@@ -30,7 +30,6 @@ PM 的工作是循环:选卡 → 认领 → 派发 → 收集 → 复核 → 报
 - ⛔ 永不代维护者答产品或架构问题,⛔ 无代裁通道:席位只分析与推荐,裁决恒出自人工。
 - ⛔ GitHub 之外永不维护跟踪状态;看板(org Project)只是视图,权威层是 issue 正文 + REST。
 - ⛔ 永不跑版本发布、不合并 Version Packages PR;发布动作的完整清单以 AGENTS.md 为权威。
-- ⛔ 未经人工的发布痕迹按事故立案,不代跑补救性发布;机械通道存在不构成授权。
 - ⛔ 分诊席永不认领、派发或写码;执行席只在本车道认领,改 `domain:*` 仅限整树归本席。
 - 唯一例外:无主 p0 锚卡一轮即轮报、再一轮分诊只代派止血:每轮一张,复核非分诊。
 - ⛔ 报告缺席永不读作成功,永不虚构未回报 agent 的结果。
@@ -163,6 +162,7 @@ PM 的工作是循环:选卡 → 认领 → 派发 → 收集 → 复核 → 报
 | `domain:spec` | `packages/spec` 整包:schema 形状、`contracts/**`、退役行为半边、strictness 台账;describe/JSDoc/墓碑散文/错误 guidance 与 alias 表;`packages/spec/scripts/**`、`packages/spec/docs/**` 及按锚定规则的例外归本域的工具链(域边界枚举与席内分派见 `references/lanes/spec.md`) |
 | `domain:ui` | `ui/**` 全部代码:`@object-ui/*` 库与 `ui/apps/*`、`ui/packages/types` 与 schema 语料、`ui/scripts` 与门禁工具、文档随所记录的面走;`packages/console`(dist 由 `pnpm console:build` 生成 ⛔ 不手改);协议恒归 `domain:spec`,受管面归 `domain:skills`;详见 `references/lanes/ui.md` |
 | `domain:cloud` | 涉 cloud 即整卡归 cloud PM(`repo:cloud` 席,同挂 `repo:cloud`):读或改 cloud 代码、生产方、事实或带 cloud 半边;本仓车道 ⛔ 不认领;cloud PM 跟到关卡,余下纯本仓活由它写明 cloud 事实后另立卡;判据见 `references/cross-repo-coordination.md` |
+| `security`(车道,无 `domain:*` 标签) | 安全发现(无文件面;修复经无卡派发令落在归属包);席位 `security#N`、接收、台账、派修与复核见 `references/lanes/security.md`;永不公开的规则只住 `references/security-findings.md` |
 | (无固定归属,按落点分诊) | `packages/apps/*`、`examples/*`(归它演练的子系统)、`docs/audits/**` |
 
