| event_payload |
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"1620940cee8d2db16836dbb429663dd7e3b70f8f","after":"51068045497c07024ff8ad2cd5acb75657076893","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/1620940cee8d2db16836dbb429663dd7e3b70f8f...51068045497c07024ff8ad2cd5acb75657076893","commits":[{"id":"51068045497c07024ff8ad2cd5acb75657076893","message":"merge: 接住 origin/main 的 check:runtime 1678/0 回绑与证据行（152a17a0—1620940c）\n\n报告冲突一律取远端；本地 C15 / C01 的报告随后在合流提交上统一回绑。\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/51068045497c07024ff8ad2cd5acb75657076893","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-23T08:47:56-07:00","added":[],"removed":[],"modified":["CLAUDE.md","reports/doc-claims.latest.json","reports/evidence-freshness.latest.json","reports/machine-revocation-sla.latest.json","reports/revocation-sla.latest.json","reports/scope-fact-sla.latest.json","reports/scope-http.latest.json","reports/stub-surface.latest.json","reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json","runtime/CLAUDE.md","runtime/reports/agent-adapters.latest.json","runtime/reports/conformance-differential.latest.json","runtime/reports/conformance-matrix.latest.json","runtime/reports/contract-consumers.latest.json","runtime/reports/docs-truth.latest.json","runtime/reports/dual-backend-parity.latest.json","runtime/reports/fork-readiness.latest.json","runtime/reports/governance-docs.latest.json","runtime/reports/governance-rules.latest.json","runtime/reports/governance-status.latest.json","runtime/reports/governance.latest.json","runtime/reports/migrations.latest.json","runtime/reports/naming.latest.json","runtime/reports/permission-catalog.latest.json","runtime/reports/platform-ops-definitions.latest.json","runtime/reports/runtime-acceptance.latest.json","runtime/reports/runtime-governance.latest.json","runtime/reports/schema-sync.latest.json","runtime/reports/statemachine-write-guard.latest.json","runtime/reports/validation-source.latest.json"]},{"id":"b9b900f6f1e9c66d9535aacb5ef9e72cd282de08","message":"merge: 接住 origin/main（C16 合流 df2efa32 与其后报告 / 工作台提交）并入本地 main（含 C01 准入面 7e02c5c4、C15 跨域流程 f838c514）\n\n冲突处理：注册表 / kit / 装配点 / Catalog 取本地（为远端的超集：多出 C01 与 C15 两项）；\nplatform-http.module.ts 的 DEC-042 注释取远端措辞；CLAUDE.md 以远端为底、重新套上 C01 与 C15 的增量\n（模块 12 + 4、作业 9 / 3 / 10、未落地面 4 / 15 / 3 / 15、HTTP 7 份）；权限快照按合并后的 Catalog 重渲染（71 条）。\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/b9b900f6f1e9c66d9535aacb5ef9e72cd282de08","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-23T08:41:09-07:00","added":["runtime/apps/workbench/src/components/operations/cross-cutting-board.tsx","runtime/apps/workbench/src/components/operations/delivery-evidence.tsx","runtime/apps/workbench/src/components/operations/ops-assurance.tsx","runtime/apps/workbench/src/features/platform/attention.ts","runtime/apps/workbench/src/features/platform/ops-labels.ts","runtime/apps/workbench/src/lib/use-now.ts"],"removed":[],"modified":["CLAUDE.md","README.md","docs/Notification真实投递消费者验收-2026-09-23.md","docs/runbook.md","docs/缺失模块完善清单-2026-09-21.md","governance/check-workbench-ui.mjs","governance/evidence-scopes.json","governance/job-readiness.json","governance/release-packages.json","reports/caddy.latest.json","reports/candidate-contracts.latest.json","reports/catalog-drift.latest.json","reports/catalog-reconciliation.latest.json","reports/ci-mirror.latest.json","reports/cross-cutting-capabilities.latest.json","reports/doc-claims.latest.json","reports/evidence-freshness.latest.json","reports/fact-pii.latest.json","reports/facts.latest.json","reports/fixture-coverage.latest.json","reports/fixtures.latest.json","reports/gate-flow.latest.json","reports/migration-decs.latest.json","reports/module-imports.latest.json","reports/otel.latest.json","reports/stub-surface.latest.json","reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json","reports/workbench-ui.latest.json","runtime/apps/api-nestjs/src/platform/platform-http.module.ts","runtime/apps/web/e2e-workbench/workbench.spec.ts","runtime/apps/workbench/src/app/operations/page.tsx","runtime/apps/workbench/src/app/page.tsx","runtime/apps/workbench/src/components/app-nav.tsx","runtime/apps/workbench/src/features/platform/types.ts","runtime/clients/notification-webhook/README.md","runtime/reports/agent-adapters.latest.json","runtime/reports/conformance-matrix.latest.json","runtime/reports/contract-consumers.latest.json","runtime/reports/docs-truth.latest.json","runtime/reports/dual-backend-parity.latest.json","runtime/reports/fork-readiness.latest.json","runtime/reports/governance-docs.latest.json","runtime/reports/governance-rules.latest.json","runtime/reports/governance-status.latest.json","runtime/reports/governance.latest.json","runtime/reports/migrations.latest.json","runtime/reports/naming.latest.json","runtime/reports/permission-catalog.latest.json","runtime/reports/platform-ops-definitions.latest.json","runtime/reports/runtime-governance.latest.json","runtime/reports/schema-sync.latest.json","runtime/reports/statemachine-write-guard.latest.json","runtime/reports/validation-source.latest.json"]},{"id":"f838c514ab4f3b49a51c6e3e87cf82d0d6925ad4","message":"feat(cross-domain-workflow): C15 