docs: skills - add auto-tmux incident runbook

skills/auto-tmux/AGENTS.md

@@ -49,6 +49,7 @@ skills/auto-tmux/
     ├── jsonl-schema.md
     ├── report-pack-review.md
     ├── reading-paths.md
+    ├── incident-runbook.md
     ├── swarm-state.md
     ├── prompt-templates.md
     ├── ai-swarm-collaboration.md

skills/auto-tmux/SKILL.md

@@ -287,6 +287,7 @@ skills/auto-tmux/scripts/swarm-dispatch.sh --role worker --target <session>:<win
 - `references/jsonl-schema.md`: JSONL/manifest 机器可读输出字段约定
 - `references/report-pack-review.md`: report pack reviewer 最短验收路径
 - `references/reading-paths.md`: commander、worker、reviewer、operator 的角色化阅读路线
+- `references/incident-runbook.md`: 误发送、误广播、远程采集失败和敏感信息风险处理流程
 - `references/swarm-state.md`: 蜂群状态、任务、锁和报告协议
 - `references/prompt-templates.md`: commander/worker/reviewer 提示词模板和下发方式
 - `references/ai-swarm-collaboration.md`: tmux 蜂群协作历史文档、架构模式、协议、案例和风险限制

skills/auto-tmux/references/AGENTS.md

@@ -12,4 +12,5 @@
 - 机器可读输出字段约定写入 `jsonl-schema.md`；新增 JSONL/manifest 输出必须同步维护。
 - report pack 审查路径写入 `report-pack-review.md`；新增报告文件时同步更新阅读顺序和通过标准。
 - 角色化阅读路线写入 `reading-paths.md`；新增关键 reference 时同步判断是否进入某个角色路径。
+- 操作事故处理流程写入 `incident-runbook.md`；新增控制类脚本时同步补事故处理路径。
 - 不确定的 tmux 行为必须给出验证命令，不编造。

skills/auto-tmux/references/README.md

@@ -13,6 +13,7 @@
 | [jsonl-schema.md](./jsonl-schema.md) | JSONL/manifest 机器可读输出字段约定 |
 | [report-pack-review.md](./report-pack-review.md) | report pack reviewer 最短验收路径 |
 | [reading-paths.md](./reading-paths.md) | commander、worker、reviewer、operator 的角色化阅读路线 |
+| [incident-runbook.md](./incident-runbook.md) | 误发送、误广播、远程采集失败和敏感信息风险处理流程 |
 | [swarm-state.md](./swarm-state.md) | 蜂群状态、任务、锁和报告协议 |
 | [prompt-templates.md](./prompt-templates.md) | commander/worker/reviewer 提示词模板和下发方式 |
 | [ai-swarm-collaboration.md](./ai-swarm-collaboration.md) | tmux 蜂群协作完整说明、架构模式、协议、案例和风险限制 |

skills/auto-tmux/references/incident-runbook.md

@@ -0,0 +1,78 @@
+# auto-tmux Incident Runbook
+
+本文件用于处理 `auto-tmux` 操作事故。原则：先停止继续操作，再保留证据，最后收敛到可复盘结论。
+
+## 误发送到错误 pane
+
+1. 立即停止继续发送。
+2. 捕获错误目标 pane 输出：
+
+```bash
+skills/auto-tmux/scripts/auto-tmux.sh capture -t <wrong-target> -n 120
+```
+
+3. 捕获原本目标 pane 输出：
+
+```bash
+skills/auto-tmux/scripts/auto-tmux.sh capture -t <expected-target> -n 120
+```
+
+4. 在 swarm state 中标记阻塞或失败：
+
+```bash
+skills/auto-tmux/scripts/swarm-state.sh task-block --id <task-id> --owner <owner> --reason "mis-sent to wrong pane" --dir /tmp/ai_swarm
+```
+
+## 误广播
+
+1. 关闭同步面板：
+
+```bash
+tmux set-window-option synchronize-panes off
+```
+
+2. 生成全局快照：
+
+```bash
+skills/auto-tmux/scripts/auto-tmux.sh snapshot --session ai-hub --dir /tmp/auto-tmux-incident-snapshot
+```
+
+3. 生成阻塞报告：
+
+```bash
+skills/auto-tmux/scripts/swarm-blockers.sh --dir /tmp/ai_swarm --out /tmp/auto-tmux-incident-blockers.md
+```
+
+## 远程采集失败
+
+1. 先 dry-run 确认 SSH 命令形态：
+
+```bash
+skills/auto-tmux/scripts/remote-readonly.sh --host user@example.com --session ai-hub --dry-run
+```
+
+2. 确认远端是否安装 tmux、session 是否存在。
+3. 不把 `remote-readonly.sh` 改造成远程写操作入口。
+4. 失败仍需记录 host、session、错误信息和下一步验证路径。
+
+## 敏感信息泄露风险
+
+1. 停止继续分享原始 pane 输出。
+2. 使用脱敏后的 `snapshot`、`remote-readonly.sh` 或 `record-summary.sh` 重新生成证据。
+3. 检查附件目录，不提交 `/tmp/auto-tmux-*` 原始证据。
+4. 如果 token 已泄露，按项目安全流程轮换凭证。
+
+## 复盘模板
+
+```text
+incident:
+  time:
+  operator:
+  target_expected:
+  target_actual:
+  command_or_payload:
+  impact:
+  evidence:
+  mitigation:
+  prevention:
+```

