chore: 合入 stash Ops hardening 与 migration 000041

Ask/catalog 权限与审计加固、量表读权限统一，以及未提交的 ops hardening 变更。 Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-13 01:46:34 +08:00
parent 4889ff5916
commit 62cd8c45dd
70 changed files with 848 additions and 69 deletions
@@ -0,0 +1,53 @@
+{
+  "ecr": "ECR-012",
+  "result": "BLOCK",
+  "ess_version": "v1.0",
+  "gate_version": "0.1.2",
+  "project_profile": "unknown",
+  "checks": {
+    "artifact": true,
+    "role_boundary": true,
+    "backend_boundary": true,
+    "traceability": false,
+    "tests": false
+  },
+  "violations": [
+    {
+      "rule": "TR-REVIEW-001",
+      "description": "Backend change requires CODE_REVIEW / code-review handoff artifact",
+      "fix_required": [
+        "Write reviewer decision artifact",
+        "Re-run gate"
+      ],
+      "detail": "ECR-012",
+      "check": "traceability-check"
+    },
+    {
+      "rule": "TR-COMMIT-001",
+      "description": "Trace chain requires implementation commit evidence",
+      "fix_required": [
+        "Record commit sha in TRACEABILITY or TEST_REPORT",
+        "Re-run gate"
+      ],
+      "detail": "ECR-012",
+      "check": "traceability-check"
+    },
+    {
+      "rule": "TE-MISSING-001",
+      "description": "Missing TEST_REPORT for implemented change",
+      "fix_required": [
+        "Add docs/TEST_REPORT/ECR-xxx.md",
+        "Re-run gate"
+      ],
+      "detail": "ECR-012",
+      "check": "test-evidence-check"
+    }
+  ],
+  "errors": [
+    "[traceability-check] BLOCK [TR-REVIEW-001]: Backend change requires CODE_REVIEW / code-review handoff artifact \u2014 ECR-012",
+    "[traceability-check] BLOCK [TR-COMMIT-001]: Trace chain requires implementation commit evidence \u2014 ECR-012",
+    "[test-evidence-check] BLOCK [TE-MISSING-001]: Missing TEST_REPORT for implemented change \u2014 ECR-012"
+  ],
+  "warnings": [],
+  "timestamp": "2026-08-07T06:51:10Z"
+}