Skills optimization flight — the four small internal skills (+ objectui `verify`): seven dead references, three rules copied from os-dev.md / SWEEP.md / RUNNER.md, the `live-elsewhere` gap (#14058), and a versioned Chromium path that breaks on the next image bump

[os-litant]

Member card of the skills catalog optimization program #14292 (maintainer mandate 2026-09-02, verbatim: 「审核所有的 skills，进行全面的优化。」). Filed by the skills lane seat (session session_01LraLgQVGq8egUwfYZpbYt1). Read-only audit at objectstack origin/main a59f78d (.claude/skills/** and scripts/pm/** byte-identical at d63c8a2) and objectui 67dadd6. The auditor's harness refused to write a findings file; the findings are recorded here (the dev posts the seat's full audit message as the audit-record comment at claim time — provided in the dispatch brief). Family dispatch: this card also closes #14058 (the live-elsewhere verdict gap in spec-property-retirement) — same file, same fix (SPR-C-05); #14058 keeps its own claim comment pointing at this branch.

Verdicts

skill	ceiling (lines)	verdict	reducible
checklist-author	62	RESTRUCTURE	~15 of 44 body lines are a second copy of SWEEP.md
checklist-test	238	TRIM	~15 lines
dogfood-verification	157	DIET	~25 lines
spec-property-retirement	337	DIET	~35 lines + 4 dead refs + 1 blocking gap
objectui .claude/skills/verify	(unpriced, unguarded)	HEALTHY	one fix

None is a retirement candidate. All four objectstack skills carry metadata.internal: true (enforced by packages/create-objectstack/src/template-consistency.test.ts:601). Usage cadence is not measurable on a shallow clone (dimension E recorded NOT MEASURED).

Findings (id · span · fix)

