U2: enforce creator management authority in RDM projects #640
@@ -0,0 +1,132 @@
|
||||
# feature/project-access-lifecycle-u2-creator-management 任务卡
|
||||
|
||||
任务主记录:PR #640 https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Dev/pulls/640;状态:已完成(合入前闭合);owner:weichen
|
||||
|
||||
- 权威仓:ssh://git@git-ssh.u1680832.nyat.app:31411/weichen/Agent-System-Dev.git;目标分支:main;R0(initial_base_sha)= 2b7fdc39a1f44163f4766701429d61ffd6926f1a
|
||||
- 工作区:/home/weichen/projects/Agent-System-Dev-wt-feature-project-access-lifecycle-u2-creator-management(worktree);分支:feature/project-access-lifecycle-u2-creator-management
|
||||
- 分支类型:child;initiative_id:feature-project-access-lifecycle;root_target:main;immediate_target:feature/project-access-lifecycle;accepting_requirements:false;parent_branch:feature/project-access-lifecycle;parent_head_sha:a32e2227b0d4f77c15581fdc475a22edc4d10823;parent_pr:无;parent_source:origin
|
||||
- 需求分流:免(父 initiative 子任务登记已列出 feature/project-access-lifecycle-u2-creator-management;parent_head_sha=a32e2227b0d4f77c15581fdc475a22edc4d10823)
|
||||
|
||||
- 授权与交付终点:<本次允许的动作与终点;未授权事项写明>
|
||||
- 交付模式:goal-first(目标、范围和交付终点一次确认;范围内连续推进)
|
||||
- 实施执行:agent-per-unit(配置:AGENT-EXECUTION.md)
|
||||
- 合入执行:agent(已授权交付范围内,Review 通过、冲突解决且当前 HEAD 的 CI 通过后合入)
|
||||
- 流程依据:仓库根目录 policy/delivery.md(归档后仍按仓库根目录定位)
|
||||
|
||||
## 目标与非目标
|
||||
|
||||
<预期结果、受影响入口/模块/契约;明确不做什么。>
|
||||
|
||||
## Agent 实施收据
|
||||
|
||||
路由与 fail-stop 规则见根目录 AGENT-EXECUTION.md 与 policy/delivery.md;每次尝试一行,原始日志留在源码外收据路径。
|
||||
|
||||
| 单元 ID | 预期范围 | 配置摘要 | 角色 | 候选顺序 | attempt | CLI/模型 | 终态 | transport | fallback | 源码外收据路径 |
|
||||
|---|---|---|---|---|---|---|---|---|---|---|
|
||||
| 待定义 | — | NOT_RUN | NOT_RUN | NOT_RUN | NOT_RUN | NOT_RUN | NOT_RUN | NOT_RUN | NOT_RUN | — |
|
||||
|
||||
## 同步记录
|
||||
|
||||
| 节点 | sync_base_sha | tested_head_sha | checked_at |
|
||||
|---|---|---|---|
|
||||
| 启动 | 2b7fdc39a1f44163f4766701429d61ffd6926f1a | a32e2227b0d4f77c15581fdc475a22edc4d10823 | 2026-10-19T16:34:33Z |
|
||||
|
||||
## 证据(Evidence)
|
||||
|
||||
<!-- CMD="<命令>" make evidence 写入;手抄/转写输出视为无效证据(AGENTS.md 证据与验证门禁)。 -->
|
||||
| 时间(UTC) | 命令 | 被测HEAD | exit | 来源 | sha256(16) |
|
||||
|---|---|---|---|---|---|
|
||||
|
||||
| pal-u2 RDM | creator 管理权威收敛(有效项目访问+精确 createdBy;override 不增不减)+ 旧语义测试重写 | AGENT-EXECUTION digest | implementation | cursor→agy→pi | 16 次运行:2 次 cursor 网络 TLS 失败、2 次合理 scope-expansion(perms_api.go/测试文件)、2 次 local_config(worker 跑 submodule update 触发监管)、2 次 blocked(pins 嵌套依赖缺失)、1 次终态记录失足、其余为逐轮修正重派;末次 success | cursor(R10 配方:-modfile 覆盖 + pin 自愈;session not-observable) | success | 已应用 853121d(5a27d78→853121d,RDM 仓分支 feature/project-access-lifecycle-u2-creator-management 已推送) | never | /tmp/pal-u2-run*.json(run16 为成功收据) |
|
||||
|
