| event_payload |
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"21d7c1aaae83d8d5e40aa185b1bd86d3a8d8d99f","after":"fe35d013ca78dcfcec4b634a312cd0266527fe2b","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/21d7c1aaae83d8d5e40aa185b1bd86d3a8d8d99f...fe35d013ca78dcfcec4b634a312cd0266527fe2b","commits":[{"id":"fe35d013ca78dcfcec4b634a312cd0266527fe2b","message":"docs(发布): 记录 rc.6 列车——fact-pii 这次真出去了，并记下五趟旁路的累积代价\n\nrc.6 三包 2026-09-18 发出，源 7eadfb1，tag packages-v1.0.0-rc.6（连续第三趟按 CL-5 打上）。\n动因是补 rc.5 的缺口：那时 check-fact-pii.mjs 还不在 governance 包的 files 里，消费者拿到的\nrc.5 不含它。governance 包从 96.9 kB 涨到 101.3 kB，涨的正是那两个文件。\n\n**这一趟的验证比前四趟硬。** 前几趟只能依赖 publish-rc.mjs 的 integrity 自校验；这次把\nRegistry 登记的 dist.integrity 与本地备料 tarball 的 sha512 逐包比对，三包全部一致——\n证明架上的就是会话备的那批料，中间没有被替换或重打包。\n\n顺带纠正一个前几趟被骗过的点：npm view \u003cpkg\u003e versions 在 Gitea 的 npm registry 上静默返回空，\n查具体版本（npm view \u003cpkg\u003e@\u003cversion\u003e dist.integrity）才有结果。此前以为「Registry 查不了」，\n是被这个 API 差异骗的，不是权限问题。\n\n**记下累积代价：** 旁路第五次使用后，contracts / governance 的 rc.0—rc.6 七个版本号已全部被\n本地包永久占用，永远不会有阶段门证据；计费恢复后 CI 只能从 rc.7 发起。开关当初登记为\n「临时设施」，五趟之后它显然已是常态通道——这不是它该有的角色。计费恢复时该做的是删掉\n这个分支并让 CI 发 rc.7，而不是让它继续顺手可用。这句话写进了 G-12，免得下一趟又顺手发第六次。\n\nCLAUDE.md 的 contracts 条目同步到 rc.6，并记下 check:fact-pii 自 rc.6 起随包。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/fe35d013ca78dcfcec4b634a312cd0266527fe2b","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:59:52-07:00","added":[],"removed":[],"modified":["CLAUDE.md","docs/G-12本地旁路发布记录-2026-09-13.md"]},{"id":"fe96fe64bdb8753331280a2b3396c8237b08b9d3","message":"test(runtime): ai-gateway 的选路本身不在门禁上——补 router-route / router-refresh / route-plan，10 处的第 4、5 处\n\n结构比对报出 LocalAiGovernanceRouter（316 行、三个公开方法）整支未接线、planAiRoute() 未接线。\n既有三条规则（action / route / egress）走的都是纯函数——动作治理、单条路由体检、外发分类判据——\n而选路本身（租户 allowlist、能力匹配、区域 / 安全层级 / 留存期、禁止静默回退、快照热更）\n与 planAiRoute 的串联（鉴权 → 外发分类 → 选路）一条都不在门禁上。判定逻辑一行未改。\n\n补三条规则，判定按 kind / outcome，不用 `\"reasons\" in`。\n\n接上后照例先变差，冒出 7 条「夹具与单测都没有」（EXPLICIT_FALLBACK_REQUIRED 与 refresh 侧六条\n策略字段守卫），逐条钉完回到 0。\n\n过程中一处预期被实测推翻：我按「删掉 allowFallback 就该拒」造 N21，实跑返回 []——主路由仍然匹配，\n删这个布尔位不构成拒绝。真要触发 EXPLICIT_FALLBACK_REQUIRED 得让快照里只剩 fallback 路由可选。\n按实现重造该例，没有反过来改实现。\n\n覆盖：夹具 16 → 35 例（正 8 / 反 27），规则 3 → 6；三档（都没有 / 仅单测 / 未接线）均为 0。