|
24295
|
docs(部署): 记录仅准入升档提示的dev发布验收
|
116
|
5
|
platform.yml
|
220
|
5
|
0
|
refs/heads/main
|
d0242b973487b130cdac66811382612bc8e28bec
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"e44b1d6a3d4e1694762bbb626b51bbec2b0a30cd","after":"d0242b973487b130cdac66811382612bc8e28bec","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/e44b1d6a3d4e1694762bbb626b51bbec2b0a30cd...d0242b973487b130cdac66811382612bc8e28bec","commits":[{"id":"d0242b973487b130cdac66811382612bc8e28bec","message":"docs(部署): 记录仅准入升档提示的dev发布验收\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/d0242b973487b130cdac66811382612bc8e28bec","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-20T05:46:11-07:00","added":[],"removed":[],"modified":["docs/仅准入裁决与升档依据修复-2026-09-20.md"]}],"total_commits":0,"head_commit":{"id":"d0242b973487b130cdac66811382612bc8e28bec","message":"docs(部署): 记录仅准入升档提示的dev发布验收\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/d0242b973487b130cdac66811382612bc8e28bec","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-20T05:46:11-07:00","added":[],"removed":[],"modified":["docs/仅准入裁决与升档依据修复-2026-09-20.md"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":31018,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-20T20:45:43+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
33
|
1789908497
|
1789908558
|
0
|
1789908374
|
1789908981
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24263
|
chore(mcp): 刷新合并后的管理快照与文档门禁
|
116
|
5
|
platform.yml
|
200
|
5
|
0
|
refs/heads/main
|
42e35e5c3f0c1cd6de2c41f2de08af8733c6bc03
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"9be82463b8d0a017f7463a651aa31246bcc0363a","after":"42e35e5c3f0c1cd6de2c41f2de08af8733c6bc03","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/9be82463b8d0a017f7463a651aa31246bcc0363a...42e35e5c3f0c1cd6de2c41f2de08af8733c6bc03","commits":[{"id":"42e35e5c3f0c1cd6de2c41f2de08af8733c6bc03","message":"chore(mcp): 刷新合并后的管理快照与文档门禁\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/42e35e5c3f0c1cd6de2c41f2de08af8733c6bc03","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T16:52:25-07:00","added":[],"removed":[],"modified":["reports/evidence-freshness.latest.json","reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json","runtime/reports/agent-adapters.latest.json","runtime/reports/dual-backend-parity.latest.json","runtime/reports/governance-docs.latest.json"]}],"total_commits":0,"head_commit":{"id":"42e35e5c3f0c1cd6de2c41f2de08af8733c6bc03","message":"chore(mcp): 刷新合并后的管理快照与文档门禁\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/42e35e5c3f0c1cd6de2c41f2de08af8733c6bc03","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T16:52:25-07:00","added":[],"removed":[],"modified":["reports/evidence-freshness.latest.json","reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json","runtime/reports/agent-adapters.latest.json","runtime/reports/dual-backend-parity.latest.json","runtime/reports/governance-docs.latest.json"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":26215,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-20T07:52:06+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
0
|
1789861972
|
0
|
1789861949
|
1789861972
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24262
|
chore(mcp): 记录主分支合并后的文档与证据检查
|
116
|
5
|
platform.yml
|
199
|
5
|
0
|
refs/heads/main
|
9be82463b8d0a017f7463a651aa31246bcc0363a
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"12b73476987836f0940dce56f483512df5d47156","after":"9be82463b8d0a017f7463a651aa31246bcc0363a","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/12b73476987836f0940dce56f483512df5d47156...9be82463b8d0a017f7463a651aa31246bcc0363a","commits":[{"id":"9be82463b8d0a017f7463a651aa31246bcc0363a","message":"chore(mcp): 记录主分支合并后的文档与证据检查\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/9be82463b8d0a017f7463a651aa31246bcc0363a","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T16:52:03-07:00","added":[],"removed":[],"modified":["reports/evidence-freshness.latest.json","runtime/reports/docs-truth.latest.json"]}],"total_commits":0,"head_commit":{"id":"9be82463b8d0a017f7463a651aa31246bcc0363a","message":"chore(mcp): 记录主分支合并后的文档与证据检查\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/9be82463b8d0a017f7463a651aa31246bcc0363a","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T16:52:03-07:00","added":[],"removed":[],"modified":["reports/evidence-freshness.latest.json","runtime/reports/docs-truth.latest.json"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":26208,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-20T07:51:43+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
0
|
1789861949
|
0
|
1789861926
|
1789861949
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24261
|
Merge branch 'codex/mcp-pilot'
|
116
|
5
|
platform.yml
|
198
|
5
|
0
|
refs/heads/main
|
12b73476987836f0940dce56f483512df5d47156
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"70884dff5dab422ecd6e8d71ab2daa433245e283","after":"12b73476987836f0940dce56f483512df5d47156","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/70884dff5dab422ecd6e8d71ab2daa433245e283...12b73476987836f0940dce56f483512df5d47156","commits":[{"id":"12b73476987836f0940dce56f483512df5d47156","message":"Merge branch 'codex/mcp-pilot'\n\n# Conflicts:\n#\treports/caddy.latest.json\n#\treports/candidate-contracts.latest.json\n#\treports/catalog-drift.latest.json\n#\treports/catalog-reconciliation.latest.json\n#\treports/ci-mirror.latest.json\n#\treports/doc-claims.latest.json\n#\treports/evidence-freshness.latest.json\n#\treports/fact-pii.latest.json\n#\treports/facts.latest.json\n#\treports/fixture-coverage.latest.json\n#\treports/fixtures.latest.json\n#\treports/gate-flow.latest.json\n#\treports/migration-decs.latest.json\n#\treports/module-imports.latest.json\n#\treports/otel.latest.json\n#\treports/stub-surface.latest.json\n#\truntime/reports/agent-adapters.latest.json\n#\truntime/reports/conformance-matrix.latest.json\n#\truntime/reports/contract-consumers.latest.json\n#\truntime/reports/docs-truth.latest.json\n#\truntime/reports/dual-backend-parity.latest.json\n#\truntime/reports/fork-readiness.latest.json\n#\truntime/reports/governance-docs.latest.json\n#\truntime/reports/governance-rules.latest.json\n#\truntime/reports/governance-status.latest.json\n#\truntime/reports/governance.latest.json\n#\truntime/reports/migrations.latest.json\n#\truntime/reports/naming.latest.json\n#\truntime/reports/permission-catalog.latest.json\n#\truntime/reports/platform-ops-definitions.latest.json\n#\truntime/reports/runtime-governance.latest.json\n#\truntime/reports/schema-sync.latest.json\n#\truntime/reports/statemachine-write-guard.latest.json\n#\truntime/reports/validation-source.latest.json\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/12b73476987836f0940dce56f483512df5d47156","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T16:51:38-07:00","added":["docs/acceptance/2026-09-19/mcp-deployment.json"],"removed":[],"modified":["docs/MCP受控写入与治理验收-2026-09-19.md","reports/deployed-runtime.latest.json","reports/image-digest.json","reports/image-smoke.latest.json","reports/revocation-sla.latest.json","runtime/CLAUDE.md","runtime/reports/conformance-differential.latest.json","runtime/reports/runtime-acceptance.latest.json"]},{"id":"6d452cdfbb91278dace7fa9257d18f15259070c6","message":"chore(governance): rebind checks after workbench integration\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/6d452cdfbb91278dace7fa9257d18f15259070c6","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T16:50:53-07:00","added":[],"removed":[],"modified":["reports/caddy.latest.json","reports/candidate-contracts.latest.json","reports/catalog-drift.latest.json","reports/catalog-reconciliation.latest.json","reports/ci-mirror.latest.json","reports/doc-claims.latest.json","reports/evidence-freshness.latest.json","reports/fact-pii.latest.json","reports/facts.latest.json","reports/fixture-coverage.latest.json","reports/fixtures.latest.json","reports/gate-flow.latest.json","reports/migration-decs.latest.json","reports/module-imports.latest.json","reports/otel.latest.json","reports/stub-surface.latest.json","runtime/reports/agent-adapters.latest.json","runtime/reports/conformance-matrix.latest.json","runtime/reports/contract-consumers.latest.json","runtime/reports/docs-truth.latest.json","runtime/reports/dual-backend-parity.latest.json","runtime/reports/fork-readiness.latest.json","runtime/reports/governance-docs.latest.json","runtime/reports/governance-rules.latest.json","runtime/reports/governance-status.latest.json","runtime/reports/governance.latest.json","runtime/reports/migrations.latest.json","runtime/reports/naming.latest.json","runtime/reports/permission-catalog.latest.json","runtime/reports/platform-ops-definitions.latest.json","runtime/reports/runtime-governance.latest.json","runtime/reports/schema-sync.latest.json","runtime/reports/statemachine-write-guard.latest.json","runtime/reports/validation-source.latest.json"]},{"id":"ac4dfdb49200000b9a8215d9707668cad8590e0e","message":"Merge branch 'main' into codex/mcp-pilot\n\n# Conflicts:\n#\treports/workbench-catalog-snapshot.latest.json\n#\treports/workbench-ops-snapshot.latest.json\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/ac4dfdb49200000b9a8215d9707668cad8590e0e","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T16:50:51-07:00","added":["docs/工作台OIDC配置修复部署记录-2026-09-19.md","docs/应用接入流程与协议操作规范-2026-09-19.md","runtime/apps/workbench/src/app/modules/layout.tsx","runtime/apps/workbench/src/app/modules/page.tsx","runtime/apps/workbench/src/app/onboarding/layout.tsx","runtime/apps/workbench/src/app/onboarding/page.tsx","runtime/apps/workbench/src/features/onboarding/manifest-validation.ts"],"removed":[],"modified":["reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json","runtime/apps/workbench/package.json","runtime/apps/workbench/src/app/catalog/layout.tsx","runtime/apps/workbench/src/app/catalog/page.tsx","runtime/apps/workbench/src/app/page.tsx","runtime/apps/workbench/src/app/runtime/page.tsx","runtime/apps/workbench/src/components/app-nav.tsx","runtime/apps/workbench/src/components/catalog/catalog-table.tsx","runtime/apps/workbench/src/components/catalog/counts-strip.tsx","runtime/apps/workbench/src/components/catalog/entry-detail.tsx","runtime/apps/workbench/src/components/site-footer.tsx","runtime/apps/workbench/src/features/platform/catalog-filters.ts","runtime/pnpm-lock.yaml"]},{"id":"2d1d6a58098fb2534afad1306733084e242d9926","message":"chore(mcp): 同步收尾文档检查与管理快照\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/2d1d6a58098fb2534afad1306733084e242d9926","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T16:49:57-07:00","added":[],"removed":[],"modified":["reports/deployed-runtime.latest.json","reports/doc-claims.latest.json","reports/evidence-freshness.latest.json","reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json","runtime/reports/agent-adapters.latest.json","runtime/reports/docs-truth.latest.json","runtime/reports/dual-backend-parity.latest.json","runtime/reports/governance-docs.latest.json"]},{"id":"a05ee9316bc5ac83d65a322069252abb1d4df30c","message":"docs(mcp): 记录发布验收、服务更新与试点清理\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/a05ee9316bc5ac83d65a322069252abb1d4df30c","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T16:49:04-07:00","added":["docs/acceptance/2026-09-19/mcp-deployment.json"],"removed":[],"modified":["docs/MCP受控写入与治理验收-2026-09-19.md","reports/caddy.latest.json","reports/candidate-contracts.latest.json","reports/catalog-drift.latest.json","reports/catalog-reconciliation.latest.json","reports/ci-mirror.latest.json","reports/deployed-runtime.latest.json","reports/doc-claims.latest.json","reports/evidence-freshness.latest.json","reports/fact-pii.latest.json","reports/facts.latest.json","reports/fixture-coverage.latest.json","reports/fixtures.latest.json","reports/gate-flow.latest.json","reports/image-digest.json","reports/image-smoke.latest.json","reports/migration-decs.latest.json","reports/module-imports.latest.json","reports/otel.latest.json","reports/revocation-sla.latest.json","reports/stub-surface.latest.json","reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json","runtime/CLAUDE.md","runtime/reports/agent-adapters.latest.json","runtime/reports/conformance-differential.latest.json","runtime/reports/conformance-matrix.latest.json","runtime/reports/contract-consumers.latest.json","runtime/reports/docs-truth.latest.json","runtime/reports/dual-backend-parity.latest.json","runtime/reports/fork-readiness.latest.json","runtime/reports/governance-docs.latest.json","runtime/reports/governance-rules.latest.json","runtime/reports/governance-status.latest.json","runtime/reports/governance.latest.json","runtime/reports/migrations.latest.json","runtime/reports/naming.latest.json","runtime/reports/permission-catalog.latest.json","runtime/reports/platform-ops-definitions.latest.json","runtime/reports/runtime-acceptance.latest.json","runtime/reports/runtime-governance.latest.json","runtime/reports/schema-sync.latest.json","runtime/reports/statemachine-write-guard.latest.json","runtime/reports/validation-source.latest.json"]}],"total_commits":0,"head_commit":{"id":"12b73476987836f0940dce56f483512df5d47156","message":"Merge branch 'codex/mcp-pilot'\n\n# Conflicts:\n#\treports/caddy.latest.json\n#\treports/candidate-contracts.latest.json\n#\treports/catalog-drift.latest.json\n#\treports/catalog-reconciliation.latest.json\n#\treports/ci-mirror.latest.json\n#\treports/doc-claims.latest.json\n#\treports/evidence-freshness.latest.json\n#\treports/fact-pii.latest.json\n#\treports/facts.latest.json\n#\treports/fixture-coverage.latest.json\n#\treports/fixtures.latest.json\n#\treports/gate-flow.latest.json\n#\treports/migration-decs.latest.json\n#\treports/module-imports.latest.json\n#\treports/otel.latest.json\n#\treports/stub-surface.latest.json\n#\truntime/reports/agent-adapters.latest.json\n#\truntime/reports/conformance-matrix.latest.json\n#\truntime/reports/contract-consumers.latest.json\n#\truntime/reports/docs-truth.latest.json\n#\truntime/reports/dual-backend-parity.latest.json\n#\truntime/reports/fork-readiness.latest.json\n#\truntime/reports/governance-docs.latest.json\n#\truntime/reports/governance-rules.latest.json\n#\truntime/reports/governance-status.latest.json\n#\truntime/reports/governance.latest.json\n#\truntime/reports/migrations.latest.json\n#\truntime/reports/naming.latest.json\n#\truntime/reports/permission-catalog.latest.json\n#\truntime/reports/platform-ops-definitions.latest.json\n#\truntime/reports/runtime-governance.latest.json\n#\truntime/reports/schema-sync.latest.json\n#\truntime/reports/statemachine-write-guard.latest.json\n#\truntime/reports/validation-source.latest.json\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/12b73476987836f0940dce56f483512df5d47156","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T16:51:38-07:00","added":["docs/acceptance/2026-09-19/mcp-deployment.json"],"removed":[],"modified":["docs/MCP受控写入与治理验收-2026-09-19.md","reports/deployed-runtime.latest.json","reports/image-digest.json","reports/image-smoke.latest.json","reports/revocation-sla.latest.json","runtime/CLAUDE.md","runtime/reports/conformance-differential.latest.json","runtime/reports/runtime-acceptance.latest.json"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":26057,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-20T07:48:44+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
0
|
1789861925
|
0
|
1789861903
|
1789861926
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24260
|
Merge branch 'codex/service-modules-onboarding Merge branch 'codex/service-modules-onboarding'...
|
116
|
5
|
platform.yml
|
197
|
5
|
0
|
refs/heads/main
|
70884dff5dab422ecd6e8d71ab2daa433245e283
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"6c888edbd933282b3762415ecf07ed4101505735","after":"70884dff5dab422ecd6e8d71ab2daa433245e283","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/6c888edbd933282b3762415ecf07ed4101505735...70884dff5dab422ecd6e8d71ab2daa433245e283","commits":[{"id":"70884dff5dab422ecd6e8d71ab2daa433245e283","message":"Merge branch 'codex/service-modules-onboarding'\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/70884dff5dab422ecd6e8d71ab2daa433245e283","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T16:47:37-07:00","added":["docs/应用接入流程与协议操作规范-2026-09-19.md","runtime/apps/workbench/src/app/modules/layout.tsx","runtime/apps/workbench/src/app/modules/page.tsx","runtime/apps/workbench/src/app/onboarding/layout.tsx","runtime/apps/workbench/src/app/onboarding/page.tsx","runtime/apps/workbench/src/features/onboarding/manifest-validation.ts"],"removed":[],"modified":["reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json","runtime/apps/workbench/package.json","runtime/apps/workbench/src/app/catalog/layout.tsx","runtime/apps/workbench/src/app/catalog/page.tsx","runtime/apps/workbench/src/app/page.tsx","runtime/apps/workbench/src/app/runtime/page.tsx","runtime/apps/workbench/src/components/app-nav.tsx","runtime/apps/workbench/src/components/catalog/catalog-table.tsx","runtime/apps/workbench/src/components/catalog/counts-strip.tsx","runtime/apps/workbench/src/components/catalog/entry-detail.tsx","runtime/apps/workbench/src/components/site-footer.tsx","runtime/apps/workbench/src/features/platform/catalog-filters.ts","runtime/pnpm-lock.yaml"]},{"id":"68cd63d93996134bd20b2677a2527d14038ccce9","message":"chore(workbench): rebind snapshots after naming integration\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/68cd63d93996134bd20b2677a2527d14038ccce9","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T16:46:48-07:00","added":[],"removed":[],"modified":["reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json"]},{"id":"f0a3f2d78fc888be40fac26c66063d0dafcde884","message":"Merge branch 'main' into codex/service-modules-onboarding\n\n# Conflicts:\n#\truntime/apps/workbench/src/app/catalog/layout.tsx\n#\truntime/apps/workbench/src/app/catalog/page.tsx\n#\truntime/apps/workbench/src/app/page.tsx\n#\truntime/apps/workbench/src/components/app-nav.tsx\n#\truntime/apps/workbench/src/components/catalog/counts-strip.tsx\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/f0a3f2d78fc888be40fac26c66063d0dafcde884","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T16:46:43-07:00","added":[],"removed":[],"modified":[]},{"id":"427fd7c6bec2f171e54114b68ffec8833585cc27","message":"chore(workbench): rebind snapshots after mainline integration\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/427fd7c6bec2f171e54114b68ffec8833585cc27","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T16:45:11-07:00","added":[],"removed":[],"modified":["reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json"]},{"id":"a23f280d98f831ee2644736bf40fe0358b148950","message":"chore(workbench): rebind module and operations snapshots\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/a23f280d98f831ee2644736bf40fe0358b148950","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T16:43:57-07:00","added":[],"removed":[],"modified":["reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json"]}],"total_commits":0,"head_commit":{"id":"70884dff5dab422ecd6e8d71ab2daa433245e283","message":"Merge branch 'codex/service-modules-onboarding'\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/70884dff5dab422ecd6e8d71ab2daa433245e283","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T16:47:37-07:00","added":["docs/应用接入流程与协议操作规范-2026-09-19.md","runtime/apps/workbench/src/app/modules/layout.tsx","runtime/apps/workbench/src/app/modules/page.tsx","runtime/apps/workbench/src/app/onboarding/layout.tsx","runtime/apps/workbench/src/app/onboarding/page.tsx","runtime/apps/workbench/src/features/onboarding/manifest-validation.ts"],"removed":[],"modified":["reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json","runtime/apps/workbench/package.json","runtime/apps/workbench/src/app/catalog/layout.tsx","runtime/apps/workbench/src/app/catalog/page.tsx","runtime/apps/workbench/src/app/page.tsx","runtime/apps/workbench/src/app/runtime/page.tsx","runtime/apps/workbench/src/components/app-nav.tsx","runtime/apps/workbench/src/components/catalog/catalog-table.tsx","runtime/apps/workbench/src/components/catalog/counts-strip.tsx","runtime/apps/workbench/src/components/catalog/entry-detail.tsx","runtime/apps/workbench/src/components/site-footer.tsx","runtime/apps/workbench/src/features/platform/catalog-filters.ts","runtime/pnpm-lock.yaml"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":25831,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-20T07:47:08+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
0
|
1789861902
|
0
|
1789861723
|
1789861902
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24259
|
docs(workbench): 记录服务模块文案发布验证
|
116
|
5
|
platform.yml
|
196
|
5
|
0
|
refs/heads/main
|
6c888edbd933282b3762415ecf07ed4101505735
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"1f742c97cb5f3196fa37a2bad9c23b02a05735bc","after":"6c888edbd933282b3762415ecf07ed4101505735","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/1f742c97cb5f3196fa37a2bad9c23b02a05735bc...6c888edbd933282b3762415ecf07ed4101505735","commits":[{"id":"6c888edbd933282b3762415ecf07ed4101505735","message":"docs(workbench): 记录服务模块文案发布验证\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/6c888edbd933282b3762415ecf07ed4101505735","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T16:47:05-07:00","added":[],"removed":[],"modified":["docs/工作台OIDC配置修复部署记录-2026-09-19.md"]},{"id":"dde1fcef34d0d83ef3a0c809f466e01a1c7cd47b","message":"fix(workbench): 将服务目录统一更名为服务模块\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/dde1fcef34d0d83ef3a0c809f466e01a1c7cd47b","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T16:46:11-07:00","added":[],"removed":[],"modified":["runtime/apps/workbench/src/app/catalog/layout.tsx","runtime/apps/workbench/src/app/catalog/page.tsx","runtime/apps/workbench/src/app/page.tsx","runtime/apps/workbench/src/app/runtime/page.tsx","runtime/apps/workbench/src/components/app-nav.tsx","runtime/apps/workbench/src/components/catalog/catalog-table.tsx","runtime/apps/workbench/src/components/catalog/counts-strip.tsx"]}],"total_commits":0,"head_commit":{"id":"6c888edbd933282b3762415ecf07ed4101505735","message":"docs(workbench): 记录服务模块文案发布验证\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/6c888edbd933282b3762415ecf07ed4101505735","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T16:47:05-07:00","added":[],"removed":[],"modified":["docs/工作台OIDC配置修复部署记录-2026-09-19.md"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":25799,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-20T07:44:41+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
0
|
1789861723
|
0
|
1789861628
|
1789861723
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24258
|
docs(workbench): 记录 OIDC 配置与真实登录部署验收
|
116
|
5
|
platform.yml
|
195
|
5
|
0
|
refs/heads/main
|
1f742c97cb5f3196fa37a2bad9c23b02a05735bc
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"b188dd61233c511fcd355ab3d730ee0660271925","after":"1f742c97cb5f3196fa37a2bad9c23b02a05735bc","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/b188dd61233c511fcd355ab3d730ee0660271925...1f742c97cb5f3196fa37a2bad9c23b02a05735bc","commits":[{"id":"1f742c97cb5f3196fa37a2bad9c23b02a05735bc","message":"docs(workbench): 记录 OIDC 配置与真实登录部署验收\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/1f742c97cb5f3196fa37a2bad9c23b02a05735bc","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T16:44:31-07:00","added":["docs/工作台OIDC配置修复部署记录-2026-09-19.md"],"removed":[],"modified":[]}],"total_commits":0,"head_commit":{"id":"1f742c97cb5f3196fa37a2bad9c23b02a05735bc","message":"docs(workbench): 记录 OIDC 配置与真实登录部署验收\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/1f742c97cb5f3196fa37a2bad9c23b02a05735bc","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T16:44:31-07:00","added":["docs/工作台OIDC配置修复部署记录-2026-09-19.md"],"removed":[],"modified":[]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":25793,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-20T07:44:16+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
33
|
1789861517
|
1789861570
|
0
|
1789861481
|
1789861628
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24251
|
fix(runtime): package generated Prisma clients for fix(runtime): package generated Prisma clients for hosted modules...
|
116
|
5
|
platform.yml
|
190
|
5
|
0
|
refs/heads/main
|
c92a831292abb4dac8ef5d39993630eb920c6cc9
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"5344a74ea5b7c31eaf1729a1ae218fbdf635172b","after":"c92a831292abb4dac8ef5d39993630eb920c6cc9","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/5344a74ea5b7c31eaf1729a1ae218fbdf635172b...c92a831292abb4dac8ef5d39993630eb920c6cc9","commits":[{"id":"c92a831292abb4dac8ef5d39993630eb920c6cc9","message":"fix(runtime): package generated Prisma clients for hosted modules\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/c92a831292abb4dac8ef5d39993630eb920c6cc9","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T15:48:22-07:00","added":[],"removed":[],"modified":["governance/test/module-databases.test.mjs","runtime/modules/notification-webhook/package.json","runtime/modules/public-file/package.json"]}],"total_commits":0,"head_commit":{"id":"c92a831292abb4dac8ef5d39993630eb920c6cc9","message":"fix(runtime): package generated Prisma clients for hosted modules\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/c92a831292abb4dac8ef5d39993630eb920c6cc9","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T15:48:22-07:00","added":[],"removed":[],"modified":["governance/test/module-databases.test.mjs","runtime/modules/notification-webhook/package.json","runtime/modules/public-file/package.json"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":25047,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-20T06:44:30+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
0
|
1789858540
|
0
|
1789858153
|
1789858540
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24205
|
chore(reports): C 组三份真实验收回绑 @ 8a621fd —— 在 adversa chore(reports): C 组三份真实验收回绑 @ 8a621fd —— 在 adversarial 隔离栈上跑，共享底座与 ms23 均未触碰...
|
116
|
5
|
platform.yml
|
168
|
5
|
0
|
refs/heads/main
|
b90d7a151e5e9451fa12fb6e883b8898552124df
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"12093b843ef69d300370e5da16fcca3399c14d40","after":"b90d7a151e5e9451fa12fb6e883b8898552124df","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/12093b843ef69d300370e5da16fcca3399c14d40...b90d7a151e5e9451fa12fb6e883b8898552124df","commits":[{"id":"b90d7a151e5e9451fa12fb6e883b8898552124df","message":"chore(reports): C 组三份真实验收回绑 @ 8a621fd —— 在 adversarial 隔离栈上跑，共享底座与 ms23 均未触碰\n\nC 组（runtime-acceptance / mainline-acceptance / revocation-sla）需要真实 PG + Redis + Redpanda。\nms23 那套 35 分钟前刚被并行会话用过（容器 Exited），按 docs/持久主线本地验收.md「同名 project 即使\n容器刚启动也不能直接 up 覆盖，该名称已占用时应协调或选择已有获准且无人使用的测试环境」，改用\nadversarial（PG 55473 / Redis 56382 / Broker 59095，2026-09-12 获准、闲置 3 天、其 Broker 已在故障\n注入白名单）。全程 docker start 既有容器，未 compose up 覆盖任何 project。\n\n结果（均在干净检出 8a621fd 上产出，worktreeDirty=false）：\n runtime-acceptance passed 1001 tests（地板 775）、tenantRlsEnforced=1、双后端差分 0\n mainline-acceptance passed\n revocation-sla partial p95 5027ms / max 5041ms / 20 samples——远低于 MS-3 的 30s；\n partial 来自 employmentScope 链仍 pending-scope-consumer-enforcement，\n 以及生产投送/负载/staging 四项 unverified，是既定状态不是失败\n conformance-differential 作为 runtime 验收的副产物一并刷新（同样已登记 severity=warn）\n\n过程中一处失败是我搭环境搭错的，记下来免得下次再犯：首轮 e2e/identity-profile 断言\n`elevated=false` 实测 true——mainline:prepare 只为 fact/permission/audit/owner/consumer 建非超级用户\n角色，identity/credential/scope/aigateway 四个库是我用管理员 platform 手建的，identity 的连接因此是\n特权角色。REASSIGN OWNED 不适用（platform 持有系统对象），改为重建该库并 OWNER 给\nplatform_identity_test_app、以该角色重新 deploy 迁移后转绿。credential / scope 没有\nprisma:migrate:deploy 脚本是对的——它们是 state=shape 模块，按仓纪律不得有迁移。\n\n隔离与收尾：凭据只经仓外 0600 文件（/tmp/c3-mainline.env、/tmp/c3-env.sh），不入仓、不打印；\n验收在独立 worktree 里 pnpm install 自己的 node_modules，不软链主检出，避免与并行会话抢 .prisma；\nadversarial 三容器跑完恢复为 Exited（与我接手前一致）。主检出里并行会话另有十余份报告 WIP，一份没碰。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/b90d7a151e5e9451fa12fb6e883b8898552124df","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:45:56-07:00","added":[],"removed":[],"modified":["reports/mainline-acceptance.latest.json","reports/revocation-sla.latest.json","runtime/reports/conformance-differential.latest.json","runtime/reports/runtime-acceptance.latest.json"]},{"id":"a178ba36c65d82fab8106fa7395dd65f927876ad","message":"docs(治理): 云端治理段补 2026-09-19 实测——分支保护已整个消失，而计费仍未恢复\n\n推送本会话提交时实测到两条与在案记录对不上的事实：\n\n① main 的分支保护整个没了，不是摘掉那条必需检查而已：\n gh api .../branches/main/protection → 404 \"Branch not protected\"。\n 镜像因此重新推得动，直推 54e6324..12093b8 成功并已核对 github/main 与本地一致；\n 「镜像停在 3308542」这句作废。谁摘的、何时、为什么未知，gh 查不到保护变更历史。\n 本会话未恢复保护、未改动任何 GitHub 设置——不知原委时自行配回去，风险大于留着不动。\n\n② 计费没解决，原记录前半截仍成立：该次直推触发的 run 35410044850 三 job failure、\n 五 skipped，注解逐字仍是 recent account payments have failed。\n\n故「镜像推得动」≠「远端验过了」：这批提交在 GitHub 上一次门禁都没跑过，远端只是有了代码。\n\n第三条是写给下一个人的：本条与同段「不要靠摘必需检查绕过」的口径现在对不上现实，须由\n仓库管理权限持有者二选一收口——恢复保护，或把「为什么现在不设保护」写成显式裁决并给\n复核期。保持现状而不记录，等于让一条在案的治理资产无声消失。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/a178ba36c65d82fab8106fa7395dd65f927876ad","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:45:16-07:00","added":[],"removed":[],"modified":["CLAUDE.md"]}],"total_commits":0,"head_commit":{"id":"b90d7a151e5e9451fa12fb6e883b8898552124df","message":"chore(reports): C 组三份真实验收回绑 @ 8a621fd —— 在 adversarial 隔离栈上跑，共享底座与 ms23 均未触碰\n\nC 组（runtime-acceptance / mainline-acceptance / revocation-sla）需要真实 PG + Redis + Redpanda。\nms23 那套 35 分钟前刚被并行会话用过（容器 Exited），按 docs/持久主线本地验收.md「同名 project 即使\n容器刚启动也不能直接 up 覆盖，该名称已占用时应协调或选择已有获准且无人使用的测试环境」，改用\nadversarial（PG 55473 / Redis 56382 / Broker 59095，2026-09-12 获准、闲置 3 天、其 Broker 已在故障\n注入白名单）。全程 docker start 既有容器，未 compose up 覆盖任何 project。\n\n结果（均在干净检出 8a621fd 上产出，worktreeDirty=false）：\n runtime-acceptance passed 1001 tests（地板 775）、tenantRlsEnforced=1、双后端差分 0\n mainline-acceptance passed\n revocation-sla partial p95 5027ms / max 5041ms / 20 samples——远低于 MS-3 的 30s；\n partial 来自 employmentScope 链仍 pending-scope-consumer-enforcement，\n 以及生产投送/负载/staging 四项 unverified，是既定状态不是失败\n conformance-differential 作为 runtime 验收的副产物一并刷新（同样已登记 severity=warn）\n\n过程中一处失败是我搭环境搭错的，记下来免得下次再犯：首轮 e2e/identity-profile 断言\n`elevated=false` 实测 true——mainline:prepare 只为 fact/permission/audit/owner/consumer 建非超级用户\n角色，identity/credential/scope/aigateway 四个库是我用管理员 platform 手建的，identity 的连接因此是\n特权角色。REASSIGN OWNED 不适用（platform 持有系统对象），改为重建该库并 OWNER 给\nplatform_identity_test_app、以该角色重新 deploy 迁移后转绿。credential / scope 没有\nprisma:migrate:deploy 脚本是对的——它们是 state=shape 模块，按仓纪律不得有迁移。\n\n隔离与收尾：凭据只经仓外 0600 文件（/tmp/c3-mainline.env、/tmp/c3-env.sh），不入仓、不打印；\n验收在独立 worktree 里 pnpm install 自己的 node_modules，不软链主检出，避免与并行会话抢 .prisma；\nadversarial 三容器跑完恢复为 Exited（与我接手前一致）。主检出里并行会话另有十余份报告 WIP，一份没碰。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/b90d7a151e5e9451fa12fb6e883b8898552124df","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:45:56-07:00","added":[],"removed":[],"modified":["reports/mainline-acceptance.latest.json","reports/revocation-sla.latest.json","runtime/reports/conformance-differential.latest.json","runtime/reports/runtime-acceptance.latest.json"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":22073,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T08:38:11+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
14
|
0
|
1789779515
|
0
|
1789778893
|
1789779515
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24201
|
chore(reports): runtime 静态门禁链 18 份回绑 @ 8a621fd
|
116
|
5
|
platform.yml
|
167
|
5
|
0
|
refs/heads/main
|
12093b843ef69d300370e5da16fcca3399c14d40
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"6687aecfababeb5c03b9fa56d306e8212e79e107","after":"12093b843ef69d300370e5da16fcca3399c14d40","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/6687aecfababeb5c03b9fa56d306e8212e79e107...12093b843ef69d300370e5da16fcca3399c14d40","commits":[{"id":"12093b843ef69d300370e5da16fcca3399c14d40","message":"chore(reports): runtime 静态门禁链 18 份回绑 @ 8a621fd\n\n8a621fd 订正动态区 UI 条目后，docs-truth 的作用域（含 runtime/CLAUDE.md）随之过期；\nruntime check 是一条链、跑一次重出全部 16 项，故整批回绑而不是只挑一份——绑定一致比\n少改几个文件重要（同 b60cc18 的口径）。顺带清掉此前 error 级的 runtime-governance\n（绑 7fc7f02，作用域内 3 个文件已变）。\n\n在 HEAD 的干净 worktree（企业控制面/.worktrees/）装依赖 + prisma:generate 后跑\npnpm --dir runtime check：exit 0、16 项全过；只带回 provenance 绑 8a621fd 且\nworktreeDirty=false 的 18 份。\n\n刻意未带回 4 份：runtime-acceptance / ui-acceptance / conformance-differential 需真实\nDB 与浏览器，不由静态链产出，保持各自原绑定（08c3788 / 67e8193）；framework-migration\n至今没有嵌套 provenance，已在 evidence-scopes 未登记账里具名。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/12093b843ef69d300370e5da16fcca3399c14d40","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:33:42-07:00","added":[],"removed":[],"modified":["runtime/reports/agent-adapters.latest.json","runtime/reports/conformance-matrix.latest.json","runtime/reports/contract-consumers.latest.json","runtime/reports/docs-truth.latest.json","runtime/reports/dual-backend-parity.latest.json","runtime/reports/fork-readiness.latest.json","runtime/reports/governance-docs.latest.json","runtime/reports/governance-rules.latest.json","runtime/reports/governance-status.latest.json","runtime/reports/governance.latest.json","runtime/reports/migrations.latest.json","runtime/reports/naming.latest.json","runtime/reports/permission-catalog.latest.json","runtime/reports/platform-ops-definitions.latest.json","runtime/reports/runtime-governance.latest.json","runtime/reports/schema-sync.latest.json","runtime/reports/statemachine-write-guard.latest.json","runtime/reports/validation-source.latest.json"]},{"id":"8a621fdb03a44cebc985f97332ead8bbb785a685","message":"docs(runtime): 动态区 UI 条目订正三处——SHA、端口、验收库；check:docs-truth 转绿\n\nc4ec6f6 把 ui-acceptance 重绑到 67e8193 后没回灌动态区，check:docs-truth 的\nfreshness-sha-ui 从那时起一直红。逐项核对报告后发现**这一行有三处与报告对不上，\n而门禁只抓得到其中一处**：\n\n clean `1b23285` → 报告绑 `67e8193`（门禁抓到的就这条）\n web :3120 / api :3222 → 报告是 web :3100 / api :3202\n 「同上验收库与 Redis」 → UI 用的是 enterprise_platform_ui_acceptance，\n 与上一行 runtime 那轮的 enterprise_platform_acceptance_20260918\n 不是同一个库；Redis 逻辑库（:56380 db7）才是相同的\n\n只换 SHA 会把红变绿却留着后两句假话，故三处一并订正，并把「不是同一个库」写明——\n这一行紧跟在 runtime 条目之后，「同上」原本就容易被读成同一套基座。\n\n顺带记下门禁的覆盖边界：freshness-sha-* 只断言「动态区是否以声明形式写出报告当前的\nSHA」，同一条目里的端口、库名、用例描述都不在它的判据内，可以静默漂移——本次两处正是\n这样漂的。这不是缺陷而是取舍（把整行结构化对账会把门禁变成文档格式检查器），但读的人\n要知道绿不代表整行都对。\n\n核验：pnpm --dir runtime check 现 exit 0、16 项全过（本会话首次整条绿）；\ncheck:governance-docs 绿（AGENTS.md 符号链接一致）。本次跑链改脏的 runtime/reports\n已全部还原，报告另在干净检出重出。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/8a621fdb03a44cebc985f97332ead8bbb785a685","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:32:06-07:00","added":[],"removed":[],"modified":["runtime/CLAUDE.md"]}],"total_commits":0,"head_commit":{"id":"12093b843ef69d300370e5da16fcca3399c14d40","message":"chore(reports): runtime 静态门禁链 18 份回绑 @ 8a621fd\n\n8a621fd 订正动态区 UI 条目后，docs-truth 的作用域（含 runtime/CLAUDE.md）随之过期；\nruntime check 是一条链、跑一次重出全部 16 项，故整批回绑而不是只挑一份——绑定一致比\n少改几个文件重要（同 b60cc18 的口径）。顺带清掉此前 error 级的 runtime-governance\n（绑 7fc7f02，作用域内 3 个文件已变）。\n\n在 HEAD 的干净 worktree（企业控制面/.worktrees/）装依赖 + prisma:generate 后跑\npnpm --dir runtime check：exit 0、16 项全过；只带回 provenance 绑 8a621fd 且\nworktreeDirty=false 的 18 份。\n\n刻意未带回 4 份：runtime-acceptance / ui-acceptance / conformance-differential 需真实\nDB 与浏览器，不由静态链产出，保持各自原绑定（08c3788 / 67e8193）；framework-migration\n至今没有嵌套 provenance，已在 evidence-scopes 未登记账里具名。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/12093b843ef69d300370e5da16fcca3399c14d40","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:33:42-07:00","added":[],"removed":[],"modified":["runtime/reports/agent-adapters.latest.json","runtime/reports/conformance-matrix.latest.json","runtime/reports/contract-consumers.latest.json","runtime/reports/docs-truth.latest.json","runtime/reports/dual-backend-parity.latest.json","runtime/reports/fork-readiness.latest.json","runtime/reports/governance-docs.latest.json","runtime/reports/governance-rules.latest.json","runtime/reports/governance-status.latest.json","runtime/reports/governance.latest.json","runtime/reports/migrations.latest.json","runtime/reports/naming.latest.json","runtime/reports/permission-catalog.latest.json","runtime/reports/platform-ops-definitions.latest.json","runtime/reports/runtime-governance.latest.json","runtime/reports/schema-sync.latest.json","runtime/reports/statemachine-write-guard.latest.json","runtime/reports/validation-source.latest.json"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":22003,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T08:26:16+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
26
|
1789778463
|
1789779510
|
0
|
1789778291
|
1789779516
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24200
|
chore(reports): identity docs-truth 回绑 @ 1f3ff8c — chore(reports): identity docs-truth 回绑 @ 1f3ff8c —— 含新增的两条 freshness 断言...
