wangsli/hyb-oa
1
0
派生 0
代码 工单 合并请求 工作流 3 软件包 项目 发布 百科 活动

R79 收口公网部署与治理事实源

浏览代码
这个提交包含在：
wangsli
2026-05-05 16:36:27 +08:00
父节点 449489d2e0
当前提交 6eaee753d7
共修改 12 个文件，包含 136 行新增和 59 行删除
下载 Patch 文件 下载 Diff 文件 展开所有文件 折叠所有文件
artifacts/r75/coverage-matrix.csv
+2 -2
查看文件
@@ -12,5 +12,5 @@
"差旅与移动审批","enabled_admin","/travel-requests|/mobile/approvals|/mobile/capture","employee|manager|finance","WECOM_ENTRY_ENABLED","wecom_entry_v1","partial_done","artifacts/r69/acceptance-report.md|client/tests/e2e/travel-payment-flow.spec.ts|client/tests/e2e/travel-reconciliation-flow.spec.ts|client/tests/e2e/mobile-approvals-offline.spec.ts|artifacts/r70/manual-trialrun-report.md","差旅申请、审批、支付、绑票、对账批次，以及移动审批 deep link 离线重放都有自动化证据；R70 人工仅确认移动入口可理解。","真实 IM deep link、真实移动设备拍照上传、多人并发审批未验证。","保留自动化为主；真实设备和 IM 深链并入 A5。"
"预算、支付批次与 AP 运营","optional","/budgets|/payment-batches|/ap-operations","finance|admin","BUDGET_PRECHECK_ENABLED|PAYMENT_BATCH_ENABLED|ERP_SYNC_ENABLED","budget_precheck_v1|payment_batch_v1|erp_sync","partial_done","issues/2026-03-29_08-07-14-p25-lite-budget-ap.csv|issues/2026-04-06_r52-ap-operations.csv|issues/2026-04-29_10-14-27-r78-reimbursement-payment-tail.csv|client/tests/e2e/reimbursement-payment-batch-flow.spec.ts|server/scripts/regression-payment-batches.sh","支付批次 maker-checker、AP 待付款快捷复核、finance 执行报销付款批次，以及 reimbursement paid 后 ERP preview pending outbox 已在本地 focused regression 跑通；历史 budget/AP 视图与 review 证据仍保留。","预算预检页面级联动、高风险两轮复核、大额批次与非报销实体付款未在本轮 focused local 回归中重跑。","若财务域继续扩大试运行，再补 budget precheck 与高风险二次复核专项；当前 payment batch/AP happy path 已具备本地回归证据。"
"ERP 集成与切换控制台","external","/system/integrations/erp|/system/cutover","integration admin|system.settings","ERP_SYNC_ENABLED|CUTOVER_CONSOLE_ENABLED","erp_sync|cutover_console_v1","partial_external","issues/2026-03-08_14-10-53-p19-erp-1-l5-masterdata-journal-bridge.csv|issues/2026-03-21_11-10-00-p29-replacement-readiness-refresh.csv|client/tests/e2e/live-smoke.spec.ts","ERP 管理页、mock/http 回归和只读 live smoke 有历史证据。","当前本地 trialrun 没有真实 ERP 出入站或 cutover 操作验证。","仅在外部环境专项下执行，不进入默认 trialrun gate。"
"系统治理、功能开关与审计","enabled_admin","/system/workspace|/system/settings|/system/feature-flags|/system/workflow-definitions|/audit-logs|/system/notification-channels","admin","WORKFLOW_DEFINITION_ADMIN_ENABLED","workflow_definition_admin_v1","partial_done","artifacts/r70/manual-trialrun-report.md|client/tests/e2e/settings-governance.spec.ts|client/tests/e2e/live-smoke.spec.ts|server/src/scripts/smoke-trialrun-runtime.js|client/tests/e2e/r75-automation-gap-fill.spec.ts","工作区设置、系统设置、功能开关、审计日志打开与导航边界有自动化和人工证据；R74 本地门禁已检查 workspace/flag/navigation 基线，R75 已补功能开关备注保存并恢复写路径。","流程定义、通知渠道、工作区其他写操作和审计留痕写入效果仍未在当前 trialrun 做完整专项。","保留 partial_done；后续若治理域纳入试运行，再补通知渠道与流程定义写路径。"
"企微、HTTPS、部署态与并发","external","/login(企微入口)|部署运行时|多账号并发","all roles","APP_ORIGIN|COOKIE_SECURE|WECOM_*|PUBLIC_SECURITY_HARDENING_ENABLED","wecom_entry_v1|public_security_hardening_v1","blocked_external","deploy/trialrun/runbook.md|client/tests/e2e/wecom-entry.spec.ts|client/tests/e2e/live-smoke.spec.ts|server/src/scripts/smoke-trialrun-runtime.js|issues/2026-04-29_08-39-22-r76-external-trialrun-closeout.csv","本地/只读 smoke、env contract、导航/入口提示与 local runtime gate 已就绪。","真实企微 OAuth、HTTPS cookie secure、多用户并发协同仍缺环境级成功证据。腾讯 OCR 鉴权已确认不是当前主阻塞点：旧项目 `.env` 中至少一组凭证可用，当前主阻塞已转为应用层未传 PDF 参数导致的 `ImageDecodeFailed`。","企微/HTTPS/并发仍按 A3/A4 外部专项推进；OCR 从“外部凭证阻塞”切换为 R77 内部修复项，修完后再回到 live trialrun。"