• SPR-C-01 spec-property-retirement:329-332 — "check-generated runs behind a paths filter in ci.yml; add the path in the same PR": that job and filter were deleted (lint.yml:3949,4078 "gone (ci.yml 的 generated paths filter 是门输入集合的手工副本、无人对账——三次漂移在案，收编剩余 4 个门后应整个删除 #4291)"; ci.yml has no paths:); AGENTS.md:724-726 states the current truth. DELETE −4.
• DOG-C-01 dogfood:66-83 (18 lines) — the ablation predict-then-mutate rule duplicates .claude/agents/os-dev.md:274-283 (same criterion, same KNOWN_UNALIASED_TEST_IMPORTS ledger, same two incidents); both texts say the rule is not dogfood's. MERGE-INTO os-dev.md (pointer, 2 lines). −16.
• CLA-C-01 checklist-author:33-51 — opens 「本技能…不是流程的第二份拷贝」 then restates SWEEP.md:48-68 steps 2–6 one-for-one + SWEEP's angle table. REWRITE to the 3 clauses SWEEP lacks + pointer. −13.
• SPR-D-01 spec-property-retirement:316-337 — 4 of 7 traps duplicate a binding anchor (stale-dist = AGENTS.md:764-767; | tail -1 = os-dev.md:140-141; sequential masking = AGENTS.md:725-729 and the skill's own :28-31; --check vs bare = AGENTS.md:754-758). Keep the two unique ones. −10.
• SPR-C-05 (= [finding] spec-property-retirement skill predates the live-elsewhere verdict — its ledger-verdict discipline never names the never-remove cross-repo case #14058) — the ledger grew a fifth verdict live-elsewhere (packages/spec/liveness/README.md:63-64,262-308; gate packages/spec/scripts/liveness/elsewhere.test.ts; 1 live row of 703): the skill has zero hits for it; §0's four-question checklist and §1's 「dead 裁定是删除的输入」 predate it. ADD a fifth §0 checkbox naming the never-remove cross-repo case, paid by SPR-C-01 + SPR-C-04.
• CLT-B-01 checklist-test:78-87 — 「解析器给出的 automated.ref」 is false: scripts/checklist-select.mjs:180 projects {id,priority,surface,since,revision}; the field lives only in areas/*.json, so the Tier-1 batching step is unexecutable as written. Fix the step to read the field from the area file.
• SPR-C-02 spec-property-retirement:81 — the strict-delete route describes a hand-written z.core.$ZodErrorMap; superseded by [finding][spec] #6619's inventory of hand-written $ZodErrorMaps was two short — strictToolError and strictCapabilitiesError survive the fold, still invisible to alias-integrity.test.ts #6805: shared/strict-object.ts:125-137,257-312 guidance: template, audited by alias-integrity.test.ts. Rewrite to name both files.
• SPR-C-04 spec-property-retirement:300-311 — a hand-rolled 10-name check:* loop is the "match by hand" AGENTS.md:742-750 forbids; the skill cites AGENTS.md at :255. REWRITE to check:generated + only the pure audits. −8.
• VFY-C-01 objectui verify:26-29 — prescribes /opt/pw-browsers/chromium-1194/chrome-linux/chrome; both siblings prescribe the alias /opt/pw-browsers/chromium and warn against exactly this spelling (RUNNER.md:151-160; os-dev.md:142-143). Fix (objectui PR).
• DOG-F-01 dogfood:31-43 — RUNNER.md:186-208 names dogfood §0 as the origin of the -p <port>-alone trap (self-pinging connectors dial 3000 via SHOWCASE_SELF_URL→OS_PORT→PORT); grep OS_PORT over dogfood → 0. ADD 2 lines, paid by DOG-C-01.
• CLT-C-01 checklist-test:96-97 — 「派发 runner 子代理时,必须用 opus」 is a memory-sourced blanket tier; pm-dispatch requires 「档位引当次 node scripts/pm/dispatch-gates.mjs --tier 输出,⛔ 不凭记忆」. Rewrite to the --tier rule.
• CLA-C-02 checklist-author:46-49 — 「六条 waiver 有四条已过期」 is the oldest of three disagreeing numbers; SWEEP.md:76-86 says 6 of 6 retired and check-platform-checklist.mjs reports "0 waived". Fix.
• SPR-C-03 :313-314 lists 3 of the 5 no-generator audits AGENTS.md:765-770 names · SPR-C-06 :145 「~28 个墓碑」 vs 178 retiredKey( sites and a pin floor of 50 · SPR-F-01 §4's changeset row omits the ADR-0087 disposition marker AGENTS.md:1122-1131 requires (pnpm check:adr-0087-registration enforces) · CLT-C-02/C-03 :229-235, :102-105 re-copy RUNNER rules 1–2 despite :24-25 disclaiming a second copy (and :230 claims a precedence RUNNER.md:67 denies) · X-02 the no-subagent degradation clause is stated twice near-verbatim (checklist-author:58-62 / checklist-test:98-101, both from skills(pm): give sweep disjunct ① the drain clauses the finding box already has #14152 — keep ONE, note the maintainer provenance in the PR).
• Dead references (positive-controlled): SPR:103 scripts/liveness/orphans.mts → packages/spec/scripts/liveness/orphans.mts · SPR:261 packages/cli/src/utils/lint-liveness-properties.ts → packages/lint/src/lint-liveness-properties.ts · SPR:282 .changeset/tool-inert-keys-removed.md → consumed at release; cite a live *-retired.md carrying "The retirement kit:" · SPR:329-332 (above) · CLA:42 README's "deep-test 契约" → README.md:42 ## Item anatomy · CLT:78-87 (above). Incidental (non-skill, report only): SWEEP.md:68 "land the run record under runs/" vs runs/.gitignore = *; .claude/launch.json:18-33 pr3505-attach-3477 points at a worktree that does not exist.
• X-01 (structural, decide in-flight by pointer): environment facts are split between checklist-test:27-29→dogfood and RUNNER.md:94-260 (7 facts dogfood lacks, incl. OS_PORT; one stated more fully). Rule: RUNNER.md is the environment anchor; dogfood §0 points at it and carries only what RUNNER does not; ⛔ no second copy.

Flight scope

IMPLEMENT: every item above, as TWO PRs — objectstack (.claude/skills/{checklist-author,checklist-test,dogfood-verification,spec-property-retirement}/SKILL.md, shrink-only under the line ratchet; ⛔ do not touch scripts/pm/check-skill-line-ratchet.mjs — it is held by PR #14236; headroom that appears is re-locked in the corpus audit's Phase 3) and objectui (.claude/skills/verify/SKILL.md, one path fix). Fixes #<this card> and Fixes #14058 both on the objectstack PR.