|
116
|
5
|
platform.yml
|
166
|
5
|
0
|
refs/heads/main
|
6687aecfababeb5c03b9fa56d306e8212e79e107
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"e3b9d12525448038fd8d8ac3f3c1470552ce4ff7","after":"6687aecfababeb5c03b9fa56d306e8212e79e107","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/e3b9d12525448038fd8d8ac3f3c1470552ce4ff7...6687aecfababeb5c03b9fa56d306e8212e79e107","commits":[{"id":"6687aecfababeb5c03b9fa56d306e8212e79e107","message":"chore(reports): identity docs-truth 回绑 @ 1f3ff8c —— 含新增的两条 freshness 断言\n\n绑 1f3ff8c、worktreeDirty=false、docsTruthViolations=0。该门禁自身零依赖，故在 HEAD 的\n干净 worktree 里直接 node 即可跑出，不需要 install。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/6687aecfababeb5c03b9fa56d306e8212e79e107","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:24:55-07:00","added":[],"removed":[],"modified":["identity/reports/docs-truth.latest.json"]},{"id":"1f3ff8c8f7d688955cc786f83cc79cc21fd73cc2","message":"feat(identity): check:docs-truth 补 freshness-sha 断言，证据处置出口 ② 落地\n\na48cbd6 登记的二选一出口，门禁 Owner 取 ②。identity 的报告此前两头都照不到：\nidentity/reports 不在 governance/check-evidence-freshness.mjs 的扫描面内（那边只扫\nreports/ 与 runtime/reports/），而 identity 自带的 check:docs-truth 有 0 条 freshness\n断言（runtime 版有 4 条）。当日实测它已真的漂了一次——动态区写 255 / 12 @ 85d538b，\n报告实际是 25ead3e（261 项）与 90cda56（UI 12）。\n\n口径移植自 runtime/scripts/check-docs-truth.mjs，保留其三条设计判断，逐条都有理由：\n\n 刻意不含静态级——governance.latest.json 每次 check 都重绑当时 HEAD，对它断言等价于\n 「每次提交都必须改文档」，提交报告后必红，那是会误杀的门禁不是有牙的门禁。\n\n 未接线的级别跳过而不是判红——恒红门禁不携带信息。本仓只接了 check:runtime 与 check:ui，\n 故只有这两条；deployment / production 两级在 identity 不存在，未列入。\n\n 必须是声明形式——上游实锤过一次自我假绿：条目为说明陈旧度写了提交区间 A..B，裸 includes\n 命中散文里的顺带提及，于是「文档声明 A、报告是 B」这个断言唯一要防的形态被整个绕过。\n\n与上游的唯一差异：本仓动态区写法是 clean commit `sha`（上游是 clean `sha`），两种都认——\n让断言认识本仓真实措辞，而不是为迁就工具去改文档。\n\n负向三项实做：① 把 runtime 条目 SHA 改回 85d538b → exit 1 并点名期望形式；② SHA 只出现在\n提交区间里（clean commit `85d538b`（区间 85d538b..25ead3e））→ 仍 exit 1，即上游那条陷阱\n在本仓也拦得住；③ UI 条目单独篡改 → exit 1。三项还原后均 exit 0。\n\nevidence-scopes 的处置说明同步更新：② 标记为已实施并记下负向证据；① 明示未做且暂不做\n（identity 按仓纪律 7 本就与根链分离，扩面会把 15 份一次性拖进根链账），现状是「identity\n的报告由 identity 自己的门禁守新鲜度」，边界清楚。本条仍随 PF-07 阶段 2 折入后作废。\n\n报告未随本提交：identity/reports/docs-truth.latest.json 我跑出来的那份绑脏树，已还原，\n按纪律在干净检出重出后另起 chore(reports)。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/1f3ff8c8f7d688955cc786f83cc79cc21fd73cc2","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:24:38-07:00","added":[],"removed":[],"modified":["governance/evidence-scopes.json","identity/scripts/check-docs-truth.mjs"]},{"id":"a0145351979f7cf18de29b182000f791d6f5de05","message":"chore(reports): release-manifest 与 port-conformance 回绑 @ e3b9d12 —— 离线可跑的那批收口\n\n排查 7 条过期证据后分三组：A 组离线可跑、B 组要重建镜像并重启容器、C 组要真实 DB / Redpanda 验收。\n本次收 A 组。sbom 那条已由并行会话 e3b9d12 先收（包清单一字未变，因为镜像还是 106 个提交前那个），\n故 A 组实收两条。\n\n- release-manifest：结论仍是 partial，缺 signature（缺少与本次 registry 镜像绑定且 cosign 验证成功的\n 签名，§3A D-2）。回绑的是「当前确实缺这一项」这个事实，不是把它跑绿。\n- port-conformance：passed。\n\n回绑做法同前几次：企业控制面/.worktrees/rebind-a 开 detached 干净检出（HEAD e3b9d12），软链主检出的\nnode_modules（写进本地 info/exclude，用后删除），build contracts / modules / clients 后逐条跑，\n只把这两份 report 拷回主检出、按 pathspec 单独提交——主检出里并行会话另有十余份报告 WIP，一份没碰。\n\n过程中一处返工：首次跑 port-conformance 失败于 `Command \"vitest\" not found`——runtime/test 是独立\nworkspace 包，我第一轮软链只覆盖了 modules / packages / apps / clients，漏了它。补上软链后 passed。\n失败那份报告没有拷回。\n\n结果：两份 provenance 均 gitSha=e3b9d12、worktreeDirty=false；e3b9d12..HEAD 未触及这两份的作用域输入，\n绑定仍成立。\n\n未收（已登记，需你决定）：\n B 组 deployed-runtime —— BUILT_IMAGE_SOURCE_BEHIND，运行容器镜像源 05e3826，HEAD 已有 23 个运行时\n 输入变更（其中含本会话接线那批 fixture-evaluator 与夹具）。要 image:build 重建 + 重启 runtime 容器。\n C 组 runtime-acceptance / mainline-acceptance / revocation-sla —— 要真实 PostgreSQL + Redis + Redpanda\n 验收；本机 dev 底座 13 个容器在跑，但会真实读写隔离库。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/a0145351979f7cf18de29b182000f791d6f5de05","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:24:14-07:00","added":[],"removed":[],"modified":["reports/port-conformance.latest.json","reports/release-manifest.latest.json"]}],"total_commits":0,"head_commit":{"id":"6687aecfababeb5c03b9fa56d306e8212e79e107","message":"chore(reports): identity docs-truth 回绑 @ 1f3ff8c —— 含新增的两条 freshness 断言\n\n绑 1f3ff8c、worktreeDirty=false、docsTruthViolations=0。该门禁自身零依赖，故在 HEAD 的\n干净 worktree 里直接 node 即可跑出，不需要 install。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/6687aecfababeb5c03b9fa56d306e8212e79e107","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:24:55-07:00","added":[],"removed":[],"modified":["identity/reports/docs-truth.latest.json"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":21967,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T08:22:46+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
33
|
1789778117
|
1789778261
|
0
|
1789777575
|
1789778290
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24199
|
chore(reports): sbom 回绑——包清单一字未变，因为镜像还是 106 个提交前那个
|
116
|
5
|
platform.yml
|
165
|
5
|
0
|
refs/heads/main
|
e3b9d12525448038fd8d8ac3f3c1470552ce4ff7
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"d7d9fe5adc753a199dba41ec4be184d3db5053c4","after":"e3b9d12525448038fd8d8ac3f3c1470552ce4ff7","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/d7d9fe5adc753a199dba41ec4be184d3db5053c4...e3b9d12525448038fd8d8ac3f3c1470552ce4ff7","commits":[{"id":"e3b9d12525448038fd8d8ac3f3c1470552ce4ff7","message":"chore(reports): sbom 回绑——包清单一字未变，因为镜像还是 106 个提交前那个\n\nlockfile 模式扫 reports/image-digest.json 指向的镜像（sha256:c0869934…，本机 docker 里还在），\n268 个包，worktreeDirty=false。\n\n**这次回绑没有改变任何实质结论：** 触发过期的是 63ff31f 改的 runtime/pnpm-lock.yaml（把 clients\n三包的 devDeps pin 成 exact），而 SBOM 描述的是镜像里的物料——镜像绑的源提交 05e3826 距当前 HEAD\n106 个提交，那些改动根本还没进镜像。逐包比对确认：新旧两份的包清单完全一致，变的只有 SPDX 生成时间戳。\n\n诚实读法：**provenance.gitSha 说「我是在哪跑的」，sourceSha 说「我描述的是 05e3826 的镜像」——\n两者相距 106 个提交。** 作用域纳入 runtime/pnpm-lock.yaml，是为了在锁文件变动时提醒「SBOM 可能\n不再反映当前源码」；正确回应是**重建镜像**（需 BuildKit + Gitea token，不在本机这轮范围），\n而不是重跑一遍生成器。回绑只是让证据链不挂着一条无人处理的红，没有解决镜像落后本身。\n\ncoverage 仍是 partial：只含 /srv/runtime/apps/api-nestjs 的 Node 依赖，不含基础镜像的 Debian 包。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/e3b9d12525448038fd8d8ac3f3c1470552ce4ff7","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:22:33-07:00","added":[],"removed":[],"modified":["reports/sbom.latest.json","reports/sbom.spdx.json"]},{"id":"a48cbd69d9411a1c7bc85e0fb97520c4392d1e73","message":"docs(证据): 补 identity/reports 的扫描面处置说明，并修掉它已造成的一处数字漂移\n\n全仓盲区复核查出的唯一真发现：check-evidence-freshness.mjs 只扫 reports/ 与\nruntime/reports/ 两个目录（写死在源码里），identity/reports/ 的 15 份报告既不在作用域\n登记里、也不在未登记账里——不是「未登记」，是压根没被看见。\n\nidentity 是 PF-07 阶段 1 的过渡工作区，按仓纪律 7 其三级门禁不进根 pnpm check 链，这层\n分离是有意的；但报告新鲜度的失察不是：那 15 份确实被当证据用（verify:candidate 从\nidentity/reports/baseline.json 读测试地板，docs/项目完整能力表.md E03 直接引用两份），\n而 identity 自带的 check:docs-truth 有 0 条 freshness-sha-* 断言（runtime 版有 4 条），\n于是「报告往前跑了、文档没跟上」这类漂移没有任何一道门禁能发现。\n\n它已经真的发生了。三处文档写 runtime 255 / UI 12 @ 85d538b，而报告实际绑：\nruntime-acceptance @ 25ead3e（2026-09-12，261 项 / 地板 255）、ui-acceptance @ 90cda56\n（2026-09-13，12 项）、dual-backend-behavior @ 25ead3e（差分 0）。三处按文档既有的\n「当前 + 历史」体例改正，85d538b 那轮移入历史；该次报告未记录的细节（新 UI 运行的\nWeb / API 端口）不补写，明示未记录。\n\n处置说明写进 undeclaredNote，含二选一出口（纳入扫描面逐份登记，或给 identity 的\ncheck-docs-truth 补 freshness-sha-* 断言）并注明 PF-07 阶段 2 后此条作废——但在那之前\n不得把「将来会消失」当作现在不管的理由。归门禁 Owner 裁。\n\n核验：check:evidence 未登记账仍 10 份 0 份无说明；identity check:governance-docs 与\ncheck:docs-truth 均绿；工作区一致性 L4 / L10 / L13 均 0。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/a48cbd69d9411a1c7bc85e0fb97520c4392d1e73","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:20:16-07:00","added":[],"removed":[],"modified":["CLAUDE.md","docs/项目完整能力表.md","governance/evidence-scopes.json","identity/CLAUDE.md"]}],"total_commits":0,"head_commit":{"id":"e3b9d12525448038fd8d8ac3f3c1470552ce4ff7","message":"chore(reports): sbom 回绑——包清单一字未变，因为镜像还是 106 个提交前那个\n\nlockfile 模式扫 reports/image-digest.json 指向的镜像（sha256:c0869934…，本机 docker 里还在），\n268 个包，worktreeDirty=false。\n\n**这次回绑没有改变任何实质结论：** 触发过期的是 63ff31f 改的 runtime/pnpm-lock.yaml（把 clients\n三包的 devDeps pin 成 exact），而 SBOM 描述的是镜像里的物料——镜像绑的源提交 05e3826 距当前 HEAD\n106 个提交，那些改动根本还没进镜像。逐包比对确认：新旧两份的包清单完全一致，变的只有 SPDX 生成时间戳。\n\n诚实读法：**provenance.gitSha 说「我是在哪跑的」，sourceSha 说「我描述的是 05e3826 的镜像」——\n两者相距 106 个提交。** 作用域纳入 runtime/pnpm-lock.yaml，是为了在锁文件变动时提醒「SBOM 可能\n不再反映当前源码」；正确回应是**重建镜像**（需 BuildKit + Gitea token，不在本机这轮范围），\n而不是重跑一遍生成器。回绑只是让证据链不挂着一条无人处理的红，没有解决镜像落后本身。\n\ncoverage 仍是 partial：只含 /srv/runtime/apps/api-nestjs 的 Node 依赖，不含基础镜像的 Debian 包。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/e3b9d12525448038fd8d8ac3f3c1470552ce4ff7","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:22:33-07:00","added":[],"removed":[],"modified":["reports/sbom.latest.json","reports/sbom.spdx.json"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":21838,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T08:18:45+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
0
|
1789777575
|
0
|
1789777366
|
1789777575
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24198
|
chore(reports): 工作台两份快照回绑 @ a157074
|
116
|
5
|
platform.yml
|
164
|
5
|
0
|
refs/heads/main
|
d7d9fe5adc753a199dba41ec4be184d3db5053c4
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"a15707432a286d35400876ba0420d6953cdee0fa","after":"d7d9fe5adc753a199dba41ec4be184d3db5053c4","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/a15707432a286d35400876ba0420d6953cdee0fa...d7d9fe5adc753a199dba41ec4be184d3db5053c4","commits":[{"id":"d7d9fe5adc753a199dba41ec4be184d3db5053c4","message":"chore(reports): 工作台两份快照回绑 @ a157074\n\n经 governance/rebind-reports.mjs 在 HEAD 的临时干净检出里重跑，两份均绑 a157074 /\nworktreeDirty=false。两份由同一脚本（build-workbench-snapshots.mjs）产出，rebind 登记要求\n一起带回——分开提交会让它们绑不同提交，「同一次快照」这个前提就没了。\n\nops-snapshot 此前绑 73e36fd 过期，触发是并行会话的 21d7c1a 改了 docs/runbook.md\n（该报告的作用域含它）。回绑前先还原了 reports/evidence-freshness.latest.json——\n那份是本会话跑 pnpm check 时就地覆写的脏树产物（绑 5116dc5、dirty=true），\n它落在 ops-snapshot 的作用域里，不还原 rebind 会因「作用域内有未提交输入」拒绝。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/d7d9fe5adc753a199dba41ec4be184d3db5053c4","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:18:31-07:00","added":[],"removed":[],"modified":["reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json"]}],"total_commits":0,"head_commit":{"id":"d7d9fe5adc753a199dba41ec4be184d3db5053c4","message":"chore(reports): 工作台两份快照回绑 @ a157074\n\n经 governance/rebind-reports.mjs 在 HEAD 的临时干净检出里重跑，两份均绑 a157074 /\nworktreeDirty=false。两份由同一脚本（build-workbench-snapshots.mjs）产出，rebind 登记要求\n一起带回——分开提交会让它们绑不同提交，「同一次快照」这个前提就没了。\n\nops-snapshot 此前绑 73e36fd 过期，触发是并行会话的 21d7c1a 改了 docs/runbook.md\n（该报告的作用域含它）。回绑前先还原了 reports/evidence-freshness.latest.json——\n那份是本会话跑 pnpm check 时就地覆写的脏树产物（绑 5116dc5、dirty=true），\n它落在 ops-snapshot 的作用域里，不还原 rebind 会因「作用域内有未提交输入」拒绝。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/d7d9fe5adc753a199dba41ec4be184d3db5053c4","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:18:31-07:00","added":[],"removed":[],"modified":["reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":21824,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T08:13:30+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
0
|
1789777366
|
0
|
1789777125
|
1789777366
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24196
|
feat(治理): 删除 G-12 本地旁路开关——在计费尚未恢复时删，此后发布只有 CI 一条路
|
116
|
5
|
platform.yml
|
162
|
5
|
0
|
refs/heads/main
|
1de65fbbf4f2ae73c374662b9e342934b925556b
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"aac7c6046805e0336f73206b88fdd993afc991b9","after":"1de65fbbf4f2ae73c374662b9e342934b925556b","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/aac7c6046805e0336f73206b88fdd993afc991b9...1de65fbbf4f2ae73c374662b9e342934b925556b","commits":[{"id":"1de65fbbf4f2ae73c374662b9e342934b925556b","message":"feat(治理): 删除 G-12 本地旁路开关——在计费尚未恢复时删，此后发布只有 CI 一条路\n\nG-12 开头把这条通道登记为「临时设施」，约定「计费恢复、CI 发布链可用后应删除」。\n实际走向是它被用了**五趟**（rc.2 / rc.3 / rc.4 / rc.5 / rc.6），成了常态通道。\n\n**在计费尚未恢复时就删，是有意的。** 按原约定等计费恢复再删，等于把退场时机交给一件谁也不知道\n什么时候发生的事；而每多走一趟，「顺手再走一次」的门槛就低一分。删除当天实测：GitHub Actions\n最新 run 35404565689（2026-09-18T23:09，main）仍 failure，job 形态仍是计费停摆的典型\n（两个 failure + 其余 skipped），GitHub 镜像落后 46 条。\n\n改动：publish-rc.mjs 删去 localBypass 分支与 PLATFORM_RELEASE_BYPASS_CI_EVIDENCE 判读，\n守门回到 if (!dir || process.env.GITHUB_ACTIONS !== 'true')。\nprepare-package-release.mjs 的七道 require 未动，一条也没放宽。\n\n验证（退出码直取、不经管道）：非 CI 环境退出码 1；**带已废弃开关退出码同样是 1**，\n脚本内对该变量的引用数为 0。\n\n**直接后果是有意接受的：CI 发布链不可用期间发不了任何 RC**，想发就得先去修 Billing。\n沉没成本一并记清楚：contracts / governance 的 rc.0—rc.6 七个版本永远不会有阶段门证据——\npublish-rc.mjs 拒绝以不同字节覆盖已发布版本，而 CI 版本必然含不同的 provenance.json，\n这七个版本号无法被 CI 重发。\n\nG-12 追加「关闭记录」一节（本文自己要求的），前五节留在原处不动：它们是这条通道存在过、\n以及它如何从「临时」变成「常态」的完整账。CLAUDE.md 的 contracts 条目同步。\n要重新启用须经裁决并在 G-12 追加记录，不要直接把那段代码改回去。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/1de65fbbf4f2ae73c374662b9e342934b925556b","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:08:52-07:00","added":[],"removed":[],"modified":["CLAUDE.md","docs/G-12本地旁路发布记录-2026-09-13.md","governance/publish-rc.mjs"]}],"total_commits":0,"head_commit":{"id":"1de65fbbf4f2ae73c374662b9e342934b925556b","message":"feat(治理): 删除 G-12 本地旁路开关——在计费尚未恢复时删，此后发布只有 CI 一条路\n\nG-12 开头把这条通道登记为「临时设施」，约定「计费恢复、CI 发布链可用后应删除」。\n实际走向是它被用了**五趟**（rc.2 / rc.3 / rc.4 / rc.5 / rc.6），成了常态通道。\n\n**在计费尚未恢复时就删，是有意的。** 按原约定等计费恢复再删，等于把退场时机交给一件谁也不知道\n什么时候发生的事；而每多走一趟，「顺手再走一次」的门槛就低一分。删除当天实测：GitHub Actions\n最新 run 35404565689（2026-09-18T23:09，main）仍 failure，job 形态仍是计费停摆的典型\n（两个 failure + 其余 skipped），GitHub 镜像落后 46 条。\n\n改动：publish-rc.mjs 删去 localBypass 分支与 PLATFORM_RELEASE_BYPASS_CI_EVIDENCE 判读，\n守门回到 if (!dir || process.env.GITHUB_ACTIONS !== 'true')。\nprepare-package-release.mjs 的七道 require 未动，一条也没放宽。\n\n验证（退出码直取、不经管道）：非 CI 环境退出码 1；**带已废弃开关退出码同样是 1**，\n脚本内对该变量的引用数为 0。\n\n**直接后果是有意接受的：CI 发布链不可用期间发不了任何 RC**，想发就得先去修 Billing。\n沉没成本一并记清楚：contracts / governance 的 rc.0—rc.6 七个版本永远不会有阶段门证据——\npublish-rc.mjs 拒绝以不同字节覆盖已发布版本，而 CI 版本必然含不同的 provenance.json，\n这七个版本号无法被 CI 重发。\n\nG-12 追加「关闭记录」一节（本文自己要求的），前五节留在原处不动：它们是这条通道存在过、\n以及它如何从「临时」变成「常态」的完整账。CLAUDE.md 的 contracts 条目同步。\n要重新启用须经裁决并在 G-12 追加记录，不要直接把那段代码改回去。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/1de65fbbf4f2ae73c374662b9e342934b925556b","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:08:52-07:00","added":[],"removed":[],"modified":["CLAUDE.md","docs/G-12本地旁路发布记录-2026-09-13.md","governance/publish-rc.mjs"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":21727,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T08:08:25+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
0
|
1789776809
|
0
|
1789776552
|
1789776809
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24195
|
docs(提案): fixture-coverage 探针是否接进门禁流——请门禁 Owner 裁三 docs(提案): fixture-coverage 探针是否接进门禁流——请门禁 Owner 裁三件事...
|
116
|
5
|
platform.yml
|
161
|
5
|
0
|
refs/heads/main
|
aac7c6046805e0336f73206b88fdd993afc991b9
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"64bc6f5489ead3c65b23869f5e8866202e60b855","after":"aac7c6046805e0336f73206b88fdd993afc991b9","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/64bc6f5489ead3c65b23869f5e8866202e60b855...aac7c6046805e0336f73206b88fdd993afc991b9","commits":[{"id":"aac7c6046805e0336f73206b88fdd993afc991b9","message":"docs(提案): fixture-coverage 探针是否接进门禁流——请门禁 Owner 裁三件事\n\n不是裁决，未实施任何接线。提案的核心事实是一条结构性盲区：check:gate-flow 的扫描面是\n根 package.json 的 scripts，而这个探针根本不是一个 script——于是它对那道「专门用来抓\n门禁的失败信号没人看」的门禁结构性不可见，既不在统一流内也不在任何 CI 链里。\n\n价值证据是今天一天的实况：仅靠手动敲它，报出六个模块 10 处判定面「评估器没接线」\n（含 393 行、734 行两整支规则），驱动 permission 夹具 11 → 68、audit 27 → 82，并暴露出\n「按字段存在与否判放行」这一 bug 类。这些对当时在跑的每一道门禁都不可见——check:fixtures\n只能证明已登记的用例都对，证明不了该登记的都登记了。\n\n三个必须先解决的设计问题均已实测，其中第一条最要命：在干净检出里不构建直接跑，15 个\n套件全部跳过，而 --json 的两个总数双双为 0、退出码 0——naive 接进 CI 就是一道永远绿的\n门禁。另两条是陈旧 dist 会假红（本会话被 fact 误报咬过一次），以及 nowhereTotal 在改进\n过程中非单调（permission 实测 0 → 40 → 0），对它上棘轮会阻断正在改进覆盖的提交本身。\n\n推荐紧跟 check:fixtures 之后接（复用其构建，增量 1.4 秒）、空跑失败关闭、只对\nwiringTotal 上棘轮；若认为改造暂不值当，至少给它一条带复核期的登记。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/aac7c6046805e0336f73206b88fdd993afc991b9","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:07:21-07:00","added":["docs/夹具覆盖度探针接入提案-2026-09-18.md"],"removed":[],"modified":[]}],"total_commits":0,"head_commit":{"id":"aac7c6046805e0336f73206b88fdd993afc991b9","message":"docs(提案): fixture-coverage 探针是否接进门禁流——请门禁 Owner 裁三件事\n\n不是裁决，未实施任何接线。提案的核心事实是一条结构性盲区：check:gate-flow 的扫描面是\n根 package.json 的 scripts，而这个探针根本不是一个 script——于是它对那道「专门用来抓\n门禁的失败信号没人看」的门禁结构性不可见，既不在统一流内也不在任何 CI 链里。\n\n价值证据是今天一天的实况：仅靠手动敲它，报出六个模块 10 处判定面「评估器没接线」\n（含 393 行、734 行两整支规则），驱动 permission 夹具 11 → 68、audit 27 → 82，并暴露出\n「按字段存在与否判放行」这一 bug 类。这些对当时在跑的每一道门禁都不可见——check:fixtures\n只能证明已登记的用例都对，证明不了该登记的都登记了。\n\n三个必须先解决的设计问题均已实测，其中第一条最要命：在干净检出里不构建直接跑，15 个\n套件全部跳过，而 --json 的两个总数双双为 0、退出码 0——naive 接进 CI 就是一道永远绿的\n门禁。另两条是陈旧 dist 会假红（本会话被 fact 误报咬过一次），以及 nowhereTotal 在改进\n过程中非单调（permission 实测 0 → 40 → 0），对它上棘轮会阻断正在改进覆盖的提交本身。\n\n推荐紧跟 check:fixtures 之后接（复用其构建，增量 1.4 秒）、空跑失败关闭、只对\nwiringTotal 上棘轮；若认为改造暂不值当，至少给它一条带复核期的登记。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/aac7c6046805e0336f73206b88fdd993afc991b9","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:07:21-07:00","added":["docs/夹具覆盖度探针接入提案-2026-09-18.md"],"removed":[],"modified":[]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":21719,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T08:06:18+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
0
|
1789776552
|
0
|
1789776505
|
1789776552
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24194
|
fix(modules): audit 追加准入 plan() 补请求体检——兜底 deny-all fix(modules): audit 追加准入 plan() 补请求体检——兜底 deny-all 此前也抛...
|
116
|
5
|
platform.yml
|
160
|
5
|
0
|
refs/heads/main
|
64bc6f5489ead3c65b23869f5e8866202e60b855
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"03af35c77d7373f504875531e22ec6fb8e078898","after":"64bc6f5489ead3c65b23869f5e8866202e60b855","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/03af35c77d7373f504875531e22ec6fb8e078898...64bc6f5489ead3c65b23869f5e8866202e60b855","commits":[{"id":"64bc6f5489ead3c65b23869f5e8866202e60b855","message":"fix(modules): audit 追加准入 plan() 补请求体检——兜底 deny-all 此前也抛\n\n71a04df 把本域接进了门禁（10 处未接线全部收口），但没动判定本身。实测 dist：\nplan(undefined) 在 request.auditEventId 上抛 TypeError，createRuntimeAuditAppendAdmissionPlanner()\n的 bundled deny-all 走同一条路——\"什么都不放行\"的最后一道在畸形入参下抛异常，等于没有兜底。\n请求来自 JSON（夹具、Owner 写入口载荷），声明类型只约束调用方。\n\n本域其余部分改前就已失败关闭，一行未动：plan({}) → REJECT、details 非对象 → REJECT、\nchanges 非数组 → REJECT、refresh(undefined) → applied:false、快照 validated 非真在 create 期抛、\ndetails 带 password → AUDIT_DETAIL_FORBIDDEN 且回 forbiddenDetails、outcome 大写 → REJECT。\n\n补 AUDIT_APPEND_REQUEST_INVALID 一条稳定原因码并钉进夹具（71a04df 的 81 例未覆盖它——\n该原因码此前不存在）。夹具 81 → 82 例（正 11 / 反 71）0 失败；模块单测 136 例；\n负向实做：把该例声明原因改成不会产生的串，门禁 exit 1 并点名，还原后 exit 0。\n覆盖度探针两档归零（未接线 0 处、夹具与单测都没有 0 条）。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/64bc6f5489ead3c65b23869f5e8866202e60b855","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:03:47-07:00","added":[],"removed":[],"modified":["runtime/modules/audit/src/domain/audit-append-planner.ts","runtime/modules/audit/test/fixtures/audit.fixtures.json"]},{"id":"71a04df0f09c8ff265e6f87c0f9016b61f84b4eb","message":"test(runtime): audit 追加准入接进门禁，10 处未接线全部收口——三档归零，17 套件 706 例\n\n最后一处：LocalAuditAppendAdmissionPlanner（734 行、本仓最大的一支 planner、三个公开方法）整支未接线。\n既有四条规则走的是事件预检与提交协议；追加准入——服务与动作登记、环境 allowlist、结果与理由码\nallowlist、details / changes 白名单与上限、权限与 Scope 决策引用、时钟偏移与事件时效、快照热更——\n一条都不在门禁上。补 append-plan / append-refresh 两条规则，判定按 kind（BLOCKED 携带 blockers）。\n接上后新暴露 41 条，逐条钉完回到 0。夹具 27 → 81 例（正 11 / 反 70）。\n\n顺带补掉 permission 的 2 条残留「仅单测」（ACTOR_CREDENTIAL_MISMATCH / TENANT_ID_INVALID）——\n那个模块的三支判定由并行会话 2822c4d 接线，这两条是接线后新暴露、尚未钉住的。夹具 68 → 70 例。\n\n至此 CLAUDE.md 登记的 10 处未接线全部收口，接线顺序与新暴露的原因码数：\n 跨域流程 refresh +4 / scope 整支 +15 / credential 整支 +6 / ai-gateway 路由与 planAiRoute +7 /\n fact 导出准入 +34 / permission 三支（并行会话，残留 2 条本次补）/ audit 追加准入 +41\n合计 109 条原因码此前任何入口都走不到——这正是「读数为 0 不等于收口」的量级。\nCLAUDE.md 同段已从「均未处理」改为已收口，并留下这份接线顺序与数字。\n\n证据：pnpm check:fixtures 17 套件 706 例 0 失败 0 不可用（此前 468 例）；\nfixture-coverage 三档（都没有 / 仅单测 / 未接线）15 个套件全为 0；\nmodule-audit test 135/135、module-permission test 110/110、两模块 typecheck 绿；\n工作区一致性门禁只剩既有的 L9 compose project 撞名。\n规则源码一行未改——七次接线动的都只是评估器与夹具。本次不回绑任何 reports/。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/71a04df0f09c8ff265e6f87c0f9016b61f84b4eb","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:03:02-07:00","added":[],"removed":[],"modified":["CLAUDE.md","runtime/modules/audit/src/domain/fixture-evaluator.ts","runtime/modules/audit/test/fixtures/audit.fixtures.json","runtime/modules/permission/test/fixtures/permission.fixtures.json"]},{"id":"68116db133192fb66e0a6f84ee7b34cac74c9667","message":"test(runtime): fact 的生产侧导出准入不在门禁上——补 export-plan / export-refresh，10 处的第 6 处\n\n结构比对报出 LocalFactExportAdmissionPlanner（549 行、三个公开方法）整支未接线：本模块此前只有\ndelivery 一条规则，管的是消费侧分类（重复 / 乱序 / 缺口 / 毒消息）；生产侧的导出准入——事实登记、\n生产者应用与主体、Schema 摘要与兼容性、实体前缀、目录版本水位、双时间顺序、快照热更——一条都不在\n门禁上。判定逻辑一行未改，判定按 kind（BLOCKED 携带 blockers 而非 reasons）。\n\n接上后新暴露 33 条「夹具与单测都没有」+ 1 条「仅单测」，是本批到目前为止最多的一次——因为这支\nplanner 的请求体检面最宽（26 个字段）。逐条钉完回到 0。\n\n覆盖：夹具 10 → 56 例（正 5 / 反 51），规则 1 → 3；三档均为 0。新钉住的包括\nFACT_SCHEMA_NOT_REGISTERED / FACT_PRODUCER_APP_MISMATCH / FACT_PRODUCER_PRINCIPAL_NOT_REGISTERED /\nFACT_SCHEMA_DIGEST_MISMATCH / FACT_ENTITY_ID_PREFIX_MISMATCH / FACT_CATALOG_VERSION_MISMATCH /\nRECORDED_AT_BEFORE_EFFECTIVE_AT——\"谁有资格往事实流里写\"这一整面此前门禁上一条没有。\n\n工具化：这轮把「按探针给出的触发路径逐条生成用例并用真实产出回填」写成了一次性脚本跑（34 例），\n比手写快得多，也避免了我前几轮那种\"挑错底例\"的手误；每例生成后仍逐条核了\"确实拒绝\"。\n\n证据：pnpm --dir runtime --filter @juhai/module-fact test 94/94、typecheck 绿、\n该套件夹具 56/56 失败 0、fixture-coverage 三档全 0。本次不回绑任何 reports/。\n\n进度：10 处已收 6 处。余 4 处在 permission 3 / audit 1。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/68116db133192fb66e0a6f84ee7b34cac74c9667","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:01:01-07:00","added":[],"removed":[],"modified":["runtime/modules/fact/src/domain/fixture-evaluator.ts","runtime/modules/fact/test/fixtures/fact.fixtures.json"]}],"total_commits":0,"head_commit":{"id":"64bc6f5489ead3c65b23869f5e8866202e60b855","message":"fix(modules): audit 追加准入 plan() 补请求体检——兜底 deny-all 此前也抛\n\n71a04df 把本域接进了门禁（10 处未接线全部收口），但没动判定本身。实测 dist：\nplan(undefined) 在 request.auditEventId 上抛 TypeError，createRuntimeAuditAppendAdmissionPlanner()\n的 bundled deny-all 走同一条路——\"什么都不放行\"的最后一道在畸形入参下抛异常，等于没有兜底。\n请求来自 JSON（夹具、Owner 写入口载荷），声明类型只约束调用方。\n\n本域其余部分改前就已失败关闭，一行未动：plan({}) → REJECT、details 非对象 → REJECT、\nchanges 非数组 → REJECT、refresh(undefined) → applied:false、快照 validated 非真在 create 期抛、\ndetails 带 password → AUDIT_DETAIL_FORBIDDEN 且回 forbiddenDetails、outcome 大写 → REJECT。\n\n补 AUDIT_APPEND_REQUEST_INVALID 一条稳定原因码并钉进夹具（71a04df 的 81 例未覆盖它——\n该原因码此前不存在）。夹具 81 → 82 例（正 11 / 反 71）0 失败；模块单测 136 例；\n负向实做：把该例声明原因改成不会产生的串，门禁 exit 1 并点名，还原后 exit 0。\n覆盖度探针两档归零（未接线 0 处、夹具与单测都没有 0 条）。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/64bc6f5489ead3c65b23869f5e8866202e60b855","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:03:47-07:00","added":[],"removed":[],"modified":["runtime/modules/audit/src/domain/audit-append-planner.ts","runtime/modules/audit/test/fixtures/audit.fixtures.json"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":21639,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T08:00:45+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
0
|
1789776505
|
0
|
1789776378
|
1789776505
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24193
|
docs(发布): rc.6 产物行补 total files 与 shasum——37→39 是「 docs(发布): rc.6 产物行补 total files 与 shasum——37→39 是「两个文件进包」最直接的证据...