 - 表未覆盖的包首次分诊时归类并走 PR 更新本表;新增或退役 `domain:*` 必须同批改本表。
 
@@ -0,0 +1,34 @@
+# 车道章程:安全席(security)
+
+见 seat-lifecycle.md;本文是本车道岗位说明,现值状态恒在座位贴,⛔ 不迁入本文。
+永不公开的规则只住 `../security-findings.md`(下文「第 N 节」皆指它),本文只指向、⛔ 不复述。
+本文与座位贴不载任何发现、编号、路径、对象名或机制。
+
+## 座位
+
+- 席位 `security#N`,首席 `security#1`;签名、座位贴、坐席与收班同他席。
+- 无 `domain:security` 标签、无 `pm:queue`、无文件面:安全发现永不成卡,修复落在归属包。
+- 坐席者 = 能读写本仓安全公告的账号(管理员或安全经理)的会话;读不了公告 ⛔ 不坐。
+- 读公告只经中继 `advisory_read`;建草稿与写公告只经中继,⛔ 永不以自身账号写。
+
+## 接收与台账
+
+- 接收 = 发现者的一次 `Notify: security · GHSA-ID` 门铃,草稿公告已由其经中继建好。
+- 中继拒 ⇒ 机制在会话里交本席;本席空缺 ⇒ 交维护者(第 3 节);⛔ 不换账号重发。
+- 台账住座位贴,一份一行:不透明编号 · 会话 · 状态;⛔ 无细节。
+- 状态词表:`received` → `fixing` → `merged` → `awaiting publish` → `published`。
+
+## 派修与复核
+
+- 修复 = 本席向 `os-dev` 下无卡派发令,`xhigh`;机制只进派发令与公告,⛔ 不进 PR 与评论。
+- 修复 PR 的契约复核归本席:记录停在规则层,机制只在本席本地的 `security-note.md`(第 6 节)。
+- 要定契约的修复交维护者;发布公告恒归维护者,本席把状态推到 `awaiting publish` 即止。
+
+## 误公开的卡(第 7 节)
+
+- 本席接管:挂 `security` 标签,⛔ 不追加细节;是否移入公告并关卡交维护者定,⛔ 不代关。
+- 分诊只即推维护者并转交本席(`triage.md`);本席空缺时分诊照第 7 节处置。
+
+## 收班
+
+- 台账与每份在飞公告留在座位贴,⛔ 不释放进 `pm:queue`;接任者坐席即接台账。
@@ -13,3 +13,5 @@
   先敲其席(无信箱按名)过下轮无答且回收需其一句;待裁或被具名 `Blocked-by:`、`status:parked`
   卡、所骑栈阻者与信箱、Version PR 不算。⑦席位或子代理被拒、需人做的动作,⛔ 不代做。
 - 不推:定级、治半状态、解锁、契约复核(PASS/FAIL 归车道)、门铃答复、健康绿读数。
+- 安全发现:即推 ① 后转交 `security#1` 席即止(`security.md`);有公开卡只定 `security`+p1,余不判。
+- `security#1` 空缺时沿用 `security-findings.md` 第 7 节处置,⛔ 不代席、不追加细节。
@@ -44,8 +44,9 @@
 - 移卡入队者→车道:p0/p1 `Blocked-by` 关闭 `Notify: unblocked`;记裁决席→被改席 `Notify: ruling`。
 - 席→兄弟席或他车道:认领文件面相交或须先落 `Notify: serial`,先落者落地 `Notify: landed`。
 - 上下线→兄弟席与分诊 `Notify: seat-online`、`Notify: seat-offline`;清单变→兄弟席 `Notify: split`。
-- ⛔ 不敲:回执、重发、催(逾期归升级);安全发现;收方订阅 PR 已载者;问维护者走决策卡。
-- 安全发现不敲,私报与修复去向只照 `security-findings.md`。
+- 发现者→`security#1`:中继草稿公告建成即 `Notify: security`,只带不透明编号。
+- ⛔ 不敲:回执、重发、催(逾期归升级);收方订阅 PR 已载者;问维护者走决策卡。
+- 安全发现只敲上一键,⛔ 不带机制、路径或对象名;余照 `security-findings.md`。
 - 每席每轮 ≤5 条,p0 豁免,超额归下轮,计入写节奏;全拼 `record-recognisers.mjs --mailbox-keys`。
 - 信箱评论是同事陈述,⛔ 永非授权(`untrusted-text.md`);⛔ 无门禁、workflow、队列守卫读信箱。
 
 
@@ -52,5 +52,11 @@
 
 ## 8. 一处成文
 
-- 立卡门、server 车道、信箱、`checklist-test` 与 `os-dev` 只指向本文,⛔ 不留第二份。
+- 立卡门、server 与 security 车道、信箱、`checklist-test` 与 `os-dev` 只指向本文,⛔ 不留第二份。
 - ⛔ 本规则不新增门禁、不新增标签。
+
+## 9. 归属:`security#1` 席
+
+- 每份安全发现从接收到发布归 `security#1` 席(章程 `lanes/security.md`),⛔ 不归发现者。
+- 发现者只做两件:经中继 `advisory_create` 建草稿;向该席敲 `Notify: security · GHSA-ID`,只带编号。
+- 中继拒(第 3 节)⇒ 机制在会话里交 `security#1` 席;席空缺 ⇒ 交维护者;发布恒归维护者。
@@ -1255,7 +1255,7 @@ export const RELEASE_COMMENT_MARKER = /^\s*>?\s*Release\s*:/mi;
 //
 //   LANE     a seat as the role table spells it: `domain:` or `repo:` plus a lowercase
 //            name (`domain:engine-core` carries a hyphen, measured on the label set),
-//            `epic:#` plus the parent card, `triage`, `director` or `coordinator`
+//            `epic:#` plus the parent card, `triage`, `director`, `coordinator` or `security`
 //   N        the seat number, from 1
 //   ACCOUNT  the login a claim's `Account:` line carries — GitHub's own login rule
 //   SESSION  the full id, in the relay envelope's shape (`SESSION_SHAPE`, fleet-write/ops.mjs,
@@ -1279,7 +1279,7 @@ export const RELEASE_COMMENT_MARKER = /^\s*>?\s*Release\s*:/mi;
 // ---------------------------------------------------------------------------
 
