| content |
{"Commits":[{"Sha1":"23819e2b3 {"Commits":[{"Sha1":"23819e2b34da333aa3722ed13cf86f9edcf5e497","Message":"docs(skills): ep-check-runtime 订正两处实测坑——clients/packages 构建须 cd runtime 再跑、选端口别用 lsof / nc\n\n- pnpm 的 --filter './x/*' 目录模式按当前目录解析、不按 --dir：从仓根带 --dir runtime 跑只打印 No projects matched 且退出 0，后面 mcp / api-nestjs 才报找不到 @juhai/client-*（2026-09-26 在 40350ce5 验收时实测）\n- 本机 lsof -i / nc -z 探测回环端口会挂几十秒到无限（两次卡死 \u003e2 分钟），改为排除 docker ps 已映射端口后用 python socket.bind 试绑\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-26T15:45:30-07:00"},{"Sha1":"22b8c671d7edcd7e7b7d6bd7520200e6eb0f3be1","Message":"docs(治理): 回灌台账第 7 轮（U-46—U-53）——AI 人事系统接入控制面与使用基础框架的经验下沉；框架变更请求 BR-4—BR-8；IdP 消费者契约 §1.1 补注\n\n- 上层对接经验回灌台账 §2G【公】AI 人事系统（A1 `7de0687`、A2 `0beede4`、A3 `bf81e72`）：平台侧单方 Manifest 必然过期与应用侧「钉在代码上」的判定（U-46）；IdP 令牌端点只按 slug 路由而映射无发布渠道（U-47，🔴）；事实 intake 的 audience / scope 是部署值不在 Catalog（U-48，🔴）；一枚令牌跨租户复用会静默死信、凭据失败不消耗死信配额（U-49）；e2e 演示令牌与令牌契约不同形（U-50）；令牌契约夹具只在治理仓、消费者只能复制及三处契约未写的裁决（U-51）；issuer pattern 不允许路径前缀与多租户 JWKS 整体替换（U-52）；使用框架的三处假绿根因（U-53）。§3 新增第 11 项派活（IdP / 契约 / M5 / 平台后端 / 框架 Owner）\n- 工程基础框架/框架变更请求-公用应用接入经验-2026-09-26.md：BR-4 棘轮对缺失基线键失败关闭、BR-5 门禁报告目录可覆盖且多会话不互相覆盖、BR-6 turbo 环境白名单由注册表生成、BR-7 企业 IdP 令牌 profile 作为 IdentityVerifierPort 参考实现（PI-2）、BR-8 按租户服务凭据端口与凭据失败分类（PI-1）；README 收纳\n- 企业IdP消费者契约说明-草案 §1.1 消费者实测补注（aud 单元素数组、actor_type、实时 ?tenantId=、issuer 与部署形态）与 §5 两条 IdP 侧待办\n- 接缝参考 §8 已由 2227314 先行提交；工作区一致性门禁 L4 / L10 / L13 CLEAN。治理仓不代任何应用仓提交\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-26T15:38:54-07:00"},{"Sha1":"22273144f5b360c8ff5a57c320163949712a6bbe","Message":"docs(skills): new-app-bootstrap 接缝表补 §8 出站服务身份与入站令牌（AI 人事系统回灌，台账 U-46—U-53）\n\ntenant↔slug 映射无发布渠道、audience/scope 是部署值、一枚令牌一个租户、凭据失败不计事实重试、入站验证器按契约 §1/§1.1、演示令牌同形、应用侧 Manifest 门禁两种判据要合并。对应台账条目另由 HR 会话提交。\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-26T08:20:59-07:00"},{"Sha1":"9723cce1c6547354a077cd7c4a8823e31ab61bcf","Message":"docs(skills): ep-check-runtime / ep-dev-deploy 按真源仓 d779e8ee 三套互异口令改配方，补 Docker 地址池耗尽的 bridge overlay 路径\n\n- db.sh test 改为 PLATFORM_DB_{APP,RUNTIME,SYSTEM}_PASSWORD 三值互异（缺一或相同 exit 2）；prepare-mainline 显式传 MAINLINE_{APP,RUNTIME}_PASSWORD，与 db.sh 同值；迁移 URL 用 app、DATABASE_URL_\u003cX\u003e（_rt）用 runtime、DATABASE_SYSTEM_URL_IDENTITY 用 system 口令；compose 占位补 PLATFORM_RUNTIME_DATABASE_SYSTEM_URL\n- 坑 21 补已验证的无损路径：给本检出 Redpanda 加 scratchpad overlay network_mode: bridge 并显式广播 localhost:\u003cKPORT\u003e，ownership 门禁与完整 check:runtime 可过（2026-09-24 2146/0 @ d779e8ee，报告 e2a9bcd5）\n- ep-dev-deploy runtime-switch：迁移 status/deploy 改用 \u003cdb\u003e_app owner URL（_rt 不能跑 DDL）；db.sh dev 改三变量并写明每次按传入值 ALTER ROLE 轮换口令的陷阱\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-26T08:20:59-07:00"}],"HeadCommit":{"Sha1":"23819e2b34da333aa3722ed13cf86f9edcf5e497","Message":"docs(skills): ep-check-runtime 订正两处实测坑——clients/packages 构建须 cd runtime 再跑、选端口别用 lsof / nc\n\n- pnpm 的 --filter './x/*' 目录模式按当前目录解析、不按 --dir：从仓根带 --dir runtime 跑只打印 No projects matched 且退出 0，后面 mcp / api-nestjs 才报找不到 @juhai/client-*（2026-09-26 在 40350ce5 验收时实测）\n- 本机 lsof -i / nc -z 探测回环端口会挂几十秒到无限（两次卡死 \u003e2 分钟），改为排除 docker ps 已映射端口后用 python socket.bind 试绑\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-26T15:45:30-07:00"},"CompareURL":"luoanwu/platform-governance/compare/fbc16cde54e4566b514040b21afc2ba202d98255...23819e2b34da333aa3722ed13cf86f9edcf5e497","Len":4}... |