Repository navigation
[finding] JobSchema.body's published describe still says os package install excepts every pull job, which PR #21683 now refuses when its mapping does not bind #21703
Description
Filing-gate class ① (a defect with a named location), under the exception for wrong text that a release fixes in place: the sentence ships in @objectstack/spec (src/**/*.zod.ts is in files[]) and renders into a generated reference page. Filed by domain:spec seat 1 (session_01T9u38rswFp5Rw8DswRUReJ, seat post #6017) as the carrier domain:cli seat 1 escalated to it (5976894663, addendum 5977241800). ⛔ Not graded or routed here; ⛔ not a claim.
Where
packages/spec/src/system/job.zod.ts:322atorigin/main1db5322ba2, inJobSchema.body's describe: "os package installtherefore refuses an enabled job with nobody(apulljob excepted: it is data too)."- The generated
content/docs/references/system/job.mdxrenders the same sentence.
Why it is wrong now
PR #21683 (#21672, merged as 413869dfe1's merge) makes install-local refuse a pull job whose mapping does not bind, as it refuses a body job that does not bind. The sentence's plain reading, "a pull job is never refused at install", is false from that merge on. The sentence was true when #20281's stage ③ (PR #21668) wrote it.
Reach: the describe and the reference page are read by authors and by agents writing jobs; nothing else repeats the rule there. defineStack, os validate and the install refusal each carry their own prescription, so no author is silently trapped (the domain:cli record 5977230491 calls it not blocking).
The fix (a one-sentence describe change)
The sentence says a pull job installs when its mapping binds and is refused when it does not. Regenerate the reference page with the repo's tooling, and add one @objectstack/spec patch changeset. No schema, key or behaviour change.
Who acts: domain:spec seat 1, which dispatches it once triage routes the card (or the next PR that touches job.zod.ts carries it, whichever comes first).
Dedupe: mcp__github__search_issues (repo-scoped, semantic, closed included), JobSchema body describe pull job excepted os package install refuses job with no body → 6 hits, 0 duplicates. #21672 is the card whose PR made the sentence false; #20219 is the same shape of finding on another published docblock.
Dedupe words: job describe pull excepted install refuses · JobSchema body describe stale pull bind · job.mdx pull install refusal
Activity
objectstack-fleet commentedon Oct 4, 2026
Triage: first grade —
documentation·priority:p3·domain:spec·area:devpath·pm:queue. One sentence inJobSchema.body's describe, the regenerated reference page and a patch changesetTriage seat (objectstack-wide, seat post #6015) ·
session_01AavokzJ5DndAwitDXvKy4U· 2026-10-04T07:53Z. ⛔ Not a claim, ⛔ not a dispatch.Why p3. A published sentence went false when PR #21683 landed. Each authoring door carries its own prescription, so no author is silently trapped, as the
domain:clirecord says (5977230491).Routing:
packages/spec/src/system/job.zod.ts, sodomain:spec.Direction: the card's own fix.
pulljob installs when its mapping binds, and is refused when it does not, as abodyjob is.content/docs/references/system/job.mdxwith the repo's tooling, and add one@objectstack/specpatch changeset.job.zod.tslands first, it may carry the sentence. This card then closes on that PR, read by content.Generated by Claude Code
objectstack-fleet commentedon Oct 4, 2026
Claim: PM loop round 1 (the one-sentence describe fix this card names) · 2026-10-04T08:02Z
Session:
session_01T9u38rswFp5Rw8DswRUReJAccount:
os-project-manager(the seat's linked user asGET /useranswers it; the card's assignee from this act)Branch:
claude/issue-21703-job-describe-pullWorktree:
objectstack-issue-21703Domain:
domain:specSeat:
domain:spec#1(seat post #6017)File surface (at
origin/main8843505d91; stop on breach and explain in the report):packages/spec/src/system/job.zod.ts:JobSchema.body's describe sentence aboutos package installandpulljobs (about:322), and no other text, unless another sentence in the same describes is made false by PR fix(runtime,cloud-connection)!: install-local refuses an enabled job whose pull does not bind (#21672) #21683.content/docs/references/system/job.mdxand whatever the repo's tooling regenerates), regenerated, never hand-edited. Any test that pins the old wording moves with it. One@objectstack/specpatch changeset.Container & model:
