| event_payload |
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"a9e18b9599335b3ad128ac8c761fc93b83de8711","after":"6449421518ff6b2dd62b6ff862ff44aedcbbea29","compare_url":"https://gitea.g-hi.com/luoanwu/base-framework/compare/a9e18b9599335b3ad128ac8c761fc93b83de8711...6449421518ff6b2dd62b6ff862ff44aedcbbea29","commits":[{"id":"6449421518ff6b2dd62b6ff862ff44aedcbbea29","message":"chore(reports): 刷新三级治理证据至 3bb349d（clean，202 tests / 8 UI）\n\n三级门禁均在 clean 工作区、同一提交 3bb349d 上实跑：\n\n- 静态 pnpm check：13 项门禁 + lint + typecheck，exit 0\n- 真实 DB pnpm check:runtime：202 tests / 0 failures、两后端迁移 deploy+status、\n 双后端同夹具差分 0 differences（PG base_framework_rt_final + Redis db11）\n- 浏览器 pnpm check:ui：8 用例 / 0 失败 / 0 跳过（PG base_framework_ui_final + db12）\n\n三份报告的 provenance 均为 gitSha=3bb349d、worktreeDirty=false，\n不再是此前绑定 a9e18b9 dirty 的 STALE 证据。\n\n新增报告：conformance-matrix、conformance-differential、governance-rules、\ngovernance-profile-kernel、governance-status（四层 profile 当前均为 PARTIAL——\nADR-0010 仍是 Proposed，observe 模式只诊断，不构成发布放行）。\n\n作用域声明：以上仅证明「本机 hillao 在 3bb349d 这个 clean commit 上通过三级门禁」，\n推不出远端已发布或 CI 已拦截（G14 仍 OPEN）。\ncheck:os-product 本轮显式 SKIPPED（上游 OS 检出不在场），未写 osProduct* 指标。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/base-framework/commit/6449421518ff6b2dd62b6ff862ff44aedcbbea29","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-08-31T16:36:45-07:00","added":["reports/conformance-differential.latest.json","reports/conformance-matrix.latest.json","reports/governance-profile-kernel.latest.json","reports/governance-rules.latest.json","reports/governance-status.latest.json"],"removed":[],"modified":["reports/contract-consumers.latest.json","reports/docs-truth.latest.json","reports/dual-backend-parity.latest.json","reports/fork-readiness.latest.json","reports/governance-docs.latest.json","reports/governance.latest.json","reports/migrations.latest.json","reports/naming.latest.json","reports/os-product-compat.latest.json","reports/os-product-runtime.latest.json","reports/runtime-acceptance.latest.json","reports/runtime-governance.latest.json","reports/schema-sync.latest.json","reports/statemachine-write-guard.latest.json","reports/ui-acceptance.latest.json","reports/validation-source.latest.json"]},{"id":"3bb349d8ab4351f7f17927b50c94255a7d8abbef","message":"fix(test): outbox 幂等键用例按租户收窄——移除它自己保证不了的全局隔离假设\n\n`dispatchOutboxBatch` 按设计跨租户全局扫描（outbox dispatcher 的\nwrite-guard-allow 豁免正为此），而 check:runtime 让两后端套件经 turbo 并行\n打同一个库。该用例却断言「全库只有我这一行待投递」——兄弟套件此刻产生的\n未投递行会被一并领走，于是期望 1 实得 2/3，数量随并行时序漂移。\n\n实测：连续两次全量红且失败对象不同（realtime.tenant 一次、outbox 一次），\n换全新库仍红且计数从 2 涨到 3；单独复跑该文件恒绿——典型的共享基座污染\n（G18 已登记族、审计发现「两后端共享 DB/Redis」的又一实证）。\n\n本用例要证的是「信封 id 恒等于 outbox 行 id」这条幂等键稳定性，与其他租户\n有多少行无关，故 publish 回调按 tenantId 过滤后再断言。这是移除伪假设，\n不是放宽断言：跨实例不重复投递由同文件上一条用例独立守护。\n\ncheck:runtime：202 tests、0 failures、差分 0 differences（exit 0）。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/base-framework/commit/3bb349d8ab4351f7f17927b50c94255a7d8abbef","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-08-31T16:34:17-07:00","added":[],"removed":[],"modified":["apps/api-fastify/test/outbox.concurrency.test.ts"]},{"id":"886537eae83f56d3b662e070575ddf3d9a72307f","message":"feat(governance): ADR-0010 阶段一/二——治理分层与同 SHA 证据模型\n\n把「一堆各自为政的门禁 + 最近一次运行的报告」升级为分层规则与可聚合证据。