持久账本与适配器拉取执行面，依 DEC-046 升 authority\n\nDEC-046（C15 建表与首个消费者数字员工OS）2026-09-23 批准，治理仓 0c4ff9d；三处分叉取建议项：\nOwner 适配器拉取、首个场景人事变动生效处置、运维动作审计走同事务 outbox。\n\n- 迁移 202609230001_workflow_ledger（头引 DEC-046）：definition（不可变，触发器拒 UPDATE/DELETE）/ instance /\n step（正向 + 补偿，租约 + fencing token）/ receipt（同 token 唯一）/ operator_action / audit_outbox，六表 FORCE RLS。\n- engine/：纯状态机。不可逆步骤不自动重试；租约过期可逆步凭命令幂等键重发、不可逆步记 UNKNOWN 只能人工 resolve；\n 补偿是新命令（同 Owner、波次倒序），补偿失败转人工；运维 retry/resolve 要权限、原因与实例版本锁。\n- 平台不调用 Owner、不持凭据、不写 Owner 表；发布定义时登记 Owner 域 → 适配器应用绑定，领取 / 回报只认该应用。\n- HTTP：workflow-ledger-api.v1 八个操作（新候选契约，与规则层 workflow-orchestration-api.v1 分开，同 C16 形状）；\n 冒号路由写成 `x\\\\:verb`——Express 4 下未转义的 definitions:assess 会吞掉 definitions:publish（HTTP 用例实证）。\n- instance-timer 转 active（受 PLATFORM_PERSISTENCE_ENABLED 约束）；领取也顺手回收本域过期租约。\n- 权限目录加 cross-domain-workflow.definition / .instance（active），快照重渲染 71 条。\n- 登记：modules.json / authority-basis（nine-criteria，消费者数字员工OS）/ job-readiness / stub-surface 删两条 /\n caddy-routes 换契约；CLAUDE.md 模块档位 12 + 4、作业 9 / 3 / 10、未落地面 4 / 15 / 3 / 15；计数用例随改。\n\n未做：OS 侧三个适配器、UNKNOWN 对账责任人与时限（待 OS Owner 补填）、契约转正式登记与 Catalog code_truth（须 CHG）、\n关闭试验与 dev 部署；Catalog 仍 candidate_e0 / E0。报告未回绑（合入后在干净提交上单独做）。\n\n测试：模块无库 25；真实 PG（非超级用户、非 BYPASSRLS）7——RLS、八进程并发领取只一个拿到、同 token 并发回报、\nfencing、不可变定义、跨「进程重启」恢复；HTTP 13（含既有 policy 用例）；治理 616/0、contracts 431/0；\nruntime 静态链 exit 0；check:modules / migration-decs / stub-surface / caddy / candidate-contracts / catalog / drift 全绿。\n早先负向实做：去 fencing 判定或不可逆护栏 → 4 例红；去行锁 → 并发 2 例红；冒号不转义 → HTTP 3 例红。\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/f838c514ab4f3b49a51c6e3e87cf82d0d6925ad4","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-23T07:46:30-07:00","added":["contracts/candidates/contracts/workflow-ledger-api.v1.openapi.json","runtime/apps/api-nestjs/src/platform/http/cross-domain-workflow.controller.ts","runtime/apps/api-nestjs/test/platform.cross-domain-workflow-http.test.ts","runtime/modules/cross-domain-workflow/prisma/migrations/202609230001_workflow_ledger/migration.sql","runtime/modules/cross-domain-workflow/prisma/migrations/migration_lock.toml","runtime/modules/cross-domain-workflow/src/engine/engine.ts","runtime/modules/cross-domain-workflow/src/http/workflow-runtime.test.ts","runtime/modules/cross-domain-workflow/src/http/workflow-runtime.ts","runtime/modules/cross-domain-workflow/src/jobs/instance-timer.ts","runtime/modules/cross-domain-workflow/src/persistence/memory-workflow-store.ts","runtime/modules/cross-domain-workflow/src/persistence/prisma-workflow-store.ts","runtime/modules/cross-domain-workflow/src/persistence/workflow-store.ts","runtime/modules/cross-domain-workflow/test/workflow-ledger.integration.ts","runtime/modules/cross-domain-workflow/vitest.integration.config.ts","runtime/modules/kit/src/cross-domain-workflow-runtime.ts"],"removed":[],"modified":["CLAUDE.md","contracts/catalogs/decisions.json","contracts/catalogs/permissions.json","contracts/test/governance-linter.test.mjs","contracts/test/impact-graph.test.mjs","governance/authority-basis.json","governance/caddy-routes.json","governance/job-readiness.json","governance/stub-surface.json","governance/test/build-workbench-snapshots.test.mjs","governance/test/job-readiness.test.mjs","runtime/apps/api-nestjs/.env.example","runtime/apps/api-nestjs/src/platform/platform-http.module.ts","runtime/modules.json","runtime/modules/cross-domain-workflow/README.md","runtime/modules/cross-domain-workflow/package.json","runtime/modules/cross-domain-workflow/prisma/schema.prisma","runtime/modules/cross-domain-workflow/src/index.ts","runtime/modules/cross-domain-workflow/tsconfig.json","runtime/modules/kit/src/index.ts","runtime/packages/contracts/src/permission-catalog.ts","runtime/pnpm-lock.yaml"]},{"id":"79b9a2779fd3268cee75a2c4cfadf0b4f778bbcc","message":"Merge branch 'main' into