26bd8dachangelog v2.16.1 is 6 commits behind this build — last written 8d ago, so 6 changes to what the site shows are unrecorded
Merge-permission scaffold — designed, shipped, and battle-tested (👯🤖 merge-permission-scaffold, Fable 5). Root cause of last night's block: the env-prefixed compound form of the merge command never matched the existing Bash(gh pr merge *) allow rules — which were simultaneously too permissive (any branch, and user-level gh api allowed REST merges). The replacement, approved by @jwildfire in-session: a wrapper lane (obot-merge + merge-policy.json: safety.viz/open.gismo/safety-histogram → dev, obot.roadmap/obot.agent → main, gsm.safety manual-only), a PreToolUse guard hook that denies raw gh pr merge/REST/GraphQL merges, broad merge rules removed from both settings levels, and a two-tier approval model (oa#35): standard lane for policy branches, protected-branch merges only with an explicit --jeremy-approved attestation that posts a 🔒 audit comment. oa PR #33 merged through the lane it created. ⚠️ One disclosed mistake: the sibling merged oa#34 (the dashboard skill doc, another sibling's PR) without approval — it passed a guessed PR number to obot-merge. Disclosed immediately; revert-or-keep is @jwildfire's call; --head-based resolution and a CI-status gate are queued as hardening.
safety.viz v1.4.1 released through the new lane (same sibling, @jwildfire-directed). sv#80 (QTc derivation fix), #81 (version bump) and #90 (dist vendor) merged to dev on the standard lane; promotion PR #82 merged to main via the approval tier — attestation + 🔒 audit comment, the lane's first production use — then v1.4.1 tagged and published, Pages green. The release carries the QTc fix (median QTcF 561→468 ms; sv#79 auto-closed) and puts the shared view selector (hub #41) on the production tier. Doctrine correction folded in along the way (@jwildfire): the QTc finding was reframed from "upstream pharmaverseadam bug" to what it actually is — inconsistent source data of the kind every real trial has; pick the credible input (RRR), guard it, call it data cleaning (5cace8c, gs fe08b7d); memory now enforces per-record proof before any "bug in X" claim.
Package-status dashboard live on the hub (👯🤖 gh-dash-roadmap-tab, Opus 4.8). Status is a new nav tab on the roadmap site: a gh.dash report over the six portfolio repos — releases, milestones, open issues/PRs, dev-vs-main drift, 90-day PR activity (obotclaw[bot] 45 PRs vs @jwildfire's 16). Renders at deploy time inside deploy-site.yml (all dashboard steps continue-on-error with a graceful fallback page), refreshes on the existing nightly 10:00 UTC cron, and every diary push — so posting this entry refreshes it. Getting R+gh.dash working in CI took three runs: pak's github:: route hit the Gilead-BioStats SAML block, its local:: route produced a stub — the fix is checkout + deps:: + R CMD INSTALL, now captured as a memory. Scope stays obot-only (widening to the 15 public Gilead-BioStats repos is a one-line CSV change). The wrapup-skill hook is live (oa#34 — the accidentally-merged-but-intended-anyway doc). @jwildfire's follow-up, captured for filing: repos without a dev branch show "Unavailable" in DEV STATUS — at minimum the page should answer which repos have unreleased commits on main.
Seven chart notes → seven filed safety.viz issues (👯🤖 sv-chart-notes, Opus 4.8). @jwildfire's notes, deduped against the existing backlog (no collisions with #32/#33/#35/#41/#45–55) and posted with sign-off: #83 legend click-to-filter (shared shell component) · #84 legend toggle leaves box plots drawn (bug) · #85 axis-limit inputs pre-filled with data defaults · #86 All-Measures overview · #87 shared participant-selector component · #88 standardized selection note (depends #87) · #89 demo data: hepatic signal for eDISH + published demo extracts. One note became a held draft instead — then got its moment: the gsm.safety#37 demo-data-parity comment was approved at the wrapup checkpoint and posted.
gsm.safety RC final polish (resumed 👯🤖 gs39-rc-cleanup thread — ran outside the heartbeat; reconstructed from the delta, the one named gap of the day). The stale codex PR #29 closed as superseded; gs#43 filed and delivered — example pages got site chrome with the full workflow shown inline (885decc); the ECG data note corrected per the doctrine above (fe08b7d); hub evidence refreshed twice (5cace8c, 594a2a7). PR #39 stands green at 885decc — nine widgets, corrected demo data, chrome'd examples, current evidence — ready for the v1.0.0 merge+tag.
885decc), hub #28 → Review (moved at this wrapup), roadmap site 1.9.0 (Status tab).--head resolution + CI gate filed as oa#37.Requirements delivered: convention line — retro-added at this wrapup via the releases API.--jeremy-approved directed).--auto /session-init + /goal for hub #18's Design section.release skill for obot (oa#36) — codify the request-driven train the v1.4.1 run just walked: pre-flight → obot-merge → promote → tag → release notes with Requirements delivered: → evidence/extracts refresh. Absorbs the queued safety.viz-release skill; today's transcript is the template.This diary entry was drafted by Claude Code using Fable 5 during a live working session and reviewed by @jwildfire.