||||
| pal-u2 Review 修复 | fail-open 旁路修复(legacy 模式 fail-closed)+ 13 个 Skip 回归测试恢复 | AGENT-EXECUTION digest | repair | cursor→agy→pi | 2 次运行(首次终态记录失足,第二次 success) | cursor(session not-observable) | success | 已应用 aa1a7d2(853121d→aa1a7d2) | never | /tmp/pal-u2-fix2-run.json、fix2b-run.json |
|
||||
|
||||
## 结果与验证
|
||||
|
||||
- 结果:
|
||||
- 验证:<结论摘要 PASS/FAIL/SKIP/NOT_RUN 逐项;逐条证据由 make evidence 写入上方证据表>
|
||||
- 影响与剩余项:
|
||||
|
||||
## 合入与清理
|
||||
|
||||
- Review 记录:独立审查(全新 cursor 会话,未参与实现;输出 /tmp/pal-u2-review-output.txt)结论 BLOCKED(2):①legacy readiness 模式管理判定 fail-open;②13 个 host_projection 回归测试被 Skip。两项已由 repair(aa1a7d2)修复:fail-closed 语义 + 全部恢复并按新语义通过;rdmapp 全量 3 包 ok、Skip=0。非阻塞建议 3 条(canManageProject 死参数收敛、成员入口重复调用清理、场景映射注释)留后续增量。(审阅智能体/平台身份、base/head、结论、问题闭合及重放依据)
|
||||
- 冲突记录:NOT_RUN(最新目标同步、冲突处置、组合兼容核验及复审/补测)
|
||||
- CI 记录:NOT_RUN(当前 HEAD 完整 SHA、全部必需检查、运行链接、执行身份及 GATE 结果)
|
||||
- 合入记录:NOT_RUN(交付授权范围、PR、被核验 HEAD、合入 SHA、目标分支及内容核验)
|
||||
- 清理记录:NOT_RUN(授权依据、写者退出确认、worktree/分支/任务卡处置)
|
||||
|
||||
<!-- Local receipt: SELF. Digests detect corruption; they do not authenticate a reviewer or CI. -->
|
||||
```json
|
||||
{
|
||||
"summary_schema": 1,
|
||||
"source": "SELF",
|
||||
"timestamp": "2026-10-19T16:33:45.887202+00:00",
|
||||
"command": "make precheck",
|
||||
"exit_code": 0,
|
||||
"cwd": "/home/weichen/projects/Agent-System-Dev-wt-feature-project-access-lifecycle",
|
||||
"before_head": "5eb8591957a89a269326d52d53a982fbc157dba1",
|
||||
"after_head": "5eb8591957a89a269326d52d53a982fbc157dba1",
|
||||
"branch": "feature/project-access-lifecycle",
|
||||
"target_branch": "main",
|
||||
"target_head": "2b7fdc39a1f44163f4766701429d61ffd6926f1a",
|
||||
"root_target": "main",
|
||||
"immediate_target": "main",
|
||||
"before_tracked_diff_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
|
||||
"after_tracked_diff_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
|
||||
"output_tail": [
|
||||
"make[1]: Entering directory '/home/weichen/projects/Agent-System-Dev-wt-feature-project-access-lifecycle'",
|
||||
"[repo] branch=feature/project-access-lifecycle head=5eb8591957",
|
||||
"[remote] origin/main=2b7fdc39a1 ahead=5 behind=0",
|
||||
"[tree] clean submodules_drift=0 uninit=0",
|
||||
"[worktrees] linked=6",
|
||||
"[recycle] merged un-recycled branches: feature/layered-python-env",
|
||||
"[initiatives] local cards (not authoritative): none",
|
||||
"[hooks] core.hooksPath=scripts/hooks(pre-commit/post-merge 实际接线)",
|
||||
"[facts] policy/facts.md 6 条事实均在有效期内",
|
||||
"[required-reading] core/baseline.md, workflows/delivery.md §1, policy/delivery.md",
|
||||
"[R0] 2b7fdc39a1(完整:2b7fdc39a1f44163f4766701429d61ffd6926f1a)",
|
||||
"[worktree] before-sync: recursive component checks passed",
|
||||
