| content |
{"Commits":[{"Sha1":"727044996 {"Commits":[{"Sha1":"727044996fde65045ab4ca56a060c0a32fa24c0a","Message":"chore(reports): rebind after merging main into the U-31/33/34 branch\n\n合并 main（6 个提交）后重跑根 pnpm check：exit 0，31 项。\nmodule-imports 报告的合并冲突按「报告是运行产物」取 main 版本后由本轮重新生成。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T19:21:58-07:00"},{"Sha1":"9a7231221ba190a84f91f1f2771017927d991328","Message":"Merge branch 'main' into feat/u31-u33-u34-consumer-feedback\n\n# Conflicts:\n#\treports/module-imports.latest.json\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T19:21:34-07:00"},{"Sha1":"35e44a1d97cad7b20404416743167de2aa15c277","Message":"chore(reports): bind check:evidence baseline @ 5f0473b\n\n13 份已登记报告新鲜，5 条 warn（port-conformance、runtime/ui 验收、\nrevocation-sla、mainline-acceptance —— 都是需要真实库/容器才能重跑的，\n已在 evidence-scopes.json 写明 promoteBy），32 份未登记只计 info。\nmodule-imports 顺带在干净树重跑回绑（315 文件 0 违规）。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T10:37:16-07:00"},{"Sha1":"5f0473b6d7bf2089d3715c6f637320d6d96ac862","Message":"feat(governance): gate machine-evidence freshness by scope, not commit distance\n\n仓纪律 5 只要求报告绑 gitSha + worktreeDirty=false，没有任何检查关心那个 SHA\n相对 HEAD 是否已经过期；runtime 的 check:docs-truth 断言 N 也只比对「文档声明的\nSHA == 报告 provenance 的 SHA」。于是 CLAUDE.md 的「当前状态」可以逐字引用一份\n早被后续提交推翻的报告，而全链门禁一片绿。\n\n2026-09-14 实锤：main 上 stack-image-pins.latest.json 绑 7e279c5，其后\nstack/compose.yaml 已被改（ai-gateway 去掉空 DATABASE_URL），那份「12 镜像\n0 未锁」的结论形式上已失效，无人察觉。\n\n判据特意不用「落后几个提交」——实测那样会误报 38 条（runtime 验收落后 32 个\n提交，作用域却一行没动）。判据是：绑定 SHA → HEAD 之间有没有改到该报告自己\n覆盖的文件，作用域逐条登记在 governance/evidence-scopes.json。\n\n- severity 逐条登记：静态检查 error，需真实库/容器重跑的验收先 warn 并写\n promoteBy，覆盖面与严格度都按登记涨，不搞一刀切。\n- 脏绑报告在干净树上判红（说明脏绑被提交了），在脏树上只 warn（改到一半）。\n- 例外须带 reason/recordedAt/resolveBy（G-13），失效判 EXCEPTION_STALE。\n- 未登记的报告只计 SCOPE_UNDECLARED（info），不判红。\n\n10 个用例，含一个真实 git 仓集成用例钉住核心判据：作用域外连改三个提交仍绿，\n作用域内一改即红。放在根 check 链尾。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T10:36:33-07:00"},{"Sha1":"9807535a2b81bc14a35ffc306d7b1b0910f0f99f","Message":"chore(reports): bind the ai-gateway first-start evidence @ 51351b3\n\nliveliness / readiness 200（db: Not connected）、带 master key 的 /v1/models\n200 返回 platform-default-chat、无 key 401 / 错 key 400；/v1/chat/completions\n401 是供应商侧 replace-me，链路本身通。干净树绑 51351b3。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T10:10:43-07:00"}],"HeadCommit":{"Sha1":"727044996fde65045ab4ca56a060c0a32fa24c0a","Message":"chore(reports): rebind after merging main into the U-31/33/34 branch\n\n合并 main（6 个提交）后重跑根 pnpm check：exit 0，31 项。\nmodule-imports 报告的合并冲突按「报告是运行产物」取 main 版本后由本轮重新生成。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T19:21:58-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/a76562a9c4710a6763243f4f1e1b87f12461b429...727044996fde65045ab4ca56a060c0a32fa24c0a","Len":8}... |