| content |
{"Commits":[{"Sha1":"3b3909bb0 {"Commits":[{"Sha1":"3b3909bb0708b67e9aa9b101664bf5e15e42c404","Message":"chore(reports): 工作台两快照再回绑 @ 777bcb56(把新的 evidence-freshness 结论嵌进 ops 快照)\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-26T17:54:36-07:00"},{"Sha1":"777bcb56a4b89c54007ed5377a3519b2bc470012","Message":"chore(reports): evidence-freshness 回绑 @ 3e1b7ad5(credential 受控命令轮:零依赖门禁、runtime 静态门禁与两快照已重跑;真库 / 浏览器 / 部署验收未重跑,为 warn)\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-26T17:54:36-07:00"},{"Sha1":"3e1b7ad5a752955f0cdffdbde2be167363c2af9b","Message":"chore(reports): 根链 23 环 + runtime 静态门禁 + 工作台两快照 回绑 @ 450a7393(credential.lease-revoke Owner 处理器与账本进入 modules / migration-decs / cross-cutting / stub-surface / doc-claims / facts / candidate-contracts / module-imports / platform-ops-definitions 作用域;stub-surface 只在登记里 10 → 9、doc-claims 103 张 RLS 租户表;快照 implemented 四条)\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-26T17:54:30-07:00"},{"Sha1":"450a7393bd63ee96b936d60a2479ab7300ca25f7","Message":"feat(credential): 受控命令 credential.lease-revoke 落 Owner 处理器与账本,拍板 ③ 的 POST /v1/credential-leases/{leaseId}/revoke 别名到同一处理器(CHG-005 / X09 / OPS-3)\n\n- 账本 platform_credential_operation(迁移 202609260001,头引 DEC-006/007/025,建表即 FORCE RLS;tenantTables 4 → 5,全仓 102 → 103)\n- src/persistence/credential-operations.ts:租户事务与 CredentialStore 同一 advisory lock;同事务改租约 state/revision、appendFactIntent 写 ServiceCredentialRevoked、写审计意图(credential.revoke,details 含 operation_id/definition_id/reason_code);同键同计划 replayed、同键不同 IDEMPOTENCY_KEY_CONFLICT;非 issued 目标记 failed(LEASE_NOT_ISSUED:\u003cstate\u003e)\n- src/ops/credential-ops.ts:CREDENTIAL_LEASE_REVOKE_DEFINITION_ID;输入校验与候选定义 input_schema 对齐;lease_id 接受 lease_… / cref_…,主体 lease:\u003cleaseId\u003e;PLATFORM_OPS_ENABLED=1 ∧ DATABASE_URL_CREDENTIAL 才提供;描述符 opsRuntime 接入\n- api-nestjs:CredentialLeaseRevokeController 只做形状转换,守卫 / dry-run / plan_digest / Idempotency-Key 全走 PlatformOpsController.submit;platform-http.module 登记\n- 测试:模块无库单测 5、集成 6(_rt 角色、RLS)、api-nestjs 纯函数 3、真实 HTTP 6(定义路径 + 契约路径共享账本、401/403/400/404/409、已吊销 failed)\n- 治理:X09 ownerHandlerDefinitions 加 credential.lease-revoke(missing 只剩 permission.cache-rebuild)、控制落点 +2;stub-surface 删 registry-only 的 revoke 操作、PLATFORM_OPS_ENABLED 说明补 credential;候选定义 description 去掉「尚未提供处理器」并重渲快照;快照测试 implemented 四条\n- 文档:CLAUDE.md / README / runbook / 对外交付设计 / 能力表 103 张租户表;未落地面 10 → 9(契约操作 4 → 3);缺失清单 K 组补记;新增 docs/credential租约吊销受控命令实现记录-2026-09-26.md\n- 未做:dev 库迁移与镜像切换、工作台操作表单、MCP 网关放行、check:runtime 全量重跑\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-26T17:51:46-07:00"}],"HeadCommit":{"Sha1":"3b3909bb0708b67e9aa9b101664bf5e15e42c404","Message":"chore(reports): 工作台两快照再回绑 @ 777bcb56(把新的 evidence-freshness 结论嵌进 ops 快照)\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-09-26T17:54:36-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/685fcb751aa1494add5a409d1585d52e06e01305...3b3909bb0708b67e9aa9b101664bf5e15e42c404","Len":4}... |