sqlite-web 0.7.2
gitea.db
action
Create
Query
access
access_token
action
action_artifact
action_run
action_run_index
action_run_job
action_runner
action_runner_token
action_schedule
action_schedule_spec
action_task
action_task_output
action_task_step
action_tasks_version
action_variable
app_state
attachment
auth_token
badge
branch
collaboration
comment
commit_status
commit_status_index
commit_status_summary
commit_sync_log
commit_sync_status
dbfs_data
dbfs_meta
deploy_key
email_address
email_hash
external_login_user
follow
gpg_key
gpg_key_import
hook_task
issue
issue_assignees
issue_content_history
issue_dependency
issue_index
issue_label
issue_pin
issue_user
issue_watch
label
language_stat
lfs_lock
lfs_meta_object
login_source
milestone
mirror
notice
notification
oauth2_application
oauth2_authorization_code
oauth2_grant
org_user
package
package_blob
package_blob_upload
package_cleanup_rule
package_file
package_property
package_version
project
project_board
project_issue
protected_branch
protected_tag
public_key
pull_auto_merge
pull_request
push_mirror
reaction
release
renamed_branch
repo_archiver
repo_hidden_file
repo_indexer_status
repo_license
repo_redirect
repo_topic
repo_transfer
repo_unit
repository
review
review_state
secret
session
sqlite_sequence
star
stopwatch
system_setting
task
team
team_invite
team_repo
team_unit
team_user
topic
tracked_time
two_factor
upload
user
user_badge
user_blocking
user_open_id
user_redirect
user_setting
version
watch
webauthn_credential
webhook
Toggle helper tables
Structure
Content
Query
Insert
Drop
Import
Export
Delete row 30056 from action
id
30056
user_id
5
op_type
5
act_user_id
5
repo_id
117
comment_id
0
is_deleted
0
ref_name
refs/heads/main
is_private
0
content
{"Commits":[{"Sha1":"4b9218ca6
{"Commits":[{"Sha1":"4b9218ca6b938f802870c9b048b2fba70245c666","Message":"docs(governance): §8 改写为 CHG-001 收口后的实际状态——审批已收回、改指活跃真源\n\n当晚 CHG-001 状态在 5 分钟内翻转两次，本文前两版各记了其中一个中间态：\n- a140998（22:42:31）记 PENDING\n- bd63d88 订正为 READY（据 c571477，22:42:10）\n- 615c017（22:46:57）目录负责人收回全部四项审批、关闭合并闸门\n\n现按收口状态改写，中间态不再保留为结论：四项 PENDING、\nmergeGate.eligible=false、catalogMutationAuthorized=false，回执连同\narchive-manifest 归档至 reports/catalog-package-archive/6e2e69d6…/\napprovals-withdrawn/ 并标明「不得转移到修订 8」。\n\n同时把「两份 catalog 的结构性矛盾」一条从「需裁决」改为「已裁决」：\nCHG-001 整包钉在 平台治理/platform-contracts，而 DEC-010 A 案明写独立\nGit-first 真源由基础设施仓 contracts/ 承担。核对记录 3689711 指出按现状\n合并会把四个候选登记进待移除副本、三项 Catalog 阻断不会消除，且修订 7\n补丁对活跃真源 --fuzz=0 --dry-run 有 1 个 hunk 失败。决定改指活跃真源、\n重基线为修订 8。该矛盾由并发会话独立发现并当场裁决，非本文促成，两条\n路径结论一致，作交叉印证记录。\n\n并发说明段补一条教训，与 §6、回灌台账 C-17 同源：治理文档里任何「现状」\n行都有半衰期，这次是 21 秒；引用状态须写明观测时刻，据状态做决定须当场\n实跑，不得引用他文。\n\n门禁：L4 链接失效 0。