DEFER / report-only: the two incidental non-skill items (file as out-of-scope cards if not already carded); X-02's maintainer provenance (#14152) is noted, not re-litigated.

Flight constraints (binding)

• Draft PRs, governed (.claude/** in both repos) ⇒ stay draft; review requests are the seat's step; skip-changeset in objectstack (docs-only); objectui: empty-frontmatter changeset only if its rule asks, ⛔ never request a label.
• Line ratchet: no ratcheted file may grow; additions paid by deletions in the same file; ⛔ re-wrap is not payment.
• ⛔ Do not edit os-dev.md, AGENTS.md, RUNNER.md, SWEEP.md — they are the anchors; a pointer replaces the copy.
• Gates: pnpm check:pm-skill-ratchet, pnpm check:pm-skill-id-lint, pnpm check:skill-frame-sync, pnpm check:skill-frame-freshness, the packages/create-objectstack template-consistency test, plus node scripts/pm/dispatch-gates.mjs --commands <changed paths>; record the head sha.
• PR body: per-item 落点 | before | after keyed by finding id; line delta per file; Clause-②: no.

Refs: #14292 · #14058 (folded) · #14232 (separate: unlocks at #12800's close) · #13597 (the pm-dispatch corpus — ⛔ not touched by this flight).

[os-litant]

Claim: PM loop round 4 (family dispatch — also closes #14058)
Session: session_01LraLgQVGq8egUwfYZpbYt1
Branch: claude/issue-14317-skills-internal-small (same name in both repos)
Worktrees: objectstack-issue-14317 · objectui-issue-14317
Domain: domain:skills
File surface: objectstack .claude/skills/{checklist-author,checklist-test,dogfood-verification,spec-property-retirement}/SKILL.md (shrink-only under the line ratchet; ⛔ scripts/pm/check-skill-line-ratchet.mjs untouched — headroom is re-locked in the corpus audit's Phase 3); objectui .claude/skills/verify/SKILL.md (one path fix). ⛔ os-dev.md, AGENTS.md, RUNNER.md, SWEEP.md are anchors — a pointer replaces a copy; ⛔ .claude/skills/pm-dispatch/** untouched (#13597's corpus)
Container & model: M (five files, ~90 lines cut, seven dead references, one structural pointer decision), mode:subagent, model: opus — --tier reads no path-derived mandate for these four (the mandate is pm-dispatch's); floor sonnet · default opus · ceiling fable
Clause-②: no — nothing here states a platform contract; ⛔ no needs:contract-review
Decision inputs: no maintainer ruling on this card; X-02's provenance (#14152) is noted, not re-litigated; X-01 decided in-flight by pointer (RUNNER.md is the environment anchor)
Serial constraints cleared: no open PR touches the four objectstack internal skills or objectui's verify; scripts/pm/check-skill-line-ratchet.mjs was released by #14236's merge — the constraint that survives is "never edit it", not "held by a PR"; heavy slots: 0 of 3 in use (the three batch-4 heavies have all delivered)

Landing form: objectstack PR opens Fixes #14317 and, on the next line, Fixes #14058 (the live-elsewhere gap is SPR-C-05 in the same file); objectui PR opens Part of #14317. Governed (.claude/** in both repos) ⇒ both stay draft; skip-changeset in objectstack; objectui: an empty-frontmatter changeset only if its rule asks, ⛔ never request a label. Review requests are the seat's step. #14058 receives its own claim comment from the dev pointing at this branch.

---

Generated by Claude Code

[os-litant]

CLAIM (dev seat) — session session_01LraLgQVGq8egUwfYZpbYt1, branch claude/issue-14317-skills-internal-small (pushed empty in BOTH repos as the write-routing probe: objectstack base aaa4e657, objectui base 7dedec6f).

Worktrees: /home/user/objectstack-issue-14317 · /home/user/objectui-issue-14317. File surface exactly as ruled: objectstack .claude/skills/{checklist-author,checklist-test,dogfood-verification,spec-property-retirement}/SKILL.md (shrink-only under the line ratchet) + objectui .claude/skills/verify/SKILL.md (VFY-C-01). Anchors (os-dev.md, AGENTS.md, RUNNER.md, SWEEP.md), scripts/pm/check-skill-line-ratchet.mjs and .claude/skills/pm-dispatch/** are NOT touched — a pointer replaces each copy. ⛔ No assignee or label writes from this seat beyond skip-changeset on the objectstack PR.

