| event_payload |
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"20d2cce61d56fb7ebf373e5408cc6d7a31aa1e5e","after":"b5f04cf0ba2401c756d0275f7e5853d39ec78867","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/20d2cce61d56fb7ebf373e5408cc6d7a31aa1e5e...b5f04cf0ba2401c756d0275f7e5853d39ec78867","commits":[{"id":"b5f04cf0ba2401c756d0275f7e5853d39ec78867","message":"chore(reports): 根链、工作台快照与浏览器回归回绑 @ 1efb5358（跨包只经守卫）\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/b5f04cf0ba2401c756d0275f7e5853d39ec78867","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-10-12T04:49:13-07:00","added":[],"removed":[],"modified":["reports/caddy.latest.json","reports/candidate-contracts.latest.json","reports/capability-acceptance.latest.json","reports/catalog-chg.latest.json","reports/catalog-drift.latest.json","reports/catalog-reconciliation.latest.json","reports/ci-mirror.latest.json","reports/cross-cutting-capabilities.latest.json","reports/doc-claims.latest.json","reports/evidence-freshness.latest.json","reports/fact-pii.latest.json","reports/facts.latest.json","reports/fixture-coverage.latest.json","reports/fixtures.latest.json","reports/gate-flow.latest.json","reports/migration-decs.latest.json","reports/module-imports.latest.json","reports/otel.latest.json","reports/release-drift.latest.json","reports/stub-surface.latest.json","reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json","reports/workbench-ui.latest.json","runtime/reports/agent-adapters.latest.json","runtime/reports/conformance-matrix.latest.json","runtime/reports/contract-consumers.latest.json","runtime/reports/docs-truth.latest.json","runtime/reports/dual-backend-parity.latest.json","runtime/reports/fork-readiness.latest.json","runtime/reports/governance-docs.latest.json","runtime/reports/governance-rules.latest.json","runtime/reports/governance-status.latest.json","runtime/reports/governance.latest.json","runtime/reports/migrations.latest.json","runtime/reports/naming.latest.json","runtime/reports/permission-catalog.latest.json","runtime/reports/platform-ops-definitions.latest.json","runtime/reports/runtime-governance.latest.json","runtime/reports/schema-sync.latest.json","runtime/reports/statemachine-write-guard.latest.json","runtime/reports/validation-source.latest.json"]},{"id":"1efb5358aad260567b6c78b2d6be70f0adec5bfb","message":"feat(ees): 跨包只经守卫（02 需-4）——包发布守卫、ctx.ref 经守卫读别包记录、施加时比对授权拒绝跨包授权\n\n02「域包开发与对接」拆-2 把内置包拆成五个包后，商读客、财读商等 9 处直读成为跨包读；需-4 要求\n只经被引用方守卫读（可断言状态、返回允许暴露的字段），施加时拒绝跨包授权。\n\n- 引擎 SQL 002_domain_guards：shared.publish_domain_guard 核对守卫形式（assert_\u003c名\u003e_ref(text, uuid,\n …)、STABLE、SECURITY DEFINER、固定 search_path、Owner 为域角色），交给该角色并允许各 EES 角色执行；\n shared.domain_guard（已发布守卫）与 shared.domain_package_object（各包建立的 schema、表、函数，\n 由引擎按每份迁移的结构比对记录）只追加；ensure_domain_owner_role 换新，新角色也能执行已发布守卫。\n- 引擎接口：ctx.ref(guard, id, ...args) 返回守卫字段；缺失 \u003c名\u003e_NOT_FOUND（404），状态不符\n \u003c名\u003e_STATE_INVALID（409）。对 ees-domain-engine/1 的增补，首次发布之前。\n- 施加时比对授权（aclexplode）：对别包对象的任何授权变动拒绝（仅发布守卫带来的 EXECUTE 与守卫\n schema 的 USAGE 除外）；本包对象授别包 Owner 角色的同样只许这两类；内核对象不比对。\n- 测试包：notebook 1.1.0 发布 notebook.assert_note_ref；新测试包 ees.fixture.review 只经守卫读笔记；\n 升级锁加入 review；登记摘要更新（门禁放行 SQL 10 份：引擎 2、内置包 8；测试包 SQL 4 份）。\n- 文档：域包记录 §17；SDK README（ctx.ref、发布守卫、跨包授权规则）；当前状态、实施治理。\n\n新任务隔离库：服务单测 312 项 297 通过、15 项条件跳过、0 失败（含 review 经守卫读取、三种跨包违规\n被拒、SDK 夹具）；跨 schema 外键 0、序列 0、Owner 角色审计 sync 前后无发现。