| event_payload |
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"928345d27ed7ade91e7257238a55e64e9f9c6fad","after":"623a58d184232de4493761b6612202abae6561c0","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/928345d27ed7ade91e7257238a55e64e9f9c6fad...623a58d184232de4493761b6612202abae6561c0","commits":[{"id":"623a58d184232de4493761b6612202abae6561c0","message":"chore(reports): evidence-freshness 回绑 @ 3be0bb7 —— 41 份新鲜 / 4 份过期 / 0 error\n\n余 4 条告警都要真实底座或镜像：sbom、runtime-acceptance、ui-acceptance、deployed-runtime。\nmainline-acceptance 随 A15 的六套件重跑已转新鲜。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/623a58d184232de4493761b6612202abae6561c0","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T00:06:02-07:00","added":[],"removed":[],"modified":["reports/evidence-freshness.latest.json"]},{"id":"3be0bb7a8ae0ccbecf762475be4425a7eced5038","message":"chore(reports): 工作台两份快照 / doc-claims / caddy / otel 回绑 @ 5ef56d0\n\n两件事各一半：\n- 并行会话的 `bd2a5c3` 改了 `docs/runbook.md`，它在 workbench-ops-snapshot 的作用域里，\n `check:evidence` 因此判其过期（本轮唯一一条 error）。\n- 本会话把 `docs/runbook.md` / `README.md` / `reports/otel.latest.json` 加进了 doc-claims\n 的作用域，该报告随之要重绑。\n\ncaddy / otel 一并带上（同一次干净检出里顺手跑，判词不变）。四份全部 dirty=false。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/3be0bb7a8ae0ccbecf762475be4425a7eced5038","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T00:05:43-07:00","added":[],"removed":[],"modified":["reports/caddy.latest.json","reports/doc-claims.latest.json","reports/otel.latest.json","reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json"]},{"id":"5ef56d011b28e1000e575b67d354594f53249039","message":"chore(reports): mainline-acceptance 与 revocation-sla 回绑 @ 51f100b —— 首份六套件 72 例\n\nA15 接线后首次在干净树上跑完整主线（专用 Broker `enterprise-platform-ms23-redpanda-1`\n:59093 + 6 个隔离库，全部非超级用户角色）：\n\n| 套件 | 例数 |\n|---|---|\n| fact-read-http | 11 |\n| fact-persistence | 17 |\n| audit-tamper | 19 |\n| mainline-revocation-chaos | 18 |\n| **permission-ops**（新） | **2** |\n| **ai-route-persistence**（新） | **5** |\n\n合计 72 例、0 失败、0 skipped/todo，`validateMainlineReport` 通过。revocation-sla 仍\n`partial`：cacheBound 与 invalidationPush 各 20 个真实样本，后者的传输仍是 test-harness\nledger poll，生产传输未接线——定性不变。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/5ef56d011b28e1000e575b67d354594f53249039","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T00:05:16-07:00","added":[],"removed":[],"modified":["reports/mainline-acceptance.latest.json","reports/revocation-sla.latest.json"]},{"id":"51f100b42bb2cb89db3609bf69f88835c26aa236","message":"feat(governance): 两支无门禁消费的 integration 套件接进主线（A15），并补齐 A14 的作用域\n\n**缺口**：四个模块有 `vitest.integration.config.ts`，但 `check-mainline.mjs` 只消费 fact 与\naudit 两支；`permission` 的 `ops.integration.ts`（OPS-1 受控命令 permission.invalidation 的\n真实库验收）与 `ai-gateway` 的 `persistence.integration.ts`（ai-route 权威账本）**没有任何\n门禁消费**，只能靠人手工 `pnpm test:integration`——写了验收却没有任何东西会在它坏掉时叫。