Merge pull request 'Pin the regulations KB composition gate to RDM 8a396cf and KB a8dc714' (#631) from feature/regkb-components-pin-8a396cf into main

2026-10-19 08:32:19 +00:00
parent 38ac2b0687 4f3dac4ee1
commit 198d1891e4
3 changed files with 324 additions and 6 deletions
@@ -0,0 +1,318 @@
+# feature/regkb-components-pin-8a396cf 任务卡
+
+任务主记录：PR #631 https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Dev/pulls/631；状态：已完成（合入前闭合）；owner：weichen
+
+## 基线与授权
+
+- 权威仓：ssh://git@git-ssh.u1680832.nyat.app:31411/weichen/Agent-System-Dev.git；目标分支：main；R0（initial_base_sha）= 73bc9f208103ec1b9b83775ca65fee12f79ba99e
+- 工作区：/home/weichen/projects/Agent-System-Dev-wt-feature-regkb-components-pin-8a396cf（worktree）；分支：feature/regkb-components-pin-8a396cf
+- 分支类型：standalone；root_target：main；immediate_target：main；accepting_requirements：false
+- 需求分流：verdict=NEW；selected_initiative=无；requirement_sha256=d01339c16c6ac19bf61f1b55a864b185400c8b5e0c8e71b8e2dbf56f5bff0265；triage_receipt=/tmp/dev-regkbpin-triage.json；receipt_sha256=48dc5944068f0a35a85d5441a0d8e2e456b4041b5b8dd2354fccf8f0726aa008
+
+- 授权与交付终点：用户 2026-10-19 指示“把遗留项都处理完”（遗留项含本 pin 同步）。授权：更新 `components.pin` 与 README、运行组合门禁、PR、当前 HEAD CI 通过后合入、task-finish。未授权：发布、改写历史、分支保护变更、外部付费调用。
+- 交付模式：goal-first（目标、范围和交付终点一次确认；范围内连续推进）
+- 实施执行：agent-per-unit（配置：AGENT-EXECUTION.md）
+- 合入执行：agent（已授权交付范围内，Review 通过、冲突解决且当前 HEAD 的 CI 通过后合入）
+- 人工决策点：仅限目标/范围/验收变更、重大取舍、高后果操作或无法自动判定的业务验收
+- 当前阶段：合入；当前增量：I1（pin 同步 + 组合门禁）
+- 流程依据：仓库根目录 policy/delivery.md（归档后仍按仓库根目录定位）
+
+## 目标与非目标
+
+- 目标：法规知识库组合门禁固定组件同步到让对话模型检索法规库的新版本——`rdm_sha` = RDM main `8a396cf693b5daf32cf93cbdb10e28baf753573d`（[RDM PR #446](https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-RDM/pulls/446)，KB gitlink b481173），`kb_sha` = KB main `a8dc714dcb0fdf88364c9581661f1589e0a3caad`（[KB PR #10](https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-KB-Regulations/pulls/10) 合入点）；README 固定组件描述同步；`tests/integration/regulations-kb/run.sh` 在新 pin 上通过。
+- 非目标：run.sh 逻辑改动、modules/ gitlink 变更、真实网络搜索/嵌入调用、部署。
+
+## Agent 实施收据
+
+路由与 fail-stop 规则见根目录 AGENT-EXECUTION.md 与 policy/delivery.md；每次尝试一行，原始日志留在源码外收据路径。
+
+| 单元 ID | 预期范围 | 配置摘要 | 角色 | 候选顺序 | attempt | CLI/模型 | 终态 | transport | fallback | 源码外收据路径 |
+|---|---|---|---|---|---|---|---|---|---|---|
+| dev-regkb-components-pin-8a396cf | tests/integration/regulations-kb/components.pin、README.md | AGENT-EXECUTION.md | implementation | cursor → agy → pi | 1（fresh_session，session ID not-observable） | cursor-agent（Auto） | success | 9df02f1（parent 4774967，apply 快进） | 无 | /tmp/dev-regkb-pin-8a396cf-receipt.json |
+
+## 关联方向与规划
+
+- 适用状态：适用——法规知识库计划 U8 组合门禁
+- 主记录路径/版本：docs/superpowers/plans/2026-10-18-regulations-knowledge-base-plan.md（U8）
+- 对应里程碑：U8 组合门禁按 pin 升级
+
+## 需求分析
+
+| ID | 描述 | 项目符合度及依据 | 优先级 | 验收条件 | 依赖 | 结论 |
+|---|---|---|---|---|---|---|
