docs(ops): Wave 3 PU6–PU8 go/no-go — all deferred with contracts

Record no-go decisions and independent long-term task contracts; do not
implement or raise MULTI_INTENT tier.

Co-authored-by: Cursor <cursoragent@cursor.com>

.doc/ops/CURRENT.md

@@ -5,14 +5,15 @@
 
 ## 焦点
 
-1. **Wave 2C done**：same-image digest pin 已合入；下一相 Wave 3 go/no-go
+1. **Wave 3 done**：PU6–PU8 全部 no-go/deferred；契约已落盘
 2. **Wave 1 done**：PU5A race + PU3 IAM fail-closed 已合入 `dev`
-3. **Wave 3**：PU6–PU8 go/no-go（下一相）
+3. **Phase 3 遗留**：N7 U8 quality_failed / Playwright gated / IAM·DoD 清点
 
 ## 并行认领
 
 | owner | task | branch | worktree | mutex | status |
 |-------|------|--------|----------|-------|--------|
+| Cursor | 2026-09-16-wave3-pu6-pu8-go-no-go | feature/wave3-pu6-pu8-go-no-go | - | architecture-docs | done |
 | Cursor | 2026-09-16-wave2c-same-image-digest | feature/wave2c-same-image-digest | - | infra | done |
 | Cursor | 2026-09-16-wave2b-nightly-promotion-receipt | feature/wave2b-nightly-promotion-receipt | - | ci | done |
 | Cursor | 2026-09-16-wave2-real-pi-evidence | feature/wave2-real-pi-evidence | - | intent-plan | done |

.doc/ops/long-term/2026-09-16-pu6-semantic-summary-contract.md

@@ -0,0 +1,33 @@
+---
+title: "PU6 语义摘要 D3 — 获批后任务契约"
+status: deferred
+created: 2026-09-16
+updated: 2026-09-16
+owner: TBD
+branch: feature/pu6-semantic-summary
+mutex: chat
+go_no_go: no-go
+---
+
+# PU6 语义摘要 D3 — 获批后任务契约
+
+**go/no-go**：no-go（见 `.doc/ops/research/2026-09-16-wave3-pu6-pu8-go-no-go.md`）。未获批前禁止开 feature 实现。
+
+## 目标（获批后）
+
+在授权可见集合上 shadow 语义摘要，可解释 fallback；通过后方可考虑替换 deterministic。
+
+## 预注册门
+
+- flag：`SEMANTIC_SUMMARY_SHADOW` → 可选 `SEMANTIC_SUMMARY_REPLACE`
+- 输入：authorized view only；无工具权限摘要器；R13 出站门
+- 失败：保留旧摘要/deterministic；标注 freshness
+- 负例：撤权消息不入摘要；injection 不能改权限
+
+## 路径提示
+
+`internal/ctxmgr/summarizer.go`、`internal/app/chatflow/`、`internal/server/chat_digest_api.go`、web 摘要消费组件
+
+## 回滚
+
+关 flag；读路径回 deterministic；保留历史证据指针

.doc/ops/long-term/2026-09-16-pu7-pi-narrative-contract.md

@@ -0,0 +1,33 @@
+---
+title: "PU7 PI change-report 叙事 — 获批后任务契约"
+status: deferred
+created: 2026-09-16
+updated: 2026-09-16
+owner: TBD
+branch: feature/pu7-pi-narrative
+mutex: docgov
+go_no_go: no-go
+---
+
+# PU7 PI change-report 叙事 — 获批后任务契约
+
+**go/no-go**：no-go。未获批禁止实现。
+
+## 目标（获批后）
+
+只读消费 immutable diff+lineage+risk floor 的 PI 叙事；任意 schema/超时/注入 → 全量 fallback。
+
+## 预注册门
+
+- flag：`PI_CHANGE_REPORT_NARRATIVE`
+- 禁止覆盖服务端风险/审批结论
+- typed schema + 文档版本 + input digest 绑定
+- UI 明确区分 narrative vs 事实字段
+
+## 路径提示
+
+`internal/docrevision/`、`deploy/pi-agent/` typed result、`ChangeReportPanel.tsx`
+
+## 回滚
+
+关 flag；仅 deterministic fallback；无第二份 candidate