\nADR-0010 当前为 Proposed，本批只落 observe 模式的实现，不改变现行放行口径。\n\n规则生命周期\n- governance.rules.json + schema：16 条规则，每条带 owner、作用域、严重度、\n 证据映射、profile 归属、ADR 引用与例外期限；check:governance-rules 校验\n 规则无主/入口缺失/例外过期/profile 循环依赖，registryVersion=3。\n\n四层 profile 入口\n- check:kernel / check:production / check:conformance / check:extension，\n 经 check-governance-profile.mjs 统一编排（非 Kernel 的 profile 先跑 Kernel）。\n- governance:status 生成同 SHA 状态清单：缺失、陈旧、dirty、跨 SHA 或未绑定\n registryVersion 的证据一律不产出 VERIFIED，当前四层均为 PARTIAL——\n 这正是它没在拿旧证据冒充绿盘的证明。\n\n双后端行为身份\n- conformance.matrix.json 锁 8 cases × 2 backends 的 case 身份；\n- check:conformance:differential 用**同一夹具**逐字段比较两端 HTTP/DB/outbox\n 的 7 个 checkpoint。存在性门禁看不见语义漂移，差分才看得见。\n\n证据来源加固\n- report-provenance 增加 registryVersion / run URL / artifact 身份；\n- 验收 runner（check:runtime / check:ui）拒绝 GOV_REPORT_* 覆盖变量并 exit 2\n ——此前可用它们一行伪造出「clean@HEAD 通过」的验收报告；\n- governance-report 的缺失指标改 fail-closed：预期指标 key 消失时不再落到\n `?? -1`/`?? 0` 被当成「变好」静默过闸（C18 同族，发生在 current 侧）。\n\n其他\n- runtime-governance 审计与验收基座守卫抽到 scripts/lib，供多入口复用；\n- check 链移出 check:os-product（它依赖仓外 OS 检出，会让静态门禁不自包含、\n GitHub CI 结构性必红）；缺失时显式 SKIPPED，要真实校验用 check:full；\n- governance.yml 改三段 artifact 汇总；\n- baseline 仅收紧：ownTests 24→28、ownTestCases 146→197、testsPassed 192→202、\n uiTestsPassed 4→8，另加 5 项新地板，无任何放宽。\n\npnpm check：13 项静态门禁 + lint + typecheck 全绿（exit 0）。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/base-framework/commit/886537eae83f56d3b662e070575ddf3d9a72307f","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-08-31T16:28:40-07:00","added":["apps/api-nestjs/test/conformance.differential.ts","apps/api-nestjs/vitest.conformance.config.ts","conformance.matrix.json","docs/adr/0010-governance-layering-and-evidence-model.md","governance.rules.json","governance.rules.schema.json","scripts/check-conformance-differential.mjs","scripts/check-conformance-matrix.mjs","scripts/check-governance-profile.mjs","scripts/check-governance-rules.mjs","scripts/check-runtime-governance.mjs","scripts/generate-governance-status.mjs","scripts/lib/acceptance-base-guard.mjs","scripts/lib/runtime-governance-audit.mjs"],"removed":[],"modified":[".agents/skills/derived-project-framework-sync/SKILL.md",".agents/skills/derived-project-framework-sync/references/migration-protocol.md",".agents/skills/derived-project-framework-sync/scripts/plan-migration.mjs",".github/workflows/governance.yml","CLAUDE.md","README.md","docs/adr/README.md","docs/migration-playbook.md","package.json","reports/baseline.json","scripts/check-docs-truth.mjs","scripts/check-fork-readiness.mjs","scripts/check-runtime-acceptance.mjs","scripts/check-ui-acceptance.mjs","scripts/governance-report.mjs","scripts/lib/report-provenance.mjs"]},{"id":"ec489eae037f3a7bc6b027898804a8b1bde0fc23","message":"fix(app): 404 不泄露资源 id + 前端断网桥接\n\n两处由治理证据实锤出来的产品缺陷：\n\n1. NestJS 订单 404 回显了资源 id（`Order \u003cid\u003e not found`），跨租户探测据此\n 可确认某 id 是否存在——404 的意义正是不泄露存在性。同时 Nest 默认异常体\n 带 statusCode/error 元数据，与 Fastify 的 `{message}` 形成两套对外契约。\n 现统一为稳定 ApiErrorBody `{ message: \"Order not found\" }`。\n\n2. useRealtime 缺 offline/online 桥接：WS/SSE 的 close/error 只在 TCP 真正\n 断开时触发，而「网络没了但连接还挂着」（拔网线、飞行模式、Playwright\n setOffline）不会立刻断 TCP，服务端 30s 心跳也只是数据帧——状态徽章会停在\n Connected 假绿。