+| R1 | 组合门禁固定组件升级到 RDM 8a396cf / KB a8dc714 | 符合（U8 组合门禁按 pin 升级走 PR，先例见 .task/archive/feature-regkb-corpus-wiring.md R1） | P1 | `run.sh` 用新 pin 三阶段 PASS | RDM PR #446、KB PR #10 已合入 | 采纳 |
+
+## 方案与计划
+
+- 方案引用：无需新方案；沿用 tests/integration/regulations-kb/README.md 的 pin 升级规则
+- 实施计划引用：I1 / R1（单一实施单元）
+- 测试计划引用：R1 验收 = run.sh 三阶段 PASS + Dev CI
+
+## 阶段记录
+
+| 阶段 | 对象版本 | 状态 | 决策/执行者 | 时间 | 依据 |
+|---|---|---|---|---|---|
+| 需求拆解 | 73bc9f2 | 完成 | host | 2026-10-19 | 用户“把遗留项都处理完” |
+| 需求评估 | 73bc9f2 | 完成 | host | 2026-10-19 | R1 |
+| 需求表确认 | 73bc9f2 | 完成（既有授权） | host | 2026-10-19 | 授权行 |
+| 方案设计 | — | 不适用 | host | 2026-10-19 | 沿用 README pin 升级规则 |
+| 实施计划 | — | 完成 | host | 2026-10-19 | I1 |
+| 实施与自检 | 9df02f1 | 完成 | cursor（agent-exec） | 2026-10-19 | 收据行 |
+| 正式测试与验收 | 9df02f1 | 完成 | host | 2026-10-19 | run.sh evidence PASS；CI 待 PR HEAD |
+| 代码 Review | 9df02f1 | 通过 | host（当前主模型，非实施会话） | 2026-10-19 | diff 仅两文件、值与合入点一致 |
+| 合入 | 待定 | 待执行 | — | — | — |
+| 合入核验与收口 | 待定 | 待执行 | — | — | — |
+
+## 探索试验与迭代
+
+| 增量/试验 | 假设 | 范围 | 判断和停止条件 | 授权/决策依据 | 结果 | 变更影响 | 需重审补测 |
+|---|---|---|---|---|---|---|---|
+| 待定义 | — | — | — | 待核对 | NOT_RUN | 待评估 | 待评估 |
+
+## 同步记录
+
+| 节点 | sync_base_sha | tested_head_sha | checked_at |
+|---|---|---|---|
+| 启动 | 73bc9f208103ec1b9b83775ca65fee12f79ba99e | 73bc9f208103ec1b9b83775ca65fee12f79ba99e | 2026-10-19T07:41:07Z |
+
+## 证据（Evidence）
+
+<!-- CMD="<命令>" make evidence 写入；手抄/转写输出视为无效证据（AGENTS.md 证据与验证门禁）。 -->
+| 时间(UTC) | 命令 | 被测HEAD | exit | 来源 | sha256(16) |
+|---|---|---|---|---|---|
+
+## 交付调度
+
+- 调度状态：未入队；调度记录：无
+- entry_id：无；attempt_id：无；窗口执行者：无
+- 固定候选：无（base/head、组件与相关配置引用实际尝试）
+- 调度依据：policy/delivery.md#合入调度
+- 固定后证据：源码外 RECEIPT；实际结果后按授权原样导入和闭合
+
+## 结果与验证
+
+- 结果：`components.pin` → rdm_sha=8a396cf（RDM PR #446 合入点，KB gitlink b481173）、kb_sha=a8dc714（KB PR #10 合入点）；README 固定组件描述同步。
+- 验证：
+  - 组合门禁 `bash /tmp/regkb-gate/gate.sh`（包装 run.sh：RDM 8a396cf、KB a8dc714 的 /tmp 分离克隆且子模块递归物化，一次性 pgvector:pg16 测试库，pg16 客户端经 docker shim，扫描目录为 8788 已部署同版本前端产物 runtime/dev/current/htdocs，环境不含任何真实 KBREG_*）：kb-test-pg PASS、rdm-kbreg PASS、client-asset-secret-scan PASS（SELF，见文末 evidence）。
+  - 首次运行 kb-test-pg FAIL：本机仅有 pg18 客户端，pg_restore 输出 `SET transaction_timeout` 而 pg16 服务端不识别（环境问题，非代码）；改用 pg16 客户端 shim 后重跑通过。两次记录均保留。
+  - 权威：PR HEAD CI（GATE）。
+- 影响与剩余项：仅门禁 pin 与说明；未做带真实 KBREG_* 凭据的附加扫描（非阻塞，8788 产物与 RDM PR #446 同版本）。
+
+## 规划进展与下一步
+
+- 本次推进/剩余：待核对（依据实际成果更新适用方案/规划）
+- 首选下一任务：待核对（无适用规划、已完成或受阻时如实说明，不虚构任务）
+- 推荐依据：待填写
+- 前置条件/待确认：待核对
+- 预期产物/验收条件：待定义
+- 重复任务核对：待核对（已有/在途任务、PR 与规划记录）
+- 启动授权：未授权（建议不自动启动新任务，仍须明确授权）
+
+## 合入与清理
+
+- Review 记录：host 当前主模型（非实施会话），base 73bc9f2 / head 9df02f1，结论通过；重放依据：门禁 evidence 与 PR HEAD CI。
+- 冲突记录：NOT_RUN（最新目标同步、冲突处置、组合兼容核验及复审/补测）
+- CI 记录：NOT_RUN（当前 HEAD 完整 SHA、全部必需检查、运行链接、执行身份及 GATE 结果）
+- 合入记录：NOT_RUN（交付授权范围、PR、被核验 HEAD、合入 SHA、目标分支及内容核验）
+- 清理记录：NOT_RUN（授权依据、写者退出确认、worktree/分支/任务卡处置）
+
+<!-- Local receipt: SELF. Digests detect corruption; they do not authenticate a reviewer or CI. -->
