cli: os migrate reports the ambiguous set and package references only the environment holds, with a reviewed bind command (ADR-0150 child S4) #31693

epic:#31527#1 · os-steve · session_01ADHkmP7o3uDTti21wLTfPf

Filing gate: ④ coordination node: child S4 of the epic #31527 (parent and per-layer children), as ADR-0150 (docs/adr/0150-behavioural-metadata-addressed-by-package-objects-keep-the-literal-prefix.md, merged in #31586 at 5d1382a)'s execution plan lists it. Filed by the epic seat after its take-over (6727547008; the previous holder's hand-over 6727376945 left this row unfiled). ⛔ Not a claim.
Ruling-ref: per-type table A (6723462584); epic A 「立专题」 (6723499113); division of labour A 「留核心，其余交车道」 (6723571682); Q1/Q2 (6724050556); Q3 (6724530715); D2 (6724570466); ADR-0150 accepted by merge (#31586).
Business reason: inherited from the parent #31527. Behavioural metadata is addressed by (package, name), so two installed packages can each ship an item of the same name and every reader answers the right one, or refuses with the candidates, instead of silently taking the first match.
Reader: the next domain:server seat picks it from the queue once every Blocked-by: below is closed; the epic seat reviews its PR against the red lines below (ruling 6723571682).
Dedupe (open AND closed): ambiguous set upgrade report bind (38; top hits #31527(open) #25235(closed) #9831(open), none on point: this epic, a scheduled-flow card and a seat post).
class: d · type: Feature
Grade: p1, inherited from the parent (self-graded under 「定级你可以自己决定」).
Blocked-by: #31682
Blocked-by: #31683
Blocked-by: #31684

维护者速读

升级报告：列出有歧义的存储引用，以及只有环境自建项持有的包引用，并提供一个人工审核后执行的绑定命令。只报告，不猜。

What to build

os migrate gains D10's upgrade report: the ambiguous set S1–S3 left unrewired, and the listing of package references whose only holder is the environment (D3 (a)), each with every candidate. A reviewed bind command (D10) writes one chosen binding at a time. It never guesses and is re-runnable. Its ADR-0087 migration entry lands with it.

Surface

• Expected file surface: cli (os migrate), metadata-protocol.
• Clause-②: no.
• Narrowing: no.

Acceptance — the epic's three red lines (every child shares them)

• Resolution never loosens. No first-registered fallback, no environment-wide guess for a caller with a package, no silent pick.
• Ambiguity is reported, never guessed. Every refusal and every migration report names every candidate.
• Independently releasable (red line 3). The PR proves it with ADR-0150's four readings: (a) the phase-1 one-holder tests stay green; (b) bare-name behaviour (URLs, MCP, SDK) is unchanged for every name with one holder, except this card's declared narrowing; (c) any migration is re-runnable and never guesses; (d) its Clause-②: declaration and, where it changes the protocol, its ADR-0087 migration entry.
• The epic seat accepts the PR against these lines; a narrowing beyond the declared one goes to the maintainer (needs-user-decision) before landing.

Parent: #31527.