.doc/ops/long-term/2026-09-16-pu8-u10-mutate-contract.md

@@ -0,0 +1,19 @@
+---
+title: "PU8-U10 mutate — 获批后任务契约"
+status: deferred
+created: 2026-09-16
+updated: 2026-09-16
+owner: TBD
+branch: feature/pu8-u10-mutate
+mutex: intent-plan
+go_no_go: no-go
+flag: MULTI_INTENT_U10_MUTATE
+---
+
+# PU8-U10 mutate
+
+**go/no-go**：no-go。独立 flag；高风险动作绑定 expected revision + 显式确认 + 执行前再授权；不依赖 U9。
+
+## 负例
+
+未确认、越权、stale revision、重复提交 → 零越界副作用。

.doc/ops/long-term/2026-09-16-pu8-u11-docgov-contract.md

@@ -0,0 +1,15 @@
+---
+title: "PU8-U11 docgov action — 获批后任务契约"
+status: deferred
+created: 2026-09-16
+updated: 2026-09-16
+owner: TBD
+branch: feature/pu8-u11-docgov
+mutex: docgov
+go_no_go: no-go
+flag: MULTI_INTENT_U11_DOCGOV
+---
+
+# PU8-U11 docgov
+
+**go/no-go**：no-go。独立 flag/mutex；按钮与自然语言同一 owner command；项目 143 只读纪律不变。

.doc/ops/long-term/2026-09-16-pu8-u12-workflow-run-control-contract.md

@@ -0,0 +1,15 @@
+---
+title: "PU8-U12 workflow/run-control — 获批后任务契约"
+status: deferred
+created: 2026-09-16
+updated: 2026-09-16
+owner: TBD
+branch: feature/pu8-u12-workflow-run-control
+mutex: workflow
+go_no_go: no-go
+flag: MULTI_INTENT_U12_RUN_CONTROL
+---
+
+# PU8-U12 workflow/run-control
+
+**go/no-go**：no-go。独立 flag；双标签确认/取消仅一成功；投影停机时权威 GET 仍正确；回滚后计划可读/取消/finalize。

.doc/ops/long-term/2026-09-16-pu8-u9-segment-proposal-contract.md

@@ -0,0 +1,19 @@
+---
+title: "PU8-U9 segment proposal — 获批后任务契约"
+status: deferred
+created: 2026-09-16
+updated: 2026-09-16
+owner: TBD
+branch: feature/pu8-u9-segment-proposal
+mutex: intent-plan
+go_no_go: no-go
+flag: MULTI_INTENT_U9_SEGMENT
+---
+
+# PU8-U9 segment proposal
+
+**go/no-go**：no-go。规则无法判断时才出 segment proposal；超时/越界 fail closed；非 U10–U12 默认前置。
+
+## 安全 stop gate
+
+授权旁路 / 跨用户泄漏 / B1–B4 回归 → 停全部扩面并写 gap-matrix。

