|
29963
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/b7-dev-resident-runtime
|
0
|
|
1789445393
|
Edit
Delete
|
|
29962
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/codex/ms3-audit-receipt-integrity
|
0
|
{"Commits":[{"Sha1":"330854226 {"Commits":[{"Sha1":"3308542265e6a301126e1135310b11fbcddd5c5d","Message":"Merge pull request #24 from laoluojuhai/codex/ms3-audit-receipt-integrity\n\nfix(audit): 修复回执篡改漏检并整合撤权验收","AuthorEmail":"158980461+laoluojuhai@users.noreply.github.com","AuthorName":"laoluojuhai","CommitterEmail":"noreply@github.com","CommitterName":"GitHub","Timestamp":"2026-09-12T18:03:34-07:00"}],"HeadCommit":{"Sha1":"3308542265e6a301126e1135310b11fbcddd5c5d","Message":"Merge pull request #24 from laoluojuhai/codex/ms3-audit-receipt-integrity\n\nfix(audit): 修复回执篡改漏检并整合撤权验收","AuthorEmail":"158980461+laoluojuhai@users.noreply.github.com","AuthorName":"laoluojuhai","CommitterEmail":"noreply@github.com","CommitterName":"GitHub","Timestamp":"2026-09-12T18:03:34-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/5162994aa3dcdae57fdc9322ca629dbb580178f2...3308542265e6a301126e1135310b11fbcddd5c5d","Len":1}...
|
1789445373
|
Edit
Delete
|
|
29961
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/codex/ms234-runtime
|
0
|
{"Commits":[],"HeadCommit":{"S {"Commits":[],"HeadCommit":{"Sha1":"399f0d9e72c6b443649a71809dab48cb32faec6a","Message":"Merge Gitea integration evidence without changing validated runtime\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T16:45:40-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/main...399f0d9e72c6b443649a71809dab48cb32faec6a","Len":0}...
|
1789445366
|
Edit
Delete
|
|
29960
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/codex/ms234-runtime
|
0
|
|
1789445366
|
Edit
Delete
|
|
29907
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/codex/adversarial-infrastructure
|
0
|
{"Commits":[{"Sha1":"4d3d50701 {"Commits":[{"Sha1":"4d3d5070120fcc60dec9c11574294912a5904a59","Message":"chore(reports): record clean integration checks on 34170c2\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T16:39:24-07:00"},{"Sha1":"34170c2a1af9b26af447a448a40d8a12f0bd992f","Message":"Merge remote-tracking branch 'github/main' into codex/adversarial-infrastructure\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T16:38:17-07:00"},{"Sha1":"0dbf7460396bffd3a264f577c01791742ca9334e","Message":"Merge completed mainline work and preserve adversarial evidence boundaries\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T16:38:17-07:00"},{"Sha1":"21a4fc7fbfd4c4f23f08e3082a1020895d74d603","Message":"Merge pull request #20 from laoluojuhai/codex/adversarial-infrastructure\n\nfix(platform): 修复权限缓存越界与晋级签收绕过","AuthorEmail":"158980461+laoluojuhai@users.noreply.github.com","AuthorName":"laoluojuhai","CommitterEmail":"noreply@github.com","CommitterName":"GitHub","Timestamp":"2026-09-12T16:35:24-07:00"},{"Sha1":"1bca170569a9a1100818ead6f119c928c090ac1c","Message":"chore(reports): refresh clean static and port evidence\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T16:31:29-07:00"}],"HeadCommit":{"Sha1":"4d3d5070120fcc60dec9c11574294912a5904a59","Message":"chore(reports): record clean integration checks on 34170c2\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T16:39:24-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/51e8801b58881d0eaf51dc53f2753e9d7f7fa71f...4d3d5070120fcc60dec9c11574294912a5904a59","Len":9}...
|
1789444814
|
Edit
Delete
|
|
29906
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/codex/mainline-candidate-evidence
|
0
|
{"Commits":[{"Sha1":"b534a1483 {"Commits":[{"Sha1":"b534a148353902022e83479dee84b969d7059d8c","Message":"Merge remote-tracking branch 'origin/main' into codex/mainline-candidate-evidence\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T15:57:05-07:00"},{"Sha1":"a4af044771ad386af7160b8788e41ea75fd5ae86","Message":"Merge pull request #18 from laoluojuhai/codex/mainline-candidate-evidence\n\nfix(governance): verify durable mainline candidate evidence","AuthorEmail":"158980461+laoluojuhai@users.noreply.github.com","AuthorName":"laoluojuhai","CommitterEmail":"noreply@github.com","CommitterName":"GitHub","Timestamp":"2026-09-12T15:56:21-07:00"},{"Sha1":"b5b7b7a18e6bb57854be8fdf5f0660fe6c2a2279","Message":"chore(reports): record 529 passing runtime tests after identity merge\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T15:55:19-07:00"},{"Sha1":"1c08e564fdceca6ae339603e15c1b2a83010a57d","Message":"Merge remote-tracking branch 'origin/main'\n\n# Conflicts:\n#\treports/caddy.latest.json\n#\treports/catalog-drift.latest.json\n#\treports/catalog-reconciliation.latest.json\n#\treports/facts.latest.json\n#\treports/fixtures.latest.json\n#\treports/migration-decs.latest.json\n#\treports/module-imports.latest.json\n#\truntime/CLAUDE.md\n#\truntime/reports/agent-adapters.latest.json\n#\truntime/reports/conformance-matrix.latest.json\n#\truntime/reports/contract-consumers.latest.json\n#\truntime/reports/docs-truth.latest.json\n#\truntime/reports/dual-backend-parity.latest.json\n#\truntime/reports/fork-readiness.latest.json\n#\truntime/reports/governance-docs.latest.json\n#\truntime/reports/governance-rules.latest.json\n#\truntime/reports/governance-status.latest.json\n#\truntime/reports/governance.latest.json\n#\truntime/reports/migrations.latest.json\n#\truntime/reports/naming.latest.json\n#\truntime/reports/runtime-governance.latest.json\n#\truntime/reports/schema-sync.latest.json\n#\truntime/reports/statemachine-write-guard.latest.json\n#\truntime/reports/validation-source.latest.json\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T15:50:25-07:00"},{"Sha1":"beb9c11a921406c5d187ad7b24c365125581f95d","Message":"docs(platform): record clean mainline evidence and fixed-source dev broker rollout\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T15:48:39-07:00"}],"HeadCommit":{"Sha1":"b534a148353902022e83479dee84b969d7059d8c","Message":"Merge remote-tracking branch 'origin/main' into codex/mainline-candidate-evidence\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T15:57:05-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/6c20c6e5969499c364ede42aa71b4e2cc5abb6d1...b534a148353902022e83479dee84b969d7059d8c","Len":6}...
|
1789444811
|
Edit
Delete
|
|
29905
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/platform-ops-candidate
|
0
|
{"Commits":[{"Sha1":"308a0078d {"Commits":[{"Sha1":"308a0078ddf7de088a6c0ee7cdbe1facac9dc299","Message":"feat(platform): 平台运维命令 API 守卫 / 控制器 / 开关（OPS-2，候选契约 platform-ops-api.v1 → CHG-005）\n\n- @juhai/module-kit：operations 声明（OperationDefinition：id / kind / risk / dry_run / approval / permission_action / execution / job_kind / batch / input_schema），\n defineModule 校验与 governance/fixtures/rules/platform-ops.rules.mjs 同口径；OpsActorVerifier 接口与字符串 token OPS_ACTOR_VERIFIER\n （identity 模块提供；未提供即失败关闭）；常量 OPS_SCOPE=platform:ops（拍板 ②）、OPS_PERMISSION_RESOURCE=platform.operations\n- @repo/contracts：platform-ops.ts 请求信封 Zod 镜像（operationRequestSchema / approvalRequestSchema / OPS_REASON_CODES 22 码 / Idempotency-Key），\n 测试锚定候选 OpenAPI ReasonCode.enum 与回执状态枚举\n- api-nestjs：AuthContext / TokenVerifier 补 scopes（scope 字串 / scp 数组；demo 模式为空）；\n platform/ops/{ops.config, ops-errors, ops-auth.guard, ops.gates, ops.service, ops.controller}\n → GET /api/platform/ops/definitions、POST /{definitionId}、GET /receipts/{id}、POST /receipts/{id}/approve；\n PLATFORM_OPS_ENABLED 缺省关 → 503 OPS_DISABLED；无 scope 403 OPS_SCOPE_REQUIRED；无校验方 / 未过 403 OPS_FORBIDDEN；\n 逐操作 PermissionDecisionPort 决策（platform.operations.\u003caction\u003e），fail-closed → 403 POLICY_UNAVAILABLE；\n 门控 400 IDEMPOTENCY_KEY_REQUIRED / INPUT_INVALID、409 OPERATION_NOT_EXECUTABLE / DRY_RUN_NOT_SUPPORTED / PLAN_DIGEST_REQUIRED / APPROVAL_REQUIRED / BATCH_LIMIT_EXCEEDED；\n 处理器与回执（M6）留 OPS-3：门控全过仍 409 HANDLER_NOT_BOUND，不伪造回执；回执 / 审批一律 404 RECEIPT_NOT_FOUND；\n 本地模式动作目录并入 platform.operations.*（composeOpsActions）；createApp 拆出 createAppFromModules（测试路径 = 运行路径）\n- turbo.json globalEnv 增 PLATFORM_OPS_ENABLED；Caddyfile /api/platform/ops/* 只放内网 / 可信代理（M5 接口设计 §5.3 第 7 条）\n- 测试：kit operations 4 例、contracts platform-ops 3 例、api-nestjs 纯门控 8 例、真实 HTTP 10 例\n （隔离 PG :55476 / Redis :56387，AUTH_MODE=jwt HS256；createAppFromModules 注入 authority + shape 两个描述符与假 OpsActorVerifier）\n\n本机：runtime 13 项静态门禁 + 根 pins / modules / module-imports / caddy / facts / migration-decs 全过；typecheck 0 错；报告未随提交。\nidentity 侧 OpsActorVerifier 提供方与 platform:ops scope 登记待 Identity Owner（OPS-2 前置，随 PF-07 阶段 2）。\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T01:37:55-07:00"}],"HeadCommit":{"Sha1":"308a0078ddf7de088a6c0ee7cdbe1facac9dc299","Message":"feat(platform): 平台运维命令 API 守卫 / 控制器 / 开关（OPS-2，候选契约 platform-ops-api.v1 → CHG-005）\n\n- @juhai/module-kit：operations 声明（OperationDefinition：id / kind / risk / dry_run / approval / permission_action / execution / job_kind / batch / input_schema），\n defineModule 校验与 governance/fixtures/rules/platform-ops.rules.mjs 同口径；OpsActorVerifier 接口与字符串 token OPS_ACTOR_VERIFIER\n （identity 模块提供；未提供即失败关闭）；常量 OPS_SCOPE=platform:ops（拍板 ②）、OPS_PERMISSION_RESOURCE=platform.operations\n- @repo/contracts：platform-ops.ts 请求信封 Zod 镜像（operationRequestSchema / approvalRequestSchema / OPS_REASON_CODES 22 码 / Idempotency-Key），\n 测试锚定候选 OpenAPI ReasonCode.enum 与回执状态枚举\n- api-nestjs：AuthContext / TokenVerifier 补 scopes（scope 字串 / scp 数组；demo 模式为空）；\n platform/ops/{ops.config, ops-errors, ops-auth.guard, ops.gates, ops.service, ops.controller}\n → GET /api/platform/ops/definitions、POST /{definitionId}、GET /receipts/{id}、POST /receipts/{id}/approve；\n PLATFORM_OPS_ENABLED 缺省关 → 503 OPS_DISABLED；无 scope 403 OPS_SCOPE_REQUIRED；无校验方 / 未过 403 OPS_FORBIDDEN；\n 逐操作 PermissionDecisionPort 决策（platform.operations.\u003caction\u003e），fail-closed → 403 POLICY_UNAVAILABLE；\n 门控 400 IDEMPOTENCY_KEY_REQUIRED / INPUT_INVALID、409 OPERATION_NOT_EXECUTABLE / DRY_RUN_NOT_SUPPORTED / PLAN_DIGEST_REQUIRED / APPROVAL_REQUIRED / BATCH_LIMIT_EXCEEDED；\n 处理器与回执（M6）留 OPS-3：门控全过仍 409 HANDLER_NOT_BOUND，不伪造回执；回执 / 审批一律 404 RECEIPT_NOT_FOUND；\n 本地模式动作目录并入 platform.operations.*（composeOpsActions）；createApp 拆出 createAppFromModules（测试路径 = 运行路径）\n- turbo.json globalEnv 增 PLATFORM_OPS_ENABLED；Caddyfile /api/platform/ops/* 只放内网 / 可信代理（M5 接口设计 §5.3 第 7 条）\n- 测试：kit operations 4 例、contracts platform-ops 3 例、api-nestjs 纯门控 8 例、真实 HTTP 10 例\n （隔离 PG :55476 / Redis :56387，AUTH_MODE=jwt HS256；createAppFromModules 注入 authority + shape 两个描述符与假 OpsActorVerifier）\n\n本机：runtime 13 项静态门禁 + 根 pins / modules / module-imports / caddy / facts / migration-decs 全过；typecheck 0 错；报告未随提交。\nidentity 侧 OpsActorVerifier 提供方与 platform:ops scope 登记待 Identity Owner（OPS-2 前置，随 PF-07 阶段 2）。\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T01:37:55-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/0e9a0d98eb8d36f9d8ad0611e0159dd31f8484a2...308a0078ddf7de088a6c0ee7cdbe1facac9dc299","Len":1}...