现监听 window offline/online：offline 主动断开并入既有退避\n 重连路径；online 清退避定时器立即重连，但不直接置 open——navigator.onLine\n 只有 false 是确定的，恢复后仍由真实连接结果决定状态。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/base-framework/commit/ec489eae037f3a7bc6b027898804a8b1bde0fc23","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-08-31T16:28:00-07:00","added":[],"removed":[],"modified":["apps/api-nestjs/src/orders/orders.service.ts","apps/web/src/hooks/useRealtime.ts"]}],"total_commits":0,"head_commit":{"id":"6449421518ff6b2dd62b6ff862ff44aedcbbea29","message":"chore(reports): 刷新三级治理证据至 3bb349d（clean，202 tests / 8 UI）\n\n三级门禁均在 clean 工作区、同一提交 3bb349d 上实跑：\n\n- 静态 pnpm check：13 项门禁 + lint + typecheck，exit 0\n- 真实 DB pnpm check:runtime：202 tests / 0 failures、两后端迁移 deploy+status、\n 双后端同夹具差分 0 differences（PG base_framework_rt_final + Redis db11）\n- 浏览器 pnpm check:ui：8 用例 / 0 失败 / 0 跳过（PG base_framework_ui_final + db12）\n\n三份报告的 provenance 均为 gitSha=3bb349d、worktreeDirty=false，\n不再是此前绑定 a9e18b9 dirty 的 STALE 证据。\n\n新增报告：conformance-matrix、conformance-differential、governance-rules、\ngovernance-profile-kernel、governance-status（四层 profile 当前均为 PARTIAL——\nADR-0010 仍是 Proposed，observe 模式只诊断，不构成发布放行）。\n\n作用域声明：以上仅证明「本机 hillao 在 3bb349d 这个 clean commit 上通过三级门禁」，\n推不出远端已发布或 CI 已拦截（G14 仍 OPEN）。\ncheck:os-product 本轮显式 SKIPPED（上游 OS 检出不在场），未写 osProduct* 指标。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/base-framework/commit/6449421518ff6b2dd62b6ff862ff44aedcbbea29","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-08-31T16:36:45-07:00","added":["reports/conformance-differential.latest.json","reports/conformance-matrix.latest.json","reports/governance-profile-kernel.latest.json","reports/governance-rules.latest.json","reports/governance-status.latest.json"],"removed":[],"modified":["reports/contract-consumers.latest.json","reports/docs-truth.latest.json","reports/dual-backend-parity.latest.json","reports/fork-readiness.latest.json","reports/governance-docs.latest.json","reports/governance.latest.json","reports/migrations.latest.json","reports/naming.latest.json","reports/os-product-compat.latest.json","reports/os-product-runtime.latest.json","reports/runtime-acceptance.latest.json","reports/runtime-governance.latest.json","reports/schema-sync.latest.json","reports/statemachine-write-guard.latest.json","reports/ui-acceptance.latest.json","reports/validation-source.latest.json"]},"repository":{"id":54,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"base-framework","full_name":"luoanwu/base-framework","description":"基础框架 monorepo","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":2145,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/base-framework/languages","html_url":"https://gitea.g-hi.com/luoanwu/base-framework","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/base-framework","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/base-framework.git","clone_url":"https://gitea.g-hi.com/luoanwu/base-framework.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":2,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-07-03T12:24:18+08:00","updated_at":"2026-08-30T13:33:00+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}... |