.doc/ops/research/2026-09-16-wave3-pu6-pu8-go-no-go.md

@@ -0,0 +1,69 @@
+---
+title: "Wave 3 PU6–PU8 产品 go/no-go"
+created: 2026-09-16
+status: done
+confidence: medium
+---
+
+# 调研：Wave 3 PU6–PU8 产品 go/no-go
+
+## 结论
+
+在缺少量化用户痛点样本与明确产品 owner 签字的前提下，**PU6 / PU7 / PU8 一律 no-go（保持 deferred）**，不实施业务代码、不升 `MULTI_INTENT_PLAN_TIER`。各能力的预注册门、独立 short-term 契约与安全 stop gate 已落盘，获批后可直接开实现任务。
+
+## 冻结字段（各 PU 共用模板）
+
+| 字段 | 本轮取值 |
+|------|----------|
+| 用户信号 | **不足**：无近 30 天支持工单/会话抽样证明 deterministic 摘要或 fallback change-report 阻塞首发 |
+| 预期收益 | 体验增强；非 production_ready / gap-matrix blocker |
+| 维护成本 | 高（真实 PI、R13、shadow、泄漏负例、回滚） |
+| owner | 待产品指定；工程 mutex 见各契约 |
+| 最小样本 | 未冻结（获批前必须补） |
+| 晋级阈值 | 未冻结 |
+| 零容忍失败 | 授权旁路、跨用户泄漏、双 writer、B1–B4 回归、敏感出站 |
+
+## 分项决定
+
+### PU6 语义摘要（D3）— **NO-GO / deferred**
+
+- 现状：deterministic summary 已支撑 Chat/ctxmgr `done`；D3 行已 deferred。
+- 决定：不替换、不 shadow 上线。
+- 获批前置：owner + ≥20 会话痛点样本 + 质量阈值 + R13 门。
+- 契约：`.doc/ops/long-term/2026-09-16-pu6-semantic-summary-contract.md`
+
+### PU7 PI change-report 叙事 — **NO-GO / deferred**
+
+- 现状：deterministic diff+lineage + fallback 报告为声明行为；完整 PI 叙事已拆行 deferred。
+- 决定：不实施 PI narrative 替换。
+- 获批前置：owner + UI 混用风险验收标准 + typed schema 冻结。
+- 契约：`.doc/ops/long-term/2026-09-16-pu7-pi-narrative-contract.md`
+
+### PU8 多意图扩面（U9 / U10–U12）— **NO-GO / deferred（分项）**
+
+- 现状：U1–U8 baseline `done`（legacy tier）；U9–U12 行 deferred。
+- 决定：U9–U12 **均不实施**；各自独立契约已写，禁止共用一个开关批量上线。
+- 获批前置：每 action 单独 go + flag + mutex + 回滚点。
+- 契约：
+  - `.doc/ops/long-term/2026-09-16-pu8-u9-segment-proposal-contract.md`
+  - `.doc/ops/long-term/2026-09-16-pu8-u10-mutate-contract.md`
+  - `.doc/ops/long-term/2026-09-16-pu8-u11-docgov-contract.md`
+  - `.doc/ops/long-term/2026-09-16-pu8-u12-workflow-run-control-contract.md`
+
+## 证据
+
+| 项 | 路径 | 结果 |
+|----|------|------|
+| 矩阵 | `.doc/status/FEATURE-MATRIX.md` | D3 / PI 叙事 / U9–U12 均为 deferred |
+| 计划 | remediation PU6–PU8 | 要求独立 go/no-go 后才实施 |
+| backlog | `.doc/backlog/chat-agent-p6-backlog.md` D3 | 仅条目，无获批信号 |
+
+## 开放问题
+
+- 产品何时指定 PU6–PU8 owner 与最小样本？
+- Playwright 双标签与 nightly PASS 归 Phase 3 遗留，不阻塞本 go/no-go。
+
+## 建议动作
+
+- 勾选 remediation DoD「PU6–PU8 已分别完成产品 go/no-go」
+- 获批前禁止实现与 tier 升级

.doc/ops/short-term/2026-09-16-wave3-pu6-pu8-go-no-go.md

@@ -0,0 +1,26 @@
+---
+title: "Wave 3 PU6–PU8 go/no-go 文档任务"
+status: done
+created: 2026-09-16
+updated: 2026-09-16
+owner: Cursor
+branch: feature/wave3-pu6-pu8-go-no-go
+worktree: "-"
+mutex: architecture-docs
+---
+
+# Wave 3 PU6–PU8 go/no-go 文档任务
+
+## 目标
+
+完成 PU6–PU8 产品 go/no-go 记录与获批后契约；未获批不实施。
+
+## 步骤
+
+1. [x] 调研 go/no-go 总文
+2. [x] PU6–PU8 / U9–U12 契约
+3. [x] 勾 DoD + 矩阵/CURRENT 同步 + 合入
+
+## 相关链接
+
+- Research: `../research/2026-09-16-wave3-pu6-pu8-go-no-go.md`

