Context
Sub of #16212 (execution-fidelity epic, operator-commissioned 2026-07-31). Empirical anchor: PR #16188 — nominally a config-default PR, its 28-file surface amended ADR 0014 to elect "No host-edge Orchestrator runs after the cut," reversing the same-day-merged two-role authority (D#15595 ratified; PR #16173 merged 13:08Z). It was approved 21:15Z and merged 21:16Z; the approving review (mine) validated diff internals and CI and never ran the premise against the graduated authority the diff was reversing.
The Problem
pr-review's Cycle-1 Premise Pre-Flight already asks "Upstream not graduated?" — whether the PR depends on an ungraduated artifact. It does not ask the inverse: whether the diff amends or reverses an already-graduated decision without a reopened graduation. That is exactly the #16188 class: the upstream (#16167) was legitimate, so the existing row passed, while the ADR hunk inside the implementation diff carried an unauthorized election change. The consensus-mandate makes such a change require reopened authority; review is the last line where a violation is catchable before merge, and the checklist had no row for it.
The Architectural Reality
.agents/skills/pr-review/audits/cycle-1-premise-preflight.md — the premise table (the "Upstream not graduated" row verified at line 18, 2026-07-31); its verdict semantics: Cycle-1 premise defects take a single Drop+Supersede/block verdict, not iterative Required Actions.
- AGENTS.md consensus-mandate — graduated-decision changes require reopened graduation with family-keyed quorum.
learn/agentos/decisions/ — the ADR corpus whose elections are the protected class; ADR bodies carry their own revalidation-trigger clauses (ADR 0014's own clause says changes of this class "reopen this election").
- Manifest byte budgets on skill payloads.
The Fix
Add one row to the Cycle-1 premise table:
Graduated-decision reversal — does the diff amend or reverse a graduated decision (an ADR election, a Discussion-ratified target, a merged authority model) without a reopened graduation / consensus record? Signals: learn/agentos/decisions/ hunks inside an implementation PR; diff statements contradicting a [GRADUATED_TO_TICKET]-backed body; an ADR's own revalidation-trigger firing. Verdict class: premise (Drop+Supersede or block pending reopened authority), never an iterative RA.
Record #16188 as the empirical anchor alongside the audit's existing #11083 anchor.
Contract Ledger
| Target Surface |
Source of Authority |
Proposed Behavior |
Fallback |
Docs |
Evidence |
cycle-1-premise-preflight.md table |
#16212 + AGENTS.md consensus-mandate |
one added row with signals + verdict class + #16188 anchor |
ADR edits WITH reopened authority pass the row explicitly |
the audit file |
row text + anchor paragraph |
Decision Record impact
none — review-procedure amendment; protects ADR authority, amends none.
Acceptance Criteria
Out of Scope
- Template/validator changes (
validate_pr_review_body) — the audit file is reviewer guidance; mechanical validation is a follow-up decision if the row proves load-bearing.
- Retroactive review of merged PRs (#16188's disposition belongs to the #16167 compliance map).
Avoided Traps
- A blanket ADR-edit ban. Elections are amendable — through reopened authority. The row checks for the record, not the change.
- Iterative-RA framing. A premise defect answered with five RAs is the exact #11083 anti-pattern this audit file exists to prevent; the new row inherits its verdict semantics.
Related
- Parent: #16212. Sequencing: execution gated behind #16167 stabilization (see parent).
- PR
#16188 / D#15595 / PR #16173 — the anchor chain. #11083 — the audit's original anchor.
Live latest-open sweep + A2A claim sweep recorded on parent #16212 at filing time (04:14Z, none competing).
Origin Session ID: dd39c5c1-8773-4c9d-a3d4-664f9fb0f952
Retrieval Hint: cycle-1 premise row graduated decision reversal ADR election inside implementation PR reopened graduation consensus record drop supersede
Context
Sub of #16212 (execution-fidelity epic, operator-commissioned 2026-07-31). Empirical anchor: PR
#16188— nominally a config-default PR, its 28-file surface amended ADR 0014 to elect "No host-edge Orchestrator runs after the cut," reversing the same-day-merged two-role authority (D#15595 ratified; PR#16173merged 13:08Z). It was approved 21:15Z and merged 21:16Z; the approving review (mine) validated diff internals and CI and never ran the premise against the graduated authority the diff was reversing.The Problem
pr-review's Cycle-1 Premise Pre-Flight already asks "Upstream not graduated?" — whether the PR depends on an ungraduated artifact. It does not ask the inverse: whether the diff amends or reverses an already-graduated decision without a reopened graduation. That is exactly the #16188 class: the upstream (#16167) was legitimate, so the existing row passed, while the ADR hunk inside the implementation diff carried an unauthorized election change. The consensus-mandate makes such a change require reopened authority; review is the last line where a violation is catchable before merge, and the checklist had no row for it.The Architectural Reality
.agents/skills/pr-review/audits/cycle-1-premise-preflight.md— the premise table (the "Upstream not graduated" row verified at line 18, 2026-07-31); its verdict semantics: Cycle-1 premise defects take a single Drop+Supersede/block verdict, not iterative Required Actions.learn/agentos/decisions/— the ADR corpus whose elections are the protected class; ADR bodies carry their own revalidation-trigger clauses (ADR 0014's own clause says changes of this class "reopen this election").The Fix
Add one row to the Cycle-1 premise table:
Record
#16188as the empirical anchor alongside the audit's existing#11083anchor.Contract Ledger
cycle-1-premise-preflight.mdtable#16188anchorDecision Record impact
none— review-procedure amendment; protects ADR authority, amends none.Acceptance Criteria
#16188recorded as anchor with the one-minute approve→merge chronology.turn-memory-pre-flightconsulted in the PR.Out of Scope
validate_pr_review_body) — the audit file is reviewer guidance; mechanical validation is a follow-up decision if the row proves load-bearing.Avoided Traps
Related
#16188/ D#15595 / PR#16173— the anchor chain.#11083— the audit's original anchor.Live latest-open sweep + A2A claim sweep recorded on parent #16212 at filing time (04:14Z, none competing).
Origin Session ID: dd39c5c1-8773-4c9d-a3d4-664f9fb0f952
Retrieval Hint:
cycle-1 premise row graduated decision reversal ADR election inside implementation PR reopened graduation consensus record drop supersede