|
116
|
5
|
platform.yml
|
159
|
5
|
0
|
refs/heads/main
|
03af35c77d7373f504875531e22ec6fb8e078898
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"db1b4721f85189353d42e1b67586d66ba6041c88","after":"03af35c77d7373f504875531e22ec6fb8e078898","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/db1b4721f85189353d42e1b67586d66ba6041c88...03af35c77d7373f504875531e22ec6fb8e078898","commits":[{"id":"03af35c77d7373f504875531e22ec6fb8e078898","message":"docs(发布): rc.6 产物行补 total files 与 shasum——37→39 是「两个文件进包」最直接的证据\n\n原记录只写了包大小（96.9→101.3 kB）。发布输出里有更精确的数字：governance 的 total files\n由 rc.5 的 37 变为 39，多出来的正是 check-fact-pii.mjs(8.6 kB) 与 fact-pii-rules.json(1.8 kB)；\nbin/cli.mjs 3.9→4.0 kB 是注册子命令那行。三包 shasum 一并记入，便于事后核验。\n\n记录与发布输出已逐项核对一致（三包大小、文件数、包内容）。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/03af35c77d7373f504875531e22ec6fb8e078898","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:00:41-07:00","added":[],"removed":[],"modified":["docs/G-12本地旁路发布记录-2026-09-13.md"]}],"total_commits":0,"head_commit":{"id":"03af35c77d7373f504875531e22ec6fb8e078898","message":"docs(发布): rc.6 产物行补 total files 与 shasum——37→39 是「两个文件进包」最直接的证据\n\n原记录只写了包大小（96.9→101.3 kB）。发布输出里有更精确的数字：governance 的 total files\n由 rc.5 的 37 变为 39，多出来的正是 check-fact-pii.mjs(8.6 kB) 与 fact-pii-rules.json(1.8 kB)；\nbin/cli.mjs 3.9→4.0 kB 是注册子命令那行。三包 shasum 一并记入，便于事后核验。\n\n记录与发布输出已逐项核对一致（三包大小、文件数、包内容）。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/03af35c77d7373f504875531e22ec6fb8e078898","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:00:41-07:00","added":[],"removed":[],"modified":["docs/G-12本地旁路发布记录-2026-09-13.md"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":21628,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T08:00:42+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
0
|
1789776378
|
0
|
1789776045
|
1789776378
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24192
|
docs(部署): 记录补 §17——D-15 只说对了一半，放开 scope 在信任锚未改前无效； docs(部署): 记录补 §17——D-15 只说对了一半，放开 scope 在信任锚未改前无效；拆出 D-16...
|
116
|
5
|
platform.yml
|
158
|
5
|
0
|
refs/heads/main
|
db1b4721f85189353d42e1b67586d66ba6041c88
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"fe35d013ca78dcfcec4b634a312cd0266527fe2b","after":"db1b4721f85189353d42e1b67586d66ba6041c88","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/fe35d013ca78dcfcec4b634a312cd0266527fe2b...db1b4721f85189353d42e1b67586d66ba6041c88","commits":[{"id":"db1b4721f85189353d42e1b67586d66ba6041c88","message":"docs(部署): 记录补 §17——D-15 只说对了一半，放开 scope 在信任锚未改前无效；拆出 D-16\n\n动手处理 D-15 前先验前提，结论是前提不成立：就算放开 platform:ops，真实 IdP 令牌照样进不来。\n\n实验：用 IdP 自己的 dev 签名私钥签一个 RS256 access token（形状与真实令牌一致），把三重守卫\n的输入全部凑齐——sub 用 §16 订正后的 users.subject、azp 用白名单里的 demo-console、scope 含\nplatform:ops——打 GET /api/platform/ops/definitions，得 401 INVALID_TOKEN。不是 403、不是 scope、\n不是白名单，是签名根本没被验过：容器 AUTH_JWKS_URI 为空，token-verifier.ts:98 因此走 hs256Secret\n分支，算法集只有 HS 一族。用 IdP 真私钥而不是随便造一把，是为了堵住「那只是密钥不对」的解释。\n\n再深一层：token-verifier.ts:47-50 只认单个 key source 与单个 issuer/audience，而 IdP 是每租户\n一个 issuer、每租户一份 JWKS。单租户 dev 下是配一个 URL 的事，多租户下不是——两边模型没对齐。\n\n本轮不擅自改，两处代价都不小：改 AUTH_JWKS_URI 等于换掉整个运行时的信任锚、所有 HS256 令牌\n当场失效，而这台容器是并行会话共用的常驻 dev 运行时；给客户端放 platform:ops 则因管理 API 没有\n改已有客户端的端点，要新建客户端并同步 PLATFORM_OPS_CLIENT_IDS，且本身是安全裁决。\n\nD-15 照此改写（§16.3 那行改为指向 §17.3，避免两处并存），新拆 D-16 记信任锚与模型不匹配。\n在 D-16 未裁之前，单独放开 scope 是无效功。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/db1b4721f85189353d42e1b67586d66ba6041c88","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:00:37-07:00","added":[],"removed":[],"modified":["docs/dev部署运行重做记录-2026-09-18.md"]}],"total_commits":0,"head_commit":{"id":"db1b4721f85189353d42e1b67586d66ba6041c88","message":"docs(部署): 记录补 §17——D-15 只说对了一半，放开 scope 在信任锚未改前无效；拆出 D-16\n\n动手处理 D-15 前先验前提，结论是前提不成立：就算放开 platform:ops，真实 IdP 令牌照样进不来。\n\n实验：用 IdP 自己的 dev 签名私钥签一个 RS256 access token（形状与真实令牌一致），把三重守卫\n的输入全部凑齐——sub 用 §16 订正后的 users.subject、azp 用白名单里的 demo-console、scope 含\nplatform:ops——打 GET /api/platform/ops/definitions，得 401 INVALID_TOKEN。不是 403、不是 scope、\n不是白名单，是签名根本没被验过：容器 AUTH_JWKS_URI 为空，token-verifier.ts:98 因此走 hs256Secret\n分支，算法集只有 HS 一族。用 IdP 真私钥而不是随便造一把，是为了堵住「那只是密钥不对」的解释。\n\n再深一层：token-verifier.ts:47-50 只认单个 key source 与单个 issuer/audience，而 IdP 是每租户\n一个 issuer、每租户一份 JWKS。单租户 dev 下是配一个 URL 的事，多租户下不是——两边模型没对齐。\n\n本轮不擅自改，两处代价都不小：改 AUTH_JWKS_URI 等于换掉整个运行时的信任锚、所有 HS256 令牌\n当场失效，而这台容器是并行会话共用的常驻 dev 运行时；给客户端放 platform:ops 则因管理 API 没有\n改已有客户端的端点，要新建客户端并同步 PLATFORM_OPS_CLIENT_IDS，且本身是安全裁决。\n\nD-15 照此改写（§16.3 那行改为指向 §17.3，避免两处并存），新拆 D-16 记信任锚与模型不匹配。\n在 D-16 未裁之前，单独放开 scope 是无效功。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/db1b4721f85189353d42e1b67586d66ba6041c88","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T17:00:37-07:00","added":[],"removed":[],"modified":["docs/dev部署运行重做记录-2026-09-18.md"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":21600,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T08:00:04+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
0
|
1789776044
|
0
|
1789776041
|
1789776044
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24191
|
docs(发布): 记录 rc.6 列车——fact-pii 这次真出去了，并记下五趟旁路的累积代价
|
116
|
5
|
platform.yml
|
157
|
5
|
0
|
refs/heads/main
|
fe35d013ca78dcfcec4b634a312cd0266527fe2b
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"21d7c1aaae83d8d5e40aa185b1bd86d3a8d8d99f","after":"fe35d013ca78dcfcec4b634a312cd0266527fe2b","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/21d7c1aaae83d8d5e40aa185b1bd86d3a8d8d99f...fe35d013ca78dcfcec4b634a312cd0266527fe2b","commits":[{"id":"fe35d013ca78dcfcec4b634a312cd0266527fe2b","message":"docs(发布): 记录 rc.6 列车——fact-pii 这次真出去了，并记下五趟旁路的累积代价\n\nrc.6 三包 2026-09-18 发出，源 7eadfb1，tag packages-v1.0.0-rc.6（连续第三趟按 CL-5 打上）。\n动因是补 rc.5 的缺口：那时 check-fact-pii.mjs 还不在 governance 包的 files 里，消费者拿到的\nrc.5 不含它。governance 包从 96.9 kB 涨到 101.3 kB，涨的正是那两个文件。\n\n**这一趟的验证比前四趟硬。** 前几趟只能依赖 publish-rc.mjs 的 integrity 自校验；这次把\nRegistry 登记的 dist.integrity 与本地备料 tarball 的 sha512 逐包比对，三包全部一致——\n证明架上的就是会话备的那批料，中间没有被替换或重打包。\n\n顺带纠正一个前几趟被骗过的点：npm view \u003cpkg\u003e versions 在 Gitea 的 npm registry 上静默返回空，\n查具体版本（npm view \u003cpkg\u003e@\u003cversion\u003e dist.integrity）才有结果。此前以为「Registry 查不了」，\n是被这个 API 差异骗的，不是权限问题。\n\n**记下累积代价：** 旁路第五次使用后，contracts / governance 的 rc.0—rc.6 七个版本号已全部被\n本地包永久占用，永远不会有阶段门证据；计费恢复后 CI 只能从 rc.7 发起。开关当初登记为\n「临时设施」，五趟之后它显然已是常态通道——这不是它该有的角色。计费恢复时该做的是删掉\n这个分支并让 CI 发 rc.7，而不是让它继续顺手可用。这句话写进了 G-12，免得下一趟又顺手发第六次。\n\nCLAUDE.md 的 contracts 条目同步到 rc.6，并记下 check:fact-pii 自 rc.6 起随包。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/fe35d013ca78dcfcec4b634a312cd0266527fe2b","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:59:52-07:00","added":[],"removed":[],"modified":["CLAUDE.md","docs/G-12本地旁路发布记录-2026-09-13.md"]},{"id":"fe96fe64bdb8753331280a2b3396c8237b08b9d3","message":"test(runtime): ai-gateway 的选路本身不在门禁上——补 router-route / router-refresh / route-plan，10 处的第 4、5 处\n\n结构比对报出 LocalAiGovernanceRouter（316 行、三个公开方法）整支未接线、planAiRoute() 未接线。\n既有三条规则（action / route / egress）走的都是纯函数——动作治理、单条路由体检、外发分类判据——\n而选路本身（租户 allowlist、能力匹配、区域 / 安全层级 / 留存期、禁止静默回退、快照热更）\n与 planAiRoute 的串联（鉴权 → 外发分类 → 选路）一条都不在门禁上。判定逻辑一行未改。\n\n补三条规则，判定按 kind / outcome，不用 `\"reasons\" in`。\n\n接上后照例先变差，冒出 7 条「夹具与单测都没有」（EXPLICIT_FALLBACK_REQUIRED 与 refresh 侧六条\n策略字段守卫），逐条钉完回到 0。\n\n过程中一处预期被实测推翻：我按「删掉 allowFallback 就该拒」造 N21，实跑返回 []——主路由仍然匹配，\n删这个布尔位不构成拒绝。真要触发 EXPLICIT_FALLBACK_REQUIRED 得让快照里只剩 fallback 路由可选。\n按实现重造该例，没有反过来改实现。\n\n覆盖：夹具 16 → 35 例（正 8 / 反 27），规则 3 → 6；三档（都没有 / 仅单测 / 未接线）均为 0。\n新钉住的包括 NO_APPROVED_MODEL_ROUTE（租户越界 / 能力不符 / 无快照三条路径）、\nSENSITIVE_PROVIDER_NOT_APPROVED、EGRESS_CLASS_REQUIRES_SENSITIVE_FLAG、PERMISSION_DENIED:\u003ccode\u003e\n——AI 出站的准入闸门此前在门禁上只有纯函数那一半。\n\n证据：pnpm --dir runtime --filter @juhai/module-ai-gateway test 53/53、typecheck 绿、\n该套件夹具 35/35 失败 0、fixture-coverage 三档全 0。本次不回绑任何 reports/。\n\n进度：10 处已收 5 处（跨域流程 refresh、scope、credential、ai-gateway 两处）。\n余 5 处在 permission 3 / audit 1 / fact 1。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/fe96fe64bdb8753331280a2b3396c8237b08b9d3","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:59:00-07:00","added":[],"removed":[],"modified":["runtime/modules/ai-gateway/src/domain/fixture-evaluator.ts","runtime/modules/ai-gateway/test/fixtures/ai-gateway.fixtures.json"]},{"id":"2822c4d34a1b519fc87a21fe30b035028502d297","message":"fix(modules): permission 三支判定接进夹具门禁，并修两处崩溃面——此前整支不在门禁上\n\n起因是 governance/fixture-coverage.mjs 的结构比对：六个运行时模块共 10 处判定面\n「评估器没接线」，permission 占 3 处（LocalPermissionDecisionPlanner、\nLocalEmploymentScopeInvalidationPlanner、evaluateCatalogAdmission）。\n\n先确认不是有意留白，三条证据：① 探针自述把「未接线」定义为「该面完全不在门禁上」，\n并在同日把契约包侧四次同形全部修掉；② 各模块夹具 description 确实声明过取舍，但都在\n另一个轴上（吊销即时性 / 配额熔断 / 查询越权，一律「属权威实现，DEC-xxx 后」），\n没有一条提到这些 planner；③ 决定性的一条——f7a0cbb 先迁入 planner，8a95879 才建夹具，\n建的时候这些文件就在同一目录里，而 8a95879 自述评估器「只调用迁入的纯规则」，\n按它自己的话这些面本就该在。\n\n实测先行，查出两处真缺陷（均已修）：\n\n evaluateCatalogAdmission([null, \"x\"], …) 抛 TypeError——守了 routes 非数组，\n 没守条目非对象；目录来自快照 JSON。\n\n LocalPermissionDecisionPlanner.plan(undefined) 抛，兜底的 deny-all 也抛。\n 注意光守 preflight 不够：plan() 在 preflight 之后仍直接解引用 request.actorType 等，\n 故两处都要守。preflightCataloguedPermissionDecision 的 catalog 非数组 / 条目非对象 /\n actions 非数组一并收口。\n\n三支 employment 的 plan 是本域最结实的一支，畸形入参改前就已 REJECT，未动其判定。\n\n接线五条规则（decision-plan / employment-invalidation / catalog-admission 加两个\nplanner 的 refresh），非放行出口一律按 kind 显式映射：本域 PermissionDecisionPlanResult\n的 BLOCKED 带的是 blockers，EmploymentScopeInvalidationResult 的 SKIP_DUPLICATE 与\nACKNOWLEDGE_STALE 连原因字段都没有——按 `\"reasons\" in r` 判会把它们全判成 ACCEPT\n（该形状已在契约包侧四个域各咬过一次）。\n\n按探针自述「补规则后覆盖度会先变差，把新暴露的原因码钉完再收工」执行：接线后\n「夹具与单测都没有」由 0 涨到 40，用探针 --json 的 trigger 机械生成钉住用例并逐条实跑\n确认可复现（38 条自动 + 2 条手工，其中 ASSIGNMENT_ID_MUST_CHANGE 的 trigger 提示不准，\n删字段实得 NEW_ASSIGNMENT_ID_INVALID，按语义改为新旧指派相同才复现）。\n\n核验：夹具 11 → 68 例（正 7 / 反 61）0 失败；模块单测 63 → 108 例；探针 permission 两档\n双双归零（未接线 3 → 0、都没有 40 → 0），全仓「都没有」合计 47 → 0、未接线 10 → 4；\n负向实做：把 SKIP_DUPLICATE 的声明原因改成不会产生的串，门禁 exit 1 并点名该例，还原后\nexit 0；门禁另自行抓到我一处声明写错（PERMISSION_ADMISSION_SNAPSHOT_VERSION_NOT_FORWARD\n实为 PERMISSION_ADMISSION_VERSION_NOT_FORWARD）。\n\nruntime 静态链 12 道绿、第 13 道 check:docs-truth 红，但与本轮无关：c4ec6f6 把\nui-acceptance 重绑到 67e8193 却没回灌 runtime/CLAUDE.md 动态区，已在 HEAD 干净检出复现。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/2822c4d34a1b519fc87a21fe30b035028502d297","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:58:45-07:00","added":[],"removed":[],"modified":["runtime/modules/permission/src/domain/catalog-admission.ts","runtime/modules/permission/src/domain/fixture-evaluator.ts","runtime/modules/permission/src/domain/permission-decision-planner.ts","runtime/modules/permission/src/domain/permission-preflight.ts","runtime/modules/permission/test/fixtures/permission.fixtures.json"]}],"total_commits":0,"head_commit":{"id":"fe35d013ca78dcfcec4b634a312cd0266527fe2b","message":"docs(发布): 记录 rc.6 列车——fact-pii 这次真出去了，并记下五趟旁路的累积代价\n\nrc.6 三包 2026-09-18 发出，源 7eadfb1，tag packages-v1.0.0-rc.6（连续第三趟按 CL-5 打上）。\n动因是补 rc.5 的缺口：那时 check-fact-pii.mjs 还不在 governance 包的 files 里，消费者拿到的\nrc.5 不含它。governance 包从 96.9 kB 涨到 101.3 kB，涨的正是那两个文件。\n\n**这一趟的验证比前四趟硬。** 前几趟只能依赖 publish-rc.mjs 的 integrity 自校验；这次把\nRegistry 登记的 dist.integrity 与本地备料 tarball 的 sha512 逐包比对，三包全部一致——\n证明架上的就是会话备的那批料，中间没有被替换或重打包。\n\n顺带纠正一个前几趟被骗过的点：npm view \u003cpkg\u003e versions 在 Gitea 的 npm registry 上静默返回空，\n查具体版本（npm view \u003cpkg\u003e@\u003cversion\u003e dist.integrity）才有结果。此前以为「Registry 查不了」，\n是被这个 API 差异骗的，不是权限问题。\n\n**记下累积代价：** 旁路第五次使用后，contracts / governance 的 rc.0—rc.6 七个版本号已全部被\n本地包永久占用，永远不会有阶段门证据；计费恢复后 CI 只能从 rc.7 发起。开关当初登记为\n「临时设施」，五趟之后它显然已是常态通道——这不是它该有的角色。计费恢复时该做的是删掉\n这个分支并让 CI 发 rc.7，而不是让它继续顺手可用。这句话写进了 G-12，免得下一趟又顺手发第六次。\n\nCLAUDE.md 的 contracts 条目同步到 rc.6，并记下 check:fact-pii 自 rc.6 起随包。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/fe35d013ca78dcfcec4b634a312cd0266527fe2b","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:59:52-07:00","added":[],"removed":[],"modified":["CLAUDE.md","docs/G-12本地旁路发布记录-2026-09-13.md"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":21540,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T07:58:20+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
29
|
1789776004
|
1789777073
|
0
|
1789776003
|
1789777125
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24183
|
chore(reports): check:module-imports 回绑 @ 59265a6
|
116
|
5
|
platform.yml
|
149
|
5
|
0
|
refs/heads/main
|
ac4f5b8ef04795013b51bcb9bb6d4c353e091311
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"59265a6ffc4d0d4ffda878fd880a5d5a308720bb","after":"ac4f5b8ef04795013b51bcb9bb6d4c353e091311","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/59265a6ffc4d0d4ffda878fd880a5d5a308720bb...ac4f5b8ef04795013b51bcb9bb6d4c353e091311","commits":[{"id":"ac4f5b8ef04795013b51bcb9bb6d4c353e091311","message":"chore(reports): check:module-imports 回绑 @ 59265a6\n\n经 governance/rebind-reports.mjs 在 HEAD 的临时干净检出里重跑，绑 59265a6 /\nworktreeDirty=false，扫描 397 个源文件、0 处违规。\n\n上一次绑 557a95c，之后作用域内有两批改动：63ff31f 把 clients 三包的 devDeps pin 到 exact，\n59265a6 给 workbench 加了客户端状态 hook。397 = 上次的 396 + 新增的\nruntime/apps/workbench/src/lib/use-mounted.ts，数字对得上。\n\n这份报告此前卡了一轮：它的证据作用域含 runtime/apps，而并行会话正在改 workbench，\nrebind 按判据拒绝回绑（作用域内有未提交输入）。等其提交后抢的窗口。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/ac4f5b8ef04795013b51bcb9bb6d4c353e091311","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:41:33-07:00","added":[],"removed":[],"modified":["reports/module-imports.latest.json"]}],"total_commits":0,"head_commit":{"id":"ac4f5b8ef04795013b51bcb9bb6d4c353e091311","message":"chore(reports): check:module-imports 回绑 @ 59265a6\n\n经 governance/rebind-reports.mjs 在 HEAD 的临时干净检出里重跑，绑 59265a6 /\nworktreeDirty=false，扫描 397 个源文件、0 处违规。\n\n上一次绑 557a95c，之后作用域内有两批改动：63ff31f 把 clients 三包的 devDeps pin 到 exact，\n59265a6 给 workbench 加了客户端状态 hook。397 = 上次的 396 + 新增的\nruntime/apps/workbench/src/lib/use-mounted.ts，数字对得上。\n\n这份报告此前卡了一轮：它的证据作用域含 runtime/apps，而并行会话正在改 workbench，\nrebind 按判据拒绝回绑（作用域内有未提交输入）。等其提交后抢的窗口。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/ac4f5b8ef04795013b51bcb9bb6d4c353e091311","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:41:33-07:00","added":[],"removed":[],"modified":["reports/module-imports.latest.json"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":21171,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T07:41:22+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
14
|
0
|
1789774924
|
0
|
1789774905
|
1789774924
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24173
|
docs(部署): D-13 归属改为与 D-4 一并验，并写明为什么不先单独改
|
116
|
5
|
platform.yml
|
144
|
5
|
0
|
refs/heads/main
|
2156538deab81264dd796a4ed668509522dbff45
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"4f36e22448f8fdf4611af3f5fa34305ae58769ef","after":"2156538deab81264dd796a4ed668509522dbff45","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/4f36e22448f8fdf4611af3f5fa34305ae58769ef...2156538deab81264dd796a4ed668509522dbff45","commits":[{"id":"2156538deab81264dd796a4ed668509522dbff45","message":"docs(部署): D-13 归属改为与 D-4 一并验，并写明为什么不先单独改\n\nOwner 2026-09-18 定：等 feat/identity-canonical-tenants 合并后连 D-4 一起验。\n\n归属列同时写下理由，而不只写「等」。D-13 看上去是两行就能改完的配置错误\n（.secrets 里换一个 UUID + 重建容器），容易被顺手改掉再顺手记一句「已修复」——\n但单独改它最多验到「守卫这关过了」：M3 写路径仍会挂在 D-4 的 CANONICAL_TENANT_REQUIRED，\n证不出「受控执行面对 IdP 令牌可用」。把这句话留在表里，是为了让下一个人别拿\n半条证据当整条用。\n\n依赖关系现在三处一致：§6 D-4、§14.5 D-13、未合并分支登记-2026-09-15.md 的\nfeat/identity-canonical-tenants 行。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/2156538deab81264dd796a4ed668509522dbff45","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:22:14-07:00","added":[],"removed":[],"modified":["docs/dev部署运行重做记录-2026-09-18.md"]}],"total_commits":0,"head_commit":{"id":"2156538deab81264dd796a4ed668509522dbff45","message":"docs(部署): D-13 归属改为与 D-4 一并验，并写明为什么不先单独改\n\nOwner 2026-09-18 定：等 feat/identity-canonical-tenants 合并后连 D-4 一起验。\n\n归属列同时写下理由，而不只写「等」。D-13 看上去是两行就能改完的配置错误\n（.secrets 里换一个 UUID + 重建容器），容易被顺手改掉再顺手记一句「已修复」——\n但单独改它最多验到「守卫这关过了」：M3 写路径仍会挂在 D-4 的 CANONICAL_TENANT_REQUIRED，\n证不出「受控执行面对 IdP 令牌可用」。把这句话留在表里，是为了让下一个人别拿\n半条证据当整条用。\n\n依赖关系现在三处一致：§6 D-4、§14.5 D-13、未合并分支登记-2026-09-15.md 的\nfeat/identity-canonical-tenants 行。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/2156538deab81264dd796a4ed668509522dbff45","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:22:14-07:00","added":[],"removed":[],"modified":["docs/dev部署运行重做记录-2026-09-18.md"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":20740,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T07:21:46+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
0
|
1789773970
|
0
|
1789773743
|
1789773970
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24172
|
test(contracts): 注册中心 plan 把 BLOCKED 判成了放行——裁决没批、候 test(contracts): 注册中心 plan 把 BLOCKED 判成了放行——裁决没批、候选自带 blocker，夹具都说通过...
|
116
|
5
|
platform.yml
|
143
|
5
|
0
|
refs/heads/main
|
4f36e22448f8fdf4611af3f5fa34305ae58769ef
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"73d03c062f82dc9e8b9a0e66e6e973ca9aca54cd","after":"4f36e22448f8fdf4611af3f5fa34305ae58769ef","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/73d03c062f82dc9e8b9a0e66e6e973ca9aca54cd...4f36e22448f8fdf4611af3f5fa34305ae58769ef","commits":[{"id":"4f36e22448f8fdf4611af3f5fa34305ae58769ef","message":"test(contracts): 注册中心 plan 把 BLOCKED 判成了放行——裁决没批、候选自带 blocker，夹具都说通过\n\n前一轮（91216b5）补了入参体检的门禁覆盖。本轮按「公开方法 × 出口」再盘，查出的是\ngovernance/fixture-coverage.mjs 按设计查不到的一类：它只变异夹具已有用例的字段，\n夹具从没构造过的入口不会被发现。三个规则文件零改动，只动夹具评估器的可见性。\n\n1. plan 把 BLOCKED 判成放行。评估器原判据是 `\"reasons\" in r`；ManifestAdmissionResult 三个出口里\n BLOCKED 携带的是 blockers 不是 reasons，于是返回空数组 = ACCEPT。实测两种 BLOCKED 都被夹具判为通过：\n 候选自带 blockedBy（[\"CHG-001\"]）、所需裁决仍 pending（[\"DECISION_PENDING:DEC-011\"]）——\n 而它们明写着 activationAllowed: false / registryWriteAllowed: false。\n 同一文件下面的 upgrade 规则本来就写对了（... : [...d.blockers]），plan 与自己的兄弟规则不一致。\n\n2. 没有任何一条 plan 用例带合法快照。整条「有策略」分支（清单字段校验、裁决闸门、READY_FOR_REVIEW）\n 在门禁上根本不存在，唯一那条 N05 是「无策略即拒」。\n\n3. refresh 没有夹具规则：planner 第三个公开方法零门禁覆盖。\n\n修完之后覆盖度一度变差，这是对的。补上带快照的 plan 用例后，此前够不着的清单校验分支第一次被变异探针\n走到，fixture-coverage 随即报出 12 条「夹具与单测都没有」（SERVICES_REQUIRED / PERMISSIONS_REQUIRED /\nPRODUCED_FACTS_REQUIRED / CONSUMED_FACTS_REQUIRED / DEPENDENCIES_REQUIRED / MANIFEST_BLOCKERS_REQUIRED /\nMANIFEST_KIND_INVALID / OWNER_DOMAIN_REQUIRED 与 refresh 侧四条）——它们一直都在，只是之前没人能看见。\n连同 4 条「仅单测」一并钉住后回到 0 / 0。\n\n另修一处本轮自己的松懈：N42 的 reasons 写成了前缀 MANIFEST，任何 MANIFEST* 都能匹配，已改为确切原因码。\n\n一处明写不覆盖：plan() 的 DECISION_MISSING:\u003cid\u003e 按当前控制流不可达——缺一条必需裁决在 normalizePolicy\n装载时就抛 MANIFEST_DECISION_STATUS_INVALID:\u003cid\u003e，运行时工厂退回 deny-all。N39 钉这条真实路径，\nN49 钉装载侧原因码，不为不可达分支造用例。\n\n覆盖：夹具 41 → 70 例（正 7 / 反 63），定向测试 59 → 63 例，前一轮断言一条未改。\n变异探针（70 例 × 14 种脏值）38374 个变异点、0 处抛异常。\n\n未做（越界）：C01.04 五个关键应用的固定版本消费（今 2 个 pin）与 C01.06 只读目录查询入口属接线，\n不在本轮；Catalog 登记未动。\n\n证据：pnpm --dir contracts build / typecheck 绿、check:generated 14 files / 12 schemas 无漂移、\nnode --test contracts/test/*.test.mjs 404/404、该套件夹具 70/70 失败 0、fixture-coverage 该套件 0 / 0。\n负向实测：把 N37 的 blocker 声明改成 CHG-999 → 门禁 exit 1 并点名该例，还原后 exit 0。\n本次不回绑任何 reports/。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/4f36e22448f8fdf4611af3f5fa34305ae58769ef","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:21:01-07:00","added":[],"removed":[],"modified":["contracts/SOURCE.md","contracts/src/domain/application-contract-registry/fixture-evaluator.ts","contracts/test/application-contract-registry-domain.test.mjs","contracts/test/fixtures/application-contract-registry.fixtures.json","docs/domain/registry-snapshot-blueprint.md"]}],"total_commits":0,"head_commit":{"id":"4f36e22448f8fdf4611af3f5fa34305ae58769ef","message":"test(contracts): 注册中心 plan 把 BLOCKED 判成了放行——裁决没批、候选自带 blocker，夹具都说通过\n\n前一轮（91216b5）补了入参体检的门禁覆盖。本轮按「公开方法 × 出口」再盘，查出的是\ngovernance/fixture-coverage.mjs 按设计查不到的一类：它只变异夹具已有用例的字段，\n夹具从没构造过的入口不会被发现。三个规则文件零改动，只动夹具评估器的可见性。\n\n1. plan 把 BLOCKED 判成放行。评估器原判据是 `\"reasons\" in r`；ManifestAdmissionResult 三个出口里\n BLOCKED 携带的是 blockers 不是 reasons，于是返回空数组 = ACCEPT。实测两种 BLOCKED 都被夹具判为通过：\n 候选自带 blockedBy（[\"CHG-001\"]）、所需裁决仍 pending（[\"DECISION_PENDING:DEC-011\"]）——\n 而它们明写着 activationAllowed: false / registryWriteAllowed: false。\n 同一文件下面的 upgrade 规则本来就写对了（... : [...d.blockers]），plan 与自己的兄弟规则不一致。\n\n2. 没有任何一条 plan 用例带合法快照。整条「有策略」分支（清单字段校验、裁决闸门、READY_FOR_REVIEW）\n 在门禁上根本不存在，唯一那条 N05 是「无策略即拒」。\n\n3. refresh 没有夹具规则：planner 第三个公开方法零门禁覆盖。\n\n修完之后覆盖度一度变差，这是对的。补上带快照的 plan 用例后，此前够不着的清单校验分支第一次被变异探针\n走到，fixture-coverage 随即报出 12 条「夹具与单测都没有」（SERVICES_REQUIRED / PERMISSIONS_REQUIRED /\nPRODUCED_FACTS_REQUIRED / CONSUMED_FACTS_REQUIRED / DEPENDENCIES_REQUIRED / MANIFEST_BLOCKERS_REQUIRED /\nMANIFEST_KIND_INVALID / OWNER_DOMAIN_REQUIRED 与 refresh 侧四条）——它们一直都在，只是之前没人能看见。\n连同 4 条「仅单测」一并钉住后回到 0 / 0。\n\n另修一处本轮自己的松懈：N42 的 reasons 写成了前缀 MANIFEST，任何 MANIFEST* 都能匹配，已改为确切原因码。\n\n一处明写不覆盖：plan() 的 DECISION_MISSING:\u003cid\u003e 按当前控制流不可达——缺一条必需裁决在 normalizePolicy\n装载时就抛 MANIFEST_DECISION_STATUS_INVALID:\u003cid\u003e，运行时工厂退回 deny-all。N39 钉这条真实路径，\nN49 钉装载侧原因码，不为不可达分支造用例。\n\n覆盖：夹具 41 → 70 例（正 7 / 反 63），定向测试 59 → 63 例，前一轮断言一条未改。\n变异探针（70 例 × 14 种脏值）38374 个变异点、0 处抛异常。\n\n未做（越界）：C01.04 五个关键应用的固定版本消费（今 2 个 pin）与 C01.06 只读目录查询入口属接线，\n不在本轮；Catalog 登记未动。\n\n证据：pnpm --dir contracts build / typecheck 绿、check:generated 14 files / 12 schemas 无漂移、\nnode --test contracts/test/*.test.mjs 404/404、该套件夹具 70/70 失败 0、fixture-coverage 该套件 0 / 0。\n负向实测：把 N37 的 blocker 声明改成 CHG-999 → 门禁 exit 1 并点名该例，还原后 exit 0。\n本次不回绑任何 reports/。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/4f36e22448f8fdf4611af3f5fa34305ae58769ef","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:21:01-07:00","added":[],"removed":[],"modified":["contracts/SOURCE.md","contracts/src/domain/application-contract-registry/fixture-evaluator.ts","contracts/test/application-contract-registry-domain.test.mjs","contracts/test/fixtures/application-contract-registry.fixtures.json","docs/domain/registry-snapshot-blueprint.md"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":20661,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T07:19:01+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
0
|
1789773742
|
0
|
1789773705
|
1789773742
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24171
|
docs(runbook): 补 §2.1——demo 租户重建的完整应对，含「哪一列」这个会咬人的 docs(runbook): 补 §2.1——demo 租户重建的完整应对，含「哪一列」这个会咬人的细节...