skills/auto-tmux/references/index.md

@@ -10,6 +10,7 @@
 - `jsonl-schema.md`：JSONL/manifest 机器可读输出字段约定
 - `report-pack-review.md`：report pack reviewer 最短验收路径
 - `reading-paths.md`：commander、worker、reviewer、operator 的角色化阅读路线
+- `incident-runbook.md`：误发送、误广播、远程采集失败和敏感信息风险处理流程
 - `swarm-state.md`：蜂群状态、任务、锁和报告协议
 - `prompt-templates.md`：commander/worker/reviewer 提示词模板和下发方式
 - `ai-swarm-collaboration.md`：tmux 蜂群协作完整说明、架构模式、协议、案例和风险限制

skills/auto-tmux/references/iteration-roadmap.md

@@ -50,13 +50,14 @@
 | 42 | `01b4a6f` | 审计清单结果门禁 | `review-checklist.sh --strict` |
 | 43 | `82486a7` | report pack 自检命令 | `verify-report-pack.sh` |
 | 44 | `d448fdb` | report pack 自检文档 | `report-pack-review.md` |
-| 45 | `本轮` | 文档摘要索引 | `reading-paths.md` |
+| 45 | `63d7831` | 文档摘要索引 | `reading-paths.md` |
+| 46 | `本轮` | 操作事故 runbook | `incident-runbook.md` |
 
 ## 后续候选方向
 
 | 优先级 | 方向 | 说明 |
 |:---|:---|:---|
-| P3 | 操作事故 runbook | 为误发送、误广播、远程采集失败补处理流程 |
+| P3 | 事故报告脚本 | 从模板生成 incident report |
 
 ## 每轮验收清单
 

skills/auto-tmux/scripts/validate-auto-tmux.sh

@@ -235,17 +235,21 @@ require_contains "$skill_dir/references/index.md" "session-safety.md"
 require_contains "$skill_dir/references/index.md" "jsonl-schema.md"
 require_contains "$skill_dir/references/index.md" "report-pack-review.md"
 require_contains "$skill_dir/references/index.md" "reading-paths.md"
+require_contains "$skill_dir/references/index.md" "incident-runbook.md"
 require_contains "$skill_dir/references/README.md" "swarm-state.md"
 require_contains "$skill_dir/references/README.md" "safety-policy.md"
 require_contains "$skill_dir/references/README.md" "session-safety.md"
 require_contains "$skill_dir/references/README.md" "jsonl-schema.md"
 require_contains "$skill_dir/references/README.md" "report-pack-review.md"
 require_contains "$skill_dir/references/README.md" "reading-paths.md"
+require_contains "$skill_dir/references/README.md" "incident-runbook.md"
 require_contains "$skill_dir/references/jsonl-schema.md" "swarm-result"
 require_contains "$skill_dir/references/jsonl-schema.md" "remote-readonly"
 require_contains "$skill_dir/references/report-pack-review.md" "verify-report-pack.sh"
 require_contains "$skill_dir/references/reading-paths.md" "Commander"
 require_contains "$skill_dir/references/reading-paths.md" "Reviewer"
+require_contains "$skill_dir/references/incident-runbook.md" "误发送"
+require_contains "$skill_dir/references/incident-runbook.md" "误广播"
 require_contains "$skill_dir/references/session-safety.md" "remote-readonly.sh"
 require_contains "$skill_dir/references/session-safety.md" "远程默认只读"
 require_contains "$skill_dir/references/session-safety.md" "metadata.jsonl"