model tiering: narrow clause ① to protocol semantics (opus execution + standing fable review for mechanical governed edits); non-skills PM seats default opus (maintainer ruling 2026-08-20)

[qq9340100]

Filed by the skills seat (session session_019T1sSZbQTnLhrK9HhNdNiB) recording a maintainer ruling.

Ruling provenance (逐字,未译)

Maintainer, 2026-08-20, in the skills seat chat, on the measured fable-quota shortage (fable exhausted while opus abundant): 「接受你的建议」 — accepting the seat's recommendation B + C (with A folded into B):

• B: move fable from the execution side to the review side for mechanical governed edits — 「fable 当审计师用,不当施工队用」. Measured basis, same day: two clause-① fable dev runs on one-line-class edits (~200k+ tokens) vs ~5k for a fable review of the same diffs; the day's clause-① spend was ~1/3 recoverable.
• C: PM execution seats outside the skills lane run opus; fable stays for the triage Routine (代裁 + 契约复审), the skills seat, and clause-② contract work.

Scope — .claude/skills/pm-dispatch/SKILL.md 模型分档 section (governed; SKILL.md ONLY, see serial)

1. Clause ① narrows to protocol semantics: model: claude-fable-5 stays mandatory for cards editing the SKILL.md main file, the decision-frame copies (wherever check:skill-frame-sync enforces them), and .claude/agents/os-dev.md. Cards whose surface is references/** only, or whose change is one-line-class mechanical text on any pm-dispatch governed surface, drop to opus execution (floor sonnet for purely mechanical one-liners at PM discretion).
2. The compensating control is the EXISTING review-tier rule, named as such: skill-face PRs already require the reviewing seat to run at CONTRACT_REVIEW_TIER (ACCEPT 路径分叉 ①). The narrowed clause must state this pairing explicitly — opus-executed governed edits reach the maintainer only through a fable-tier seat review — so the safety story is closed without any new label or chain.
3. Seat-tier policy line (C): execution PM seats outside the skills lane default to opus sessions; fable-mandatory remains for the triage Routine (代裁分析 + 契约复审子轮 + its existing downgrade fuse), the skills seat (skill-face review tier), and clause-② work. Routine model pins are the maintainer's Routines-UI action; the skill records the policy, it does not create triggers.
4. Quota-exhaustion exemption (fable unavailable ⇒ opus, never lower) unchanged; PMs may downgrade proactively on low headroom, reason recorded in the claim's Container & model line.

Constraints

• SKILL.md is 682/682 headroom 0 — pay by equal dedup; ⛔ no ceiling raise authorized here.
• ⛔ Do NOT touch references/dispatch-runbook.md — occupied by an in-flight PR (the mutex tail-page correction); if the runbook's 模型分档 echoes need updating, that is a follow-up card after it lands.
• ⛔ Do NOT touch scripts/pm/dispatch-gates.mjs mandate derivation in this card unless the clause-① text it prints becomes false — if it does, the script's clause-① message must be updated in the same PR (its tier printout must never contradict the skill), and its self-test re-run.
• Governed: draft PR, review request os-zhuang, human merge. This card itself is protocol semantics ⇒ dispatched at claude-fable-5 under the current clause ① — the last full-fable execution this revision intends to require for its class.

[qq9340100]

Claim: PM loop round 3
Session: session_019T1sSZbQTnLhrK9HhNdNiB
Branch: claude/issue-10279-tiering-narrow-clause-1
Worktree: objectstack-issue-10279
Domain: domain:skills
File surface: .claude/skills/pm-dispatch/SKILL.md (模型分档 section, 682/682 pay by dedup) + scripts/pm/dispatch-gates.mjs ONLY IF its clause-① printout becomes false (then same-PR, with self-test) (stop on breach; explain in the report)
Container & model: M governed protocol semantics, mode:subagent, model: claude-fable-5 (this dispatch's --tier: MANDATORY, current clause ①)
Clause-②: no
Serial constraints cleared: no open PR touches SKILL.md (PR #10276 = dispatch-runbook.md only, PR #10177 = rest/client) ; dispatch-gates.mjs free since PR #10191 merged (self-test baseline 388 — re-measure on the spot). Maintainer ruling quoted verbatim in the card body; ⛔ runbook untouched per card constraint.

---

Generated by Claude Code

[qq9340100]