\n新钉住的包括 NO_APPROVED_MODEL_ROUTE（租户越界 / 能力不符 / 无快照三条路径）、\nSENSITIVE_PROVIDER_NOT_APPROVED、EGRESS_CLASS_REQUIRES_SENSITIVE_FLAG、PERMISSION_DENIED:\u003ccode\u003e\n——AI 出站的准入闸门此前在门禁上只有纯函数那一半。\n\n证据：pnpm --dir runtime --filter @juhai/module-ai-gateway test 53/53、typecheck 绿、\n该套件夹具 35/35 失败 0、fixture-coverage 三档全 0。本次不回绑任何 reports/。\n\n进度：10 处已收 5 处（跨域流程 refresh、scope、credential、ai-gateway 两处）。\n余 5 处在 permission 3 / audit 1 / fact 1。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/fe96fe64bdb8753331280a2b3396c8237b08b9d3","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:59:00-07:00","added":[],"removed":[],"modified":["runtime/modules/ai-gateway/src/domain/fixture-evaluator.ts","runtime/modules/ai-gateway/test/fixtures/ai-gateway.fixtures.json"]},{"id":"2822c4d34a1b519fc87a21fe30b035028502d297","message":"fix(modules): permission 三支判定接进夹具门禁，并修两处崩溃面——此前整支不在门禁上\n\n起因是 governance/fixture-coverage.mjs 的结构比对：六个运行时模块共 10 处判定面\n「评估器没接线」，permission 占 3 处（LocalPermissionDecisionPlanner、\nLocalEmploymentScopeInvalidationPlanner、evaluateCatalogAdmission）。\n\n先确认不是有意留白，三条证据：① 探针自述把「未接线」定义为「该面完全不在门禁上」，\n并在同日把契约包侧四次同形全部修掉；② 各模块夹具 description 确实声明过取舍，但都在\n另一个轴上（吊销即时性 / 配额熔断 / 查询越权，一律「属权威实现，DEC-xxx 后」），\n没有一条提到这些 planner；③ 决定性的一条——f7a0cbb 先迁入 planner，8a95879 才建夹具，\n建的时候这些文件就在同一目录里，而 8a95879 自述评估器「只调用迁入的纯规则」，\n按它自己的话这些面本就该在。\n\n实测先行，查出两处真缺陷（均已修）：\n\n evaluateCatalogAdmission([null, \"x\"], …) 抛 TypeError——守了 routes 非数组，\n 没守条目非对象；目录来自快照 JSON。\n\n LocalPermissionDecisionPlanner.plan(undefined) 抛，兜底的 deny-all 也抛。\n 注意光守 preflight 不够：plan() 在 preflight 之后仍直接解引用 request.actorType 等，\n 故两处都要守。preflightCataloguedPermissionDecision 的 catalog 非数组 / 条目非对象 /\n actions 非数组一并收口。\n\n三支 employment 的 plan 是本域最结实的一支，畸形入参改前就已 REJECT，未动其判定。\n\n接线五条规则（decision-plan / employment-invalidation / catalog-admission 加两个\nplanner 的 refresh），非放行出口一律按 kind 显式映射：本域 PermissionDecisionPlanResult\n的 BLOCKED 带的是 blockers，EmploymentScopeInvalidationResult 的 SKIP_DUPLICATE 与\nACKNOWLEDGE_STALE 连原因字段都没有——按 `\"reasons\" in r` 判会把它们全判成 ACCEPT\n（该形状已在契约包侧四个域各咬过一次）。\n\n按探针自述「补规则后覆盖度会先变差，把新暴露的原因码钉完再收工」执行：接线后\n「夹具与单测都没有」由 0 涨到 40，用探针 --json 的 trigger 机械生成钉住用例并逐条实跑\n确认可复现（38 条自动 + 2 条手工，其中 ASSIGNMENT_ID_MUST_CHANGE 的 trigger 提示不准，\n删字段实得 NEW_ASSIGNMENT_ID_INVALID，按语义改为新旧指派相同才复现）。