| content |
{"Commits":[{"Sha1":"af3473b09 {"Commits":[{"Sha1":"af3473b09972b96b8a5f6df2d932f281d2f40749","Message":"chore(reports): release-drift, doc-claims, stub-surface, release manifest and workbench snapshots 回绑 @ 6783ac8\n\nRegenerated on the clean committed 6783ac8b8 worktree (provenance gitSha=6783ac8,\nworktreeDirty=false), same sequence as the previous binding: check:release-drift\n(partial, 21 warn, 0 error), check:doc-claims, check:stub-surface (content identical\nto the a1bfa9f binding except provenance), then pnpm workbench:release-snapshots\n(only source SHA references change; no image build, no acceptance rerun, no release\nstate change). check-evidence-freshness --read-only: partial, fresh 58 / stale 12\n(all warn, the same 12 as on deb59cd8f), 0 error. evidence-freshness report not\nrewritten. check:runtime not rerun (governance script, test and runbook only).\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-22T23:05:26-07:00"},{"Sha1":"6783ac8b830d5a8d642befe56fd8a74dbaaaa031","Message":"fix(governance): fail closed on unrecognised compose ports structures in isolation guard\n\nFollow-up to the independent verification of 2abbe4513 (PASS, three low notes):\n\n1. composeHostPorts no longer ends or skips a ports block it does not understand.\n Long syntax (- target: / published:), flow arrays split across lines, quoted or\n aliased ports keys, flow mappings, empty items, stray quotes, whole mappings\n from a variable (\"${PG_PORTS}\") and non host:container items now raise\n ISOLATION_STACK_PORTS_UNRESOLVED. A list ends only at a line indented no deeper\n than its ports: key that is not itself a - item. The real registry still\n resolves to 21 host ports (asserted).\n2. Direct tests: liveStackPorts must be a non-empty Set (empty Set, null, look-alike\n object, array, Map, string refused); CLI negative: a 0600 env file on 55470 with\n only three of four targets exits 2 with ISOLATION_LIVE_STACK_PORT (a regressed\n guard would stop at ISOLATION_CONNECTION_MISSING before PrismaClient loads, so\n nothing can connect).\n3. runbook: the 55931 run is marked as fixed clean ae8449c8a, before the port guard.\n\nVerified: outbox-index-isolation tests 10/10; ten mutants red; no database touched.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-22T23:03:49-07:00"},{"Sha1":"2abbe4513430bef63ac6b2ac9c799203ba1726a7","Message":"chore(reports): release-drift, doc-claims, stub-surface, release manifest and workbench snapshots 回绑 @ a1bfa9f\n\nRegenerated on the clean committed a1bfa9f45 worktree (provenance gitSha=a1bfa9f,\nworktreeDirty=false): check:release-drift (partial, 21 warn, 0 error — content\nidentical to the previous binding), check:doc-claims and check:stub-surface (content\nidentical except provenance), then pnpm workbench:release-snapshots (release\nmanifest + catalog/ops snapshots; no image build, no acceptance rerun, no release\nstate change). check-evidence-freshness --read-only: partial, fresh 58 / stale 12\n(all warn, the same 12 as on deb59cd8f), 0 error. evidence-freshness report not\nrewritten. check:runtime not rerun (governance script, test and runbook only; no\nruntime or image input changed).\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-22T22:49:02-07:00"},{"Sha1":"a1bfa9f453ee7f4b3091c73ddb3f5abb5549401c","Message":"fix(governance): refuse live stack and default ports in outbox index isolation guard\n\nverify-outbox-index-isolation.mjs claimed it never connects to the live 55470\ndatabase, but isolatedUrls() only checked protocol, loopback host, _test name and\nrole. The guard now also requires an explicit dedicated port:\n\n- every host port published by the compose files registered in\n governance/caddy-routes.json (validate.compose + network.overlays, the same\n registry check:caddy reads; dev PG 55470 among them) -\u003e ISOLATION_LIVE_STACK_PORT;\n unresolvable host ports (${VAR:?}, ${VAR}, ranges) fail closed\n- omitted port (libpq default 5432), explicit 5432 or 0 -\u003e\n ISOLATION_DEDICATED_PORT_REQUIRED (5432 is occupied by other repos' containers\n on this machine; a fresh isolated cluster always runs on an operator-chosen port)\n- query string / fragment (e.g. ?host= socket redirect) -\u003e\n ISOLATION_REQUIRES_LOCAL_TEST_DATABASE\n\nNo database is connected and no credential is read. runbook TP05 paragraph\nupdated (and its stale \"not yet run\" note replaced by the 10-22 evidence link).\n\nVerified: node --test governance/test/outbox-index-isolation.test.mjs 7/7 (2 new\ntests failed on deb59cd8f before the fix); six mutants of the guard turned red.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-22T22:45:47-07:00"}],"HeadCommit":{"Sha1":"af3473b09972b96b8a5f6df2d932f281d2f40749","Message":"chore(reports): release-drift, doc-claims, stub-surface, release manifest and workbench snapshots 回绑 @ 6783ac8\n\nRegenerated on the clean committed 6783ac8b8 worktree (provenance gitSha=6783ac8,\nworktreeDirty=false), same sequence as the previous binding: check:release-drift\n(partial, 21 warn, 0 error), check:doc-claims, check:stub-surface (content identical\nto the a1bfa9f binding except provenance), then pnpm workbench:release-snapshots\n(only source SHA references change; no image build, no acceptance rerun, no release\nstate change). check-evidence-freshness --read-only: partial, fresh 58 / stale 12\n(all warn, the same 12 as on deb59cd8f), 0 error. evidence-freshness report not\nrewritten. check:runtime not rerun (governance script, test and runbook only).\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","AuthorEmail":"hillao@juhailaoluodeMacBook-Pro.local","AuthorName":"juhailaoluo pro","CommitterEmail":"hillao@juhailaoluodeMacBook-Pro.local","CommitterName":"juhailaoluo pro","Timestamp":"2026-10-22T23:05:26-07:00"},"CompareURL":"luoanwu/enterprise-platform/compare/deb59cd8f0d3169e33b9ba2aa22d3eac7dd8180d...af3473b09972b96b8a5f6df2d932f281d2f40749","Len":4}... |