[finding] Two bare-root-worklist TRIAGE rows cite collapseHint values the function does not produce — one of them misattributes its own REFUSE to the wrong mechanism

[yinlianghui]

Blocked-by: #12328

Found while measuring #12246 (the mid-segment glob collapse). ⛔ Not fixed there — that card's
declared surface is collapseHint and its --self-test, and its dispatch explicitly ruled the
TRIAGE rows out of scope ("Measuring whether it becomes retirable is in scope; changing it is
not"). Filed unassigned, not graded.

Both rows live in scripts/pm/bare-root-worklist.mjs and were landed by PR #12247.

⚠️ STATUS (PM seat #6023, 2026-08-25). Row 1 is repaired and landed by PR #12330
(cf99875ea8). Row 2 is not, and is not a dev's to take: post-#12300 its narrow spelling
skills/*/references/** covers exactly 12 tracked files — precisely that row's own stated
population, 9 of them the _index.md it emits — so its conclusion "the only spellable claim left
is the bare root" is false on this tree and REFUSE-UNSPELLABLE no longer describes it.
Repairing the quoted value while the verdict stands would ship a row whose reason argues against
its own verdict; changing the verdict is a re-decision on a shrink-only map, reserved by this
card, by the dispatch, and by the file's own docblock alike. The class — this row plus two more
found by sweeping — is #12328, with the full measured table and options A/B/C. This card
stays open and blocked so that the unrepaired half is not hidden by a closed card.

1. check:runner-env-posture SCANNED_ROOTS packages — substantive

The row (:325-330) reads:

packages/**/src/** is the true population and collapseHint reduces it to packages, so the
only spellable claim also names every package manifest, changelog, fixture and the 2746 test
files this gate deliberately skips

Measured on fb5fbb8514:

collapseHint('packages/**/src/**') -> 'packages//src' reaches 0 tracked files
a collapse to 'packages' would have reached 5225 tracked files

collapseHint does not reduce it to packages. The ** deletions leave packages//src, and
the trailing-anchored strips (/\/+$/) cannot touch a double slash left mid-string — so the hint
is dead, not over-broad.

The verdict REFUSE-UNSPELLABLE survives, but its stated mechanism is the wrong one. As written
the row describes an over-claim that does not happen; the real reason this population is
unspellable is the #12246 double-slash defect. A reader pricing the row (or deciding whether it
becomes retirable) is reading a cost model for a collapse the function never performs.

⚠️ Superseded by measurement (#12330): the mechanism above is itself wrong post-#12300.
hintCovers short-circuits a glob in a non-final segment to triggerCovers before collapseHint
is ever called, so the hint is live, not dead — and the refusal survives on the file-KIND
filter rather than the segment. That is what PR #12330 landed.

2. check:skill-refs SKILLS_DIR skills — cosmetic

The row (:316-324) reads collapseHint reduces skills/*/references/** to
skills//references/**. Measured:

collapseHint('skills/*/references/**') -> 'skills//references' reaches 0

The trailing /** is stripped; the cited value keeps it. The double-slash point — the substance,
and the row's correct citation of #12246 — is unaffected.

⚠️ Also superseded: this row is not cosmetic. See the STATUS block above.

Why this is worth a row of its own

Both rows are in fact instances of the same defect (#12246), and #2 says so by number. #1 does
not, and misreads it as the collapse-to-root case instead. That matters because the two have
opposite remedies: a collapse-to-root over-claim is fixed by narrowing a declaration, while a
dead double slash is fixed in the covering rule and cannot be declared around at all.

scripts/pm/bare-root-worklist.mjs --self-test is green across both rows (46 live row(s), 39 unreachable as spelled, 39 recorded verdict(s) — none stale, none missing), because the self-test
reconciles row keys and reachability, not the prose of why. That is the same shape as the
closed #11277, one file over — a recorded verdict whose measurement text is wrong while the
machinery that would catch a wrong key stays green.

Not asserted

No claim that either verdict should change. Both are REFUSE-UNSPELLABLE and both look correct
under the measured behaviour; what is wrong is the reason text. Re-deciding a TRIAGE verdict is a
separate judgment call and is deliberately not proposed here.