feat/c16-conversation-ledger\n\n# Conflicts:\n#\tCLAUDE.md\n#\tcontracts/catalogs/permissions.json\n#\tcontracts/test/governance-linter.test.mjs\n#\tcontracts/test/impact-graph.test.mjs\n#\tgovernance/authority-basis.json\n#\tgovernance/stub-surface.json\n#\treports/revocation-sla.latest.json\n#\truntime/CLAUDE.md\n#\truntime/apps/api-nestjs/src/platform/platform-http.module.ts\n#\truntime/modules/kit/src/index.ts\n#\truntime/packages/contracts/src/permission-catalog.ts\n#\truntime/reports/conformance-differential.latest.json\n#\truntime/reports/runtime-acceptance.latest.json\n#\tstack/overlays/dev.yaml\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/79b9a2779fd3268cee75a2c4cfadf0b4f778bbcc","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-23T07:21:19-07:00","added":["contracts/candidates/contracts/scope-snapshot-http.v1.openapi.json","contracts/candidates/contracts/tenant-resolution-api.v1.openapi.json","contracts/candidates/schemas/facts/OrganizationUnitMoved.v1.json","contracts/candidates/schemas/scope-owner-bootstrap.v1.json","contracts/candidates/schemas/scope-snapshot.v1.json","contracts/contracts/configuration-snapshot-api.v1.openapi.json","contracts/schemas/permission-invalidation-page.v1.schema.json","docs/Notification真实投递消费者验收-2026-09-23.md","docs/PF-08受信租户解析接口与SDK-2026-09-13.md","docs/PF-08租户Token与鉴权切换记录-2026-09-13.md","docs/PF-08租户事实整合执行记录-2026-09-13.md","docs/PF-08租户映射迁移与验收方案-2026-09-13.md","docs/PF-09机器身份与Client-Credentials实现记录-2026-09-13.md","docs/PF-09身份Transit签名接入记录-2026-09-12.md","docs/PF-11凭据租约与OpenBao验收记录-2026-09-13.md","docs/PF-11机器身份消费与安全整合验收-2026-09-13.md","docs/PF-13Scope-HTTP与远程SDK验收-2026-09-13.md","docs/PF-13组织事实消费与重建验收-2026-09-13.md","docs/PF-13组织闭包与Scope快照验收-2026-09-13.md","docs/PF-16权限失效HTTP传输验收-2026-09-13.md","docs/fact模块完成度收口-2026-09-23.md","docs/安全修复与治理完善-2026-09-13.md","governance/check-identity-transit.mjs","governance/lib/identity-transit-evidence.mjs","governance/lib/restore-ownership.mjs","governance/m5-registration-plan.mjs","governance/test/identity-transit-evidence.test.mjs","governance/test/m5-registration-plan.test.mjs","governance/test/restore-ownership.test.mjs","identity/apps/api-fastify/prisma/migrations/20260913015900_application_tenant_identity_index/migration.sql","identity/apps/api-fastify/prisma/migrations/20260913020000_service_identities/migration.sql","identity/apps/api-fastify/prisma/migrations/20260913030000_tenant_canonical_allocations/migration.sql","identity/apps/api-fastify/prisma/migrations/20260913030100_tenant_canonical_unique_index/migration.sql","identity/apps/api-fastify/prisma/migrations/20260913030200_qualify_tenant_binding_lookup/migration.sql","identity/apps/api-fastify/prisma/migrations/20260913040000_canonical_token_grants/migration.sql","identity/apps/api-fastify/src/modules/oidc/machine-identity.ts","identity/apps/api-fastify/src/routes/machine-identity.ts","identity/apps/api-fastify/test/canonical-token.integration.test.ts","identity/apps/api-fastify/test/machine-identity.integration.test.ts","identity/apps/api-fastify/test/tenant-canonical.integration.test.ts","identity/apps/api-nestjs/domain/server/tenant-canonical.ts","identity/apps/api-nestjs/machine/index.ts","identity/apps/api-nestjs/prisma/migrations/20260913015900_application_tenant_identity_index/migration.sql","identity/apps/api-nestjs/prisma/migrations/20260913020000_service_identities/migration.sql","identity/apps/api-nestjs/prisma/migrations/20260913030000_tenant_canonical_allocations/migration.sql","identity/apps/api-nestjs/prisma/migrations/20260913030100_tenant_canonical_unique_index/migration.sql","identity/apps/api-nestjs/prisma/migrations/20260913030200_qualify_tenant_binding_lookup/migration.sql","identity/apps/api-nestjs/prisma/migrations/20260913040000_canonical_token_grants/migration.sql","identity/apps/api-nestjs/src/oidc/machine-identity.controller.ts","identity/apps/api-nestjs/src/oidc/machine-identity.service.ts","identity/apps/api-nestjs/src/oidc/tenant-resolution.controller.ts","identity/apps/api-nestjs/test/canonical-token.integration.test.ts","identity/apps/api-nestjs/test/machine-identity.integration.test.ts","identity/apps/api-nestjs/test/tenant-canonical.integration.test.ts","identity/packages/machine-identity/package.json","identity/packages/machine-identity/src","identity/packages/machine-identity/tsconfig.json","identity/packages/machine-identity/vitest.config.ts","reports/identity-copy-legacy.latest.json","reports/identity-transit.latest.json","reports/machine-revocation-sla.latest.json","reports/ms3-machine-integration/2026-09-13/runtime-first-failure.json","reports/pf08-