|
1789444808
|
Edit
Delete
|
|
29904
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/codex/ms3-audit-m1-http
|
0
|
{"Commits":[],"HeadCommit":{"S {"Commits":[],"HeadCommit":{"Sha1":"338952fec9288595254d67eac86b54f903291b9d","Message":"chore(reports): retain credential runtime and clean static acceptance evidence\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T01:01:36-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/main...338952fec9288595254d67eac86b54f903291b9d","Len":0}...
|
1789444807
|
Edit
Delete
|
|
29903
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/codex/ms3-audit-m1-http
|
0
|
|
1789444807
|
Edit
Delete
|
|
29902
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/codex/ms1-required-check-negative
|
0
|
{"Commits":[{"Sha1":"638e34ed4 {"Commits":[{"Sha1":"638e34ed4bac21097d3feeb7cc642fc7aa9634be","Message":"test(ms1): controlled non-exact pin for required-check verification\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T01:31:42-07:00"}],"HeadCommit":{"Sha1":"638e34ed4bac21097d3feeb7cc642fc7aa9634be","Message":"test(ms1): controlled non-exact pin for required-check verification\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T01:31:42-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/e5aca81c94597d4cb18cc65fa5b0855d4333aaf6...638e34ed4bac21097d3feeb7cc642fc7aa9634be","Len":1}...
|
1789444803
|
Edit
Delete
|
|
29901
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/codex/ms1-required-check-negative
|
0
|
|
1789444803
|
Edit
Delete
|
|
29900
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/identity-runtime-module
|
0
|
{"Commits":[],"HeadCommit":{"S {"Commits":[],"HeadCommit":{"Sha1":"65192fd85b1158262eabb1eeca9f586a01b37794","Message":"Merge pull request #16 from laoluojuhai/feat/identity-runtime-module\n\nrefactor(identity): relocate shared cores into runtime module","AuthorEmail":"158980461+laoluojuhai@users.noreply.github.com","AuthorName":"laoluojuhai","CommitterEmail":"noreply@github.com","CommitterName":"GitHub","Timestamp":"2026-09-12T15:39:44-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/main...65192fd85b1158262eabb1eeca9f586a01b37794","Len":0}...
|
1789444800
|
Edit
Delete
|
|
29899
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/identity-runtime-module
|
0
|
|
1789444800
|
Edit
Delete
|
|
29898
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/identity-module-contracts
|
0
|
{"Commits":[],"HeadCommit":{"S {"Commits":[],"HeadCommit":{"Sha1":"49f53136fbf3d129bb46f07d2961a50a5a810db8","Message":"docs(identity): record verified core migration and parent merge\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T15:41:21-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/main...49f53136fbf3d129bb46f07d2961a50a5a810db8","Len":0}...
|
1789444799
|
Edit
Delete
|
|
29897
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/identity-module-contracts
|
0
|
|
1789444799
|
Edit
Delete
|
|
29896
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/governance-evidence-freshness
|
0
|
{"Commits":[],"HeadCommit":{"S {"Commits":[],"HeadCommit":{"Sha1":"35e44a1d97cad7b20404416743167de2aa15c277","Message":"chore(reports): bind check:evidence baseline @ 5f0473b\n\n13 份已登记报告新鲜，5 条 warn（port-conformance、runtime/ui 验收、\nrevocation-sla、mainline-acceptance —— 都是需要真实库/容器才能重跑的，\n已在 evidence-scopes.json 写明 promoteBy），32 份未登记只计 info。\nmodule-imports 顺带在干净树重跑回绑（315 文件 0 违规）。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T10:37:16-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/main...35e44a1d97cad7b20404416743167de2aa15c277","Len":0}...
|
1789444796
|
Edit
Delete
|
|
29895
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/governance-evidence-freshness
|
0
|
|
1789444796
|
Edit
Delete
|
|
29894
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/revocation-sla-metrics
|
0
|
{"Commits":[],"HeadCommit":{"S {"Commits":[],"HeadCommit":{"Sha1":"6cace1c471be1e8f79125a7de47443c3aa5de996","Message":"docs(platform): 撤权 SLA 两指标的固定提交验证记录 + 各角色待办按当前阻塞重列（owner-matrix）\n\n- MS-2/3 执行记录追加「撤权 SLA 两指标的固定提交验证」：clean `fbef7a5`（PR #19 头 `7e279c5` 之上）本机隔离 project 全链重跑——runtime 547 / mainline 11·5·18 / SLA cacheBound p95 5041 ms · invalidationPush p95 122 ms / UI 5 / restore 24 表 / Manifest partial；报告不入库以免与 PR #19 冲突\n- owner-matrix「当前待其动作」按人与钥匙阻塞重列：CODEOWNERS、cosign / registry、CHG-001、Approval gate ①②③（偏差 #25）、DEC-032 材料、框架 Owner D-6 / FR-1—3、HR·OS 真实接入、M3 失效推送传输\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T16:38:56-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/main...6cace1c471be1e8f79125a7de47443c3aa5de996","Len":0}...
|
1789444794
|
Edit
Delete
|
|
29893
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/revocation-sla-metrics
|
0
|
|
1789444794
|
Edit
Delete
|
|
29892
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/main
|
0
|
{"Commits":[{"Sha1":"02587c528 {"Commits":[{"Sha1":"02587c52835c0d763ab44c302cb862b5cb1a0125","Message":"feat(contracts): anchor workspace root on a manifest file, not directory names\n\ndetectWorkspaceRoot() only recognised an ancestor holding both 基础/ and doc/.\nThe directory migration splits 基础/ into 基础基座/ + 基础设施/ + 基础框架/ +\n平台治理/ and moves doc/ under 平台治理/, after which that probe returns null\nand every gate depending on it fails closed with WORKSPACE_ROOT_UNRESOLVED —\na one-constant breakage that is very hard to diagnose from the error alone.\n\nA candidate now qualifies when it holds the workspace.json manifest, falling\nback to the existing marker directories so checkouts without the manifest keep\nworking unchanged. Directory reshuffles then only touch the manifest.\n\nAdds 3 cases: manifest alone qualifies with both markers absent, an explicit\n--workspace-root carrying the manifest is accepted, and marker-only detection\nstill works. 101 → 104 tests, all passing.\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T20:40:01-07:00"},{"Sha1":"e0fb26df05caf3f1cecc8328b586aa304eff51eb","Message":"chore(contracts): rename hi-atelier app to 嗨赞造意\n\napp.name 由「嗨设首席」改为「嗨赞造意」，与目录名\n业务应用/嗨赞造意/image-generation 一致。id (hi-atelier)、\nrepository、domain、owner 均不变。\n\n来源冻结目录 platform-contracts/ 按 PF-04 阶段 1 规定不改\n（CHG-001 包指纹以该目录为准，改动会触发就绪度重基线），\n两边口径差随阶段 2 物理移除消除。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T20:35:51-07:00"}],"HeadCommit":{"Sha1":"02587c52835c0d763ab44c302cb862b5cb1a0125","Message":"feat(contracts): anchor workspace root on a manifest file, not directory names\n\ndetectWorkspaceRoot() only recognised an ancestor holding both 基础/ and doc/.\nThe directory migration splits 基础/ into 基础基座/ + 基础设施/ + 基础框架/ +\n平台治理/ and moves doc/ under 平台治理/, after which that probe returns null\nand every gate depending on it fails closed with WORKSPACE_ROOT_UNRESOLVED —\na one-constant breakage that is very hard to diagnose from the error alone.\n\nA candidate now qualifies when it holds the workspace.json manifest, falling\nback to the existing marker directories so checkouts without the manifest keep\nworking unchanged. Directory reshuffles then only touch the manifest.\n\nAdds 3 cases: manifest alone qualifies with both markers absent, an explicit\n--workspace-root carrying the manifest is accepted, and marker-only detection\nstill works. 101 → 104 tests, all passing.\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T20:40:01-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/517414d8806adba9ad700d6508e6c563513a583e...02587c52835c0d763ab44c302cb862b5cb1a0125","Len":2}...
