From 4b20983ccddfd050893f724fe9874f8c638f39d9 Mon Sep 17 00:00:00 2001 From: weichen Date: Tue, 13 Oct 2026 06:34:34 +0000 Subject: [PATCH] Update plan entry points and archive current verification Why: The project and proposal indexes still said no U2/U3 implementation or experiment existed. Evidence: Current combination, full PG backend, two HTTP browser cases and independent code review are linked with their actual statuses. Impact: Documentation only; real-model acceptance is explicitly failed and no release is claimed. Refs: Approved U2/U3 task card and validation report --- docs/proposals/INDEX.md | 2 +- .../2026-10-13-fast-slow-u2-u3-code-review.md | 22 ++++++++++++++++++- .../2026-10-13-fast-slow-u2-u3-validation.md | 3 +++ 3 files changed, 25 insertions(+), 2 deletions(-) diff --git a/docs/proposals/INDEX.md b/docs/proposals/INDEX.md index 75c7976..b5b023c 100644 --- a/docs/proposals/INDEX.md +++ b/docs/proposals/INDEX.md @@ -10,7 +10,7 @@ 运行卡呈现状态、已完成工作、当前发现与剩余项；四层阅读、阶段成果、来源、异常恢复及 U1–U4。 2026-10-12 方案设计已批准（阶段 1–4）；首批仅 U1；[U1 实施计划 r1](2026-10-12-fast-slow-channel-display-u1-plan.md) 待阶段 5 批准；业务实施和运行验收 NOT_RUN。 -- [快慢通道 U2/U3 实施计划 r0.1](2026-10-13-fast-slow-u2-u3-plan.md)：2026-10-13 用户明确续办；持久任务投影、内容身份与可核对阶段发现的具体合同、实施步骤、真实模型/浏览器验证及预算。阶段 5 待评审；本批业务实施/实验 NOT_RUN。 +- [快慢通道 U2/U3 实施计划 r0.1](2026-10-13-fast-slow-u2-u3-plan.md)：阶段 5 已批准，本地候选与代码复审完成；真实模型质量验收仍 FAIL，尚未合入或部署。详见[核验报告](../reports/2026-10-13-fast-slow-u2-u3-validation.md)。 Generative UI 方向已收口（U1–U7 全部落地，2026-10-12）：[使用说明与评测记录](2026-10-12-generative-ui-usage-and-evaluation.md)（final）； 主记录 [r2](2026-10-10-generative-ui-plugin.md) 与 [U5 动作范围 r2](2026-10-11-generative-ui-u5-action-scope.md) 保留为过程权威。 diff --git a/docs/reports/2026-10-13-fast-slow-u2-u3-code-review.md b/docs/reports/2026-10-13-fast-slow-u2-u3-code-review.md index e17bc9a..4e2ab04 100644 --- a/docs/reports/2026-10-13-fast-slow-u2-u3-code-review.md +++ b/docs/reports/2026-10-13-fast-slow-u2-u3-code-review.md @@ -1,4 +1,4 @@ -> 原件归属：独立审阅者 /root/fast_slow_final_review；原始报告与重放日志目录 `/tmp/fast-slow-u2-u3-20261013/review/`。当前代码审阅PASS，模型验收FAIL；未复制评测材料或凭据。 +> 独立审阅者 /root/fast_slow_final_review 的原件归属：`/tmp/fast-slow-u2-u3-20261013/review/`；原始重放日志在该目录。当前代码审阅PASS，模型质量FAIL；未复制评测材料或凭据。 # Independent fix re-review @@ -113,3 +113,23 @@ Independent REPLAY (all exit0, all exact before/after SHAs recorded): - `post-disconnect-core.log`: Corebeafd753, `go test ./... -count=1`. **Current code review: PASS for the inspected U2/U3 fixes and integration boundary; no remaining identified blocking code finding.** This does not certify all unrelated upstream settings/auth behavior, final root CI, deployment or overall model quality. **Overall U3 quality remains FAIL/not passed**, including the explicitly approved extraA01. Source can be prepared as a draft/reviewable candidate; no merge or additional paid sample is justified by these mechanism tests. Raw model evidence and all original failure assessments remain applicable as recorded. + + +## Code-review receipt — latest account hardening integration + +Reviewer `/root/fast_slow_final_review`; source level **REPLAY**, not GATE; date2026-10-13. Exact reviewed Backend **0bc4b0f794809e048744a4bf0c94a0835cc32665**, merge parents e69865e11ba3f74887f92c2433b5ec37c881d0db and cfb8308895d0b94765ba10ed0e5b9bf38b439414. Clean checkout, exact SHA unchanged before/after both independent runs. Machine-readable receipt with raw-log SHA256 identities: `account-merge-review-receipt.json`. + +Read the incoming app/server/accounts/auth/dialect/migration/SSE delta against U2/U3 integration boundaries. The production run-manager, task projection, task-source endpoint, source visibility filter and notice revalidation files have **no diff** from the previously reviewed candidate. App startup order remains full-wiring/PG-event preparation → reconciliation → pending notices → legacy-unbound resume → command consumer → public HTTP serving. Incoming app changes affect later CLI account/bootstrap/storage helpers, not that startup block. + +SSE now periodically rechecks API keys as well as sessions, keeping the original authenticated owner fixed. Existing source visibility