@@ -13,7 +13,7 @@
 
 ## 接收与台账
 
-- 接收 ①:发现者的一次 `Notify: security · GHSA-ID`(私有仓 `#N`)门铃,私卡已由其经中继建好。
+- 接收 ①:发现者 `Notify: security · GHSA-ID`(私有仓 `OWNER/REPO#N`)门铃,私卡已由其经中继建好。
 - 接收 ②:无门铃的 `triage` 公告(外报或中继实测):经 `advisory_read` 读,座位贴记 `received`。
 - 判定:发现 ⇒ 中继 `advisory_state` 置 `draft` 走派修;非发现 ⇒ 置 `closed`,台账记非发现。
 - 中继拒或本席空缺照第 3、9 节。
 
@@ -45,7 +45,7 @@
 - 移卡入队者→车道:p0/p1 `Blocked-by` 关闭 `Notify: unblocked`;记裁决席→被改席 `Notify: ruling`。
 - 席→兄弟席或他车道:认领文件面相交或须先落 `Notify: serial`,先落者落地 `Notify: landed`。
 - 上下线→兄弟席与分诊 `Notify: seat-online`、`Notify: seat-offline`;清单变→兄弟席 `Notify: split`。
-- 持发现的席→`security#1`:私卡建成或误公开卡挂标即 `Notify: security`,只带编号。
+- 持发现席→`security#1`:私卡建成或误公开卡挂标即 `Notify: security`,只带编号或 `OWNER/REPO#N`。
 - 分诊→认领席:认领卡或 open PR 闲置 ≥3h `Request: progress`;反向随记录 `Notify: progress`。
 - 记录 = 项上写下一步与 ETA 的评论、§C 停车或释放;同项 60 分钟一敲,答 ETA 到期前不敲。
 - ⛔ 不敲:回执、重发;收方订阅 PR 已载者;停车或待决策卡的项的进度;问维护者走决策卡。
 
@@ -60,6 +60,6 @@
 
 - 每份安全发现从接收到发布归 `security#1` 席(章程 `lanes/security.md`),发现者只报不修。
 - ⛔ 不扩本 PR 或分支,不自开修复分支,不在同一面顺手加固;dev 只走第 5 节上报。
-- 席位两件事:照第 3 节建私卡;敲 `Notify: security · GHSA-ID`(私有仓 `#N`),只带编号。
+- 席位两件事:照第 3 节建私卡;敲 `Notify: security · GHSA-ID`(私有仓 `OWNER/REPO#N`),只带编号。
 - 中继拒(第 3 节)⇒ 机制在会话里交 `security#1` 席;席空缺 ⇒ 交维护者;发布清单归维护者。
 - 任务绕不开它 ⇒ 报 `blocked`,只写「a security item is with the owner seat」;席位停卡,⛔ 不绕行。
@@ -1304,7 +1304,7 @@ export const MAILBOX_KEYS = Object.freeze([
   { id: 'notify:seat-online', kind: 'Notify', key: 'seat-online', from: 'the seating session (or a forced takeover, for the walled account)', to: 'the lane\'s sibling seats and triage', when: 'at seating', template: 'Notify: seat-online · LANE#N · LOGIN · mailbox #m · patrol TRIGGER_ID · takes: #a #b …' },
   { id: 'notify:seat-offline', kind: 'Notify', key: 'seat-offline', from: 'the signing-off session', to: 'the lane\'s sibling seats and triage', when: 'at sign-off', template: 'Notify: seat-offline · LANE#N · in-flight: … · stay-behind: … · brief ID' },
   { id: 'notify:split', kind: 'Notify', key: 'split', from: 'a seat of a multi-seat lane', to: 'its sibling seats', when: 'at round open, only when the list changed', template: 'Notify: split · LANE#N · takes: … · leaves: …' },
-  { id: 'notify:security', kind: 'Notify', key: 'security', from: 'the seat holding the finding (a dev\'s or a QA runner\'s reaches its PM session privately first); triage, for a public card it labelled `security`', to: 'security#1', when: 'the seat\'s relay `advisory_create` draft landed: the opaque advisory id ALONE; or triage labelled a public card `security`: its number ALONE — never a mechanism, a path or an object name', template: 'Notify: security · GHSA-ID or #n' },
+  { id: 'notify:security', kind: 'Notify', key: 'security', from: 'the seat holding the finding (a dev\'s or a QA runner\'s reaches its PM session privately first); triage, for a public card it labelled `security`', to: 'security#1', when: 'the seat\'s relay `advisory_create` draft landed: the opaque advisory id ALONE; or the finding is on a PRIVATE repository and the seat filed an ordinary `security` issue there: that card as `OWNER/REPO#N` ALONE; or triage labelled a public card `security`: its number ALONE — never a mechanism, a path or an object name', template: 'Notify: security · GHSA-ID or OWNER/REPO#N or #n' },
