feat(ECR-022): CrisisCare CrisisPolicy 只读并 Closed

新增 crisis_policies、admin.crisis.read、列表/试匹配 API 与 admin-h5「危机」页；禁 CrisisEvent 写/UGC/真支付。 Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-08 01:28:45 +08:00
parent 4b5e5bc63d
commit de224184a6
33 changed files with 746 additions and 6 deletions
@@ -0,0 +1,25 @@
+# Backend Design: ECR-022 CrisisCare
+
+| ID | BD-2026-022 |
+| Status | Approved |
+| Coding | Loop authorized |
+| Level | L2 |
+| Migration | YES 000023 |
+
+## Backend Change Boundary
+
+```text
+Domain: CrisisPolicy (read) + evaluate (no CrisisEvent write)
+App: AdminHandler → admin.Service → AdminRepo
+API: GET /admin/crisis/policies[+/:id]
+     POST /admin/crisis/evaluate
+Permission: admin.crisis.read
+Migration: 000023
+UI: admin-h5 /crisis
+```
+
+## Out of boundary
+
+CrisisEvent write · InterventionOutcome · policy publish · medical diagnosis · UGC · Payment
+
+Rollback: down migration + remove routes/UI
@@ -2,6 +2,7 @@

 ## 2026-08-08

+- **ECR-022 Closed**：CrisisCare CrisisPolicy（`crisis_policies` · evaluate · admin-h5 `/crisis` · migration 000023）  
 - **ECR-021 Closed**：AICoreConfig SystemPrompt（`system_prompts` · admin-h5 `/ai` · migration 000022 · 只读）  

 ## 2026-08-07
@@ -0,0 +1,8 @@
+# CODE_REVIEW — ECR-022
+
+**Verdict:** Approve → Closed
+
+Date: 2026-08-08 · Loop continuous
+
+- CrisisPolicy 只读 + evaluate；无 CrisisEvent 写  
+- Integration AC mapped · OpenAPI updated
@@ -0,0 +1,26 @@
+ecr: ECR-022
+capability: CrisisCare
+bounded_context: Content_Safety
+parent: WAVE0-FROZEN
+predecessor: ECR-021
+change:
+  type: additive
+breaking_change: false
+migration_required: true
+compatibility_notes: >
+  Adds crisis_policies catalog with system seeds and read/evaluate admin APIs.
+  Does not write CrisisEvent.
+
+apis:
+  - method: GET
+    path: /api/v1/admin/crisis/policies
+    change: added
+  - method: GET
+    path: /api/v1/admin/crisis/policies/{id}
+    change: added
+  - method: POST
+    path: /api/v1/admin/crisis/evaluate
+    change: added
+perms:
+  - code: admin.crisis.read
+    change: added
@@ -0,0 +1,19 @@
+# ECR-022
+
+**Title:** CrisisCare · CrisisPolicy（只读薄切片）  
+**Status:** **Closed**  
+**Closed:** 2026-08-08（Loop continuous）  
+**Parent:** WAVE0-FROZEN · **Predecessor:** ECR-021 Closed  
+**Change Level:** L2  
+
+## Change
+
+`crisis_policies` + `GET /admin/crisis/policies*` · `POST .../evaluate`；权限 `admin.crisis.read`；admin-h5「危机」页。  
+
+## Forbidden
+
+CrisisEvent 写 · 策略写发布 · 医疗诊断 · UGC · 真支付  
+
+## Linked
+
+Spec `ops-crisis-care.md` · BD-2026-022 · CONTRACT_DIFF/ECR-022.yaml · TEST_REPORT/ECR-022.md
@@ -0,0 +1,7 @@
+# ENGINEERING_SPEC — ECR-022
+
+1. migration 000023 crisis_policies + perm  
+2. AdminRepo list/get/evaluate  
+3. Admin API + OpenAPI  
+4. admin-h5 /crisis  
+5. Integration · Closed  
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-022 Architect → Engineer
+
+Loop continuous · Approved + Coding. Migration 000023. Forbidden: CrisisEvent写/UGC/真支付.
@@ -0,0 +1,3 @@
+# HANDOFF — ECR-022 Engineer → Reviewer
+
+TestCrisisCarePolicies PASS · /crisis · Ready for Closed.
@@ -0,0 +1,3 @@
+# PRODUCT_SPEC — ECR-022
+
+对齐 ops-crisis-care.md · Approved · Loop · L2 · CrisisPolicy 只读
@@ -0,0 +1,6 @@
+# STATE — ECR-022
+
+| Status | **Closed** |
+| Phase | closed |
+| Spec | ops-crisis-care.md |
+| Updated | 2026-08-08 |
@@ -0,0 +1,12 @@
+id: TASK-022-ECR022
+ecr: ECR-022
+title: CrisisCare CrisisPolicy read
+role: engineer
+status: closed
+change_level: L2
+parent: WAVE0-FROZEN
+predecessor: ECR-021
+acceptance:
+  - Spec AC mapped
+  - CrisisPolicy read + evaluate only
+  - No CrisisEvent write / UGC / payment
@@ -0,0 +1,32 @@
+# TEST_REPORT — ECR-022 CrisisCare
+
+Date: 2026-08-08 · Loop continuous · commit: (pending)
+
+## Commands
+
+```bash
+cd apps/api && go test ./internal/integration/ -run TestCrisisCarePolicies -count=1
+npm run build:admin
+python3 scripts/ess-validate.py --phase review --ecr ECR-022
+python3 scripts/ess-gate-check.py --ecr ECR-022
+```
+
+## Results
+
+| Check | Result |
+|-------|--------|
+| TestCrisisCarePolicies | PASS |
+| build:admin | PASS |
+| ess-validate review | PASS |
+
+## AC
+
+| ID | Evidence |
+|----|----------|
+| AC-F-01 | list 含 system 种子 |
+| AC-F-02 | evaluate 命中 |
+| AC-F-03 | 未知 id → 404 |
+| AC-S-01 | 无 token → 401 |
+| AC-S-02 | 仅 users.read → 403 |
+| AC-P-01 | list &lt; 500ms |
+| AC-O-01 | evaluate 不写 Event |
@@ -26,3 +26,4 @@
 | ECR-019 | ContentSafety | **Closed** | Spec ops-content-safety · BD-2026-019 · migration 000020 · TEST_REPORT · CODE_REVIEW · Loop continuous |
 | ECR-020 | QualityFeedback | **Closed** | Spec ops-quality-feedback · BD-2026-020 · migration 000021 · TEST_REPORT · CODE_REVIEW · Loop continuous |
 | ECR-021 | AICoreConfig | **Closed** | Spec ops-ai-core-config · BD-2026-021 · migration 000022 · TEST_REPORT · CODE_REVIEW · Loop continuous |
+| ECR-022 | CrisisCare | **Closed** | Spec ops-crisis-care · BD-2026-022 · migration 000023 · TEST_REPORT · CODE_REVIEW · Loop continuous |
@@ -30,4 +30,4 @@ Human 明文：**直接用 Loop，不用人工确认。**

 | Done | Next |
 |------|------|
-| ECR-013A…021 Closed | **ECR-022** CrisisCare 薄切片（CrisisPolicy 只读优先）；禁真支付/UGC |
+| ECR-013A…022 Closed | **ECR-023** KnowledgeSource 薄切片（只读优先）或 Banner/OpsCMS；禁真支付/UGC |