Refs: #12246 (the defect both rows are instances of) · #12247 (landed both rows) · #11277 (closed;
same species, different row) · #12064 (adjacent worklist-output defect, different mechanism) ·
#12300 (the change that falsified both rows' stated mechanism) · #12328 (the class, where row 2
now lives) · PR #12330 (row 1's repair)

[os-trump]

Triage: promoted → pm:queue, routed domain:devx (lands in the two TRIAGE row why texts of scripts/pm/bare-root-worklist.mjs), type Task.

Scope as filed: correct the reason prose only — row 1 (check:runner-env-posture) misattributes its REFUSE to a collapse-to-root over-claim when the measured mechanism is the dead double slash, and row 2 keeps a stripped /** in its cited value. ⛔ Neither verdict changes; re-deciding a TRIAGE verdict is out of scope, per the card. Worth carrying into the fix: row 1's corrected text should cite the double-slash defect by its mechanism the way row 2 already does, so the two rows stop prescribing opposite remedies for the same defect. Small and mechanical. Size/model suggestion: S, sonnet.

---

Generated by Claude Code

[yinlianghui]

Claim — domain:devx @ objectstack seat (#6023), session session_01UjM2ia8Av1v5NqfqQEQmC6.

• Branch: claude/issue-12289-triage-row-mechanism
• Worktree: ../objectstack-12289 (dedicated)
• Model tier: sonnet–opus
• Clause ②: falsify, don't build on, this seat's assumptions.

Declared file surface: scripts/pm/bare-root-worklist.mjs — that file only.

Premise re-verified on current origin/main (79cf692b0e), which is AFTER #12300 landed. This mattered: #12300 edited collapseHint, so the card's readings (taken at fb5fbb8514) could have been invalidated by the very fix the rows are about. They were not — #12300 removed a dead second trailing strip, leaving the behaviour these rows describe unchanged:

collapseHint = hint.replace(/\*\*?/g, '').replace(/\/+$/, '') ← origin/main:scripts/pm/dispatch-gates.mjs:1407

"packages/**/src/**" -> "packages//src"
"skills/*/references/**" -> "skills//references"
"packages/**" -> "packages" (control — a final-segment glob still collapses)

And both rows still read on origin/main exactly as the card quotes them:

• check:runner-env-posture SCANNED_ROOTS packages — "packages/**/src/** is the true population and collapseHint reduces it to packages". It does not. It reduces to packages//src, which reaches nothing. The verdict is right; the stated mechanism is the wrong one.
• check:skill-refs SKILLS_DIR skills — cites skills//references/**; the actual value is skills//references (the trailing /** is stripped). Cosmetic, and this row already cites [finding] A mid-segment * collapses to a double slash, so skills/*/references/_index.md names 9 real files and reaches none — and the family is filed as "THE LAYOUT MOVED" #12246 correctly.

⭐ The control line matters: packages/** really does collapse to packages, so the double-slash result is specific to the mid-segment glob and is not an artifact of my probe.

Serial constraint: scripts/pm/bare-root-worklist.mjs is single-writer for this claim. #12064 (worklist prints REACHABLE beside a REFUSE-* reason) claims the same file and is held behind this card. ⛔ Do not fix #12064 here.

---

Generated by Claude Code

[yinlianghui]