The full audit record follows as the next comment (audit-record marker), then implementation cluster by cluster.

---

Generated by Claude Code

[os-litant]

audit-record — internal small skills + objectui verify (read-only audit at a59f78d / 67dadd6)

Transliteration key (the body sanitizer eats angle-bracket-shaped fragments, so every one is spelled out here):

written below as	the original text
-p PORT	the -p flag with an angle-bracketed port metavariable
--tier PATHS	dispatch-gates.mjs --tier with an angle-bracketed paths metavariable
chromium points to chromium-1194/chrome-linux/chrome	the ls -l symlink arrow between the two paths

Posted verbatim from the seat's audit message (its opening paragraph about the harness is dropped per the dispatch).

Setup

Pinned refs confirmed: objectstack origin/main a59f78d (local HEAD a39b02a; git diff HEAD origin/main -- .claude/skills/ scripts/pm/ is empty, so all spans are valid at the pin). objectui 67dadd6. No file in either repo touched; no git/GitHub writes.

Ceilings (scripts/pm/check-skill-line-ratchet.mjs CEILINGS map): checklist-author 62, checklist-test 238, dogfood-verification 157, spec-property-retirement 337 — all at landed count, headroom 0, entered under #9473. objectui has no line or token ratchet for skills (grep -rln "line-ratchet\|CEILINGS\|token-ratchet" over objectui hits only the unrelated check-eager-closure-budget.mjs); its only skill gate scripts/check-skills-paths.mjs has SCAN_ROOT = 'skills' (:105), so .claude/skills/verify/SKILL.md is unpriced and unguarded. Every addition proposed below is paired with the deletion that pays for it.

Dimension E is not measurable here. Both checkouts are shallow (50 commits each, .git/shallow present, all dated 2026-09-01/02); every skill's git log resolves to the graft commit 873ff0fd. Usage below is measured by inbound in-repo references instead.

Verdicts

skill	verdict	reducible
checklist-author	RESTRUCTURE	~15 of 44 body lines are a second copy of SWEEP.md
checklist-test	TRIM	~15 lines (~360 tok); structure sound
dogfood-verification	DIET	~25 lines (~580 tok); one anchor conflict (X-01)
spec-property-retirement	DIET	~35 lines (~770 tok) + 4 dead refs + 1 blocking gap
objectui verify	HEALTHY (one fix)	densest file audited; VFY-C-01 only

None is a retirement candidate. All four objectstack skills carry metadata.internal: true, enforced by packages/create-objectstack/src/template-consistency.test.ts:601.