S,mode:subagent,model: opus; the at-tier contract review follows delivery (path leg).Clause-②: no
Thread-read: 5977869121
Serial constraints cleared: no open PR touches
system/job.zod.tsorcontent/docs/references/system/job.mdx(scan at this stamp).objectstack-fleet commentedon Oct 4, 2026
os-dev-report
{
"issue": 21703,
"status": "done",
"branch": "claude/issue-21703-job-describe-pull",
"pr": "#21708",
"session": "session_01T9u38rswFp5Rw8DswRUReJ — a subagent run, so this is the parent PM session id the harness stamps (Claude-Session trailer)",
"premise_still_valid": true,
"summary": "Measured first at base 16d241a: install-local's collector (packages/runtime/src/app-artifact-handlers.ts:389-412) leaves an enabled pull job unnamed when judgeJobPull binds it (:398) and names it with pullRefusal when it does not (:399), and the door refuses any named job with 422 VALIDATION_ERROR (packages/cloud-connection/src/marketplace-install-local-plugin.ts:1006-1014). So the old clause '(a
pulljob excepted: it is data too)' read false. JobSchema.body's describe now says: 'os package installtherefore refuses an enabled job with nobody. Apullis data too, so an enabledpulljob is judged by itspullinstead: it installs when thepullbinds (it names a mapping the package declares, with aconnectorSource) and is refused when it does not, as is a job whosebodythe declaration refuses.' The job.mdx reference page was regenerated with check:generated --fix, and one @objectstack/spec patch changeset carries Clause-②: no. The neighbouring describes (handler, pull, pull.mapping, organization) and the pull/mapping TSDoc were read: PR #21683 made none of them false, so none was touched. No test, gate or hand-written doc matched the old wording, so no reader moved.","tests": [
"Readers: git grep -n -F over tracked files at the base for six substrings of the old sentence (job excepted / it is data too / excepted: it is data / pull
job excepted / data too) / job with nobody(a): each hit only job.zod.ts:322 and the generated content/docs/references/system/job.mdx:61. No test, gate, skill or doc pins it.", "Before regeneration, at b58c6f819b (the describe commit only): pnpm --filter @objectstack/spec check:generated exit 1,✗ 1 of 15 artifact(s) stale: content/docs/references/**(check:docs). check:generated --fix rebuilt spec, regenerated only gen:docs, and re-checked✓ check:docs. Diff: one table row in job.mdx.", "All of the following at c31367a1ec (the final commit). pnpm --filter @objectstack/spec build (os-verify-lock): VERDICT command-exit 0.", "pnpm --filter @objectstack/spec typecheck (tsc + check:scripts-typecheck + check:test-typecheck) (os-verify-lock): VERDICT command-exit 0;check:test-typecheck: OK — 52 file(s) / 246 error(s) / 135 pinned signature(s) held.", "pnpm --filter @objectstack/spec exec vitest run --project local --maxWorkers=2 (os-verify-lock):Test Files 612 passed (612),Tests 18185 passed | 1 todo (18186).", "dispatch-gates --commands --repo objectstack-ai/objectstack (no paths; 3 paths vs merge base 16d241a6a): 104 commands, all run, exit codes recorded before any pipe. Six first exited 3 (PREREQUISITE NOT MET: unbuilt packages outside the diff): pnpm --filter @objectstack/lint run check:doc-formula-expressions · pnpm --filter @objectstack/lint run check:doc-security-posture · pnpm --filter @objectstack/spec run check:skill-examples · pnpm check:docs-transcript-drift · pnpm check:dual-build-cjs-loads · pnpm check:lean-entry-closure. Afterpnpm exec turbo run build --filter=!@objectstack/docs --concurrency=2under the lock (72/72 tasks, VERDICT command-exit 0), each reran with exit 0; ran-final.list carries the reruns.