|
1789444583
|
Edit
Delete
|
|
29886
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/workspace-manifest-anchor
|
0
|
{"Commits":[{"Sha1":"02587c528 {"Commits":[{"Sha1":"02587c52835c0d763ab44c302cb862b5cb1a0125","Message":"feat(contracts): anchor workspace root on a manifest file, not directory names\n\ndetectWorkspaceRoot() only recognised an ancestor holding both 基础/ and doc/.\nThe directory migration splits 基础/ into 基础基座/ + 基础设施/ + 基础框架/ +\n平台治理/ and moves doc/ under 平台治理/, after which that probe returns null\nand every gate depending on it fails closed with WORKSPACE_ROOT_UNRESOLVED —\na one-constant breakage that is very hard to diagnose from the error alone.\n\nA candidate now qualifies when it holds the workspace.json manifest, falling\nback to the existing marker directories so checkouts without the manifest keep\nworking unchanged. Directory reshuffles then only touch the manifest.\n\nAdds 3 cases: manifest alone qualifies with both markers absent, an explicit\n--workspace-root carrying the manifest is accepted, and marker-only detection\nstill works. 101 → 104 tests, all passing.\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T20:40:01-07:00"},{"Sha1":"e0fb26df05caf3f1cecc8328b586aa304eff51eb","Message":"chore(contracts): rename hi-atelier app to 嗨赞造意\n\napp.name 由「嗨设首席」改为「嗨赞造意」，与目录名\n业务应用/嗨赞造意/image-generation 一致。id (hi-atelier)、\nrepository、domain、owner 均不变。\n\n来源冻结目录 platform-contracts/ 按 PF-04 阶段 1 规定不改\n（CHG-001 包指纹以该目录为准，改动会触发就绪度重基线），\n两边口径差随阶段 2 物理移除消除。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T20:35:51-07:00"}],"HeadCommit":{"Sha1":"02587c52835c0d763ab44c302cb862b5cb1a0125","Message":"feat(contracts): anchor workspace root on a manifest file, not directory names\n\ndetectWorkspaceRoot() only recognised an ancestor holding both 基础/ and doc/.\nThe directory migration splits 基础/ into 基础基座/ + 基础设施/ + 基础框架/ +\n平台治理/ and moves doc/ under 平台治理/, after which that probe returns null\nand every gate depending on it fails closed with WORKSPACE_ROOT_UNRESOLVED —\na one-constant breakage that is very hard to diagnose from the error alone.\n\nA candidate now qualifies when it holds the workspace.json manifest, falling\nback to the existing marker directories so checkouts without the manifest keep\nworking unchanged. Directory reshuffles then only touch the manifest.\n\nAdds 3 cases: manifest alone qualifies with both markers absent, an explicit\n--workspace-root carrying the manifest is accepted, and marker-only detection\nstill works. 101 → 104 tests, all passing.\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T20:40:01-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/517414d8806adba9ad700d6508e6c563513a583e...02587c52835c0d763ab44c302cb862b5cb1a0125","Len":2}...
|
1789444131
|
Edit
Delete
|
|
29885
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/workspace-manifest-anchor
|
0
|
|
1789444131
|
Edit
Delete
|
|
29812
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/main
|
0
|
{"Commits":[{"Sha1":"517414d88 {"Commits":[{"Sha1":"517414d8806adba9ad700d6508e6c563513a583e","Message":"chore(reports): rebind after merging main into the fact-read pick\n\n合并 main（6 提交）后根 pnpm check exit 0，31 项。\n\n合并过程记录两件事：\n1. runtime/clients/fact/README.md 两边都新建过——main 侧是 U-31/34 的中文接入契约，\n 本分支侧是 3074b75 的英文 reader 文档。两者内容不重叠，合并而非二选一：\n 接入契约保持 1—4 节，reader 文档作为第 5 节并入。\n2. 合并后 module-fact 构建失败（FactReadRuntime 未导出）。根因不是合并本身：\n modules/* 用 composite:true，包根的 tsconfig.tsbuildinfo 残留让 tsc -p 认为无变化，\n exit 0 却不产出更新后的 dist/index.d.ts；turbo 随后把这份**空产出缓存**了，\n 于是后续每次构建都从缓存恢复错误的 dist——删 dist 重建也没用，因为 tsbuildinfo 还在。\n 清掉 runtime 下全部 tsconfig.tsbuildinfo + turbo run build --force 后恢复正常。\n 这是 C69 形态在本仓的复现，且被 turbo 缓存放大了一层。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T19:26:21-07:00"},{"Sha1":"2a3471d25243924c1d27cf96654b8d4fa33978ca","Message":"Merge branch 'main' into feat/fact-read-http-pick\n\n# Conflicts:\n#\treports/caddy.latest.json\n#\treports/catalog-drift.latest.json\n#\treports/catalog-reconciliation.latest.json\n#\treports/facts.latest.json\n#\treports/fixtures.latest.json\n#\treports/migration-decs.latest.json\n#\treports/module-imports.latest.json\n#\truntime/clients/fact/README.md\n#\truntime/reports/agent-adapters.latest.json\n#\truntime/reports/conformance-matrix.latest.json\n#\truntime/reports/contract-consumers.latest.json\n#\truntime/reports/docs-truth.latest.json\n#\truntime/reports/dual-backend-parity.latest.json\n#\truntime/reports/fork-readiness.latest.json\n#\truntime/reports/governance-docs.latest.json\n#\truntime/reports/governance-rules.latest.json\n#\truntime/reports/governance-status.latest.json\n#\truntime/reports/governance.latest.json\n#\truntime/reports/migrations.latest.json\n#\truntime/reports/naming.latest.json\n#\truntime/reports/runtime-governance.latest.json\n#\truntime/reports/schema-sync.latest.json\n#\truntime/reports/statemachine-write-guard.latest.json\n#\truntime/reports/validation-source.latest.json\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T19:23:23-07:00"},{"Sha1":"176c33149337c2eb03a0cdfb11ed910f75700e0c","Message":"chore(reports): rebind gate reports to the fact-read pick\n\n本分支只从 codex/ms3-fact-read-http 摘取 3074b75（fact-read），不带该分支的\nscope / permission-invalidation / OpenBao 工作。九处冲突按同一规则解决：只保留\nfact-read，剔除 scope/permission 引用，证据数字与棘轮取 HEAD——本分支尚未跑过\nruntime/UI 验收，不得引用原分支 clean 3260390 的 779 tests / 97 项主线专项。\n\n本地验证：turbo typecheck --force 28/28（0 cached，非缓存命中）；\n@juhai/client-fact 13/13（含新增 reader.test.ts 10 例）；\n@juhai/module-fact 42/42（含新增 read-runtime.test.ts 4 例）；\n根 pnpm check exit 0（30 项，check:pins 36 处 / 34 个 package.json）。\n\n未跑：e2e/fact-read-http.test.ts（需真实 M5 库 + JWT 环境）与 runtime/UI 整轮——\nmainline 清单与地板已登记该套件 10 例，但本分支没有它的运行证据。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T18:58:31-07:00"},{"Sha1":"a45389784a7c399a941306eb1454ff456e97ebcb","Message":"docs(pf-15): record the evidence binding of the adversarial round\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T10:37:13-07:00"},{"Sha1":"96c108dc65e3ce9838b554cafdf428023be0fd25","Message":"chore(reports): bind the read-surface adversarial evidence @ 830291c\n\nMainline acceptance re-run on an isolated compose project\n(enterprise-platform-ms23-ci: its own Postgres with tmpfs data, Redis and\nRedpanda), on databases created fresh for this round, so no state from the\nimplementing session took part: fact-read-http 11, fact-persistence 11,\naudit-tamper 8, mainline-revocation-chaos 18 — validateMainlineReport now\nreturns no errors, which it did not before this round (the floor had been\nraised to require the read suite while the stored report still had three).\nRevocation stays partial with employment Scope explicit, p95 5043 ms.\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T10:37:02-07:00"}],"HeadCommit":{"Sha1":"517414d8806adba9ad700d6508e6c563513a583e","Message":"chore(reports): rebind after merging main into the fact-read pick\n\n合并 main（6 提交）后根 pnpm check exit 0，31 项。\n\n合并过程记录两件事：\n1. runtime/clients/fact/README.md 两边都新建过——main 侧是 U-31/34 的中文接入契约，\n 本分支侧是 3074b75 的英文 reader 文档。两者内容不重叠，合并而非二选一：\n 接入契约保持 1—4 节，reader 文档作为第 5 节并入。\n2. 合并后 module-fact 构建失败（FactReadRuntime 未导出）。根因不是合并本身：\n modules/* 用 composite:true，包根的 tsconfig.tsbuildinfo 残留让 tsc -p 认为无变化，\n exit 0 却不产出更新后的 dist/index.d.ts；turbo 随后把这份**空产出缓存**了，\n 于是后续每次构建都从缓存恢复错误的 dist——删 dist 重建也没用，因为 tsbuildinfo 还在。\n 清掉 runtime 下全部 tsconfig.tsbuildinfo + turbo run build --force 后恢复正常。\n 这是 C69 形态在本仓的复现，且被 turbo 缓存放大了一层。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T19:26:21-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/727044996fde65045ab4ca56a060c0a32fa24c0a...517414d8806adba9ad700d6508e6c563513a583e","Len":7}...
|
1789439267
|
Edit
Delete
|
|
29811
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/main
|
0
|
{"Commits":[{"Sha1":"727044996 {"Commits":[{"Sha1":"727044996fde65045ab4ca56a060c0a32fa24c0a","Message":"chore(reports): rebind after merging main into the U-31/33/34 branch\n\n合并 main（6 个提交）后重跑根 pnpm check：exit 0，31 项。\nmodule-imports 报告的合并冲突按「报告是运行产物」取 main 版本后由本轮重新生成。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T19:21:58-07:00"},{"Sha1":"9a7231221ba190a84f91f1f2771017927d991328","Message":"Merge branch 'main' into feat/u31-u33-u34-consumer-feedback\n\n# Conflicts:\n#\treports/module-imports.latest.json\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T19:21:34-07:00"},{"Sha1":"a76562a9c4710a6763243f4f1e1b87f12461b429","Message":"chore(reports): rebind gate reports to 66d02e6\n\n本轮 pnpm check（exit 0，30 项）与治理回归 183/183 的报告产物，按仓纪律 §5 落在实现提交之后。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T06:52:39-07:00"},{"Sha1":"66d02e665eba56a132e0c68a0916fdbb54f535e1","Message":"feat(governance,client-fact): land U-31 / U-33 / U-34 consumer feedback\n\n真实上层接入（digital-employee-os 的 os-employment-projection）暴露的三条缺口，\n按回灌纪律「机器门禁 \u003e 手册条目 \u003e 口头经验」落到本仓。\n\nU-33（机器门禁）：check:pins 只读 package.json 的版本字符串，\n`\"@juhai/client-fact\": \"1.0.0-rc.2\"` 在它眼里是完美 exact pin，而 pnpm-lock.yaml 可以把同一个\n包解析到临时目录的 tarball（实测：会话 scratchpad 下的 file:/private/tmp/...tgz）。这比明着写\nfile: 依赖更危险——所有既有门禁全绿，只有别人 clone 后 pnpm install 失败才暴露。现把判据下沉到\nlockfile 的解析结果：@juhai/* 的 resolution tarball 必须落在 .npmrc 声明的 scope registry 下；\n非 registry 来源须在 platform-dependency-deviations.json 完整登记（五字段全填且未过期）；\n临时目录来源不可登记豁免。\n\n不误伤既有上层仓的三条：无 lockfile 不判定；lockfile 里没有 @juhai 外部条目（纯 workspace 消费）\n不判定、也不要求 .npmrc；只有真的存在外部解析才要求声明 registry。本仓自测 checked=0 通过，\n对 OS 仓实测 4 个解析来源全部合规。\n\nU-34 / U-31（包契约）：client-fact 此前没有 README，而 clients/README 却说\"实现与验收见包 README\"。\n新建并加进 files：\n- baseUrl 必须含 /api 前缀——本包用相对 URL 解析端点，少写 /api 不报错而是让所有回查 404，\n 消费者若把 404 当\"事实不存在\"就会判 UNTRUSTED_FACT、三次进死信；一个配置漏字母把整条摄入\n 变成全量死信。同时写明 404 / 不可达 / 未配置三种情况的不同处置。\n- 迁移模板只给表：策略无 TO 子句（对 PUBLIC 生效，system 角色同样被挡）且全文无 GRANT，\n 消费者若用低权限运行角色，照抄后对五张表没有任何权限。契约改为\"表 DDL 逐字照用，\n GRANT 与策略角色绑定由消费者按自身角色模型补齐\"。\n- 附 rc.3 的 STALE 行为变更与\"升级后应删除边界翻译\"。\n\n验证：新增 governance/test/check-pins.test.mjs 10 例（1 正向 + 6 负向判据 + 3 条不误伤）；\n治理回归 183/183；根 pnpm check exit 0（30 项）。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T06:52:14-07:00"}],"HeadCommit":{"Sha1":"727044996fde65045ab4ca56a060c0a32fa24c0a","Message":"chore(reports): rebind after merging main into the U-31/33/34 branch\n\n合并 main（6 个提交）后重跑根 pnpm check：exit 0，31 项。\nmodule-imports 报告的合并冲突按「报告是运行产物」取 main 版本后由本轮重新生成。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T19:21:58-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/35e44a1d97cad7b20404416743167de2aa15c277...727044996fde65045ab4ca56a060c0a32fa24c0a","Len":4}...