"[verdict] READY — 保留本次 precheck receipt 后建任务工作区:PRECHECK_RECEIPT=/tmp/task-precheck.json make task-start NAME=feature/your-branch",
|
||||
"make[1]: Leaving directory '/home/weichen/projects/Agent-System-Dev-wt-feature-project-access-lifecycle'"
|
||||
],
|
||||
"output_sha256": "f4c03343235843eaf5f99905576d9e5c3133939f633b4fcaf227aeb70fdadbdb",
|
||||
"receipt_sha256": "2bfa8f889300bce9ad9f556e8abb6e23b5730a252a76d286f02f4a103a7f13ca",
|
||||
"receipt_path": "/home/weichen/.cache/agent-system-dev/evidence/2bfa8f889300bce9ad9f556e8abb6e23b5730a252a76d286f02f4a103a7f13ca.json"
|
||||
}
|
||||
```
|
||||
|
||||
<!-- Local receipt: SELF. Digests detect corruption; they do not authenticate a reviewer or CI. -->
|
||||
```json
|
||||
{
|
||||
"summary_schema": 1,
|
||||
"source": "SELF",
|
||||
"timestamp": "2026-10-19T20:33:08.272772+00:00",
|
||||
"command": "sh -c 'cd /home/weichen/projects/Agent-System-RDM-wt-pal-u2 && GOWORK=off go build ./internal/projects/... ./internal/rdmapp/... ./internal/perms/... ./internal/members/... && GOWORK=off go test ./internal/perms/... ./internal/members/... ./internal/projects/... -count=1 2>&1 | tail -1 && GOWORK=off go test ./internal/rdmapp/... -count=1 2>&1 | grep -cE \"^ok\" && GOWORK=off go vet ./internal/perms ./internal/members ./internal/rdmapp && echo VET_OK && git status --porcelain | wc -l'",
|
||||
"exit_code": 0,
|
||||
"cwd": "/home/weichen/projects/Agent-System-Dev-wt-feature-project-access-lifecycle-u2-creator-management",
|
||||
"before_head": "4e3d5240e759ab80f2a481c0f4d6465119ee0c37",
|
||||
"after_head": "4e3d5240e759ab80f2a481c0f4d6465119ee0c37",
|
||||
"branch": "feature/project-access-lifecycle-u2-creator-management",
|
||||
"target_branch": "main",
|
||||
"target_head": "f07a53d86aa10d35be0d3519fcf3c493b3391fec",
|
||||
"root_target": "main",
|
||||
"immediate_target": "feature/project-access-lifecycle",
|
||||
"before_tracked_diff_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
|
||||
"after_tracked_diff_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
|
||||
"output_tail": [
|
||||
"ok \tagent-system-rdm/internal/projects\t0.145s",
|
||||
"3",
|
||||
"VET_OK",
|
||||
"0"
|
||||
],
|
||||
"output_sha256": "f2e306cfce2ea88f542f0bbb1671e5d70931120990c6936b3a9b80bc82db49cd",
|
||||
"receipt_sha256": "8d6760af9d8f734b5c7212ea1f18d25835e46864a8603e0ce1aaba4ae5be7a91",
|
||||
"receipt_path": "/home/weichen/.cache/agent-system-dev/evidence/8d6760af9d8f734b5c7212ea1f18d25835e46864a8603e0ce1aaba4ae5be7a91.json"
|
||||
}
|
||||
```
|
||||
|
||||
## 闭合记录(合入前折叠)
|
||||
|
||||
- 本卡在 PR #640(https://git-home.u1680832.nyat.app:30319/weichen/Agent-System-Dev/pulls/640)合入前闭合并归档,随该 PR 一同合入。
|
||||
- 该 PR 的合并提交即本任务的落地记录。
|
||||
- 合入后无需回填,也无需单独的闭合 PR。
|
||||
Reference in New Issue
Block a user