tenant-inventory.latest.json","reports/scope-fact-sla.latest.json","reports/scope-facts-acceptance.latest.json","reports/scope-http.latest.json","reports/scope-source-restore.latest.json","reports/security-hardening/2026-09-13/controlled-negative.json","reports/security-hardening/2026-09-13/e2-missing-health.log","reports/security-hardening/2026-09-13/e2-valid-structure.log","reports/security-hardening/2026-09-13/negative-expiry.log","runtime/apps/api-nestjs/src/platform/http/application-contract-registry.controller.ts","runtime/apps/api-nestjs/src/platform/http/configuration.controller.ts","runtime/apps/api-nestjs/src/platform/http/fact-replay.controller.ts","runtime/apps/api-nestjs/src/platform/http/permission-invalidation.controller.ts","runtime/apps/api-nestjs/src/platform/http/scope-snapshot.controller.ts","runtime/apps/api-nestjs/test/platform.colon-routes.http.test.ts","runtime/apps/api-nestjs/test/platform.configuration-http.test.ts","runtime/apps/api-nestjs/test/platform.fact-ops.http.test.ts","runtime/apps/api-nestjs/test/platform.registry-http.test.ts","runtime/clients/fact/src/abortable.ts","runtime/clients/fact/src/publisher.test.ts","runtime/clients/identity/src/machine.test.ts","runtime/clients/identity/src/machine.ts","runtime/clients/identity/src/tenant-resolution.test.ts","runtime/clients/identity/src/tenant-resolution.ts","runtime/clients/permission/src/abortable.ts","runtime/clients/permission/src/deadline.test.ts","runtime/clients/permission/src/invalidation-source.test.ts","runtime/clients/permission/src/invalidation-source.ts","runtime/clients/scope/README.md","runtime/clients/scope/package.json","runtime/clients/scope/src/index.test.ts","runtime/clients/scope/src/index.ts","runtime/clients/scope/src/local.ts","runtime/clients/scope/src/remote.test.ts","runtime/clients/scope/src/remote.ts","runtime/clients/scope/tsconfig.json","runtime/modules/application-contract-registry/src/http/registry-admission-runtime.test.ts","runtime/modules/application-contract-registry/src/http/registry-admission-runtime.ts","runtime/modules/configuration-feature-flags/prisma/migrations/202609230001_configuration_snapshot/migration.sql","runtime/modules/configuration-feature-flags/prisma/migrations/migration_lock.toml","runtime/modules/configuration-feature-flags/src/http/configuration-runtime.test.ts","runtime/modules/configuration-feature-flags/src/http/configuration-runtime.ts","runtime/modules/configuration-feature-flags/src/jobs/snapshot-expiry.test.ts","runtime/modules/configuration-feature-flags/src/jobs/snapshot-expiry.ts","runtime/modules/configuration-feature-flags/src/persistence/prisma-snapshot-store.ts","runtime/modules/configuration-feature-flags/src/persistence/snapshot-store.ts","runtime/modules/credential/prisma/migrations/202609130001_reference_leases/migration.sql","runtime/modules/credential/prisma/migrations/migration_lock.toml","runtime/modules/credential/src/persistence/credential-store.ts","runtime/modules/credential/src/persistence/openbao.ts","runtime/modules/fact/prisma/migrations/202609230001_fact_replay_and_operations/migration.sql","runtime/modules/fact/src/ops/fact-ops.test.ts","runtime/modules/fact/src/ops/fact-ops.ts","runtime/modules/fact/src/persistence/fact-operations.ts","runtime/modules/fact/src/persistence/fact-persisted.test.ts","runtime/modules/fact/src/persistence/fact-persisted.ts","runtime/modules/fact/test/operations.integration.ts","runtime/modules/identity/prisma/migrations/20260913015900_application_tenant_identity_index/migration.sql","runtime/modules/identity/prisma/migrations/20260913020000_service_identities/migration.sql","runtime/modules/identity/prisma/migrations/20260913030000_tenant_canonical_allocations/migration.sql","runtime/modules/identity/prisma/migrations/20260913030100_tenant_canonical_unique_index/migration.sql","runtime/modules/identity/prisma/migrations/20260913030200_qualify_tenant_binding_lookup/migration.sql","runtime/modules/identity/prisma/migrations/20260913040000_canonical_token_grants/migration.sql","runtime/modules/identity/src/domain/server/tenant-canonical.test.ts","runtime/modules/identity/src/domain/server/tenant-canonical.ts","runtime/modules/identity/src/http/oidc/machine-identity.controller.ts","runtime/modules/identity/src/http/oidc/machine-identity.service.ts","runtime/modules/identity/src/http/oidc/tenant-resolution.controller.ts","runtime/modules/identity/src/machine/index.test.ts","runtime/modules/identity/src/machine/index.ts","runtime/modules/identity/src/security/transit.test.ts","runtime/modules