|
116
|
5
|
platform.yml
|
142
|
5
|
0
|
refs/heads/main
|
73d03c062f82dc9e8b9a0e66e6e973ca9aca54cd
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"45a6bd523973c97e88f31faa12604773150cec87","after":"73d03c062f82dc9e8b9a0e66e6e973ca9aca54cd","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/45a6bd523973c97e88f31faa12604773150cec87...73d03c062f82dc9e8b9a0e66e6e973ca9aca54cd","commits":[{"id":"73d03c062f82dc9e8b9a0e66e6e973ca9aca54cd","message":"docs(runbook): 补 §2.1——demo 租户重建的完整应对，含「哪一列」这个会咬人的细节\n\nidentity 库被清掉（db.sh --fresh / 手工重建 / 从早于 09-16 的 dump 恢复）之后，租户、\n管理员、应用与两个 OIDC 客户端会一起没——它们只在库里，不在任何配置文件里；而管理员\n明文口令全机只有 .secrets/idp-demo-admin.txt 一份（库存散列，备份 dump 里也搜不到明文）。\n\n本节写清四件此前只能靠翻代码才知道的事：两个 bootstrap 各自的一次性约束\n（TENANT_SLUG_CONFLICT / ADMINISTRATION_ALREADY_BOOTSTRAPPED）与「库还在时只能走管理 API」；\n两条 bootstrap 的确切载荷（按 zod schema 核对，password ≥ 12、redirectUri 只收 https 或\nloopback）；工作台客户端为什么必须先有人工登录才能登记，且不得给它 idp:manage；以及\n四个 UUID 换新后要同步的四处配置，每处配上漏掉时的具体症状。\n\n其中 PLATFORM_OPS_ADMIN_SUBJECTS 填 users.subject 而不是 users.id——现存 dev 值就是错的，\n见 dev 部署记录 D-13。改 PLATFORM_OPS_* 必须重建容器，只 restart 不带新环境。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/73d03c062f82dc9e8b9a0e66e6e973ca9aca54cd","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:18:51-07:00","added":[],"removed":[],"modified":["docs/runbook.md"]},{"id":"3ed10d6c9473aca115f12b9f32aac435aa79e3ee","message":"docs(部署): 登记 D-13——PLATFORM_OPS_ADMIN_SUBJECTS 的 dev 值填的是 users.id，不是令牌里的 sub\n\n判定链是 token-verifier.ts:136（subject = payload.sub）→ AuthContext.subject →\nplatform-ops.adapter.ts:22（admins.has(auth.subject)），而 IdP 访问令牌的 sub 取自\nusers.subject。当前 dev 配的是该管理员的 users.id（4782bc0d-…），实际 sub 是\ne6783482-…，两者不同——**IdP 签发的管理员令牌打受控执行面会 403 OPS_FORBIDDEN**。\n\nsub 是从 §14 那次真实登录拿到的令牌里解出来的，不是推断。之所以此前没暴露：§5\n「三重守卫齐全 200」的取证用的是手工签发的合成令牌，值自然与白名单对得上；真实 IdP\n令牌这条路是 §14 才第一次走通的。\n\n本轮只登记不改：订正它要动仓外 .secrets 并重建容器，且正向验证需要再走一次人工登录。\n重建 demo 租户时该填哪一列，写在 runbook §2.1。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/3ed10d6c9473aca115f12b9f32aac435aa79e3ee","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:18:43-07:00","added":[],"removed":[],"modified":["docs/dev部署运行重做记录-2026-09-18.md"]},{"id":"91ae21671f2d958ef5e228e525cc931a8e586d40","message":"test(runtime): 补掉覆盖度探针在两个模块查出的 4 条——夹具与单测都没走到\n\ngovernance/fixture-coverage.mjs 落仓后第一次全量扫描（15 个套件）查出的 4 条，全在运行时模块侧：\n\n module-permission ACTION_REQUIRED / RESOURCE_REQUIRED / RESOURCE_ID_REQUIRED\n module-audit AUDIT_COMMIT_MODE_INVALID\n\npermission 的 preflight 已经钉了 tenant / request / trace / actor / scopeVersion 五项（N01–N03），\n唯独「资源三件套」一条用例都没有——那三条守卫删掉，check:fixtures 与模块单测都不会红。\naudit 的 commit 模式同理：mode 不在册时拒绝这条判定此前无人走到。\n\n补：permission 夹具 9 → 10 例（N08，三条原因一条用例同时钉住，门禁要求逐条出现）、\naudit 26 → 27 例（N18，mode=\"best-effort\" 这种看着合理但不在册的取值）。\n模块夹具与 test/negative/*.fixtures.test.ts 同源——单测 it.each 直接遍历夹具文件，所以加夹具用例\n即同时加单测，本次没有另写测试代码。\n\npermission 的夹具是 prettier 按宽度折行的混合风格，JSON round-trip 会把整份重排成 180 行噪音；\n改用文本插入，diff 保持 +8/-1。\n\n负向实测：把 N08 的声明原因改成不会产生的串 → 门禁 exit 1 并点名该例，恢复后转绿。\n\n补后 15 个套件的「夹具与单测都没有」全为 0，CLAUDE.md 同步改口。\n\n证据：module-permission 50/50、module-audit 81/81（vitest 无库单测）；\ncheck:fixtures 两套件 37/37；fixture-coverage 全量 0。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/91ae21671f2d958ef5e228e525cc931a8e586d40","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:18:36-07:00","added":[],"removed":[],"modified":["CLAUDE.md","runtime/modules/audit/test/fixtures/audit.fixtures.json","runtime/modules/permission/test/fixtures/permission.fixtures.json"]}],"total_commits":0,"head_commit":{"id":"73d03c062f82dc9e8b9a0e66e6e973ca9aca54cd","message":"docs(runbook): 补 §2.1——demo 租户重建的完整应对，含「哪一列」这个会咬人的细节\n\nidentity 库被清掉（db.sh --fresh / 手工重建 / 从早于 09-16 的 dump 恢复）之后，租户、\n管理员、应用与两个 OIDC 客户端会一起没——它们只在库里，不在任何配置文件里；而管理员\n明文口令全机只有 .secrets/idp-demo-admin.txt 一份（库存散列，备份 dump 里也搜不到明文）。\n\n本节写清四件此前只能靠翻代码才知道的事：两个 bootstrap 各自的一次性约束\n（TENANT_SLUG_CONFLICT / ADMINISTRATION_ALREADY_BOOTSTRAPPED）与「库还在时只能走管理 API」；\n两条 bootstrap 的确切载荷（按 zod schema 核对，password ≥ 12、redirectUri 只收 https 或\nloopback）；工作台客户端为什么必须先有人工登录才能登记，且不得给它 idp:manage；以及\n四个 UUID 换新后要同步的四处配置，每处配上漏掉时的具体症状。\n\n其中 PLATFORM_OPS_ADMIN_SUBJECTS 填 users.subject 而不是 users.id——现存 dev 值就是错的，\n见 dev 部署记录 D-13。改 PLATFORM_OPS_* 必须重建容器，只 restart 不带新环境。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/73d03c062f82dc9e8b9a0e66e6e973ca9aca54cd","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:18:51-07:00","added":[],"removed":[],"modified":["docs/runbook.md"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":20594,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T07:17:37+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
0
|
1789773705
|
0
|
1789773540
|
1789773705
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24170
|
docs(发布): 当场记录 rc.4 列车——三包已发，tag 这趟补上，并写清验证的真实范围
|
116
|
5
|
platform.yml
|
141
|
5
|
0
|
refs/heads/main
|
45a6bd523973c97e88f31faa12604773150cec87
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"ec0f1c04d60b56c0fa19a2c06fc89e7a64b69c4d","after":"45a6bd523973c97e88f31faa12604773150cec87","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/ec0f1c04d60b56c0fa19a2c06fc89e7a64b69c4d...45a6bd523973c97e88f31faa12604773150cec87","commits":[{"id":"45a6bd523973c97e88f31faa12604773150cec87","message":"docs(发布): 当场记录 rc.4 列车——三包已发，tag 这趟补上，并写清验证的真实范围\n\nrc.4 三包（contracts / governance / client-fact）2026-09-18 经本地旁路发出，源 557a95c，\nRegistry 实查确认在架、三包均 registry integrity verified。与前两趟不同，本次是当场记录。\n\n这趟补上了 CL-5 要求的 tag packages-v1.0.0-rc.4——rc.2 / rc.3 都漏了这一步，\nprovenance.tag 因此第一次不是 null。构建与发布在 .worktrees/rc4-release 的 detached\n干净检出里做，所以 worktreeDirty:false 是真的（主检出当时有并行会话在改 contracts）。\n\n记录里写清了两件容易被夸大的事：\n\n1. rc.4 远不止触发它的那两条 clients 规则。自 rc.3 源 036a308 起，contracts 147 文件 /\n 51 提交、governance 61 文件 / 48 提交随车发出，包含九域规则入参体检那一整轮。\n2. 发布前只跑了 check:fixtures（17 套件 394 例）与 check:module-imports（396 文件），\n 退出码均 0；**完整 pnpm check 是发布后补跑的**（真实退出码 0，check:evidence partial：\n 36 新鲜 / 5 过期，过期项均属其他任务 WIP）。按 G-12 边界，这些都不构成阶段门证据。\n\nCLAUDE.md 的 contracts 条目同步推到 rc.4，并顺手修掉一处自相矛盾：该条前半句还写着\nrc.2 源 eb3cf2c，而后半句已说明按 provenance 订正为 6d3900a。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/45a6bd523973c97e88f31faa12604773150cec87","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:17:05-07:00","added":[],"removed":[],"modified":["CLAUDE.md","docs/G-12本地旁路发布记录-2026-09-13.md"]},{"id":"df90a19192218b2b65c7cde7326968ac81d03de0","message":"chore(reports): check:module-imports 回绑 @ 557a95c\n\n在 .worktrees/rc4-release 的干净检出（detached 557a95c = packages-v1.0.0-rc.4）里重跑，\n绑 557a95c / worktreeDirty=false，扫描 396 个源文件、0 处违规。\n\n同批在该检出里跑的 check:fixtures 也是 0 失败（17 套件 394 例），但那份报告**没有提交**：\nfixtures 的证据作用域含 contracts，而并行会话正在高频改 contracts，绑 557a95c 的快照\n落地即过期，回绑节奏交还给正在改那片的人。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/df90a19192218b2b65c7cde7326968ac81d03de0","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:14:43-07:00","added":[],"removed":[],"modified":["reports/module-imports.latest.json"]},{"id":"0b3dab61a1072d682d5a921e00025f46431c95d3","message":"test(contracts): decideProviderOutcome 在门禁上零覆盖——退避被供应商压短这条修过的规则，没人盯着它别被改回去\n\n前两轮收了入参硬化（c190a6a）与请求体检／出站 allowlist 的用例（d950aa2）。本轮按「公开方法 × 出口」\n重新盘了一遍，两类空白。两个规则文件零改动，只动夹具评估器、夹具与测试。\n\n1. decideProviderOutcome 在门禁上零覆盖。planner 四个公开方法（status / plan /\n decideProviderOutcome / refresh）里，夹具只有 plan 与 refresh 两条规则。既有的 provider 规则走的是\n 独立函数 classifyProviderOutcome——它只看状态码与次数，不认路由策略：退避基数 baseBackoffSeconds、\n 上界 maximumBackoffSeconds、Retry-After 的钳制全在 planner 方法里，夹具一条都看不到。\n 而那里恰好有一条修过的规则：Retry-After 可以把退避拉长到策略上界，但不能把批准过的退避拉短\n （原实现 min(maximumBackoff, retryAfter)，供应商回一个 Retry-After: 0 即可令退避清零）。\n 规则改对了，门禁却看不见它有没有被改回去。\n\n 新增 route-outcome 规则，并把 RETRY 连同算出来的秒数一并返回（RETRY:\u003c秒\u003e）——否则夹具只能看见\n 「重试了」，看不见「退避是不是被压短了」。负向实测：把 N33 的声明由 RETRY:20 改成 RETRY:10，\n 门禁 exit 1 并点名该例，秒数确实被钉住。\n\n2. plan() 八条出口此前门禁上没走过：请求非对象、目的地不在册、effectId 非请求派生、尝试次数越界、\n 未授权重放、模板版本未批准、变量越出模板 allowlist、敏感载荷落在未批准敏感数据的模板上。\n 构造用例时注意 effectId = tenant:sourceEvent:destination:template:v\u003c版本\u003e 是派生值，改 templateVersion\n 必须同步改 effectId，否则先撞 WEBHOOK_EFFECT_ID_MISMATCH，测不到目标那条。\n\n一处预期被实测推翻，按实现订正：retryAfterSeconds 超出 [0, 3600] 不是「钳到上界」，而是整条回执判\nPROVIDER_OUTCOME_INVALID。两条边界各钉一例（3600 → RETRY:60；9999 → 拒）。\n\n覆盖：夹具 25 → 39 例（正 4 / 反 35）；定向测试 28 → 30 例，补上唯一一条「门禁有、单测没有」的\nWEBHOOK_TEMPLATE_NOT_APPROVED 以及 Retry-After 取值域。前两轮断言一条未改。\n变异探针（39 例真实 payload × 14 种脏值）14560 个变异点、0 处抛异常。\n\n未做（越界）：模板审批流、多渠道 Provider、签名防重放、渠道切换仍不在本仓，C12 按缺失模块完善清单\n仍是「裁决」；Catalog 登记未动（notification-webhook 仍 module_e2、code_truth 指向工单仓）。\n\n证据：pnpm --dir contracts build / typecheck 绿、check:generated 14 files / 12 schemas 无漂移、\nnode --test contracts/test/*.test.mjs 400/400、contract-notification-webhook 夹具 39/39 失败 0。\n本次不回绑任何 reports/。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/0b3dab61a1072d682d5a921e00025f46431c95d3","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:13:04-07:00","added":[],"removed":[],"modified":["contracts/SOURCE.md","contracts/src/domain/notification-webhook/fixture-evaluator.ts","contracts/test/fixtures/notification-webhook.fixtures.json","contracts/test/notification-webhook-domain.test.mjs","docs/domain/notification-effect-blueprint.md"]},{"id":"0b30631d9c45ceff29558ddf821e6cb5a5c7cd00","message":"docs(治理): 夹具覆盖度的算法写进 CLAUDE.md，并把探针从 /tmp 落进仓里\n\n今天九个契约包的门禁空白有一半是靠一个临时脚本找出来的，光看用例名一个也发现不了。方法写进文档\n而脚本留在 /tmp，下次没人跑得起来——所以一并落仓。\n\ngovernance/fixture-coverage.mjs（诊断，不是门禁：不写报告、不进 pnpm check）：\n由 governance/fixtures/*.suite.json 驱动，新增套件自动纳入，不写死域名单。拿每个夹具用例的真实\npayload 逐个叶子字段换脏值，走门禁自己的 evaluateFixturePayload 入口，收集规则实际吐出的原因码，\n分三档——已钉（被某条用例的 reasons 声明过，守卫回退必红）/ 仅单测 / 都没有（守卫删掉任何一道都\n不会红）。--list 连「仅单测」一并列出，--json 出机器格式。\n\n三条读法都写进了脚本抬头与 CLAUDE.md：散文式校验消息不是稳定码，单列「非码」不计缺口；插值原因码\n词汇表无界，按前缀过滤；「仅单测」不等于缺陷——§5 迁入时的设计就是夹具只固定失败关闭一侧。\n\n落仓后第一次全量扫描立刻有新发现：九个契约包「都没有」全为 0（今天收口的结果），但运行时模块侧\n还有 4 条——module-permission 的 ACTION_REQUIRED / RESOURCE_REQUIRED / RESOURCE_ID_REQUIRED、\nmodule-audit 的 AUDIT_COMMIT_MODE_INVALID。已在 CLAUDE.md 记为尚未处理；那是 runtime/ 的纪律范围，\n本次不动。\n\n证据：在仅含本提交改动的导出树上跑通（模块未构建时按 unavailable 跳过，与 check:fixtures 同因）。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/0b30631d9c45ceff29558ddf821e6cb5a5c7cd00","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:12:09-07:00","added":["governance/fixture-coverage.mjs"],"removed":[],"modified":["CLAUDE.md"]}],"total_commits":0,"head_commit":{"id":"45a6bd523973c97e88f31faa12604773150cec87","message":"docs(发布): 当场记录 rc.4 列车——三包已发，tag 这趟补上，并写清验证的真实范围\n\nrc.4 三包（contracts / governance / client-fact）2026-09-18 经本地旁路发出，源 557a95c，\nRegistry 实查确认在架、三包均 registry integrity verified。与前两趟不同，本次是当场记录。\n\n这趟补上了 CL-5 要求的 tag packages-v1.0.0-rc.4——rc.2 / rc.3 都漏了这一步，\nprovenance.tag 因此第一次不是 null。构建与发布在 .worktrees/rc4-release 的 detached\n干净检出里做，所以 worktreeDirty:false 是真的（主检出当时有并行会话在改 contracts）。\n\n记录里写清了两件容易被夸大的事：\n\n1. rc.4 远不止触发它的那两条 clients 规则。自 rc.3 源 036a308 起，contracts 147 文件 /\n 51 提交、governance 61 文件 / 48 提交随车发出，包含九域规则入参体检那一整轮。\n2. 发布前只跑了 check:fixtures（17 套件 394 例）与 check:module-imports（396 文件），\n 退出码均 0；**完整 pnpm check 是发布后补跑的**（真实退出码 0，check:evidence partial：\n 36 新鲜 / 5 过期，过期项均属其他任务 WIP）。按 G-12 边界，这些都不构成阶段门证据。\n\nCLAUDE.md 的 contracts 条目同步推到 rc.4，并顺手修掉一处自相矛盾：该条前半句还写着\nrc.2 源 eb3cf2c，而后半句已说明按 provenance 订正为 6d3900a。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/45a6bd523973c97e88f31faa12604773150cec87","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:17:05-07:00","added":[],"removed":[],"modified":["CLAUDE.md","docs/G-12本地旁路发布记录-2026-09-13.md"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":20483,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T07:11:57+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
0
|
1789773540
|
0
|
1789773436
|
1789773540
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24169
|
docs(部署): 记录补 §14——工作台登录第一次真正走通，以及 200 分支为什么在浏览器里测 docs(部署): 记录补 §14——工作台登录第一次真正走通，以及 200 分支为什么在浏览器里测不了...
|
116
|
5
|
platform.yml
|
140
|
5
|
0
|
refs/heads/main
|
ec0f1c04d60b56c0fa19a2c06fc89e7a64b69c4d
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"7a4b69367b18f4e284218704981b54c0ee10d2b6","after":"ec0f1c04d60b56c0fa19a2c06fc89e7a64b69c4d","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/7a4b69367b18f4e284218704981b54c0ee10d2b6...ec0f1c04d60b56c0fa19a2c06fc89e7a64b69c4d","commits":[{"id":"ec0f1c04d60b56c0fa19a2c06fc89e7a64b69c4d","message":"docs(部署): 记录补 §14——工作台登录第一次真正走通，以及 200 分支为什么在浏览器里测不了\n\n同源托管记录 §6 那一行挂着「工作台 OIDC 公开客户端仍未在身份模块登记」，以及由此导致的\n「forward_auth 的 200 分支未实测」。本节走通前者，后者只关掉一半。\n\n卡住的不是配置。登录页显示「缺配置」容易读成填个环境变量就行，实际是 demo 租户里\n根本没有回调为 http://localhost:3010/callback/ 的客户端；而登记它要过 IdpManagementGuard\n（idp:manage ∧ 管理客户端 ∧ 活跃管理员授权），也就是必须先有人以管理员身份走完托管登录——\n那一步要人工提交口令，这正是它一直没做的原因。\n\n登记出来的客户端只给 openid profile，不给 idp:manage：登记用的是 demo-console 的管理权，\n不是把管理权发给一个跑在浏览器里的公开客户端。\n\n实测走通全链（作用域 = 本机 dev，证据等级 = 运行态链路 + 真实浏览器）：SSO 未再要口令、\n同意屏、换令牌、令牌只落 sessionStorage 两键（无 localStorage 无 cookie）、登录页显示出\n与库中 admin@demo.test 一致的 subject（即没踩同源托管记录的 D-10）、userinfo 200、\n带令牌读 modules 200。userinfo 正是 forward_auth 的校验端点，服务端语义上 200 分支成立。\n\n但浏览器跨源那一半关不掉，且是设计使然：带 Authorization 的跨源请求先发 OPTIONS 预检，\n预检按规范不带该头，forward_auth 收到无令牌的 OPTIONS 就 401，真请求发不出去。终态是\n同源托管故无影响，但 :3010 这个 dev 形态永远走不通网关。这与 §11「两个键、两个进程」\n是同一族问题的两面：跨源这件事，代理和网关都不替你解决。\n\n新登记 D-11（服务端直连验 200 分支未做——本轮令牌只在浏览器里，不把有效 bearer 打进\n命令行与日志）与 D-12（登录后顶栏的 hydration 告警）。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/ec0f1c04d60b56c0fa19a2c06fc89e7a64b69c4d","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:11:45-07:00","added":[],"removed":[],"modified":["docs/dev部署运行重做记录-2026-09-18.md"]}],"total_commits":0,"head_commit":{"id":"ec0f1c04d60b56c0fa19a2c06fc89e7a64b69c4d","message":"docs(部署): 记录补 §14——工作台登录第一次真正走通，以及 200 分支为什么在浏览器里测不了\n\n同源托管记录 §6 那一行挂着「工作台 OIDC 公开客户端仍未在身份模块登记」，以及由此导致的\n「forward_auth 的 200 分支未实测」。本节走通前者，后者只关掉一半。\n\n卡住的不是配置。登录页显示「缺配置」容易读成填个环境变量就行，实际是 demo 租户里\n根本没有回调为 http://localhost:3010/callback/ 的客户端；而登记它要过 IdpManagementGuard\n（idp:manage ∧ 管理客户端 ∧ 活跃管理员授权），也就是必须先有人以管理员身份走完托管登录——\n那一步要人工提交口令，这正是它一直没做的原因。\n\n登记出来的客户端只给 openid profile，不给 idp:manage：登记用的是 demo-console 的管理权，\n不是把管理权发给一个跑在浏览器里的公开客户端。\n\n实测走通全链（作用域 = 本机 dev，证据等级 = 运行态链路 + 真实浏览器）：SSO 未再要口令、\n同意屏、换令牌、令牌只落 sessionStorage 两键（无 localStorage 无 cookie）、登录页显示出\n与库中 admin@demo.test 一致的 subject（即没踩同源托管记录的 D-10）、userinfo 200、\n带令牌读 modules 200。userinfo 正是 forward_auth 的校验端点，服务端语义上 200 分支成立。\n\n但浏览器跨源那一半关不掉，且是设计使然：带 Authorization 的跨源请求先发 OPTIONS 预检，\n预检按规范不带该头，forward_auth 收到无令牌的 OPTIONS 就 401，真请求发不出去。终态是\n同源托管故无影响，但 :3010 这个 dev 形态永远走不通网关。这与 §11「两个键、两个进程」\n是同一族问题的两面：跨源这件事，代理和网关都不替你解决。\n\n新登记 D-11（服务端直连验 200 分支未做——本轮令牌只在浏览器里，不把有效 bearer 打进\n命令行与日志）与 D-12（登录后顶栏的 hydration 告警）。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/ec0f1c04d60b56c0fa19a2c06fc89e7a64b69c4d","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:11:45-07:00","added":[],"removed":[],"modified":["docs/dev部署运行重做记录-2026-09-18.md"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":20460,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T07:10:07+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
0
|
1789773436
|
0
|
1789773117
|
1789773436
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24167
|
test(contracts): 成本容量的门禁覆盖——29 个原因码只有 20 个在夹具上走过，M test(contracts): 成本容量的门禁覆盖——29 个原因码只有 20 个在夹具上走过，M0 后计费字段禁入那条一片空白...
|
116
|
5
|
platform.yml
|
139
|
5
|
0
|
refs/heads/main
|
7a4b69367b18f4e284218704981b54c0ee10d2b6
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"54e6324c8b404aba56e1fa681cbcbe67019128c0","after":"7a4b69367b18f4e284218704981b54c0ee10d2b6","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/54e6324c8b404aba56e1fa681cbcbe67019128c0...7a4b69367b18f4e284218704981b54c0ee10d2b6","commits":[{"id":"7a4b69367b18f4e284218704981b54c0ee10d2b6","message":"test(contracts): 成本容量的门禁覆盖——29 个原因码只有 20 个在夹具上走过，M0 后计费字段禁入那条一片空白\n\n与同日 bdb662d（数据分析）同一套做法：把 29 个原因码逐条与夹具的实际产出比对——跑每个用例、\n收集真实返回值，不读代码推断。判定逻辑一行未改，resource-tags.ts 本轮零改动。\n\n1. 9 条从未在门禁上走过：\n - POST_M0_BINDING_FORBIDDEN：M0 阶段禁止把 invoice / price / budget / quota / chargeback 这类\n 计费与容量动作字段写进用量记录（23 个禁入词），是本域最靠近红线的一条，门禁上一片空白。\n - TAG_VALUE_INVALID：标签取值字符集。此前只有「缺标签」有夹具，「标签值乱写」没有。\n - CORRECTION_REFERENCE_INVALID：更正引用必须成对（id 与 reasonCode 同在或同不在）且不得自指。\n - SOURCE_CLASSIFICATION_DOWNGRADE：记录分级不得低于来源登记分级。\n - 六条基线旗标里除 G3_NOT_REACHED 外的全部五条：G5 产品窗口、应用登记、服务身份、审计、资源标签目录。\n\n2. 反方向 4 条门禁有、单测没有：RESOURCE_TAGS_INVALID / CONTENT_DIGEST_INVALID /\n METER_VERSION_INVALID / USAGE_LINEAGE_REQUIRED，补进单测。\n\n覆盖：夹具 32 → 41 例（正 3 / 反 38），新增 N30—N38 九例且每例只产出一条原因（逐例核过实际返回值）；\n定向测试 28 → 32 例；原因码门禁覆盖 20/29 → 29/29，单测覆盖 25/29 → 29/29。上一轮用例一条未改。\n\n写单测时两处预期被实测推翻，按实现订正而不是反过来改实现——夹具与用例的作用正在于此：\n① RESOURCE_TAGS_INVALID 不是标签面自己报的码。assessResourceTags 对非对象入参报的是\n REQUIRED_TAG_MISSING 并把八个必填键全列进 missing；RESOURCE_TAGS_INVALID 是 assessUsageRecord\n 把「内嵌标签没过体检」收敛成的一条。\n② meterVersion 的 semver 模式接受预发布后缀，1.0.0-rc.1 合法。\n两条都写成用例固定住，免得下次被当成缺陷「修」掉。\n\n夹具变异探针（41 例真实 payload × 14 种脏值，走 evaluateFixturePayload 入口）：\n22792 个变异点、0 处抛异常——daa226b 的硬化结论在扩面后仍成立。\n\n未做（越界）：全资源计量账本、AI 成本明细（依赖 M7）一件未建，C19 按缺失模块完善清单仍是「裁决」；\nCatalog 登记未动。\n\n证据：pnpm --dir contracts build / typecheck 绿、check:generated 14 files / 12 schemas 无漂移、\nnode --test contracts/test/*.test.mjs 398/398、contract-cost-capacity 夹具 41/41 失败 0。\n负向实测：把 N32 的声明原因改成 USAGE_LINEAGE_REQUIRED → 门禁 exit 1 并点名该例\n（reasons=[\"POST_M0_BINDING_FORBIDDEN\"]），还原后 exit 0。本次不回绑任何 reports/。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/7a4b69367b18f4e284218704981b54c0ee10d2b6","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:09:29-07:00","added":[],"removed":[],"modified":["contracts/SOURCE.md","contracts/test/cost-capacity-domain.test.mjs","contracts/test/fixtures/cost-capacity.fixtures.json","docs/domain/resource-tags-blueprint.md"]},{"id":"557a95c4422518cf3d9fdff04d261114ab389169","message":"chore(release): 三包推到 1.0.0-rc.4——clients 扫描面与这轮 contracts 硬化一起上车\n\n发 rc.4 的直接动因：e61bfcf 给 check:module-imports 补的 clients 扫描面与两条规则\n（CLIENT_FORBIDDEN_IMPORT / ESCAPES_CLIENT）不在任何已发布版本里，而 @juhai/governance\n的 rc.0—rc.3 已全部被占用，按 G-12 的边界只能往前发下一个 RC。\n\n随车发出的远不止这些。自 rc.3 的源 036a308 起：\n contracts 147 个文件 / 51 条提交（九域规则的入参体检与门禁覆盖那一大轮）\n governance 61 个文件 / 48 条提交\n runtime/clients/fact 5 个文件 / 5 条提交\n三包版本一致，符合 CL-5「一次发布 = 一个 tag = 一组同版本包」；包目录单源仍是\ngovernance/release-packages.json。\n\n通道：本地旁路（G-12 第三次使用）。CI 正道 2026-09-18 实测双重不可用——GitHub Actions\n最近三次 run 全部 failure（账户计费，最新 35215270797 即 CLAUDE.md 记的那条注解），\n且 GitHub 镜像落后 237 条提交、因分支保护的 required check 跑不起来而推不动，\ne61bfcf 的代码根本不在 GitHub 上。按 G-12 边界，rc.4 同样不得宣称经过发布门禁验证。\n\n本次按 CL-5 补打 tag packages-v1.0.0-rc.4——rc.2 / rc.3 两趟都漏了这一步。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/557a95c4422518cf3d9fdff04d261114ab389169","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:08:15-07:00","added":[],"removed":[],"modified":["contracts/package.json","governance/package.json","runtime/clients/fact/package.json"]},{"id":"2c3928d388603168f2510c6f1450b41804c429cf","message":"test(contracts): 统一体验的 21 条原因码只有单测——门禁一条没有\n\n这是九个契约包里最后一块成规模的门禁空白，也是唯一一个判定与单测都齐全、只差夹具的域——所以本条\n一条单测都没加，补的全是夹具。\n\n21 条分四组：\n 贡献自身的体检（归属、类型、分级、双时间、投影修订与新鲜度、Owner Command 声明） 9 条\n 与来源登记的四项比对 4 条\n 派发前动作复核的会话 / 租户 / 源版本 / 幂等键 4 条\n 四条基线闸门真正未就绪时的阻断 4 条\n\n用例按语义写而不是删字段：类型 / 分级填不在册的值、生效时间不可解析、投影修订超过源修订、\nmaxAgeSeconds=1 触发过期、maxRevisionLag=0 触发落后、动作声明 reauthorize=false、会话 expired、\n源修订漂移 5。其中「登记前缀是壳根 /」是规则注释自己点名的红线——根前缀会让「登记应用前缀下」的约束\n失效，等于授权该应用深链到任意其他应用的路由，而门禁此前看不到这条。\n\n补：夹具 18 → 36 例（正 3 / 反 33）。本域「夹具无但单测有」由 21 归 0，「哪里都没有」保持 0。\n\n负向实测：把壳根那条的声明原因改成不会产生的串 → 门禁 exit 1 并点名该例，恢复后转绿。\n\n本条只补覆盖，没有改任何判定，也没有改单测；experience-contribution.ts 一行未动。\n九个域的门禁覆盖至此收口：「哪里都没有」全为 0，「夹具无但单测有」由 77 降至 29。\n\n证据：在仅含本提交改动的导出树上 tsc 绿、定向 35/35、contract-enterprise-experience 36/36。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/2c3928d388603168f2510c6f1450b41804c429cf","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:07:54-07:00","added":[],"removed":[],"modified":["contracts/SOURCE.md","contracts/test/fixtures/enterprise-experience.fixtures.json"]}],"total_commits":0,"head_commit":{"id":"7a4b69367b18f4e284218704981b54c0ee10d2b6","message":"test(contracts): 成本容量的门禁覆盖——29 个原因码只有 20 个在夹具上走过，M0 后计费字段禁入那条一片空白\n\n与同日 bdb662d（数据分析）同一套做法：把 29 个原因码逐条与夹具的实际产出比对——跑每个用例、\n收集真实返回值，不读代码推断。判定逻辑一行未改，resource-tags.ts 本轮零改动。\n\n1. 9 条从未在门禁上走过：\n - POST_M0_BINDING_FORBIDDEN：M0 阶段禁止把 invoice / price / budget / quota / chargeback 这类\n 计费与容量动作字段写进用量记录（23 个禁入词），是本域最靠近红线的一条，门禁上一片空白。\n - TAG_VALUE_INVALID：标签取值字符集。此前只有「缺标签」有夹具，「标签值乱写」没有。\n - CORRECTION_REFERENCE_INVALID：更正引用必须成对（id 与 reasonCode 同在或同不在）且不得自指。\n - SOURCE_CLASSIFICATION_DOWNGRADE：记录分级不得低于来源登记分级。\n - 六条基线旗标里除 G3_NOT_REACHED 外的全部五条：G5 产品窗口、应用登记、服务身份、审计、资源标签目录。\n\n2. 反方向 4 条门禁有、单测没有：RESOURCE_TAGS_INVALID / CONTENT_DIGEST_INVALID /\n METER_VERSION_INVALID / USAGE_LINEAGE_REQUIRED，补进单测。\n\n覆盖：夹具 32 → 41 例（正 3 / 反 38），新增 N30—N38 九例且每例只产出一条原因（逐例核过实际返回值）；\n定向测试 28 → 32 例；原因码门禁覆盖 20/29 → 29/29，单测覆盖 25/29 → 29/29。上一轮用例一条未改。\n\n写单测时两处预期被实测推翻，按实现订正而不是反过来改实现——夹具与用例的作用正在于此：\n① RESOURCE_TAGS_INVALID 不是标签面自己报的码。assessResourceTags 对非对象入参报的是\n REQUIRED_TAG_MISSING 并把八个必填键全列进 missing；RESOURCE_TAGS_INVALID 是 assessUsageRecord\n 把「内嵌标签没过体检」收敛成的一条。\n② meterVersion 的 semver 模式接受预发布后缀，1.0.0-rc.1 合法。\n两条都写成用例固定住，免得下次被当成缺陷「修」掉。\n\n夹具变异探针（41 例真实 payload × 14 种脏值，走 evaluateFixturePayload 入口）：\n22792 个变异点、0 处抛异常——daa226b 的硬化结论在扩面后仍成立。\n\n未做（越界）：全资源计量账本、AI 成本明细（依赖 M7）一件未建，C19 按缺失模块完善清单仍是「裁决」；\nCatalog 登记未动。\n\n证据：pnpm --dir contracts build / typecheck 绿、check:generated 14 files / 12 schemas 无漂移、\nnode --test contracts/test/*.test.mjs 398/398、contract-cost-capacity 夹具 41/41 失败 0。\n负向实测：把 N32 的声明原因改成 USAGE_LINEAGE_REQUIRED → 门禁 exit 1 并点名该例\n（reasons=[\"POST_M0_BINDING_FORBIDDEN\"]），还原后 exit 0。本次不回绑任何 reports/。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/7a4b69367b18f4e284218704981b54c0ee10d2b6","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:09:29-07:00","added":[],"removed":[],"modified":["contracts/SOURCE.md","contracts/test/cost-capacity-domain.test.mjs","contracts/test/fixtures/cost-capacity.fixtures.json","docs/domain/resource-tags-blueprint.md"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":20341,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T07:08:35+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
0
|
1789773116
|
0
|
1789773007
|
1789773116
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24162
|
test(contracts): 四个域共享的快照版本号分支，外加会话准入的两条同组兄弟
|
116
|
5
|
platform.yml
|
138
|
5
|
0
|
refs/heads/main
|
54e6324c8b404aba56e1fa681cbcbe67019128c0
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"52fe066412543b57b729791de298ac0b5898b52b","after":"54e6324c8b404aba56e1fa681cbcbe67019128c0","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/52fe066412543b57b729791de298ac0b5898b52b...54e6324c8b404aba56e1fa681cbcbe67019128c0","commits":[{"id":"54e6324c8b404aba56e1fa681cbcbe67019128c0","message":"test(contracts): 四个域共享的快照版本号分支，外加会话准入的两条同组兄弟\n\nnormalizeSnapshot（或其等价物）在四个域里是同一个形状，而「version 必须是正整数」这一条四个域都\n没钉：FILE_ACCESS_POLICY_VERSION_INVALID、WEBHOOK_POLICY_VERSION_INVALID、\nCONVERSATION_POLICY_VERSION_INVALID、NO_USABLE_LAST_KNOWN_GOOD（配置开关）。版本号是「最后良好\n快照」向前比较的唯一依据，比不出来就不能换。\n\n四个域各补一条夹具用例（version: 0；缺失 / 负数 / 字符串 / 小数走同一路，由单测覆盖全部五种）与\n一条单测。配置开关的后果与其余三个不同——它不是「整份拒收」而是保留最后良好快照，所以那条单测断的是\n「活动版本不得被无效候选改动」，这才是该分支的真正断言。\n\n顺带把 collaboration-messaging 的两条同组兄弟一并补上（CONVERSATION_POLICY_REVISION_REQUIRED、\nCONVERSATION_TENANT_POLICIES_REQUIRED）——它与 public-file 的 N26 / N27 是同一形状，三条一起钉住\n才算完整。补后该域「哪里都没有」由 2 归 0。\n\n夹具：public-file 31 → 32、notification-webhook 24 → 25、collaboration-messaging 40 → 42、\nconfiguration-feature-flags 17 → 18。\n\n负向实测：public-file 与 notification-webhook 各把新用例的声明原因改成不会产生的串 → 门禁 exit 1，\n恢复后转绿。\n\n本条只补覆盖，没有改任何判定。至此九个域「哪里都没有」全部为 0。\n\n证据：在仅含本提交改动的导出树上 tsc 绿、四域定向 104/104、四个套件 117/117。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/54e6324c8b404aba56e1fa681cbcbe67019128c0","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:06:26-07:00","added":[],"removed":[],"modified":["contracts/SOURCE.md","contracts/test/collaboration-messaging-domain.test.mjs","contracts/test/configuration-feature-flags-domain.test.mjs","contracts/test/fixtures/collaboration-messaging.fixtures.json","contracts/test/fixtures/configuration-feature-flags.fixtures.json","contracts/test/fixtures/notification-webhook.fixtures.json","contracts/test/fixtures/public-file.fixtures.json","contracts/test/notification-webhook-domain.test.mjs","contracts/test/public-file-domain.test.mjs"]}],"total_commits":0,"head_commit":{"id":"54e6324c8b404aba56e1fa681cbcbe67019128c0","message":"test(contracts): 四个域共享的快照版本号分支，外加会话准入的两条同组兄弟\n\nnormalizeSnapshot（或其等价物）在四个域里是同一个形状，而「version 必须是正整数」这一条四个域都\n没钉：FILE_ACCESS_POLICY_VERSION_INVALID、WEBHOOK_POLICY_VERSION_INVALID、\nCONVERSATION_POLICY_VERSION_INVALID、NO_USABLE_LAST_KNOWN_GOOD（配置开关）。版本号是「最后良好\n快照」向前比较的唯一依据，比不出来就不能换。\n\n四个域各补一条夹具用例（version: 0；缺失 / 负数 / 字符串 / 小数走同一路，由单测覆盖全部五种）与\n一条单测。配置开关的后果与其余三个不同——它不是「整份拒收」而是保留最后良好快照，所以那条单测断的是\n「活动版本不得被无效候选改动」，这才是该分支的真正断言。\n\n顺带把 collaboration-messaging 的两条同组兄弟一并补上（CONVERSATION_POLICY_REVISION_REQUIRED、\nCONVERSATION_TENANT_POLICIES_REQUIRED）——它与 public-file 的 N26 / N27 是同一形状，三条一起钉住\n才算完整。补后该域「哪里都没有」由 2 归 0。\n\n夹具：public-file 31 → 32、notification-webhook 24 → 25、collaboration-messaging 40 → 42、\nconfiguration-feature-flags 17 → 18。\n\n负向实测：public-file 与 notification-webhook 各把新用例的声明原因改成不会产生的串 → 门禁 exit 1，\n恢复后转绿。\n\n本条只补覆盖，没有改任何判定。至此九个域「哪里都没有」全部为 0。\n\n证据：在仅含本提交改动的导出树上 tsc 绿、四域定向 104/104、四个套件 117/117。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/54e6324c8b404aba56e1fa681cbcbe67019128c0","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:06:26-07:00","added":[],"removed":[],"modified":["contracts/SOURCE.md","contracts/test/collaboration-messaging-domain.test.mjs","contracts/test/configuration-feature-flags-domain.test.mjs","contracts/test/fixtures/collaboration-messaging.fixtures.json","contracts/test/fixtures/configuration-feature-flags.fixtures.json","contracts/test/fixtures/notification-webhook.fixtures.json","contracts/test/fixtures/public-file.fixtures.json","contracts/test/notification-webhook-domain.test.mjs","contracts/test/public-file-domain.test.mjs"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":20253,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T07:05:30+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
22
|
1789772829
|
1789772867
|
0
|
1789772828
|
1789773007
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24156
|
test(contracts): 注册中心 upgrade 的请求体检面——15 条原因码只有实现没 test(contracts): 注册中心 upgrade 的请求体检面——15 条原因码只有实现没有用例...
