[kixelated]

Summary

Plans the follow-ups from the 2026-11-02 /quest-complete session, which landed moq-dev/quest#338, #342 and #395 and reviewed kixelated/nixos#19.

• Deleted quest/m0/host-land/pushed-head-ci.md. Its evidence said dispatching check.yml fixed feat(gate): admit a lone command on a host loaded by other work #342 and feat(runner): sandbox opencode jobs' commands #338. It didn't: workflow_dispatch runs never attach to a PR, and feat(gate): admit a lone command on a host loaded by other work #342's rollup listed only CodeRabbit until a user push started a pull_request run. On moq's live queue, heads the watcher's fixer pushes do get pull_request runs (moq-dev/moq#7625 at 96a50df8, moq-dev/moq#7222 at d209a986, both merged). The gate it was written for is frozen and retiring.
• Stale quest:merge holds are folded into existing quests. merge-driver-upkeep.md now bumps quest-pinned, since the dev shell's older quest still reads the label as a hold. follow.md's cutover removes the leftover labels on feat(gate): admit quick commands and land checks ahead of load #324 and rust2's chore(deps): bump quest-pinned from acb8682 to 2aa60a2 in the quest-pinned group #446, quest: delete the watcher host quest, live for moq-dev/moq #442 and feat(gate): own gated descendants inside Quest scopes and on Windows #437 first.
• New [S] queue-watcher/runners.md, from Claude's review of kixelated/nixos#19. It covers no check machinery in watch mode, each runner group limited to its queue.yml, and fork-PR approval for all outside contributors.
• New [S] kix/sandbox/live-test.md, from feat(runner): sandbox opencode jobs' commands #338. It checks in the opencode+srt hostile-repository boundary test with a scripted model and runs it on Linux CI. It's required by opencode-sdk.md.

Decisions

Decided 2026-11-02 (user, /quest-plan):

• pushed-head-ci scope: ✅ watcher only · watcher and gate · gate only. Then, shown that moq's watcher-pushed heads already get runs: ✅ delete it · keep an [XS] watcher guard
• Stale labels: ✅ fold into merge-driver-upkeep and the cutover · a new XS pin-bump quest · clear them once
• Runner hardening items: ✅ watch-mode cleanup, ✅ runner-group workflow limits, ✅ approval for all fork PRs; milestone ✅ m0 · m1
• Boundary test: ✅ CI on Linux · a manual recipe; milestone ✅ m0 · m1

Review

• Reviewer: Codex (quest review), gpt-6.1-sol, medium effort
• Head: 7cbacdb, round 1
• Findings: none

just check and quest check pass.

🤖 Generated with Claude Code

(Written by Claude Opus 5.5)