weichen/Agent-System-Backend

T

weichen 06ef17a70a Harden delegated role authority boundaries

Why: Independent review found delegated account actions, stale resource policy, and role migration cutover gaps in the initial U4 implementation.

Evidence: Backend full SQLite suite passed; isolated PostgreSQL role and migration suite passed; independent final review found no remaining findings.

Impact: Enforces transactional system grants, current role snapshots, staged role import with v36 migration, and fail-closed activation.

Refs: feature/iam-u4-role-authority

2026-10-15 02:27:50 +00:00

.gitea/workflows

Install house-style Python packages before backend CI

2026-10-03 12:46:10 +00:00

Harden delegated role authority boundaries

2026-10-15 02:27:50 +00:00

Bump embedded core pin to TS mirror fix 5773e74

2026-10-13 07:07:47 +00:00

Fence delegated project projection by its real operator

2026-10-14 08:17:31 +00:00

Add the startup configuration pipe with file and env layers plus explain

2026-09-30 04:19:11 +00:00

Add estimate-marking awareness and a second fact-check round (E3)

2026-10-10 16:08:19 +00:00

Harden delegated role authority boundaries

2026-10-15 02:27:50 +00:00

Harden delegated role authority boundaries

2026-10-15 02:27:50 +00:00

Add cmdbus: registry-driven command dispatch with audit and inline confirm

2026-09-30 07:51:31 +00:00

Implement the backend: store/bus/runmgr core

2026-09-29 17:53:24 +00:00

.gitignore

Ignore Python bytecode in the backend tree

2026-10-01 08:17:33 +00:00

.gitmodules

Wire Agent-Command as nested dependency

2026-09-30 05:53:13 +00:00

AGENTS.md

Record Gitea access facts in AGENTS.md

2026-09-30 16:06:16 +00:00

go.mod

Wire the squad native adapter instead of the core registration

2026-10-03 13:42:04 +00:00

go.sum

Bump x/crypto to v0.56.0 to clear module-level advisories

2026-09-30 17:15:17 +00:00

PROJECT.md

Refuse open listeners and cross-site writes without auth

2026-10-04 17:28:46 +00:00

README.md

Bootstrap the repository skeleton: README, agent rules, policy index, project facts

2026-09-29 17:30:31 +00:00

storage-migrate

Add model identity and in-database vector top-k via pgvector (U6 slice 3)

2026-10-11 16:31:12 +00:00

README.md

Agent-System-Backend

对话系统后端：Go 模块化单体，默认构建为单二进制（go:embed 内嵌前端与嵌入式 SQLite 存储）。组合 Agent-Native / Agent-Squad / Agent-Intent 生态，依赖 agent-system-core 契约。

契约与架构见 Agent-System-Documents 设计方案与架构文档；开发规范见 development-guidelines（Dev 仓 development/guidelines）。本仓为 Agent-System 多仓组合的组成部分。