| event_payload |
{"ref":"refs/heads/main","befo {"ref":"refs/heads/main","before":"deb59cd8f0d3169e33b9ba2aa22d3eac7dd8180d","after":"af3473b09972b96b8a5f6df2d932f281d2f40749","compare_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/compare/deb59cd8f0d3169e33b9ba2aa22d3eac7dd8180d...af3473b09972b96b8a5f6df2d932f281d2f40749","commits":[{"id":"af3473b09972b96b8a5f6df2d932f281d2f40749","message":"chore(reports): release-drift, doc-claims, stub-surface, release manifest and workbench snapshots 回绑 @ 6783ac8\n\nRegenerated on the clean committed 6783ac8b8 worktree (provenance gitSha=6783ac8,\nworktreeDirty=false), same sequence as the previous binding: check:release-drift\n(partial, 21 warn, 0 error), check:doc-claims, check:stub-surface (content identical\nto the a1bfa9f binding except provenance), then pnpm workbench:release-snapshots\n(only source SHA references change; no image build, no acceptance rerun, no release\nstate change). check-evidence-freshness --read-only: partial, fresh 58 / stale 12\n(all warn, the same 12 as on deb59cd8f), 0 error. evidence-freshness report not\nrewritten. check:runtime not rerun (governance script, test and runbook only).\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/af3473b09972b96b8a5f6df2d932f281d2f40749","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-10-22T23:05:26-07:00","added":[],"removed":[],"modified":["reports/doc-claims.latest.json","reports/release-drift.latest.json","reports/release-manifest.latest.json","reports/stub-surface.latest.json","reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json"]},{"id":"6783ac8b830d5a8d642befe56fd8a74dbaaaa031","message":"fix(governance): fail closed on unrecognised compose ports structures in isolation guard\n\nFollow-up to the independent verification of 2abbe4513 (PASS, three low notes):\n\n1. composeHostPorts no longer ends or skips a ports block it does not understand.\n Long syntax (- target: / published:), flow arrays split across lines, quoted or\n aliased ports keys, flow mappings, empty items, stray quotes, whole mappings\n from a variable (\"${PG_PORTS}\") and non host:container items now raise\n ISOLATION_STACK_PORTS_UNRESOLVED. A list ends only at a line indented no deeper\n than its ports: key that is not itself a - item. The real registry still\n resolves to 21 host ports (asserted).\n2. Direct tests: liveStackPorts must be a non-empty Set (empty Set, null, look-alike\n object, array, Map, string refused); CLI negative: a 0600 env file on 55470 with\n only three of four targets exits 2 with ISOLATION_LIVE_STACK_PORT (a regressed\n guard would stop at ISOLATION_CONNECTION_MISSING before PrismaClient loads, so\n nothing can connect).\n3. runbook: the 55931 run is marked as fixed clean ae8449c8a, before the port guard.\n\nVerified: outbox-index-isolation tests 10/10; ten mutants red; no database touched.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/6783ac8b830d5a8d642befe56fd8a74dbaaaa031","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-10-22T23:03:49-07:00","added":[],"removed":[],"modified":["docs/runbook.md","governance/test/outbox-index-isolation.test.mjs","governance/verify-outbox-index-isolation.mjs"]},{"id":"2abbe4513430bef63ac6b2ac9c799203ba1726a7","message":"chore(reports): release-drift, doc-claims, stub-surface, release manifest and workbench snapshots 回绑 @ a1bfa9f\n\nRegenerated on the clean committed a1bfa9f45 worktree (provenance gitSha=a1bfa9f,\nworktreeDirty=false): check:release-drift (partial, 21 warn, 0 error — content\nidentical to the previous binding), check:doc-claims and check:stub-surface (content\nidentical except provenance), then pnpm workbench:release-snapshots (release\nmanifest + catalog/ops snapshots; no image build, no acceptance rerun, no release\nstate change). check-evidence-freshness --read-only: partial, fresh 58 / stale 12\n(all warn, the same 12 as on deb59cd8f), 0 error. evidence-freshness report not\nrewritten. check:runtime not rerun (governance script, test and runbook only; no\nruntime or image input changed).\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/2abbe4513430bef63ac6b2ac9c799203ba1726a7","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-10-22T22:49:02-07:00","added":[],"removed":[],"modified":["reports/doc-claims.latest.json","reports/release-drift.latest.json","reports/release-manifest.latest.json","reports/stub-surface.latest.json","reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json"]},{"id":"a1bfa9f453ee7f4b3091c73ddb3f5abb5549401c","message":"fix(governance): refuse live stack and default ports in outbox index isolation guard\n\nverify-outbox-index-isolation.mjs claimed it never connects to the live 55470\ndatabase, but isolatedUrls() only checked protocol, loopback host, _test name and\nrole. The guard now also requires an explicit dedicated port:\n\n- every host port published by the compose files registered in\n governance/caddy-routes.json (validate.compose + network.overlays, the same\n registry check:caddy reads; dev PG 55470 among them) -\u003e ISOLATION_LIVE_STACK_PORT;\n unresolvable host ports (${VAR:?