Top findings

1. SPR-C-01 spec-property-retirement:329-332 — 「check-generated 在 ci.yml 里跑在 paths 过滤器后面…同一个 PR 里把路径加上」. That job and filter were deleted (ci.yml 的 generated paths filter 是门输入集合的手工副本、无人对账——三次漂移在案，收编剩余 4 个门后应整个删除 #4291): lint.yml:3949 "That job is gone now", :4078 "That job and its filter are gone (ci.yml 的 generated paths filter 是门输入集合的手工副本、无人对账——三次漂移在案，收编剩余 4 个门后应整个删除 #4291)"; grep -n "paths:" ci.yml → zero hits. AGENTS.md:724-726 states the current truth (one required unfiltered job). DELETE −4 lines.
2. DOG-C-01 dogfood:66-83 (18 lines, ~424 tok) — the ablation predict-then-mutate rule duplicates .claude/agents/os-dev.md:274-283: same criterion, same KNOWN_UNALIASED_TEST_IMPORTS ledger, same two measured instances (plugin-email→platform-objects 375-green-then-4-red; plugin-auth→core), same asymmetry argument. Both texts say the rule is not dogfood's (SKILL:66 「它不是 dogfood 专属」; os-dev:278 「不是定义」), and os-dev.md is loaded by every dev. MERGE-INTO os-dev.md, leave 2 lines: −16.
3. CLA-C-01 checklist-author:33-51 — the skill opens 「本技能…不是流程的第二份拷贝」(:21-22) then restates SWEEP.md:48-68 steps 2–6 one-for-one (hunter output contract, dedupe register, per-area writers, central reconcile, validate-and-land) plus SWEEP's angle table. REWRITE to the 3 clauses SWEEP lacks + a pointer: −13.
4. SPR-D-01 spec-property-retirement:316-337 — 4 of 7 traps duplicate a binding anchor: stale-dist = AGENTS.md:764-767; | tail -1 = os-dev.md:140-141; sequential-gate masking = AGENTS.md:725-729 and the skill's own :28-31; --check vs bare = AGENTS.md:754-758. Keep the two unique ones. −10.
5. SPR-C-05 (the [finding] spec-property-retirement skill predates the live-elsewhere verdict — its ledger-verdict discipline never names the never-remove cross-repo case #14058 gap, reported not resolved) — the ledger grew a fifth verdict live-elsewhere (Liveness ledger has no verdict for keys enforced only in a sibling repo — dead misreads as deletable (manifest.runtime case) #13483): packages/spec/liveness/README.md:63-64,262-308, gate packages/spec/scripts/liveness/elsewhere.test.ts, 1 live row (measured over all 31 ledgers: live 612 · dead 74 · planned 11 · experimental 5 · live-elsewhere 1). grep "live-elsewhere\|13483\|sibling repo" over the skill → zero hits; §0's four-question checklist and §1's 「dead 裁定是删除的输入」 both predate it. ADD a fifth §0 checkbox, paid by SPR-C-01+C-04.
6. CLT-B-01 checklist-test:78-87 — 「解析器给出的 automated.ref」 is false: scripts/checklist-select.mjs:180 projects {id,priority,surface,since,revision}; measured --json keys confirm no automated. The field is real on items (106/260 = 41%, so 「约四成」 is accurate) but only in areas/*.json, so the Tier-1 batching step is unexecutable as written.
7. SPR-C-02 spec-property-retirement:81 — the strict-delete route describes a hand-written z.core.$ZodErrorMap passed to z.object(shape,{error}).strict(). Superseded by [finding][spec] #6619's inventory of hand-written $ZodErrorMaps was two short — strictToolError and strictCapabilitiesError survive the fold, still invisible to alias-integrity.test.ts #6805: tool.zod.ts:88-95 ("Until [finding][spec] #6619's inventory of hand-written $ZodErrorMaps was two short — strictToolError and strictCapabilitiesError survive the fold, still invisible to alias-integrity.test.ts #6805 this file carried a hand-written $ZodErrorMap instead of the shared template"), now guidance: into shared/strict-object.ts (:125-137, 257-312), audited by alias-integrity.test.ts. The skill names neither file.
8. SPR-C-04 spec-property-retirement:300-311 — the hand-rolled 10-name check:* loop is the "match by hand" AGENTS.md:742-750 forbids ("one command runs every gate… precisely what CI cannot do"), and the skill already cites AGENTS.md at :255. REWRITE to check:generated + only the pure audits: −8.
9. VFY-C-01 objectui verify:26-29 — prescribes /opt/pw-browsers/chromium-1194/chrome-linux/chrome. Both siblings prescribe the alias and warn against exactly this spelling: RUNNER.md:151-160 ("⚠️ Use that alias… the versioned literal stops existing at exactly that moment — and a dead path copied out of this section is the absence-inference trap") and os-dev.md:142-143. Confirmed on disk: chromium points to chromium-1194/chrome-linux/chrome. Works today, breaks on the image bump RUNNER says is already pending (playwright wants build 1234).
10. DOG-F-01 dogfood:31-43 — RUNNER.md:186-208 names dogfood §0 by name as the trap's origin: -p PORT alone leaves the showcase's self-pinging connectors dialing 3000 (self-url.ts:19-25 reads SHOWCASE_SELF_URL→OS_PORT→PORT→3000, all environment reads), yielding fetch failed that "impersonates an egress block". grep "OS_PORT" over dogfood → zero hits. ADD 2 lines, paid by DOG-C-01.
11. CLT-C-01 checklist-test:96-97 — 「派发 runner 子代理时,必须用 opus」 is a memory-sourced blanket tier; pm-dispatch/SKILL.md:544 requires 「档位引当次 node scripts/pm/dispatch-gates.mjs --tier PATHS 输出,⛔ 不凭记忆」, with floor sonnet and fable reserved (:584-610).
12. CLA-C-02 checklist-author:46-49 — 「六条 waiver 有四条已过期」 is the oldest of three disagreeing numbers (SWEEP.md:35 "4"; README.md:343 "3"); the current anchor SWEEP.md:76-86 says "6 of 6… coverage.json now carries zero waivers", and check-platform-checklist.mjs reports "0 waived" today.