|
1789438964
|
Edit
Delete
|
|
29774
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/fact-read-http-pick
|
0
|
{"Commits":[{"Sha1":"176c33149 {"Commits":[{"Sha1":"176c33149337c2eb03a0cdfb11ed910f75700e0c","Message":"chore(reports): rebind gate reports to the fact-read pick\n\n本分支只从 codex/ms3-fact-read-http 摘取 3074b75（fact-read），不带该分支的\nscope / permission-invalidation / OpenBao 工作。九处冲突按同一规则解决：只保留\nfact-read，剔除 scope/permission 引用，证据数字与棘轮取 HEAD——本分支尚未跑过\nruntime/UI 验收，不得引用原分支 clean 3260390 的 779 tests / 97 项主线专项。\n\n本地验证：turbo typecheck --force 28/28（0 cached，非缓存命中）；\n@juhai/client-fact 13/13（含新增 reader.test.ts 10 例）；\n@juhai/module-fact 42/42（含新增 read-runtime.test.ts 4 例）；\n根 pnpm check exit 0（30 项，check:pins 36 处 / 34 个 package.json）。\n\n未跑：e2e/fact-read-http.test.ts（需真实 M5 库 + JWT 环境）与 runtime/UI 整轮——\nmainline 清单与地板已登记该套件 10 例，但本分支没有它的运行证据。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T18:58:31-07:00"},{"Sha1":"a45389784a7c399a941306eb1454ff456e97ebcb","Message":"docs(pf-15): record the evidence binding of the adversarial round\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T10:37:13-07:00"},{"Sha1":"96c108dc65e3ce9838b554cafdf428023be0fd25","Message":"chore(reports): bind the read-surface adversarial evidence @ 830291c\n\nMainline acceptance re-run on an isolated compose project\n(enterprise-platform-ms23-ci: its own Postgres with tmpfs data, Redis and\nRedpanda), on databases created fresh for this round, so no state from the\nimplementing session took part: fact-read-http 11, fact-persistence 11,\naudit-tamper 8, mainline-revocation-chaos 18 — validateMainlineReport now\nreturns no errors, which it did not before this round (the floor had been\nraised to require the read suite while the stored report still had three).\nRevocation stays partial with employment Scope explicit, p95 5043 ms.\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T10:37:02-07:00"},{"Sha1":"830291c1795695f979219d89c55b6b5455a6169e","Message":"fix(fact): refuse a bearer carried in the read surface URL\n\nAdversarial acceptance of the accepted-fact read candidate on an isolated\nstack found that `?access_token=\u003cjwt\u003e` alone returned 200: the shared\nAuthGuard accepts a query token so WS/SSE, which have no header, can\nauthenticate, and the new route inherited it. A consumer read has a header,\nand a bearer in the URL is copied into every proxy access log, so the route\nnow refuses the channel itself with 401 FACT_READ_URL_CREDENTIAL_REFUSED —\nincluding when a valid header accompanies it, since the token has already\nreached the log line. An empty `?access_token=` is not a credential.\n\nAlso records what the round could not fix in code: a consumer registration\nthat is deactivated answers 403 and is retryable, while one that is still\nactive but out of source-domain/type scope answers the same 404 as an\nunknown id, which the Inbox turns into a dead letter. Narrowing the scope of\na live consumer therefore dead-letters facts already in flight; the SDK\nREADME now states the deactivate-first rule. The read path writes no audit\nrecord, registered as CHG-004 material rather than opening a write path in a\nread-only runtime.\n\nRead suite 10 -\u003e 11 cases; MAINLINE_SUITES floor raised with it.\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T10:33:43-07:00"},{"Sha1":"78edacc6e101fa24876cac37302ffb425fd94597","Message":"feat(fact): authenticate accepted-fact reads for remote Inbox verification\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T20:14:01-07:00"}],"HeadCommit":{"Sha1":"176c33149337c2eb03a0cdfb11ed910f75700e0c","Message":"chore(reports): rebind gate reports to the fact-read pick\n\n本分支只从 codex/ms3-fact-read-http 摘取 3074b75（fact-read），不带该分支的\nscope / permission-invalidation / OpenBao 工作。九处冲突按同一规则解决：只保留\nfact-read，剔除 scope/permission 引用，证据数字与棘轮取 HEAD——本分支尚未跑过\nruntime/UI 验收，不得引用原分支 clean 3260390 的 779 tests / 97 项主线专项。\n\n本地验证：turbo typecheck --force 28/28（0 cached，非缓存命中）；\n@juhai/client-fact 13/13（含新增 reader.test.ts 10 例）；\n@juhai/module-fact 42/42（含新增 read-runtime.test.ts 4 例）；\n根 pnpm check exit 0（30 项，check:pins 36 处 / 34 个 package.json）。\n\n未跑：e2e/fact-read-http.test.ts（需真实 M5 库 + JWT 环境）与 runtime/UI 整轮——\nmainline 清单与地板已登记该套件 10 例，但本分支没有它的运行证据。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T18:58:31-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/036a308f27acf35a46f068c96fea7723ef74d05e...176c33149337c2eb03a0cdfb11ed910f75700e0c","Len":5}...
|
1789437578
|
Edit
Delete
|
|
29773
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/fact-read-http-pick
|
0
|
|
1789437578
|
Edit
Delete
|
|
29580
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/main
|
0
|
{"Commits":[{"Sha1":"35e44a1d9 {"Commits":[{"Sha1":"35e44a1d97cad7b20404416743167de2aa15c277","Message":"chore(reports): bind check:evidence baseline @ 5f0473b\n\n13 份已登记报告新鲜，5 条 warn（port-conformance、runtime/ui 验收、\nrevocation-sla、mainline-acceptance —— 都是需要真实库/容器才能重跑的，\n已在 evidence-scopes.json 写明 promoteBy），32 份未登记只计 info。\nmodule-imports 顺带在干净树重跑回绑（315 文件 0 违规）。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T10:37:16-07:00"},{"Sha1":"5f0473b6d7bf2089d3715c6f637320d6d96ac862","Message":"feat(governance): gate machine-evidence freshness by scope, not commit distance\n\n仓纪律 5 只要求报告绑 gitSha + worktreeDirty=false，没有任何检查关心那个 SHA\n相对 HEAD 是否已经过期；runtime 的 check:docs-truth 断言 N 也只比对「文档声明的\nSHA == 报告 provenance 的 SHA」。于是 CLAUDE.md 的「当前状态」可以逐字引用一份\n早被后续提交推翻的报告，而全链门禁一片绿。\n\n2026-09-14 实锤：main 上 stack-image-pins.latest.json 绑 7e279c5，其后\nstack/compose.yaml 已被改（ai-gateway 去掉空 DATABASE_URL），那份「12 镜像\n0 未锁」的结论形式上已失效，无人察觉。\n\n判据特意不用「落后几个提交」——实测那样会误报 38 条（runtime 验收落后 32 个\n提交，作用域却一行没动）。判据是：绑定 SHA → HEAD 之间有没有改到该报告自己\n覆盖的文件，作用域逐条登记在 governance/evidence-scopes.json。\n\n- severity 逐条登记：静态检查 error，需真实库/容器重跑的验收先 warn 并写\n promoteBy，覆盖面与严格度都按登记涨，不搞一刀切。\n- 脏绑报告在干净树上判红（说明脏绑被提交了），在脏树上只 warn（改到一半）。\n- 例外须带 reason/recordedAt/resolveBy（G-13），失效判 EXCEPTION_STALE。\n- 未登记的报告只计 SCOPE_UNDECLARED（info），不判红。\n\n10 个用例，含一个真实 git 仓集成用例钉住核心判据：作用域外连改三个提交仍绿，\n作用域内一改即红。放在根 check 链尾。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T10:36:33-07:00"}],"HeadCommit":{"Sha1":"35e44a1d97cad7b20404416743167de2aa15c277","Message":"chore(reports): bind check:evidence baseline @ 5f0473b\n\n13 份已登记报告新鲜，5 条 warn（port-conformance、runtime/ui 验收、\nrevocation-sla、mainline-acceptance —— 都是需要真实库/容器才能重跑的，\n已在 evidence-scopes.json 写明 promoteBy），32 份未登记只计 info。\nmodule-imports 顺带在干净树重跑回绑（315 文件 0 违规）。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T10:37:16-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/9807535a2b81bc14a35ffc306d7b1b0910f0f99f...35e44a1d97cad7b20404416743167de2aa15c277","Len":2}...