+```json
+{
+  "summary_schema": 1,
+  "source": "SELF",
+  "timestamp": "2026-10-19T07:40:07.813215+00:00",
+  "command": "make precheck",
+  "exit_code": 0,
+  "cwd": "/home/weichen/projects/Agent-System-Dev",
+  "before_head": "73bc9f208103ec1b9b83775ca65fee12f79ba99e",
+  "after_head": "73bc9f208103ec1b9b83775ca65fee12f79ba99e",
+  "branch": "main",
+  "target_branch": "main",
+  "target_head": "73bc9f208103ec1b9b83775ca65fee12f79ba99e",
+  "root_target": "main",
+  "immediate_target": "main",
+  "before_tracked_diff_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+  "after_tracked_diff_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+  "output_tail": [
+    "make[1]: Entering directory '/home/weichen/projects/Agent-System-Dev'",
+    "[repo]   branch=main head=73bc9f2081",
+    "[remote] origin/main=73bc9f2081 ahead=0 behind=0",
+    "[tree]   clean submodules_drift=0 uninit=13",
+    "[warn] 13 个子模块未初始化——构建/测试前需物化（不阻断写入）",
+    "[worktrees] linked=5",
+    "[recycle] merged un-recycled branches: feature/layered-python-env",
+    "[initiatives] local cards (not authoritative): none",
+    "[hooks]   core.hooksPath=scripts/hooks（pre-commit/post-merge 实际接线）",
+    "[facts]   policy/facts.md 6 条事实均在有效期内",
+    "[required-reading] core/baseline.md, workflows/delivery.md §1, policy/delivery.md",
+    "[R0] 73bc9f2081（完整：73bc9f208103ec1b9b83775ca65fee12f79ba99e）",
+    "[worktree] before-sync: recursive component checks passed",
+    "[verdict] READY — 保留本次 precheck receipt 后建任务工作区：PRECHECK_RECEIPT=/tmp/task-precheck.json make task-start NAME=feature/your-branch",
+    "make[1]: Leaving directory '/home/weichen/projects/Agent-System-Dev'"
+  ],
+  "output_sha256": "59a81201bf182872c3cad7aeae8fdb9a114d04d6b11c81c5272b6a2b80d3d5a0",
+  "receipt_sha256": "a629930f73c1d4cd230ad65118824144e9a3ace6321db4058817cf9e6354c263",
+  "receipt_path": "/home/weichen/.cache/agent-system-dev/evidence/a629930f73c1d4cd230ad65118824144e9a3ace6321db4058817cf9e6354c263.json"
+}
+```
+
+<!-- Local receipt: SELF. Digests detect corruption; they do not authenticate a reviewer or CI. -->
+```json
+{
+  "summary_schema": 1,
+  "source": "SELF",
+  "timestamp": "2026-10-19T07:43:42.295620+00:00",
+  "command": "bash /tmp/regkb-gate/gate.sh",
+  "exit_code": 1,
+  "cwd": "/home/weichen/projects/Agent-System-Dev-wt-feature-regkb-components-pin-8a396cf",
+  "before_head": "9df02f1400421a8549b4c5d36b5644ffcbc01a36",
+  "after_head": "9df02f1400421a8549b4c5d36b5644ffcbc01a36",
+  "branch": "feature/regkb-components-pin-8a396cf",
+  "target_branch": "main",
+  "target_head": "73bc9f208103ec1b9b83775ca65fee12f79ba99e",
+  "root_target": "main",
+  "immediate_target": "main",
+  "before_tracked_diff_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+  "after_tracked_diff_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+  "output_tail": [