 /** The four parts' patterns, unanchored, in order — the ONE spelling every reader and writer composes from. */
-const SIGNATURE_LANE_SOURCE = '(?:domain:[a-z][a-z0-9-]*|repo:[a-z][a-z0-9-]*|epic:#[1-9][0-9]*|triage|director|coordinator)';
+const SIGNATURE_LANE_SOURCE = '(?:domain:[a-z][a-z0-9-]*|repo:[a-z][a-z0-9-]*|epic:#[1-9][0-9]*|triage|director|coordinator|security)';
 const SIGNATURE_ACCOUNT_SOURCE = '[A-Za-z0-9](?:[A-Za-z0-9]|-(?=[A-Za-z0-9])){0,38}';
 /** The relay envelope's session shape without its anchors — `SESSION_SHAPE` in `fleet-write/ops.mjs`. */
 export const SEAT_SIGNATURE_SESSION_SOURCE = 'session_[A-Za-z0-9]{6,}';
 
@@ -403,6 +403,13 @@ export const CEILINGS = new Map([
   // Unchanged at 319 by #25712 item 4: its `domain:ui` lane-table row was paid
   // by deleting the hold rule's pin-consumer clause (no pin is left to consume)
   // and folding the rest of that line into the `pm:on-hold` rule it qualified.
+  // Unchanged at 319 by the security lane (#29665; ruling of record: the
+  // amendment comment 6592303181 quoting the maintainer's verbatim 「这个应该算
+  // 一个车道吧？虽然你不需要打标签，应该也有处理的规则需要写入skills」, which
+  // orders ONE 域车道 row): the row was paid by deleting the 红线 that restated
+  // two sentences AGENTS.md Prime Directive #15 carries and outranks this file
+  // on (a publish nobody ordered is filed as an incident, never counter-published;
+  // a path to a release is not authorization to walk it), never by re-wrap.
   ['.claude/skills/pm-dispatch/SKILL.md', 319],
   // Raised 223 → 244 by the triage reading-cost card (maintainer ruling
   // 2026-08-20, quoted in the raising PR): three mandated conventions land in
@@ -1308,7 +1315,12 @@ export const CEILINGS = new Map([
   // §3 had it read under its own account (a cloud seat's account is refused). The ruling of record is that card's
   // body, filed under the maintainer's verbatim 「按一次性密钥立卡」 and 「并派发」, which names this file "by the
   // measured delta only". Measured delta +1 (55 → 56 lines); landed count, headroom 0.
-  ['.claude/skills/pm-dispatch/references/security-findings.md', 56],
+  // 56 → 62 (#29665): the owner section — every finding is `security#1`'s from intake to publish, the finder's two
+  // acts (a relay draft and one opaque-id doorbell), the relay-refused fallback — plus the security lane added to
+  // §8's pointer list in place. Ruling of record: that card's body, filed under the maintainer's verbatim
+  // 「设 security#1 座位」, and its amendment comment 6592303181 (「这个应该算一个车道吧？…」) naming this file's
+  // new section. Measured delta +6 (56 → 62 lines); landed count, headroom 0.
+  ['.claude/skills/pm-dispatch/references/security-findings.md', 62],
   ['.claude/skills/pm-dispatch/references/external-contributions.md', 22],
   ['.claude/skills/pm-dispatch/references/reading-discipline.md', 37],
   // Lowered 51 → 47 by #25712 item 4: objectui stopped being a sister repo, so
@@ -1425,7 +1437,13 @@ export const CEILINGS = new Map([
   // mailbox at the shared rule; the pointer does not fit the full 不敲 line,
   // so the measured delta is +1. Not a CROSS_FILE_MOVES destination. Landed
   // count, headroom 0.
-  ['.claude/skills/pm-dispatch/references/project-forms.md', 55],
+  // 55 → 56 (#29665): the `Notify: security` row (finder → `security#1`, the
+  // opaque id alone) — the 不敲 line drops 安全发现 and the pointer line narrows
+  // to the mechanism, in place; the ring itself needs one line. Ruling of
+  // record: the card body (「设 security#1 座位」) and amendment comment
+  // 6592303181, which names this file's mailbox row. Measured delta +1