|
1789408337
|
Edit
Delete
|
|
29576
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/main
|
0
|
{"Commits":[{"Sha1":"9807535a2 {"Commits":[{"Sha1":"9807535a2b81bc14a35ffc306d7b1b0910f0f99f","Message":"chore(reports): bind the ai-gateway first-start evidence @ 51351b3\n\nliveliness / readiness 200（db: Not connected）、带 master key 的 /v1/models\n200 返回 platform-default-chat、无 key 401 / 错 key 400；/v1/chat/completions\n401 是供应商侧 replace-me，链路本身通。干净树绑 51351b3。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T10:10:43-07:00"},{"Sha1":"51351b3b0af2fc485c59fbddc4e1ade821c38f6a","Message":"fix(stack): stop injecting an empty DATABASE_URL into ai-gateway\n\nLiteLLM 见到空串即以 \"unsupported scheme '\u003cmissing scheme\u003e'\" 退出，而\n`DATABASE_URL: ${LITELLM_DATABASE_URL:-}` 在变量未设时注入的正是空串。\n这个定义从 2026-09-11 写下起就没被验证过——stack-up 记录里 ai-gateway\n一直是\"未起\"，所以缺陷一直没暴露。\n\n- compose.yaml：ai-gateway 不再声明 DATABASE_URL（无 DB 模式）。\n- overlays/ai-gateway-db.yaml：要 DB 模式改为显式叠加，且 LITELLM_DATABASE_URL\n 必填；注释写明不得指向 platform_aigateway_*（M7 权威库）。\n- stack/README：镜像行改为 digest 实况，litellm tag 已首次 pull 核实；\n 两处\"ai-gateway 未起\"改为 12 服务全跑。\n- CLAUDE.md stack 行补 2026-09-14 增量，只引机器证据。\n\n本轮只动 D-7 采纳组件，未动 M7 模块（仍 state=shape / blocked_by DEC-007）。\n供应商密钥仍是 replace-me，真实模型调用返回供应商 401，已在记录里写明。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T10:06:42-07:00"},{"Sha1":"92a5a9fdd1468c29a4aed90328034e02d39ac9d3","Message":"chore(reports): bind the B-7 resident-runtime evidence @ 092df0e\n\n七 profile 装载、内核与七个模块 /health 全 200、无凭证决策端点 401、经 Caddy\n入口 200；容器 restart unless-stopped、healthy。provenance 干净树绑 092df0e。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T10:10:32-07:00"},{"Sha1":"092df0eefc510ce4a0f4f39400f1193c66ad6d8f","Message":"feat(stack): run the platform runtime as a resident dev container (B-7)\n\n核实报告的 B-7 记「没有可被 HR / OS 调用的地址」：compose 的 runtime 一直是\n候选注释块，七个 platform_\u003cm\u003e_dev 库建了但零张表。本次启用该服务并把它跑起来。\n\n- compose.yaml：启用 runtime，镜像改 ${PLATFORM_RUNTIME_IMAGE:?}；补上原模板\n 缺的七个 DATABASE_URL_\u003cMODULE\u003e——模板写于一模块一库之前，只有内核三个 URL，\n 按原样启用四个 authority 模块会连不上自己的库。\n- overlays/dev.yaml：restart unless-stopped + 回环 53001。\n- provision/redis-dbs.json：登记逻辑库 14（七 profile 同进程只能独占一个）。\n- runbook §2 / stack README：dev 常驻形态与起停命令。\n\n供给与验收留在 docs/B-7-dev常驻运行时启动记录-2026-09-14.md；环境变量文件在\n仓外 .secrets/，不入 git。ai-gateway 容器因 ghcr 拉取经本机代理被 reset 未起，\n已在记录里写明，不冒充全量。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T09:51:41-07:00"},{"Sha1":"036a308f27acf35a46f068c96fea7723ef74d05e","Message":"feat(client-fact): U-29 判落后版本为 STALE，不再当毒消息\n\n真实消费者接入（digital-employee-os 的 os-employment-projection）暴露：applyOne 在\nversion \u003c= watermark 时抛 FactRejected(\"UNPROCESSED_VERSION_BEHIND_WATERMARK\")，\n而 handle 把任何 FactRejected 计入 attempts——至少一次投递下的**正常迟到重投**三次即\n被打进死信，与\"内容有毒\"共用一套判据；类型里写着的 \"STALE\" 返回值反而不可达。\n平台自己的主线 e2e 用合成宿主表，从不重放已过水位的事实，因此一直照不出这条。\n\n改为返回 \"STALE\"，并顺手删掉该 fact 可能留在 gap 缓冲里的副本：落后事实永远等不到\nprevious_version = 水位，留着只会把缓冲占满到 GAP_BUFFER_FULL，drain 循环也会空转。\n\n证据：runtime/test/e2e/mainline.test.ts 新增断言——清掉 processed 行后重放旧事实，\n连判三次 STALE、platform_client_fact_failure 无行、投影仍停在 11；该文件 6/6 通过\n（真实 M3/M5/M6 库 + Redpanda，MAINLINE_ENV=ms23）。治理负向回归 173/173、\ncheck:pins 34 个 package.json 全 exact pin、根 pnpm check 全链通过。\n\n发布列车三件套同步升到 1.0.0-rc.3，**尚未发布**：rc.2 已在 Registry 且不可覆盖，\n上层在 rc.3 发布前继续 pin rc.2 并在边界做错误码翻译。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T22:10:52-07:00"}],"HeadCommit":{"Sha1":"9807535a2b81bc14a35ffc306d7b1b0910f0f99f","Message":"chore(reports): bind the ai-gateway first-start evidence @ 51351b3\n\nliveliness / readiness 200（db: Not connected）、带 master key 的 /v1/models\n200 返回 platform-default-chat、无 key 401 / 错 key 400；/v1/chat/completions\n401 是供应商侧 replace-me，链路本身通。干净树绑 51351b3。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T10:10:43-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/d1ef5414093aa67ff4b8e2b7af8d13be86aed7ba...9807535a2b81bc14a35ffc306d7b1b0910f0f99f","Len":5}...
|
1789405885
|
Edit
Delete
|
|
29569
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/u31-u33-u34-consumer-feedback
|
0
|
{"Commits":[{"Sha1":"a76562a9c {"Commits":[{"Sha1":"a76562a9c4710a6763243f4f1e1b87f12461b429","Message":"chore(reports): rebind gate reports to 66d02e6\n\n本轮 pnpm check（exit 0，30 项）与治理回归 183/183 的报告产物，按仓纪律 §5 落在实现提交之后。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T06:52:39-07:00"},{"Sha1":"66d02e665eba56a132e0c68a0916fdbb54f535e1","Message":"feat(governance,client-fact): land U-31 / U-33 / U-34 consumer feedback\n\n真实上层接入（digital-employee-os 的 os-employment-projection）暴露的三条缺口，\n按回灌纪律「机器门禁 \u003e 手册条目 \u003e 口头经验」落到本仓。\n\nU-33（机器门禁）：check:pins 只读 package.json 的版本字符串，\n`\"@juhai/client-fact\": \"1.0.0-rc.2\"` 在它眼里是完美 exact pin，而 pnpm-lock.yaml 可以把同一个\n包解析到临时目录的 tarball（实测：会话 scratchpad 下的 file:/private/tmp/...tgz）。这比明着写\nfile: 依赖更危险——所有既有门禁全绿，只有别人 clone 后 pnpm install 失败才暴露。现把判据下沉到\nlockfile 的解析结果：@juhai/* 的 resolution tarball 必须落在 .npmrc 声明的 scope registry 下；\n非 registry 来源须在 platform-dependency-deviations.json 完整登记（五字段全填且未过期）；\n临时目录来源不可登记豁免。\n\n不误伤既有上层仓的三条：无 lockfile 不判定；lockfile 里没有 @juhai 外部条目（纯 workspace 消费）\n不判定、也不要求 .npmrc；只有真的存在外部解析才要求声明 registry。本仓自测 checked=0 通过，\n对 OS 仓实测 4 个解析来源全部合规。\n\nU-34 / U-31（包契约）：client-fact 此前没有 README，而 clients/README 却说\"实现与验收见包 README\"。\n新建并加进 files：\n- baseUrl 必须含 /api 前缀——本包用相对 URL 解析端点，少写 /api 不报错而是让所有回查 404，\n 消费者若把 404 当\"事实不存在\"就会判 UNTRUSTED_FACT、三次进死信；一个配置漏字母把整条摄入\n 变成全量死信。同时写明 404 / 不可达 / 未配置三种情况的不同处置。\n- 迁移模板只给表：策略无 TO 子句（对 PUBLIC 生效，system 角色同样被挡）且全文无 GRANT，\n 消费者若用低权限运行角色，照抄后对五张表没有任何权限。契约改为\"表 DDL 逐字照用，\n GRANT 与策略角色绑定由消费者按自身角色模型补齐\"。\n- 附 rc.3 的 STALE 行为变更与\"升级后应删除边界翻译\"。\n\n验证：新增 governance/test/check-pins.test.mjs 10 例（1 正向 + 6 负向判据 + 3 条不误伤）；\n治理回归 183/183；根 pnpm check exit 0（30 项）。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T06:52:14-07:00"},{"Sha1":"036a308f27acf35a46f068c96fea7723ef74d05e","Message":"feat(client-fact): U-29 判落后版本为 STALE，不再当毒消息\n\n真实消费者接入（digital-employee-os 的 os-employment-projection）暴露：applyOne 在\nversion \u003c= watermark 时抛 FactRejected(\"UNPROCESSED_VERSION_BEHIND_WATERMARK\")，\n而 handle 把任何 FactRejected 计入 attempts——至少一次投递下的**正常迟到重投**三次即\n被打进死信，与\"内容有毒\"共用一套判据；类型里写着的 \"STALE\" 返回值反而不可达。\n平台自己的主线 e2e 用合成宿主表，从不重放已过水位的事实，因此一直照不出这条。\n\n改为返回 \"STALE\"，并顺手删掉该 fact 可能留在 gap 缓冲里的副本：落后事实永远等不到\nprevious_version = 水位，留着只会把缓冲占满到 GAP_BUFFER_FULL，drain 循环也会空转。\n\n证据：runtime/test/e2e/mainline.test.ts 新增断言——清掉 processed 行后重放旧事实，\n连判三次 STALE、platform_client_fact_failure 无行、投影仍停在 11；该文件 6/6 通过\n（真实 M3/M5/M6 库 + Redpanda，MAINLINE_ENV=ms23）。治理负向回归 173/173、\ncheck:pins 34 个 package.json 全 exact pin、根 pnpm check 全链通过。\n\n发布列车三件套同步升到 1.0.0-rc.3，**尚未发布**：rc.2 已在 Registry 且不可覆盖，\n上层在 rc.3 发布前继续 pin rc.2 并在边界做错误码翻译。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T22:10:52-07:00"}],"HeadCommit":{"Sha1":"a76562a9c4710a6763243f4f1e1b87f12461b429","Message":"chore(reports): rebind gate reports to 66d02e6\n\n本轮 pnpm check（exit 0，30 项）与治理回归 183/183 的报告产物，按仓纪律 §5 落在实现提交之后。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T06:52:39-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/d1ef5414093aa67ff4b8e2b7af8d13be86aed7ba...a76562a9c4710a6763243f4f1e1b87f12461b429","Len":3}...