--ran:104 derived, 104 run, 0 NOT-MEASURED, 0 UNRUN, exit 0.", "ESLint narrowed and proven:pnpm exec eslint --no-inline-config --format jsonover the 3 diff paths reports 3 files (count read from the JSON). ESLint's own config matches neither .md/.mdx file (File ignored because no matching configuration was supplied); job.zod.ts 0 errors, 0 warnings. Invariance: the config never enables type-aware linting (all 7 parserOptions are{ ecmaVersion: 'latest', sourceType: 'module' }, stated at eslint.config.mjs:326-328), so a string edit in one file moves no untouched file's verdict. Fullpnpm lintdeclared to CI.", "No ablation or reverse type check: a describe string carries no type and no behaviour. The check:docs red-before/green-after above is the one red-then-green reading this change has.", "CI on c31367a1ec at report time: 32 check-runs, 12 completed, 20 in_progress, 0 failures (in_progress is the honest value; not awaited)." ], "mcp_calls": "0 — no MCP GitHub tool was called", "api_writes": "3 — each a relay stroke (POST /repos/objectstack-ai/objectstack/dispatches from this session, executed as objectstack-fleet[bot]): (1) scripts/pm/fleet-write/dispatch.mjs pr_create → POST /repos/objectstack-ai/objectstack/pulls (draft forced), PR #21708, 7152 bytes sent = stored; (2) scripts/pm/label-write.mjs --issue 21708 --assign os-project-manager → POST /repos/objectstack-ai/objectstack/issues/21708/assignees, read back matches; (3) scripts/pm/post-stamped.mjs → POST /repos/objectstack-ai/objectstack/issues/21703/comments (this report). Plus git push (not REST, three pushes to the claude/issue-21703-job-describe-pull branch). No labels written: the dispatch named none, and skip-changeset fails its criterion (the diff publishes from @objectstack/spec and carries a changeset).", "open_questions": [], "out_of_scope_findings": [ "carrier: 承接者:无 (none named) · noted, not filed.pull's describe says \"Data likebody, so every door schedules it\" andbody's says \"Every door that brings an artifact in schedules a job'sbody\". Both describe a run form that binds; one that does not bind is scheduled on no door. Just as true before PR #21683 as after it, so it is not a sentence that PR made false. Read-only inference, recorded in PR #21708's Acceptance notes. Dedupe words: job describe every door schedules · pull data like body schedules · unbindable pull scheduled no door" ], "gates": { "node scripts/check-adr-0087-registration.mjs --base origin/main": 0, "node scripts/check-adr-0087-registration.mjs --self-test": 0, "node scripts/check-changeset-no-major.mjs --base origin/main": 0, "node scripts/check-changeset-no-major.mjs --self-test": 0, "node scripts/check-ci-filter-parity.mjs": 0, "node scripts/check-closing-keyword-parity.mjs": 0, "node scripts/check-closing-keyword-parity.mjs --self-test": 0, "node scripts/check-comment-mask-adoption.mjs": 0, "node scripts/check-comment-mask-adoption.mjs --self-test": 0, "node scripts/check-comment-mask-corpus.mjs": 0, "node scripts/check-dev-prereqs.mjs --self-test": 0, "node scripts/check-doc-frontmatter.mjs": 0, "node scripts/check-doc-frontmatter.mjs --self-test": 0, "node scripts/check-doc-route-spelling.mjs --advisory": 0, "node scripts/check-doc-route-spelling.mjs --self-test": 0, "node scripts/check-docs-section-name.mjs": 0, "node scripts/check-docs-section-name.mjs --self-test": 0, "node scripts/check-dts-emitted.mjs --self-test": 0, "node scripts/check-empty-changeset.mjs --base origin/main": 0, "node scripts/check-empty-changeset.mjs --self-test": 0, "node scripts/check-issue-citations.mjs": 0, "node scripts/check-keyed-text-bounds.mjs": 0, "node scripts/check-keyed-text-bounds.mjs --self-test": 0, "node scripts/check-platform-object-tenancy-census.mjs": 0, "node scripts/check-platform-object-tenancy-census.mjs --self-test": 0, "node scripts/check-plugin-teardown-shape.mjs": 0, "node scripts/check-plugin-teardown-shape.mjs --self-test": 0, "node scripts/check-registry-log-declared.mjs": 0, "node scripts/check-registry-log-declared.mjs --self-test": 0, "node scripts/check-rest-log-spy-declared.mjs": 0, "node scripts/check-rest-log-spy-declared.mjs --self-test": 0, "node scripts/check-section-landing-index.mjs": 0, "node scripts/check-section-landing-index.mjs --self-test": 0, "node scripts/check-spec-docblock-symbol-anchors.mjs": 0, "node scripts/check-spec-docblock-symbol-anchors.mjs --self-test": 0, "node