sqlite-web 0.7.2
gitea.db
action_run_job
Create
Query
access
access_token
action
action_artifact
action_run
action_run_index
action_run_job
action_runner
action_runner_token
action_schedule
action_schedule_spec
action_task
action_task_output
action_task_step
action_tasks_version
action_variable
app_state
attachment
auth_token
badge
branch
collaboration
comment
commit_status
commit_status_index
commit_status_summary
commit_sync_log
commit_sync_status
dbfs_data
dbfs_meta
deploy_key
email_address
email_hash
external_login_user
follow
gpg_key
gpg_key_import
hook_task
issue
issue_assignees
issue_content_history
issue_dependency
issue_index
issue_label
issue_pin
issue_user
issue_watch
label
language_stat
lfs_lock
lfs_meta_object
login_source
milestone
mirror
notice
notification
oauth2_application
oauth2_authorization_code
oauth2_grant
org_user
package
package_blob
package_blob_upload
package_cleanup_rule
package_file
package_property
package_version
project
project_board
project_issue
protected_branch
protected_tag
public_key
pull_auto_merge
pull_request
push_mirror
reaction
release
renamed_branch
repo_archiver
repo_hidden_file
repo_indexer_status
repo_license
repo_redirect
repo_topic
repo_transfer
repo_unit
repository
review
review_state
secret
session
sqlite_sequence
star
stopwatch
system_setting
task
team
team_invite
team_repo
team_unit
team_user
topic
tracked_time
two_factor
upload
user
user_badge
user_blocking
user_open_id
user_redirect
user_setting
version
watch
webauthn_credential
webhook
Toggle helper tables
Structure
Content
Query
Insert
Drop
Import
Export
Delete row 46799 from action_run_job
id
46799
run_id
26979
repo_id
160
owner_id
5
commit_sha
197c47116ab33234fb173267f28f6c27b2131604
is_fork_pull_request
0
name
Governance Audit (HARD GATE)
attempt
0
workflow_payload
name: CI "on": push: branches:
name: CI "on": push: branches: [main] pull_request: branches: [main] env: NODE_OPTIONS: --max-old-space-size=8192 NODE_VERSION: "20" jobs: governance-audit: name: Governance Audit (HARD GATE) runs-on: ubuntu-latest steps: - uses: https://gitea.com/actions/checkout@v4 - uses: https://gitea.com/pnpm/action-setup@v4 - uses: https://gitea.com/actions/setup-node@v4 with: cache: pnpm node-version: ${{ env.NODE_VERSION }} - run: pnpm install --frozen-lockfile --ignore-scripts - name: Generate Prisma Client run: pnpm -C backend exec prisma generate - name: Build shared package run: pnpm -C shared run build - name: Audit 多租户隔离（HARD GATE / 红线1，不豁免） run: pnpm -C backend run audit:tenant - name: Audit Prisma Schema 镜像一致性（HARD GATE） run: pnpm run audit:prisma-schema-source - name: Audit Prisma↔Zod 契约 run: pnpm -C backend exec tsx scripts/audit-prisma-zod-contract.ts continue-on-error: true - name: Audit FormRules↔Zod run: pnpm run audit:formrules-zod continue-on-error: true - name: Audit Response Columns run: pnpm run audit:response-columns continue-on-error: true - name: Audit Field Payload run: pnpm run audit:field-payload continue-on-error: true - name: Audit Enum Consistency run: pnpm run audit:enum-consistency continue-on-error: true - name: Audit useListPage ↔ Router run: pnpm run audit:list-page-routes continue-on-error: true - name: Audit 前端权限键 ↔ 后端真源（HARD GATE / 防按钮 fail-closed 隐藏） run: pnpm run audit:permission-keys - name: Audit Page AI Assist Coverage run: pnpm run audit:ai-assist-coverage continue-on-error: true - name: Audit Page AI Assist Skill Binding run: pnpm run audit:ai-assist-skill-binding continue-on-error: true - name: Audit Page AI Assist Context Providers run: pnpm run audit:context-provider-redact continue-on-error: true - name: Audit Coach Script Library run: pnpm run audit:coach-script-library continue-on-error: true - name: Audit AI Decision Quality run: pnpm run audit:ai-decision-quality continue-on-error: true - name: Audit Event Publishing run: pnpm -C backend run audit:events continue-on-error: true - name: Audit State Machines run: pnpm -C backend run audit:state-machines continue-on-error: true - name: Audit Money Decimal Purity (CFO-P0 防御) run: node --import tsx scripts/audit-money-decimal-purity.ts continue-on-error: true - name: Audit Nested Transaction (CFO-P0-1 + RO-P0-3 防御) run: node --import tsx scripts/audit-nested-transaction.ts continue-on-error: true - name: Audit Test Assertion Density (QA-P0 防御) run: node --import tsx scripts/audit-test-assertion-density.ts continue-on-error: true - name: Audit API Test Coverage (probe-only / read-covered / action-covered / complete-crud) run: pnpm -C backend run audit:api-test-coverage continue-on-error: true - name: Audit Consumer Test Authenticity (断言剧场防御 / 假绿防御) run: node --import tsx scripts/audit-consumer-test-authenticity.ts continue-on-error: true - name: Audit Consumer Idempotency (去重路径假覆盖防御) run: node --import tsx scripts/audit-consumer-idempotency.ts continue-on-error: true - name: Audit State Machine Unwired Guards (死守卫 / 假保护防御) run: node --import tsx scripts/audit-state-machine-unwired-guards.ts continue-on-error: true - name: Audit Migration Topology (影子迁移防御) run: node --import tsx scripts/audit-migration-topology.ts continue-on-error: true - name: Audit API Test Fixed IDs (并行化降债棘轮 / write-pk) run: pnpm -C backend run audit:api-test-fixed-ids continue-on-error: true - name: 30d Evidence - Launch Smoke Scope run: pnpm run audit:launch-smoke-scope continue-on-error: true - name: 30d Evidence - Rollout Scope Freeze run: pnpm run audit:rollout-scope-freeze continue-on-error: true - name: 30d Evidence - Production Foundation run: pnpm run audit:production-foundation-evidence continue-on-error: true - name: 30d Evidence - RLS Staging Canary Plan run: pnpm run audit:rls-staging-canary continue-on-error: true - name: 30d Evidence - Customer Signoff Status run: node --import tsx scripts/harness/customer-signoff-status.ts continue-on-error: true - name: 30d Evidence - Production Gate Projection run: node --import tsx scripts/production-release-gate.ts --no-fail continue-on-error: true - name: 30d Evidence - Gate Integrity run: pnpm run audit:production-release-gate-integrity continue-on-error: true - name: Harness Report 聚合 run: pnpm harness report --save continue-on-error: true - name: 30d Evidence - Harness Meta Tests run: pnpm run harness:test - name: 30d Evidence - War Plan Markdown run: node --import tsx scripts/governance-30d-war-plan.ts - if: always() name: Upload audit reports uses: https://gitea.com/actions/upload-artifact@v3 with: name: governance-audit-reports path: | reports/prisma-zod-contract-audit.latest.json reports/formrules-zod-audit.latest.json reports/response-columns-audit.latest.json reports/field-payload-audit.latest.json reports/enum-consistency-audit.latest.json reports/list-page-routes-audit.latest.json reports/ai-assist-coverage.latest.json reports/ai-assist-skill-binding.latest.json reports/ai-assist-context-providers.latest.json reports/coach-script-library.latest.json reports/ai-decision-quality.latest.json reports/event-publishing-audit.latest.json reports/state-machine-integration-audit.latest.json reports/harness-dashboard.latest.json reports/module-grades.latest.json reports/money-decimal-purity-audit.latest.json reports/nested-transaction-audit.latest.json reports/test-assertion-density-audit.latest.json reports/api-test-coverage.latest.json reports/api-test-fixed-ids-audit.latest.json reports/consumer-test-authenticity-audit.latest.json reports/consumer-idempotency-audit.latest.json reports/state-machine-unwired-guards-audit.latest.json reports/migration-topology-audit.latest.json reports/customer-signoff-status.latest.json reports/p0-customer-input-status.latest.json reports/rollout-scope-freeze.latest.json reports/rollout-scope-freeze.latest.md reports/production-foundation-evidence.latest.json reports/production-foundation-evidence.latest.md reports/launch-smoke-scope.latest.json reports/launch-smoke-scope.latest.md reports/rls-staging-canary.latest.json reports/rls-staging-canary.latest.md reports/production-release-gate.latest.json reports/production-release-gate.latest.md reports/production-release-actions.latest.json reports/production-release-actions.latest.md reports/production-release-gate-integrity.latest.json reports/production-release-gate-integrity.latest.md reports/governance-30d-war-plan.latest.md retention-days: "14" - if: always() name: 输出 governance summary run: node --import tsx scripts/ci-governance-summary.ts --title "Governance Audit Summary" --include-rules - name: 治理硬门禁 — 豁免感知 verdict（HARD） run: node --import tsx scripts/harness/governance-gate.ts - name: 文档对账 — CLAUDE.md GOVERNANCE-BASELINE ↔ reports 实测（HARD） run: node --import tsx scripts/harness/baseline-reconcile.ts - name: Harness Gate 综合 PR 验收（HARD） run: pnpm harness gate
...
job_id
governance-audit
needs
["lint-and-typecheck"]
runs_on
["ubuntu-latest"]
task_id
0
status
3
started
0
stopped
1793606621
created
1793605179
updated
1793606621
raw_concurrency
is_concurrency_evaluated
1
concurrency_group
concurrency_cancel
0
Delete
Cancel