Bump backend to the command-audit owner-scoping fix (Backend #104) #262

2026-10-08T14:07:06Z

weichen commented

2026-10-08 14:07:06 +00:00

任务卡

.task/feature-command-audit-owner-scoping.md（本 PR 内；需求表 R1、方案、红/绿证据与三段输出以任务卡为准）。

内容

modules/backend gitlink → e0b1c27（Backend PR #104）：GET /api/commands/audit 跨租户泄漏修复——v18 迁移加 command_audit.owner 列（存量按 payload.actor 回填）+ 索引；AppendAudit/ListAudits 按租户写入过滤；cmdbus 端口与 server 处理器传认证 owner。不改 pkg/extension 公开面。
任务卡：需求/方案/红→绿证据（红 a7cc69b 泄漏复现 FAIL；绿 e0b1c27 全量 32/32 包 ok）、make test×2、task-sync。

来源

RDM 仓 U0 提案 §5 C7 附带安全发现（RDM PR #105）；用户 2026-10-08「继续推进」授权首推任务。

状态

待人工评审，不合入。CI（PR HEAD make test+make build）为测试通过权威源，状态将核对后记入任务卡。

## 任务卡 `.task/feature-command-audit-owner-scoping.md`（本 PR 内；需求表 R1、方案、红/绿证据与三段输出以任务卡为准）。 ## 内容 - `modules/backend` gitlink → `e0b1c27`（Backend PR #104）：`GET /api/commands/audit` 跨租户泄漏修复——v18 迁移加 `command_audit.owner` 列（存量按 payload.actor 回填）+ 索引；`AppendAudit/ListAudits` 按租户写入过滤；cmdbus 端口与 server 处理器传认证 owner。**不改 pkg/extension 公开面。** - 任务卡：需求/方案/红→绿证据（红 `a7cc69b` 泄漏复现 FAIL；绿 `e0b1c27` 全量 32/32 包 ok）、make test×2、task-sync。 ## 来源 RDM 仓 U0 提案 §5 C7 附带安全发现（RDM PR #105）；用户 2026-10-08「继续推进」授权首推任务。 ## 状态 **待人工评审，不合入**。CI（PR HEAD make test+make build）为测试通过权威源，状态将核对后记入任务卡。

weichen added 8 commits 2026-10-08 14:07:06 +00:00

Record the task card for feature-command-audit-owner-scoping c0c6e3d896

Why: establish the authorized task workspace and its initial baseline.

Evidence: preserved precheck receipt in .task/feature-command-audit-owner-scoping.md; R0=34a2bbe15793f7cf91ffd907123deb4113230794.

Impact: task metadata only; the feature workspace starts at 34a2bbe157.

Refs: .task/feature-command-audit-owner-scoping.md

Fill the audit owner-scoping task card 9bc9b6e445

Why: The fix must carry its requirement row, design choice, and authorization boundary before implementation starts.
Evidence: Source citations verified at Dev 34a2bbe (backend fe7c245) in the U0 review.
Impact: Task card only.
Refs: RDM PR #105 U0 proposal section 5 C7 / 11.1; user go-ahead 2026-10-08.

Record the red-test evidence row (expected failure) 74e4d3690c

Why: Red-before-fix is only credible with a tool-written row tying the failing run to the backend commit.
Evidence: Row exit=1 at backend a7cc69b (cross-tenant rows returned).
Impact: Task card only.
Refs: Task card R1.

Record the green backend suite evidence row adce0eed2e

Why: The fix commit's pass claim must be a tool-written row pinned to the backend commit.
Evidence: Row exit=0 at backend e0b1c27 (go test ./... all ok).
Impact: Task card only.
Refs: Task card R1.

Bump backend gitlink to the audit owner-scoping fix 32430f9b8f

Why: The Dev combination must pin the backend commit that closes the cross-tenant audit leak; make test then validates the fixed combination.
Evidence: modules/backend gitlink -> e0b1c27 (Backend PR #104); make test row follows on the task card.
Impact: Gitlink only; other pins unchanged.
Refs: Backend PR #104; task card R1.

Record make test evidence row for the bumped combination 01f492b8df

Why: Composition validation (make test) at the new gitlink is the Dev-side gate for the fix.
Evidence: make test exit=0 (governance + pins + all module suites at backend e0b1c27).
Impact: Task card only.
Refs: Task card R1.

Record the sync checkpoint 82a55e87af

Why: bind the task validation checkpoint to the latest integration baseline.

Evidence: SELF recursive component checks; sync_base=34a2bbe15793f7cf91ffd907123deb4113230794; candidate=01f492b8df6777b93de6982caca1e04c5dc9e280.

Impact: task metadata only.

Refs: .task/feature-command-audit-owner-scoping.md

Record sync/tip-test evidence and fill the result summary

ci / test (pull_request) Successful in 2m50s

Details

b22e7fd6c4

Why: Closing outputs must be tool-written rows plus a summary that distinguishes SELF from pending GATE.
Evidence: task-sync exit=0 (34a2bbe->tip); make test exit=0 at tip.
Impact: Task card only.
Refs: Task card R1.

weichen referenced this issue from a commit

2026-10-08 14:07:26 +00:00

Backfill the PR links as the task master record

weichen added 1 commit 2026-10-08 14:07:26 +00:00

Backfill the PR links as the task master record

ci / test (pull_request) Successful in 2m33s

Details

b636439b44

Why: The card must reference its real Dev and component PRs once created.
Evidence: Dev PR #262 open mergeable:true; Backend PR #104 open mergeable:true (API).
Impact: Task card only.
Refs: Card-close convention.

weichen added 1 commit 2026-10-08 14:13:05 +00:00

Record GATE CI statuses for both PR heads

ci / test (pull_request) Successful in 2m39s

Details

4d8d6f095b

Why: CI on PR HEAD is the authoritative test source; the card must distinguish it from SELF rows.
Evidence: Backend#104 success (vet-and-test); Dev#262 success (ci/test) after pending->success polling.
Impact: Task card only.
Refs: AGENTS.md evidence gate.

weichen referenced this pull request

2026-10-08 15:38:03 +00:00

Bump backend to the EXT-8 authorizer slice (Backend #105, supersedes #262) #265

weichen referenced this issue from a commit

2026-10-08 15:42:14 +00:00

Merge pull request 'Bump backend to the EXT-8 authorizer slice (Backend #105, supersedes #262)' (#265) from feature/ext-8-resource-authorizer into main

weichen closed this pull request

2026-10-08 15:42:31 +00:00