diff --git a/.doc/ops/short-term/2026-09-26-system-review-fixes.md b/.doc/ops/short-term/2026-09-26-system-review-fixes.md index edfea9bf..215a207b 100644 --- a/.doc/ops/short-term/2026-09-26-system-review-fixes.md +++ b/.doc/ops/short-term/2026-09-26-system-review-fixes.md @@ -16,7 +16,7 @@ allowed_environments: [] mutex: "review-fixes-batch" review_state: pending integration_state: pending -deployment: pending +deployment: deployed cleanup: pending remote_sync: not_requested --- @@ -47,8 +47,8 @@ remote_sync: not_requested 4. [x] 文档:修复主记录、ISSUES、lesson、索引 5. [x] 提交 6. [x] 集成(含审计报告分支同批 --no-ff,候选 integrate-review-fixes) -7. [ ] 部署核验(dev 共享服务重启 + health/ready/业务行为——需另授权或独立部署任务) -8. [ ] 清理(本任务 + 审计任务 worktree/分支) +7. [x] 部署核验(用户授权;`launch.sh --no-docker` FORCE_BUILD 重建 + 重启,binary vcs.revision=`1ceda34c`;/health+/ready ok schema 75;线上 IDOR 负例:他户/带 user_id 覆写/未知会话→403,归属者→200 且含原文。探测留痕:dev 库 probe 用户 dpv_*/dpa_* 与项目 idor-live-probe-*) +8. [x] 清理(本任务 + 审计任务 + 集成候选 worktree/分支均已普通 remove) ## 验证 diff --git a/.doc/remediation/2026-09-26-system-code-review-fixes.md b/.doc/remediation/2026-09-26-system-code-review-fixes.md index 1750e3ea..62034376 100644 --- a/.doc/remediation/2026-09-26-system-code-review-fixes.md +++ b/.doc/remediation/2026-09-26-system-code-review-fixes.md @@ -90,7 +90,11 @@ base_dev_sha: "f4c1b73f28580ad3df6db4f9ec0a80057006e516" ## 部署 -代码已按授权集成 local_dev(见任务记录)。dev 共享服务未在本任务内重建/重启(未获 env 写授权);`deployment=pending`,重启与 `/health`、`/ready`、业务行为核验待部署任务执行。 +已部署(2026-09-26 用户授权):`launch.sh --no-docker` FORCE_BUILD 重建并重启 no-docker dev 服务(8080)。核验: +- binary `vcs.revision=1ceda34c`(= dev tip,含全部修复) +- `/health`、`/ready` ok;schema 75;PI sidecar 18865 健康 +- 线上 IDOR 负例:他户读会话→403、`user_id` 覆写→403、未知会话→403;归属者→200 且正文完整 +- 探测留痕(dev 业务库):probe 用户 `dpv_*`/`dpa_*`、项目 `probe-shape*`/`idor-live-probe-*`,属一次性验证数据 ## 经验