+  // (55 → 56 lines); landed count, headroom 0.
+  ['.claude/skills/pm-dispatch/references/project-forms.md', 56],
   // The app-vs-platform boundary — the deciding question (could this be written
   // from the metadata alone, with no knowledge of this company?), the publication
   // test (one consumer is a use, two is a contract) and the two anti-patterns.
@@ -1490,6 +1508,14 @@ export const CEILINGS = new Map([
   // on demand (Recommended)"). A NEW file, so this is an added row and no other
   // row moves; set at the landed line count (headroom 0, same convention).
   ['.claude/skills/pm-dispatch/references/lanes/mobile.md', 56],
+  // security lane charter — the `security#N` seat that owns every security
+  // finding from intake to publish (maintainer, #29665 card body, verbatim:
+  // 「设 security#1 座位」; amendment comment 6592303181: 「这个应该算一个车道吧？
+  // 虽然你不需要打标签，应该也有处理的规则需要写入skills」). Pointers only: the
+  // never-public rules stay in security-findings.md. A NEW file, so this is an
+  // added row and no other row moves; set at the landed line count (headroom 0,
+  // same convention).
+  ['.claude/skills/pm-dispatch/references/lanes/security.md', 34],
   // Project Director seat charter (maintainer ruling 2026-08-27, verbatim:
   // 「项目总监 由人工定期指挥，负责处理 contract-review 类别的和需要决裁的。」; the file
   // carries it as a rule line since the rules-only rewrite, not as this quotation)
@@ -1547,7 +1573,13 @@ export const CEILINGS = new Map([
   // the same reader), so the measured delta is +7; triage-duties.md fell 102 → 99
   // in the same PR, net +4 over both. Not a CROSS_FILE_MOVES destination, so no
   // `ruledRaises` record applies. Landed count, headroom 0, same convention.
-  ['.claude/skills/pm-dispatch/references/lanes/triage.md', 15],
+  // 15 → 17 (#29665): the security hand-over — push ① stays, then triage
+  // forwards to `security#1` and stops, grading nothing past `security` + p1
+  // on a public card; while the seat is vacant, today's §7 handling. Ruling
+  // of record: the card body (「设 security#1 座位」, Change 4) and amendment
+  // comment 6592303181. Measured delta +2 (15 → 17 lines); landed count,
+  // headroom 0.
+  ['.claude/skills/pm-dispatch/references/lanes/triage.md', 17],
   // 399 → 405 (#11126): maintainer-ruled (2026-08-23, option B, quoted in that
   // PR) — the +6-line cross-repo dispatch-gates caveat, sized so the queued
   // #11137 (395→399 on main) and this PR's +6 compose to exactly 405.
@@ -2334,6 +2366,7 @@ export const MAX_TABLE_ROW_BYTES = new Map([
   ['.claude/skills/pm-dispatch/references/lanes/ui.md', 0],
   ['.claude/skills/pm-dispatch/references/lanes/hotcrm.md', 0],
   ['.claude/skills/pm-dispatch/references/lanes/mobile.md', 0],
+  ['.claude/skills/pm-dispatch/references/lanes/security.md', 0],
   ['.claude/skills/pm-dispatch/references/lanes/director.md', 0],
   ['.claude/skills/pm-dispatch/references/lanes/triage.md', 0],
   ['.claude/agents/os-dev.md', 0],
 
@@ -297,7 +297,7 @@ const isEpicLane = (lane) => lane.startsWith(`${SEAT_EPIC_KIND}:`);
  * (#27113) — not imported, so the relay never loads the patrol; the self-test holds the two patterns byte-equal.
  */
 const SIGNATURE_LINE = new RegExp(
-  '^((?:domain:[a-z][a-z0-9-]*|repo:[a-z][a-z0-9-]*|epic:#[1-9][0-9]*|triage|director|coordinator))#([1-9][0-9]*) · ([A-Za-z0-9](?:[A-Za-z0-9]|-(?=[A-Za-z0-9])){0,38}) · (session_[A-Za-z0-9]{6,})$',
+  '^((?:domain:[a-z][a-z0-9-]*|repo:[a-z][a-z0-9-]*|epic:#[1-9][0-9]*|triage|director|coordinator|security))#([1-9][0-9]*) · ([A-Za-z0-9](?:[A-Za-z0-9]|-(?=[A-Za-z0-9])){0,38}) · (session_[A-Za-z0-9]{6,})$',
   'u',
 );
 
