commit `ad38109f1` ("docs(adr-0025): the granted permission set is REGISTERED at load and …") carries `Refs #17147` in its message. This repo squash-merges, so every commit message on this PR is concatenated into the one message that lands on the default branch — a text no one writes and no one reviews, which carries every trailer its inputs carried and can contradict itself where its parts did not. The trailer is also live on its own. The contract is written down in the agent rules at .claude/agents/os-dev.md — 「卡片关系只在 PR 正文声明一次:commit ⛔ 不带卡片 trailer,其 trailer pair 一律 model-free。」 (The card relation is declared ONCE, in the PR body; a commit carries no card trailer, and its trailer pair is model-free.) Remedy, while this branch is still UNPUSHED: reword this commit message so the relation is stated only in the PR body. ⛔ Do NOT amend, rebase or force-push to remove it — rewriting pushed history is forbidden here; on an already-pushed branch nothing removes it, and the summary below is what to do about that.