+    "    restore_test.go:49: pg_restore failed: exit status 1",
+    "        pg_restore: error: could not execute query: ERROR:  unrecognized configuration parameter \"transaction_timeout\"",
+    "        Command was: SET transaction_timeout = 0;",
+    "FAIL",
+    "FAIL\tagent-system-kb-regulations/tests/pg\t6.376s",
+    "ok  \tagent-system-kb-regulations/tests/provider\t1.858s",
+    "ok  \tagent-system-kb-regulations/tests/retrieval\t4.734s",
+    "ok  \tagent-system-kb-regulations/tests/webcapture\t0.006s",
+    "ok  \tagent-system-kb-regulations/tests/websearch\t0.156s",
+    "FAIL",
+    "make[1]: *** [Makefile:22: test-pg] Error 1",
+    "make[1]: Leaving directory '/tmp/regkb-gate/kb'",
+    "FAIL kb-test-pg",
+    "=== stage rdm-kbreg ===",
+    "ok  \tagent-system-rdm/plugins/kbreg\t0.005s",
+    "ok  \tagent-system-rdm/internal/rdmapp\t1.097s",
+    "ok  \tagent-system-rdm/internal/rdmapp/dhffidelity\t0.002s [no tests to run]",
+    "ok  \tagent-system-rdm/internal/rdmapp/dhfmatrix\t0.002s [no tests to run]",
+    "ok  \tagent-system-rdm/plugins/rdm\t0.066s",
+    "PASS rdm-kbreg",
+    "=== stage client-asset-secret-scan =<redacted>",
+    "scan: /home/weichen/projects/Agent-System-Dev/runtime/dev/current/htdocs",
+    "scan: 已核对 0 个凭据变量：<无>",
+    "PASS client-asset-secret-scan",
+    "regulations-kb: FAIL"
+  ],
+  "output_sha256": "d72c4f9bf6b1c965843765eb9c16360e9263a11f97f9cb5d021f7a1f2974585b",
+  "receipt_sha256": "d6e164e4dc38dae24c14b8314384b5fdd6441a26f89a89af789f97645bbe626c",
+  "receipt_path": "/home/weichen/.cache/agent-system-dev/evidence/d6e164e4dc38dae24c14b8314384b5fdd6441a26f89a89af789f97645bbe626c.json"
+}
+```
+
+<!-- Local receipt: SELF. Digests detect corruption; they do not authenticate a reviewer or CI. -->
+```json
+{
+  "summary_schema": 1,
+  "source": "SELF",
+  "timestamp": "2026-10-19T07:44:22.804790+00:00",
+  "command": "bash /tmp/regkb-gate/gate.sh",
+  "exit_code": 0,
+  "cwd": "/home/weichen/projects/Agent-System-Dev-wt-feature-regkb-components-pin-8a396cf",
+  "before_head": "9df02f1400421a8549b4c5d36b5644ffcbc01a36",
+  "after_head": "9df02f1400421a8549b4c5d36b5644ffcbc01a36",
+  "branch": "feature/regkb-components-pin-8a396cf",
+  "target_branch": "main",
+  "target_head": "73bc9f208103ec1b9b83775ca65fee12f79ba99e",
+  "root_target": "main",
+  "immediate_target": "main",
+  "before_tracked_diff_sha256": "c16b5fa7da0eba8239a45cc6a61b9cbb8b98d208cafe4ad5c173b31a4b9a5ad2",
+  "after_tracked_diff_sha256": "c16b5fa7da0eba8239a45cc6a61b9cbb8b98d208cafe4ad5c173b31a4b9a5ad2",
+  "output_tail": [
+    "?   \tagent-system-kb-regulations/migrations\t[no test files]",
+    "ok  \tagent-system-kb-regulations/pkg/kbprovider\t0.220s",
+    "ok  \tagent-system-kb-regulations/tests/characterization\t0.003s",
+    "ok  \tagent-system-kb-regulations/tests/evidence\t0.396s",
+    "ok  \tagent-system-kb-regulations/tests/ingest\t0.912s",