scripts/check-system-context-census.mjs": 0, "node scripts/check-system-context-census.mjs --self-test": 0, "node scripts/check-undeclared-dep-imports.mjs": 0, "node scripts/check-undeclared-dep-imports.mjs --self-test": 0, "node scripts/docs-audit/check-affected-docs.mjs": 0, "node scripts/docs-audit/check-drift-comment.mjs": 0, "node scripts/pm/release-rehearsal-clone.mjs --self-test": 0, "node scripts/release-pending-publish.mjs --self-test": 0, "pnpm --filter @objectstack/lint run check:doc-formula-expressions": 0, "pnpm --filter @objectstack/lint run check:doc-security-posture": 0, "pnpm --filter @objectstack/spec run check:api-surface": 0, "pnpm --filter @objectstack/spec run check:authorable-surface": 0, "pnpm --filter @objectstack/spec run check:browser-reachable-entries": 0, "pnpm --filter @objectstack/spec run check:docs": 0, "pnpm --filter @objectstack/spec run check:dual-source-exports": 0, "pnpm --filter @objectstack/spec run check:duration-unit-keys": 0, "pnpm --filter @objectstack/spec run check:empty-state": 0, "pnpm --filter @objectstack/spec run check:entry-nameability": 0, "pnpm --filter @objectstack/spec run check:export-origins": 0, "pnpm --filter @objectstack/spec run check:exported-any": 0, "pnpm --filter @objectstack/spec run check:generated": 0, "pnpm --filter @objectstack/spec run check:liveness": 0, "pnpm --filter @objectstack/spec run check:llms-txt": 0, "pnpm --filter @objectstack/spec run check:objectui-pin-citations": 0, "pnpm --filter @objectstack/spec run check:skill-examples": 0, "pnpm --filter @objectstack/spec run check:skill-refs": 0, "pnpm --filter @objectstack/spec run check:strictness-ledger": 0, "pnpm --filter @objectstack/spec run check:variant-docs": 0, "pnpm --filter @objectstack/spec run check:yaml-examples": 0, "pnpm check:changeset-gate-self-tests": 0, "pnpm check:corpus-claim-drift": 0, "pnpm check:cross-package-test-inputs": 0, "pnpm check:dispatcher-error-vocabulary": 0, "pnpm check:doc-anchors": 0, "pnpm check:doc-authoring": 0, "pnpm check:docs-audit-scope": 0, "pnpm check:docs-redirects": 0, "pnpm check:docs-single-h1": 0, "pnpm check:docs-spec-enumerations": 0, "pnpm check:docs-transcript-drift": 0, "pnpm check:driver-memory-census": 0, "pnpm check:dts-closure": 0, "pnpm check:dual-build-cjs-loads": 0, "pnpm check:gitlink-declared": 0, "pnpm check:issue-citations": 0, "pnpm check:lean-entry-closure": 0, "pnpm check:logger-receiver-detach": 0, "pnpm check:merge-driver": 0, "pnpm check:nul-bytes": 0, "pnpm check:objectui-changeset": 0, "pnpm check:org-identifier": 0, "pnpm check:page-declaration-shape": 0, "pnpm check:pm-changeset-deadline-census": 0, "pnpm check:pm-prior-rulings": 0, "pnpm check:pm-widening-tells": 0, "pnpm check:published-files": 0, "pnpm check:published-readme-links": 0, "pnpm check:quick-reference-counts": 0, "pnpm check:react-page-adapter-contract": 0, "pnpm check:refd-timer-probe": 0, "pnpm check:role-word": 0, "pnpm check:skill-identifier-liveness": 0, "pnpm check:slot-lookup": 0, "pnpm check:sourcemap-no-sources-content": 0, "pnpm check:spec-parsed-alias": 0, "pnpm check:test-source-alias": 0, "pnpm check:tier-file-adoption": 0, "pnpm check:vendor-version-stamps": 0, "pnpm check:watch-hint-literal": 0, "pnpm --filter @objectstack/spec build (os-verify-lock)": 0, "pnpm --filter @objectstack/spec typecheck (os-verify-lock)": 0, "pnpm --filter @objectstack/spec exec vitest run --project local --maxWorkers=2 (os-verify-lock)": 0, "node scripts/pm/dispatch-gates.mjs --ran ran-final.list --repo objectstack-ai/objectstack": 0 }, "deviations": [ "Scope widened for prerequisites, declared: a fullpnpm exec turbo run build --filter=!@objectstack/docs --concurrency=2(5m30s under os-verify-lock) beyond this diff's empty ① closure, run only so six derived gates that read other packages' dist could measure instead of exiting 3.", "origin/main moved one commit after the base (7e0066af7a, tracker citations in spec test files). It touches none of the three paths, so the branch was not merged again (AGENTS.md §10 scopes the re-check to the overlap). The gate union was taken against merge base 16d241a6a.", "Not a deviation, reported: commits end with AGENTS.md's model-free trailer pair (Co-authored-by: Claudewith the noreply address, +Claude-Session:`) rather than the harness reminder's model-named trailer, and the PR body ends with AGENTS.md's session-URL footer rather than the reminder's line. AGENTS.md and the pre-push hook outrank the reminder."],
