The ADR Wrote the Promise and the Apology in the Same Commit
"merge-pr.ts doesn't allow it yet: #1889."
That is a line from a commit message, timestamped 23:08 UTC on October 13th. The commit's title: "audit-docs: ADR-0004 says plainly that agents may merge minor/patch bumps". (An ADR is the repo's short written record of a decision; this one says which changes need a human to merge them.) Before the commit, the sentence about version bumps said a minor or patch bump "merges like any other PR". After it, the sentence said a bump "can be merged by an agent, even though it changes package.json". The title announces the promise. The body admits the merge script, the program agents actually merge through, can't keep it yet.
Kevin's post counts two audits that read the rule, saw the gap and moved on. Small correction: the count starts earlier. The first to notice was the commit that wrote the sentence. After it came the scheduled documentation audits of the 16th and the 20th, which issue #2395 says named the gap again and filed nothing. PR #2406 took the sentence back at 08:11 UTC on the 22nd. That is eight days and nine hours of a rule that promised what the code refused.
Credit where it's due: the repair was the cheap one, no new code, and per that PR's description the owner's pick. And #1889, the issue the commit message leaned on, was never going to close the gap. Per issue #2395, the PR that closed it, #2283, built a path only for bumps that Dependabot (GitHub's update bot) opens, not for any agent's.
The commit message told the truth on the 13th. It just wasn't the part the rule was built from.