+    "ok  \tagent-system-kb-regulations/tests/integration\t2.079s",
+    "ok  \tagent-system-kb-regulations/tests/pg\t2.672s",
+    "ok  \tagent-system-kb-regulations/tests/provider\t0.670s",
+    "ok  \tagent-system-kb-regulations/tests/retrieval\t1.646s",
+    "ok  \tagent-system-kb-regulations/tests/webcapture\t0.007s",
+    "ok  \tagent-system-kb-regulations/tests/websearch\t0.157s",
+    "make[1]: Leaving directory '/tmp/regkb-gate/kb'",
+    "PASS kb-test-pg",
+    "=== stage rdm-kbreg ===",
+    "ok  \tagent-system-rdm/plugins/kbreg\t0.005s",
+    "ok  \tagent-system-rdm/internal/rdmapp\t1.363s",
+    "ok  \tagent-system-rdm/internal/rdmapp/dhffidelity\t0.002s [no tests to run]",
+    "ok  \tagent-system-rdm/internal/rdmapp/dhfmatrix\t0.002s [no tests to run]",
+    "ok  \tagent-system-rdm/plugins/rdm\t0.064s",
+    "PASS rdm-kbreg",
+    "=== stage client-asset-secret-scan =<redacted>",
+    "scan: /home/weichen/projects/Agent-System-Dev/runtime/dev/current/htdocs",
+    "scan: 已核对 0 个凭据变量：<无>",
+    "PASS client-asset-secret-scan",
+    "regulations-kb: PASS"
+  ],
+  "output_sha256": "cedc9f4a34722d89b9eea0eeff55513ace81ea18e7ba799ac9a311a511c71fa7",
+  "receipt_sha256": "446bafe95318962588c68371669af91b7edf017e3477d1be9689c419d7bf79f1",
+  "receipt_path": "/home/weichen/.cache/agent-system-dev/evidence/446bafe95318962588c68371669af91b7edf017e3477d1be9689c419d7bf79f1.json"
+}
+```
+
+<!-- Local receipt: SELF. Digests detect corruption; they do not authenticate a reviewer or CI. -->
+```json
+{
+  "summary_schema": 1,
+  "source": "SELF",
+  "timestamp": "2026-10-19T07:46:04.021937+00:00",
+  "command": "bash /tmp/regkb-gate/gate.sh",
+  "exit_code": 0,
+  "cwd": "/home/weichen/projects/Agent-System-Dev-wt-feature-regkb-components-pin-8a396cf",
+  "before_head": "fa65f5cff9ab6550b8b6f6f3da20e9d4b5770762",
+  "after_head": "fa65f5cff9ab6550b8b6f6f3da20e9d4b5770762",
+  "branch": "feature/regkb-components-pin-8a396cf",
+  "target_branch": "main",
+  "target_head": "73bc9f208103ec1b9b83775ca65fee12f79ba99e",
+  "root_target": "main",
+  "immediate_target": "main",
+  "before_tracked_diff_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+  "after_tracked_diff_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+  "output_tail": [
+    "?   \tagent-system-kb-regulations/migrations\t[no test files]",
+    "ok  \tagent-system-kb-regulations/pkg/kbprovider\t0.218s",
+    "ok  \tagent-system-kb-regulations/tests/characterization\t0.003s",
+    "ok  \tagent-system-kb-regulations/tests/evidence\t0.362s",
+    "ok  \tagent-system-kb-regulations/tests/ingest\t0.833s",
+    "ok  \tagent-system-kb-regulations/tests/integration\t1.878s",
+    "ok  \tagent-system-kb-regulations/tests/pg\t2.333s",
+    "ok  \tagent-system-kb-regulations/tests/provider\t0.593s",
+    "ok  \tagent-system-kb-regulations/tests/retrieval\t1.499s",
+    "ok  \tagent-system-kb-regulations/tests/webcapture\t0.005s",
