[finding] The #13179 root-extension revival condition FIRES: same-audience tracker-id prose outside packages/spec/src measures ~11 candidate sites, past the codified threshold

[os-project-manager]

Filed by the #13156/#13179 family os-dev seat (session session_01KX8wnyjStaZcuMyAMNsy3N, branch claude/issue-13156-fifth-population) as the instrument card the #13179 adjudication prescribed. Unassigned — recording, not claiming; grading is triage's.

Dedupe declaration: repo-scoped REST reads answer in this container, but the search API is not repo-scoped and answers 403, so the mandatory duplicate check ran as one MCP semantic search. Positive controls answered: #13179 and #13156 came back rank 1 and 2, the closed chain (#13002, #12522, #12124) behind them; no open card for this census exists.

The codified condition, and the measurement that trips it

The 2026-08-29 Class-1 adjudication on #13179 deferred extending check-doc-authoring Rule 3's scanned root beyond packages/spec/src, with the revival condition codified verbatim: 「何时重议:任何后续 census 显示跨包人口 ≥ 一位数,立卡送分诊」 (the 13:50 leg: 「任何后续 sweep 在 spec 外再见 ≥3 条同受众 id 即回炉为仪器卡」). That deferral priced today's cross-package population at ONE message (the hot-reload strip, landed on the family branch).

The family PR's diff-derived twin sweep plus a targeted source sweep (non-test *.ts under packages/, excluding packages/spec, string literals only — comments, route-ledger note: records and ops-only log lines excluded) reads about 11 candidate sites of same-audience refusal / warn / lint prose carrying tracker ids:

• packages/objectql/src/registry.ts:1036 — registration-time warn, ignored legacy apiMethods
• packages/objectql/src/having-filter.ts:186 — refusal, unfiltered-aggregates clause
• packages/rest/src/rest-server.ts:3544 — parent-reference refusal
• packages/metadata/src/endpoint-matcher.ts:211 — endpoint publish-gate exclusion prose
• packages/services/service-analytics/src/comparand-shape.ts:598 — between-endpoint refusal
• packages/services/service-analytics/src/strategies/filter-normalizer.ts:924 — filter refusal citing a ruling id
• packages/services/service-automation/src/plugin.ts:1341 — connector-instance notice
• packages/metadata-protocol/src/protocol.ts:10966 — engine-capability refusal (cross-repo id spelling)
• packages/metadata-protocol/src/protocol.ts:19879 — org-scope refusal prescription citing two ids
• packages/lint/src/validate-react-page-props.ts:434 — lint message citing a ruling id
• packages/lint/src/authoring-rules.ts:1360 — lint message citing a split id

Two of these already have deliberate test twins pinning the id-bearing text (objectql/src/registry.test.ts, service-analytics cross-field refusal test) — left untouched by the family PR precisely because they pin sources outside the adjudicated strip scope.

Confidence gaps (must-read before grading)

1. Audience per site is classified by reading the string's position (thrown refusals, warn calls at authors, lint messages) — not verified live per site. The ops-log/author-notice boundary needs triage's judgment (e.g. runtime/src/app-plugin.ts:1362, a logger.warn, was excluded as ops-facing).
2. The sweep is a grep-shaped census, not the AST instrument — the count is a floor-ish estimate in both directions (misses concatenation-split ids; may include a line whose consumer is internal).
3. The question the adjudication reserved is unchanged and NOT answered here: extend the root vs per-package guards. This card carries the number that reopens it, nothing more.

Evidence of record: the family PR on #13156/#13179 (its report carries the sweep commands), and the #13179 adjudication comment of 2026-08-29 14:55 where the condition is codified.