\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/1efb5358aad260567b6c78b2d6be70f0adec5bfb","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-10-12T04:46:23-07:00","added":["runtime/services/enterprise-entity-service/src/domains/engine/sql/002_domain_guards.sql","runtime/services/enterprise-entity-service/test/fixtures/domain-packages/ees.fixture.review@1.0.0/catalog.json","runtime/services/enterprise-entity-service/test/fixtures/domain-packages/ees.fixture.review@1.0.0/contracts/command-payloads.v1.schema.json","runtime/services/enterprise-entity-service/test/fixtures/domain-packages/ees.fixture.review@1.0.0/contracts/event-payloads.v1.schema.json","runtime/services/enterprise-entity-service/test/fixtures/domain-packages/ees.fixture.review@1.0.0/ees-domain-package.json","runtime/services/enterprise-entity-service/test/fixtures/domain-packages/ees.fixture.review@1.0.0/review.mjs","runtime/services/enterprise-entity-service/test/fixtures/domain-packages/ees.fixture.review@1.0.0/sql/001_review.sql"],"removed":[],"modified":["docs/企业实体服务/实施治理与批准范围.md","docs/企业实体服务/客商财域包候选-2026-10-11.md","docs/当前状态与验收边界.md","governance/enterprise-entity-service-domain-packages.json","governance/test/enterprise-entity-service.test.mjs","runtime/services/enterprise-entity-service/sdk/README.md","runtime/services/enterprise-entity-service/src/domains/domain-kernel.mjs","runtime/services/enterprise-entity-service/src/domains/engine-api.mjs","runtime/services/enterprise-entity-service/src/domains/engine/engine.json","runtime/services/enterprise-entity-service/src/domains/migrate.mjs","runtime/services/enterprise-entity-service/src/domains/packages.lock.json","runtime/services/enterprise-entity-service/test/domain-packages.integration.test.mjs","runtime/services/enterprise-entity-service/test/domain-packages.test.mjs","runtime/services/enterprise-entity-service/test/domain-sdk.integration.test.mjs","runtime/services/enterprise-entity-service/test/domains.test.mjs","runtime/services/enterprise-entity-service/test/fixtures/domain-packages/ees.fixture.notebook@1.1.0/sql/002_note_label.sql","runtime/services/enterprise-entity-service/test/fixtures/domain-packages/packages.lock.json","runtime/services/enterprise-entity-service/test/fixtures/domain-packages/upgrade.lock.json"]}],"total_commits":0,"head_commit":{"id":"b5f04cf0ba2401c756d0275f7e5853d39ec78867","message":"chore(reports): 根链、工作台快照与浏览器回归回绑 @ 1efb5358（跨包只经守卫）\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/b5f04cf0ba2401c756d0275f7e5853d39ec78867","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-10-12T04:49:13-07:00","added":[],"removed":[],"modified":["reports/caddy.latest.json","reports/candidate-contracts.latest.json","reports/capability-acceptance.latest.json","reports/catalog-chg.latest.json","reports/catalog-drift.latest.json","reports/catalog-reconciliation.latest.json","reports/ci-mirror.latest.json","reports/cross-cutting-capabilities.latest.json","reports/doc-claims.latest.json","reports/evidence-freshness.latest.json","reports/fact-pii.latest.json","reports/facts.latest.json","reports/fixture-coverage.latest.json","reports/fixtures.latest.json","reports/gate-flow.latest.json","reports/migration-decs.latest.json","reports/module-imports.latest.json","reports/otel.latest.json","reports/release-drift.latest.json","reports/stub-surface.latest.json","reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json","reports/workbench-ui.latest.json","runtime/reports/agent-adapters.latest.json","runtime/reports/conformance-matrix.latest.json","runtime/reports/contract-consumers.latest.json","runtime/reports/docs-truth.latest.json","runtime/reports/dual-backend-parity.latest.json","runtime/reports/fork-readiness.latest.json","runtime/reports/governance-docs.latest.json","runtime/reports/governance-rules.latest.json","runtime/reports/governance-status.latest.json","runtime/reports/governance.latest.json","runtime/reports/migrations.latest.json","runtime/reports/naming.latest.json","runtime/reports/permission-catalog.latest.json","runtime/reports/platform-ops-definitions.latest.json","runtime/reports/runtime-governance.latest.json","runtime/reports/schema-sync.latest.json","runtime/reports/statemachine-write-guard.latest.json","runtime/reports/validation-source.latest.json"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":35143,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":53,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-10-12T18:50:44+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}... |