Claude's wiki pull requests open under a token on the maintainer's account

wiki/ is specification layer, so path-gate passes a pull request touching it only when GITHUB_ACTOR is in MAINTAINERS, and the maintainer's AI collaborator is who drafts those pull requests.

They are opened with a fine-grained personal access token on the maintainer's own account: scoped to this repository alone, contents and pull-requests write and nothing else, an expiry measured in days, minted per session, and never stored in the repository, in its settings, or in any environment — which is CI holds zero secrets applying to a human's credential as well as to a job's. That is the existing attribution scheme extended to a new surface: the executing model is named in the Model: trailers and in the pull-request body, so who pushed and what wrote it stay separate facts.

Squash auto-merge is off for a wiki pull request drafted on the chat surface. The register is prose a maintainer is the only judge of, and the gates check links, pins and declared quantities rather than whether a page is right.

Rejected: adding an allowlisted machine account to MAINTAINERS and CODEOWNERS, which is honest about who pushed and creates a second maintainer identity no human is behind; and dropping wiki/ from the specification list, which makes the register contributor-editable and gives up what its own entry had just established.

Source: the maintainer's ruling, taken in conversation on 2026-08-16, landed here by prompts/2026-08-24-reservation-bar-and-debt/.