L7 当前 2 条不符（simulate-new-platform-catalog-merge.mjs\n与完整变更.patch），成因是并发会话在途重算修订 8 摘要，615c017 已预告，\n不属本次变更。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T22:49:16-07:00"},{"Sha1":"a06705a0015517aa5968c14d12bbfe631918868b","Message":"fix(governance): 白名单补上反向兜底——机密类文件的排除规则\n\n迁移方案 §8.4 教训 2 写着\"既查该纳入的是否纳入，也查不该纳入的是否排除，\n凭证泄露正源于只做了前一半\"。L1—L9 把九类迁移破坏都固化成了机器检查，\n唯独这一类没有落地——门禁代码里 gitignore / secrets / .env 出现次数均为 0，\n全工作区也无任何机密扫描（无脚本、无 git hook、无 CI）。\n\n用 git check-ignore 实测白名单反向，破绽恰好集中在 平台治理/ 这一层本身\n（也就是 09-14 真正泄过密的那一层）：doc/、基础/、基础/scripts/、基础/reports/、\n基础设施文档/、platform-contracts/ 六个放行区，9 类机密文件名里有 8 类会被纳入。\n其它层安全不是因为有防护，而是白名单本来就窄（!/数字员工OS/*.md 只放行 .md）。\n\n根因是兜底段只有两条规则，而 *.env 只匹配以 .env 结尾的名字——\n.env.production / .env.local 都不匹配，.pem / .p12 / id_rsa / secrets.* 则根本没规则。\n\n本次补：.env.*（配 .env.example / .env.*.example 例外）、私钥与证书五类、\nid_rsa* / id_ed25519*、.netrc、secrets.* 与 credentials.* 各三种扩展名。\n\n.npmrc 有意不列：全工作区 8 处合法跟踪（enterprise-platform 仓根与 runtime/、\n报价仓 sites/、嗨赞造意 output/），它是 registry 配置不是机密。\n\n验证：\n- git ls-files | git check-ignore --stdin → 空，无任何已跟踪文件被新规则命中，\n 改动纯预防，不需要先清历史\n- 缺口测绘重跑：六个放行区由\"8 类可纳入\"降为\"仅 .npmrc\"\n- 逐条抽查：doc/.env.production、reports/dump.pem、基础/.env.local、\n decisions/id_rsa、platform-contracts/credentials.json、scripts/.netrc 全部已排除；\n .env.example 仍正常放行\n\n加规则前先扫过现状：密钥类文件名被跟踪 0 个（30+ 仓逐个 git ls-files）、\n硬编码密钥（sk- / AKIA / ghp_ / BEGIN PRIVATE KEY / xox*）0 处、\n未跟踪但不被忽略的机密文件 0 个——开局全绿。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T22:48:34-07:00"}],"HeadCommit":{"Sha1":"4b9218ca6b938f802870c9b048b2fba70245c666","Message":"docs(governance): §8 改写为 CHG-001 收口后的实际状态——审批已收回、改指活跃真源\n\n当晚 CHG-001 状态在 5 分钟内翻转两次，本文前两版各记了其中一个中间态：\n- a140998（22:42:31）记 PENDING\n- bd63d88 订正为 READY（据 c571477，22:42:10）\n- 615c017（22:46:57）目录负责人收回全部四项审批、关闭合并闸门\n\n现按收口状态改写，中间态不再保留为结论：四项 PENDING、\nmergeGate.eligible=false、catalogMutationAuthorized=false，回执连同\narchive-manifest 归档至 reports/catalog-package-archive/6e2e69d6…/\napprovals-withdrawn/ 并标明「不得转移到修订 8」。\n\n同时把「两份 catalog 的结构性矛盾」一条从「需裁决」改为「已裁决」：\nCHG-001 整包钉在 平台治理/platform-contracts，而 DEC-010 A 案明写独立\nGit-first 真源由基础设施仓 contracts/ 承担。核对记录 3689711 指出按现状\n合并会把四个候选登记进待移除副本、三项 Catalog 阻断不会消除，且修订 7\n补丁对活跃真源 --fuzz=0 --dry-run 有 1 个 hunk 失败。决定改指活跃真源、\n重基线为修订 8。该矛盾由并发会话独立发现并当场裁决，非本文促成，两条\n路径结论一致，作交叉印证记录。\n\n并发说明段补一条教训，与 §6、回灌台账 C-17 同源：治理文档里任何「现状」\n行都有半衰期，这次是 21 秒；引用状态须写明观测时刻，据状态做决定须当场\n实跑，不得引用他文。\n\n门禁：L4 链接失效 0。L7 当前 2 条不符（simulate-new-platform-catalog-merge.mjs\n与完整变更.patch），成因是并发会话在途重算修订 8 摘要，615c017 已预告，\n不属本次变更。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-14T22:49:16-07:00"},"CompareURL":"luoanwu/platform-governance/compare/615c017a32da032ecaeb00215d8b8b5418d9b122...4b9218ca6b938f802870c9b048b2fba70245c666","Len":2}
...
created_unix
1789451359
Delete
Cancel