Also measured: SPR-C-03 :313-314 lists 3 of the 5 no-generator audits AGENTS.md:765-770 names; SPR-C-06 :145 「~28 个墓碑」 vs 178 retiredKey( sites in *.zod.ts and a pin floor of 50 across two corpora (retired-key-migrate-sentence.test.ts:276, incl. packages/lint/src — where SPR-B-02's file now lives); SPR-F-01 §4's changeset row omits the ADR-0087 disposition marker AGENTS.md:1122-1131 requires and pnpm check:adr-0087-registration (package.json:118) enforces — exactly the retirement case; CLT-C-02/C-03 :229-235, :102-105 re-copy RUNNER rules 1–2 despite :24-25 disclaiming a second copy (and :230 claims precedence over rule 2 where RUNNER.md:67 says "not a precedence claim by either"); X-02 the no-subagent degradation clause is stated twice near-verbatim (checklist-author:58-62 / checklist-test:98-101, both from #14152).

Dead references (each positive-controlled)

stated	truth
SPR:103 scripts/liveness/orphans.mts	packages/spec/scripts/liveness/orphans.mts
SPR:261 packages/cli/src/utils/lint-liveness-properties.ts	packages/lint/src/lint-liveness-properties.ts
SPR:282 .changeset/tool-inert-keys-removed.md	consumed at release; ≥5 live *-retired.md carry "The retirement kit:"
SPR:329-332 ci.yml check-generated + paths filter	deleted #4291; ci.yml has no paths:
CLA:42 README's "deep-test 契约"	term absent from README.md; anchor is README.md:42 ## Item anatomy
CLT:78-87 automated.ref from --json	not projected (checklist-select.mjs:180)
.claude/launch.json:18-33 pr3505-attach-3477	/home/user/objectstack-pr3505 does not exist (incidental)

Everything else resolved: all 13 check:* / 5 gen:* names, all baselines, all spec symbols, RUNNER/SWEEP/README anchors, checklist-select --self-test (17 pass), check-platform-checklist (green, 260 items), and all 6 objectui verify paths.

Human floor

• X-01 (structural) — two environment anchors with split coverage: checklist-test:27-29 routes to dogfood, RUNNER.md:8-9 calls dogfood "prerequisite", yet RUNNER.md:94-260 carries 7 facts dogfood lacks (incl. OS_PORT, which it attributes to dogfood §0 by name) and one it states more fully (?id=, adding the studio-not-loaded case that dogfood:53 gets wrong). RUNNER is unpriced; dogfood is 157/157. The pricing gradient and the routing point opposite ways.
• SPR-C-05 / [finding] spec-property-retirement skill predates the live-elsewhere verdict — its ledger-verdict discipline never names the never-remove cross-repo case #14058 and SPR-C-02 — both change retirement mechanics.
• SPR-D-01, DOG-C-01, CLA-C-01 — large deletions from governed instruction files.
• CLT-C-02 — deleting a duplicate copy of a security-disclosure rule.
• CLT-C-01 — touches dispatch governance. X-02 — text the maintainer drove in skills(pm): give sweep disjunct ① the drain clauses the finding box already has #14152.
• VFY-A-01 — objectui has no metadata.internal convention; user-invocable: false is carried by both the internal skill and the published skills/objectui/SKILL.md:4, so the marker cannot distinguish them.
• Hot-file hold on spec-property-retirement/SKILL.md: the 热文件串行队 lives in the live pm:seat post (pm-dispatch/SKILL.md:285,293,502,512; references/seat-post-protocol.md:6,26,52,57) — GitHub state I could not read read-only, so I cannot confirm the current chain head. Sequence any SPR change through it. #14058 has no in-repo trace; it is reported from the measured gap, not a GitHub read.

Incidental (non-skill): SWEEP.md:68 still says "land the run record under runs/", but runs/.gitignore:10 is * and runs/README.md:1 is titled "results are NOT committed" — checklist-author sends agents to obey that line.

---

Generated by Claude Code