[Jammy2211]

Closes #547. Merge after autolens_assistant#173 and #174: this PR uses their verb names.

What changes

• Cortex conductor pull. For a project row with campaign_file:, it runs hpc/sync status <campaign_file> instead of jobs/squeue. For a row with digest:, it previews cortex sync-runs <key> --dry-run (PyAutoCortex#83). Pull still writes nothing; recording stays a separate sync-runs step, by your ruling.
• AUTONOMY.md "Scheduler actions" and the Cortex skill. A campaign's jobs start and change only through hpc/sync act <submit|resubmit|hold|release|throttle|update-pending|cancel>, logged to <project_root>/campaign/<name>/actions.log. hpc/sync submit|push-submit sbatch one hand-written script, outside any campaign. Reading is free.
• bin/scheduler_action_guard.py is a PreToolUse(Bash) hook for Claude and Codex. Its I/O contract is the same as mind_commit_guard.py's.
  • It refuses raw sbatch, scancel, srun, salloc, any scontrol that changes things, and a raw autofit.campaign submit. That covers the same calls over ssh, in bash -c/eval, behind env/wrappers (xargs, parallel, find -exec), chained, substituted, or in heredocs fed to a shell, and quote/backslash spellings the shell reads as the bare word.
  • Allowed: scontrol show, help, usage, version, sbatch --test-only, and mentions such as commit messages or grep.
  • The escape hatch PYAUTO_SKIP_SCHEDULER_GUARD=1 stays (your ruling). It works from the environment or as the leading assignment of the command it excuses; a mention elsewhere excuses nothing.
• Tests: 175 across the guard and the conductor. The full suite passes, apart from test_hygiene_conductor (6) and test_skill_install (10), which already fail on main da6743f.

Not in this PR: registration

You approved registration on 2026-10-31. It follows the merge, because the guard has to exist on main first:

• add it to the workspace-root .claude/settings.json Bash hooks
• add a scheduler-action-guard entry to PyAutoMind/scripts/repos_sync.py CODEX_HOOK_DEFINITIONS and Brain's codex_hooks in repos.yaml

Review

Independent review (a different model from the author's) found 4 items, no blockers:

• quote/backslash spellings skipped the pre-filter
• ssh options after the host were not skipped
• the escape hatch was matched anywhere in the command
• read-only sbatch flags were denied

All 4 are fixed, with tests. The review also confirmed the hook I/O contract, the Cortex CLI and field names, and the pre-existing failures.

Under the Heart RED development override for hpc-campaign phase 5 (2026-10-30). Merge only with green CI and your /prm; no release.

🤖 Generated with Claude Code