digital-psychology/.ai/domain/boundary-rules.md

Bounded Context Boundary Rules

Wave 0 · P0 资产 · AI / Engineer 只读；变更须 Architect + Human
运行时权威副本：.ai/domain/boundary-rules.md

Status: Draft（Human Review 后 Frozen）

---

如何读

• owns：该 BC 唯一写权威（修改入口）。
• does_not_own：明示禁止「顺手改」。
• allowed：允许的依赖（多为读或经门面）。
• forbidden：禁止的依赖（含跨 BC 写支付/会员等）。

违反本文件 = Reviewer BLOCK（架构回归）。

---

Admin_Auth_Audit

Admin_Auth_Audit:
  owns:
    - AdminAccount
    - AdminSession
    - AuditLog
  does_not_own:
    - UserStatus
    - MembershipPlan
    - Entitlement
  allowed:
    - Admin_RBAC.read
  forbidden:
    - Payment.write
    - C端业务聚合根的隐式写入

Admin_RBAC

Admin_RBAC:
  owns:
    - AdminRole
    - AdminPermission
  does_not_own:
    - User
    - Profile
    - Membership
  allowed:
    - Admin_Auth_Audit.write_audit
  forbidden:
    - Payment
    - Membership.write
    - DeviceAuth.user_token_issue

Identity_Profile

Identity_Profile:
  owns:
    - User
    - Profile
    - DeviceIdentity
    - UserStatus
    - BehaviorSnapshot
    - PsychologicalTagSet
  does_not_own:
    - MembershipPlan
    - Entitlement
    - Order
    - Payment
    - RedemptionCode
  allowed:
    - Analytics_OpsB.read
  forbidden:
    - Payment
    - Membership.write

Membership_Orders

Membership_Orders:
  owns:
    - MembershipPlan
    - Entitlement
    - Membership
    - Order
    - DeepAccess
    - RedemptionCode
    - Payment  # mock 今；真支付适配器后置，仍归本 BC
  does_not_own:
    - UserStatus
    - AdminRole
    - FilterRule
  allowed:
    - Identity_Profile.read
  forbidden:
    - Ask_Ops.write_prompt
    - Content_Safety.rule_mutate_via_order

Analytics_OpsB

Analytics_OpsB:
  owns:
    - AnalyticsSession
    - AnalyticsEvent
  does_not_own:
    - User
    - Membership
  allowed:
    - Identity_Profile.read_ids_only
  forbidden:
    - Payment
    - 采集 PII 正文（生日/问答全文等）

Ops_Content

Ops_Content:
  owns:
    - HomeTool
    - ScalePublishState
  does_not_own:
    - Scale 题目正文编辑器（未开 ECR 前禁止扩张）
  allowed:
    - Explore_Reports.publish_gate
  forbidden:
    - Community
    - Payment

Account_Risk

Account_Risk:
  owns:
    - RiskFlag
    - BanRecord
  does_not_own:
    - MembershipPlan
  allowed:
    - Identity_Profile.UserStatus.transition  # 经明确应用服务
    - Admin_Auth_Audit.write_audit
  forbidden:
    - Payment.refund_silent

Content_Safety

Content_Safety:
  owns:
    - FilterRule
    - ModerationCase
    - BlockPolicy
    - CrisisEvent
    - CrisisPolicy
  does_not_own:
    - Membership
    - Payment
    - AdminRole
  allowed:
    - Identity_Profile.read
    - Ask_Ops.read_session_meta
  forbidden:
    - Membership.write
    - Payment

Ask_Ops

Ask_Ops:
  owns:
    - AskSessionView
    - QualityFeedback
    - HandoffCase
    - SystemPrompt
    - KnowledgeSource
    - KnowledgeChunk
    - ToolDefinition
  does_not_own:
    - Payment
    - MembershipPlan
    - UserStatus
  allowed:
    - Identity_Profile.read
    - Content_Safety.evaluate
  forbidden:
    - Payment
    - Membership.write
    - Admin_RBAC.write

Ops_CMS_NoUGC

Ops_CMS_NoUGC:
  owns:
    - Banner
    - FeedSlot
    - ScheduledPublication
  does_not_own:
    - UGC Post
    - CommentGraph
    - TrustScore
  allowed:
    - Admin_RBAC.check
  forbidden:
    - Community
    - 用户生成内容入库为主路径

Community

Community:
  status: Forbidden
  owns: []
  note: feature-map UGC 广场 [No]；开启须 L3 ADR + 新 Capability

---

反模式（禁止）

AskService → load User → update Membership → charge Payment
UserService.updateMembership()
Content_Safety 直接改 Entitlement
Ops_CMS 引入「用户帖子」表却声称 NoUGC