|
1789393970
|
Edit
Delete
|
|
29568
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/u31-u33-u34-consumer-feedback
|
0
|
|
1789393970
|
Edit
Delete
|
|
29433
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/main
|
0
|
{"Commits":[{"Sha1":"d1ef54140 {"Commits":[{"Sha1":"d1ef5414093aa67ff4b8e2b7af8d13be86aed7ba","Message":"feat(governance): G-12 local release bypass, used once for the rc.2 train\n\nGitHub Actions 因账户计费暂停（自 2026-09-13T05:35Z 起每次 run 在 0–3 秒未启动即\nfailure），发布链要求的「main 上成功 Platform CI run + runnerNormalized:\"ci\" 候选证据」\n无法满足。为解开下游 digital-employee-os 的依赖冻结（该仓任何 pnpm install 都因\n@juhai/client-fact 未发布而 404，连 CVE 都修不了），本轮以本地旁路发布了列车三件套\ncontracts / governance / client-fact 1.0.0-rc.2。\n\npublish-rc.mjs 新增显式命名的开关 PLATFORM_RELEASE_BYPASS_CI_EVIDENCE，\n**只解除 CI 身份检查这一条**：不可覆盖已发布版本、Registry integrity 自校验、\n仅 RC 版本、--ignore-scripts 全部保留；无开关时仍拒绝运行（已验证）。\n\n不伪装 CI：provenance.json 由本地生成并如实写 runner:\"local\" /\nreleaseChannel:\"local-bypass\" / reports:[]。prepare-package-release.mjs 的七道\nrequire 与 lib/provenance.mjs 的 runner 归一化（G-11 的 gitea-actions→other）均未改动。\n\n代价已登记在 docs/G-12本地旁路发布记录-2026-09-13.md：这三个包无任何阶段门证据，\n且版本号被本地包永久占用，计费恢复后只能由 CI 发下一个 RC；旁路开关应在那时删除。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T22:02:47-07:00"}],"HeadCommit":{"Sha1":"d1ef5414093aa67ff4b8e2b7af8d13be86aed7ba","Message":"feat(governance): G-12 local release bypass, used once for the rc.2 train\n\nGitHub Actions 因账户计费暂停（自 2026-09-13T05:35Z 起每次 run 在 0–3 秒未启动即\nfailure），发布链要求的「main 上成功 Platform CI run + runnerNormalized:\"ci\" 候选证据」\n无法满足。为解开下游 digital-employee-os 的依赖冻结（该仓任何 pnpm install 都因\n@juhai/client-fact 未发布而 404，连 CVE 都修不了），本轮以本地旁路发布了列车三件套\ncontracts / governance / client-fact 1.0.0-rc.2。\n\npublish-rc.mjs 新增显式命名的开关 PLATFORM_RELEASE_BYPASS_CI_EVIDENCE，\n**只解除 CI 身份检查这一条**：不可覆盖已发布版本、Registry integrity 自校验、\n仅 RC 版本、--ignore-scripts 全部保留；无开关时仍拒绝运行（已验证）。\n\n不伪装 CI：provenance.json 由本地生成并如实写 runner:\"local\" /\nreleaseChannel:\"local-bypass\" / reports:[]。prepare-package-release.mjs 的七道\nrequire 与 lib/provenance.mjs 的 runner 归一化（G-11 的 gitea-actions→other）均未改动。\n\n代价已登记在 docs/G-12本地旁路发布记录-2026-09-13.md：这三个包无任何阶段门证据，\n且版本号被本地包永久占用，计费恢复后只能由 CI 发下一个 RC；旁路开关应在那时删除。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T22:02:47-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/6d3900abae6fc251b39e4bebcaa74190e25774bb...d1ef5414093aa67ff4b8e2b7af8d13be86aed7ba","Len":1}...
|
1789362252
|
Edit
Delete
|
|
29430
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/main
|
0
|
{"Commits":[{"Sha1":"6d3900aba {"Commits":[{"Sha1":"6d3900abae6fc251b39e4bebcaa74190e25774bb","Message":"docs(ci): correct the claim that switching channels needs a DEC revision\n\nThe README (and the plan) said changing the release gate to accept Gitea\nevidence \"extends what DEC-031 accepts as CI evidence, needs a CHG\". That\nis wrong. DEC-031's approval record, its accompanying clauses, DEC-010's\ncondition and design §13 all state capabilities -- clean tag, CI green,\nthree-tier evidence on one SHA, required checks, enforcement over admins,\nCODEOWNERS, linear history, runner=ci -- and never name a CI vendor. The\nonly GitHub mention is §23 listing .github/ under SRE ownership.\n\nSo switching the primary channel is an implementation and repository\nconfiguration change plus a platform-owner call on which channel is\nprimary; no DEC revision, no CHG. Evidence, three options, a file-level\nchange list (CI-1..6) and four items that must be verified first (V-2:\nwhether Gitea can enforce protection over admins) are in\n基础设施/docs/CI验证通道口径裁决材料-2026-09-13.md.\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T21:42:24-07:00"}],"HeadCommit":{"Sha1":"6d3900abae6fc251b39e4bebcaa74190e25774bb","Message":"docs(ci): correct the claim that switching channels needs a DEC revision\n\nThe README (and the plan) said changing the release gate to accept Gitea\nevidence \"extends what DEC-031 accepts as CI evidence, needs a CHG\". That\nis wrong. DEC-031's approval record, its accompanying clauses, DEC-010's\ncondition and design §13 all state capabilities -- clean tag, CI green,\nthree-tier evidence on one SHA, required checks, enforcement over admins,\nCODEOWNERS, linear history, runner=ci -- and never name a CI vendor. The\nonly GitHub mention is §23 listing .github/ under SRE ownership.\n\nSo switching the primary channel is an implementation and repository\nconfiguration change plus a platform-owner call on which channel is\nprimary; no DEC revision, no CHG. Evidence, three options, a file-level\nchange list (CI-1..6) and four items that must be verified first (V-2:\nwhether Gitea can enforce protection over admins) are in\n基础设施/docs/CI验证通道口径裁决材料-2026-09-13.md.\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T21:42:24-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/eb3cf2c38148bfc0dac9ab1e8cdd5733ae8aa13f...6d3900abae6fc251b39e4bebcaa74190e25774bb","Len":1}...
|
1789360955
|
Edit
Delete
|
|
29429
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/main
|
0
|
{"Commits":[{"Sha1":"eb3cf2c38 {"Commits":[{"Sha1":"eb3cf2c38148bfc0dac9ab1e8cdd5733ae8aa13f","Message":"chore(reports): rebind to 64914b9 and refresh the foundation audit snapshot\n\nThe audit snapshot that the MS-4 exit condition cites had not been rerun\nsince 2026-09-05 -- before the decision meeting. It still reported 2 DECs\napproved and 30 pending against today's 32/0, and still raised\nFACT_DECISIONS_PENDING_OR_UNKNOWN, which that meeting resolved. Refreshed\nhere and in 基础/reports/基础目录统一审计.latest.json (the source copy,\noutside version control).\n\nStatus stays BLOCKED. Seven blockers persist, INVENTORY_INVALID is new\n(企业 IdP lacks 开发计划.md). Each is now attributed in plan deviation #32,\nwhich also records that the cited \"19/19\" denominator does not exist in\nthe report at all: it is 25 directories / 21 formal / 4 unregistered\ncandidates, with 20 of 21 formal entries document-complete.\n\nGate reports rebound to 64914b9 on a clean tree; `pnpm check` exits 0.\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T21:26:55-07:00"},{"Sha1":"64914b92b50df251607e0e4c3ece6b91a90d747e","Message":"feat(governance): require migration-DEC exceptions to carry their own exit\n\nG-13. The exception file silences DECISION_HEADER_MISSING -- the gate\nbehind repo discipline 3 (\"authoritative-table migrations must cite an\napproved DEC\"). Nothing checked that an exception says why it exists, when\nit should go, or who recorded it, so a one-line entry could mute a real\nviolation and leave no trace. That is a back door, not an exception.\n\nEXCEPTION_INCOMPLETE now fails an exception missing any of migrations /\nreason / resolveBy / recordedAt, whitespace-only values included. The two\nreal entries (24 identity migrations awaiting PF-07 phase 2) already carry\nall four, so the live report is unchanged: 39 migrations, 0 violations,\n24 exceptions applied.\n\nEXCEPTION_STALE already forced removal once a migration gained a header;\nthe pair now covers both ends -- an exception cannot outlive its condition\nand cannot exist without stating one.\n\nLocal: governance 171 -\u003e 173, root `pnpm check` exit 0.\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T21:25:08-07:00"},{"Sha1":"cb504a5cbfc0795f42410402cc6fdccc17159f7a","Message":"docs(contracts): register the G-12 linter change against the import source\n\nPF-04 phase 1 requires every divergence from platform-contracts/ to be\nrecorded in SOURCE.md, and corrects what the 2026-09-10 sync note said.\nThat note filed all six PLATFORM_PROJECT_UNREGISTERED findings under\n\"waiting for CHG-001\"; two of them were scan false positives that no\nchange request could ever clear. Four real candidate platforms remain.\n\nThe source directory itself stays untouched per phase 1, so the formal\ncheck behind 基础/scripts/audit-foundation.mjs still reports six until\nphase 2 removes the old copy.\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T21:23:44-07:00"},{"Sha1":"7adc31e54817d8d9b9f35a2fac25719aba53cbac","Message":"chore(reports): rebind gate reports to ac3683d; fixtures now passed\n\nRegenerated on a clean tree; `pnpm check` exits 0 with 28/28 turbo tasks.\n\nfixtures moves from partial to passed: 8 suites / 89 cases / 0 failures /\n0 unavailable. The previous copy was produced in a detached worktree with\nno workspace ancestor, so the dec-039-party-model suite (workspaceRelative,\n25 cases) reported unavailable; in the main worktree it runs and passes.\nThe --allow-unavailable-suite flag stays -- a standalone CI clone still\ncannot see it.\n\nrelease-manifest stays partial on the same four deliverables.\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T21:22:40-07:00"},{"Sha1":"ac3683d122be41adf616c6a2223040a2578283f0","Message":"fix(contracts): stop counting 基础/ tooling directories as unregistered platforms\n\nG-12. The platform-directory scan excluded only `scripts`, so `基础/reports`\nand `基础/tests` -- that directory's own tooling and output folders, added\nlater -- were reported as PLATFORM_PROJECT_UNREGISTERED. Two false\npositives sat mixed in with the four genuinely unregistered candidate\nplatforms, and they were invisible in CI because the whole check is\nskipped in a standalone clone (needsWorkspace).\n\nThey also masked a second defect. `E2 evidence files must contain a passed\nreport` pinned itself to enterprise-idp, whose evidence_level dropped to E0\nwhen the IdP source moved into identity/; the evidence check only runs at\nE2, so the injected fault could never be detected and the case failed on\nHEAD for anyone with the workspace checked out. The case now sets\nevidence_level itself instead of depending on catalog state.\n\nThe four real offenders (企业搜索 / 外部连接器 / 开发者自助 / 数据治理与隐私,\nall candidate-not-registered pending CHG) still report, and a new case\nasserts both halves: tooling directories must not report, real ones must.\n\nLocal: contracts check:local 100/101 -\u003e 101/101 (exit 0), governance\n171/171, root `pnpm check` exit 0 with 28/28 turbo tasks.\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T21:22:10-07:00"}],"HeadCommit":{"Sha1":"eb3cf2c38148bfc0dac9ab1e8cdd5733ae8aa13f","Message":"chore(reports): rebind to 64914b9 and refresh the foundation audit snapshot\n\nThe audit snapshot that the MS-4 exit condition cites had not been rerun\nsince 2026-09-05 -- before the decision meeting. It still reported 2 DECs\napproved and 30 pending against today's 32/0, and still raised\nFACT_DECISIONS_PENDING_OR_UNKNOWN, which that meeting resolved. Refreshed\nhere and in 基础/reports/基础目录统一审计.latest.json (the source copy,\noutside version control).\n\nStatus stays BLOCKED. Seven blockers persist, INVENTORY_INVALID is new\n(企业 IdP lacks 开发计划.md). Each is now attributed in plan deviation #32,\nwhich also records that the cited \"19/19\" denominator does not exist in\nthe report at all: it is 25 directories / 21 formal / 4 unregistered\ncandidates, with 20 of 21 formal entries document-complete.\n\nGate reports rebound to 64914b9 on a clean tree; `pnpm check` exits 0.\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T21:26:55-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/3308542265e6a301126e1135310b11fbcddd5c5d...eb3cf2c38148bfc0dac9ab1e8cdd5733ae8aa13f","Len":8}...
