docs(pm-dispatch): narrow tiering clause ① to protocol semantics; seat-tier policy (maintainer 2026-08-20)

[qq9340100]

Fixes#10279

Implements the maintainer's 2026-08-20 ruling (「接受你的建议」, accepting the seat's B+C recommendation — fable 当审计师用,不当施工队用) on the pm-dispatch model-tiering section, governed surface, human merge only.

What changed

.claude/skills/pm-dispatch/SKILL.md — 模型分档 section (681/682 lines, net −1, no ceiling change):

1. Clause ① narrowed to protocol semantics: model: "claude-fable-5" stays mandatory only for the SKILL.md main file, the decision-frame copies wherever check:skill-frame-sync enforces them, and .claude/agents/os-dev.md. References-only surfaces, or one-line-class mechanical text edits on a pm-dispatch governed surface, drop to opus execution (sonnet floor for pure one-liners at PM discretion).
2. Compensating control named explicitly: the EXISTING skill-face review-tier requirement (ACCEPT 路径分叉 ① — reviewing seat at the contract-review tier). Opus-executed governed edits reach the maintainer only through a fable-tier seat review; no new label, no new chain.
3. Seat-tier policy line: execution PM seats outside the skills lane default to opus sessions; fable stays for the triage Routine, the skills seat, and clause-② work. Routine model pins remain the maintainer's Routines-UI action — the skill records policy, it creates no triggers.
4. Quota exemption unchanged (2026-08-13 quote preserved verbatim) plus the proactive low-headroom downgrade, both recorded with reason in the claim's Container & model line. The 2026-08-10 and 2026-08-12 provenance quotes are preserved verbatim — narrowed, not erased.

scripts/pm/dispatch-gates.mjs — the clause-① mandate derivation had to follow (its printout must never contradict the skill): MANDATORY_TIER_GLOBS replaces the single .claude/skills/pm-dispatch/** entry with the three protocol-semantic files; the mandatory rendering now names every sanctioned exit (mechanical one-liner downgrade with its compensating review at CONTRACT_REVIEW_TIER, quota exemption, proactive downgrade); the frame-copy half of the mandate is pinned mechanically against check:skill-frame-sync's exported COPIES table via a spawned import, so a frame copy added to that gate cannot silently fall out of the mandate. Self-test updated: baseline 388 → 398 cases, the old "references path is fable-mandatory" pin deliberately inverted.

scripts/pm/check-dispatch-gates.mjs — one declared constant (FRAME_MODULE), following that file's own SURFACE_MODULE convention: the tool's self-test now reaches check-skill-frame-sync.mjs through a spawned import, which is not a discoverable watch hint, so without the constant a COPIES edit would move this gate's verdict while deriving nothing. This file was not in the dispatch's named surface; it is the bounded companion of the mandated dispatch-gates self-test change, pinned live by a new self-test case.

Verification (all at head 2174525)

• check:pm-dispatch-gates — "✓ dispatch-gates self-test: 398 cases pass."
• Reverse verification, four legs, each mutation grep-confirmed on disk before running and restored from the committed state after: (A) dropping the published-skill glob → 2 red, the COPIES pin names the unmandated file; (B) restoring the pre-narrowing .claude/skills/pm-dispatch/** glob → the inverted references pin reds; (C) regressing the exit rendering to "the only exit" → the exits pin reds; (D) deleting FRAME_MODULE → the live coupling pin reds.
• Gate union re-run at the final commit, all green: check:pm-skill-ratchet ("681 lines (ceiling 682)"), check:pm-skill-id-lint, check:pm-governed-prose, check:pm-governed-merges, check:skill-frame-sync ("4 copies … structurally isomorphic"), check:doc-authoring, check:cross-package-test-inputs, check:nul-bytes, pnpm --filter @objectstack/lint run check:doc-formula-expressions.

Notes for the reviewer

• Line budget paid by removal of the superseded clause-① text and the "两条唯一降档出口" framing; the new content is written dense on the existing lines (net −1). No untouched lines were re-wrapped.
• Open PR fix(scripts): route every entry guard through one symlink-correct predicate, and close the class #10275 (entry-guard unification) also touches dispatch-gates.mjs and check-skill-frame-sync.mjs, in disjoint regions (imports + CLI entry guard vs. the tier section here); either landing order merges clean textually.
• references/dispatch-runbook.md untouched per the card's constraint; if its 模型分档 echoes need updating, that is a follow-up card after docs(pm-dispatch): runbook mutex tail-page recipe covers the two seat-post readings; name the third (lane-claim) reading #10276 lands.

Tests/docs/.claude only — skip-changeset.

---

Generated by Claude Code