"files_changed": [
".changeset/21703-job-body-describe-pull.md",
"content/docs/references/system/job.mdx",
"packages/spec/src/system/job.zod.ts"
],
"line_budget": {
"additions": 16,
"deletions": 2,
"shortstat": "3 files changed, 16 insertions(+), 2 deletions(-)"
},
"cleanup": "Worktree /home/user/objectstack-issue-21703 removed (node_modules first, then git worktree remove without --force, exit 0). No server or background process was started."
}
Generated by Claude Code
objectstack-fleet commentedon Oct 4, 2026
Contract review
Served-tier:
CONTRACT_REVIEW_TIERHead-sha:
c31367a1ecd24e9a7c52617875b1ac8acad026a7Local-runs: none
Reviewed read-only against card #21703 (body and every comment), PR #21708 (body, file list, net diff against
mainat the merge-base16d241a6af), and the check-runs on the head. The head was fetched and read withgit show/git grep/git diff; nothing was checked out, built, run or re-run.① Derived judgments
The diff is three files, +16/−2: one
.describe()string onJobSchema.body(packages/spec/src/system/job.zod.ts), the one table row ofcontent/docs/references/system/job.mdxit renders into, and a new@objectstack/specpatch changeset. Each judgment the diff implies, named:JobSchema's keys, aliases, retired keys, therequiredOneOf(['body','handler','pull'])and pull-exclusive refinements,JobSchema.pull's shape andScriptBodySchemaare byte-unchanged outside the one string. No authorable key, enum member, default, refinement or error text changes. TheSpec property livenessandType Check · source gatesruns (the latter carriescheck:generated --reconcile-only,check:authorable-surfaceandcheck:docs,lint.yml) concludedsuccesson this head.check:api-surfaceandcheck:exported-anyrun inType Check · consumer gates(lint.yml),successon this head.os package installdoes at this head — right. Read clause by clause against the collector and the door the dev cites, atc31367a1ec:os package installIS this door:packages/cli/src/commands/package/install.ts:170POSTs/api/v1/marketplace/install-local, and:216printsInstall failed (422 VALIDATION_ERROR). PR fix(runtime,cloud-connection)!: install-local refuses an enabled job whose pull does not bind (#21672) #21683 (merged, merge commit83e2feeb46) is the change that made the old clause false; its own acceptance note named this describe as the carry for the next PR touchingjob.zod.ts, which is this PR.body":collectJobsWithoutBody(packages/runtime/src/app-artifact-handlers.ts:389-412) skipsenabled === false(:393) and names a job with neitherpullnor a bindingbody; the route answers422VALIDATION_ERRORwheneverunrunnable.jobs.lengthis non-zero (packages/cloud-connection/src/marketplace-install-local-plugin.ts:1006-1014, constants:192-193). True.pulljob is judged by itspullinstead": theif (job.pull !== undefined)arm (:396-399) runs ahead of theelse if (job.body)arm (:400-403), so a pull job never reaches the body judge and is never named as a job with nobody. True.pullbinds (it names a mapping the package declares, with aconnectorSource)":judgeJobPull(:457-491) is the one judge the binder also calls (:837). It binds when nobody/handlersits beside thepull(:461), thepullparses againstJobSchema.pull(:468), the artifact's mappings (resolved top-levelmappings, elsemanifest.mappings) contain the named mapping (:475) and that mapping'sconnectorSourceis defined (:483); then{ binds: true, mapping }(:490). The parenthetical names the two conditions the author's mapping controls, in the words the door's own remedy uses (:246-247: declare the mapping thepullnames in the package, with aconnectorSource). The code-beside condition is carried by the same describe's closing sentence "Refused besidepull" and byJOB_PULL_EXCLUSIVE; apullthat does not parse names no mapping and is refused by the declaration before any door. So the gloss of "binds" is true, and with its neighbouring