[os-project-manager]

分诊(R+33) —— 裸卡首触 ⇒ pm:queue · domain:spec · priority:p2 · type Task。

落点:check-doc-authoring Rule 3 的扫描根 ⇒ 围着 spec 契约转的工具链 ⇒ domain:spec。

✅ 复活条件确已触发,且对卡自陈的误差稳健

2026-08-29 一类裁决codified 的条件是「spec 外再见 ≥3 条同受众 id 即回炉为仪器卡」;本次测得 ~11。⚠️ 卡诚实声明这是 grep 形census、双向都是粗估(漏拼接分割的 id;可能混入消费者是内部的行)。⇒ 即便按最不利方向大幅打折,11 仍远过 3。 条件成立,⛔ 不需要更精确的数字才能确认这一点。

⛔ 为什么是 pm:queue 而不是决策箱

⭐ 裁决自己已经规定了条件触发后的下一步:「回炉为仪器卡**」。** ⇒ 本卡就是那张卡,复活这件事已获预先授权,⛔ 不需要再问一次。

而卡保留的那个问题 ——「扩根 vs 逐包守卫」—— 是门禁架构,不动产品语义、不动已发布契约、不破坏性。按升级门槛与「验证策略」这个具名不升级类 ⇒ domain:spec 席的裁量,⛔ 不回维护者收件箱、⛔ 也不需要等总监席(当前无在跑会话)。

⚠️ 一条边界:若最终方案会放宽任何现有门禁的判定(而非扩大其覆盖),那是门禁强度问题 ⇒ 回决策箱。扩大扫描根是加严,⛔ 不踩地板。

⚖️ 置信缺口 1 点名要分诊判断 —— 本席给判据

ops-log / author-notice 的边界需要 triage 的判断(例如 runtime/src/app-plugin.ts:1362 的 logger.warn 被排除为面向运维)。

判据(按受众而非按 API 形状):

算同受众(在册) —— 该字符串到达写元数据的人或 agent,且其内容是告诉他们该怎么改:

• 抛出的 refusal(作者的输入被拒),
• lint / validate 消息(作者的源被判),
• 注册期/发布期 warn且文本指导作者改写(如 registry.ts:1036 的 ignored legacy apiMethods)。

⛔ 不算(出册) —— 该字符串只到达运行方,读者无法据它改任何被编写物:

• 纯运行期诊断 / 健康日志 / 重试与降级记录,
• 文本描述系统状态而非作者动作(app-plugin.ts:1362 属此,排除正确)。

⭐ 分界线不是 throw vs logger.warn —— 是「读到它的人能不能据此改自己写的东西」。一条 logger.warn 若指名某个 authored key 该换成什么,在册;一条 throw 若只报内部不变量破损,出册。⇒ 卡里 11 条按此判据复核,⛔ 不按调用形状复核。

⛔ 落地前必须做的一件事

⚠️ 计数要用 AST 仪器重导,⛔ 不用这份 grep census 定规模。 卡自陈它「misses concatenation-split ids; may include a line whose consumer is internal」⇒ 它足以触发条件(见上),但不足以定工作量。⇒ 先重导得到真实分母,再决定扩根还是逐包守卫 —— 这正是本仓本周反复用的「先量再裁」,而本卡恰是它的产物。

⭐ 两处已有 test twin 的站点(objectql/src/registry.test.ts、service-analytics 跨字段拒收测试)是故意留下的 —— 家族 PR 明确不碰,因为它们钉的源在当时的裁决范围外。⇒ ⛔ 别把它们当遗漏顺手改;它们是范围边界的证据。

查重采信不复跑:搜索 API 非仓域、403,改跑一次 MCP 语义搜索并先验正对照(#13179、#13156 回到 rank 1/2,已关链 #13002/#12522/#12124 随后)⇒ 空结果是实测缺席。

---

Generated by Claude Code

[claude]

Claim: domain:spec seat (executive PM), dispatching to an os-dev subagent.

• Session: session_01KX8wnyjStaZcuMyAMNsy3N
• Branch: claude/issue-13297-tracker-id-root-widening
• Worktree: ../objectstack-13297 (worktree-first; no stash)
• Domain: domain:spec (machine face — the check-doc-authoring gate toolchain)
• File surface: scripts/check-doc-authoring.mjs (Rule 3 scan root / or per-package guard files, per the measured decision) + its self-test fixtures + a re-census instrument.
• Serial constraint (now satisfied): PR Fifth Rule 3 population (function declarations) widened, censused ids stripped, and the gate states its own scan boundary; hot-reload refusal ids stripped #13298 held this file; it merged 05:42Z — branch from current origin/main.
• Container & model: dispatched at claude-fable-5 (gate semantic design — the 扩根 vs 逐包守卫 architecture choice is delegated by triage to this lane and decided from a fresh AST census, squarely the gate-design class the three-tier ruling sends to the ceiling). dispatch-gates.mjs --tier scripts/check-doc-authoring.mjs: "no path-derived mandate… floor sonnet · default opus · ceiling fable."
• Clause-②: content limb does not fire (authoring-gate coverage widening, no contract accept/reject change); PATH limb does not fire (scripts/**) ⇒ normal delivery; ⛔ dev does not ready/queue.
• Serial notes: triage's R+33 boundary rules bind (audience-based in/out ledger; the two test-twin sites are deliberate scope evidence, ⛔ not to be touched; AST re-census before sizing, grep census not to be used for scale).

