project-board · git:20261006.aa8f421 · 2026-10-06 · sha256 4a178013afcedd75

project-board git:20261006.aa8f421A

Immutable. This exact content never changes and is served at /api/v1/blob/4a178013afcedd75.

---
name: project-board
description: Operate the subagent-mcp GitHub project board (https://github.com/users/Heretyc/projects/4) via the gh CLI. Use ONLY for explicit project-board requests - "board status", "board sweep", "board true-up", "project board plan", "update the board", "board fields", "board HR queue", "add this to the project". Do not use for ordinary code contributions, which need only a filed and linked issue.
---

# Project Board

Repository-local skill. It serves this repository only: it is not part of
product skill registration, global installation, or npm distribution.

## When this skill applies

Activate on an explicit project-board request: board planning, board status,
board maintenance, board management, board sweeps or true-ups, board field
population, or attaching an issue to the board.

Do **not** activate for an ordinary contribution. An ordinary contribution
requires a filed and linked issue plus the repository's normal code review,
required checks, and security gates - no board access, project attachment,
board fields, board sweep, board HR-queue drain, or board-specific approval.

Being invoked for board **status** is a read: report current board state. A
read-only status is open to anyone and never requires a board sweep, a true-up,
or an HR-queue drain, so never run a maintainer-gated operation to answer one.
It is also not authority to perform board writes; board writes follow the
authority rules below.

## Authority check before a maintainer operation

Run this before any board sweep, board review, true-up, or HR-queue drain:

1. Resolve the named owner of the catch-all `*` rule in `.github/CODEOWNERS`,
   read at run time from the repository default branch, or from the PR base
   branch when the engagement is scoped to one PR. Do not use a login
   remembered from this skill or an earlier session.
2. Identify the acting account with `gh api user`. Never read credential
   stores, auth-store files, or token material to establish identity.
3. Proceed only when that login matches the resolved catch-all owner, or that
   owner has explicitly and verifiably delegated this engagement. A path-scoped
   CODEOWNER qualifies only for board operations confined to their owned paths.
4. Otherwise decline the operation, name which verification failed, and offer a
   read-only board status instead. Do not perform the sweep, review, true-up, or
   drain.
5. If the CODEOWNERS resolution, the acting identity, or a claimed delegation is
   unclear, ask a structured question and pause only the board operations that
   depend on it. Unrelated work and ordinary contributions continue.

## Procedures

The full board procedures - definitions, the 14 board laws, and the authority
and HR rules that govern them - live in
[references/board-laws.md](references/board-laws.md). That file is the
canonical home of the board laws. Read it before any board operation beyond a
plain read of current board state.

## Fixed constraints

- Board resource: https://github.com/users/Heretyc/projects/4
- Board operations use **only** the `gh` CLI, including `gh api` where
  subcommands lack field coverage. If `gh` is unauthenticated or lacks the
  `project` scope, raise an Action HR asking the human to run
  `gh auth refresh -s project`.
- Board sweeps, board reviews, true-ups, and the HR queue are maintainer
  operations: only an applicable CODEOWNER, or an agent explicitly delegated by
  one, may run them. Board review eligibility does not govern ordinary PR
  review.
- Never store local paths or machine-specific information on the board.
- Board-only findings are advisory. Absent issue-to-board mappings, incomplete
  board fields, stale sweeps, board review queues, unavailable project
  permissions, and board API failures never fail CI, block routine status, or
  reject a merge. Missing PR issue linkage is a separate contribution
  requirement and remains enforceable.
- If the applicable maintainer identity is missing, ambiguous, or unverifiable,
  ask a structured question and pause only the board operations that depend on
  it.