX191qCizp88gQr, at 2026-09-15T07:16Z, from the #18218 dev's assumption-(3) reading (report 5676241066; PR #18276). The decision is the maintainer's — the deny list is the maintainer-level lever — so the seat puts the question rather than guessing.The reading
mcp__github__enable_pr_auto_mergeis NOT inpermissions.deny(15 entries after PR fix(settings,pm-dispatch): deny mcp__github__update_pull_request and route the ready flip through the CCR routes #18276). It is matched by the PreToolUse hookguard-governed-enqueue.sh(settings.json :82; hook header :5), which blocks only a governed PR's enqueue that lacks a pinned approval — a different mechanism from a deny, and one that lets a non-governed enqueue through MCP under the bound user account.PUT …/pulls/N/ccr/auto_merge, rest-channel :50); the write-identity rule (Lock 1 is inert in running sessions: the harness loads.claude/settings.jsonandos-dev.mdfrom the shared checkout at clone time — an MCP-created PR after both deny lists landed, and the charter's constant-claude[bot]lines are false #18205 → PR docs(pm,agents): write identity follows the channel, not the account — REST-only content writes, the ACCEPT refuses MCP writes, a stale shared checkout re-seats (#18205) #18216) makes an MCP enqueue a user-account write. rest-channel :53 after PR fix(settings,pm-dispatch): deny mcp__github__update_pull_request and route the ready flip through the CCR routes #18276 states the fact precisely: 「auto-merge 备用 MCP 未拒」.Options
mcp__github__enable_pr_auto_merge(anddisable_pr_auto_merge, the same class) in lock 1; the hook stays as defence in depth; rest-channel :53 drops the 「备用 MCP 未拒」 clause. Four axes: the REST route already serves every real enqueue (实际业务需求); one write channel, no dialect (长远合理性); a tool the runtime refuses cannot be mis-called by a seat that mis-reads the hook's scope (防 AI 犯错); immediate, no staged window (创业阶段).Answer with 「A」 or 「B」 on this card; the seat then grades the executable half (A: one deny entry + one rest-channel line, rules layer, four-piece) as a Task in this lane.
needs-user-decision·domain:skills· p3.Generated by Claude Code