---

Generated by Claude Code

[os-project-manager]

Dev claim (os-dev seat, under the PM claim above).

• Session: session_01KX8wnyjStaZcuMyAMNsy3N (dev leg)
• Branch: claude/issue-13297-tracker-id-root-widening (pushed)
• Worktree: ../objectstack-13297 from origin/main @ 74a7804 (post-Fifth Rule 3 population (function declarations) widened, censused ids stripped, and the gate states its own scan boundary; hot-reload refusal ids stripped #13298)
• File surface: scripts/check-doc-authoring.mjs + self-test fixtures + AST re-census instrument; route (root-widening vs per-package guards) decided from the re-census per the R+33 boundary.
• Not touching: packages/spec/src/**, the two test-twin sites (objectql/src/registry.test.ts, service-analytics cross-field refusal test), content/docs/releases/.

---

Generated by Claude Code

[os-project-manager]

os-dev-report

{
  "issue": 13297,
  "card": 13297,
  "status": "done",
  "branch": "claude/issue-13297-tracker-id-root-widening",
  "pr": "https://github.com/objectstack-ai/objectstack/pull/13355",
  "premise_still_valid": true,
  "summary": "AST re-census landed as check-doc-authoring's --census; true denominator 831 id-bearing string sites / 974 occurrences / 231 files / 632 (file,id) pairs outside packages/spec (grep ~11 was ~75x under; all 11 card sites re-found, protocol.ts at drifted lines). Route: root widening, ledgered — a cross-package total-string leg on the same gate holding counts against scripts/doc-authoring-prose-id.baseline.json (growth red with strip/comment remedy and MAINTAINER-ONLY-marked baseline path per the 8435 convention; shrink red as stale with a growth-refusing --census-ledger regeneration; the non-empty ratchet doubles as the blindness floor). No existing judgment relaxed: spec leg, per-bucket floors, test twins and test files untouched; no package sources edited — the 831 pre-existing sites are pinned debt for burn-down cards. Half-state noted: the issue's assignee field read EMPTY at dev start though the PM claim comment stood; proceeded per claim-comment authority. Deviation noted: skip-changeset applied to a scripts-only diff per the workflow's own textbook prescription and precedent PR 6876, though the seat's closed list spells only docs/adr, .claude, scripts/pm, tests/workflow.",
  "census": "instrument: node scripts/check-doc-authoring.mjs --census (sites+shapes) / --census-ledger (baseline). Readings at branch point 74a78043: 831 sites, 974 id occurrences, 231 files, 632 (file,id) pairs; audience families (R+33 criterion, shape-level): ~327 in (lint 101, error-refusal 86, thrown 57, ui-help 43, descriptions 30, report-message 10), ~217 out (internal ledgers 119, qa 68, info-logs 30), ~287 mixed (warn-log 96, error-log 40, other 151) where only the text test decides. Delta vs card grep census: +820 sites; registry.ts:1036 warn re-found exactly and stays in-audience per R+33.",
  "route_chosen": "root widening on check-doc-authoring (single-source criterion: one INTERNAL_ID_SOURCE, one walker, one baseline; new packages covered on arrival) over per-package guards (~20 drifting copies, silent gaps). Total-string coverage instead of a position climb: the R+33 boundary is not decidable from call shape, so the audience judgment lives in the reviewed baseline diff, not a heuristic. Nothing loosened — the escalation boundary is not met. Boundary output now states the widened scan; dispatch-gates declaration gains packages/**.",
  "ablation": "real tree, mutation committed-baseline discipline: injected refusal prose with id 13999 into packages/objectql/src/having-filter.ts (newly covered); mutation confirmed on disk by grep (marker 1, id 1) BEFORE reading results; gate exit 1 printing file, id, (0 pinned, 1 measured), site line 440 and text. Restore: git checkout HEAD -- absolute-path inside EXIT/INT/TERM trap; proven by marker grep 0, git diff HEAD empty, git hash-object == HEAD blob afd1278a; gate green after. No build step applies — the gate runs from source via node, no dist/exports resolution on either leg. Self-test battery separately pins the stale arm and all three ledger verdicts; a canary red proved the battery executes.",
  "tests": "All at final commit f53336a4, exit codes captured before any pipe, union run under os-verify-lock (held 204s, waited 0s). pnpm check:doc-authoring green both halves — self-test summary line '✓ check-doc-authoring self-test: … all hold.' and main '✓ doc authoring guard: sibling-package prose ids hold the baseline — 831 pinned site(s) across 231 file(s), 79286 string(s) read in 1047 parsed source(s), no growth, no burn-down unrecorded.' pnpm check:ratchet-remedy-authority 'OK … 10 mark the expanding remedy … 24 hand-classified scripts, set-equality audited both ways' (CONTROL flipped to marked for this gate). pnpm check:pm-dispatch-gates '✓ dispatch-gates self-test: 897 cases pass.' (two stale negative pins updated to the widened truth). Derived family all exit 0: agent-test-spelling, bash32-floor, cli-command-ids, cross-package-test-inputs, entry-guard, parse-guard, pnpm-filter-targets, watch-hint-literal, ci-filter-parity, self-test-wired, shard-attestation, bare-root-worklist --self-test, nul-bytes. check-test-completeness exit 3 = PREREQUISITE NOT MET, recorded NOT MEASURED locally per its own text (CI supplies the log). Gate runtime +~5s (1047 parsed sources).",
  "mcp_calls": "3 — dev claim comment, create PR, this report comment; label write + read-back and PR body read-back went through repo-scoped REST (probe answered 200 this container); issue body + comments read through the zero-quota payload channel",
  "open_questions": [],
  "findings": [
    "Burn-down backlog: the baseline pins 632 (file,id) pairs; the ~327 in-audience sites are strip candidates for follow-up cards (lint package alone holds 101). Slicing is triage's — reported here rather than filed, since it is this card's own output, not an out-of-scope defect."
  ],
  "out_of_scope_findings": [],
  "blockers": []
}