|
116
|
5
|
platform.yml
|
133
|
5
|
0
|
refs/heads/main
|
5f3f6084506e2a173759f07f882713ffdd4111ae
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"352e61531916d12d6eb804674f5e49796104fd06","after":"5f3f6084506e2a173759f07f882713ffdd4111ae","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/352e61531916d12d6eb804674f5e49796104fd06...5f3f6084506e2a173759f07f882713ffdd4111ae","commits":[{"id":"5f3f6084506e2a173759f07f882713ffdd4111ae","message":"test(contracts): 注册中心 upgrade 的请求体检面——15 条原因码只有实现没有用例\n\n同日「注册中心入参体检的门禁覆盖」补的是 snapshot / transition 两条规则；按同一口径把 upgrade 也算了\n一遍，15 条「哪里都没有」，全部在四条就绪闸门下面那层请求校验：\n\n 两个 pin 的锁定四要素（snapshotVersion / snapshotDigest / sourceCommit / lockMode=exact_digest）\n 与消费者归属 10 条\n 目标制品的 schemaApiVersion 与 linter 证据 2 条\n 影响面的受影响清单、已确认清单与消费者归属比对 3 条\n\n此前 6 个 upgrade 用例全部对着四条就绪闸门（independentGitSourceReady 等各一条真值用例，那部分做得\n完整）。闸门开了之后请求本身长什么样，门禁不看——这 15 条删掉不会红。我今天早些时候说「upgrade 那半边\n做得很扎实」是说窄了：说的是闸门，不是闸门下面的请求面。\n\n补：夹具 25 → 32 例（N21–N27），单测 49 → 53 例。成组声明是有意的——门禁要求声明的原因逐条出现，\n所以一条用例同时钉住四要素，比四条各钉一条更严。补后重算：本域「哪里都没有」归 0。\n\n负向实测：给 N21 加一条不会产生的声明原因 → 门禁 exit 1 并点名该例，恢复后转绿。\n\n本条只补覆盖，没有改任何判定；snapshot-upgrade-review.ts 一行未动。\n九个契约包至此「哪里都没有」全部归零。\n\n证据：在仅含本提交改动的导出树上 tsc 绿、定向 53/53、contract-application-contract-registry 32/32。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/5f3f6084506e2a173759f07f882713ffdd4111ae","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T15:59:45-07:00","added":[],"removed":[],"modified":["contracts/SOURCE.md","contracts/test/application-contract-registry-domain.test.mjs","contracts/test/fixtures/application-contract-registry.fixtures.json"]}],"total_commits":0,"head_commit":{"id":"5f3f6084506e2a173759f07f882713ffdd4111ae","message":"test(contracts): 注册中心 upgrade 的请求体检面——15 条原因码只有实现没有用例\n\n同日「注册中心入参体检的门禁覆盖」补的是 snapshot / transition 两条规则；按同一口径把 upgrade 也算了\n一遍，15 条「哪里都没有」，全部在四条就绪闸门下面那层请求校验：\n\n 两个 pin 的锁定四要素（snapshotVersion / snapshotDigest / sourceCommit / lockMode=exact_digest）\n 与消费者归属 10 条\n 目标制品的 schemaApiVersion 与 linter 证据 2 条\n 影响面的受影响清单、已确认清单与消费者归属比对 3 条\n\n此前 6 个 upgrade 用例全部对着四条就绪闸门（independentGitSourceReady 等各一条真值用例，那部分做得\n完整）。闸门开了之后请求本身长什么样，门禁不看——这 15 条删掉不会红。我今天早些时候说「upgrade 那半边\n做得很扎实」是说窄了：说的是闸门，不是闸门下面的请求面。\n\n补：夹具 25 → 32 例（N21–N27），单测 49 → 53 例。成组声明是有意的——门禁要求声明的原因逐条出现，\n所以一条用例同时钉住四要素，比四条各钉一条更严。补后重算：本域「哪里都没有」归 0。\n\n负向实测：给 N21 加一条不会产生的声明原因 → 门禁 exit 1 并点名该例，恢复后转绿。\n\n本条只补覆盖，没有改任何判定；snapshot-upgrade-review.ts 一行未动。\n九个契约包至此「哪里都没有」全部归零。\n\n证据：在仅含本提交改动的导出树上 tsc 绿、定向 53/53、contract-application-contract-registry 32/32。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/5f3f6084506e2a173759f07f882713ffdd4111ae","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T15:59:45-07:00","added":[],"removed":[],"modified":["contracts/SOURCE.md","contracts/test/application-contract-registry-domain.test.mjs","contracts/test/fixtures/application-contract-registry.fixtures.json"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":19968,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T06:59:38+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
14
|
0
|
1789772427
|
0
|
1789772398
|
1789772427
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24155
|
chore(reports): check:fixtures 回绑 @ 7523bd0
|
116
|
5
|
platform.yml
|
132
|
5
|
0
|
refs/heads/main
|
352e61531916d12d6eb804674f5e49796104fd06
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"7523bd04ab6e3606adf9d17c0b19b74e951e9dd5","after":"352e61531916d12d6eb804674f5e49796104fd06","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/7523bd04ab6e3606adf9d17c0b19b74e951e9dd5...352e61531916d12d6eb804674f5e49796104fd06","commits":[{"id":"352e61531916d12d6eb804674f5e49796104fd06","message":"chore(reports): check:fixtures 回绑 @ 7523bd0\n\n上一份绑 91216b5，其后 notification-webhook 与 public-file 两份夹具有提交变更，报告随之过期\n（本次 SOURCE.md 的文档提交不在任何 evidence-scopes 作用域内，不是过期原因）。\n\n在 .worktrees/rebind-fixtures 的 detached 干净检出（HEAD=7523bd0）跑全 17 套件：\n316 例，失败 0，不可用 0，configurationError 0；provenance worktreeDirty=false、runner=local。\n\n先在主树跑过一次，跑到一半并行会话改了 contracts/test/fixtures/application-contract-registry.fixtures.json，\nprovenance 落成 worktreeDirty=true、例数 323（含那份未提交增量），该份作废未采用，主树报告已还原到已提交版\n后改走干净检出。两次差的 7 例即该未提交增量，待其提交后由对应会话重绑。\n\ncontracts/dist 由该检出自己 tsc 构建；runtime 九个模块经 turbo 全量缓存命中。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/352e61531916d12d6eb804674f5e49796104fd06","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T15:59:32-07:00","added":[],"removed":[],"modified":["reports/fixtures.latest.json"]}],"total_commits":0,"head_commit":{"id":"352e61531916d12d6eb804674f5e49796104fd06","message":"chore(reports): check:fixtures 回绑 @ 7523bd0\n\n上一份绑 91216b5，其后 notification-webhook 与 public-file 两份夹具有提交变更，报告随之过期\n（本次 SOURCE.md 的文档提交不在任何 evidence-scopes 作用域内，不是过期原因）。\n\n在 .worktrees/rebind-fixtures 的 detached 干净检出（HEAD=7523bd0）跑全 17 套件：\n316 例，失败 0，不可用 0，configurationError 0；provenance worktreeDirty=false、runner=local。\n\n先在主树跑过一次，跑到一半并行会话改了 contracts/test/fixtures/application-contract-registry.fixtures.json，\nprovenance 落成 worktreeDirty=true、例数 323（含那份未提交增量），该份作废未采用，主树报告已还原到已提交版\n后改走干净检出。两次差的 7 例即该未提交增量，待其提交后由对应会话重绑。\n\ncontracts/dist 由该检出自己 tsc 构建；runtime 九个模块经 turbo 全量缓存命中。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/352e61531916d12d6eb804674f5e49796104fd06","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T15:59:32-07:00","added":[],"removed":[],"modified":["reports/fixtures.latest.json"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":19956,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T06:59:00+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
14
|
0
|
1789772398
|
0
|
1789772377
|
1789772398
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24154
|
docs(contracts): 注册中心取舍补双向交叉实测——放弃的那套有 4 个实缺陷，不是覆盖 docs(contracts): 注册中心取舍补双向交叉实测——放弃的那套有 4 个实缺陷，不是覆盖更全...
|
116
|
5
|
platform.yml
|
131
|
5
|
0
|
refs/heads/main
|
7523bd04ab6e3606adf9d17c0b19b74e951e9dd5
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"a8733b8670d68e423adf4595fb210d185c882afa","after":"7523bd04ab6e3606adf9d17c0b19b74e951e9dd5","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/a8733b8670d68e423adf4595fb210d185c882afa...7523bd04ab6e3606adf9d17c0b19b74e951e9dd5","commits":[{"id":"7523bd04ab6e3606adf9d17c0b19b74e951e9dd5","message":"docs(contracts): 注册中心取舍补双向交叉实测——放弃的那套有 4 个实缺陷，不是覆盖更全\n\n7f82399 的取舍此前只写了「按 Owner 裁断取远端」，没有实测支撑。补做交叉验证：两侧各自编译成 dist\n后互喂夹具与单测，不靠读代码比对。\n\n① 9ac9914 的 19 例夹具喂当前实现：13 通过 / 6 不通过。6 例里 5 例只是原因码改名、同一输入两侧都拒；\n 余 1 例是设计取向不同——大写摘要旧的拒，新的经 normalizeDigest 归一为小写，比较走 sameHexRef。\n 其 40 例单测喂当前实现：36 通过 / 4 不通过，失败集中在同样四个主题。\n② 反向，当前 25 例夹具喂 9ac9914：18 通过 / 7 不通过。3 例是改名的镜像，另外 4 例是被放弃那套的实缺陷：\n - N10-mutable-version-tag 返回 [] 即放行可变版本标签；\n - N11-leading-zero-version 拒了但拒错原因，其 \\d+\\.\\d+\\.\\d+ 收下了 1.02.0；\n - P03-same-digest-other-case 误拒——它自己的注释抱怨「同一摘要两种写法等于两个身份」，却只在入口拒大写，\n 升级比较那条路上仍把大小写变体当成两个摘要，它抱怨的 bug 它没修完；\n - P04-prerelease-precedes-its-release 误拒 1.0.0-rc.0，而平台自己正在发 1.0.0-rc.x。\n③ 根因是结构性的：被放弃那套三个文件各带一套版本文法，远端抽 registry-primitives.ts 正是为收敛这三套，\n 其抬头所述经比对属实。\n④ 覆盖面 19/40 → 25/49。旧的在 upgrade 规则上多 1 例，但 ① 已证明那 7 例在当前实现下无一失守。\n\n结论：放弃 9ac9914 未造成覆盖缺口，反而避开 4 个实缺陷；唯一差异是原因码命名，无需回捡。\n\n同条订正一处措辞：「报告另行回绑」已不成立，该报告已于 0ed7ee7 回绑 @ 7f82399，其后由后续会话在更新\nSHA 上重绑。本次只改 contracts/SOURCE.md，不在任何 evidence-scopes 作用域内，不影响报告新鲜度。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/7523bd04ab6e3606adf9d17c0b19b74e951e9dd5","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T15:58:50-07:00","added":[],"removed":[],"modified":["contracts/SOURCE.md"]},{"id":"3e1cc814eb2141710a42e4afdb865f937790436d","message":"docs(发布): 补记 rc.3 列车的本地旁路发布——证据取自产物内 provenance，并记下两处偏离\n\nrc.3 三包（contracts / governance / client-fact）2026-09-13 经旁路通道发出，当时没留记录。\n2026-09-18 做对抗验收、核对 CLAUDE.md 的 contracts 版本声明时，才从 Registry 实查发现\nrc.3 在架而仓内一字没有——provenance.json 随包分发、不入仓，漏写记录就等于这次发布\n在仓里不留任何痕迹。\n\n证据全部一手：Gitea Registry packument + 三个 rc.3 tarball 内的 provenance.json；\n下载产物的 sha512 与 Registry 登记的 integrity 三包逐一核对一致，确认读到的\nprovenance 出自架上那三个包。\n\n记下的事实：源 036a308（三包 package.json 在该提交上均已是 1.0.0-rc.3，符合「一组同版本包」），\n三份 provenance 均 worktreeDirty:false、runner:\"local\"、releaseChannel:\"local-bypass\"，\nverificationRun* 与 candidateSha256 全 null、reports:[]。实际动因是 client-fact 的 U-29；\ncontracts 从 rc.2 到 rc.3 **零内容变更**，只有版本号跟车。边界逐条继承 rc.2 那节，一个字不放宽。\n\n补记时一并发现两处偏离，都写进文档：\n\n1. 两趟车都没打 tag。CL-5 的口径是「一次发布 = 一个 tag = 一组同版本包」，而 rc.2 / rc.3\n 六份 provenance 的 tag 全是 null，仓里 packages-v* 也只到 packages-v1.0.0-rc.1。\n2. 上一节表格写 rc.2「源 eb3cf2c」，而 rc.2 产物内 provenance 记的是 6d3900a。\n **未擅改上一节表格**，只记录这个不一致，留给该次发布的执行者确认。\n\nCLAUDE.md 同步去掉上一条提交里标的「rc.3 无发布记录」缺口，改为指向本记录。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/3e1cc814eb2141710a42e4afdb865f937790436d","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T15:58:47-07:00","added":[],"removed":[],"modified":["CLAUDE.md","docs/G-12本地旁路发布记录-2026-09-13.md"]},{"id":"098263a175e453448d36f3f281522f7cd96040fe","message":"docs(部署): 记录补 §13——会话级临时目录里的密钥清干净\n\n§11.3 把 identity 的 env 从上一个会话的 /private/tmp scratchpad 搬进 .secrets/ 之后，\n那个 scratchpad 里还躺着三份带密文件。本节把它收口：一挪两删一剪，逐条记依据。\n\n要点不是「清理干净了」，是那个位置为什么放不得：会话级 scratchpad 随时会被清，\n而 launch.json 指着它（运行面下次起不来）、里面又有别处没有备份的凭证（东西就没了），\n两个隐患叠在一起。\n\n本轮新核实两件事，都写进记录：demo 租户管理员的明文口令**全工作区仅此一份**——\n连 .secrets/backups/ 里 09-17 那套交付备份的 platform_identity_dev.dump 也搜不到明文\n（库里存散列，账号能从备份恢复、明文不能），而同一租户只能 bootstrap 一次（runbook §2）；\n以及 git grep -F over HEAD 确认该口令**未出现在任何被跟踪文件**里（邮箱出现在 4 份，非机密）。\n\n删除与保留都留了判据：删前查引用与进程命令行，保留的三行用 sha256 前后比对证明逐字节未改。\n§13.4 登记单点风险：是否给 idp-demo-admin.txt 做仓外备份，留 Owner 判断。\n\n作用域 = 本机 dev 的仓外文件治理，不含代码与门禁证据。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/098263a175e453448d36f3f281522f7cd96040fe","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T15:58:32-07:00","added":[],"removed":[],"modified":["docs/dev部署运行重做记录-2026-09-18.md"]},{"id":"d950aa2f4b6f6bdcc3ccb7e4b0ba4bc69d6f7822","message":"test(contracts): 通知与 Webhook 的请求体检与出站 allowlist 前置——七条原因码只有实现没有用例\n\n按同一口径算覆盖（变异每个夹具用例的每个叶子字段 → 收集规则实际产出的原因码 → 查夹具声明与单测），\nnotification-webhook 有 7 条「哪里都没有」：\n\n WEBHOOK_TENANT_ID_REQUIRED WEBHOOK_INTENT_ID_REQUIRED\n WEBHOOK_DESTINATION_ID_REQUIRED WEBHOOK_TEMPLATE_ID_REQUIRED\n WEBHOOK_REQUESTED_BY_REQUIRED WEBHOOK_CLASSIFICATION_INVALID\n WEBHOOK_ALLOWED_HOSTS_REQUIRED\n\n前六条在 plan() 开头那段 try/catch 里：归属三件套（tenant / intent / requestedBy）与投递目标\n（destination / template）缺一即拒、分级必须在册。整段体检删掉，夹具与单测都不会红——原来那 17 个\n用例里没有一个喂缺字段的请求。\n\n第七条是快照前置：allowedHosts 缺失 / 空 / 非数组时 normalizeSnapshot 拒收整份策略。放行一个\n「没有出站约束」的路由比没有路由更危险，投递目标不再受任何主机限制，而这条同样零覆盖。\n\n补：夹具 17 → 24 例（N15–N21），单测 24 → 27 例（六个字段 × 五种脏值、分级四种、allowlist 三种）。\n补后重算：notification-webhook 的「哪里都没有」归 0。\n\n负向实测：把 N20 的声明原因改成不会产生的串 → 门禁 exit 1 并点名该例，恢复后转绿。\n\n本条只补覆盖，没有改任何判定；webhook-delivery-planner.ts / notification-effect.ts 一行未动。\n证据：在仅含本提交改动的导出树上 tsc 绿、定向 27/27、contract-notification-webhook 24/24。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/d950aa2f4b6f6bdcc3ccb7e4b0ba4bc69d6f7822","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T15:58:30-07:00","added":[],"removed":[],"modified":["contracts/SOURCE.md","contracts/test/fixtures/notification-webhook.fixtures.json","contracts/test/notification-webhook-domain.test.mjs"]}],"total_commits":0,"head_commit":{"id":"7523bd04ab6e3606adf9d17c0b19b74e951e9dd5","message":"docs(contracts): 注册中心取舍补双向交叉实测——放弃的那套有 4 个实缺陷，不是覆盖更全\n\n7f82399 的取舍此前只写了「按 Owner 裁断取远端」，没有实测支撑。补做交叉验证：两侧各自编译成 dist\n后互喂夹具与单测，不靠读代码比对。\n\n① 9ac9914 的 19 例夹具喂当前实现：13 通过 / 6 不通过。6 例里 5 例只是原因码改名、同一输入两侧都拒；\n 余 1 例是设计取向不同——大写摘要旧的拒，新的经 normalizeDigest 归一为小写，比较走 sameHexRef。\n 其 40 例单测喂当前实现：36 通过 / 4 不通过，失败集中在同样四个主题。\n② 反向，当前 25 例夹具喂 9ac9914：18 通过 / 7 不通过。3 例是改名的镜像，另外 4 例是被放弃那套的实缺陷：\n - N10-mutable-version-tag 返回 [] 即放行可变版本标签；\n - N11-leading-zero-version 拒了但拒错原因，其 \\d+\\.\\d+\\.\\d+ 收下了 1.02.0；\n - P03-same-digest-other-case 误拒——它自己的注释抱怨「同一摘要两种写法等于两个身份」，却只在入口拒大写，\n 升级比较那条路上仍把大小写变体当成两个摘要，它抱怨的 bug 它没修完；\n - P04-prerelease-precedes-its-release 误拒 1.0.0-rc.0，而平台自己正在发 1.0.0-rc.x。\n③ 根因是结构性的：被放弃那套三个文件各带一套版本文法，远端抽 registry-primitives.ts 正是为收敛这三套，\n 其抬头所述经比对属实。\n④ 覆盖面 19/40 → 25/49。旧的在 upgrade 规则上多 1 例，但 ① 已证明那 7 例在当前实现下无一失守。\n\n结论：放弃 9ac9914 未造成覆盖缺口，反而避开 4 个实缺陷；唯一差异是原因码命名，无需回捡。\n\n同条订正一处措辞：「报告另行回绑」已不成立，该报告已于 0ed7ee7 回绑 @ 7f82399，其后由后续会话在更新\nSHA 上重绑。本次只改 contracts/SOURCE.md，不在任何 evidence-scopes 作用域内，不影响报告新鲜度。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/7523bd04ab6e3606adf9d17c0b19b74e951e9dd5","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T15:58:50-07:00","added":[],"removed":[],"modified":["contracts/SOURCE.md"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":19827,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":43,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T06:57:38+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
22
|
1789772366
|
1789772427
|
0
|
1789772335
|
1789772427
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24153
|
test(contracts): 公共文件 refresh 规则的快照体检分支——夹具与单测都没钉
|
116
|
5
|
platform.yml
|
130
|
5
|
0
|
refs/heads/main
|
a8733b8670d68e423adf4595fb210d185c882afa
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"73e36fd4d78f4fe2e6d2ee90381700b0da82d381","after":"a8733b8670d68e423adf4595fb210d185c882afa","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/73e36fd4d78f4fe2e6d2ee90381700b0da82d381...a8733b8670d68e423adf4595fb210d185c882afa","commits":[{"id":"a8733b8670d68e423adf4595fb210d185c882afa","message":"test(contracts): 公共文件 refresh 规则的快照体检分支——夹具与单测都没钉\n\n按「算覆盖」的口径复查自己这一轮的三个域：变异每个夹具用例的每个叶子字段，收集规则实际产出的原因码，\n再查夹具有没有声明过、单测有没有兜住。data-analytics / cost-capacity 的「哪里都没有」为 0，\npublic-file 有 2 条：FILE_ACCESS_POLICY_REVISION_REQUIRED、FILE_TENANT_POLICIES_REQUIRED。\n\n成因是本轮自己留下的：给 public-file 新增 refresh 规则时，把 normalizeSnapshot 的错误码经\nrefresh().reason 接了出来，但只钉了「版本不前向」与「未批准」两条，快照体检的其余拒绝分支\n（revision 缺失、租户策略为空 / 非数组）没有任何用例走到——那两处守卫改回去门禁不会红。\n\n补：夹具 29 → 31 例（N26 / N27），单测 22 → 23 例，并断言挡下之后活动快照不动、仍按 version 1 出计划。\n补后重算：public-file 的「哪里都没有」归 0。\n\n本条只补覆盖，没有改任何判定。\n证据：在仅含本提交改动的导出树上 tsc 绿、定向 23/23、contract-public-file 31/31。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/a8733b8670d68e423adf4595fb210d185c882afa","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T15:57:22-07:00","added":[],"removed":[],"modified":["contracts/SOURCE.md","contracts/test/fixtures/public-file.fixtures.json","contracts/test/public-file-domain.test.mjs"]},{"id":"033fe58013bb8911bcb2f63be44d9b4b003fca66","message":"chore(reports): 工作台两份快照回绑 @ 73e36fd\n\n在 73e36fd 的干净 detached worktree 里重跑 build-workbench-snapshots.mjs。两份都有\n实质内容变化，不只是 provenance：\n\n- Manifest 换代。两份快照上一次绑 a9abcbe，当时 reports/release-manifest.latest.json\n 的 sourceSha 还是 b202dde；772b253 把它回绑到 04d02d6 后，两份快照的发布维度就落在了\n 上一代 Manifest 上。现在 21 条 entries 的 release.source_sha 与 ops 的 release 区块\n 一并更新到 04d02d6，缺项文案也从「镜像绑定 d8f0920 ≠ 当前 b202dde」变成\n 「05e3826 ≠ 当前 04d02d6」。\n- runbook 进了 ops 快照的作用域。73e36fd 给 §7 补了 image:smoke 的 env-file 来源，\n docs/runbook.md 是 workbench-ops-snapshot 的登记输入之一，改了就要重绑。\n\n发布档位仍是 stale 7 / not-in-manifest 14，conflicts 0。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/033fe58013bb8911bcb2f63be44d9b4b003fca66","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T15:56:40-07:00","added":[],"removed":[],"modified":["reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json"]}],"total_commits":0,"head_commit":{"id":"a8733b8670d68e423adf4595fb210d185c882afa","message":"test(contracts): 公共文件 refresh 规则的快照体检分支——夹具与单测都没钉\n\n按「算覆盖」的口径复查自己这一轮的三个域：变异每个夹具用例的每个叶子字段，收集规则实际产出的原因码，\n再查夹具有没有声明过、单测有没有兜住。data-analytics / cost-capacity 的「哪里都没有」为 0，\npublic-file 有 2 条：FILE_ACCESS_POLICY_REVISION_REQUIRED、FILE_TENANT_POLICIES_REQUIRED。\n\n成因是本轮自己留下的：给 public-file 新增 refresh 规则时，把 normalizeSnapshot 的错误码经\nrefresh().reason 接了出来，但只钉了「版本不前向」与「未批准」两条，快照体检的其余拒绝分支\n（revision 缺失、租户策略为空 / 非数组）没有任何用例走到——那两处守卫改回去门禁不会红。\n\n补：夹具 29 → 31 例（N26 / N27），单测 22 → 23 例，并断言挡下之后活动快照不动、仍按 version 1 出计划。\n补后重算：public-file 的「哪里都没有」归 0。\n\n本条只补覆盖，没有改任何判定。\n证据：在仅含本提交改动的导出树上 tsc 绿、定向 23/23、contract-public-file 31/31。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/a8733b8670d68e423adf4595fb210d185c882afa","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T15:57:22-07:00","added":[],"removed":[],"modified":["contracts/SOURCE.md","contracts/test/fixtures/public-file.fixtures.json","contracts/test/public-file-domain.test.mjs"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":19770,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":43,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T06:56:25+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
14
|
0
|
1789772335
|
0
|
1789772257
|
1789772335
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24152
|
docs(runbook): §7 补 image:smoke 的 --env-file 从哪来—— docs(runbook): §7 补 image:smoke 的 --env-file 从哪来——仓里没有这份文件，此前只写了占位...