.doc/remediation/2026-09-16-feature-matrix-production-readiness-plan.md

@@ -415,7 +415,8 @@ flowchart TB
   （2026-09-16：Wave2 报告已签；Playwright 双标签仍 gated，API 刷新/重启已签；不升 tier）
 - [x] PU5A 的 TempDir race flake 被真正关闭；PU5B 的 nightly job、promotion receipt 和人工豁免链能区分 infrastructure/product failure。
   （2026-09-16：PU5A 已关闭；PU5B **nightly+receipt+晋升钩子**已交付——见 [Wave2B 报告](../test-reports/2026-09-16-wave2b-nightly-promotion-receipt-test-report.md)。**同镜像 digest 晋升**已由 [Wave2C](../test-reports/2026-09-16-wave2c-same-image-digest-test-report.md) 单机 pin 关闭；远程 registry 另立。）
-- [ ] PU6–PU8 已分别完成产品 go/no-go；未获批项保持 deferred，获批项另建 short-term 后才进入实现与 rollout DoD。
+- [x] PU6–PU8 已分别完成产品 go/no-go；未获批项保持 deferred，获批项另建 short-term 后才进入实现与 rollout DoD。
+  （2026-09-16：全部 **no-go / deferred**——见 [Wave3 go/no-go](../ops/research/2026-09-16-wave3-pu6-pu8-go-no-go.md) 与 `.doc/ops/long-term/2026-09-16-pu6-*` / `pu7-*` / `pu8-*` 契约；禁止实施与升 tier。）
 - [ ] 任何真实 PI 工作均满足 R13 的最小出站、租户绑定、脱敏、凭证、留存和泄漏负例。
 - [ ] deterministic summary/change-report、legacy 单意图、B1–B4 和三环境隔离均无回归。
 - [x] `gap-matrix.md` 只在真实 blocker 出现或关闭时变化，`production_ready` 不因普通 backlog 自动翻转。（Wave 0：仅增加 IAM 只读核验注记，未翻转）