/identity/test/canonical-http.cjs","runtime/modules/identity/test/canonical-token-http.cjs","runtime/modules/identity/test/fixtures/canonical-access-token.fixtures.json","runtime/modules/identity/test/machine-http.cjs","runtime/modules/identity/test/mapped-fixture.cjs","runtime/modules/kit/src/application-contract-registry-runtime.ts","runtime/modules/kit/src/configuration-runtime.ts","runtime/modules/kit/src/permission-invalidation.ts","runtime/modules/kit/src/scope-http.ts","runtime/modules/permission/src/persistence/invalidation-runtime.test.ts","runtime/modules/permission/src/persistence/invalidation-runtime.ts","runtime/modules/scope/prisma/migrations/202609130001_scope_closure/migration.sql","runtime/modules/scope/prisma/migrations/202609130002_scope_source_facts/migration.sql","runtime/modules/scope/prisma/migrations/migration_lock.toml","runtime/modules/scope/src/domain/organization-closure.test.ts","runtime/modules/scope/src/domain/organization-closure.ts","runtime/modules/scope/src/persistence/fact-projector.ts","runtime/modules/scope/src/persistence/http-runtime.test.ts","runtime/modules/scope/src/persistence/http-runtime.ts","runtime/modules/scope/src/persistence/organization-fact.test.ts","runtime/modules/scope/src/persistence/organization-fact.ts","runtime/modules/scope/src/persistence/owner-bootstrap.ts","runtime/modules/scope/src/persistence/scope-store.ts","runtime/packages/contracts/src/permission-invalidation.test.ts","runtime/packages/contracts/src/platform-auth.test.ts","runtime/packages/contracts/src/platform-auth.ts","runtime/test/chaos/broker-ownership.test.ts","runtime/test/chaos/broker-ownership.ts","runtime/test/chaos/openbao-leases.test.ts","runtime/test/e2e/identity-canonical-token.test.ts","runtime/test/e2e/identity-canonical.test.ts","runtime/test/e2e/identity-machine-client.test.ts","runtime/test/e2e/identity-machine.test.ts","runtime/test/e2e/identity-transit.integration.ts","runtime/test/e2e/notification-real-consumer.test.ts","runtime/test/e2e/notification-service-real-consumer.test.ts","runtime/test/e2e/permission-invalidation-http.test.ts","runtime/test/e2e/scope-facts.test.ts","runtime/test/e2e/scope-http.test.ts","runtime/test/e2e/scope-persistence.test.ts","runtime/test/fixtures/scope-conformance.json","runtime/test/fixtures/scope-support.ts","runtime/test/transit.vitest.config.ts"],"removed":["contracts/candidates/contracts/configuration-snapshot-api.v1.openapi.json","contracts/src/http/configuration-feature-flags.ts","runtime/test/chaos/fail-closed.test.ts"],"modified":[".gitea/workflows/platform.yml",".github/CODEOWNERS",".github/workflows/platform.yml","CLAUDE.md","README.md","contracts/SOURCE.md","contracts/apps/enterprise-idp.draft.json","contracts/candidates/README.md","contracts/candidates/schemas/platform-ops/operation-receipt.v1.schema.json","contracts/catalogs/entities.json","contracts/catalogs/permissions.json","contracts/catalogs/platform-projects.json","contracts/contracts/notification-delivery-api.v1.openapi.json","contracts/contracts/permission-decision-api.v1.openapi.json","contracts/src/http/index.ts","contracts/test/governance-linter.test.mjs","contracts/test/http-handlers.test.mjs","contracts/test/impact-graph.test.mjs","docs/MS-2-3持久主线执行记录-2026-09-12.md","docs/PF-15事实可信读取与跨进程Inbox验收-2026-09-13.md","docs/domain/ms2-ms4-mainline-blueprint.md","docs/runbook.md","docs/企业公共基础平台对外交付设计.md","docs/持久主线本地验收.md","docs/缺失模块完善清单-2026-09-21.md","docs/项目完整能力表.md","governance/authority-basis.json","governance/check-identity-ui.mjs","governance/check-mainline.mjs","governance/copy-identity.mjs","governance/evidence-scopes.json","governance/job-readiness.json","governance/lib/identity-copy.mjs","governance/lib/mainline-evidence.mjs","governance/prepare-mainline.mjs","governance/release-packages.json","governance/restore-mainline.mjs","governance/stub-surface.json","governance/sync-fact-schema-digests.mjs","governance/test/build-workbench-snapshots.test.mjs","governance/test/check-candidate-contracts.test.mjs","governance/test/identity-copy.test.mjs","governance/test/job-readiness.test.mjs","governance/test/module-databases.test.mjs","governance/test/verify-candidate.test.mjs","identity/CLAUDE.md","identity/apps/api-fastify/package.json","identity/apps/api-fastify/prisma/schema.prisma","identity/apps/api-fastify/src/app.ts","identity/apps/api-fastify/src/modules/idp-management-auth.ts","identity/apps/api-fastify/src/modules/oidc/backchannel-logout-dispatcher.ts","identity/apps/api-fastify/src/modules/oidc/oidc-protocol.service.ts","identity