   { id: 'request:progress', kind: 'Request', key: 'progress', from: 'triage', to: 'the claiming seat (or the online sibling an off-shift seat\'s items went to)', when: 'a claimed card or an open PR whose last PROGRESS (its head commit, any non-triage comment, a label change by its seat — never `updated_at`) is 3 h old: at most one per item per 60 min; none while an answered ETA stands, or while the item is parked (`Blocked-by:` / `Resume-from:`) or waits on a decision card; two unanswered ⇒ the round record lists it and the seat reads as possibly down', template: 'Request: progress · #n · idle since TIME' },
   { id: 'notify:progress', kind: 'Notify', key: 'progress', from: 'the claiming seat', to: 'triage', when: 'answering a progress knock — the record is a comment on #n giving the next act and an ETA, the park (`Blocked-by:` / `Resume-from:`), or the release', template: 'Notify: progress · #n · record ID' },
 ]);
@@ -1341,11 +1341,20 @@ const RULING_LETTER_REF = /^[^\s#`]{1,12}$/u;
  * `GHSA-xxxx-xxxx-xxxx` — a repository security advisory's opaque id, the ONE field `Notify: security` carries from
  * the seat holding a finding (`security-findings.md`: the id alone, never a mechanism, a path or an object name);
  * triage's hand-over of a public card it labelled `security` carries that card's `#n` alone instead (`NUMBER_REF`,
- * `lanes/security.md`). Never both on one line. MIRRORED from the relay's
+ * `lanes/security.md`), and a finding on a PRIVATE repository rings its ordinary `security` issue there as
+ * `OWNER/REPO#N` alone (`REPO_CARD_REF`). Never two on one line. MIRRORED from the relay's
  * `GHSA_ID_SHAPE` (`fleet-write/ops.mjs`, its reading of the id an advisory write lands) — not imported, so the
  * patrol graph never loads the relay; the self-test holds the two equal.
  */
 const ADVISORY_ID_REF = /^GHSA(-[0-9a-z]{4}){3}$/;
+/**
+ * `OWNER/REPO#N` — a card on ANOTHER repository, named with its repository: the private-repository ring of
+ * `Notify: security` (`security-findings.md`: a finding on a private repository is an ordinary `security` issue
+ * there, and a bare `#N` would name this board's card instead). The qualifier is the repository-qualified card
+ * reference `check-half-states.mjs` reads (`Restart-when: closed <owner/repo>#N`, `re-check owner/repo#N`): two
+ * segments, each led by an alphanumeric, then `._-`. MIRRORED, not imported (that module is not a recogniser).
+ */
+const REPO_CARD_REF = /^([A-Za-z0-9][A-Za-z0-9._-]*\/[A-Za-z0-9][A-Za-z0-9._-]*)#([1-9][0-9]*)$/;
 /**
  * `patrol TRIGGER_ID` on `Notify: seat-online` — the seat's patrol routine, the value its post's `Patrol:` line
  * records (`trig_…`), or `patrol none` for a seat with no patrol by rule (the director seat). The template's own
@@ -1465,7 +1474,12 @@ const MAILBOX_FIELD_READERS = Object.freeze({
     // A public card triage labelled `security` (`lanes/security.md`): its number is already public and names no
     // mechanism, so it rides the doorbell as the one field — the card, never the card AND an id.
     const card = NUMBER_REF.exec(p[1]);
-    return card ? { card: Number(card[1]), numbers: [Number(card[1])] } : null;
+    if (card) return { card: Number(card[1]), numbers: [Number(card[1])] };
+    // A private repository's ordinary `security` issue (`security-findings.md`): the card WITH its repository, so the
+    // seat can open it and never mistakes it for a public card here. Its number is not a number on THIS board, so
+    // `numbers` stays empty, as the advisory's does.