.doc/status/FEATURE-MATRIX.md

@@ -49,9 +49,9 @@
 |------|----------|------|----------|------|---------------------|-------|
 | 意图识别 L1 | 18 类 Intent、三分支消解、写/只读分流、双标签 `DOC_BUSY`、intent 纯依赖边界 | done | non_blocker | [intent-recognition](../system-design/intent-recognition/)；[审计](../audit/2026-09-13-conversation-intent-runtime-state.md)；[报告](../test-reports/2026-09-13-conversation-intent-runtime-state-test-report.md)；[双标签](../test-reports/assets/2026-09-15-conversation-intent-dual-tab/live.json)；[U1](../test-reports/2026-09-15-multi-intent-u1-contracts-test-report.md)–[U3](../test-reports/2026-09-15-multi-intent-u3-intentflow-pg-test-report.md) | **边界 before**：含 U9–U12 叙事混入 → **after**：U9–U12 迁至「多意图扩面」行。关闭：纯依赖边界回归即重开 | `intent` |
 | 多意图持久计划（U1–U8 基线） | app/intentflow 生命周期、HITL、默认 `legacy`、U1–U8 代码与安全基线 | done | non_blocker（默认 legacy） | [设计](../system-design/2026-09-15-multi-intent-hitl-plan.md)；[U1](../test-reports/2026-09-15-multi-intent-u1-contracts-test-report.md)–[U8](../test-reports/2026-09-16-multi-intent-u8-task-generate-test-report.md)；[Wave2 真 PI](../test-reports/2026-09-16-wave2-real-pi-evidence-test-report.md) | U8 真实 PI + PG receipt + 撤权 + API 刷新/重启已签。Playwright 双标签仍 gated。升 `confirm/full` 另开任务 | `intent-plan` |
-| 多意图扩面（U9–U12） | U9 LLM 分段实验；U10 mutate；U11 docgov；U12 workflow/run-control | deferred | deferred_enhancement | [设计](../system-design/2026-09-15-multi-intent-hitl-plan.md)；[计划 Wave 3 / PU8](../remediation/2026-09-16-feature-matrix-production-readiness-plan.md) | 逐能力产品 go/no-go + 独立 short-term/flag/owner；未获批不实施 | `intent-plan` |
+| 多意图扩面（U9–U12） | U9 LLM 分段实验；U10 mutate；U11 docgov；U12 workflow/run-control | deferred | deferred_enhancement | [设计](../system-design/2026-09-15-multi-intent-hitl-plan.md)；[计划 Wave 3 / PU8](../remediation/2026-09-16-feature-matrix-production-readiness-plan.md)；[go/no-go](../ops/research/2026-09-16-wave3-pu6-pu8-go-no-go.md) | **2026-09-16 no-go**：契约见 long-term `pu8-u9`…`pu8-u12`；未获批不实施；升 tier 另开 | `intent-plan` |
 | 对话 / ctxmgr baseline | 多轮上下文、刷新/重登/重启恢复、授权同集正文与计数、U10 端口化停止扩面 | done | non_blocker | [multi-turn](../system-design/multi-turn-dialogue/)；[刷新审计](../audit/2026-09-13-chat-history-refresh-disappears.md)；[U10](../test-reports/2026-09-15-chatlog-contextasm-u10-test-report.md)；[门禁 B3](../test-reports/2026-09-16-chat-refresh-gate-test-report.md)（项目 6359） | **before**：语义摘要误标 D5 混入 → **after**：摘要迁「语义摘要 D3」；D7 数据治理独立。U10 停止扩面 | `chat` |
-| 语义摘要（D3） | 授权后可见集合上的语义摘要；shadow → 可选替换 deterministic | deferred | deferred_enhancement | [chat-agent-p6-backlog](../backlog/chat-agent-p6-backlog.md)（**D3**；D5=共享 KB 隔离评估）；[计划 PU6](../remediation/2026-09-16-feature-matrix-production-readiness-plan.md) | 产品 go/no-go；授权输入、shadow、fallback、泄漏负例；未获批不实施 | `chat` |
+| 语义摘要（D3） | 授权后可见集合上的语义摘要；shadow → 可选替换 deterministic | deferred | deferred_enhancement | [chat-agent-p6-backlog](../backlog/chat-agent-p6-backlog.md)（**D3**；D5=共享 KB 隔离评估）；[计划 PU6](../remediation/2026-09-16-feature-matrix-production-readiness-plan.md)；[go/no-go](../ops/research/2026-09-16-wave3-pu6-pu8-go-no-go.md) | **2026-09-16 no-go**；契约 [long-term pu6](../ops/long-term/2026-09-16-pu6-semantic-summary-contract.md)；未获批不实施 | `chat` |
 | 对话数据治理（D7） | 留存/删除口径、库·备份·日志控制、敏感字段加密边界 | deferred | deferred_enhancement（违规则升 blocker） | [计划](../remediation/2026-09-16-feature-matrix-production-readiness-plan.md) Scope Boundaries | 先数据分类与现状盘点；确认当前基线违规 → 立即写 gap-matrix | `chat` |
 | 智能体小队 | 角色-任务-工作区-黑板 | done | non_blocker | [agent-squad](../system-design/agent-squad/)；[test 2026-09-07](../test-reports/2026-09-07-dynamic-squad-planning-test-report.md) | 非关键步骤降级(A5/A6)属 backlog | `squad` |