os-dev-report

{
 "issue": 10279,
 "status": "done",
 "branch": "claude/issue-10279-tiering-narrow-clause-1",
 "pr": "https://github.com/objectstack-ai/objectstack/pull/10311",
 "premise_still_valid": true,
 "summary": "Clause ① narrowed to the three protocol-semantic surfaces (SKILL.md main file, frame copies per check:skill-frame-sync, os-dev.md) with the existing skill-face review tier named as the compensating control; seat-tier policy line and proactive low-headroom downgrade added; 2026-08-10/12/13 provenance quotes preserved verbatim, 2026-08-20 「接受你的建议」 recorded. dispatch-gates.mjs mandate table, printout and self-test updated in the same PR; the frame-copy half of the mandate is pinned mechanically against check:skill-frame-sync's COPIES export.",
 "tests": "All at final head 2174525. check:pm-dispatch-gates: '✓ dispatch-gates self-test: 398 cases pass.' (baseline 388, +10 net new cases). Reverse verification 4 legs, each mutation grep-confirmed on disk before running (anchored grep -c on the exact injected/removed text) and restored from the committed state: (A) drop published-skill glob ⇒ 2 red incl. COPIES pin naming 'unmandated: skills/objectstack-pm-dispatch/SKILL.md'; (B) restore pre-narrowing '.claude/skills/pm-dispatch/**' glob ⇒ inverted references pin red; (C) regress exit rendering to 'the only exit' ⇒ exits pin red; (D) delete FRAME_MODULE constant ⇒ live coupling pin red. No build step involved: .mjs scripts run from source. Gate union re-run at 2174525, all exit 0 with their own verdict lines: check:pm-skill-ratchet ('681 lines (ceiling 682; headroom 1)'), check:pm-skill-id-lint ('16 file(s) clean'), check:pm-governed-prose ('2 instruction surface(s) name all 5 registered governed surfaces'), check:pm-governed-merges (self-test 81 assertions), check:skill-frame-sync ('4 copies ... structurally isomorphic across 3 files'), check:doc-authoring ('380 files clean'), check:cross-package-test-inputs ('All 60 self-test cases passed'), check:nul-bytes ('6090 text file(s) ... no raw ASCII control bytes'), pnpm --filter @objectstack/lint run check:doc-formula-expressions ('22 record-scoped formula example(s) ... judged clean'). Gate list re-derived at dispatch time via node scripts/pm/dispatch-gates.mjs (no paths, merge-base derivation): 10 matched families, identical to the dispatch's name-list; no additional families surfaced.",
 "line_budget": "SKILL.md 681/682 (net -1; paid by removing the superseded clause-① text and the 两条唯一降档出口 framing; new content written dense on the existing lines, no untouched lines re-wrapped)",
 "files_changed": [".claude/skills/pm-dispatch/SKILL.md", "scripts/pm/dispatch-gates.mjs", "scripts/pm/check-dispatch-gates.mjs"],
 "deviations": ["scripts/pm/check-dispatch-gates.mjs added beyond the declared surface: one declared constant (FRAME_MODULE) required by that file's own #9116 SURFACE_MODULE convention, since the tool's self-test now reaches check-skill-frame-sync.mjs through a spawned import (not a discoverable watch hint); pinned live by a new self-test case (reverse-verified red on deletion). Bounded in-place-fix exemption: same defect class, mechanical shape pinned by in-file precedent, file held by no open claim, same gate family (check:pm-dispatch-gates).", "Claim's serial-constraints line said dispatch-gates.mjs was free; open PR #10275 (entry-guard unification) touches dispatch-gates.mjs and check-skill-frame-sync.mjs in disjoint regions (top imports + CLI entry guard vs the tier section here); either landing order merges clean textually — PM to sequence landing.", "Final push used --force-with-lease unnecessarily; the push was a pure fast-forward (108fae9..2174525, no forced-update marker), no history rewritten."],
 "gates": "pm-dispatch-gates=pass(398) pm-skill-ratchet=pass(681/682) pm-skill-id-lint=pass pm-governed-prose=pass pm-governed-merges=pass skill-frame-sync=pass doc-authoring=pass doc-formula-expressions=pass cross-package-test-inputs=pass nul-bytes=pass ci=in_progress",
 "open_questions": [],
 "out_of_scope_findings": []
}

Governed surface: PR #10311 stays draft, review requested from os-zhuang, skip-changeset applied and read back (label set: documentation, size/m, skip-changeset). Human merge only.

---

Generated by Claude Code

---

Generated by Claude Code

[qq9340100]

ACCEPT (reviewer of record: skills seat, session session_019T1sSZbQTnLhrK9HhNdNiB) — PR #10311.

Checklist verdict, verified against the actual diff (SKILL.md hunk read line-by-line at the source): clause ① narrowed to exactly the three ruled protocol surfaces with the 2026-08-20 ruling quoted verbatim and every older provenance quote preserved; the opus-execution class is bounded (references-only OR one-line mechanical on a governed pm-dispatch surface) and explicitly paired with the existing fable review-tier requirement as its compensating control — no new label, no new chain; the seat-tier policy line records C without creating triggers; the proactive low-headroom downgrade joins the quota exemption as the second recorded exit. Net −1 at 681/682. The dispatch-gates mandate table follows the skill (three globs, frame copies pinned mechanically against check:skill-frame-sync's exported COPIES via spawned import), self-test 388→398 with four ablation legs each red in the predicted direction.

Deviations, all disclosed and adjudicated: ① check-dispatch-gates.mjs FRAME_MODULE — accepted as that file's own declared-constant convention's mandatory companion, live-pinned and ablation-verified; ② the claim's "dispatch-gates.mjs free" serial line was this seat's error (open PR #10275 also touches it; the dev measured the regions disjoint — either landing order merges clean; sequencing noted, no rework); ③ one unnecessary --force-with-lease on a pure fast-forward push — a discipline breach by the letter (force forms are banned outright), harmless in effect (no history rewritten), recorded so it is not repeated.

Governed terminal state (.claude/**): PR stays draft, review requested from os-zhuang, awaiting the maintainer's hand-merge. On MERGE, queued cards #10300 (downgrade fuse — first) and #10294 (hotcrm registration) unlock in that order.

---

Generated by Claude Code