|
116
|
5
|
platform.yml
|
129
|
5
|
0
|
refs/heads/main
|
73e36fd4d78f4fe2e6d2ee90381700b0da82d381
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"b60cc18d640a6561ccdd0fa798753d1f6476bad5","after":"73e36fd4d78f4fe2e6d2ee90381700b0da82d381","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/b60cc18d640a6561ccdd0fa798753d1f6476bad5...73e36fd4d78f4fe2e6d2ee90381700b0da82d381","commits":[{"id":"73e36fd4d78f4fe2e6d2ee90381700b0da82d381","message":"docs(runbook): §7 补 image:smoke 的 --env-file 从哪来——仓里没有这份文件，此前只写了占位\n\nrunbook 只写 `pnpm image:smoke -- --env-file \u003cenv\u003e`，而仓里既没有这份 env，也没说它从\n哪来。实跑一次才发现 .secrets/enterprise-platform-runtime-dev.env 用的是 compose 变量名，\n镜像读的是容器变量名，映射在 stack/compose.yaml 的 runtime environment 块。\n\n连带记下三处只有实跑才撞得上的坑：smoke 的 docker run 不挂 stack 网络（compose 内部主机名\n解析不了，要换 host.docker.internal + 已发布端口）、Redis 逻辑库别撞 dev 常驻运行时的 14、\nscope 这种 shape 档不需要 DATABASE_URL_\u003cMODULE\u003e。\n\n另加一条判读规则：冒烟报告的 sourceSha 是镜像来源提交、provenance.gitSha 是本次运行绑定，\n两者不同是正常的；check:evidence 判 image-smoke 过期时先比它与 image-digest.json 的\nsourceSha，相同就只需重跑补绑定，不必重建镜像。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/73e36fd4d78f4fe2e6d2ee90381700b0da82d381","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T15:55:22-07:00","added":[],"removed":[],"modified":["docs/runbook.md"]},{"id":"d3c6a3f5fee8d2d65b58e89bddd00f6e12c12930","message":"chore(reports): check:fixtures 回绑 @ 91216b5\n\n17 套件 307 例，0 失败 0 不可用；干净树本地跑（provenance worktreeDirty=false —— 判定按仓内口径\n排除 *.latest.json，同期并行会话另有三份门禁产物在树上未提交，本提交不含它们）。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/d3c6a3f5fee8d2d65b58e89bddd00f6e12c12930","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T15:55:13-07:00","added":[],"removed":[],"modified":["reports/fixtures.latest.json"]},{"id":"91216b52fce5a1c677eab2d973a5cdbdac2a68f7","message":"test(contracts): 注册中心入参体检的门禁覆盖——24 个分支里 12 个没有任何用例走到\n\n同日注册中心那笔把 appId / version / blockedBy 的入参体检从抛 TypeError 改成了拒绝，夹具也从 8 例\n补到 21 例。但「不崩了」与「崩回去会被门禁抓到」是两回事。复核方式不是读用例名，而是算覆盖：对当年\n会抛的那 20 处变异逐一跑规则、取回原因码，再看夹具里有没有用例声明过该原因。\n\n结果：\n snapshot.version（4 种脏值） 已钉 VERSION_REQUIRED\n snapshot.blockedBy（4 种） 已钉 SNAPSHOT_BLOCKERS_INVALID\n next.version（4 种） 已钉 SEMANTIC_VERSION_REQUIRED\n snapshot.appId（4 种） ✗ APP_ID_REQUIRED\n next.appId（4 种） ✗ APP_ID_CHANGED\n next.blockedBy（4 种） ✗ NEXT_SNAPSHOT_NOT_CONSUMABLE\n\n21 个用例里没有任何一个往 appId 或 transition 侧的 blockedBy 喂脏值——那两处守卫改回去\ncheck:fixtures 不会红，它压根走不到那条路径。APP_ID_CHANGED 与 NEXT_SNAPSHOT_NOT_CONSUMABLE\n此前单测与夹具都是零覆盖，后者还是 transition 规则里最常出现的一条。\n\n补：夹具 21 → 25 例（N17 appId 非字符串 / N18 appId 整键缺失 / N19 transition 改写 Owner 应用 /\nN20 next 侧 blockers 非数组），单测 46 → 49 例。补后重算覆盖：24 / 24 全钉。\n\n负向实测：把 N19 的声明原因改成不会产生的串 → 门禁 exit 1 并点名该例，恢复后转绿。\n\n本条只补门禁覆盖，没有改任何判定——registry-snapshot.ts / snapshot-upgrade-review.ts 一行未动；\nupgrade 规则那半边（四条就绪闸门各一条真值用例）本来就完整，不在范围内。\n\n证据：在仅含本提交改动的导出树上 tsc 绿、定向 49/49、contract-application-contract-registry 25/25。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/91216b52fce5a1c677eab2d973a5cdbdac2a68f7","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T15:54:24-07:00","added":[],"removed":[],"modified":["contracts/SOURCE.md","contracts/test/application-contract-registry-domain.test.mjs","contracts/test/fixtures/application-contract-registry.fixtures.json"]},{"id":"7c2ac28f4020b30d3b1940a85169738c3f4f5039","message":"chore(reports): 镜像冒烟重跑回绑 @ 5a40e51\n\n在 5a40e51 的干净 detached worktree 里真起容器跑 governance/smoke-image.mjs，\n6 项全过：container-running / api-health-200（database、redis 均 up）/\nplatform-modules-view（fail-closed，scope(shape)）/ module-health-200 /\ndecisions-unauthenticated-401 / docker-healthcheck-healthy。容器结束即删。\n\n冒的仍是 reports/image-digest.json 里那个镜像（sha256:c086993…，源码 05e3826e，\nlinux/arm64），未重建；报告里的 sourceSha 因此仍是 05e3826e——它记的是镜像的来源提交，\nprovenance.gitSha=5a40e51 才是本次冒烟的运行绑定。此前 check:evidence 判它过期是因为\nimage-digest.json 在 05e3826e 之后才被提交进来，结论本身没变，这次是用真跑把绑定补上。\n\nenv-file 由 .secrets/enterprise-platform-runtime-dev.env 按 stack/compose.yaml 的\n容器变量名映射而来，落在会话临时目录、未进仓；容器不挂 stack 网络，故主机名换成\nhost.docker.internal + 已发布端口（PG :55470 / Redis :56379），Redis 借未分配的\n逻辑库 15（dev 常驻运行时占 14，禁止共用）。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/7c2ac28f4020b30d3b1940a85169738c3f4f5039","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T15:52:52-07:00","added":[],"removed":[],"modified":["reports/image-smoke.latest.json"]},{"id":"5a40e517a6f296e16d35481b22b4db15478eaa50","message":"chore(reports): check:fixtures 回绑 @ f2f1063\n\n17 套件 303 例，0 失败 0 不可用；干净树本地跑，provenance worktreeDirty=false。\n\n九个契约包夹具在本轮入参体检后的分布：\n public-file 29 / cost-capacity 32 / data-analytics 27 / application-contract-registry 21 /\n enterprise-experience 18 / configuration-feature-flags 17 / notification-webhook 17 /\n cross-domain-workflow 16 / collaboration-messaging 14\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/5a40e517a6f296e16d35481b22b4db15478eaa50","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T15:51:21-07:00","added":[],"removed":[],"modified":["reports/fixtures.latest.json"]}],"total_commits":0,"head_commit":{"id":"73e36fd4d78f4fe2e6d2ee90381700b0da82d381","message":"docs(runbook): §7 补 image:smoke 的 --env-file 从哪来——仓里没有这份文件，此前只写了占位\n\nrunbook 只写 `pnpm image:smoke -- --env-file \u003cenv\u003e`，而仓里既没有这份 env，也没说它从\n哪来。实跑一次才发现 .secrets/enterprise-platform-runtime-dev.env 用的是 compose 变量名，\n镜像读的是容器变量名，映射在 stack/compose.yaml 的 runtime environment 块。\n\n连带记下三处只有实跑才撞得上的坑：smoke 的 docker run 不挂 stack 网络（compose 内部主机名\n解析不了，要换 host.docker.internal + 已发布端口）、Redis 逻辑库别撞 dev 常驻运行时的 14、\nscope 这种 shape 档不需要 DATABASE_URL_\u003cMODULE\u003e。\n\n另加一条判读规则：冒烟报告的 sourceSha 是镜像来源提交、provenance.gitSha 是本次运行绑定，\n两者不同是正常的；check:evidence 判 image-smoke 过期时先比它与 image-digest.json 的\nsourceSha，相同就只需重跑补绑定，不必重建镜像。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/73e36fd4d78f4fe2e6d2ee90381700b0da82d381","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T15:55:22-07:00","added":[],"removed":[],"modified":["docs/runbook.md"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":19620,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":43,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T06:48:33+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
22
|
1789772247
|
1789772334
|
0
|
1789772184
|
1789772335
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24136
|
chore(reports): 入口门禁与工作台两份快照回绑 @ a9abcbe
|
116
|
5
|
platform.yml
|
121
|
5
|
0
|
refs/heads/main
|
e8fda74e279a5884440d5efaac2265e513c814b6
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"c190a6ab5d2c50e4c90f027bbcca72f1f3050005","after":"e8fda74e279a5884440d5efaac2265e513c814b6","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/c190a6ab5d2c50e4c90f027bbcca72f1f3050005...e8fda74e279a5884440d5efaac2265e513c814b6","commits":[{"id":"e8fda74e279a5884440d5efaac2265e513c814b6","message":"chore(reports): 入口门禁与工作台两份快照回绑 @ a9abcbe\n\n在 a9abcbe 的干净 detached 检出里重跑（governance/rebind-reports.mjs --gates caddy,workbench-snapshots，\n带 CHECK_CADDY_DOCKER=1），三份均 provenance.gitSha=a9abcbe / worktreeDirty=false。\n\n- reports/caddy.latest.json：0 违规。12 个 HTTP 契约前缀 × 2 profile 全覆盖；新增的 routing 段逐条记下\n 模拟出来的块链，13 条登记前缀（11 个去重契约前缀 + 2 个长连接前缀）全部到达 {$PLATFORM_API_UPSTREAM}；\n workbenchGuard.reached=true / conditionalBefore=0；语法校验 dev / staging 均 passed，via docker，\n 镜像 caddy@sha256:5f5c8640…d58648（compose 锁定的那一个，不再是浮动 tag）。\n- reports/workbench-catalog-snapshot.latest.json：只有 provenance 变。caddy-routes.json 进了它的作用域\n （新增 validate / mount 段），被 check:evidence 判过期，但快照只吃 routes.contracts，内容逐字未变——\n 重建后与旧版按字段比对一致，已实测。\n- reports/workbench-ops-snapshot.latest.json：与 catalog 同一脚本产出，必须一起带回（分开会绑不同提交）。\n 它有一处内容变化不由本轮改动引起：image 段从 d8f09205 / sha256:fe418667… 更新到 05e3826e /\n sha256:c0869934…，来源是 06c3d4c 已提交的 reports/image-digest.json——此前那份快照相对该提交是旧的。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/e8fda74e279a5884440d5efaac2265e513c814b6","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T07:46:25-07:00","added":[],"removed":[],"modified":["reports/caddy.latest.json","reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json"]},{"id":"a9abcbe392de8a903512ab4b25529a6e277113ee","message":"feat(gateway): 入口门禁改为解析块树后模拟路由——「文件里配了」不等于「这条路径上生效」\n\nC08 应用群网关是采纳形态，判定在 Caddyfile 这份配置里，由 check-caddy 守。它此前是逐行正则：\n某条指令在文件里出现过就算配了。本轮不动入口运行行为（两份 Caddyfile 一个字没改），只把它\n自己在注释里写明判不了的那一类失效变成静态判定。\n\n逐行正则判不出来的三件事：\n- 有个更靠前的 handle 块把 /api/platform/* 截走——入口鉴权配得好好的，请求根本走不到它。\n caddy-routes.json 的 workbench.note 原文是「这种绕过只能靠运行态探针发现」。\n- 请求体上限 / 上游超时 / request-id 注入写在别的块里，门禁全绿，平台路由上一层保护都没有。\n BODY_LIMIT_MISSING 这类规则问的是「文件里有没有」，不是「这条路由上有没有」。\n- 契约前缀有匹配器、但请求先被别人服务了：ROUTE_UNCOVERED 绿，流量到不了 API。\n\n新增块树解析（tokenizeLine / parseCaddyfile：`{` 只有作为行末独立 token 才开块，占位符\n{$VAR} 与 {http.request.uuid} 是 token 内部的花括号）与路由模拟（按 Caddy 的 handle 互斥语义\n与指令序，逐层并入命名匹配器），据此新增：\n- ROUTE_SHADOWED 前缀有匹配器但被更靠前的 handler 截走，到不了 {$PLATFORM_API_UPSTREAM}\n- WORKBENCH_AUTH_BYPASS 被守护前缀在到达 forward_auth 所在块之前就被别的 handler 服务了；\n 更靠前的 handler 若条件不是纯路径（header / method / file），按「可能截走」同样判红\n- INGRESS_GUARD_OUT_OF_SCOPE 入口约定在文件里有，却不在服务该前缀的那条块链上\n- STREAMING_ROUTE_UNCOVERED 登记的长连接前缀没被路由到上游（与「禁 read_timeout」凑成一对）\n- CADDYFILE_UNPARSED 花括号不配平 / 没有站点块——判不了就报，不静默通过\n\n同轮补三条登记面的：\n- PROFILE_MOUNT_UNBOUND profile 的 Caddyfile 没被登记的 compose 挂进入口容器。staging 那份此前\n 只被校验、没人核对它有没有被 overlay 加载；校验一份没人加载的配置等于没校验。\n- CADDY_IMAGE_UNPINNED compose 的入口镜像不是 digest 锁定。docker 校验原先写死浮动 tag\n caddy:2-alpine，而跑的是锁定镜像——拿另一个版本的 Caddy 校验，过了也\n 不代表运行的那个认它。现在从 compose 取镜像，取不到即 skipped，不退回浮动 tag。\n- ROUTE_MAPPING_ORPHANED 登记表映射了 modules.json 里已不存在的契约（CONTRACT_UNMAPPED 的反向死登记）\n\nstripComments 按 Caddy 口径重写：引号内的 # 是字面量，# 只有在 token 开头才起注释——原先一刀切到\n第一个 #，会把 respond \"a#b\" 这类值截半，反过来让门禁看不见后面真实生效的指令。\nevidence-scopes 的 caddy 作用域补进 stack/compose.yaml 与 stack/overlays/staging.yaml：结论现在\n也取决于「挂没挂进容器」和「校验用的是不是那个镜像」，这两个输入一改结论就可能不再成立。\n\n核验（工作树 dirty，报告未回绑，只绑本地）：\n- CHECK_CADDY_DOCKER=1 check:caddy exit 0：12 个 HTTP 契约前缀 × 2 profile 全覆盖；模拟路由 13 条\n 前缀（11 个去重契约前缀 + 2 个长连接前缀）全部到达上游且入口约定就在各自链上；\n workbenchGuard.reached=true；两份 Caddyfile 语法均 passed，镜像 caddy@sha256:5f5c8640…d58648\n （= compose 锁定、dev 常驻容器正在跑的那一个）。\n- check-caddy.test.mjs 19 → 37 例，每条新规则都有篡改夹具且夹具断言「确实改到了」。两例专门对照\n 旧规则：插入抢先的 handle 后 evaluateCaddyfile / evaluateWorkbench 仍全绿，新规则判红。\n- 与真实 Caddy 对照（同一 digest 镜像，两个一次性容器，上游指向死端口）：真实基线\n GET /api/platform/probe → 502（forward_auth 去校验，没放行）；插入抢先 handle 的那份 → 200\n 「bypassed」，门禁判红。同一份里 /api/v1/decisions 仍 502，截走范围与模拟一致。\n- 一处自测抓到的实现缺陷：scopeNodes 顶层那一跳没挡 handler 分支，\"别的块里配了也算数\"——\n 正是要判的那种失效；已修并由「请求体上限挪到别的块」一例钉住。另一例钉住命名匹配器声明在\n 里层块时必须判得动（撤掉修复即落在 reverse_proxy 而非 respond，实测过）。\n- 回归：governance 全套 340/340；工作区一致性门禁只余既有 L9 compose 重名 1 条，与本轮无关。\n\n未做：G-3 限流要 caddy-ratelimit 插件即自建镜像，会打破 digest 锁定的官方镜像，是 stack 决策；\nHTTP 方法白名单归属 2026-09-16 已裁为不阻塞退役、转 stack 待办；C08.04 East-West 身份、C08.05\nWebhook ingress 与 Egress SSRF、C08.06 外发 / WAF / HA 全无落点（Q03）。静态判定的边界据实登记：\n非路径条件只能判「可能」，route 只作近似，每个前缀只探一条代表路径（/t/\u003ctenant\u003e/login 这类\n「有意分流一部分」不在判定范围），入口鉴权仍挡不住文档导航——运行态探针仍是必要补充。\n\n报告回绑另起 chore(reports) 提交（仓纪律 5）。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/a9abcbe392de8a903512ab4b25529a6e277113ee","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T07:45:36-07:00","added":["docs/应用群网关门禁结构感知-2026-09-18.md"],"removed":[],"modified":["docs/工作台同源托管与入口鉴权实现记录-2026-09-18.md","governance/caddy-routes.json","governance/check-caddy.mjs","governance/evidence-scopes.json","governance/test/check-caddy.test.mjs"]}],"total_commits":0,"head_commit":{"id":"e8fda74e279a5884440d5efaac2265e513c814b6","message":"chore(reports): 入口门禁与工作台两份快照回绑 @ a9abcbe\n\n在 a9abcbe 的干净 detached 检出里重跑（governance/rebind-reports.mjs --gates caddy,workbench-snapshots，\n带 CHECK_CADDY_DOCKER=1），三份均 provenance.gitSha=a9abcbe / worktreeDirty=false。\n\n- reports/caddy.latest.json：0 违规。12 个 HTTP 契约前缀 × 2 profile 全覆盖；新增的 routing 段逐条记下\n 模拟出来的块链，13 条登记前缀（11 个去重契约前缀 + 2 个长连接前缀）全部到达 {$PLATFORM_API_UPSTREAM}；\n workbenchGuard.reached=true / conditionalBefore=0；语法校验 dev / staging 均 passed，via docker，\n 镜像 caddy@sha256:5f5c8640…d58648（compose 锁定的那一个，不再是浮动 tag）。\n- reports/workbench-catalog-snapshot.latest.json：只有 provenance 变。caddy-routes.json 进了它的作用域\n （新增 validate / mount 段），被 check:evidence 判过期，但快照只吃 routes.contracts，内容逐字未变——\n 重建后与旧版按字段比对一致，已实测。\n- reports/workbench-ops-snapshot.latest.json：与 catalog 同一脚本产出，必须一起带回（分开会绑不同提交）。\n 它有一处内容变化不由本轮改动引起：image 段从 d8f09205 / sha256:fe418667… 更新到 05e3826e /\n sha256:c0869934…，来源是 06c3d4c 已提交的 reports/image-digest.json——此前那份快照相对该提交是旧的。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/e8fda74e279a5884440d5efaac2265e513c814b6","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T07:46:25-07:00","added":[],"removed":[],"modified":["reports/caddy.latest.json","reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":18935,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":43,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-18T22:44:32+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
29
|
1789742875
|
1789742912
|
0
|
1789742873
|
1789742926
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24067
|
docs: 修复退役报告导致的断链（一致性门禁 L4）
|
116
|
5
|
platform.yml
|
105
|
5
|
0
|
refs/heads/main
|
e6d286b4f61d0227fa7f42cd0f5f40e624540dbf
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"36e0423efe0ddc105136d193bfb594efb9838d62","after":"e6d286b4f61d0227fa7f42cd0f5f40e624540dbf","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/36e0423efe0ddc105136d193bfb594efb9838d62...e6d286b4f61d0227fa7f42cd0f5f40e624540dbf","commits":[{"id":"e6d286b4f61d0227fa7f42cd0f5f40e624540dbf","message":"docs: 修复退役报告导致的断链（一致性门禁 L4）\n\n09-12 的候选校验记录链向 reports/mainline-candidate-regression.latest.json，\n该报告已随 23281b8 退役，治理层一致性门禁 L4 随即报断链。改为文字说明：\n报告已退役、退役理由、结论现由 governance 测试产出（今 277/277），当时的\n154/0/1 保留为历史记录，不改写历史结论。\n\nL4 / L10 / L13 恢复 CLEAN。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/e6d286b4f61d0227fa7f42cd0f5f40e624540dbf","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-17T18:58:04-07:00","added":[],"removed":[],"modified":["docs/候选校验与恢复脚本修复记录-2026-09-12.md"]}],"total_commits":0,"head_commit":{"id":"e6d286b4f61d0227fa7f42cd0f5f40e624540dbf","message":"docs: 修复退役报告导致的断链（一致性门禁 L4）\n\n09-12 的候选校验记录链向 reports/mainline-candidate-regression.latest.json，\n该报告已随 23281b8 退役，治理层一致性门禁 L4 随即报断链。改为文字说明：\n报告已退役、退役理由、结论现由 governance 测试产出（今 277/277），当时的\n154/0/1 保留为历史记录，不改写历史结论。\n\nL4 / L10 / L13 恢复 CLEAN。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/e6d286b4f61d0227fa7f42cd0f5f40e624540dbf","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-17T18:58:04-07:00","added":[],"removed":[],"modified":["docs/候选校验与恢复脚本修复记录-2026-09-12.md"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":17420,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":42,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-18T09:56:55+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
26
|
1789696796
|
1789696836
|
0
|
1789696688
|
1789696855
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24066
|
chore(reports): 全链回绑 @ 1af0f22，证据零过期零告警
|
116
|
5
|
platform.yml
|
104
|
5
|
0
|
refs/heads/main
|
36e0423efe0ddc105136d193bfb594efb9838d62
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"f9cb195319422eac06bd2111e1034e956ebcafb0","after":"36e0423efe0ddc105136d193bfb594efb9838d62","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/f9cb195319422eac06bd2111e1034e956ebcafb0...36e0423efe0ddc105136d193bfb594efb9838d62","commits":[{"id":"36e0423efe0ddc105136d193bfb594efb9838d62","message":"chore(reports): 全链回绑 @ 1af0f22，证据零过期零告警\n\n干净树重跑根 pnpm check。check:evidence：34 份已登记，**33 份新鲜 / 0 过期 /\n0 输入未提交 / 0 告警 / 1 例外**（stack-image-pins，其例外自带出口）。\n\n这是本轮治理完善的收口：从九份过期、error 级判定，到零过期零告警。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/36e0423efe0ddc105136d193bfb594efb9838d62","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-17T18:56:42-07:00","added":[],"removed":[],"modified":["reports/caddy.latest.json","reports/catalog-drift.latest.json","reports/catalog-reconciliation.latest.json","reports/evidence-freshness.latest.json","reports/facts.latest.json","reports/fixtures.latest.json","reports/migration-decs.latest.json","reports/module-imports.latest.json","reports/otel.latest.json","runtime/reports/agent-adapters.latest.json","runtime/reports/conformance-matrix.latest.json","runtime/reports/contract-consumers.latest.json","runtime/reports/docs-truth.latest.json","runtime/reports/dual-backend-parity.latest.json","runtime/reports/fork-readiness.latest.json","runtime/reports/governance-docs.latest.json","runtime/reports/governance-rules.latest.json","runtime/reports/governance-status.latest.json","runtime/reports/governance.latest.json","runtime/reports/migrations.latest.json","runtime/reports/naming.latest.json","runtime/reports/permission-catalog.latest.json","runtime/reports/platform-ops-definitions.latest.json","runtime/reports/runtime-governance.latest.json","runtime/reports/schema-sync.latest.json","runtime/reports/statemachine-write-guard.latest.json","runtime/reports/validation-source.latest.json"]},{"id":"1af0f2210a8ac041a26a97ff5f4965461398ebf1","message":"feat(governance): 测试地板 652 → 775；动态区回灌今日三级验收\n\ncheck:docs-truth 抓出报告已刷新而动态区未跟上——正是今天修过的那类双真源\n漂移，这次由门禁自己拦住。\n\n- 动态区「真实 DB」：2026-09-13 / 7e26a50 / 652 → 2026-09-18 / 6108357 /\n 775，并写明隔离栈与「破坏性注入只认 ms23-ci 类专用工程」的边界\n- 动态区「浏览器」：2026-09-13 / 7e26a50 → 2026-09-18 / 003aadd，端口如实\n- 棘轮：testsPassed 652 → 775（本轮实测），ownTests 35 → 40、\n ownTestCases 185 → 212（静态 runner 自己抬的，它刻意不动其他 runner 的地板）\n\n棘轮只收紧不放宽：775 是今天真实跑出来的数，此后低于它即红。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/1af0f2210a8ac041a26a97ff5f4965461398ebf1","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-17T18:56:07-07:00","added":[],"removed":[],"modified":["runtime/CLAUDE.md","runtime/reports/baseline.json"]},{"id":"23281b8f814b350af20b95ab6a4176cdbaf25b0a","message":"chore(governance): 退役两份无生成脚本的报告，过期证据归零\n\n2026-09-17 目录负责人裁决：两份都退役（删文件 + 撤登记，不留例外）。\n\n两份都是 09-12 手工拼的一次性记录，仓内没有任何脚本能产出它们，因此永远\n无法重跑、只会一直过期；而它们的结论现在都由自动化门禁产出并正确绑定：\n\n- identity-http（8 例）：逐条比对确认与 runtime/test/e2e/identity-profile.test.ts\n 同名，今日已在 check:runtime 的 775 例里跑过并绑 6108357。其自述的\n provenanceMethod 就写着「Post-run source inspection」，本就不是门禁产物\n- mainline-candidate-regression（155 例）：作用域即 governance/{lib,test} 与\n 两个检查器，结论由 node --test governance/test/*.test.mjs 产出，今日 277/277。\n 155 这个数字自 09-12 起无人维护，保留它只会让人以为另有一道独立的候选回归门禁\n\n退役前已核：release-manifest.mjs 与 build-workbench-snapshots.mjs 都不引用\n这两份；其余引用只在 09-12 的历史记录文档与生成式快照字段里，会随重跑更新。\n\nevidence-scopes 登记 36 → 34，note 补记本次裁决与口径（同 stack-image-pins\n例外里写的「倾向 ① 退役」）。\n\ncheck:evidence：33 新鲜 / **0 过期** / 1 例外（stack-image-pins，另有出口）。\ngovernance 测试 277/277。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/23281b8f814b350af20b95ab6a4176cdbaf25b0a","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-17T18:54:10-07:00","added":[],"removed":["reports/identity-http.latest.json","reports/mainline-candidate-regression.latest.json"],"modified":["governance/evidence-scopes.json"]},{"id":"95d0ac8860038d4af6a3d15d4ca35ff0eff52749","message":"chore(reports): 主线验收与恢复演练重跑通过 @ bc978a8\n\n在专用隔离栈 enterprise-platform-ms23-ci（PG :55485 / Redis :56395 /\nRedpanda :59105）上重跑，源库经 mainline:prepare 新建（platform_{fact,\npermission,audit,owner,consumer}_ci，全部非超级用户 / NOBYPASSRLS）。\n\n- mainline-acceptance passed，四套件 11 / 17 / 19 / 18：fact-read-http、\n fact-persistence、audit-tamper、mainline-revocation-chaos（含重复投递、\n 非连续乱序版本、毒消息 DLQ 与 broker 停机恢复）\n- mainline-restore passed，3 个库逐库 dump + 还原到新建 drill 库，表数\n 12 / 6 / …，逐库 SHA-256 一致；不删除、不重置源库与既往 drill\n- revocation-sla 随之刷新，仍 partial：invalidationPush 的 verdict 依旧是\n measured-with-harness-transport，生产传输未接线\n\n为什么换栈：恢复演练与 Redpanda 混沌用例的 allowlist 只认\nenterprise-platform-{ms23,ms23-ci,adversarial} 三个 compose 工程，\n共享的 ep-delivery 与 dev 常驻 stack 永远不匹配——这是故意的护栏，\n破坏性注入不得指向共享底座。dev 常驻栈全程未被触碰。\n\ncheck:evidence 过期 4 → 2，余下两份都没有生成脚本，另行处置。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/95d0ac8860038d4af6a3d15d4ca35ff0eff52749","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-17T18:50:15-07:00","added":[],"removed":[],"modified":["reports/mainline-acceptance.latest.json","reports/mainline-restore.latest.json","reports/revocation-sla.latest.json"]},{"id":"bc978a8a99636b34e0bc69b018ee6ce8bd6192b9","message":"chore(reports): identity 模块 UI 验收重跑通过 @ 828f178\n\n真实统一 Next 前端 + identity profile + 专用 PostgreSQL/Redis，2 个浏览器级\n用例全绿，由 90cda56 重绑 828f178（作用域内此前累计 21 个文件变更）。\n端口 web :7352 / api :7353。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/bc978a8a99636b34e0bc69b018ee6ce8bd6192b9","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-17T18:43:48-07:00","added":[],"removed":[],"modified":["reports/identity-ui.latest.json"]}],"total_commits":0,"head_commit":{"id":"36e0423efe0ddc105136d193bfb594efb9838d62","message":"chore(reports): 全链回绑 @ 1af0f22，证据零过期零告警\n\n干净树重跑根 pnpm check。check:evidence：34 份已登记，**33 份新鲜 / 0 过期 /\n0 输入未提交 / 0 告警 / 1 例外**（stack-image-pins，其例外自带出口）。\n\n这是本轮治理完善的收口：从九份过期、error 级判定，到零过期零告警。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/36e0423efe0ddc105136d193bfb594efb9838d62","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-17T18:56:42-07:00","added":[],"removed":[],"modified":["reports/caddy.latest.json","reports/catalog-drift.latest.json","reports/catalog-reconciliation.latest.json","reports/evidence-freshness.latest.json","reports/facts.latest.json","reports/fixtures.latest.json","reports/migration-decs.latest.json","reports/module-imports.latest.json","reports/otel.latest.json","runtime/reports/agent-adapters.latest.json","runtime/reports/conformance-matrix.latest.json","runtime/reports/contract-consumers.latest.json","runtime/reports/docs-truth.latest.json","runtime/reports/dual-backend-parity.latest.json","runtime/reports/fork-readiness.latest.json","runtime/reports/governance-docs.latest.json","runtime/reports/governance-rules.latest.json","runtime/reports/governance-status.latest.json","runtime/reports/governance.latest.json","runtime/reports/migrations.latest.json","runtime/reports/naming.latest.json","runtime/reports/permission-catalog.latest.json","runtime/reports/platform-ops-definitions.latest.json","runtime/reports/runtime-governance.latest.json","runtime/reports/schema-sync.latest.json","runtime/reports/statemachine-write-guard.latest.json","runtime/reports/validation-source.latest.json"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":17277,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":42,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-18T09:22:53+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
24
|
1789696615
|
1789696796
|
0
|
1789696615
|
1789696855
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24058
|
fix(runtime): 框架残留 compose 补 project 名——退出 api-nes fix(runtime): 框架残留 compose 补 project 名——退出 api-nestjs 撞名（C-13 / 一致性门禁 L9）...
|
116
|
5
|
platform.yml
|
101
|
5
|
0
|
refs/heads/main
|
0c5d0b09bc2d1c4baddfd59b484c5fdcbe0917ab
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"ac396a0f27fd673e02fc0c2f5887ea7f06b879b4","after":"0c5d0b09bc2d1c4baddfd59b484c5fdcbe0917ab","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/ac396a0f27fd673e02fc0c2f5887ea7f06b879b4...0c5d0b09bc2d1c4baddfd59b484c5fdcbe0917ab","commits":[{"id":"0c5d0b09bc2d1c4baddfd59b484c5fdcbe0917ab","message":"fix(runtime): 框架残留 compose 补 project 名——退出 api-nestjs 撞名（C-13 / 一致性门禁 L9）\n\nruntime/apps/api-nestjs/docker-compose.yml 未声明顶层 name，docker compose 按目录名推导为\napi-nestjs，与工作区内另外 8 个仓的同名 compose 共用容器与具名卷（api-nestjs_pgdata /\nredisdata / miniodata）；后 up 的那个会复用前一个的数据。框架仓同名文件已写成\n`name: ${COMPOSE_PROJECT_NAME:-base-framework}`，本仓这份是更早版本的残留。\n\n按同一写法补上，默认值取本仓专属 enterprise-platform-runtime-dev（不沿用框架默认，否则\n改为与框架仓撞名）。本文件是框架默认 dev compose，其端口 5432 / 6379 与本仓实际底座\n（stack/compose.yaml，project enterprise-platform-stack）无关，改名不影响任何在跑的服务。\n\n一致性门禁 L9 参与仓 9 → 8；余 8 个仓在业务应用层与企业领域应用层，按 C-13 由各仓 Owner\n与 SRE 处置。三组卷现状：api-nestjs_* 与 enterprise-idp_* 共 5 个卷，所属容器均为\ncreated / exited 非运行态；C-13 要求的 pg_dump 尚未做（仓备份-2026-09-16/ 目前只有 4 个 git bundle）。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/0c5d0b09bc2d1c4baddfd59b484c5fdcbe0917ab","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-17T16:25:43-07:00","added":[],"removed":[],"modified":["runtime/apps/api-nestjs/docker-compose.yml"]}],"total_commits":0,"head_commit":{"id":"0c5d0b09bc2d1c4baddfd59b484c5fdcbe0917ab","message":"fix(runtime): 框架残留 compose 补 project 名——退出 api-nestjs 撞名（C-13 / 一致性门禁 L9）\n\nruntime/apps/api-nestjs/docker-compose.yml 未声明顶层 name，docker compose 按目录名推导为\napi-nestjs，与工作区内另外 8 个仓的同名 compose 共用容器与具名卷（api-nestjs_pgdata /\nredisdata / miniodata）；后 up 的那个会复用前一个的数据。框架仓同名文件已写成\n`name: ${COMPOSE_PROJECT_NAME:-base-framework}`，本仓这份是更早版本的残留。\n\n按同一写法补上，默认值取本仓专属 enterprise-platform-runtime-dev（不沿用框架默认，否则\n改为与框架仓撞名）。本文件是框架默认 dev compose，其端口 5432 / 6379 与本仓实际底座\n（stack/compose.yaml，project enterprise-platform-stack）无关，改名不影响任何在跑的服务。\n\n一致性门禁 L9 参与仓 9 → 8；余 8 个仓在业务应用层与企业领域应用层，按 C-13 由各仓 Owner\n与 SRE 处置。三组卷现状：api-nestjs_* 与 enterprise-idp_* 共 5 个卷，所属容器均为\ncreated / exited 非运行态；C-13 要求的 pg_dump 尚未做（仓备份-2026-09-16/ 目前只有 4 个 git bundle）。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/0c5d0b09bc2d1c4baddfd59b484c5fdcbe0917ab","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-17T16:25:43-07:00","added":[],"removed":[],"modified":["runtime/apps/api-nestjs/docker-compose.yml"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":17167,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":42,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-18T07:25:13+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
33
|
1789687636
|
1789687678
|
0
|
1789687572
|
1789687994
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24044
|
docs(runtime): WB-1 工作台脚手架实现记录——本机验收范围、口径落点与未做项归属
|
116
|
5
|
platform.yml
|
97
|
5
|
0
|
refs/heads/main
|
8dae61f91b56f708b1c76e66f07d98efa4828a36
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"9a111b33be8f5471c74e5c9310cb8acdc8fbdeb1","after":"8dae61f91b56f708b1c76e66f07d98efa4828a36","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/9a111b33be8f5471c74e5c9310cb8acdc8fbdeb1...8dae61f91b56f708b1c76e66f07d98efa4828a36","commits":[{"id":"8dae61f91b56f708b1c76e66f07d98efa4828a36","message":"docs(runtime): WB-1 工作台脚手架实现记录——本机验收范围、口径落点与未做项归属\n\n明确本记录不构成阶段 ② 验收：Caddy 托管 / 入口鉴权 / 快照与 PLATFORM_OPS_* 进部署 / 镜像注入\nPLATFORM_SOURCE_SHA / 目标环境四页验收 / 工作台制品入 Manifest 均未做，逐项标注归属。\n记录部署侧既知阻碍：容器镜像源码 19150ae 早于 8ced3d1 与 6378b6f，catalog 与 ops/definitions 实测 404。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/8dae61f91b56f708b1c76e66f07d98efa4828a36","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-17T16:16:11-07:00","added":["docs/工作台脚手架WB-1实现记录-2026-09-17.md"],"removed":[],"modified":[]}],"total_commits":0,"head_commit":{"id":"8dae61f91b56f708b1c76e66f07d98efa4828a36","message":"docs(runtime): WB-1 工作台脚手架实现记录——本机验收范围、口径落点与未做项归属\n\n明确本记录不构成阶段 ② 验收：Caddy 托管 / 入口鉴权 / 快照与 PLATFORM_OPS_* 进部署 / 镜像注入\nPLATFORM_SOURCE_SHA / 目标环境四页验收 / 工作台制品入 Manifest 均未做，逐项标注归属。\n记录部署侧既知阻碍：容器镜像源码 19150ae 早于 8ced3d1 与 6378b6f，catalog 与 ops/definitions 实测 404。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/8dae61f91b56f708b1c76e66f07d98efa4828a36","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-17T16:16:11-07:00","added":["docs/工作台脚手架WB-1实现记录-2026-09-17.md"],"removed":[],"modified":[]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":17036,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":42,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-18T07:15:47+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
29
|
1789686990
|
1789687092
|
0
|
1789686980
|
1789687171
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24043
|
chore(reports): WB-1 脚手架后门禁回绑 @ 460cfe9
|
116
|
5
|
platform.yml
|
96
|
5
|
0
|
refs/heads/main
|
9a111b33be8f5471c74e5c9310cb8acdc8fbdeb1
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"460cfe907dba69936a3bec815b177f2f96ba8790","after":"9a111b33be8f5471c74e5c9310cb8acdc8fbdeb1","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/460cfe907dba69936a3bec815b177f2f96ba8790...9a111b33be8f5471c74e5c9310cb8acdc8fbdeb1","commits":[{"id":"9a111b33be8f5471c74e5c9310cb8acdc8fbdeb1","message":"chore(reports): WB-1 脚手架后门禁回绑 @ 460cfe9\n\n仓根 pnpm check 在 clean 树上退出码 0：pins / modules / module-imports（409 源文件 0 跨模块 import）/\ncatalog / drift / fixtures 17 套件 189 例 / facts / migration-decs / caddy / otel / governance 265 测试 0 失败 /\ncontracts check:local / runtime 静态门禁 31 项（含 workbench typecheck 与 lint）/ evidence。\n\ncheck:evidence 仍 partial：36 份登记中 26 新鲜、9 过期、1 例外。9 份过期全部是需真实环境的验收类报告\n（port-conformance / runtime-acceptance / ui-acceptance / revocation-sla / mainline-acceptance /\nidentity-http / identity-ui / mainline-restore / mainline-candidate-regression），与本次新增前端无关。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/9a111b33be8f5471c74e5c9310cb8acdc8fbdeb1","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-17T16:15:35-07:00","added":[],"removed":[],"modified":["reports/caddy.latest.json","reports/catalog-drift.latest.json","reports/catalog-reconciliation.latest.json","reports/evidence-freshness.latest.json","reports/facts.latest.json","reports/fixtures.latest.json","reports/migration-decs.latest.json","reports/module-imports.latest.json","reports/otel.latest.json","runtime/reports/agent-adapters.latest.json","runtime/reports/conformance-matrix.latest.json","runtime/reports/contract-consumers.latest.json","runtime/reports/docs-truth.latest.json","runtime/reports/dual-backend-parity.latest.json","runtime/reports/fork-readiness.latest.json","runtime/reports/governance-docs.latest.json","runtime/reports/governance-rules.latest.json","runtime/reports/governance-status.latest.json","runtime/reports/governance.latest.json","runtime/reports/migrations.latest.json","runtime/reports/naming.latest.json","runtime/reports/permission-catalog.latest.json","runtime/reports/platform-ops-definitions.latest.json","runtime/reports/runtime-governance.latest.json","runtime/reports/schema-sync.latest.json","runtime/reports/statemachine-write-guard.latest.json","runtime/reports/validation-source.latest.json"]}],"total_commits":0,"head_commit":{"id":"9a111b33be8f5471c74e5c9310cb8acdc8fbdeb1","message":"chore(reports): WB-1 脚手架后门禁回绑 @ 460cfe9\n\n仓根 pnpm check 在 clean 树上退出码 0：pins / modules / module-imports（409 源文件 0 跨模块 import）/\ncatalog / drift / fixtures 17 套件 189 例 / facts / migration-decs / caddy / otel / governance 265 测试 0 失败 /\ncontracts check:local / runtime 静态门禁 31 项（含 workbench typecheck 与 lint）/ evidence。\n\ncheck:evidence 仍 partial：36 份登记中 26 新鲜、9 过期、1 例外。9 份过期全部是需真实环境的验收类报告\n（port-conformance / runtime-acceptance / ui-acceptance / revocation-sla / mainline-acceptance /\nidentity-http / identity-ui / mainline-restore / mainline-candidate-regression），与本次新增前端无关。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/9a111b33be8f5471c74e5c9310cb8acdc8fbdeb1","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-17T16:15:35-07:00","added":[],"removed":[],"modified":["reports/caddy.latest.json","reports/catalog-drift.latest.json","reports/catalog-reconciliation.latest.json","reports/evidence-freshness.latest.json","reports/facts.latest.json","reports/fixtures.latest.json","reports/migration-decs.latest.json","reports/module-imports.latest.json","reports/otel.latest.json","runtime/reports/agent-adapters.latest.json","runtime/reports/conformance-matrix.latest.json","runtime/reports/contract-consumers.latest.json","runtime/reports/docs-truth.latest.json","runtime/reports/dual-backend-parity.latest.json","runtime/reports/fork-readiness.latest.json","runtime/reports/governance-docs.latest.json","runtime/reports/governance-rules.latest.json","runtime/reports/governance-status.latest.json","runtime/reports/governance.latest.json","runtime/reports/migrations.latest.json","runtime/reports/naming.latest.json","runtime/reports/permission-catalog.latest.json","runtime/reports/platform-ops-definitions.latest.json","runtime/reports/runtime-governance.latest.json","runtime/reports/schema-sync.latest.json","runtime/reports/statemachine-write-guard.latest.json","runtime/reports/validation-source.latest.json"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":17007,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":42,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-18T07:15:02+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
0
|
1789686980
|
0
|
1789686947
|
1789686980
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24042
|
feat(runtime): WB-1 工作台脚手架——runtime/apps/workbench feat(runtime): WB-1 工作台脚手架——runtime/apps/workbench 纯静态 SPA 与四页只读面...
