| event_payload |
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"9fe2f24089819c6d062b22f50ab799f5cb8f48d2","after":"eb7613dc5b7daff586c599829c91c8878e5bd914","compare_url":"https://gitea.g-hi.com/luoanwu/juhai-thing-cloud/compare/9fe2f24089819c6d062b22f50ab799f5cb8f48d2...eb7613dc5b7daff586c599829c91c8878e5bd914","commits":[{"id":"eb7613dc5b7daff586c599829c91c8878e5bd914","message":"chore(evidence): record U2 round-2 gates on 03a80d7\n\nNative latest reports from clean 03a80d7 (worktreeHash\nsha256:f09f831b7d6ab3159d98f90b3053a1b6a09cb1416516217cac0959c5abb58b7b):\npnpm check exit 0 (ownTests 28, ownTestCases 160); check:device-boundaries\nexit 0; check:runtime exit 0 (150 passed = contracts 16 + NestJS 134, floor\n143, RLS enforce, dedicated container DB device_cloud_u2run / Redis db5);\nUI_MATRIX=1 check:ui exit 0 (nestjs/ws 9, nestjs/sse 9, ports 45710/45711);\ncheck:evidence exit 0; test:s3:rules 46/46. CLAUDE.md progress rows now name\nclean 03a80d7 (acceptance-successor scope only). Closes THING-U2-V1.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/juhai-thing-cloud/commit/eb7613dc5b7daff586c599829c91c8878e5bd914","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-10-27T17:10:14-07:00","added":[],"removed":[],"modified":["CLAUDE.md","reports/agent-adapters.latest.json","reports/ci-evidence.latest.json","reports/conformance-matrix.latest.json","reports/contract-consumers.latest.json","reports/device-boundaries.latest.json","reports/docs-truth.latest.json","reports/dual-backend-parity.latest.json","reports/evidence-current.latest.json","reports/fork-readiness.latest.json","reports/governance-docs.latest.json","reports/governance-kit.latest.json","reports/governance-rules.latest.json","reports/governance-status.latest.json","reports/governance.latest.json","reports/migrations.latest.json","reports/naming.latest.json","reports/runtime-acceptance.latest.json","reports/runtime-governance.latest.json","reports/schema-sync.latest.json","reports/statemachine-write-guard.latest.json","reports/ui-acceptance.latest.json","reports/validation-source.latest.json"]},{"id":"03a80d717b2472c836ff13731dca30b699f7ea2a","message":"test(device-v1b): close U2 verifier findings V1-V5 (ABA, valid control bodies, boundaries)\n\n- V2: new PM-A05 ABA case via real transfer round-trip (merchant -\u003e other -\u003e\n merchant mid-read): new grant/projection must not authorize the in-flight\n read (404), later read under the new grant is 200. Weakening the recheck to\n `if (!still)` turns it red; base 9fe2f24 service fails it too.\n- V3: the six authority write entries now use bodies that pass the route's\n own contracts schemas (asserted via safeParse) and each must be 403; a spy\n asserts all 9 requests reached assertAuthority for the grantee tenant.\n- V1: CLAUDE.md runtime/UI progress rows point to clean e4a1b6e, the source\n of the committed latest reports (acceptance-successor scope).\n- V4/V5: docs/u2-authorized-read.md records the PM-A05 boundary (decided at\n the post-read recheck; already-rechecked responses are not recalled) and\n lists device history visibility (topologyAt/serviceHistory lower bound)\n as a pending business decision, so \"old binding no leak\" is not verified.\n\nNo service/contract/Prisma/migration/candidate change.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/juhai-thing-cloud/commit/03a80d717b2472c836ff13731dca30b699f7ea2a","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-10-27T17:07:49-07:00","added":[],"removed":[],"modified":["CLAUDE.md","apps/api-nestjs/test/device-v1b.revocation-read.acceptance.test.ts","docs/u2-authorized-read.md"]},{"id":"aa141dc52a89eeda5cee38bd6fc4d52e7990e58a","message":"chore(evidence): record U2 gates on e4a1b6e\n\nNative latest reports from runs on clean e4a1b6e (worktreeHash\nsha256:9695a881d79f4e1cdf07c2c8463c71174ae7e770eeb5187d843d98480c01eeb7):\npnpm check exit 0 (ownTests 28, ownTestCases 159); check:device-boundaries\nexit 0; check:runtime exit 0 (149 passed, floor 143, RLS enforce, dedicated\ncontainer DB device_cloud_u2run / Redis db5); UI_MATRIX=1 check:ui exit 0\n(nestjs/ws 9, nestjs/sse 9); check:evidence exit 0. test:s3:rules 46/46\n(candidate untouched; s3 runtime not rerun). Reports only; no source change.