/apps/api-fastify/src/modules/tenants/tenants.service.ts","identity/apps/api-fastify/src/routes/oidc-public.ts","identity/apps/api-fastify/src/routes/tenants.ts","identity/apps/api-fastify/test/http.acceptance.test.ts","identity/apps/api-fastify/test/idp-management-auth.integration.test.ts","identity/apps/api-fastify/test/oidc-public.integration.test.ts","identity/apps/api-fastify/test/tenants.integration.test.ts","identity/apps/api-nestjs/package.json","identity/apps/api-nestjs/prisma/schema.prisma","identity/apps/api-nestjs/src/create-app.ts","identity/apps/api-nestjs/test/http.acceptance.test.ts","identity/apps/api-nestjs/test/idp-management-auth.integration.test.ts","identity/apps/api-nestjs/test/oidc-public.integration.test.ts","identity/apps/api-nestjs/test/prepare-ui-management-fixture.mjs","identity/apps/api-nestjs/test/tenants.integration.test.ts","identity/apps/api-nestjs/tsconfig.json","identity/packages/identity-domain/package.json","identity/pnpm-lock.yaml","identity/reports/baseline.json","identity/reports/contract-consumers.latest.json","identity/reports/docs-truth.latest.json","identity/reports/dual-backend-behavior.latest.json","identity/reports/dual-backend-parity.latest.json","identity/reports/fork-readiness.latest.json","identity/reports/governance-docs.latest.json","identity/reports/governance.latest.json","identity/reports/migrations.latest.json","identity/reports/naming.latest.json","identity/reports/runtime-acceptance.latest.json","identity/reports/runtime-governance.latest.json","identity/reports/schema-sync.latest.json","identity/reports/statemachine-write-guard.latest.json","identity/reports/ui-acceptance.latest.json","identity/reports/validation-source.latest.json","identity/scripts/check-dual-backend-behavior.mjs","identity/scripts/check-ui-acceptance.mjs","identity/scripts/lib/own-tests.mjs","package.json","reports/caddy.latest.json","reports/candidate-contracts.latest.json","reports/catalog-drift.latest.json","reports/catalog-reconciliation.latest.json","reports/ci-mirror.latest.json","reports/cross-cutting-capabilities.latest.json","reports/doc-claims.latest.json","reports/evidence-freshness.latest.json","reports/fact-pii.latest.json","reports/facts.latest.json","reports/fixture-coverage.latest.json","reports/fixtures.latest.json","reports/gate-flow.latest.json","reports/identity-copy.latest.json","reports/identity-ui.latest.json","reports/image-digest.json","reports/image-smoke.latest.json","reports/mainline-acceptance.latest.json","reports/mcp-writes.latest.json","reports/migration-decs.latest.json","reports/module-imports.latest.json","reports/otel.latest.json","reports/port-conformance.latest.json","reports/revocation-sla.latest.json","reports/stub-surface.latest.json","reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json","runtime/CLAUDE.md","runtime/apps/api-fastify/src/plugins/auth.ts","runtime/apps/api-fastify/test/auth.jwt.test.ts","runtime/apps/api-nestjs/.env.example","runtime/apps/api-nestjs/src/auth/token-verifier.ts","runtime/apps/api-nestjs/src/platform/http/notification-webhook.controller.ts","runtime/apps/api-nestjs/src/platform/http/platform-ops.adapter.ts","runtime/apps/api-nestjs/src/platform/http/platform-ops.controller.ts","runtime/apps/api-nestjs/src/platform/http/public-file.controller.ts","runtime/apps/api-nestjs/src/platform/platform-http.module.ts","runtime/apps/api-nestjs/test/auth.jwt.test.ts","runtime/apps/api-nestjs/test/platform.http.acceptance.test.ts","runtime/apps/api-nestjs/test/platform.mcp-ops.http.test.ts","runtime/apps/mcp/scripts/pilot-identity.mjs","runtime/apps/mcp/src/gateway.ts","runtime/apps/mcp/src/http.test.ts","runtime/apps/mcp/src/server.test.ts","runtime/apps/mcp/src/server.ts","runtime/apps/mcp/tool-contracts.json","runtime/clients/fact/src/index.ts","runtime/clients/identity/README.md","runtime/clients/identity/src/index.test.ts","runtime/clients/identity/src/index.ts","runtime/clients/notification-webhook/README.md","runtime/clients/notification-webhook/package.json","runtime/clients/notification-webhook/src/index.test.ts","runtime/clients/notification-webhook/src/index.ts","runtime/clients/permission/README.md","runtime/clients/permission/src/index.ts","runtime/modules.json","runtime/modules/application-contract-registry/README.md","runtime/modules/application-contract-registry/package.json","runtime/modules/application-contract-registry/src/index.ts","runtime/modules/application-contract-registry/tsconfig.json","runtime/modules/configuration-feature-flags/README.md","runtime/modules/configuration-feature-flags/package.json","runtime/modules/configuration-feature-flags/prisma/schema.prisma","runtime/modules/configuration-feature-flags/src/index.ts","runtime/modules/configuration-feature-flags/tsconfig.json","runtime/modules/credential/package.json","runtime/modules/credential/prisma/schema.prisma","runtime/modules/credential/src/index.ts","runtime/modules/credential/src/ports/service-credential.port.ts","runtime/modules/credential/tsconfig.json","runtime/modules/fact/prisma/schema.prisma","runtime/modules/fact/src/facts/schema-digests.json","runtime/modules/fact/src/index.ts","runtime/modules/fact/src/persistence/fact-store.ts","runtime/modules/fact/src/persistence/read-runtime.test.ts","runtime/modules/fact/src/persistence/read-runtime.ts","runtime/modules/fact/src/persistence/runtime.test.ts","runtime/modules/fact/src/persistence/runtime.ts","runtime/modules/fact/src/persistence/schema-binding.ts","runtime/modules/identity/prisma/schema.prisma","runtime/modules/identity/src/http/common/idp-management-auth.ts","runtime/modules/identity/src/http/oidc/backchannel-logout-dispatcher.service.test.ts","runtime/modules/identity/src/http/oidc/backchannel-logout-dispatcher.service.ts","runtime/modules/identity/src/http/oidc/oidc-protocol.service.ts","runtime/modules/identity/src/http/oidc/oidc-public.controller.ts","runtime/modules/identity/src/http/oidc/oidc-public.module.ts","runtime/modules/identity/src/http/root-routes.ts","runtime/modules/identity/src/http/tenants/tenants.controller.ts","runtime/modules/identity/src/http/tenants/tenants.service.ts","runtime/modules/identity/src/oidc/index.test.ts","runtime/modules/identity/src/oidc/index.ts","runtime/modules/identity/src/security/index.test.ts","runtime/modules/identity/src/security/index.ts","runtime/modules/kit/src/index.ts","runtime/modules/kit/src/notification-webhook-runtime.ts","runtime/modules/kit/src/platform-ops-runtime.ts","runtime/modules/notification-webhook/src/delivery/delivery-authorizer.test.ts","runtime/modules/notification-webhook/src/delivery/delivery-authorizer.ts","runtime/modules/notification-webhook/src/delivery/delivery-executor.ts","runtime/modules/notification-webhook/src/delivery/delivery-lifecycle.ts","runtime/modules/notification-webhook/src/index.ts","runtime/modules/permission/src/index.ts","runtime/modules/permission/src/persistence/permission-store.ts","runtime/modules/scope/package.json","runtime/modules/scope/prisma/schema.prisma","runtime/modules/scope/src/domain/index.ts","runtime/modules/scope/src/index.ts","runtime/packages/contracts/src/index.ts","runtime/packages/contracts/src/permission-catalog.ts","runtime/packages/contracts/src/platform-http.ts","runtime/packages/contracts/src/platform-ops.ts","runtime/pnpm-lock.yaml","runtime/reports/agent-adapters.latest.json","runtime/reports/conformance-differential.latest.json","runtime/reports/conformance-matrix.latest.json","runtime/reports/contract-consumers.latest.json","runtime/reports/docs-truth.latest.json","runtime/reports/dual-backend-parity.latest.json","runtime/reports/fork-readiness.latest.json","runtime/reports/governance-docs.latest.json","runtime/reports/governance-rules.latest.json","runtime/reports/governance-status.latest.json","runtime/reports/governance.latest.json","runtime/reports/migrations.latest.json","runtime/reports/naming.latest.json","runtime/reports/permission-catalog.latest.json","runtime/reports/platform-ops-definitions.latest.json","runtime/reports/runtime-acceptance.latest.json","runtime/reports/runtime-governance.latest.json","runtime/reports/schema-sync.latest.json","runtime/reports/statemachine-write-guard.latest.json","runtime/reports/validation-source.latest.json","runtime/test/README.md","runtime/test/chaos/postgres-disconnect.test.ts","runtime/test/chaos/redpanda-disconnect.test.ts","runtime/test/e2e/fact-read-http.test.ts","runtime/test/e2e/identity-profile.test.ts","runtime/test/e2e/mainline-support.ts","runtime/test/e2e/mainline.test.ts","runtime/test/e2e/revocation-sla.test.ts","runtime/test/package.json","runtime/test/ui/identity-fixture.mjs","runtime/turbo.json","stack/compose.yaml","stack/overlays/dev.yaml","stack/provision/redpanda-topics.json"]},{"id":"7e02c5c4d4564080d3dfa8b98995e5c70389eca2","message":"feat(modules): C01 注册中心接上只判不写的准入面——POST /api/v1/registry/manifests:review\n\napplication-contract-registry 此前只有描述符：规则 6 文件 70 例夹具都在 contracts，运行时没有任何调用方\n（stub-surface 记一条 fixture-only、一条 registry-only）。本提交把 registry-admission-api.v1 的\nplanManifestAdmission 接成真实 HTTP 面，模块**仍是 shape**——不建表、不写、不激活。