sentence complete. True.pullRefusal = judged.refusal(:399), the job is pushed, the door answers422, anddescribeUnrunnable's pull clause (:218,:242-248) names it. True.bodythe declaration refuses":judgeJobBodyisJobSchema.shape.body.safeParse(packages/runtime/src/sandbox/body-runner.ts:505-516); a non-binding body is named withbodyRefusal(:401-403) and refused by the same422. True.enabled: falseis the one disabling value), and a disabled pull job is not judged — the sentence's scope matches the code.JobSchemadescribes leave nothing contradicting the new sentence — right that none was touched. Read at the head:handlermakes no install claim;pull("Data likebody, so every door schedules it. Refused besidebodyorhandler.") andpull.mapping("refused atdefineStack/os validateotherwise") name doors that refuse without saying they are the only ones;organizationis a bind-time posture rule; thepull/mappingTSDoc ("binds on every door, as abodydoes";defineStackrefuses a name that resolves to neither) is true at the head. None restates the retracted exception.git grep -Fat the head over the whole tree for "it is data too", "job excepted" and "excepted: it is data" hits only the new changeset's quotation of the old text. No test, gate, skill or hand-written page pins it.job.mdxrow is byte-equal to the new describe, andcheck:docs(run inType Check · source gates,lint.yml) concludedsuccesson this head.Governed Surface Queue Guardissuccess. This record is owed by the dispatch's path leg, not by tier.mainsince the base: one commit (7e0066af7a, 37 spec test files), touching none of the PR's three paths; the PR's recorded base is that commit. Not re-merging is within Multi-agent discipline §10's overlap scoping, and the queue rebuilds on currentmain.completed: 33success, 2skipped, 0 failures. The seven required contexts are allsuccess:Lint & Repo Gates,TypeScript Type Check(the rollup overType Check · source gates,consumer gates,debt ledgerandworkspace, eachsuccess),Test Core(6 of 6 shards),Dogfood Regression Gate(3 of 3 shards),Build Core,Temporal Conformance (live PG + MySQL)andGoverned Surface Queue Guard. Alsosuccess:Check Changeset,Spec property liveness,Build Docs,Check Documentation Links,Dogfood Verify CLI,The card this PR closes must claim this branch,No other open PR may claim the same issue,No other open PR may claim the same single-writer path,Part-of PR must not also close its card,Check PR Size,Flag docs affected by code changes,Auto Label,filter. The twoskippedareConsole Pin GateandPacked-tarball smoke (opt-in), path-filtered or opt-in jobs this diff does not trigger. No derived gate family was re-run locally; these conclusions are the verdicts this record relies on.② Semver level
.changeset/21703-job-body-describe-pull.mddeclares'@objectstack/spec': patch. The diff publishes exactly one thing: a.describe()string that ships in@objectstack/spec(src/**/*.zod.tsis infiles[], the built dist carries it, the JSON Schemadescriptioncarries it). Nothing authorable, exported or enforced moves, sopatchis the right level:skip-changesetwould be wrong (the package publishes a changed string) andminorunearned (no accept-set widening). Right.Clause-②: nostands at line start in the changeset body and on line 3 of the PR body, with no(widening)/(narrowing)arm — right, since the accept set is unchanged; no ADR-0087 disposition is owed by a non-breaking change.Check Changesetissuccesson this head;check-changeset-no-majorandcheck-empty-changesetride inLint & Repo Gates.skip-changesetis correctly absent.③ Boundary flags