\n\n核验：夹具 11 → 68 例（正 7 / 反 61）0 失败；模块单测 63 → 108 例；探针 permission 两档\n双双归零（未接线 3 → 0、都没有 40 → 0），全仓「都没有」合计 47 → 0、未接线 10 → 4；\n负向实做：把 SKIP_DUPLICATE 的声明原因改成不会产生的串，门禁 exit 1 并点名该例，还原后\nexit 0；门禁另自行抓到我一处声明写错（PERMISSION_ADMISSION_SNAPSHOT_VERSION_NOT_FORWARD\n实为 PERMISSION_ADMISSION_VERSION_NOT_FORWARD）。\n\nruntime 静态链 12 道绿、第 13 道 check:docs-truth 红，但与本轮无关：c4ec6f6 把\nui-acceptance 重绑到 67e8193 却没回灌 runtime/CLAUDE.md 动态区，已在 HEAD 干净检出复现。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/2822c4d34a1b519fc87a21fe30b035028502d297","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:58:45-07:00","added":[],"removed":[],"modified":["runtime/modules/permission/src/domain/catalog-admission.ts","runtime/modules/permission/src/domain/fixture-evaluator.ts","runtime/modules/permission/src/domain/permission-decision-planner.ts","runtime/modules/permission/src/domain/permission-preflight.ts","runtime/modules/permission/test/fixtures/permission.fixtures.json"]}],"total_commits":0,"head_commit":{"id":"fe35d013ca78dcfcec4b634a312cd0266527fe2b","message":"docs(发布): 记录 rc.6 列车——fact-pii 这次真出去了，并记下五趟旁路的累积代价\n\nrc.6 三包 2026-09-18 发出，源 7eadfb1，tag packages-v1.0.0-rc.6（连续第三趟按 CL-5 打上）。\n动因是补 rc.5 的缺口：那时 check-fact-pii.mjs 还不在 governance 包的 files 里，消费者拿到的\nrc.5 不含它。governance 包从 96.9 kB 涨到 101.3 kB，涨的正是那两个文件。\n\n**这一趟的验证比前四趟硬。** 前几趟只能依赖 publish-rc.mjs 的 integrity 自校验；这次把\nRegistry 登记的 dist.integrity 与本地备料 tarball 的 sha512 逐包比对，三包全部一致——\n证明架上的就是会话备的那批料，中间没有被替换或重打包。\n\n顺带纠正一个前几趟被骗过的点：npm view \u003cpkg\u003e versions 在 Gitea 的 npm registry 上静默返回空，\n查具体版本（npm view \u003cpkg\u003e@\u003cversion\u003e dist.integrity）才有结果。此前以为「Registry 查不了」，\n是被这个 API 差异骗的，不是权限问题。\n\n**记下累积代价：** 旁路第五次使用后，contracts / governance 的 rc.0—rc.6 七个版本号已全部被\n本地包永久占用，永远不会有阶段门证据；计费恢复后 CI 只能从 rc.7 发起。开关当初登记为\n「临时设施」，五趟之后它显然已是常态通道——这不是它该有的角色。计费恢复时该做的是删掉\n这个分支并让 CI 发 rc.7，而不是让它继续顺手可用。这句话写进了 G-12，免得下一趟又顺手发第六次。\n\nCLAUDE.md 的 contracts 条目同步到 rc.6，并记下 check:fact-pii 自 rc.6 起随包。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/fe35d013ca78dcfcec4b634a312cd0266527fe2b","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T16:59:52-07:00","added":[],"removed":[],"modified":["CLAUDE.md","docs/G-12本地旁路发布记录-2026-09-13.md"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":21540,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T07:58:20+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}... |