|
116
|
5
|
platform.yml
|
95
|
5
|
0
|
refs/heads/main
|
460cfe907dba69936a3bec815b177f2f96ba8790
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"361a0e418fa5c6c648f95625c7829a0c46a76cde","after":"460cfe907dba69936a3bec815b177f2f96ba8790","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/361a0e418fa5c6c648f95625c7829a0c46a76cde...460cfe907dba69936a3bec815b177f2f96ba8790","commits":[{"id":"460cfe907dba69936a3bec815b177f2f96ba8790","message":"feat(runtime): WB-1 工作台脚手架——runtime/apps/workbench 纯静态 SPA 与四页只读面\n\n按 CHG-018 §5.1 已裁技术栈建独立应用：Next.js output=export + React + TypeScript，\n无 SSR / API routes / middleware，产物 out/ 由 Caddy 托管（入口鉴权与部署注入属 SRE，未做）。\n\n- 四页：总览（运行时装配事实）、服务目录（构建期快照）、只读运行信息（模块与 health 探针）、登录（OIDC 公开客户端 Authorization Code + PKCE，带 state / nonce，令牌只入 sessionStorage 且只走 Authorization 头）\n- StateBlock 把缺接口 / 缺凭证 / 缺权限 / 依赖故障 / 响应不可解析 / 空数据分别成状态显示，不以模拟数据或空成功掩盖（§5.2）\n- 不静态 import 任何 @juhai/module-*，只经公开 HTTP 只读面取数；catalog / modules 响应形状在 features/platform/types.ts 作浏览器侧镜像并注明真源文件\n- 目录快照经 scripts/copy-snapshots.mjs 于构建期复制为静态资产；缺快照时页面显示「未随构建附带」而非空目录\n- 环境列固定 unknown、装载成功不渲染为健康、空 health 明示不等于业务健康\n- check:fork-readiness 的 F7 / F9 忽略表补 out（静态导出产物，与 dist / .next 同类）——本仓首个静态导出应用暴露的缺口\n\n本机验收（dev 服务 :3010，API 指向容器 127.0.0.1:53001）：服务目录页渲染真实快照 21 条目、\n快照来源显示绑定 6378b6f；总览与运行信息页因跨源被拦，如实显示依赖故障；登录页显示缺配置。\nruntime 静态门禁 31 项通过（含 workbench typecheck / lint）；check:naming、check:module-imports、\ncheck:fork-readiness 通过。目标环境验收未做：运行容器源码为 19150ae，早于目录读面与 OPS-1，\n/api/platform/catalog 与 /api/platform/ops/definitions 实测 404。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/460cfe907dba69936a3bec815b177f2f96ba8790","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-17T16:14:34-07:00","added":["runtime/apps/workbench/.env.example","runtime/apps/workbench/.gitignore","runtime/apps/workbench/eslint.config.mjs","runtime/apps/workbench/next.config.ts","runtime/apps/workbench/package.json","runtime/apps/workbench/postcss.config.js","runtime/apps/workbench/public/snapshots/.gitkeep","runtime/apps/workbench/scripts/copy-snapshots.mjs","runtime/apps/workbench/src/app/callback/page.tsx","runtime/apps/workbench/src/app/catalog/page.tsx","runtime/apps/workbench/src/app/globals.css","runtime/apps/workbench/src/app/layout.tsx","runtime/apps/workbench/src/app/login/page.tsx","runtime/apps/workbench/src/app/page.tsx","runtime/apps/workbench/src/app/runtime/page.tsx","runtime/apps/workbench/src/components/app-nav.tsx","runtime/apps/workbench/src/components/state-block.tsx","runtime/apps/workbench/src/components/ui/badge.tsx","runtime/apps/workbench/src/components/ui/card.tsx","runtime/apps/workbench/src/features/auth/api.ts","runtime/apps/workbench/src/features/auth/config.ts","runtime/apps/workbench/src/features/auth/pkce.ts","runtime/apps/workbench/src/features/auth/store.ts","runtime/apps/workbench/src/features/platform/api.ts","runtime/apps/workbench/src/features/platform/hooks.ts","runtime/apps/workbench/src/features/platform/types.ts","runtime/apps/workbench/src/lib/providers.tsx","runtime/apps/workbench/src/lib/utils.ts","runtime/apps/workbench/tailwind.config.ts","runtime/apps/workbench/tsconfig.json","runtime/apps/workbench/turbo.json"],"removed":[],"modified":["runtime/pnpm-lock.yaml","runtime/scripts/check-fork-readiness.mjs"]},{"id":"41ca98813d6661f799d6cd4f8674fbc265a5cf6c","message":"docs(runtime): PF-03 ⑤ 回灌——GOVERNANCE-BASELINE 表与发布快照不再冒充框架仓事实\n\n偏差 #11：runtime/CLAUDE.md 的动态区「证据新鲜度」已回灌为本仓事实（652 /\n7e26a50 / 2026-09-13），其下的 GOVERNANCE-BASELINE 表却仍写着框架仓的\n288 tests @ 17b8276 与 4 组合 UI，同一文件里两份真源打架——而该文件自己\n规定「判定治理状态只认动态区 + reports」。\n\n四行按 runtime-acceptance / ui-acceptance 两份报告回灌：\n\n- runtime-acceptance：288 @ 17b8276 → 652 @ 7e26a50，证据描述改本仓底座\n （PG :55471 / Redis :56380/7 / Redpanda :59093 + platform_identity_test）\n- tests-passing：288 → 652，地板改指 reports/baseline.json\n- tenant-rls：clean SHA 17b8276 → 7e26a50，去掉框架的「两后端各 6 例」\n- ui-acceptance：4 组合 × 11 用例 → 1 组合（nestjs × ws）5 用例，地板 11 → 5\n\n「发布状态快照」一段描述的是框架仓 base-framework 的两个远端与 CI run，\n随 scaffold 带入本仓，在此读起来像本仓状态：加归属标注并指向开发计划 §1\n仓与远端行，保留原文作版本轴溯源，不删。\n\ncheck:docs-truth 通过（动态区两行 SHA 断言未受影响）、check:governance-docs\n通过（AGENTS.md 符号链接一致）。\n\n报告未回绑：工作区有并行会话在途的 pnpm-lock / check-fork-readiness /\napps/workbench，拿不到干净树。作用域内四份报告（docs-truth、governance-docs、\nagent-adapters、dual-backend-parity，均 warn 级）待干净树的 chore(reports)。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/41ca98813d6661f799d6cd4f8674fbc265a5cf6c","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-17T16:14:02-07:00","added":[],"removed":[],"modified":["runtime/CLAUDE.md"]}],"total_commits":0,"head_commit":{"id":"460cfe907dba69936a3bec815b177f2f96ba8790","message":"feat(runtime): WB-1 工作台脚手架——runtime/apps/workbench 纯静态 SPA 与四页只读面\n\n按 CHG-018 §5.1 已裁技术栈建独立应用：Next.js output=export + React + TypeScript，\n无 SSR / API routes / middleware，产物 out/ 由 Caddy 托管（入口鉴权与部署注入属 SRE，未做）。\n\n- 四页：总览（运行时装配事实）、服务目录（构建期快照）、只读运行信息（模块与 health 探针）、登录（OIDC 公开客户端 Authorization Code + PKCE，带 state / nonce，令牌只入 sessionStorage 且只走 Authorization 头）\n- StateBlock 把缺接口 / 缺凭证 / 缺权限 / 依赖故障 / 响应不可解析 / 空数据分别成状态显示，不以模拟数据或空成功掩盖（§5.2）\n- 不静态 import 任何 @juhai/module-*，只经公开 HTTP 只读面取数；catalog / modules 响应形状在 features/platform/types.ts 作浏览器侧镜像并注明真源文件\n- 目录快照经 scripts/copy-snapshots.mjs 于构建期复制为静态资产；缺快照时页面显示「未随构建附带」而非空目录\n- 环境列固定 unknown、装载成功不渲染为健康、空 health 明示不等于业务健康\n- check:fork-readiness 的 F7 / F9 忽略表补 out（静态导出产物，与 dist / .next 同类）——本仓首个静态导出应用暴露的缺口\n\n本机验收（dev 服务 :3010，API 指向容器 127.0.0.1:53001）：服务目录页渲染真实快照 21 条目、\n快照来源显示绑定 6378b6f；总览与运行信息页因跨源被拦，如实显示依赖故障；登录页显示缺配置。\nruntime 静态门禁 31 项通过（含 workbench typecheck / lint）；check:naming、check:module-imports、\ncheck:fork-readiness 通过。目标环境验收未做：运行容器源码为 19150ae，早于目录读面与 OPS-1，\n/api/platform/catalog 与 /api/platform/ops/definitions 实测 404。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/460cfe907dba69936a3bec815b177f2f96ba8790","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-17T16:14:34-07:00","added":["runtime/apps/workbench/.env.example","runtime/apps/workbench/.gitignore","runtime/apps/workbench/eslint.config.mjs","runtime/apps/workbench/next.config.ts","runtime/apps/workbench/package.json","runtime/apps/workbench/postcss.config.js","runtime/apps/workbench/public/snapshots/.gitkeep","runtime/apps/workbench/scripts/copy-snapshots.mjs","runtime/apps/workbench/src/app/callback/page.tsx","runtime/apps/workbench/src/app/catalog/page.tsx","runtime/apps/workbench/src/app/globals.css","runtime/apps/workbench/src/app/layout.tsx","runtime/apps/workbench/src/app/login/page.tsx","runtime/apps/workbench/src/app/page.tsx","runtime/apps/workbench/src/app/runtime/page.tsx","runtime/apps/workbench/src/components/app-nav.tsx","runtime/apps/workbench/src/components/state-block.tsx","runtime/apps/workbench/src/components/ui/badge.tsx","runtime/apps/workbench/src/components/ui/card.tsx","runtime/apps/workbench/src/features/auth/api.ts","runtime/apps/workbench/src/features/auth/config.ts","runtime/apps/workbench/src/features/auth/pkce.ts","runtime/apps/workbench/src/features/auth/store.ts","runtime/apps/workbench/src/features/platform/api.ts","runtime/apps/workbench/src/features/platform/hooks.ts","runtime/apps/workbench/src/features/platform/types.ts","runtime/apps/workbench/src/lib/providers.tsx","runtime/apps/workbench/src/lib/utils.ts","runtime/apps/workbench/tailwind.config.ts","runtime/apps/workbench/tsconfig.json","runtime/apps/workbench/turbo.json"],"removed":[],"modified":["runtime/pnpm-lock.yaml","runtime/scripts/check-fork-readiness.mjs"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":16789,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":42,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-18T07:01:31+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
0
|
1789686947
|
0
|
1789686902
|
1789686947
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24032
|
chore(reports): runtime 静态门禁（含新增 permission-catalo chore(reports): runtime 静态门禁（含新增 permission-catalog）与 module-imports / evidence 回绑 @ a51ad37...
|
116
|
5
|
platform.yml
|
91
|
5
|
0
|
refs/heads/main
|
05c96b7f6c43acc654b182a9e08cdd55f02ed8ee
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"7ca595293cae2a013f38280665e3ad8135c5d3c3","after":"05c96b7f6c43acc654b182a9e08cdd55f02ed8ee","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/7ca595293cae2a013f38280665e3ad8135c5d3c3...05c96b7f6c43acc654b182a9e08cdd55f02ed8ee","commits":[{"id":"05c96b7f6c43acc654b182a9e08cdd55f02ed8ee","message":"chore(reports): runtime 静态门禁（含新增 permission-catalog）与 module-imports / evidence 回绑 @ a51ad37\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/05c96b7f6c43acc654b182a9e08cdd55f02ed8ee","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-17T08:39:35-07:00","added":["runtime/reports/permission-catalog.latest.json"],"removed":[],"modified":["reports/evidence-freshness.latest.json","reports/module-imports.latest.json","runtime/reports/agent-adapters.latest.json","runtime/reports/conformance-matrix.latest.json","runtime/reports/contract-consumers.latest.json","runtime/reports/docs-truth.latest.json","runtime/reports/dual-backend-parity.latest.json","runtime/reports/fork-readiness.latest.json","runtime/reports/governance-docs.latest.json","runtime/reports/governance-rules.latest.json","runtime/reports/governance-status.latest.json","runtime/reports/governance.latest.json","runtime/reports/migrations.latest.json","runtime/reports/naming.latest.json","runtime/reports/runtime-governance.latest.json","runtime/reports/schema-sync.latest.json","runtime/reports/statemachine-write-guard.latest.json","runtime/reports/validation-source.latest.json"]},{"id":"a51ad37404e4a474389e5cccc3f6876a0cc18a20","message":"feat(runtime): CHG-019 / P-4 运行时接线——权限目录构建期快照喂装配点，decide 先过目录准入\n\n- scripts/sync-permission-catalog.mjs：把 contracts/catalogs/permissions.json 渲染为 packages/contracts/src/permission-catalog.ts（PERMISSION_CATALOG_ROUTES，57 条 resource:action，带 source sha256）；--check 进 runtime check 链（check:permission-catalog，负向已验证：改一条 active 为 draft 即 exit 1），reports/permission-catalog.latest.json 登记进 check:evidence 作用域。\n- module-kit PlatformModuleDeps.permissionCatalog；permission 模块 domain/catalog-admission.ts（CATALOG_UNAVAILABLE / RESOURCE_NOT_IN_CATALOG / RESOURCE_NOT_ACTIVE；生产一律强制，其他环境 PLATFORM_PERMISSION_CATALOG_ENFORCE=1），PermissionStore.decide 在任何租户授权查询之前先过准入；装配点从 @repo/contracts 传入快照。\n- 5 例负向单测；api-nestjs 21 例装配单测、typecheck、check:module-imports、runtime 14 项静态门禁全过。runbook §2 增环境行；缺失清单 P-4 标已接线；runtime/CLAUDE.md 基线表增 permission-catalog 行。真实库下的拒绝用例待 check:runtime 重跑。\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/a51ad37404e4a474389e5cccc3f6876a0cc18a20","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-17T08:39:26-07:00","added":["runtime/modules/permission/src/domain/catalog-admission.ts","runtime/modules/permission/test/negative/catalog-admission.test.ts","runtime/packages/contracts/src/permission-catalog.ts","runtime/scripts/sync-permission-catalog.mjs"],"removed":[],"modified":["docs/runbook.md","docs/缺失模块完善清单-2026-09-16.md","governance/evidence-scopes.json","runtime/CLAUDE.md","runtime/apps/api-nestjs/src/platform/platform-ports.module.ts","runtime/modules/kit/src/index.ts","runtime/modules/permission/src/domain/index.ts","runtime/modules/permission/src/index.ts","runtime/modules/permission/src/persistence/permission-store.ts","runtime/package.json","runtime/packages/contracts/src/index.ts"]}],"total_commits":0,"head_commit":{"id":"05c96b7f6c43acc654b182a9e08cdd55f02ed8ee","message":"chore(reports): runtime 静态门禁（含新增 permission-catalog）与 module-imports / evidence 回绑 @ a51ad37\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/05c96b7f6c43acc654b182a9e08cdd55f02ed8ee","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-17T08:39:35-07:00","added":["runtime/reports/permission-catalog.latest.json"],"removed":[],"modified":["reports/evidence-freshness.latest.json","reports/module-imports.latest.json","runtime/reports/agent-adapters.latest.json","runtime/reports/conformance-matrix.latest.json","runtime/reports/contract-consumers.latest.json","runtime/reports/docs-truth.latest.json","runtime/reports/dual-backend-parity.latest.json","runtime/reports/fork-readiness.latest.json","runtime/reports/governance-docs.latest.json","runtime/reports/governance-rules.latest.json","runtime/reports/governance-status.latest.json","runtime/reports/governance.latest.json","runtime/reports/migrations.latest.json","runtime/reports/naming.latest.json","runtime/reports/runtime-governance.latest.json","runtime/reports/schema-sync.latest.json","runtime/reports/statemachine-write-guard.latest.json","runtime/reports/validation-source.latest.json"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":16412,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":42,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-17T23:34:32+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
0
|
1789659619
|
0
|
1789659579
|
1789659619
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24031
|
chore(reports): CHG-019 应用后 catalog / drift / fixt chore(reports): CHG-019 应用后 catalog / drift / fixtures / 工作台快照 / evidence 回绑 @ bde8af9...
|
116
|
5
|
platform.yml
|
90
|
5
|
0
|
refs/heads/main
|
7ca595293cae2a013f38280665e3ad8135c5d3c3
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"b54eccb01afc84bc640e987a599840b3f645e167","after":"7ca595293cae2a013f38280665e3ad8135c5d3c3","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/b54eccb01afc84bc640e987a599840b3f645e167...7ca595293cae2a013f38280665e3ad8135c5d3c3","commits":[{"id":"7ca595293cae2a013f38280665e3ad8135c5d3c3","message":"chore(reports): CHG-019 应用后 catalog / drift / fixtures / 工作台快照 / evidence 回绑 @ bde8af9\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/7ca595293cae2a013f38280665e3ad8135c5d3c3","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-17T08:34:28-07:00","added":[],"removed":[],"modified":["reports/catalog-drift.latest.json","reports/catalog-reconciliation.latest.json","reports/evidence-freshness.latest.json","reports/fixtures.latest.json","reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json"]},{"id":"bde8af9ca8d2191cd8a05fc10121ef108f6ce67e","message":"feat(contracts): 应用 CHG-019（A-6）——permissions.json 八项应用域资源升 active，Linter 成熟度合法集扩为 draft | active\n\n决策批次 2026-09-16 A-6 批准「8 项离开 draft」，目录负责人 2026-09-17 选定终态 active。Linter PERMISSION_RESOURCE_METADATA_INVALID 改为 maturity ∈ {draft, active} 且 owner_domain 必填；hr.employment / identity.tenant-administration / knowledge.content / device.asset / quotation.operations / service.operations / execution.operations / material.production 改 active；platform.operations（CHG-005）保持 draft 至 OPS 命令验收。测试补成熟度负例与八项 active 基线断言，285/285；check:generated 一致；catalog / drift / fixtures 通过。运行时接线（P-4）随后单独提交。\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/bde8af9ca8d2191cd8a05fc10121ef108f6ce67e","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-17T08:34:24-07:00","added":[],"removed":[],"modified":["contracts/catalogs/permissions.json","contracts/scripts/governance-linter.mjs","contracts/test/governance-linter.test.mjs"]}],"total_commits":0,"head_commit":{"id":"7ca595293cae2a013f38280665e3ad8135c5d3c3","message":"chore(reports): CHG-019 应用后 catalog / drift / fixtures / 工作台快照 / evidence 回绑 @ bde8af9\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/7ca595293cae2a013f38280665e3ad8135c5d3c3","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-17T08:34:28-07:00","added":[],"removed":[],"modified":["reports/catalog-drift.latest.json","reports/catalog-reconciliation.latest.json","reports/evidence-freshness.latest.json","reports/fixtures.latest.json","reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":16358,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":42,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-17T23:28:47+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
0
|
1789659579
|
0
|
1789659271
|
1789659579
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
24001
|
feat(stack): Grafana 业务配置进仓——首页业务面 SLO、默认 zh-Hans feat(stack): Grafana 业务配置进仓——首页业务面 SLO、默认 zh-Hans 与 Asia/Shanghai、单组织新用户 Viewer、不外联；dev 补 root_url...
|
116
|
5
|
platform.yml
|
73
|
5
|
0
|
refs/heads/main
|
defd9d729060bf91f2fb1f38c165ea6b27e28780
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"ec29ace2dc8f4e3e51b716c3bb673b741f85b47f","after":"defd9d729060bf91f2fb1f38c165ea6b27e28780","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/ec29ace2dc8f4e3e51b716c3bb673b741f85b47f...defd9d729060bf91f2fb1f38c165ea6b27e28780","commits":[{"id":"defd9d729060bf91f2fb1f38c165ea6b27e28780","message":"feat(stack): Grafana 业务配置进仓——首页业务面 SLO、默认 zh-Hans 与 Asia/Shanghai、单组织新用户 Viewer、不外联；dev 补 root_url\n\n并行会话产出，按原样收入。compose grafana 服务 GF_* 十余项与 provisioning 同口径，四份仪表板 timezone 留空以继承服务默认，dev overlay 的 GF_SERVER_ROOT_URL 用主机端口；记录 stack/reports/grafana-config.2026-09-16.json（dev / staging 两套 compose config 渲染通过）。\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/defd9d729060bf91f2fb1f38c165ea6b27e28780","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-16T17:16:33-07:00","added":["stack/reports/grafana-config.2026-09-16.json"],"removed":[],"modified":["stack/README.md","stack/compose.yaml","stack/otel/grafana/provisioning/dashboards/json/platform-business-slo.json","stack/otel/grafana/provisioning/dashboards/json/platform-logs-traces.json","stack/otel/grafana/provisioning/dashboards/json/platform-otel-pipeline.json","stack/otel/grafana/provisioning/dashboards/json/platform-runtime.json","stack/overlays/dev.yaml"]},{"id":"e041207161fe42a87d6eb19b57b26fe2ad0a6859","message":"feat(runtime,contracts): 缺口代码 A-1 / A-2——审计 HTTP 面（audit-append.v1 / audit-query.v1 候选）、进程内 audit-ledger 端口、Q04 两模式协议与故障夹具\n\n按决策批次 2026-09-16 C-1（Q04 采纳两模式）落缺失清单 A-1 / A-2；顺序照 Q04：先协议与六类故障夹具，再改 M6，SDK 不动。\n\n- 协议（domain/audit-commit-protocol.ts）：线上形状与 @juhai/client-audit（PR #44）逐字段一致，event_id / digest 只由内容决定；\n 提交模式由动作登记 commit_mode 决定（local-durable / central-prepared），调用方不可降级，result 须引用已回执 prepare；\n AUDIT_FAULT_MATRIX 六类注入点标 owner / m6；夹具评估器新增 append-event / commit / intake 三条规则，夹具 +18 例。\n- A-1：迁移 202609160002_audit_commit_protocol（commit_mode 列 + platform_audit_intake，FORCE RLS + 不可改；头引 DEC-020—023）；\n AuditStore.appendIntake / getEvent（append 抽成事务内 appendInTx，语义不变）；createAuditRuntime（PLATFORM_AUDIT_HTTP_ENABLED=1、\n 限 development/test、只收 JWT、普通角色）；kit 增 PlatformModule.auditRuntime；NestJS POST /api/v1/audit/events、\n GET /api/v1/audit/events/{eventId}、GET /api/v1/audit/events/checkpoint；两份候选 OpenAPI 随仓（pending CHG-004）。\n- A-2：AuditSinkPort 按 PLATFORM_PERSISTENCE_ENABLED 在 audit-shape 与 audit-ledger 间切换（与 permission / fact 同款）；\n event_id 与 client-audit 同 identity 派生，trace 缺失时派生稳定 32 hex。\n- 判责：整批结构错 400、producer ≠ JWT 主体 403、逐条拒绝在 200 的 rejected[]；producer.client_id / app_id 都须等于 azp；\n 查询面只允许记录所属应用读，?access_token= 一律 401。\n\n复核：audit 单测 80 / 集成 19（隔离 PG）/ e2e 12（真实 NestJS + JWT，含端口一致性 sink 画像）；根 pnpm check 全链 exit 0\n（check:fixtures 17 套件 184 例）；报告未回绑，留给 clean 树上的 chore(reports)。未做：A-3（PR #44）、A-5 / A-6、G-1、S-5，\nOwner 侧四类故障义务待首个消费者接入后三方对账；见 docs/缺失模块完善清单-2026-09-16.md §9。\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/e041207161fe42a87d6eb19b57b26fe2ad0a6859","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-16T17:15:30-07:00","added":["contracts/candidates/contracts/audit-append-api.v1.openapi.json","contracts/candidates/contracts/audit-query-api.v1.openapi.json","runtime/apps/api-nestjs/src/platform/http/audit-events.controller.ts","runtime/modules/audit/prisma/migrations/202609160002_audit_commit_protocol/migration.sql","runtime/modules/audit/src/domain/audit-commit-protocol.test.ts","runtime/modules/audit/src/domain/audit-commit-protocol.ts","runtime/modules/audit/src/persistence/http-runtime.test.ts","runtime/modules/audit/src/persistence/http-runtime.ts","runtime/modules/audit/test/negative/append-intake.integration.ts","runtime/modules/kit/src/audit-runtime.ts","runtime/test/e2e/audit-http.test.ts"],"removed":[],"modified":["contracts/candidates/README.md","docs/runbook.md","docs/缺失模块完善清单-2026-09-16.md","docs/能力设计/设计问题收口方案.md","runtime/apps/api-nestjs/src/platform/platform-http.module.ts","runtime/modules/audit/prisma/schema.prisma","runtime/modules/audit/src/domain/fixture-evaluator.ts","runtime/modules/audit/src/domain/index.ts","runtime/modules/audit/src/index.ts","runtime/modules/audit/src/persistence/audit-store.ts","runtime/modules/audit/src/ports/audit-sink.port.test.ts","runtime/modules/audit/src/ports/audit-sink.port.ts","runtime/modules/audit/test/fixtures/audit.fixtures.json","runtime/modules/kit/src/index.ts"]}],"total_commits":0,"head_commit":{"id":"defd9d729060bf91f2fb1f38c165ea6b27e28780","message":"feat(stack): Grafana 业务配置进仓——首页业务面 SLO、默认 zh-Hans 与 Asia/Shanghai、单组织新用户 Viewer、不外联；dev 补 root_url\n\n并行会话产出，按原样收入。compose grafana 服务 GF_* 十余项与 provisioning 同口径，四份仪表板 timezone 留空以继承服务默认，dev overlay 的 GF_SERVER_ROOT_URL 用主机端口；记录 stack/reports/grafana-config.2026-09-16.json（dev / staging 两套 compose config 渲染通过）。\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/defd9d729060bf91f2fb1f38c165ea6b27e28780","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-16T17:16:33-07:00","added":["stack/reports/grafana-config.2026-09-16.json"],"removed":[],"modified":["stack/README.md","stack/compose.yaml","stack/otel/grafana/provisioning/dashboards/json/platform-business-slo.json","stack/otel/grafana/provisioning/dashboards/json/platform-logs-traces.json","stack/otel/grafana/provisioning/dashboards/json/platform-otel-pipeline.json","stack/otel/grafana/provisioning/dashboards/json/platform-runtime.json","stack/overlays/dev.yaml"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":15138,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":42,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-17T08:09:59+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
14
|
0
|
1789604295
|
0
|
1789604198
|
1789604295
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
23996
|
chore(reports): 镜像 21e845a4b34a 构建 / 冒烟 6 项 / dev chore(reports): 镜像 21e845a4b34a 构建 / 冒烟 6 项 / dev 常驻切换记录 @ 21e845a...
|
116
|
5
|
platform.yml
|
69
|
5
|
0
|
refs/heads/main
|
ff384b37ad09b2677bdad44ee2da86ae3a2386bd
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"21e845a4b34a2e5c8f15a9993c541a08e3b01389","after":"ff384b37ad09b2677bdad44ee2da86ae3a2386bd","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/21e845a4b34a2e5c8f15a9993c541a08e3b01389...ff384b37ad09b2677bdad44ee2da86ae3a2386bd","commits":[{"id":"ff384b37ad09b2677bdad44ee2da86ae3a2386bd","message":"chore(reports): 镜像 21e845a4b34a 构建 / 冒烟 6 项 / dev 常驻切换记录 @ 21e845a\n\n- reports/image-digest.json：enterprise-platform/runtime:21e845a4b34a（image id d914de82…，linux/arm64，184 MB，sourceSha 21e845a clean；本机 --load，registryDigest=null）\n- reports/image-smoke.latest.json：六项全过（容器起、/api/health 200、模块视图、scope 模块 /health 200、无凭证决策 401、HEALTHCHECK healthy；单 profile，53002 端口，env 只列变量名）\n- stack/reports/runtime-up.2026-09-16-persistence.json：dev 常驻 runtime 切到该镜像，PLATFORM_PERSISTENCE_ENABLED=1，启动日志 FactExportPort←fact(fact-ledger)、PermissionDecisionPort←permission(permission-ledger)，audit.chain_verify 注册；直连与经 Caddy 探活 200，无凭证决策 401；check:deployed passed；仓外 env 的 PLATFORM_RUNTIME_IMAGE 已改指该镜像\n- 缺失模块完善清单 §8 ③ 标为已做\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/ff384b37ad09b2677bdad44ee2da86ae3a2386bd","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-16T16:34:11-07:00","added":["stack/reports/runtime-up.2026-09-16-persistence.json"],"removed":[],"modified":["docs/缺失模块完善清单-2026-09-16.md","reports/image-digest.json","reports/image-smoke.latest.json"]}],"total_commits":0,"head_commit":{"id":"ff384b37ad09b2677bdad44ee2da86ae3a2386bd","message":"chore(reports): 镜像 21e845a4b34a 构建 / 冒烟 6 项 / dev 常驻切换记录 @ 21e845a\n\n- reports/image-digest.json：enterprise-platform/runtime:21e845a4b34a（image id d914de82…，linux/arm64，184 MB，sourceSha 21e845a clean；本机 --load，registryDigest=null）\n- reports/image-smoke.latest.json：六项全过（容器起、/api/health 200、模块视图、scope 模块 /health 200、无凭证决策 401、HEALTHCHECK healthy；单 profile，53002 端口，env 只列变量名）\n- stack/reports/runtime-up.2026-09-16-persistence.json：dev 常驻 runtime 切到该镜像，PLATFORM_PERSISTENCE_ENABLED=1，启动日志 FactExportPort←fact(fact-ledger)、PermissionDecisionPort←permission(permission-ledger)，audit.chain_verify 注册；直连与经 Caddy 探活 200，无凭证决策 401；check:deployed passed；仓外 env 的 PLATFORM_RUNTIME_IMAGE 已改指该镜像\n- 缺失模块完善清单 §8 ③ 标为已做\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/ff384b37ad09b2677bdad44ee2da86ae3a2386bd","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-16T16:34:11-07:00","added":["stack/reports/runtime-up.2026-09-16-persistence.json"],"removed":[],"modified":["docs/缺失模块完善清单-2026-09-16.md","reports/image-digest.json","reports/image-smoke.latest.json"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":15016,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":42,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-17T07:28:37+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
0
|
1789601842
|
0
|
1789601655
|
1789601842
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
23946
|
fix(cost): record and cap online image generation fix(cost): record and cap online image generation invocations...
