Repository navigation
[finding] platform-readings: the REST proxy's write identity changed mid-shift with no seat action — content writes read back claude[bot] (installation) until 2026-09-15T20:04Z and os-zhuang / User via app claude (user-to-server) from 2026-09-16T01:53Z — the register has no row saying the token class is re-read, not assumed #18350
Description
Filed by the domain:skills execution PM seat, session session_01HZfg2AwVX191qCizp88gQr, at 2026-09-16T02:11Z, from its own readings this shift.
Measured (comment authors read back through GET /issues/comments/{id}, same session, same tool scripts/pm/post-stamped.mjs, same REST proxy)
| comment | written | user.login |
user.type |
performed_via_github_app |
|---|---|---|---|---|
| 5687342171 (landing record #18324) | 2026-09-15T20:04:43Z | claude[bot] |
Bot | claude |
| 5690836932 (ruling-C provenance PR #18315) | 2026-09-16T01:53:43Z | os-zhuang |
User | claude |
| 5690861787 / 5690953559 / 5690957832 | 01:57Z – 02:10Z | os-zhuang |
User | claude |
GET /useron the same credential readsos-zhuang/Userat both instants (it did at seating, 02:03Z the day before, when the writes read backclaude[bot]).- No seat action sits between the two readings: no re-attach, no token change the seat can see; the flip happened while the seat was idle between 20:04Z and 01:53Z. ⇒ the proxy now injects a user-to-server token (the App acting on behalf of
os-zhuang) where it injected the installation token before;performed_via_github_appreadsclaudein both classes, so it is NOT a discriminator (already on the register);user.login+user.typeon a read-back IS. - Consequence measured on the live board: the seat's four ruling-C provenances of 01:53–01:57Z carry the SAME account as the approving reviews they cite (os-zhuang, 5217668792 / 5217673315 / 5217676382 / 5217679727). The session line inside each record is the attribution; the red line (the seat writes no approving review) held — the review endpoint was never called — but a reader of
merged_by/ comment authors alone cannot tell the seat from the approver any more.
What is asked (⛔ not asserted — the seat grades)
One or two rows in references/platform-readings.md (write side): the proxy's token class can change between two writes of one session with no seat action; the class is read on every write's read-back (user.login + user.type), never carried forward from the round-open marker; a change is recorded on the seat post at the next refresh with both instants. Optionally one line in the seat-post protocol: the round-open marker's identity reading is dated, not standing. References tier (in-seat contract-tier review). Fold candidate with #18320 (same file); the ceiling is 466 with 463 in use.
Grading (lane finding self-triage; class (c), a platform fact change measured with a control): p3 · Task · pm:queue · domain:skills.
查重词
write identity flipped mid-shift · installation token to user-to-server · claude[bot] os-zhuang read-back · performed_via_github_app not a discriminator · token class re-read every write
Generated by Claude Code
Activity
os-zhuang commentedon Sep 16, 2026
Consequence measured — skills seat, session
session_01HZfg2AwVX191qCizp88gQr, 2026-09-16T02:33Z. With the proxy writing asos-zhuang, the draft PRs this seat's devs open are AUTHORED by os-zhuang (PR #18351 read backuser.login=os-zhuang), and GitHub then refuses to request a review from the author:POST /pulls/18351/requested_reviewerswith["os-zhuang","hotlong"]→ 422 「Review cannot be requested from pull request author」; the same call with["hotlong"]alone → 201. GitHub also does not let a PR's author submit an APPROVED review on it, so while this identity stands, os-zhuang cannot be the authorized approver of any governed PR this seat opens — only hotlong can, and ruling C depends on that approval. This turns the identity change from an audit concern into a throughput one: every rules-layer PR from this seat now waits on hotlong alone. Remedy stays the one in the card body: a dedicated low-privilege GitHub user behind seat sessions, or the App installation token (claude[bot]), which authored every seat PR before 20:04Z and was requestable / approvable by both approvers.Generated by Claude Code
os-zhuang commentedon Sep 16, 2026
Closed as a duplicate of #18334 (skills-lane self-triage): the triage seat measured the same write-identity flip first (2026-09-15T22:55Z,
claude[bot]→os-samon #6015), and this card's table is the second measurement of it on this seat's writes (claude[bot]at 2026-09-15T20:04Z →os-zhuangat 2026-09-16T01:53Z). Nothing here is dropped — the table, theGET /userreading, the maintainer's account of the mechanism and the reviewer-request consequence (422 on PR #18351) are carried onto #18334 in one comment, and #18334's grading names the three rows this card asked for (:129 / :130 re-keyed, one consequence row), folded with #18320 into one platform-readings PR. Skills seat, sessionsession_01HZfg2AwVX191qCizp88gQr, 2026-09-16T03:19Z.Generated by Claude Code
docs(pm): platform-readings retires the denied enqueue tool's rows an…