}, ${VAR}, ranges) fail closed\n- omitted port (libpq default 5432), explicit 5432 or 0 -\u003e\n ISOLATION_DEDICATED_PORT_REQUIRED (5432 is occupied by other repos' containers\n on this machine; a fresh isolated cluster always runs on an operator-chosen port)\n- query string / fragment (e.g. ?host= socket redirect) -\u003e\n ISOLATION_REQUIRES_LOCAL_TEST_DATABASE\n\nNo database is connected and no credential is read. runbook TP05 paragraph\nupdated (and its stale \"not yet run\" note replaced by the 10-22 evidence link).\n\nVerified: node --test governance/test/outbox-index-isolation.test.mjs 7/7 (2 new\ntests failed on deb59cd8f before the fix); six mutants of the guard turned red.\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/a1bfa9f453ee7f4b3091c73ddb3f5abb5549401c","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-10-22T22:45:47-07:00","added":[],"removed":[],"modified":["docs/runbook.md","governance/test/outbox-index-isolation.test.mjs","governance/verify-outbox-index-isolation.mjs"]}],"total_commits":0,"head_commit":{"id":"af3473b09972b96b8a5f6df2d932f281d2f40749","message":"chore(reports): release-drift, doc-claims, stub-surface, release manifest and workbench snapshots 回绑 @ 6783ac8\n\nRegenerated on the clean committed 6783ac8b8 worktree (provenance gitSha=6783ac8,\nworktreeDirty=false), same sequence as the previous binding: check:release-drift\n(partial, 21 warn, 0 error), check:doc-claims, check:stub-surface (content identical\nto the a1bfa9f binding except provenance), then pnpm workbench:release-snapshots\n(only source SHA references change; no image build, no acceptance rerun, no release\nstate change). check-evidence-freshness --read-only: partial, fresh 58 / stale 12\n(all warn, the same 12 as on deb59cd8f), 0 error. evidence-freshness report not\nrewritten. check:runtime not rerun (governance script, test and runbook only).\n\nCo-Authored-By: Claude Opus 5.5 \u003cnoreply@anthropic.com\u003e\n","url":"https://gitea.g-hi.com/luoanwu/enterprise-platform/commit/af3473b09972b96b8a5f6df2d932f281d2f40749","author":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"committer":{"name":"juhailaoluo pro","email":"hillao@juhailaoluodeMacBook-Pro.local","username":""},"verification":null,"timestamp":"2026-10-22T23:05:26-07:00","added":[],"removed":[],"modified":["reports/doc-claims.latest.json","reports/release-drift.latest.json","reports/release-manifest.latest.json","reports/stub-surface.latest.json","reports/workbench-catalog-snapshot.latest.json","reports/workbench-ops-snapshot.latest.json"]},"repository":{"id":116,"owner":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"law@g-hi.com","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"name":"enterprise-platform","full_name":"luoanwu/enterprise-platform","description":"","empty":false,"private":false,"fork":false,"template":false,"mirror":false,"size":98656,"language":"","languages_url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform/languages","html_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform","url":"https://gitea.g-hi.com/api/v1/repos/luoanwu/enterprise-platform","link":"","ssh_url":"git@gitea.g-hi.com:luoanwu/enterprise-platform.git","clone_url":"https://gitea.g-hi.com/luoanwu/enterprise-platform.git","original_url":"","website":"","stars_count":0,"forks_count":0,"watchers_count":1,"branch_count":154,"open_issues_count":0,"open_pr_counter":2,"release_counter":0,"default_branch":"main","archived":false,"created_at":"2026-09-11T07:33:25+08:00","updated_at":"2026-10-23T11:36:14+08:00","archived_at":"1970-01-01T08:00:00+08:00","permissions":{"admin":true,"push":true,"pull":true},"has_code":true,"has_issues":true,"internal_tracker":{"enable_time_tracker":true,"allow_only_contributors_to_track_time":true,"enable_issue_dependencies":true},"has_wiki":true,"has_pull_requests":true,"has_projects":true,"projects_mode":"all","has_releases":true,"has_packages":true,"has_actions":true,"ignore_whitespace_conflicts":false,"allow_merge_commits":true,"allow_rebase":true,"allow_rebase_explicit":true,"allow_squash_merge":true,"allow_fast_forward_only_merge":true,"allow_rebase_update":true,"allow_manual_merge":false,"autodetect_manual_merge":false,"default_delete_branch_after_merge":false,"default_merge_style":"merge","default_allow_maintainer_edit":true,"avatar_url":"","internal":false,"mirror_interval":"","object_format_name":"sha1","mirror_updated":"0001-01-01T00:00:00Z","topics":[],"licenses":[]},"pusher":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"},"sender":{"id":5,"login":"luoanwu","login_name":"","source_id":0,"full_name":"","email":"5+luoanwu@noreply.localhost","avatar_url":"https://gitea.g-hi.com/avatar/627574a890388a2aadc80ab38d22f3a0","html_url":"https://gitea.g-hi.com/luoanwu","language":"","is_admin":false,"last_login":"0001-01-01T00:00:00Z","created":"2026-01-30T16:28:30+08:00","restricted":false,"active":false,"prohibit_login":false,"location":"","website":"","description":"","visibility":"public","followers_count":0,"following_count":0,"starred_repos_count":0,"username":"luoanwu"}}... |