filtering still executes for both replay and live card payloads; subscribe-before-readiness, seq dedup and end-of-stream behavior remain intact. Source preview still binds owner/conversation/project and expected content hash. Notice redelivery still revalidates card/task/attempt and current source visibility before creating a new message. The added bootstrap lock has a distinct namespace and does not replace task admission/channel locks. Migration29 adds only redemption-attempt storage; independent migration and task projection replays pass. + +Independent focused checks on exact0bc4b0f, both exit0: + +1. SQLite: `go test ./internal/server ./internal/cardsvc ./internal/runmgr ./internal/app ./internal/store -run 'TestSSE(SessionInvalidation|APIKeyRevocation)ClosesStream|TestTaskSource|TestTaskVisibility|TestReviewQueuedNoticeMustRevalidateSource|TestTaskStartupReconcilesQueueBeforeServing|TestTaskReconcileOwnedQueueAndForeignLease|TestTaskBoundInterruptedChildDoesNotRespawn|TestFailedTaskDoesNotPromiseAutomaticContinuation|TestTaskProjection|TestMigrationUpgradesExistingDatabase' -count=1 -v` — `account-merge-sqlite.log`. +2. IsolatedPG: `go test ./internal/server ./internal/cardsvc ./internal/runmgr ./internal/store -run 'TestTaskSource|TestTaskVisibility|TestReviewQueuedNoticeMustRevalidateSource|TestTaskReconcileOwnedQueueAndForeignLease|TestTaskProjection' -count=1 -v` — `account-merge-pg.log`. + +**Code-review receipt verdict: PASS for the U2/U3 change and this incoming integration boundary; no new blocking finding identified.** Review does not certify the entire separate account-hardening feature or all possible credential/replay timing behavior. No model calls, credentials, source edits, deployment or merge operations occurred in this review. + +**Overall U3 model acceptance remains FAIL, not merge-ready**: extraA01 has zero accepted checkpoints and no final child result; original model findings remain unchanged. Dev baseaa6364f, Corebeafd75 and FE0bbccbe are supplied composition metadata, not a substitute for the executor's final exact-root test/build and CI. This receipt supports a draft/reviewable candidate only while the quality gate remains failed. + +Declined in this final receipt: full independent audit of unrelated account lifecycle/CLI features; real-model revalidation (not authorized); monetary billing; final root/platform CI; production deployment. Existing original review declined-scope notes remain applicable where not superseded by later focused replays. diff --git a/docs/reports/2026-10-13-fast-slow-u2-u3-validation.md b/docs/reports/2026-10-13-fast-slow-u2-u3-validation.md index d4a5863..391d637 100644 --- a/docs/reports/2026-10-13-fast-slow-u2-u3-validation.md +++ b/docs/reports/2026-10-13-fast-slow-u2-u3-validation.md @@ -14,6 +14,7 @@ SELF原始命令输出由Dev的make evidence工具写入任务卡，不能升级 | 对象及来源 | 检查 | 当前结论 | |---|---|---| +| SELF，合并后候选Devad31203，Corebeafd75/Backend0bc4b0f/FE0bbccbe/UI3b34dfd/Docsdd3b9da | `make test && make build` | PASS：治理312、FE224、UI156、完整后端及构建；SELF收据`fast-slow-current-aa-combination.json`。模型质量仍FAIL。 | | SELF，当前组合Devd06792c，Corebeafd75/Backende69865e/FE0bbccbe/UI3b34dfd/Docs1b296a1 | `make test && make build` | PASS：治理312、FE224、UI156，后端及构建通过；SELF原始收据`fast-slow-final-current-combination-serial.json`。当前模型质量仍FAIL。 | | SELF，最终候选Dev7fd5288，Core6e38574/Backend6a2d85c/FE3087b06/UI3b34dfd/Docs53a7d37 | make test && make build | PASS；治理311、FE224、UI156及完整后端/构建；收据fast-slow-final-fixed-combination.json | | SELF，Dev ed7f1c5，Core6e38574/Backendf6b5360/FE4d1d64a/UI3b34dfd/Docs59db26e | make test && make build | PASS；治理311，FE224，UI156；最后材料原文与评测上限修复是后续独立增量，不把旧SHA当新SHA | @@ -59,3 +60,5 @@ SELF原始命令输出由Dev的make evidence工具写入任务卡，不能升级 下一步建议先缩小单次检查点的复杂度，并依据实际输入开销调整每run预算分配，形成可评审的修订方案和有限复验预算；来源合法性保持严格，不能通过接受省略/拼接引用降低门禁。新的付费样本及原验收条件调整需明确授权。 最新组合真实HTTP浏览器：Backende69865e/Corebeafd75/FE0bbccbe，两项来源预览和后台不抢焦点用例均PASS，SELF收据`fast-slow-browser-current-upstream.json`。首次组合检查遇到已自行消失的短暂Git索引锁，串行重跑后通过；未删除锁。 + +合并后的隔离PostgreSQL后端完整套件PASS（SELF `fast-slow-current-backend-pg.json`）。当前Backend0bc4b0f实际HTTP/browser两项PASS（SELF `fast-slow-browser-aa-final.json`）。独立REPLAY核对账户加固合并与任务来源/通知/恢复/SSE共存，见更新后的代码审阅归档。