Session Handoff [default]: Fork Handoff Chains Released as 2.0.799, #2268 Fix on Develop #2273

Next steps, in priority order

Re-read each issue and pull request rather than trusting these summaries.

1. Request Bot PR Reviews Judiciously, and Stop on a Quota or Rate Limit #2261: build the judicious bot-review mechanism (Copilot and CodeRabbit), so that it stops on a quota or rate-limit refusal. Carried from Session Handoff [default]: install-tools JSON Report on Develop, Promotion #2254 Ready for Merge #2262 with the maintainer's ranking, since every drive spends bot reviews until it lands.
2. Naming a Tool Other Than the Last Makes install-tools.sh Exit 1 Silently #2256: naming a tool other than the last makes install-tools.sh exit 1 silently. Carried. It is a quick win. Done is the fix plus a test that names a tool other than the last one. Read the Managed Binaries in /usr/local/bin Under a Minimal PATH in install-tools.sh #2257 and Hide the Home Directory in install-tools.sh Report Notes as the Windows Script Does #2260 sit beside it.
3. Fix STANDUP.md's Prerequisite Item That Says Mechanisms Declare Environments #2270: fix STANDUP.md's prerequisite item, which says mechanisms declare environments. Two rewrites each drew a new false claim, so read "What not to repeat" first. Done is one sentence naming three sources: the mechanisms for credentials, step 1's registry environments for environment names, and deploy-site-task.yml for the secret and variable names each environment must hold.
4. The next promotion must carry Closes #2268. Correct the False No-Vocabulary Claims About Environment Secrets #2271 (the Correct the False No-Vocabulary Claims About Environment Secrets in spec/ #2268 fix) is on develop and not on main, so Correct the False No-Vocabulary Claims About Environment Secrets in spec/ #2268 stays open until that promotion merges.
5. Carried from Session Handoff [default]: install-tools JSON Report on Develop, Promotion #2254 Ready for Merge #2262, in its order:
   • Deny the Remaining core.hooksPath and no-verify Bypass Routes in the Guard #2177, the guard's hook-bypass routes, after checking the auto-2112 heredoc work.
   • Settle Which Surface Owns the Skills Refresh Cadence and Which Flag Each Runs #2191, the answered cadence decision.
   • Decide How the Unattended Picker Recognizes an Adopted Lesson #2183, then Close the Unattended Loop's Parking-Comment and Interrupted-Park Gaps #2184.
   • Pair Nonstandard details Markup Correctly When Blanking the Overview Narrative #2187, Emit an Unclosed details Block's Preceding Text Once in details_spans #2186, Decide How the Prose Gate Widens Past the Latin Part of the Recorded-Name Rule #2170 and Read a Non-Version winget Token as an Unread Installed Version in install-tools.ps1 #2258.
   • Exercising the unattended loop's parked-lane half.
   • Say the Hub Commits the Report Wherever Done-Means-Audited Is Stated #1826 and Carry the code-review skill bootstrap to seven repos whose Copilot reviews never state coverage #1815, plus the Fleet Bootstrap resyncs per Session Handoff [default]: Unattended Picker Narrowed and Overview Label Refusal Fixed, Released as 2.0.776 #2190.
   • The smaller and older list in Session Handoff [default]: Unattended Picker Narrowed and Overview Label Refusal Fixed, Released as 2.0.776 #2190's order.

External blockers

• Copilot reviews ran all day at lite after the maintainer's plan upgrade, so Session Handoff [default]: install-tools JSON Report on Develop, Promotion #2254 Ready for Merge #2262's "out until October 5" is stale. Each re-review still costs quota, so request reviews judiciously until Request Bot PR Reviews Judiciously, and Stop on a Quota or Rate Limit #2261 lands.
• CodeRabbit does not auto-review this repository (under 10 stars), and its last prompt was rate-limited. It is advisory, so its absence blocks nothing.
• A native Windows host is still needed for the bootstrap.ps1 check carried from Session Handoff [default]: WORKFLOW.md Corrections and the pyproject.toml Decision Released as 2.0.672 #1804. The install-tools JSON report no longer needs one, since both paths were verified natively this round.

Internal dependencies

• Deny the Remaining core.hooksPath and no-verify Bypass Routes in the Guard #2177 follows, or absorbs, the auto-2112 heredoc work, since both edit the guard's tokenizer path.
• Decide How the Unattended Picker Recognizes an Adopted Lesson #2183 comes before Close the Unattended Loop's Parking-Comment and Interrupted-Park Gaps #2184, since both edit the unattended-handoff picker.
• Naming a Tool Other Than the Last Makes install-tools.sh Exit 1 Silently #2256 comes before any further install-tools.sh selection work.
• A fix for Fix STANDUP.md's Prerequisite Item That Says Mechanisms Declare Environments #2270 should not anticipate Declare Per-Environment Secrets and Variables Once and Check Them From the Hub #2070. If Declare Per-Environment Secrets and Variables Once and Check Them From the Hub #2070 lands first, the third source in step 3 changes.