\n\n- kit：新增 applicationContractRegistryRuntime 钩子与视图类型（与 C11 / C12 同形）。\n- 模块：规则一律调 @juhai/contracts rc.6 的 createRuntimeManifestAdmissionPlanner，模块不重写一条。\n **策略由服务端持有**（契约原文 \"Policy snapshot is server-owned\"）：由随包 Catalog 生成——\n catalogs/decisions.json 的 status（规则只取 DEC-009—012）、schemas/app-manifest.v1 的 apiVersion const、\n 依赖上限 50，revision=catalog@contracts-\u003c版本\u003e。请求体 / 环境变量都注不进策略；生成失败走规则自带 deny-all 全拒。\n- 装配点：ApplicationContractRegistryController，判责与 C12 同——未装载 503、缺 sub/azp 403、规则拒绝仍 200。\n- 测试：模块 16 例（策略生成与三条失败关闭、READY / BLOCKED / REJECT、调用方夹带策略被忽略、随包 Catalog 实读）；\n api-nestjs 6 例（经生产同款动态装载 + 真实 JWT 守卫：401 / 403 / 200 / 规则拒绝 200 / 夹带策略 / 503）。\n 负向已验证：去掉主体校验，403 用例即红。模块 test 去掉 --passWithNoTests。\n- 登记：stub-surface 删两条（fixture-only application-contract-registry、registry-only registry-admission-api.v1），\n CLAUDE.md 清单（在头 B 与 C13 并入后的基础上）4 / 18 / 6 / 14 → 4 / 17 / 5 / 14（HTTP 契约 10 → 9）；仓纪律 3 注明例外。\n\n**有意没做：** 契约文件留在 contracts/candidates/——转正要改 Catalog platform-projects.json 的证据路径，\n那是 Catalog 变更、要走 CHG，不在本提交里自改（ai-route / audit-append 也是候选契约挂真实控制器的先例）。\nregistry-snapshot / snapshot-upgrade-review 仍无调用方；升 authority 仍缺建表 DEC 与真实消费者。\n\n验证（本地工作区，dirty）：check pins / modules / module-imports / catalog / catalog-drift / fixtures（17 套件 702 例）/\nfacts / candidate-contracts / doc-claims / stub-surface / migration-decs / caddy 全过；治理单测 617 / 616 过 / 1 跳过；\nruntime lint + typecheck 0 error。runtime check:governance 红在 docsTruthViolations 0→1，\n为 main 上既有的 runtime/CLAUDE.md 未回灌 1a29a64 运行验收，与本提交无关。未跑 check:runtime。\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/7e02c5c4d4564080d3dfa8b98995e5c70389eca2","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-23T01:23:40-07:00","added":["runtime/apps/api-nestjs/src/platform/http/application-contract-registry.controller.ts","runtime/apps/api-nestjs/test/platform.registry-http.test.ts","runtime/modules/application-contract-registry/src/http/registry-admission-runtime.test.ts","runtime/modules/application-contract-registry/src/http/registry-admission-runtime.ts","runtime/modules/kit/src/application-contract-registry-runtime.ts"],"removed":[],"modified":["CLAUDE.md","docs/企业公共基础平台对外交付设计.md","docs/缺失模块完善清单-2026-09-21.md","governance/stub-surface.json","runtime/apps/api-nestjs/src/platform/platform-http.module.ts","runtime/modules/application-contract-registry/README.md","runtime/modules/application-contract-registry/package.json","runtime/modules/application-contract-registry/src/index.ts","runtime/modules/application-contract-registry/tsconfig.json","runtime/modules/kit/src/index.ts","runtime/pnpm-lock.yaml"]}],"total_commits":0,"head_commit":{"id":"51068045497c07024ff8ad2cd5acb75657076893","message":"merge: 接住 origin/main 的 check:runtime 1678/0 回绑与证据行（152a17a0—1620940c）\n\n报告冲突一律取远端；本地 C15 / C01 的报告随后在合流提交上统一回绑。\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/51068045497c07024ff8ad2cd5acb75657076893","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-23T08:47:56-07:00","added":[],"removed":[],"modified":["CLAUDE.md","reports/doc-claims.latest.json","reports/evidence-freshness.latest.json","reports/machine-revocation-sla.latest.json","reports/revocation-sla.latest.json","reports/scope-fact-sla.latest.json","reports/scope-http.latest.json","reports/stub-surface.latest.json","reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json","runtime/CLAUDE.md","runtime/reports/agent-adapters.latest.json","runtime/reports/conformance-differential.latest.json","runtime/reports/conformance-matrix.latest.json","runtime/reports/contract-consumers.latest.json","runtime/reports/docs-truth.latest.json","runtime/reports/dual-backend-parity.latest.json","runtime/reports/fork-readiness.latest.json","runtime/reports/governance-docs.latest.json","runtime/reports/governance-rules.latest.json","runtime/reports/governance-status.latest.json","runtime/reports/governance.latest.json","runtime/reports/migrations.latest.json","runtime/reports/naming.latest.json","runtime/reports/permission-catalog.latest.json","runtime/reports/platform-ops-definitions.latest.json","runtime/reports/runtime-acceptance.latest.json","runtime/reports/runtime-governance.latest.json","runtime/reports/schema-sync.latest.json","runtime/reports/statemachine-write-guard.latest.json","runtime/reports/validation-source.latest.json"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":38778,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":46,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-23T23:42:47+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}... |