|
57
|
5
|
governance.yml
|
227
|
5
|
0
|
refs/heads/main
|
13fe1037486e5d393f986446219e457190ec1863
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"9f02b16c4968771143aee412b6f58291cbbe9dfb","after":"13fe1037486e5d393f986446219e457190ec1863","compare_url":"https://gitea.g-hi.com/luoanwu/image-generation/compare/9f02b16c4968771143aee412b6f58291cbbe9dfb...13fe1037486e5d393f986446219e457190ec1863","commits":[{"id":"13fe1037486e5d393f986446219e457190ec1863","message":"fix(cost): record and cap online image generation invocations\n\nAdversarial acceptance found that generateConnectedImage — the online\nimage path for DASHSCOPE_WAN and OpenAI-compatible connections — called\nthe provider directly via postJson without withRecordedModelCall, the\none place that both writes a ModelInvocation and enforces the per-task\nbudget cap before dispatch. A real Wan 2.7 Pro custom-image generation\n(kind IMAGE / DESIGN_MASTER) therefore produced a genuine paid image\n(providerRequestId, ~28s, real PNG) but left no cost record, and the\nbrand's maxCostMicrosPerTask never applied. Every recorded wan2.7-image\ninvocation in the live DB came from ROLE/STILL (sidecar path); none from\nIMAGE — matching the gap. Video (sidecar) and text (connector) were\nalready wrapped and unaffected.\n\nWrap the online image call in withRecordedModelCall via a new\nconnectorImageCallPlan (modality IMAGE, connector-direct, external), map\nModelCostLimitError to the same COST_LIMIT_BLOCKED channel the text path\nuses, and report usage.images = 1 so the realized cost is ESTIMATED at\nthe catalog price, matching ROLE/STILL. Without an invocation context the\nwrapper passes through unchanged, so bare unit calls are unaffected.\n\nRegression in model-connector.client.test.ts: with a scope the online\nWan call records one IMAGE invocation (RUNNING -\u003e SUCCEEDED, 500000\nmicros, ESTIMATED); a per-task cap below the catalog price blocks before\ndispatch (COST_LIMIT_BLOCKED), the request never leaves the host, and one\nBLOCKED row is written.\n\nEvidence: acceptance-artifacts/adversarial-acceptance-2026-09-13/.\n\nCo-Authored-By: Claude Opus 4.8 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/image-generation/commit/13fe1037486e5d393f986446219e457190ec1863","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-14T10:01:08-07:00","added":[],"removed":[],"modified":["apps/api-nestjs/src/material-factory/model-connector.client.ts","apps/api-nestjs/test/model-connector.client.test.ts","reports/admin-brands.desktop.png","reports/admin-brands.mobile.png","reports/admin-desktop.png","reports/admin-mobile.png","reports/content-detail.check-report-desktop.png","reports/content-detail.description-candidates-desktop.png","reports/content-detail.output-desktop.png","reports/content-detail.plans-desktop.png","reports/contract-consumers.latest.json","reports/creative-history-hidden.desktop.png","reports/creative-history-restore.mobile.png","reports/creative-quality.desktop.png","reports/dependency-audit.latest.json","reports/governance-docs.latest.json","reports/governance.latest.json","reports/image-creation-1135.png","reports/image-creation-1440.png","reports/image-edit-1135.png","reports/image-edit-1440.png","reports/image-edit-390.png","reports/image-edit-768.png","reports/image-edit-result.png","reports/inference-acceptance.latest.json","reports/material-review-concurrency-guard.latest.json","reports/migrations.latest.json","reports/model-api-key-saved.png","reports/model-credential-error.desktop.png","reports/module-boundary.latest.json","reports/naming.latest.json","reports/order-concurrency-guard.latest.json","reports/prd-retry.mobile.png","reports/prd-review.desktop.png","reports/production-acceptance.latest.json","reports/production-delivery-released.desktop.png","reports/production-delivery-revoked.mobile.png","reports/production-pagination.desktop.png","reports/production-pagination.mobile.png","reports/production-review-preview.desktop.png","reports/production-security.latest.json","reports/production-single-tenant-create.desktop.png","reports/production-single-tenant-separation.desktop.png","reports/public-file-acceptance.latest.json","reports/public-file-integration.latest.json","reports/render-job-drainability.latest.json","reports/runtime-acceptance.latest.json","reports/runtime-governance.latest.json","reports/schema-sync.latest.json","reports/script-acceptance.latest.json","reports/script-generation-queue.png","reports/shijie-acceptance.latest.json","reports/sidecar-tests.latest.json","reports/storyboard-asset-dialog.desktop.png","reports/storyboard-director-guard.latest.json","reports/storyboard-frame-dialog.desktop.first.png","reports/storyboard-frame-dialog.desktop.last.png","reports/storyboard-frame-dialog.mobile.last.png","reports/storyboard-frame-dialog.mobile.saved.png","reports/template-making.1135.png","reports/template-making.1280.png","reports/template-making.1440.png","reports/template-saved-master.APPLICATION.png","reports/template-saved-master.GENERAL.png","reports/template-saved-master.SCENE.png","reports/template-types.desktop.png","reports/template-types.mobile.png","reports/toolchain.latest.json","reports/ui-acceptance.desktop.png","reports/ui-acceptance.draft-import.png","reports/ui-acceptance.latest.json","reports/ui-acceptance.mobile.png","reports/ui-acceptance.production.png","reports/ux-edit.desktop.png","reports/ux-home.desktop.png","reports/ux-home.mobile.png","reports/ux-intake.desktop.png","reports/validation-source.latest.json","reports/video-batch-paused.mobile.png","reports/video-regenerate-2026-09-08/desktop.png","reports/video-regenerate-2026-09-08/mobile.png"]}],"total_commits":0,"head_commit":{"id":"13fe1037486e5d393f986446219e457190ec1863","message":"fix(cost): record and cap online image generation invocations\n\nAdversarial acceptance found that generateConnectedImage — the online\nimage path for DASHSCOPE_WAN and OpenAI-compatible connections — called\nthe provider directly via postJson without withRecordedModelCall, the\none place that both writes a ModelInvocation and enforces the per-task\nbudget cap before dispatch. A real Wan 2.7 Pro custom-image generation\n(kind IMAGE / DESIGN_MASTER) therefore produced a genuine paid image\n(providerRequestId, ~28s, real PNG) but left no cost record, and the\nbrand's maxCostMicrosPerTask never applied. Every recorded wan2.7-image\ninvocation in the live DB came from ROLE/STILL (sidecar path); none from\nIMAGE — matching the gap. Video (sidecar) and text (connector) were\nalready wrapped and unaffected.\n\nWrap the online image call in withRecordedModelCall via a new\nconnectorImageCallPlan (modality IMAGE, connector-direct, external), map\nModelCostLimitError to the same COST_LIMIT_BLOCKED channel the text path\nuses, and report usage.images = 1 so the realized cost is ESTIMATED at\nthe catalog price, matching ROLE/STILL. Without an invocation context the\nwrapper passes through unchanged, so bare unit calls are unaffected.\n\nRegression in model-connector.client.test.ts: with a scope the online\nWan call records one IMAGE invocation (RUNNING -\u003e SUCCEEDED, 500000\nmicros, ESTIMATED); a per-task cap below the catalog price blocks before\ndispatch (COST_LIMIT_BLOCKED), the request never leaves the host, and one\nBLOCKED row is written.\n\nEvidence: acceptance-artifacts/adversarial-acceptance-2026-09-13/.\n\nCo-Authored-By: Claude Opus 4.8 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/image-generation/commit/13fe1037486e5d393f986446219e457190ec1863","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-14T10:01:08-07:00","added":[],"removed":[],"modified":["apps/api-nestjs/src/material-factory/model-connector.client.ts","apps/api-nestjs/test/model-connector.client.test.ts","reports/admin-brands.desktop.png","reports/admin-brands.mobile.png","reports/admin-desktop.png","reports/admin-mobile.png","reports/content-detail.check-report-desktop.png","reports/content-detail.description-candidates-desktop.png","reports/content-detail.output-desktop.png","reports/content-detail.plans-desktop.png","reports/contract-consumers.latest.json","reports/creative-history-hidden.desktop.png","reports/creative-history-restore.mobile.png","reports/creative-quality.desktop.png","reports/dependency-audit.latest.json","reports/governance-docs.latest.json","reports/governance.latest.json","reports/image-creation-1135.png","reports/image-creation-1440.png","reports/image-edit-1135.png","reports/image-edit-1440.png","reports/image-edit-390.png","reports/image-edit-768.png","reports/image-edit-result.png","reports/inference-acceptance.latest.json","reports/material-review-concurrency-guard.latest.json","reports/migrations.latest.json","reports/model-api-key-saved.png","reports/model-credential-error.desktop.png","reports/module-boundary.latest.json","reports/naming.latest.json","reports/order-concurrency-guard.latest.json","reports/prd-retry.mobile.png","reports/prd-review.desktop.png","reports/production-acceptance.latest.json","reports/production-delivery-released.desktop.png","reports/production-delivery-revoked.mobile.png","reports/production-pagination.desktop.png","reports/production-pagination.mobile.png","reports/production-review-preview.desktop.png","reports/production-security.latest.json","reports/production-single-tenant-create.desktop.png","reports/production-single-tenant-separation.desktop.png","reports/public-file-acceptance.latest.json","reports/public-file-integration.latest.json","reports/render-job-drainability.latest.json","reports/runtime-acceptance.latest.json","reports/runtime-governance.latest.json","reports/schema-sync.latest.json","reports/script-acceptance.latest.json","reports/script-generation-queue.png","reports/shijie-acceptance.latest.json","reports/sidecar-tests.latest.json","reports/storyboard-asset-dialog.desktop.png","reports/storyboard-director-guard.latest.json","reports/storyboard-frame-dialog.desktop.first.png","reports/storyboard-frame-dialog.desktop.last.png","reports/storyboard-frame-dialog.mobile.last.png","reports/storyboard-frame-dialog.mobile.saved.png","reports/template-making.1135.png","reports/template-making.1280.png","reports/template-making.1440.png","reports/template-saved-master.APPLICATION.png","reports/template-saved-master.GENERAL.png","reports/template-saved-master.SCENE.png","reports/template-types.desktop.png","reports/template-types.mobile.png","reports/toolchain.latest.json","reports/ui-acceptance.desktop.png","reports/ui-acceptance.draft-import.png","reports/ui-acceptance.latest.json","reports/ui-acceptance.mobile.png","reports/ui-acceptance.production.png","reports/ux-edit.desktop.png","reports/ux-home.desktop.png","reports/ux-home.mobile.png","reports/ux-intake.desktop.png","reports/validation-source.latest.json","reports/video-batch-paused.mobile.png","reports/video-regenerate-2026-09-08/desktop.png","reports/video-regenerate-2026-09-08/mobile.png"]},"repository":{"id":57,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"image-generation","full_name":"luoanwu/image-generation","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":969533,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/image-generation/languages","html_url":"https://gitea.g-hi.com/luoanwu/image-generation","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/image-generation","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/image-generation.git","clone_url":"https://gitea.g-hi.com/luoanwu/image-generation.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":15,"open_issues_count":0,"open_pr_counter":1,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-07-06T17:04:22+08:00","updated_at":"2026-09-14T21:54:13+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
4
|
1789405395
|
1789405669
|
0
|
1789405394
|
1789405669
|
group: governance-${{ github.workflow }}-${{ githu group: governance-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: "true"
...
|
governance-governance.yml-refs/heads/main
|
1
|
Edit
Delete
|
|
23943
|
docs(releases): record the drainability1 deploymen docs(releases): record the drainability1 deployment...
|
57
|
5
|
governance.yml
|
224
|
5
|
0
|
refs/heads/main
|
9b6c67138ce98d75ab96f8879b73cd3090825f1f
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"03af8485a034617648b6ab8e8591683d7eab86ce","after":"9b6c67138ce98d75ab96f8879b73cd3090825f1f","compare_url":"https://gitea.g-hi.com/luoanwu/image-generation/compare/03af8485a034617648b6ab8e8591683d7eab86ce...9b6c67138ce98d75ab96f8879b73cd3090825f1f","commits":[{"id":"9b6c67138ce98d75ab96f8879b73cd3090825f1f","message":"docs(releases): record the drainability1 deployment\n\nrelease-20260913-drainability1 is live on 03af8485 (fingerprint\nb9a349f9…), so the service and main now share one fingerprint. Five\ncomponents healthy with restarts=0, 13 backups, no schema change, queue\nhealthy before and after, 11 boundary probes as expected. Verified after\nthe switch that the retired instances/:id/render-jobs route is absent\nfrom the running api image and that the database holds no QUEUED or\nRUNNING RenderJob.\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/image-generation/commit/9b6c67138ce98d75ab96f8879b73cd3090825f1f","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-13T22:37:48-07:00","added":["docs/releases/2026-09-13-drainability1.md"],"removed":[],"modified":["docs/releases/current.md"]}],"total_commits":0,"head_commit":{"id":"9b6c67138ce98d75ab96f8879b73cd3090825f1f","message":"docs(releases): record the drainability1 deployment\n\nrelease-20260913-drainability1 is live on 03af8485 (fingerprint\nb9a349f9…), so the service and main now share one fingerprint. Five\ncomponents healthy with restarts=0, 13 backups, no schema change, queue\nhealthy before and after, 11 boundary probes as expected. Verified after\nthe switch that the retired instances/:id/render-jobs route is absent\nfrom the running api image and that the database holds no QUEUED or\nRUNNING RenderJob.\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/image-generation/commit/9b6c67138ce98d75ab96f8879b73cd3090825f1f","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-13T22:37:48-07:00","added":["docs/releases/2026-09-13-drainability1.md"],"removed":[],"modified":["docs/releases/current.md"]},"repository":{"id":57,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"image-generation","full_name":"luoanwu/image-generation","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":969486,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/image-generation/languages","html_url":"https://gitea.g-hi.com/luoanwu/image-generation","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/image-generation","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/image-generation.git","clone_url":"https://gitea.g-hi.com/luoanwu/image-generation.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":15,"open_issues_count":0,"open_pr_counter":1,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-07-06T17:04:22+08:00","updated_at":"2026-09-14T13:27:49+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
4
|
1789364329
|
1789364728
|
0
|
1789364329
|
1789364728
|
group: governance-${{ github.workflow }}-${{ githu group: governance-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: "true"
...
|
governance-governance.yml-refs/heads/main
|
1
|
Edit
Delete
|
|
23897
|
fix(delivery): distinguish generated artifacts fro fix(delivery): distinguish generated artifacts from source changes...
|
116
|
5
|
platform.yml
|
23
|
5
|
0
|
refs/heads/main
|
511fbef316125fa6c9ee84b22828c83a4e5f5ff1
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"c9375013381eb91b32f31229b06879b94813b973","after":"511fbef316125fa6c9ee84b22828c83a4e5f5ff1","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/c9375013381eb91b32f31229b06879b94813b973...511fbef316125fa6c9ee84b22828c83a4e5f5ff1","commits":[{"id":"511fbef316125fa6c9ee84b22828c83a4e5f5ff1","message":"fix(delivery): distinguish generated artifacts from source changes\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/511fbef316125fa6c9ee84b22828c83a4e5f5ff1","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-12T03:51:27-07:00","added":[],"removed":[],"modified":["docs/交付证据收口-2026-09-12.md","governance/lib/provenance.mjs","governance/test/provenance.test.mjs","governance/test/release-manifest.test.mjs"]}],"total_commits":0,"head_commit":{"id":"511fbef316125fa6c9ee84b22828c83a4e5f5ff1","message":"fix(delivery): distinguish generated artifacts from source changes\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/511fbef316125fa6c9ee84b22828c83a4e5f5ff1","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-12T03:51:27-07:00","added":[],"removed":[],"modified":["docs/交付证据收口-2026-09-12.md","governance/lib/provenance.mjs","governance/test/provenance.test.mjs","governance/test/release-manifest.test.mjs"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":3675,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":4,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-12T18:46:02+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
22
|
1789210293
|
1789210329
|
0
|
1789210292
|
1789210331
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
23893
|
Merge github/main (PR #5 merge commit 4fb6f15) int Merge github/main (PR #5 merge commit 4fb6f15) into main...
|
116
|
5
|
platform.yml
|
19
|
5
|
0
|
refs/heads/main
|
bb38f4cd0f55cd2cb76723ca12f26c19414a1817
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"f0956259a231da48063f98a22ad35b52a3699916","after":"bb38f4cd0f55cd2cb76723ca12f26c19414a1817","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/f0956259a231da48063f98a22ad35b52a3699916...bb38f4cd0f55cd2cb76723ca12f26c19414a1817","commits":[{"id":"bb38f4cd0f55cd2cb76723ca12f26c19414a1817","message":"Merge github/main (PR #5 merge commit 4fb6f15) into main\n\nGitHub main 受保护只能经 PR 合入，本地 main 在 PR #5 合并期间又前进了 adce2fa / f095625；本合并提交把两侧历史接回一条线，树与 f095625 完全相同，不改任何文件。\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/bb38f4cd0f55cd2cb76723ca12f26c19414a1817","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-12T03:33:45-07:00","added":[],"removed":[],"modified":[]},{"id":"4fb6f15be157b9bb8254575473695cec6fc03ca2","message":"Merge pull request #5 from laoluojuhai/sync/main-20260912-8a95879\n\nsync(main): 推平本地 main → GitHub（候选回写 9276c8d + 六模块失败关闭夹具 8a95879）","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/4fb6f15be157b9bb8254575473695cec6fc03ca2","author":{"name":"laoluojuhai","email":"158980461+laoluojuhai@users.noreply.github.com","username":""},"committer":{"name":"GitHub","email":"noreply@github.com","username":""},"verification":null,"timestamp":"2026-09-12T03:32:25-07:00","added":["governance/fixtures/module-ai-gateway.suite.json","governance/fixtures/module-audit.suite.json","governance/fixtures/module-credential.suite.json","governance/fixtures/module-fact.suite.json","governance/fixtures/module-permission.suite.json","governance/fixtures/module-scope.suite.json","governance/test/platform-fixtures.test.mjs","runtime/modules/ai-gateway/src/domain/fixture-evaluator.ts","runtime/modules/ai-gateway/test/fixtures/ai-gateway.fixtures.json","runtime/modules/ai-gateway/test/negative/ai-gateway.fixtures.test.ts","runtime/modules/audit/src/domain/fixture-evaluator.ts","runtime/modules/audit/test/fixtures/audit.fixtures.json","runtime/modules/audit/test/negative/audit.fixtures.test.ts","runtime/modules/credential/src/domain/fixture-evaluator.ts","runtime/modules/credential/test/fixtures/credential.fixtures.json","runtime/modules/credential/test/negative/credential.fixtures.test.ts","runtime/modules/fact/src/domain/fixture-evaluator.ts","runtime/modules/fact/test/fixtures/fact.fixtures.json","runtime/modules/fact/test/negative/fact.fixtures.test.ts","runtime/modules/permission/src/domain/fixture-evaluator.ts","runtime/modules/permission/test/fixtures/permission.fixtures.json","runtime/modules/permission/test/negative/permission.fixtures.test.ts","runtime/modules/scope/src/domain/fixture-evaluator.ts","runtime/modules/scope/test/fixtures/scope.fixtures.json","runtime/modules/scope/test/negative/scope.fixtures.test.ts"],"removed":[],"modified":[".github/workflows/platform.yml","contracts/candidates/README.md","contracts/candidates/facts/AiActionGoverned.v1.json","contracts/candidates/facts/AuditAppended.v1.json","contracts/candidates/facts/FactPersisted.v1.json","contracts/candidates/facts/GrantChanged.v1.json","contracts/candidates/facts/OrganizationUnitMoved.v1.json","contracts/candidates/facts/PermissionInvalidated.v1.json","contracts/candidates/facts/ScopeSnapshotPublished.v1.json","contracts/candidates/facts/ServiceCredentialIssued.v1.json","contracts/candidates/facts/ServiceCredentialRevoked.v1.json","contracts/candidates/facts/SessionRevoked.v1.json","contracts/candidates/facts/StoreOrgAssignmentChanged.v1.json","governance/check-fixtures.mjs","package.json","runtime/modules/ai-gateway/src/domain/index.ts","runtime/modules/audit/src/domain/index.ts","runtime/modules/credential/src/domain/index.ts","runtime/modules/fact/src/domain/index.ts","runtime/modules/permission/src/domain/index.ts","runtime/modules/scope/src/domain/index.ts"]}],"total_commits":0,"head_commit":{"id":"bb38f4cd0f55cd2cb76723ca12f26c19414a1817","message":"Merge github/main (PR #5 merge commit 4fb6f15) into main\n\nGitHub main 受保护只能经 PR 合入，本地 main 在 PR #5 合并期间又前进了 adce2fa / f095625；本合并提交把两侧历史接回一条线，树与 f095625 完全相同，不改任何文件。\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/bb38f4cd0f55cd2cb76723ca12f26c19414a1817","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-12T03:33:45-07:00","added":[],"removed":[],"modified":[]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":3499,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":4,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-12T18:32:36+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
0
|
1789209470
|
0
|
1789209229
|
1789209470
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
23892
|
feat(image): Dockerfile 改 pnpm fetch 分层（网络层只随 lock feat(image): Dockerfile 改 pnpm fetch 分层（网络层只随 lockfile 失效）+ CI image job（构建 / SBOM / 有密钥才签；D-1 / D-2）...
|
116
|
5
|
platform.yml
|
18
|
5
|
0
|
refs/heads/main
|
f0956259a231da48063f98a22ad35b52a3699916
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"8a95879f7501b2874d73cf1f36f07f7673695db3","after":"f0956259a231da48063f98a22ad35b52a3699916","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/8a95879f7501b2874d73cf1f36f07f7673695db3...f0956259a231da48063f98a22ad35b52a3699916","commits":[{"id":"f0956259a231da48063f98a22ad35b52a3699916","message":"feat(image): Dockerfile 改 pnpm fetch 分层（网络层只随 lockfile 失效）+ CI image job（构建 / SBOM / 有密钥才签；D-1 / D-2）\n\n- runtime/Dockerfile：先拷 pnpm-lock.yaml / pnpm-workspace.yaml / .npmrc 做 pnpm fetch，再 COPY 源码后 --prefer-offline 安装与 deploy；secret 挂载不变\n- .github/workflows/platform.yml：新增 image job（needs static；private-npm 认证后在 RUNNER_TEMP 写已解析 npmrc 只作 --secret 源；build-image --context head；syft v1.20.0 → SBOM；cosign-installer v2.4.1，COSIGN_PRIVATE_KEY 为空或镜像未推送时明确跳过；产物 platform-image-\u003ctag\u003e artifact，不推 registry）；governance 测试 106/106\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/f0956259a231da48063f98a22ad35b52a3699916","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-12T03:30:52-07:00","added":[],"removed":[],"modified":[".github/workflows/platform.yml","runtime/Dockerfile"]},{"id":"adce2faa641ce031f52acbd29e231bb241c13186","message":"feat(image): D-1 runtime 镜像 + D-2 SBOM / 签名接线——Dockerfile、build-image / sbom / sign-image / smoke-image 脚本、compose 候选块（开发计划 §3A D-1 / D-2；设计 §12 / §14）\n\n- runtime/Dockerfile（多阶段）：node:20-bookworm-slim 按 digest 锁定；--frozen-lockfile；私有 registry token 只经 BuildKit secret（--secret id=npmrc）进入安装层；prisma generate；pnpm --filter \"api-nestjs...\" build；pnpm deploy --prod 剪枝到 api-nestjs + 七模块 + kit + @repo/contracts，显式补拷 dist、去掉 src / test；运行阶段非 root、HEALTHCHECK 打 /api/health；入口 apps/api-nestjs/dist/src/main.js，profile 装载器向上找到 /srv/runtime/modules.json\n- governance/build-image.mjs：默认 --context head = git archive HEAD:runtime（本机 WIP 不进镜像），写 reports/image-digest.json（image id + digestKind 说明、sourceSha、worktreeDirty、dockerfileTracked、平台、大小、基础镜像）\n- governance/sbom.mjs（syft / docker sbom → reports/sbom.spdx.json + sbom.latest.json；无工具退出 3）、governance/sign-image.mjs（cosign + COSIGN_KEY 只签 registry 引用；未推送 / 无密钥 / 无 cosign 明确跳过）、governance/smoke-image.mjs（起容器 → /api/health 200 → 模块视图 → 首模块 /health → 决策端点无凭证 401 → HEALTHCHECK healthy → reports/image-smoke.latest.json）\n- 根脚本 image:build / image:smoke / image:sbom / image:sign；compose 增 runtime 候选注释块（含生产守卫所需 env：ALERT_CHANNEL、AUTH_MODE=jwt + 密钥源、APP_ID、TENANT_RLS_MODE=enforce + DATABASE_RUNTIME_URL）；runbook §2 容器方式 + env 表；stack / governance README 登记\n- 证据（试建 enterprise-platform/runtime:trial，linux/arm64，142 MB）：冒烟六项全过——scope profile 装载 fail-closed、/api/health database / redis up、模块健康 200、无凭证 401、Docker HEALTHCHECK healthy；四份 compose config 通过；governance 测试 106/106。正式 digest 报告在本提交之后按 HEAD 重建\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/adce2faa641ce031f52acbd29e231bb241c13186","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-12T03:29:53-07:00","added":["governance/build-image.mjs","governance/sbom.mjs","governance/sign-image.mjs","governance/smoke-image.mjs","runtime/.dockerignore","runtime/Dockerfile"],"removed":[],"modified":["docs/runbook.md","governance/README.md","package.json","stack/README.md","stack/compose.yaml"]}],"total_commits":0,"head_commit":{"id":"f0956259a231da48063f98a22ad35b52a3699916","message":"feat(image): Dockerfile 改 pnpm fetch 分层（网络层只随 lockfile 失效）+ CI image job（构建 / SBOM / 有密钥才签；D-1 / D-2）\n\n- runtime/Dockerfile：先拷 pnpm-lock.yaml / pnpm-workspace.yaml / .npmrc 做 pnpm fetch，再 COPY 源码后 --prefer-offline 安装与 deploy；secret 挂载不变\n- .github/workflows/platform.yml：新增 image job（needs static；private-npm 认证后在 RUNNER_TEMP 写已解析 npmrc 只作 --secret 源；build-image --context head；syft v1.20.0 → SBOM；cosign-installer v2.4.1，COSIGN_PRIVATE_KEY 为空或镜像未推送时明确跳过；产物 platform-image-\u003ctag\u003e artifact，不推 registry）；governance 测试 106/106\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/f0956259a231da48063f98a22ad35b52a3699916","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-12T03:30:52-07:00","added":[],"removed":[],"modified":[".github/workflows/platform.yml","runtime/Dockerfile"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":3453,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":4,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-12T18:21:10+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
10
|
0
|
1789209229
|
0
|
1789209155
|
1789209229
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
23875
|
docs(platform): 当前状态 runtime / 七模块两行改引当前机器证据（runti docs(platform): 当前状态 runtime / 七模块两行改引当前机器证据（runtime 346 / UI 5 @ 99cce60；静态 @ 4660ad5，报告 bc52a55）...
|
116
|
5
|
platform.yml
|
10
|
5
|
0
|
refs/heads/main
|
be7334ad46324e54bebe2397365086896b6ad42b
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"99cce601d0afd37f556bc74e98d770ec1ed40271","after":"be7334ad46324e54bebe2397365086896b6ad42b","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/99cce601d0afd37f556bc74e98d770ec1ed40271...be7334ad46324e54bebe2397365086896b6ad42b","commits":[{"id":"be7334ad46324e54bebe2397365086896b6ad42b","message":"docs(platform): 当前状态 runtime / 七模块两行改引当前机器证据（runtime 346 / UI 5 @ 99cce60；静态 @ 4660ad5，报告 bc52a55）\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/be7334ad46324e54bebe2397365086896b6ad42b","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-12T00:50:50-07:00","added":[],"removed":[],"modified":["CLAUDE.md"]},{"id":"bc52a554341f1a997ef05b1826f9424b73d16cff","message":"chore(reports): refresh clean static evidence @ 4660ad5（M3-4 / S-5 后：runtime 346 / UI 5 绑定 99cce60；地板 346 / 35 / 184）\n\n根 pnpm check（pins / modules / module-imports 201 源文件 0 违规 / catalog / catalog:drift / fixtures 33 / facts / migration-decs / caddy /\ngovernance 测试 / contracts check:local / runtime 静态 14 项 + lint + typecheck）与 release:manifest（仍 partial 缺 5 项）\n在 clean `4660ad5` 上重跑，24 份 latest 报告 provenance 同 SHA、worktreeDirty=false。\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/bc52a554341f1a997ef05b1826f9424b73d16cff","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-12T00:50:50-07:00","added":[],"removed":[],"modified":["reports/caddy.latest.json","reports/catalog-drift.latest.json","reports/catalog-reconciliation.latest.json","reports/facts.latest.json","reports/fixtures.latest.json","reports/migration-decs.latest.json","reports/module-imports.latest.json","reports/release-manifest.latest.json","runtime/reports/agent-adapters.latest.json","runtime/reports/conformance-matrix.latest.json","runtime/reports/contract-consumers.latest.json","runtime/reports/docs-truth.latest.json","runtime/reports/dual-backend-parity.latest.json","runtime/reports/fork-readiness.latest.json","runtime/reports/governance-docs.latest.json","runtime/reports/governance-rules.latest.json","runtime/reports/governance-status.latest.json","runtime/reports/governance.latest.json","runtime/reports/migrations.latest.json","runtime/reports/naming.latest.json","runtime/reports/runtime-governance.latest.json","runtime/reports/schema-sync.latest.json","runtime/reports/statemachine-write-guard.latest.json","runtime/reports/validation-source.latest.json"]},{"id":"4660ad5e771be4500d4d90b7ed6636f37e6c3ece","message":"docs(runtime): record clean commit acceptance @ 99cce60（M3-4 / S-5 单测修正后重跑：runtime 346 / UI 5）\n\n- 上一份验收记录（aa50624）绑定 98baa5a；其后 a95834d 修正单测（去掉静态 import 运行时模块），按纪律在 clean 树重跑：\n runtime 346 tests / 0 failures、UI 5/5、双后端差分 0 差异；DB `enterprise_platform_acceptance_m34b_20260912`。\n- 报告 provenance.gitSha = 99cce60（并行会话在验收中途合并 fc37805 → 99cce60，只改 governance / stack，未触及 runtime/；\n 差分报告仍绑定 a95834d）；证据三行改引 99cce60 并注明与 a95834d 的关系。地板不变（346 / 5 / 35 / 184）。\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/4660ad5e771be4500d4d90b7ed6636f37e6c3ece","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-12T00:49:04-07:00","added":[],"removed":[],"modified":["runtime/CLAUDE.md","runtime/reports/baseline.json","runtime/reports/conformance-differential.latest.json","runtime/reports/runtime-acceptance.latest.json","runtime/reports/ui-acceptance.latest.json"]}],"total_commits":0,"head_commit":{"id":"be7334ad46324e54bebe2397365086896b6ad42b","message":"docs(platform): 当前状态 runtime / 七模块两行改引当前机器证据（runtime 346 / UI 5 @ 99cce60；静态 @ 4660ad5，报告 bc52a55）\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/be7334ad46324e54bebe2397365086896b6ad42b","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-12T00:50:50-07:00","added":[],"removed":[],"modified":["CLAUDE.md"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":2505,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":1,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-12T15:48:02+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
8
|
0
|
1789199753
|
0
|
1789199626
|
1789199753
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|
|
23874
|
merge: integrate MS-1 release and backup workflow
|
116
|
5
|
platform.yml
|
9
|
5
|
0
|
refs/heads/main
|
99cce601d0afd37f556bc74e98d770ec1ed40271
|
0
|
0
|
0
|
push
|
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"6765c0bf1b8aab56356524c2f8e7512d7bc2eb33","after":"99cce601d0afd37f556bc74e98d770ec1ed40271","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/6765c0bf1b8aab56356524c2f8e7512d7bc2eb33...99cce601d0afd37f556bc74e98d770ec1ed40271","commits":[{"id":"99cce601d0afd37f556bc74e98d770ec1ed40271","message":"merge: integrate MS-1 release and backup workflow\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/99cce601d0afd37f556bc74e98d770ec1ed40271","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-12T00:47:15-07:00","added":[".github/workflows/publish-packages.yml","docs/MS-1发布与接入操作说明.md","governance/prepare-package-release.mjs","governance/publish-rc.mjs","governance/test/package-release.test.mjs","governance/test/pg-dump.test.mjs","governance/test/publish-rc.test.mjs"],"removed":[],"modified":["contracts/package.json","governance/package.json","governance/templates/consumer-governance.yml","governance/test/restore-drill.test.mjs","stack/backup/pg-dump.sh","stack/backup/restore-drill.sh"]},{"id":"fc3780587fee2c864cf181d3cebfd22e88c0de40","message":"feat(ms1): gate RC publication and enable verified backup integration\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/fc3780587fee2c864cf181d3cebfd22e88c0de40","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-12T00:46:38-07:00","added":[".github/workflows/publish-packages.yml","docs/MS-1发布与接入操作说明.md","governance/prepare-package-release.mjs","governance/publish-rc.mjs","governance/test/package-release.test.mjs","governance/test/pg-dump.test.mjs","governance/test/publish-rc.test.mjs"],"removed":[],"modified":["contracts/package.json","governance/package.json","governance/templates/consumer-governance.yml","governance/test/restore-drill.test.mjs","stack/backup/pg-dump.sh","stack/backup/restore-drill.sh"]},{"id":"a95834dc7a5d064c8e66685c41fbdf4ac4ef839a","message":"fix(runtime): Decision API 单测不再静态 import 运行时模块（check:module-imports）\n\napps / packages 只经 PLATFORM_PROFILES 动态装载模块（仓纪律 4）；纯函数单测改用 POLICY_UNAVAILABLE 形状端口替身，\n真实 permission-shape 的 200 deny policy-unavailable 由 platform.http.acceptance.test.ts 在装载态验收。\n根 `pnpm check` 在 aa50624 上曾因该 import 在 check:module-imports 报 1 处违规（未入报告提交）。\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/a95834dc7a5d064c8e66685c41fbdf4ac4ef839a","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-12T00:45:18-07:00","added":[],"removed":[],"modified":["runtime/apps/api-nestjs/test/platform.decision-api.test.ts"]},{"id":"aa50624369b9e9a6a3d50d0d4909e77f621aab31","message":"docs(runtime): record clean commit acceptance @ 98baa5a（M3-4 / S-5 后：runtime 346 / UI 5；地板 346 / 35 / 184）\n\n- 证据新鲜度三行改绑 clean `98baa5a`：真实 DB check:runtime 346 tests / 0 failures（api-nestjs 18 文件 105 例，\n 新增 platform.http.acceptance 3 例 + platform.decision-api 4 例；contracts 增 platform-http 3 例）、UI 5/5、双后端差分 0 差异；\n 共享底座 :55470 `enterprise_platform_acceptance_m34_20260912` + :56379/7。\n- reports/baseline.json 地板收紧：testsPassed 336 → 346，ownTests 32 → 35，ownTestCases 174 → 184。\n- 三份验收报告 provenance.gitSha = 98baa5a、worktreeDirty=false。\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/aa50624369b9e9a6a3d50d0d4909e77f621aab31","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-12T00:43:25-07:00","added":[],"removed":[],"modified":["runtime/CLAUDE.md","runtime/reports/baseline.json","runtime/reports/conformance-differential.latest.json","runtime/reports/runtime-acceptance.latest.json","runtime/reports/ui-acceptance.latest.json"]},{"id":"98baa5a89acdae9886655e8eaa8cae0589e0df20","message":"feat(runtime): Decision API 骨架 + 模块运维视图（开发计划 §3A M3-4 / S-5）\n\n- packages/contracts/src/platform-http.ts：Catalog 已登记契约 permission-decision-api.v1 的 Zod 镜像\n （请求 / 响应 schema 与 contracts/schemas/*.v1.schema.json 逐字段同形；reason_code 枚举与 Catalog 一致，\n 3 例单测用 contracts/examples 正例 + 逐项破坏反例）；只登记已登记契约，其余 11 个 HTTP 契约不建 schema。\n- apps/api-nestjs/src/platform/http/permission-decision.{adapter,controller}.ts：POST /api/v1/decisions，\n 鉴权走全局 Guard（401），入参经 ZodValidationPipe + @repo/contracts（400，check:validation 口径），\n 纯函数 evaluateDecisionApi：token 租户 ≠ actor / scope 租户 → tenant-mismatch 不打端口；端口 reasonCode →\n 契约 reason_code（POLICY_UNAVAILABLE / NOT_CONFIGURED → policy-unavailable，NO_TENANT_CONTEXT / INVALID_REQUEST →\n context-invalid，UNKNOWN_ACTION → unknown-action，未知码一律 policy-denied 失败关闭）；4 例纯函数单测。\n- apps/api-nestjs/src/platform/http/platform-modules.controller.ts（@Public）：GET /api/platform/modules\n （装配模式 + 四端口当前提供方名 + 已装载模块）与 GET /api/platform/modules/:id/health\n （{module,state,status,checks}，未装载 404）；module-kit PlatformModule 增 health?()（S-5 过渡方案：\n 内核 HealthResponse.checks 写死 database / redis，扩展走框架变更请求 DOC-5）。\n- platform-http.module.ts 进 KERNEL_IMPORTS；HTTP 适配器落装配点而非模块 src/http/（模块包保持框架无关，\n 偏差登记到开发计划 §6）。\n- test/platform.http.acceptance.test.ts：真实 DB 验收 3 例（permission 装载 200 deny policy-unavailable /\n tenant-mismatch / 400 / 401；未装载走内核基束；模块清单 + health + 404）。\n\n静态门禁（runtime pnpm check 14 项 + lint + typecheck）在本提交前的脏树上通过；真实 DB 验收随后绑定本提交。\n\nCo-Authored-By: Claude Fable 5.1 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/98baa5a89acdae9886655e8eaa8cae0589e0df20","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-12T00:39:59-07:00","added":["runtime/apps/api-nestjs/src/platform/http/permission-decision.adapter.ts","runtime/apps/api-nestjs/src/platform/http/permission-decision.controller.ts","runtime/apps/api-nestjs/src/platform/http/platform-modules.controller.ts","runtime/apps/api-nestjs/src/platform/platform-http.module.ts","runtime/apps/api-nestjs/test/platform.decision-api.test.ts","runtime/apps/api-nestjs/test/platform.http.acceptance.test.ts","runtime/packages/contracts/src/platform-http.test.ts","runtime/packages/contracts/src/platform-http.ts"],"removed":[],"modified":["runtime/apps/api-nestjs/src/app.module.ts","runtime/modules/kit/src/index.ts","runtime/packages/contracts/src/index.ts"]}],"total_commits":0,"head_commit":{"id":"99cce601d0afd37f556bc74e98d770ec1ed40271","message":"merge: integrate MS-1 release and backup workflow\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/99cce601d0afd37f556bc74e98d770ec1ed40271","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-12T00:47:15-07:00","added":[".github/workflows/publish-packages.yml","docs/MS-1发布与接入操作说明.md","governance/prepare-package-release.mjs","governance/publish-rc.mjs","governance/test/package-release.test.mjs","governance/test/pg-dump.test.mjs","governance/test/publish-rc.test.mjs"],"removed":[],"modified":["contracts/package.json","governance/package.json","governance/templates/consumer-governance.yml","governance/test/restore-drill.test.mjs","stack/backup/pg-dump.sh","stack/backup/restore-drill.sh"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":2396,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":1,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-12T15:30:28+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}...
|
push
|
3
|
8
|
0
|
1789199625
|
0
|
1789199282
|
1789199625
|
group: platform-${{ github.workflow }}-${{ github. group: platform-${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
...
|
platform-platform.yml-refs/heads/main
|
0
|
Edit
Delete
|