State

• Hub: main is at 7e4eb6da, released as 2.0.799. develop is at f92076ed, one squash ahead of main (Correct the False No-Vocabulary Claims About Environment Secrets #2271). No promotion PR is open.
• This session's branches: all merged. Their worktrees, local branches and remote branches are deleted, and the primary checkout is clean on develop.
• Skills: this host's snapshot is current at 7e4eb6da. Claude Code here loads the primary checkout on develop.
• Unattended lanes still open: auto-2176 (Session Handoff [auto-2176]: Qualify D4.7's Pending-Run Gaps on the Dispatched Run Sharing the Concurrency Group per #2176 #2219), auto-2167 (Session Handoff [auto-2167]: Match a Wildcard Row in Copilot's File Table Against the Changed Files per #2167 #2213), auto-2157 (Session Handoff [auto-2157]: Drop the Path Argument From the VS Code Tasks Snippet's Mypy Swaps per #2157 #2211), auto-2080 (Session Handoff [auto-2080]: Read an eval Argument as a Wait-Loop Payload in the Guard per #2080 #2137), auto-1634 (Session Handoff [auto-1634]: Narrow Nested timeout Handling per #2056 #2072), and the python-contract lane Session Handoff [python-contract]: Escaped and Folded python-directories Values Refused, Released as 2.0.738 #2014. Many auto-* and resync worktrees from other sessions remain. Re-derive with handoff.py tracks, gh pr list and git worktree list before touching any.
• Other repositories: none written by this round. The two fork sessions, ptr727/zephyrproject-rtos-zephyr and ptr727/liquidraver-ZephCore, keep their own handoff chains. ZephCore's handoff notes that "fork iteration PRs stay open" lives only in host memory, and that rule is now in upstream-contribution-workflow.

The parked decision queue

One issue: #2272, whether a Copilot file table carries forward on an identical file set. It was put to the maintainer when this link was written.

What the last round did

• upstream-contribution-workflow: say the fork-internal iteration PR is never merged #2264 shipped in #2265:
  • upstream-contribution-workflow now states the fork model. The mirror branch moves only by syncing from upstream. The iteration PR stays open and is never merged. Upstream drift is merged into it, not rebased. The clean branch is a plain branch cut from the mirror tip.
  • handoff.py new --create-label creates only the handoff label on an unregistered fork under the owner.
• Drove promotion Promote develop to main: Fork Handoff Chains, Qodo Login, JSON Report #2254 to main and released 2.0.799, which closed upstream-contribution-workflow: say the fork-internal iteration PR is never merged #2264, Qodo No Longer Reviews This Repository, and Two Documents and the Review Script Still Assume It Does #1465 and Give install-tools.sh a Machine-Readable Report Mode, So a Caller Can Act on It Without Screen-Scraping #1645. Copilot findings on it were fixed in #2266, #2267 and #2269:
  • Bound handoff.py's Writes Whatever the Label State #2266: handoff.py writes are bounded by owner and fork whatever the label state.
  • State the Install-Tools JSON Report in the Host Contract #2267: docs/host-setup.md states the JSON report contract.
  • Drop Two False Pointers From Blog's Deploy-Secret Drift Note #2269: Blog's drift note is corrected, and every registry driftNote semicolon is recast.
• The maintainer ran install-tools.ps1 -Json natively, unelevated and elevated. Both passed, as recorded on Promote develop to main: Fork Handoff Chains, Qodo Login, JSON Report #2254.
• Correct the False No-Vocabulary Claims About Environment Secrets in spec/ #2268's wording fix is on develop in #2271: the environments block has no per-repo place, and no audit or configuration tool inventories environment secrets.
• Filed: Correct the False No-Vocabulary Claims About Environment Secrets in spec/ #2268, Fix STANDUP.md's Prerequisite Item That Says Mechanisms Declare Environments #2270 and Let a Copilot File Table Carry Forward on an Identical File Set #2272.

What not to repeat

• Writing an issue or PR number before the object exists. Correct the False No-Vocabulary Claims About Environment Secrets in spec/ #2268's body first said "Correct the False No-Vocabulary Claims About Environment Secrets in spec/ #2268 corrects", a guessed PR number that collided with the issue's own, and then wrongly named Drop Two False Pointers From Blog's Deploy-Secret Drift Note #2269. Both were edited afterwards. Write a reference only once its object exists.
• Rewriting STANDUP.md:80 from the claim alone. Rewrite 1 said no hub file declares environment names, but the registry does. Rewrite 2, the reviewer's own wording, said no hub file declares the secret and variable names, but deploy-site-task.yml does. Read that task before writing the sentence.
• Narrowing the prose instead of fixing a boundary gap. On Keep the Fork Iteration PR Open and Let a Fork Host a Handoff Chain #2265 the owner check ran only on the missing-label path, and the prose was narrowed to match. Copilot then raised it as High on the promotion, which cost Bound handoff.py's Writes Whatever the Label State #2266. When a reviewer notes a write-boundary gap that predates the change, close it.
• The first Correct the False No-Vocabulary Claims About Environment Secrets in spec/ #2268 rewrite hid the real gap. "Has no vocabulary" was false, but it pointed at a true gap, a block with no per-repo place. Name the gap rather than delete the pointer.
• A Monitor done-check built on a grep -E backreference never fired, so two monitors ran past their condition. Parse the digest with a short python check.

New learnings

• The table-carry gap is filed as decision Let a Copilot File Table Carry Forward on an Identical File Set #2272.
• No new governance lesson. local-strict-review's two-round budget and its escalation held each time it was reached.