Why: establish the authorized task workspace and its initial baseline.
Evidence: preserved precheck receipt in .task/feature-ext-8-resource-authorizer.md; R0=27885ceb3e6c774495b61e07f560efa1a51855fc.
Impact: task metadata only; the feature workspace starts at 27885ceb3e.
Refs: .task/feature-ext-8-resource-authorizer.md
Why: EXT-8 is accepted (Documents #49) and is the U0 step-4 critical path; the backend branch stacks on the audit-fix head (parent PR #104) to avoid a second gitlink conflict.
Evidence: Documents #49 and Dev #263 merged this session; parent head e0b1c27 pushed.
Impact: Task card only.
Refs: EXT proposal EXT-8; U0 section 5 C4 / section 10 step 4.
Why: Red run must be tool-pinned to the backend commit before the consultation lands.
Evidence: Row exit=1 at backend tip (shared read 404 with adapter set).
Impact: Task card only.
Refs: Task card.
Why: The Dev combination must pin the EXT-8 commit; make test validates the fixed combination (which also carries the audit fix via stacking).
Evidence: modules/backend -> a4783d18e7156e4f48188e6816be865ed82380f6 (Backend PR #105, stacked on #104).
Impact: Gitlink only; other pins unchanged.
Refs: Backend PR #105; task card.
Why: CI on PR HEAD is the authoritative gate before merge.
Evidence: Backend#105 success; Dev#265 success (polled pending->success).
Impact: Task card only.
Refs: AGENTS.md evidence gate.
weichen
merged commit 7b44f61944 into main2026-10-08 15:42:13 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
任务卡
.task/feature-ext-8-resource-authorizer.md(本 PR 内;堆叠披露、红/绿证据、切片边界以任务卡为准)。内容
modules/backendgitlink → EXT-8 切片(Backend PR #105,堆叠于 #104 之上——本 PR 包含审计跨租户修复的全部内容;#262 可由此 PR 取代/关闭)。Registry.RegisterResourceAuthorizer+ResourceAuthorizer,SurfaceVersion 2.1.0-experimental;工件三读取入口 owner 未命中→适配器→共享只读;默认拒/fail-closed。SSE 项目流、项目收件箱聚合、知识检索跨 owner 显式延后(切片 2,见卡)。验证
Backend 红→绿+全量 32/32(SELF 行在卡);Dev
make test×2、task-sync PASS;CI(GATE)状态将核查后记录。状态
按用户目标级流程授权(含合入清理):CI 绿后合入。