+    const qualified = REPO_CARD_REF.exec(p[1]);
+    return qualified ? { repo: qualified[1], card: Number(qualified[2]), numbers: [] } : null;
   },
   'notify:contract-review': (p) => {
     if (p.length !== 3) return null;
@@ -2264,7 +2278,9 @@ const SELF_TEST_BATTERIES = Object.freeze({
   // keys that stay refused, and the two end-to-end pins through check-half-states H72 (31 → 44 cases).
   // Raised 40 → 41 with the `Notify: security · #n` reading (a labelled public card handed to the security seat).
   // Raised 41 → 42 with the `Notify: main-green` reading (the knock that resumes a PR held for a main red).
-  '⭐ the mailbox doorbell: `To: <seat>`, then one key of the table read — seat, kind, numbers, sha, login, time — and anything else refused': 42,
+  // Raised 42 → 44 with the `Notify: security · OWNER/REPO#N` reading (a private repository's ordinary `security`
+  // issue) and its unreadable near misses: two pins, two cases.
+  '⭐ the mailbox doorbell: `To: <seat>`, then one key of the table read — seat, kind, numbers, sha, login, time — and anything else refused': 44,
   '⭐ the signature line: the reader reads LANE#N · ACCOUNT · SESSION exactly, and one leading signature changes no first-line reading': 22,
   '⭐ the `Contract-review-claim:` line — session, FULL head, time; lapses on a moved head or after two hours; the earliest live claim holds': 24,
   '⭐ the `Contract-review-hold:` line — session, head, reason, until; a new head clears it; at 24 hours it reads overdue and still holds': 23,
@@ -2867,6 +2883,8 @@ export async function selfTest() {
   t('⭐ `Notify: security` under `To: security#1` reads to the security seat (a bare lane `seatKey` spells) with the advisory\'s opaque id and nothing else — it names no card, so `numbers` is empty', (() => { const r = readMailboxLine(DB.sec); return r.state === 'read' && r.to === 'security#1' && r.id === 'notify:security' && r.kind === 'Notify' && r.key === 'security' && r.advisory === 'GHSA-7q4h-9x2m-5c8v' && r.numbers.length === 0 && readMailboxLine(MSG('Notify: security · GHSA-7q4h-9x2m-5c8v', 'security')).to === 'security#1'; })());
   t('⛔ `Notify: security` carrying free text, a second field, an upper-case or short id, or no id at all is unreadable — nothing but the opaque id, or a labelled card\'s number alone, rides the doorbell', ['Notify: security · see the advisory', 'Notify: security · GHSA-7q4h-9x2m-5c8v · packages/x/src/door.ts', 'Notify: security · GHSA-7q4h-9x2m-5c8v · see the advisory', 'Notify: security · GHSA-7Q4H-9X2M-5C8V', 'Notify: security · GHSA-7q4h-9x2m', 'Notify: security'].every((l) => readMailboxLine(MSG(l)).state === 'unreadable'));
   t('⭐ `Notify: security · #n` — triage handing a public card it labelled `security` to the seat — reads the card ALONE; the card beside an id, a second field, a PR, `#0` and the bare template stay unreadable', (() => { const r = readMailboxLine(MSG('Notify: security · #29761', 'security#1')); return r.state === 'read' && r.to === 'security#1' && r.id === 'notify:security' && r.card === 29761 && r.advisory === undefined && r.numbers.join() === '29761' && ['Notify: security · #29761 · GHSA-7q4h-9x2m-5c8v', 'Notify: security · #29761 · see the card', 'Notify: security · PR #29761', 'Notify: security · #0', 'Notify: security · GHSA-ID or #n'].every((l) => readMailboxLine(MSG(l)).state === 'unreadable'); })());
+  t('⭐ `Notify: security · OWNER/REPO#N` — a private repository\'s ordinary `security` issue — reads the repository AND the card, `numbers` empty (not a number on this board); the bare `#n` still reads the public card, with no repository', (() => { const r = readMailboxLine(MSG('Notify: security · objectstack-ai/cloud#412', 'security#1')); const bare = readMailboxLine(MSG('Notify: security · #29761')); return r.state === 'read' && r.to === 'security#1' && r.id === 'notify:security' && r.repo === 'objectstack-ai/cloud' && r.card === 412 && r.advisory === undefined && r.numbers.length === 0 && readMailboxLine(MSG('Notify: security · my.org-1/a_b.c-d#7')).repo === 'my.org-1/a_b.c-d' && bare.state === 'read' && bare.card === 29761 && bare.repo === undefined && bare.numbers.join() === '29761'; })());