"系统治理、功能开关与审计","enabled_admin","/system/workspace|/system/settings|/system/feature-flags|/system/workflow-definitions|/audit-logs|/system/notification-channels","admin","WORKFLOW_DEFINITION_ADMIN_ENABLED","workflow_definition_admin_v1","partial_done","artifacts/r70/manual-trialrun-report.md|client/tests/e2e/settings-governance.spec.ts|client/tests/e2e/live-smoke.spec.ts|server/src/scripts/smoke-trialrun-runtime.js|client/tests/e2e/r75-automation-gap-fill.spec.ts","工作区设置、系统设置、功能开关、审计日志打开与导航边界有自动化和人工证据；R74 本地门禁已检查 workspace/flag/navigation 基线，R75 已补功能开关备注保存并恢复写路径。2026-05-04 只读 deploy 巡检已确认公网工作区仍为 `small_team_internal`，但远端 DB 中 `announcements_v1` / `global_search_v1` 仍是 `force_off`。","流程定义、通知渠道、工作区其他写操作和审计留痕写入效果仍未在当前 trialrun 做完整专项；公网部署态还存在 feature flag 与期望 workspace 导航不一致的问题。","保留 partial_done；先收口公网 feature flag 基线，再补通知渠道与流程定义写路径。"
"企微、HTTPS、部署态与并发","external","/login(企微入口)|部署运行时|多账号并发","all roles","APP_ORIGIN|COOKIE_SECURE|WECOM_*|PUBLIC_SECURITY_HARDENING_ENABLED","wecom_entry_v1|public_security_hardening_v1","blocked_external","deploy/trialrun/runbook.md|client/tests/e2e/wecom-entry.spec.ts|client/tests/e2e/live-smoke.spec.ts|server/src/scripts/smoke-trialrun-runtime.js|issues/2026-04-29_08-39-22-r76-external-trialrun-closeout.csv|issues/2026-05-04_13-11-16-r79-governance-live-readiness.csv","本地/只读 smoke、env contract、导航/入口提示与 local runtime gate 已就绪；`https://oa.hyinda.com/ready` 也已通过只读探活。","真实企微 OAuth、HTTPS cookie secure、多用户并发协同仍缺环境级成功证据。2026-05-04 公网部署巡检已确认 `WECOM_ENABLED=false`、`WECOM_ENTRY_ENABLED=false`、`WECOM_OAUTH_ENABLED=false`、`OCR_PROVIDER=mock`，且 DB 中 `wecom_entry_v1` 为 `force_off`；当前 live runtime smoke 还会因 `announcements_v1` 为 `force_off` 而失败。","企微/HTTPS/并发仍按 A4/A5 外部专项推进；先准备独立 smoke 账号并补齐企微后台配置，再修正公网 feature flag 基线后重跑 live smoke。"
1 Domain Tier Routes Primary_Roles Env_Gates Feature_Flags Coverage_Status Evidence Validated_Flows Gaps Next_Action
12 差旅与移动审批 enabled_admin /travel-requests|/mobile/approvals|/mobile/capture employee|manager|finance WECOM_ENTRY_ENABLED wecom_entry_v1 partial_done artifacts/r69/acceptance-report.md|client/tests/e2e/travel-payment-flow.spec.ts|client/tests/e2e/travel-reconciliation-flow.spec.ts|client/tests/e2e/mobile-approvals-offline.spec.ts|artifacts/r70/manual-trialrun-report.md 差旅申请、审批、支付、绑票、对账批次，以及移动审批 deep link 离线重放都有自动化证据；R70 人工仅确认移动入口可理解。 真实 IM deep link、真实移动设备拍照上传、多人并发审批未验证。 保留自动化为主；真实设备和 IM 深链并入 A5。
13 预算、支付批次与 AP 运营 optional /budgets|/payment-batches|/ap-operations finance|admin BUDGET_PRECHECK_ENABLED|PAYMENT_BATCH_ENABLED|ERP_SYNC_ENABLED budget_precheck_v1|payment_batch_v1|erp_sync partial_done issues/2026-03-29_08-07-14-p25-lite-budget-ap.csv|issues/2026-04-06_r52-ap-operations.csv|issues/2026-04-29_10-14-27-r78-reimbursement-payment-tail.csv|client/tests/e2e/reimbursement-payment-batch-flow.spec.ts|server/scripts/regression-payment-batches.sh 支付批次 maker-checker、AP 待付款快捷复核、finance 执行报销付款批次，以及 reimbursement paid 后 ERP preview pending outbox 已在本地 focused regression 跑通；历史 budget/AP 视图与 review 证据仍保留。 预算预检页面级联动、高风险两轮复核、大额批次与非报销实体付款未在本轮 focused local 回归中重跑。 若财务域继续扩大试运行，再补 budget precheck 与高风险二次复核专项；当前 payment batch/AP happy path 已具备本地回归证据。