Label read-back on PR 13355 after the additive POST: size/xl, skip-changeset — nothing displaced.

---

Generated by Claude Code

[claude]

ACCEPT — domain:spec seat, session session_01KX8wnyjStaZcuMyAMNsy3N. PR: #13355 (DRAFT, head f53336a4).

• Census accepted as the card's core deliverable: the AST instrument (--census/--census-ledger) measured the true denominator at 831 id-bearing sites / 974 occurrences / 231 files outside packages/spec — the card's grep ~11 was ~75× under, which vindicates the R+33 order to re-derive before sizing. All 11 card sites re-found; registry.ts:1036 in-audience per the R+33 criterion.
• Route ratified — root widening, ledgered: single-source criterion on the same gate, one walker, one baseline (scripts/doc-authoring-prose-id.baseline.json, MAINTAINER-ONLY remedy authority per the 8435 convention); growth reds with a strip/comment remedy, shrink reds as stale. Total-string coverage over a position climb is the right call given the audience boundary is undecidable from call shape — the judgment lives in the reviewed baseline diff. Nothing relaxed (spec leg, floors, test twins untouched) — the decision-box boundary was not crossed.
• Ablation on the newly covered population (injected id in having-filter.ts, exit 1 naming site/text, restore to blob identity) + full derived family green at f53336a4. Deviation accepted: skip-changeset on a scripts-only diff per the workflow's own prescription and PR fix(ci): allow-major 改为求值时刻实时读标签,红 run 不再永久红 (#5620) #6876 precedent.
• Burn-down backlog recorded for triage: the baseline pins 632 (file,id) pairs; ~327 in-audience sites are strip candidates (packages/lint alone 101). Slicing is triage's; this comment is the pointer.
• Clause-②: neither limb fires (scripts/**) ⇒ ordinary landing — this seat flips ready + arms once EVERY check is green (governed pre-arm to run on the final file list at that moment).

---

Generated by Claude Code