{
 "issue": 12289,
 "status": "needs_decision",
 "branch": "claude/issue-12289-triage-row-mechanism",
 "pr": "https://github.com/objectstack-ai/objectstack/pull/12330",
 "premise_still_valid": false,
 "summary": "The card's core observation holds — both rows do cite collapseHint values the function does not produce — but its operative premise, that this is a PROSE-ONLY fix with both verdicts surviving, is falsified, and so are Zone 2a/2c/2d of the dispatch. #12300 (783111d252) did far more than delete a dead second trailing strip: it added `if (globInNonFinalSegment(hint)) return triggerCovers(hint, inputPath);` to hintCovers, so a glob in a non-final segment no longer GOES THROUGH the collapse at all. collapseHint itself is unchanged, which is exactly the trap — probing it by hand still reproduces every double slash these rows cite and still reads as confirmation, while the reachability claim built on it has been false since #12300 landed. ROW 1 (check:runner-env-posture SCANNED_ROOTS packages) is REPAIRED and shipped: REFUSE-UNSPELLABLE survives, on the reason that was always doing the work — the file-KIND filter, not the segment. Measured, one tree: `packages/**/src/**` is now a LIVE hint reaching all 1812 population files but covering 4291 to do it (2466 of the 2479 it over-names are the test files the gate skips), so the narrowest live spelling is 42% true where the bare root is 35%. The check:authz-resolver REFUSE-WIDE comparison is kept and sharpened rather than orphaned, per Zone 2c. ROW 2 (check:skill-refs SKILLS_DIR skills) is NOT touched and is the reason this returns needs_decision: it is not the one-word cosmetic fix Zone 2d assumed. `skills/*/references/**` is now a live hint covering EXACTLY 12 files — precisely that row's own stated population of 12 of 50 — so its conclusion 'the only spellable claim left is the bare root' is false on this tree and REFUSE-UNSPELLABLE no longer describes it. Under Zone 1b that is a stop-and-report, not an edit. The Zone 2b sweep found the same defect in TWO MORE rows (check:objectql-double-limit, check:i18n/check:i18n-stale-fill), all at 100% precision for their narrow spelling; filed as #12328. One row swept and CLEAN: scripts/check-declaration-mirrors.mjs still holds, but only because `**` does not match zero segments — filed separately as #12329.",
 "tests": "All measurements drive the REAL collapseHint/hintCovers/trackedFiles imported from scripts/pm/dispatch-gates.mjs — never a re-implementation (the dispatch's own Zone 2a warning, which is what caught the PM's transcription). CONTROL BEFORE, matching the dispatch exactly: `--self-test` EXIT=0, '46 live row(s), 39 unreachable as spelled, 39 recorded verdict(s) — none stale, none missing'; live run EXIT=0, '0 untriaged row(s)'. AFTER: byte-identical on both lines. Live-output diff before/after = 2 lines, the repaired row alone — nothing else moved. WHAT THE EVIDENCE IS NOT: most of the diff is prose the tool never reads, so the green self-test does NOT evidence the reason text; the numbers' evidence is the probe transcript against the real functions, and the 'nothing else moved' evidence is the 2-line output diff. WHAT IT NOW IS: the self-test gains 4 assertions pinning the DIRECTION row 1's reason depends on (mid-segment spelling live / a real narrowing / segment genuinely matched / still over-names the skipped file kind). ABLATION, proving the pin can fail: mutated hintCovers by deleting #12300's branch in scripts/pm/dispatch-gates.mjs; mutation confirmed ON DISK before the run by anchored marker count 1 -> 0 plus an injected-marker count of 1 (never an editor exit code); self-test then EXIT=1 with 2 named failures, both naming this row — the liveness and over-naming assertions. The other 2 are shape assertions and stay GREEN under that mutation (vacuously true at zero coverage), stated so the ablation is not read as stronger than it is. Restore leg by `trap ... EXIT`: marker back to 1, ablation marker 0, `git status --porcelain` empty, self-test EXIT=0 again. No dist/build is involved (plain .mjs, no exports-resolved dist), so no rebuild leg applies. GATE UNION re-derived at final commit 4d44af2580 via `node scripts/pm/dispatch-gates.mjs --repo objectstack-ai/objectstack`: no STALE TREE, change set exactly 1 path. origin/main moved TWICE mid-task; first derivation printed '⚠️ STALE TREE', so I merged and re-derived (twice), and the union grew by one — check:bash32-floor from #12319 — which the re-derivation caught rather than my assuming it away. All 10 green on that head, each exit code captured before any pipe (redirect-then-capture, never `| tail` then `$?`): check:agent-test-spelling 0, check:bash32-floor 0, check:cli-command-ids 0, check:cross-package-test-inputs 0, check:entry-guard 0, check:parse-guard 0, check:pnpm-filter-targets 0, check-ci-filter-parity.mjs 0, check-cross-package-test-inputs.mjs 0, bare-root-worklist.mjs --self-test 0. Heavy work ran under scripts/pm/os-verify-lock.sh (VERDICT command-exit 0, waited 7m03s at worst). Row numbers were refreshed a second time after the final merge so all four terms are ONE reading of ONE tree (5240->5241, 4290->4291, 2478->2479, 2465->2466; both ratios unchanged at 35% and 42%) — never a denominator refreshed alone.",