|
1789360315
|
Edit
Delete
|
|
29424
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/ms4-clients-image-publish
|
0
|
{"Commits":[{"Sha1":"6696c8475 {"Commits":[{"Sha1":"6696c84752f17514ebec69e1788bcb93ee445db6","Message":"fix(governance): 端口一致性覆盖地板登记 client-audit 套件（34 例），测试夹具总数改由 PORT_SUITES 推导\n\ncheck:port-conformance 对 suite 数量与总数逐一核对，新增 S-6 套件必须同步登记，否则 suite coverage/count mismatch。\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T20:58:20-07:00"},{"Sha1":"edcb7a6da44583a9420636855c513feceb0d9dbe","Message":"feat(clients,governance): client-audit / client-ai 与镜像发布通道（MS-4 Manifest 缺项收口）\n\n- @juhai/client-audit@1.0.0-rc.0（CL-6）：内核 AuditSinkPort → audit-append.v1 候选契约（POST /v1/audit/events 批量）；\n 同步投递审计失败即写链失败；缓冲投递 = 宿主持久缓冲 + 稳定 event_id / digest 至少一次（C10.02）；敏感 details 本地即拒；\n 单测 14 例；S-6 夹具对 stub server 四画像（sink / rejecting / 503 / down）同步 + 缓冲 34 例（runtime/test/port/client-audit.test.ts）\n- @juhai/client-ai@1.0.0-rc.0（CL-7）：ai-route.v1 候选契约 SDK（POST /v1/ai/route 路由 → 网关端点 + secret:// 凭据引用；\n POST /v1/ai/usage usage_id 幂等记账，有界重试）；未配置 / 传输失败一律拒绝，无静默回退；单测 14 例含 stub server 五画像\n- governance/publish-image.mjs（pnpm image:publish）：clean head 构建的镜像推 registry，registry manifest digest 取自 push 输出并与\n RepoDigests 互证后写回 reports/image-digest.json（published / registryRef / registryDigest）；不一致 / 取不到 / 源码不匹配即失败不改报告\n- governance/prepare-image-release.mjs：镜像发布门（runtime-v\u003csemver\u003e clean tag + 同源成功 CI + 候选 eligible + Required Check）\n- .github/workflows/publish-image.yml：手动通道 build → push → syft SBOM → cosign sign+verify → release:manifest → artifact（不改 main）\n- 治理测试 +17（publish-image.test.mjs）；runbook §8 / staging 说明 §5 / owner-matrix / governance README / clients README 同步\n\nRelease Manifest：client-* 缺项 4 → 2（scope / credential 分别在 PR #32 / #42）；registryDigest / signature 待 Secret 配置后 dispatch。\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T20:54:23-07:00"}],"HeadCommit":{"Sha1":"6696c84752f17514ebec69e1788bcb93ee445db6","Message":"fix(governance): 端口一致性覆盖地板登记 client-audit 套件（34 例），测试夹具总数改由 PORT_SUITES 推导\n\ncheck:port-conformance 对 suite 数量与总数逐一核对，新增 S-6 套件必须同步登记，否则 suite coverage/count mismatch。\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T20:58:20-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/3308542265e6a301126e1135310b11fbcddd5c5d...6696c84752f17514ebec69e1788bcb93ee445db6","Len":2}...
|
1789358504
|
Edit
Delete
|
|
29423
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/ms4-clients-image-publish
|
0
|
|
1789358504
|
Edit
Delete
|
|
29362
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/identity-tenant-facts
|
0
|
{"Commits":[{"Sha1":"4a6c1647e {"Commits":[{"Sha1":"4a6c1647e2aea58f705faa6875075a3cb15246c0","Message":"docs(identity): record combined baseline PR and CI account blocker\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T01:28:03-07:00"}],"HeadCommit":{"Sha1":"4a6c1647e2aea58f705faa6875075a3cb15246c0","Message":"docs(identity): record combined baseline PR and CI account blocker\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T01:28:03-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/a670fb6bf3ae8cd5319e424b80fc947965fc358f...4a6c1647e2aea58f705faa6875075a3cb15246c0","Len":1}...
|
1789288090
|
Edit
Delete
|
|
29361
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/identity-tenant-facts
|
0
|
{"Commits":[{"Sha1":"a670fb6bf {"Commits":[{"Sha1":"a670fb6bf3ae8cd5319e424b80fc947965fc358f","Message":"chore(reports): preserve combined identity acceptance and restore evidence\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T01:24:32-07:00"}],"HeadCommit":{"Sha1":"a670fb6bf3ae8cd5319e424b80fc947965fc358f","Message":"chore(reports): preserve combined identity acceptance and restore evidence\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T01:24:32-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/76bcfd024d15df2882b9f878eccb5d284c732b5b...a670fb6bf3ae8cd5319e424b80fc947965fc358f","Len":1}...
|
1789287879
|
Edit
Delete
|
|
29360
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/identity-tenant-facts
|
0
|
{"Commits":[{"Sha1":"76bcfd024 {"Commits":[{"Sha1":"76bcfd024d15df2882b9f878eccb5d284c732b5b","Message":"fix(governance): bind restore sources to the owned PostgreSQL instance\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T01:00:36-07:00"},{"Sha1":"d1071045de4a4fbb11edb76dc7a53432d0ea4550","Message":"merge(identity): combine trusted tenant resolution with published machine and fact integration\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T00:46:23-07:00"}],"HeadCommit":{"Sha1":"76bcfd024d15df2882b9f878eccb5d284c732b5b","Message":"fix(governance): bind restore sources to the owned PostgreSQL instance\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T01:00:36-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/5997f453389574c04ccb4998813243f8a2daf8ff...76bcfd024d15df2882b9f878eccb5d284c732b5b","Len":2}...
|
1789287838
|
Edit
Delete
|
|
29359
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/identity-tenant-facts
|
0
|
|
1789287838
|
Edit
Delete
|
|
29358
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/platform-ops-candidate
|
0
|
{"Commits":[{"Sha1":"0e9a0d98e {"Commits":[{"Sha1":"0e9a0d98eb8d36f9d8ad0611e0159dd31f8484a2","Message":"docs(contracts): 落实 §5.5 拍板 ①—⑤ 与 CHG-005 归属到 platform-ops 候选\n\n平台负责人 2026-09-13 拍板（M5 接口设计 §5.5）：\n① 回执 = M6 审计事件 + 投影，查询需求超出（基座 opsView / 跨操作聚合）时再立 DEC 建表\n② 人员令牌新 scope platform:ops，不复用 idp:manage\n③ /v1/facts/replay 与 /v1/credential-leases/{leaseId}/revoke 保留路径，候选阶段加信封字段，与 ops 定义同一处理器与回执\n④ break-glass 24 h 内以同一 OperationReceipt 形状补记 M6，actor 标 break_glass，SRE 值班负责\n⑤ permissions.json 新增 owner_domain=platform，Owner = 平台负责人\n正式登记新开 CHG-005（材料 doc/decisions/CHG-005-材料）。\n\n- openapi / definitions / catalog-delta：blocked_by 改指 CHG-005 + DEC-019 / 020—023，新增 decisions 字段记录拍板，\n x-enterprise-auth 改 platform:ops 定稿，新增 x-enterprise-break-glass，delta target 改 CHG-005 并写明正式 Linter 对资源的校验范围与种子应用路径\n- candidates/README：待拍板 → 已拍板\n- 夹具仍 26 例 0 失败（报告未随提交）\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T01:00:14-07:00"}],"HeadCommit":{"Sha1":"0e9a0d98eb8d36f9d8ad0611e0159dd31f8484a2","Message":"docs(contracts): 落实 §5.5 拍板 ①—⑤ 与 CHG-005 归属到 platform-ops 候选\n\n平台负责人 2026-09-13 拍板（M5 接口设计 §5.5）：\n① 回执 = M6 审计事件 + 投影，查询需求超出（基座 opsView / 跨操作聚合）时再立 DEC 建表\n② 人员令牌新 scope platform:ops，不复用 idp:manage\n③ /v1/facts/replay 与 /v1/credential-leases/{leaseId}/revoke 保留路径，候选阶段加信封字段，与 ops 定义同一处理器与回执\n④ break-glass 24 h 内以同一 OperationReceipt 形状补记 M6，actor 标 break_glass，SRE 值班负责\n⑤ permissions.json 新增 owner_domain=platform，Owner = 平台负责人\n正式登记新开 CHG-005（材料 doc/decisions/CHG-005-材料）。\n\n- openapi / definitions / catalog-delta：blocked_by 改指 CHG-005 + DEC-019 / 020—023，新增 decisions 字段记录拍板，\n x-enterprise-auth 改 platform:ops 定稿，新增 x-enterprise-break-glass，delta target 改 CHG-005 并写明正式 Linter 对资源的校验范围与种子应用路径\n- candidates/README：待拍板 → 已拍板\n- 夹具仍 26 例 0 失败（报告未随提交）\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T01:00:14-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/e23f9899f531f243d756be685c07c9fc8ee01ad0...0e9a0d98eb8d36f9d8ad0611e0159dd31f8484a2","Len":1}...
|
1789287105
|
Edit
Delete
|
|
29357
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/codex/ms3-credential-m1-http
|
0
|
{"Commits":[{"Sha1":"338952fec {"Commits":[{"Sha1":"338952fec9288595254d67eac86b54f903291b9d","Message":"chore(reports): retain credential runtime and clean static acceptance evidence\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T01:01:36-07:00"},{"Sha1":"1412c8626207df35b4679fb1d199512588c1d4f0","Message":"docs(ms3): archive live credential authority evidence and ratchet verified coverage\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T00:58:56-07:00"}],"HeadCommit":{"Sha1":"338952fec9288595254d67eac86b54f903291b9d","Message":"chore(reports): retain credential runtime and clean static acceptance evidence\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T01:01:36-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/ff867a86d0cce7b8a6a1092f8ea85d8d55303e77...338952fec9288595254d67eac86b54f903291b9d","Len":2}...