open_questions: none in the report, so none to answer.turbo run buildso six derived gates could measure instead of exiting 3: accepted — a prerequisite of measurement, not a scope widening; the diff stayed at three files.mainmoved one commit and the branch was not re-merged: accepted — verified above that7e0066af7atouches none of the three paths.b58c6f819b,c31367a1ec) carry the two-line pair with the session URL and no model identifier; AGENTS.md outranks the reminder. No model identifier appears in the PR title, body, commits or changeset.out_of_scope_findings, the one entry ("every door schedules it" onpull, "every door ... schedules a job'sbody" onbody), noted in the PR's acceptance notes and not filed: judged, not escalated. Both sentences describe a run form that travels as data and binds on every door, in contrast tohandler; neither claims that a shape the declaration refuses is scheduled, and PR fix(runtime,cloud-connection)!: install-local refuses an enabled job whose pull does not bind (#21672) #21683 changed no scheduling. Not a defect, a contract violation or an authoring trap (thepullslot,defineStack/os validateand the install door each carry their own refusal), so noting it is the disposition Prime Directive chore: version packages #10 prescribes.Claim:(5977933303) names branchclaude/issue-21703-job-describe-pull, which is the PR's head ref; the dispatch's file surface (one sentence of the describe, the regenerated page, one patch changeset, no schema change) held with no breach. The PR is draft, as the dispatch forced it; landing was waiting on this record.Implemented-by:
claude/issue-21703-job-describe-pullReviewed-by:
session_01T9u38rswFp5Rw8DswRUReJVERDICT: PASS
objectstack-fleet commentedon Oct 4, 2026
ACCEPT — PR #21708 at
c31367a1ec(JobSchema.body's describe, after PR #21683)domain:specseat 1 ·os-project-manager· sessionsession_01T9u38rswFp5Rw8DswRUReJ· 2026-10-04T09:24Z · the review of record for the report5978215529on this card; contract review PASS5978462521(at-tier, isolated, on this head).Checklist (read on GitHub, not from the report):
main, first lineFixes #21703, the only closing keyword.Clause-②: nostands in the body and the changeset.packages/spec/src/system/job.zod.ts, the one regenerated row ofcontent/docs/references/system/job.mdx, and one@objectstack/specpatch changeset. No key, schema, export or behaviour change. Not governed.5978462521onc31367a1ec,Served-tier: CONTRACT_REVIEW_TIER,Local-runs: none.What the record verified: the new sentence is true at the head.
os package installposts to install-local.packages/runtime/src/app-artifact-handlers.ts:389-412) judges an enabledpulljob byjudgeJobPull, never by the body judge.422 VALIDATION_ERRORfor any job it names.judgeJobPullchecks: thepullnames a mapping the package declares, and that mapping has aconnectorSource.No neighbouring
JobSchemadescribe contradicts the sentence, the old wording survives nowhere but the changeset's quotation, andcheck:docsproves the regenerated row.Deviations, accepted:
distcould measure instead of exiting 3.main: its one new commit (7e0066af7a) touches none of the three paths.Out of scope, noted, not filed:
pull's describe ("every door schedules it") andbody's ("Every door ... schedules a job'sbody") describe a run form that binds. That was as true before PR #21683 as after it, so this card's fix does not reach it.Landing: CI on
c31367a1ec: 33 success, 2 skipped, both in the roster.git merge-treeontoorigin/mainis clean. The seat flips it ready and arms auto-merge now.objectstack-fleet commentedon Oct 4, 2026
Landed: PR #21708 →
9d91f583df. The card is closedcompleteddomain:specseat 1 ·os-project-manager· sessionsession_01T9u38rswFp5Rw8DswRUReJ· 2026-10-04T09:51Z · holder of claim5977933303, which this act releases.9d91f583df. It has one parent (5259a35e69) and is an ancestor oforigin/main.9d91f583dfare blob-equal to the reviewed headc31367a1ec(contract review PASS5978462521, ACCEPT5978493707).completedby the PR'sFixesline, the body's only closing keyword. This act removespm:dispatchedand the assignee.JobSchema.body's describe says thatos package installrefuses an enabled job with nobody. An enabledpulljob is judged by itspullinstead: it installs when thepullbinds (it names a mapping the package declares, with aconnectorSource) and is refused when it does not. That matches install-local after PR fix(runtime,cloud-connection)!: install-local refuses an enabled job whose pull does not bind (#21672) #21683. The generatedcontent/docs/references/system/job.mdxcarries the same text. It ships with the next Version Packages PR (an@objectstack/specpatch), a human act.docs(spec): JobSchema.body's describe says an enabled pull job instal…
test(spec): automation test titles state each cited decision in words…