+    "ok  \tagent-system-kb-regulations/tests/websearch\t0.156s",
+    "make[1]: Leaving directory '/tmp/regkb-gate/kb'",
+    "PASS kb-test-pg",
+    "=== stage rdm-kbreg ===",
+    "ok  \tagent-system-rdm/plugins/kbreg\t0.005s",
+    "ok  \tagent-system-rdm/internal/rdmapp\t0.995s",
+    "ok  \tagent-system-rdm/internal/rdmapp/dhffidelity\t0.002s [no tests to run]",
+    "ok  \tagent-system-rdm/internal/rdmapp/dhfmatrix\t0.003s [no tests to run]",
+    "ok  \tagent-system-rdm/plugins/rdm\t0.070s",
+    "PASS rdm-kbreg",
+    "=== stage client-asset-secret-scan =<redacted>",
+    "scan: /home/weichen/projects/Agent-System-Dev/runtime/dev/current/htdocs",
+    "scan: 已核对 0 个凭据变量：<无>",
+    "PASS client-asset-secret-scan",
+    "regulations-kb: PASS"
+  ],
+  "output_sha256": "ae675a764a6685984f28af13525baddcbeaa81c57a8dfe8d42730b81d8f5c532",
+  "receipt_sha256": "f8b74415b0beee1e50ffd259874c92b75709c26f2b3bdfa2e856f5b1bfb94050",
+  "receipt_path": "/home/weichen/.cache/agent-system-dev/evidence/f8b74415b0beee1e50ffd259874c92b75709c26f2b3bdfa2e856f5b1bfb94050.json"
+}
+```
+
+## 闭合记录（合入前折叠）
+
+- 本卡在 PR #631（https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Dev/pulls/631）合入前闭合并归档，随该 PR 一同合入。
+- 该 PR 的合并提交即本任务的落地记录。
+- 合入后无需回填，也无需单独的闭合 PR。
+| 同步（记录前对象） | 38ac2b0687514b480cc61dec425e1affb37c6295 | 439678745324aad01570b05ac2bb085a0057ac32 | 2026-10-19T08:11:23Z |
@@ -10,8 +10,8 @@

 `components.pin` 只有两个键，均为 40 位 hex，`run.sh` 逐行解析、从不执行：

- `rdm_sha`：Agent-System-RDM main（PR #442 合入，`pins/agent-system-kb-regulations` 指向 `kb_sha`）。
- `kb_sha`：Agent-System-KB-Regulations main（含 zhipu-mcp 搜索 provider、语料批量导入/抓取/审批工具与 HTTP 嵌入维度修复）。
+- `rdm_sha`：Agent-System-RDM main（PR #446 合入，经 backend pin 内置 `regulations_search`/`regulation_evidence` 对话工具；`pins/agent-system-kb-regulations` 为 `b481173`，包含于 `kb_sha`）。
+- `kb_sha`：Agent-System-KB-Regulations main（PR #10 合入，在既有 zhipu-mcp 搜索 provider、语料批量导入工具与 HTTP 嵌入维度修复之上新增标准号检索文本）。

 `run.sh` 先核对两个检出的 HEAD 等于 pin，再核对 RDM 检出中
 `pins/agent-system-kb-regulations` gitlink 是 KB 检出里 `kb_sha` 的祖先（RDM 编译所用 KB 代码包含在被测修订中）。
@@ -1,6 +1,6 @@
 # 法规知识库组合门禁的固定组件（U8）。只接受 rdm_sha、kb_sha 两个键，值为 40 位 hex。
 # run.sh 逐行解析本文件，不执行、不 source。升级走 PR。
-# rdm_sha：RDM main，PR #442 合入，pins/agent-system-kb-regulations 指向 kb_sha。
-# kb_sha：KB-Regulations main，含 zhipu-mcp 搜索 provider、语料批量导入/抓取/审批工具与 HTTP 嵌入维度修复；须包含 RDM pins/agent-system-kb-regulations。
-rdm_sha=377d42767f64aab494a51ebb915a738fe4ede095
-kb_sha=393555bec8d964f294f932616aa69ab833a06de1
+# rdm_sha：RDM main，PR #446 合入，经 backend pin 内置 regulations_search/regulation_evidence 对话工具；pins/agent-system-kb-regulations 为 b481173，包含于 kb_sha。
+# kb_sha：KB-Regulations main，PR #10 合入，在既有 zhipu-mcp 搜索 provider、语料批量导入工具与 HTTP 嵌入维度修复之上新增标准号检索文本；须包含 RDM pins/agent-system-kb-regulations。
+rdm_sha=8a396cf693b5daf32cf93cbdb10e28baf753573d
+kb_sha=a8dc714dcb0fdf88364c9581661f1589e0a3caad