 "open_questions": [
 {
 "question": "Row 2 (check:skill-refs SKILLS_DIR skills), plus the 3 further rows in #12328: post-#12300 each has an EXACTLY precise narrow spelling available (skills/*/references/** covers exactly its 12; packages/**/*.test.ts covers exactly its 2733; packages/**/i18n-extract.config.ts covers exactly its 9). REFUSE-UNSPELLABLE is defined in that file as 'the population is a file-KIND or FILENAME filter inside the root; the subtree idiom can only say all of it' — which is now false for all four. What verdict should they carry?",
 "options": [
 "A — Leave all four verdicts as REFUSE-UNSPELLABLE and repair only the prose to say 'a precise spelling exists but is not declared'. Cheapest, but records a refusal whose own stated definition it contradicts, and keeps two open findings (#12310, #12322) blocked on a remedy that now exists.",
 "B — Declare the precise spelling at each gate and let the rows become DECLARED-NARROWER, the verdict the vocabulary already has for 'the real population is declared elsewhere'. Directly unblocks #12310 (which says the remedy shape is established but 'what is not established is whether it applies here' — it now does) and #12322. Note it does NOT clear the rows from the sweep: covered() probes hintCovers(h, '<root>/probe.file'), false for all four spellings; what it buys is the gate being named for cards touching the real files.",
 "C — Add a fourth verdict value for 'spellable and precise, deliberately not declared', if there is a reason not to declare (e.g. the +139084 fabrication budget hintCovers' docblock prices). Honest, but grows a vocabulary the file has kept at three on purpose."
 ],
 "recommendation": "B for check:skill-refs and check:objectql-double-limit, where two open findings (#12310, #12322) are already asking for exactly this and the spellings are 100% precise; then re-measure the two i18n rows before deciding, since their own why texts argue the miss is smaller than the row (both gates already reach their real cards through convention triggers), which is a real argument for C over B there. ⛔ Not actioned in this PR under Zone 1b/1c — this is a verdict re-decision and a shrink-only map, so it needs the maintainer, not a dev seat. Detail and the full measured table are in #12328."
 },
 {
 "question": "Two process observations, recorded rather than asked. (1) This seat received a coordinator message addressed to card #11363 (Zone 1e, os-verify-lock.sh, check:bash32-floor); I identified it as misrouted and did not act on it, and a correction followed. Worth confirming the real #11363 dev received it. (2) The contract's mandated REST dedup channel is unreachable from this seat: both `curl` with $GITHUB_TOKEN and the additive labels endpoint return HTTP 403 ('GitHub access is not enabled for this session'), and `gh` is not installed. This is already filed as #12293. I fell back to ONE minimal MCP list_issues call (fields limited to number+title) for the dedup scan and to read->union->whole-set write for the skip-changeset label, both declared here.",
 "options": [
 "No decision required — informational."
 ],
 "recommendation": "No action from me. The label fallback was closed by READ-BACK, not by the write: PR #12330 reads ['size/s','skip-changeset'], with size/s preserved rather than clobbered."
 }
 ],
 "out_of_scope_findings": [
 "filed as #12328: #12300 retired the double-slash refusal — 4 bare-root-worklist TRIAGE rows still refuse on a mechanism the tree no longer has, and their VERDICTS (not just their prose) are now unsupported; includes the full measured table and the link to #12310/#12322, both of which it unblocks",
 "filed as #12329: `**` in a hint does not match ZERO segments, so `scripts/**/*.d.mts` names 3 tracked files (scripts/{check-regen-pending,invoked-as,js-comment-mask}.d.mts) and reaches 0 — a dead hint by construction, the #12246 species arriving through the branch that fixed it; it also silently props up the scripts/check-declaration-mirrors.mjs TRIAGE row's verdict",
 "not filed, already open as #12293: the os-dev contract's mandated REST dedup search is unreachable from dev seats (403); hit again here"
 ]
}

---

Generated by Claude Code

---

Generated by Claude Code