@@ -735,7 +735,7 @@ async function selfTest() {
   t('⛔ an ACCEPT line ABOVE the heading is not the record\'s verdict', hasLandingVerdict([{ body: 'ACCEPT\n\n## 席位核对\n\nREWORK · rework' }]), false);
   t('the heading is H69\'s marker, imported not re-spelled: the three measured bodies read record alike', ['## 席位核对\n\n**ACCEPT** · x', '## 席位核对 — ACCEPT · x', '## Contract review\n\n**VERDICT: PASS**'].map((b) => `${seatRecord.SEAT_RECORD_MARKER.test(b)}/${hasLandingVerdict([{ body: b }])}`), ['true/true', 'true/true', 'false/true']);
   t('the mailbox constants are the opener\'s own, imported not re-spelled', [MAILBOX_LABEL, LEDGER_EXCLUSION, MAILBOX_BRANCH_PREFIX], [mailboxOpen.MAILBOX_LABEL, mailboxOpen.LEDGER_EXCLUSION, mailboxOpen.MAILBOX_BRANCH_PREFIX]);
-  t('whose mailbox a pull is, and a seat row\'s slug, are the opener\'s own readings — imported, not re-spelled', [mailboxOwner === mailboxOpen.mailboxOwner, seatKey === mailboxOpen.seatKey, seatSlugOf({ lane: 'domain:ui', seat: 4 }), seatSlugOf({ lane: 'triage', seat: 1 })], [true, true, 'ui-4', 'triage-1']);
+  t('whose mailbox a pull is, and a seat row\'s slug, are the opener\'s own readings — imported, not re-spelled', [mailboxOwner === mailboxOpen.mailboxOwner, seatKey === mailboxOpen.seatKey, seatSlugOf({ lane: 'domain:ui', seat: 4 }), seatSlugOf({ lane: 'triage', seat: 1 }), seatSlugOf({ lane: 'security', seat: 1 })], [true, true, 'ui-4', 'triage-1', 'security-1']);
 
   battery('the fixture snapshot: rows for the three repos');
   const fixture = JSON.parse(readFileSync(FIXTURE_PATH, 'utf8'));
@@ -826,7 +826,7 @@ async function selfTest() {
     t('the comment read starts STALE_HOURS before now, and the footer names it', [activitySince(NOW), readsFor([R]).some((q) => q.startsWith(`GET /repos/${R}/issues/comments?since=`))], ['2026-11-01T22:00:00Z', true]);
     const { SEAT_SIGNATURE_LINE, readSignatureLine } = await import('./check-half-states.mjs');
     t('the signature pattern is check-half-states\' SEAT_SIGNATURE_LINE, byte for byte — mirrored, not imported', [SIGNATURE_LINE.source === SEAT_SIGNATURE_LINE.source, SIGNATURE_LINE.flags === SEAT_SIGNATURE_LINE.flags], [true, true]);
-    const corpus = ['', sig('domain:server#2'), `\n\n  ${sig('domain:engine-core#3')}\r\nbody`, `body\n${sig('triage#1')}`, 'epic:#27293#1 · sunhaolin · session_017xRBcVBKAFk1ntXSjvPt7U', 'domain:server#0 · os-pm · session_01SharedSeatSess', 'domain:server#2 · os-pm · cse_01SharedSeatSess'];
+    const corpus = ['', sig('domain:server#2'), `\n\n  ${sig('domain:engine-core#3')}\r\nbody`, `body\n${sig('triage#1')}`, sig('security#1'), 'epic:#27293#1 · sunhaolin · session_017xRBcVBKAFk1ntXSjvPt7U', 'domain:server#0 · os-pm · session_01SharedSeatSess', 'domain:server#2 · os-pm · cse_01SharedSeatSess'];
     t('signedSeatOf reads every body as readSignatureLine does', corpus.map(signedSeatOf), corpus.map((b) => { const r = readSignatureLine(b); return r ? `${r.lane}#${r.seat}` : null; }));
   }