 | 工作流治理 | 三正式工作流、设置页/DutyMode、动作级鉴权、真实 PI 三工作流 E2E、full/none 混合长链 | done | non_blocker | [三工作流整改](../remediation/2026-09-12-three-workflows-strict-governance-remediation.md)；[409/职责](../test-reports/2026-09-14-workflow-plan-409-frozen-and-optional-duties-test-report.md)；[鉴权](../test-reports/2026-09-14-governance-action-level-authz-test-report.md)；[PI E2E](../test-reports/2026-09-16-pi-three-workflow-e2e-test-report.md)；[Wave2 full/none](../test-reports/2026-09-16-wave2-real-pi-evidence-test-report.md) | full 跨用户审批 + none 免审批不阻塞已签。纯软件自举仍独立 planned | `workflow` |
@@ -59,7 +59,7 @@
 | IAM / 鉴权 | 项目级 API 鉴权 + RBAC；会话/阶段授权 | partial | 加固（代码 fail-closed → Wave 1） | [authorization-matrix-v2](../audit/authorization-matrix-v2.md)；[Phase1 报告](../test-reports/2026-09-12-phase1-iam-authz-test-report.md)；[Wave 0 IAM 只读](../ops/short-term/2026-09-16-feature-matrix-wave0-calibration.md) | 历史读取 owner/阶段缺口**已闭环**。`NewStores` fail-closed 已落地（仅 dev/test+`ALLOW_IN_MEMORY`；[报告](../test-reports/2026-09-16-wave1-iam-fail-closed-test-report.md)）。剩余：全路由 inventory；session 中断负例；410 退役决策。Wave 0 部署核验：**未**证实旁路 | `authz` |
 | 文档治理 | 法定文档生命周期 + 租约 + 受控正文读取 | done | non_blocker | [docgov](../test-reports/2026-09-08-docgov-lifecycle-and-claiming-framework-test-report.md)；[正文 UI](../test-reports/2026-09-14-controlled-content-ui-acceptance.md)；[canonical hash](../remediation/2026-09-14-controlled-content-canonical-hash-remediation.md) | 项目 143 只读；不终止 | `docgov` |
 | 文档版本 baseline | 账本、人工修订、确定性 diff+lineage、运行时 UI、负责人通知 | done | non_blocker | [管理](../test-reports/2026-09-13-document-revision-management-test-report.md)；[Round20 UI](../test-reports/2026-09-14-document-revision-runtime-ui-test-report.md)；[ADR](../adr/2026-09-13-document-version-boundary.md) | **before**：完整 PI narrative 混入 → **after**：迁「PI change-report 叙事」。fallback 报告是本行内显式行为，不是缺口 | `docgov` |
-| PI change-report 叙事 | 只读消费 diff+lineage 的 PI 叙事；失败全量降级 fallback | deferred | deferred_enhancement | [Round20](../test-reports/2026-09-14-document-revision-runtime-ui-test-report.md)；[计划 PU7](../remediation/2026-09-16-feature-matrix-production-readiness-plan.md) | 产品 go/no-go；typed schema；禁止覆盖服务端风险/审批结论 | `docgov` |
+| PI change-report 叙事 | 只读消费 diff+lineage 的 PI 叙事；失败全量降级 fallback | deferred | deferred_enhancement | [Round20](../test-reports/2026-09-14-document-revision-runtime-ui-test-report.md)；[计划 PU7](../remediation/2026-09-16-feature-matrix-production-readiness-plan.md)；[go/no-go](../ops/research/2026-09-16-wave3-pu6-pu8-go-no-go.md) | **2026-09-16 no-go**；契约 [long-term pu7](../ops/long-term/2026-09-16-pu7-pi-narrative-contract.md)；未获批不实施 | `docgov` |
 | 前端工作台 | 三栏 + 块文档 + SSE；错误卡/进度/busy；版本冲突信封；demo seed 默认关；终止 preview | done | non_blocker | [workbench](../test-reports/2026-09-08-three-column-workbench-and-block-document-test-report.md)；[双标签](../test-reports/assets/2026-09-15-conversation-intent-dual-tab/screenshots/tab-b-busy.png)；[demo](../test-reports/2026-09-16-demo-seed-pollution-test-report.md)；[B4](../test-reports/2026-09-16-frontend-gate-b4-test-report.md)（项目 6363） | **before**：空「缺口」却 partial → **after**：本行 done。其他 409 消费方信封复用另列 hardening backlog | `web` |
 | PI Runner / 配置链 | pi-agent + MiniMax + typed-result-v1 | done | non_blocker | [piagent](../test-reports/2026-09-13-codex-audit-p0-remediation-test-report.md)；[container-env](../test-reports/2026-09-13-container-env-configuration-test-report.md)；[typed-result](../test-reports/2026-09-15-pi-typed-result-v1-test-report.md) | — | `pi-agent` |
 | 三环境运维 | dev/test/main + 共享 KB；对话/业务库隔离 | done | non_blocker | [PROJECT.md](../../PROJECT.md) §4；CURRENT 环境快照 schema **47** | — | `infra` |