验证：SELF，最终固定组合 1c799327148fa3ea6b1086a0fc98d4b45d2d7548 的 make test && make build exit 0，含 94 项治理回归；完整输出与对象来自下方工具收据。审查修复另有独立 REPLAY 记录，远端 CI 结果待 PR 运行后关联。
影响与剩余项：main 未合入、未部署/发布。平台必需 CI 尚未启用；分支保护变更按双钥匙规则由所有者执行 policy/platform-admission.md。ZCode 真实客户端接线仍 pending-live，不以脚本测试代替。
Why: cleanup, component synchronization, receipt recording and credential handling could contradict the documented development boundaries.
Evidence: SELF 75 isolated governance tests and source checks are captured in .task/feature-governance-reliability.md; combination and CI verification follow.
Impact: hardens local task and CI tooling, aligns policy and component documentation, and adds continuous regression tests without changing product behavior.
Refs: .task/feature-governance-reliability.md; policy/governance.md; policy/platform-admission.md
Why: retain complete tool-generated local verification for the governance repair candidate.
Evidence: SELF task-sync, 75 governance tests, full make test, make build and syntax checks are recorded in the task card.
Impact: evidence metadata only; product and gate implementations are unchanged.
Refs: .task/feature-governance-reliability.md
Why: independent review found shared submodule metadata risk, quoted header leakage, stale JSON receipt blindness and missing abandon coverage.
Evidence: SELF 92 governance regressions pass; the original review receipt and replay output are recorded in the task card.
Impact: preserves external component worktrees, handles both evidence formats and adds targeted failure-path coverage; no product behavior changes.
Refs: .task/feature-governance-reliability.md; .task/reviews/governance-reliability.json
Why: main advanced with merged-task-name and legacy evidence guards during this task.
Evidence: SELF 44 lifecycle regressions pass after resolving both hunks; independent review repairs are recorded in the task card.
Impact: retains both task-start protections and the stronger JSON/legacy receipt reader, without rewriting either branch history.
Refs: Dev PR #211 and #212; .task/feature-governance-reliability.md
Why: bind the reviewable governance repair to the synchronized candidate and related component PRs.
Evidence: tool-generated SELF make test and make build output plus independent repair REPLAY records in the task card.
Impact: task metadata only; platform protection and deployment remain owner-controlled.
Refs: .task/feature-governance-reliability.md
Why: the owner authorized conflict-free integration and safe worktree cleanup after verification.
Evidence: final fixed combination passes make test and make build; full outputs and review replay records are in the task card.
Impact: authorization and evidence metadata only; no source or component change.
Refs: .task/feature-governance-reliability.md
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
开发门禁现在保护未保存工作、核对实际组件版本，并记录可复核的脱敏证据。正文从任务卡生成；完整命令输出见固定版本任务卡。
feature/governance-reliability 任务卡
任务主记录：本 PR；状态：待审核；owner：weichen
基线与授权
43d33aa492目标与非目标
修复回收丢工作、组件同步漂移、证据管道/脱敏/来源、启动收据闭环、远端新鲜度、写守卫和 CI 凭据边界；对齐规则、提交格式、堆叠分支及子仓入口，加入持续治理回归。保持产品运行行为与高后果双钥匙边界。
同步记录
43d33aa49243d33aa492证据（Evidence）
结果与验证（完成后填写）
1c799327148fa3ea6b1086a0fc98d4b45d2d7548的make test && make buildexit 0，含 94 项治理回归；完整输出与对象来自下方工具收据。审查修复另有独立 REPLAY 记录，远端 CI 结果待 PR 运行后关联。policy/platform-admission.md。ZCode 真实客户端接线仍 pending-live，不以脚本测试代替。实施与验收安排
cat /tmp/governance-precheck-20261005.json归档原工具捕获的完整结果（SELF）。该 cat 命令仅保全旧工具输出，不冒充重新执行 precheck；原执行时未采集新 schema 的完整快照，此限制保留。| 同步前验收 |
43d33aa492|8af945a1d5| 2026-10-05T12:36:27Z |独立审查与修复跟踪
.task/reviews/governance-reliability.json，run20261005-123925-a2fa0a6f；7 个本地审查方向完成，审查对象 c0abfb0。Claude 补充审查超时，无可用结果，不计独立佐证。合流与复验
b84667a上独立重放关闭（REPLAY：42 个生命周期用例、31 个证据用例）；原始机器记录见.task/reviews/governance-repair-verification.json。| 同步前验收 |
fd442d933c|c1fdf0141c| 2026-10-05T13:12:15Z |组件 PR 与合入顺序
2cb1496320dda6e65501ac94318295f067231dd7。19e89ae10bd93306400f13a9a1f449cbc5bfaa42。cf2615def6db90f60006fc60c5584c3166a2748e。UI 与 Documents 先由所有者审核合入，再审核 Dev 固定组合。Core 仅修正其当前 main 的项目事实，独立合入；Dev 保留原 Core gitlink，未捎带升级已有公共契约。
运行与回退
本轮改变开发工具，不部署产品。首次使用新规则核对启动收据、同步后的组件 SHA、失败证据退出码与回收拒绝理由；出现非预期拒绝先保留现场，再由所有者按普通 PR 回退工具变更。回退不复原已发生的外部动作，不能启用旧的不安全强删兜底。
| 同步前验收 |
fd442d933c|d96e4ae016| 2026-10-05T13:16:46Z |