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/juhai-thing-cloud/commit/aa141dc52a89eeda5cee38bd6fc4d52e7990e58a","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-10-27T16:50:35-07:00","added":[],"removed":[],"modified":["reports/agent-adapters.latest.json","reports/ci-evidence.latest.json","reports/conformance-matrix.latest.json","reports/contract-consumers.latest.json","reports/device-boundaries.latest.json","reports/docs-truth.latest.json","reports/dual-backend-parity.latest.json","reports/evidence-current.latest.json","reports/fork-readiness.latest.json","reports/governance-docs.latest.json","reports/governance-kit.latest.json","reports/governance-rules.latest.json","reports/governance-status.latest.json","reports/governance.latest.json","reports/migrations.latest.json","reports/naming.latest.json","reports/runtime-acceptance.latest.json","reports/runtime-governance.latest.json","reports/schema-sync.latest.json","reports/statemachine-write-guard.latest.json","reports/ui-acceptance.latest.json","reports/validation-source.latest.json"]},{"id":"e4a1b6e855fd835f64b3bd6a077164d51f93136b","message":"fix(device-v1b): deny tenant topology when revocation commits mid-read (U2)\n\nU2 slice (01 存量应用升级/物云.md §4; 01 权限计划 §4.3 / PM-A01 / PM-A03 / PM-A05):\n- getTenantTopology re-verifies the same tenant projection and sourceGrantId\n after reading authority topology; a revocation committed between the grant\n check and the authority read now yields 404 instead of 200 + topology.\n- New device-v1b.revocation-read.acceptance.test.ts (6 cases, JWT with\n issuer/audience, FastifyAdapter host, runtime role): PM-A01 rejections on\n tenant device reads, read-only grantee cannot reach any authority control\n entry and tenant surface has no command route, cross-tenant guessed IDs\n indistinguishable from nonexistent, revoked tenant loses list/detail/\n topology incl. ?at=, reads leave zero writes, in-flight and concurrent\n revocation.\n- Before fix: in-flight revocation case red (200 != 404), other 5 green on\n 9fe2f24 (gap-zero negatives). Five targeted mutations each turn the\n matching case red.\n- Connection-status / original command receipt query NOT added to the host:\n the original ledger exists only in the default-closed\n ops/device-loop-candidate; needs 02/04 decisions (docs/u2-authorized-read.md).\n\nVerified before commit: vitest device files 21/21, test:s3:rules 46/46,\ncheck:quick 14/14, pnpm check exit 0 (dirty tree; full gates rerun on the\ncommitted tree). No migration, contract, Prisma or candidate change.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/juhai-thing-cloud/commit/e4a1b6e855fd835f64b3bd6a077164d51f93136b","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-10-27T16:47:36-07:00","added":["apps/api-nestjs/test/device-v1b.revocation-read.acceptance.test.ts","docs/u2-authorized-read.md"],"removed":[],"modified":["CLAUDE.md","README.md","apps/api-nestjs/src/device-v1b/device-v1b.service.ts","docs/domain/owner-matrix.md"]}],"total_commits":0,"head_commit":{"id":"eb7613dc5b7daff586c599829c91c8878e5bd914","message":"chore(evidence): record U2 round-2 gates on 03a80d7\n\nNative latest reports from clean 03a80d7 (worktreeHash\nsha256:f09f831b7d6ab3159d98f90b3053a1b6a09cb1416516217cac0959c5abb58b7b):\npnpm check exit 0 (ownTests 28, ownTestCases 160); check:device-boundaries\nexit 0; check:runtime exit 0 (150 passed = contracts 16 + NestJS 134, floor\n143, RLS enforce, dedicated container DB device_cloud_u2run / Redis db5);\nUI_MATRIX=1 check:ui exit 0 (nestjs/ws 9, nestjs/sse 9, ports 45710/45711);\ncheck:evidence exit 0; test:s3:rules 46/46. CLAUDE.md progress rows now name\nclean 03a80d7 (acceptance-successor scope only). Closes THING-U2-V1.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/juhai-thing-cloud/commit/eb7613dc5b7daff586c599829c91c8878e5bd914","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-10-27T17:10:14-07:00","added":[],"removed":[],"modified":["CLAUDE.md","reports/agent-adapters.latest.json","reports/ci-evidence.latest.json","reports/conformance-matrix.latest.json","reports/contract-consumers.latest.json","reports/device-boundaries.latest.json","reports/docs-truth.latest.json","reports/dual-backend-parity.latest.json","reports/evidence-current.latest.json","reports/fork-readiness.latest.json","reports/governance-docs.latest.json","reports/governance-kit.latest.json","reports/governance-rules.latest.json","reports/governance-status.latest.json","reports/governance.latest.json","reports/migrations.latest.json","reports/naming.latest.json","reports/runtime-acceptance.latest.json","reports/runtime-governance.latest.json","reports/schema-sync.latest.json","reports/statemachine-write-guard.latest.json","reports/ui-acceptance.latest.json","reports/validation-source.latest.json"]},"repository":{"id":135,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"juhai-thing-cloud","full_name":"luoanwu/juhai-thing-cloud","description":"物云：02「物」域应用，自设备云 juhai-device-cloud 4652ce0 分叉","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":4089,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/juhai-thing-cloud/languages","html_url":"https://gitea.g-hi.com/luoanwu/juhai-thing-cloud","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/juhai-thing-cloud","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/juhai-thing-cloud.git","clone_url":"https://gitea.g-hi.com/luoanwu/juhai-thing-cloud.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":2,"open_issues_count":0,"open_pr_counter":0,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-10-12T21:14:44+08:00","updated_at":"2026-10-25T16:17:53+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}... |