| content |
{"Commits":[{"Sha1":"f1404780a {"Commits":[{"Sha1":"f1404780a55c8cf7ab4ab0b98386c071169dc78a","Message":"Merge github/main (PR #14 merge commit) into main\n\n树与本地 main 顶端相同，不改文件；把 GitHub 受保护主分支的合并提交接回本地历史。\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T06:46:29-07:00"},{"Sha1":"bf3fa2f552a2936128189375afb85bea0934e7fc","Message":"Merge pull request #14 from laoluojuhai/sync/main-20260912-r7\n\nsync(main): 推平本地 main → GitHub（第七轮·收敛：Redpanda 候选块 1244095 / edeaf51 + 两次 GitHub 合并的接回与报告重生成）","AuthorEmail":"158980461+laoluojuhai@users.noreply.github.com","AuthorName":"laoluojuhai","CommitterEmail":"noreply@github.com","CommitterName":"GitHub","Timestamp":"2026-09-12T06:46:23-07:00"},{"Sha1":"7f1a00be9a726014a04fb5a1921c7818abaf73ed","Message":"feat(stack): PF-11 stack 侧——OpenBao 供给草案（Transit / KV v2 / 策略 / AppRole / 审计）+ 一次性 dev 容器冒烟 21/21，候选镜像首次 pull 核实并按 digest 锁定（DEC-025 B1 / DEC-006 批准记录 2026-09-12）\n\n- provision/openbao-provision.json：mounts（transit、secret kv-v2；pki 随 PF-11）、transit keys（idp-signing rsa-2048 供 M1 RS256 签名 + kid 轮换重叠；m2-credential-envelope aes256-gcm96 供 M2 租约信封；均不可导出、720h 自动轮换）、每应用每环境只读策略模板（identity / credential 额外 transit 能力）、AppRole 角色模板（token_ttl 1h 与 DEC-006 对齐、secret_id 只经注入链）、审计设备；dev -dev 内存模式 / staging Raft 单实例 / prod HA 随 DEC-025 附条件\n- provision/openbao-provision.sh：--dry-run 渲染 bao 命令；--smoke 起一次性 -dev 容器（随机 root token、结束即删）逐条执行并验证 transit 不可导出 + 签名往返、kv 往返、AppRole 登录、跨应用路径 403；--apply 在 PF-11 前退出 3；报告 stack/reports/openbao-smoke.\u003c日期\u003e.json\n- compose：openbao 候选块按 digest 锁定（openbao/openbao:2.3.1，linux/arm64 73 MB），头注改为已批裁决 + PF-11 启用；四份 config 通过\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T06:41:12-07:00"}],"HeadCommit":{"Sha1":"f1404780a55c8cf7ab4ab0b98386c071169dc78a","Message":"Merge github/main (PR #14 merge commit) into main\n\n树与本地 main 顶端相同，不改文件；把 GitHub 受保护主分支的合并提交接回本地历史。\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-12T06:46:29-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/44f921ff30c0579e914befcdfb77cd569513cdb6...f1404780a55c8cf7ab4ab0b98386c071169dc78a","Len":3}... |