\n\n- `check-mainline.mjs` 增两支套件：`permission-ops`、`ai-route-persistence`。它们要的正是\n 本文件已经在准备的那套隔离库，接进来不需要新底座。\n- `lib/mainline-evidence.mjs` 登记地板（按首次隔离库实测，非超级用户角色）：2 例 / 5 例。\n 该表同时供 runner 与 `verify:candidate` 使用，`validateMainlineReport` 要求套件数与本表\n 一致——所以「接线」和「候选可晋级核验」是同一件事，不会只改一半。\n- `prepare-mainline.mjs` 增 `aigateway` 一档：`platform_aigateway_ms23` 此前不存在（只有 dev\n 库），ai-gateway 的 integration 套件因此在任何隔离环境里都跑不起来。顺带修一处会绊下一个\n 人的坑——**库名的 kind 与模块目录名不总是同一个词**（`aigateway` ↔ `ai-gateway`），改为显式\n `moduleDir` 映射，不靠字符串等同。\n- `evidence-scopes.json` 补 A14 漏的一半：`doc-claims` 的 scope 加 `README.md`、\n `docs/runbook.md`、`reports/otel.latest.json`。扩了扫描面却没扩作用域，等于那三处一变\n 本报告也不会被判过期。\n\n**实测**（`enterprise-platform-ms23` 专用 Broker :59093 + 6 个隔离库，非超级用户）：\n六套件全过 11 / 17 / 19 / 18 / **2** / **5** = 72 例，`mainline:check` 退出 0，\n`validateMainlineReport` 通过。报告回绑另起提交（本次运行时工作树是脏的）。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/51f100b42bb2cb89db3609bf69f88835c26aa236","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T00:02:22-07:00","added":[],"removed":[],"modified":["governance/check-mainline.mjs","governance/evidence-scopes.json","governance/lib/mainline-evidence.mjs","governance/prepare-mainline.mjs"]},{"id":"bd2a5c39496b0dda12afc98c321119609780f519","message":"docs(运维): runbook 补工作台「缺配置」的形态判别与入口形态登录的三道坎\n\n入口托管产物按约定摘掉 .env.local 构建，两个 NEXT_PUBLIC_WORKBENCH_* 一起\n没进产物，登录页显示「缺配置」是这份产物的预期结果、不是漏配；写清判形态\n的办法，并点明不该靠「带着 .env.local 重建」去修（那是拿同源形态换登录页）。\n\n入口形态的登录补配置也修不通：构建带变量、补登记入口 origin 回调都可做，\n但换令牌必失败——常驻容器 NODE_ENV=production 而 loadLocalSigningKey 只认\ntest / development，且容器 IDP_CANONICAL_ORIGIN=http://localhost:3098 使入口\n上取到的 discovery issuer 与端点全指 :3098。结论落在等目标环境的真签名源，\n并明写把容器降成 development 是安全面倒退。\n\n同段末句「在那之前不要把工作台挂到网关根路径」已被 426a7df 落地的同源托管与\nforward_auth 超越，改为陈述现状，免得与新段自相矛盾。\n\ncheck:doc-claims ✓（报告经 GOV_REPORT_DIR 导出仓外，仓内 reports/ 未改）；\n工作区根 check-workspace-consistency.mjs CLEAN。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/bd2a5c39496b0dda12afc98c321119609780f519","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-18T23:53:37-07:00","added":[],"removed":[],"modified":["docs/runbook.md"]}],"total_commits":0,"head_commit":{"id":"623a58d184232de4493761b6612202abae6561c0","message":"chore(reports): evidence-freshness 回绑 @ 3be0bb7 —— 41 份新鲜 / 4 份过期 / 0 error\n\n余 4 条告警都要真实底座或镜像：sbom、runtime-acceptance、ui-acceptance、deployed-runtime。\nmainline-acceptance 随 A15 的六套件重跑已转新鲜。\n\nCo-Authored-By: Claude Opus 5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/623a58d184232de4493761b6612202abae6561c0","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-09-19T00:06:02-07:00","added":[],"removed":[],"modified":["reports/evidence-freshness.latest.json"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":23211,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":44,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-09-19T14:07:16+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}... |