14 ERP 集成与切换控制台 external /system/integrations/erp|/system/cutover integration admin|system.settings ERP_SYNC_ENABLED|CUTOVER_CONSOLE_ENABLED erp_sync|cutover_console_v1 partial_external issues/2026-03-08_14-10-53-p19-erp-1-l5-masterdata-journal-bridge.csv|issues/2026-03-21_11-10-00-p29-replacement-readiness-refresh.csv|client/tests/e2e/live-smoke.spec.ts ERP 管理页、mock/http 回归和只读 live smoke 有历史证据。 当前本地 trialrun 没有真实 ERP 出入站或 cutover 操作验证。 仅在外部环境专项下执行，不进入默认 trialrun gate。
15 系统治理、功能开关与审计 enabled_admin /system/workspace|/system/settings|/system/feature-flags|/system/workflow-definitions|/audit-logs|/system/notification-channels admin WORKFLOW_DEFINITION_ADMIN_ENABLED workflow_definition_admin_v1 partial_done artifacts/r70/manual-trialrun-report.md|client/tests/e2e/settings-governance.spec.ts|client/tests/e2e/live-smoke.spec.ts|server/src/scripts/smoke-trialrun-runtime.js|client/tests/e2e/r75-automation-gap-fill.spec.ts 工作区设置、系统设置、功能开关、审计日志打开与导航边界有自动化和人工证据；R74 本地门禁已检查 workspace/flag/navigation 基线，R75 已补功能开关备注保存并恢复写路径。 工作区设置、系统设置、功能开关、审计日志打开与导航边界有自动化和人工证据；R74 本地门禁已检查 workspace/flag/navigation 基线，R75 已补功能开关备注保存并恢复写路径。2026-05-04 只读 deploy 巡检已确认公网工作区仍为 `small_team_internal`，但远端 DB 中 `announcements_v1` / `global_search_v1` 仍是 `force_off`。 流程定义、通知渠道、工作区其他写操作和审计留痕写入效果仍未在当前 trialrun 做完整专项。 流程定义、通知渠道、工作区其他写操作和审计留痕写入效果仍未在当前 trialrun 做完整专项；公网部署态还存在 feature flag 与期望 workspace 导航不一致的问题。 保留 partial_done；后续若治理域纳入试运行，再补通知渠道与流程定义写路径。 保留 partial_done；先收口公网 feature flag 基线，再补通知渠道与流程定义写路径。
16 企微、HTTPS、部署态与并发 external /login(企微入口)|部署运行时|多账号并发 all roles APP_ORIGIN|COOKIE_SECURE|WECOM_*|PUBLIC_SECURITY_HARDENING_ENABLED wecom_entry_v1|public_security_hardening_v1 blocked_external deploy/trialrun/runbook.md|client/tests/e2e/wecom-entry.spec.ts|client/tests/e2e/live-smoke.spec.ts|server/src/scripts/smoke-trialrun-runtime.js|issues/2026-04-29_08-39-22-r76-external-trialrun-closeout.csv deploy/trialrun/runbook.md|client/tests/e2e/wecom-entry.spec.ts|client/tests/e2e/live-smoke.spec.ts|server/src/scripts/smoke-trialrun-runtime.js|issues/2026-04-29_08-39-22-r76-external-trialrun-closeout.csv|issues/2026-05-04_13-11-16-r79-governance-live-readiness.csv 本地/只读 smoke、env contract、导航/入口提示与 local runtime gate 已就绪。 本地/只读 smoke、env contract、导航/入口提示与 local runtime gate 已就绪；`https://oa.hyinda.com/ready` 也已通过只读探活。 真实企微 OAuth、HTTPS cookie secure、多用户并发协同仍缺环境级成功证据。腾讯 OCR 鉴权已确认不是当前主阻塞点：旧项目 `.env` 中至少一组凭证可用，当前主阻塞已转为应用层未传 PDF 参数导致的 `ImageDecodeFailed`。 真实企微 OAuth、HTTPS cookie secure、多用户并发协同仍缺环境级成功证据。2026-05-04 公网部署巡检已确认 `WECOM_ENABLED=false`、`WECOM_ENTRY_ENABLED=false`、`WECOM_OAUTH_ENABLED=false`、`OCR_PROVIDER=mock`，且 DB 中 `wecom_entry_v1` 为 `force_off`；当前 live runtime smoke 还会因 `announcements_v1` 为 `force_off` 而失败。 企微/HTTPS/并发仍按 A3/A4 外部专项推进；OCR 从“外部凭证阻塞”切换为 R77 内部修复项，修完后再回到 live trialrun。 企微/HTTPS/并发仍按 A4/A5 外部专项推进；先准备独立 smoke 账号并补齐企微后台配置，再修正公网 feature flag 基线后重跑 live smoke。