+  t('⛔ a malformed qualifier, or the qualified card beside an id, a public card, a path or free text, is unreadable — the private ring carries the card reference ALONE', ['Notify: security · objectstack-ai#412', 'Notify: security · objectstack-ai/cloud/x#412', 'Notify: security · /cloud#412', 'Notify: security · objectstack-ai/#412', 'Notify: security · .x/cloud#412', 'Notify: security · objectstack-ai/cloud#0', 'Notify: security · objectstack-ai/cloud #412', 'Notify: security · objectstack-ai/cloud#412a', 'Notify: security · OWNER/REPO#N', 'Notify: security · objectstack-ai/cloud#412 · GHSA-7q4h-9x2m-5c8v', 'Notify: security · GHSA-7q4h-9x2m-5c8v · objectstack-ai/cloud#412', 'Notify: security · objectstack-ai/cloud#412 · #29761', 'Notify: security · objectstack-ai/cloud#412 · packages/x/src/door.ts', 'Notify: security · objectstack-ai/cloud#412 · see the card'].every((l) => readMailboxLine(MSG(l)).state === 'unreadable'));
   t('⭐ `Request: progress` reads the item (a card or a PR, bare `#n`) and the time its last progress was read — with seconds too; the placeholder `TIME`, a duration, a date without a time, a local time and `PR #n` stay unreadable', (() => { const r = readMailboxLine(DB.rp); const sec = readMailboxLine(DB.rp.replace('T00:06Z', 'T00:06:30Z')); return r.state === 'read' && r.id === 'request:progress' && r.kind === 'Request' && r.key === 'progress' && r.to === 'domain:skills#1' && r.item === 29420 && r.since === '2026-11-03T00:06Z' && r.numbers.join() === '29420' && sec.state === 'read' && sec.since === '2026-11-03T00:06:30Z' && ['Request: progress · #29420 · idle since TIME', 'Request: progress · #29420 · idle since 3h', 'Request: progress · #29420 · idle since 2026-11-03', 'Request: progress · #29420 · idle since 2026-11-03T00:06', 'Request: progress · #29420 · idle since 2026-11-03T00:06+08:00', 'Request: progress · PR #29420 · idle since 2026-11-03T00:06Z', 'Request: progress · #29420', 'Request: progress · #29420 · idle since 2026-11-03T00:06Z · please answer'].every((l) => { const u = readMailboxLine(MSG(l)); return u.state === 'unreadable' && /does not spell/.test(u.reason); }); })());
   t('⭐ `Notify: progress` reads the item and the record id (the comment on it with the next act and an ETA, the park, or the release) — `record none`, a sentence and a second field stay unreadable', (() => { const r = readMailboxLine(DB.np); return r.state === 'read' && r.id === 'notify:progress' && r.kind === 'Notify' && r.key === 'progress' && r.to === 'triage#1' && r.item === 29420 && r.record === 6599000001 && r.numbers.join() === '29420' && readMailboxLine(MSG('Notify: progress · #29420 · record #6599000001', 'triage')).record === 6599000001 && ['Notify: progress · #29420 · record none', 'Notify: progress · #29420 · record ID', 'Notify: progress · #29420 · ETA 11:00Z', 'Notify: progress · #29420', 'Notify: progress · #29420 · record 6599000001 · ETA 11:00Z'].every((l) => { const u = readMailboxLine(MSG(l, 'triage')); return u.state === 'unreadable' && /does not spell/.test(u.reason); }); })());
   t('⭐ every key of the table is named, as `Kind: key` in a code span, in the protocol text (`references/project-forms.md` 〈信箱 PR〉), and that section names NO other key — the table in both directions — and points at `--mailbox-keys` for the full spellings', (() => { const forms = readFileSync(new URL('../../.claude/skills/pm-dispatch/references/project-forms.md', import.meta.url), 'utf8'); const at = forms.indexOf('\n## 信箱 PR\n'); const section = at < 0 ? '' : forms.slice(at + 1).split(/\n## /)[0]; const named = new Set([...section.matchAll(/`(Request|Notify): ([a-z-]+)`/g)].map((m) => `${m[1]}: ${m[2]}`)); const table = new Set(MAILBOX_KEYS.map((k) => `${k.kind}: ${k.key}`)); return section !== '' && named.size === table.size && [...table].every((k) => named.has(k)) && section.includes('--mailbox-keys'); })());