|
1789286539
|
Edit
Delete
|
|
29356
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/platform-ops-candidate
|
0
|
{"Commits":[{"Sha1":"e23f9899f {"Commits":[{"Sha1":"e23f9899f531f243d756be685c07c9fc8ee01ad0","Message":"feat(contracts): 平台运维命令 API 候选（X09 落地，OPS-1 材料，pending-dec）\n\nM5 接口设计 §5 的第一件材料：把\"HTTP 管理面能否存在\"的结论落成候选契约与夹具，全部 pending-dec，\n不进 Catalog、不进发布包、不改 contracts/catalogs/，待 §5.5 ①—⑤ 拍板与 CHG 编号。\n\n- contracts/candidates/contracts/platform-ops-api.v1.openapi.json：OpenAPI 3.1 候选——\n GET /api/platform/ops/definitions（发现）、POST /api/platform/ops/{definitionId}（提交：dry_run 缺省 true，\n Idempotency-Key 必填，高风险需 plan_digest + approval_id）、GET /api/platform/ops/receipts/{operationId}、\n POST .../approve（审批人 ≠ 请求人，绑 plan_digest 与到期）；写操作 x-enterprise-fail-closed，401/403/404/409/503 语义；\n 鉴权复用 M1 IdpManagementGuard 三重校验（scope 待 §5.5 ②）；回执载体 = M6 审计事件 + 投影，不建权威表（§5.5 ①）\n- platform-ops-definitions.v1.json：五个 OperationDefinition（fact registrations-apply / replay、permission invalidation /\n cache-rebuild、credential lease-revoke），input_schema 全部关闭未知字段，job_kind 对齐 runtime/modules.json jobs\n- platform-ops-api.v1.catalog-delta.json：permissions.json 资源 platform.operations（8 动作）与 M6 动作 / 服务登记种子的增量候选，\n 字段对齐 audit-append-planner.ts AuditActionRegistration；随 CHG 应用\n- schemas/platform-ops/*（6 份）与 examples/platform-ops/*（2 份回执）\n- governance/fixtures/platform-ops.suite.json + fixtures/rules/platform-ops.rules.mjs：通用格式夹具 26 例（正 9 / 反 17），\n 规则模块零依赖，覆盖 Idempotency-Key、未知操作、shape 模块不可执行、审批 / plan_digest 门、批量上限、任意字段（sql）拒绝、\n 审批人分离、定义与 modules.json / Catalog 增量一致、写操作失败关闭；已加入根 check:fixtures，不依赖模块构建\n- 本机：node governance/check-fixtures.mjs --suite governance/fixtures/platform-ops.suite.json → 26 例 0 失败；\n node --test governance/test → 164 例 0 失败（报告未随本提交）\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T00:47:25-07:00"}],"HeadCommit":{"Sha1":"e23f9899f531f243d756be685c07c9fc8ee01ad0","Message":"feat(contracts): 平台运维命令 API 候选（X09 落地，OPS-1 材料，pending-dec）\n\nM5 接口设计 §5 的第一件材料：把\"HTTP 管理面能否存在\"的结论落成候选契约与夹具，全部 pending-dec，\n不进 Catalog、不进发布包、不改 contracts/catalogs/，待 §5.5 ①—⑤ 拍板与 CHG 编号。\n\n- contracts/candidates/contracts/platform-ops-api.v1.openapi.json：OpenAPI 3.1 候选——\n GET /api/platform/ops/definitions（发现）、POST /api/platform/ops/{definitionId}（提交：dry_run 缺省 true，\n Idempotency-Key 必填，高风险需 plan_digest + approval_id）、GET /api/platform/ops/receipts/{operationId}、\n POST .../approve（审批人 ≠ 请求人，绑 plan_digest 与到期）；写操作 x-enterprise-fail-closed，401/403/404/409/503 语义；\n 鉴权复用 M1 IdpManagementGuard 三重校验（scope 待 §5.5 ②）；回执载体 = M6 审计事件 + 投影，不建权威表（§5.5 ①）\n- platform-ops-definitions.v1.json：五个 OperationDefinition（fact registrations-apply / replay、permission invalidation /\n cache-rebuild、credential lease-revoke），input_schema 全部关闭未知字段，job_kind 对齐 runtime/modules.json jobs\n- platform-ops-api.v1.catalog-delta.json：permissions.json 资源 platform.operations（8 动作）与 M6 动作 / 服务登记种子的增量候选，\n 字段对齐 audit-append-planner.ts AuditActionRegistration；随 CHG 应用\n- schemas/platform-ops/*（6 份）与 examples/platform-ops/*（2 份回执）\n- governance/fixtures/platform-ops.suite.json + fixtures/rules/platform-ops.rules.mjs：通用格式夹具 26 例（正 9 / 反 17），\n 规则模块零依赖，覆盖 Idempotency-Key、未知操作、shape 模块不可执行、审批 / plan_digest 门、批量上限、任意字段（sql）拒绝、\n 审批人分离、定义与 modules.json / Catalog 增量一致、写操作失败关闭；已加入根 check:fixtures，不依赖模块构建\n- 本机：node governance/check-fixtures.mjs --suite governance/fixtures/platform-ops.suite.json → 26 例 0 失败；\n node --test governance/test → 164 例 0 失败（报告未随本提交）\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T00:47:25-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/3308542265e6a301126e1135310b11fbcddd5c5d...e23f9899f531f243d756be685c07c9fc8ee01ad0","Len":1}...
|
1789285872
|
Edit
Delete
|
|
29355
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/platform-ops-candidate
|
0
|
|
1789285872
|
Edit
Delete
|
|
29354
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/codex/ms3-credential-m1-http
|
0
|
{"Commits":[{"Sha1":"ff867a86d {"Commits":[{"Sha1":"ff867a86d0cce7b8a6a1092f8ea85d8d55303e77","Message":"test(identity): assert canonical tenant while retaining azp binding\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T00:46:27-07:00"}],"HeadCommit":{"Sha1":"ff867a86d0cce7b8a6a1092f8ea85d8d55303e77","Message":"test(identity): assert canonical tenant while retaining azp binding\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T00:46:27-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/b801444cdf8c379b80be07f7a55f36e2c847502f...ff867a86d0cce7b8a6a1092f8ea85d8d55303e77","Len":1}...
|
1789285689
|
Edit
Delete
|
|
29353
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/codex/ms3-credential-m1-http
|
0
|
{"Commits":[{"Sha1":"b801444cd {"Commits":[{"Sha1":"b801444cdf8c379b80be07f7a55f36e2c847502f","Message":"feat(credential): bind reference leases to live canonical M1 authority and add SDK\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T00:43:31-07:00"},{"Sha1":"e007d348c16a2d13280a7ed34c7eba98d2874a98","Message":"merge: integrate canonical M1 tokens and tighten machine consumer profile\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T22:46:00-07:00"}],"HeadCommit":{"Sha1":"b801444cdf8c379b80be07f7a55f36e2c847502f","Message":"feat(credential): bind reference leases to live canonical M1 authority and add SDK\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T00:43:31-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/6aba39cef2c86f8f2813ba8cd58279c13e2ea1cc...b801444cdf8c379b80be07f7a55f36e2c847502f","Len":2}...
|
1789285517
|
Edit
Delete
|
|
29352
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/codex/ms3-credential-m1-http
|
0
|
|
1789285517
|
Edit
Delete
|
|
29351
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/identity-tenant-resolution
|
0
|
{"Commits":[{"Sha1":"5997f4533 {"Commits":[{"Sha1":"5997f453389574c04ccb4998813243f8a2daf8ff","Message":"docs(identity): record resolution PR delivery and CI account blocker\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T00:35:21-07:00"}],"HeadCommit":{"Sha1":"5997f453389574c04ccb4998813243f8a2daf8ff","Message":"docs(identity): record resolution PR delivery and CI account blocker\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T00:35:21-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/2f0b7bbac2347d94605fd3200cd6f88bcd158f42...5997f453389574c04ccb4998813243f8a2daf8ff","Len":1}...
|
1789284928
|
Edit
Delete
|
|
29350
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/identity-tenant-resolution
|
0
|
{"Commits":[{"Sha1":"2f0b7bbac {"Commits":[{"Sha1":"2f0b7bbac2347d94605fd3200cd6f88bcd158f42","Message":"docs(identity): record clean tenant resolution acceptance and sleep diagnostics\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T00:33:12-07:00"},{"Sha1":"00d6821ddbf69773ac9ee83953d617214f74da03","Message":"test(identity): inject public mapping SDK from acceptance hosts\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T22:46:04-07:00"},{"Sha1":"4e09963395e938a68ed6d93c41b8aeac69c88e2b","Message":"feat(identity): expose trusted canonical tenant resolution API and SDK\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T22:34:40-07:00"}],"HeadCommit":{"Sha1":"2f0b7bbac2347d94605fd3200cd6f88bcd158f42","Message":"docs(identity): record clean tenant resolution acceptance and sleep diagnostics\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-13T00:33:12-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/584bdadc5a5eaf4e4be3b58e3cea2b8056efcb5f...2f0b7bbac2347d94605fd3200cd6f88bcd158f42","Len":3}...
|
1789284799
|
Edit
Delete
|
|
29349
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/feat/identity-tenant-resolution
|
0
|
|
1789284799
|
Edit
Delete
|
|
29346
|
5
|
5
|
5
|
116
|
0
|
0
|
refs/heads/codex/ms3-machine-integration
|
0
|
{"Commits":[{"Sha1":"6aba39cef {"Commits":[{"Sha1":"6aba39cef2c86f8f2813ba8cd58279c13e2ea1cc","Message":"chore(reports): record clean integration governance checks\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T22:34:52-07:00"},{"Sha1":"ee3383abd296b824ff19d443e801ff0712b22897","Message":"chore(reports): preserve integrated acceptance and current test inventory\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T22:34:06-07:00"},{"Sha1":"28802f08d924c080322f68a1615e5a940a2eba83","Message":"docs: record integrated machine auth acceptance and ratchet runtime floor\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T22:32:41-07:00"},{"Sha1":"1beabc52febcd2305d81052968fcbe1b6f36352a","Message":"test(mainline): isolate segments and retain startup failure diagnostics\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T22:23:51-07:00"},{"Sha1":"74fa9587f3f64b912329557b6eddc8f9ee389d40","Message":"feat(identity): verify machine tokens with live M1 introspection\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T21:58:35-07:00"}],"HeadCommit":{"Sha1":"6aba39cef2c86f8f2813ba8cd58279c13e2ea1cc","Message":"chore(reports): record clean integration governance checks\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T22:34:52-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/9fac08718dc46f11c9678e96764f9144d9a461f1...6aba39cef2c86f8f2813ba8cd58279c13e2ea1cc","Len":7}...
|
1789277703
|
Edit
Delete
|