OAKISS1 完成全业务 KISS 审查台账

.agents/skills/hyb-oa-delivery/SKILL.md

@@ -31,7 +31,8 @@ Read only what is relevant:
 - OALAUNCH1 is the current final-enable gate after OAOPS1/ASSET1D/OSMOKE1: do not treat ASSET1D completion or `PASS_OA_REAL_USE_DAILY_READY` as final launch approval. Use `scripts/qa/run-oa-final-launch-readiness.sh` to aggregate evidence only; it must not create business data, execute payments, write WeCom, reset/restore the production DB, print secrets, or mark final launch ready without real business closeout, 7-day stabilization, permission matrix acceptance, backup/restore drill evidence, data-governance/training acceptance, and Day 7 Go/No-Go. Valid conclusions are `PASS_OA_LAUNCH_READY`, `PASS_WITH_FINDINGS`, `PAUSED_MANUAL_CONFIRMATION`, and `SKIP/BLOCKED_BY_EXTERNAL_CONFIG`. Permission or backup/restore fixes require read-only reviewer review before launch acceptance.
 - OPOLICY1 is the current policy-system alignment lane after OMAT1/OALAUNCH1 review: external company policies under `/home/shunli/Projects/faculty-daily-assistant/公司/制度体系建设_20260524` are adjusted to a small-team V1口径 first, then hyb-oa facts are aligned. Treat policy parameters, data-retention boundaries, seal-use ledger, approval-exception SOP, policy signoff, and P2 freeze rules as OALAUNCH1 data-governance gates. Do not assume budget hard control, complex procurement/tendering, e-signature, full e-archive, ERP/bank deep integration, or AI rule writes are pre-launch requirements. For V1, contract registry summary/archive/offline archive fields and existing attachment audit can carry seal-use traceability; announcements/manual evidence can carry policy notices/signoff until a later Issue proves dedicated schema is required. Never copy sensitive policy text, thresholds, confidential contract bodies, credentials, or full local paths into repo docs.
 - OAFLOW1 is the current OA reimbursement approval hardening lane: `wangshunli/HYD000006` as `ceo + admin` must not be assigned a fake direct manager, must not self-approve, and `admin` must not be treated as business approval authority. Reimbursement `approval_rules` now support `ownerSelfFallbackRole`; OAFLOW1 V1 only allows `finance_mgr` or null, and existing enabled rules default to `finance_mgr`. For CEO owner self-applications with no direct manager, build and persist a new workflow snapshot by replacing the first `manager` node with `finance_mgr`, removing the owner's own `ceo` node and duplicate fallback role. Precheck, submit, and approval advancement must use the same snapshot; public deployment and low-risk owner reimbursement verification require separate approval and must not execute real payment.
-- OAFRONT6 is the current frontend maturity small-step lane after OAFRONT5: use `issues/2026-05-25_12-29-03-oa-frontend-maturity-small-step-v1.csv` for scoped design follow-ups only. Route-title cleanup, asset registry sectioning, mobile visual-matrix stability, and contract registry form grouping are implemented and deployed; long-number display compaction is implemented locally and still needs deployment plus public PC readonly visual rerun before closure; Portal observation remains later feedback-driven work. Do not treat OAFRONT6 as approval for a broad redesign, business logic changes, public writes, deployment, or final launch readiness; further implementation still needs `docs/产品设计规则.md`, focused Playwright/visual evidence, and OALAUNCH1 gates.
+- OAFRONT6 is the current frontend maturity small-step lane after OAFRONT5: use `issues/2026-05-25_12-29-03-oa-frontend-maturity-small-step-v1.csv` for scoped design follow-ups only. Route-title cleanup, asset registry sectioning, mobile visual-matrix stability, contract registry form grouping, and long-number display compaction are implemented, deployed, and publicly rerun; report `artifacts/qa-flow/oafront3-pc-readonly-visual-20260525-202712/summary.json` is `PASS_PC_READONLY_VISUAL_READY` with `findingCount=0`. Portal observation remains later feedback-driven work. Do not treat OAFRONT6 as approval for a broad redesign, business logic changes, public writes, deployment, or final launch readiness; further implementation still needs `docs/产品设计规则.md`, focused Playwright/visual evidence, and OALAUNCH1 gates.
+- OAKISS1 is the current all-business-flow KISS review lane after OAFRONT6/OALAUNCH1: use `issues/2026-05-25_20-53-34-oa-business-flow-kiss-review-v1.csv` to record review evidence and suggestions across reimbursement/OCR, approval, procurement/expense, contracts/projects, payment/AP, invoice pool, assets, permissions, mobile/WeCom entry, and operations. It follows MAGI wording as an audit structure only: review first, run read-only evidence and record gaps second, then produce KISS keep/simplify/defer/manual-SOP recommendations. It must not create business data, execute payments, delete data, write WeCom, change production config, or replace OALAUNCH1 gates. Current evidence includes OAOPS1 daily `artifacts/qa-flow/oa-real-use-daily-20260525-205848/summary.json`, OALAUNCH1 `artifacts/qa-flow/oa-final-launch-readiness-20260525-211233/summary.json`, permission matrix `artifacts/qa-flow/oa-permission-matrix-20260525T130601Z/summary.json`, PC visual `artifacts/qa-flow/oafront3-pc-readonly-visual-20260525-210819/summary.json`, remote owner route `owner-application-approval-route-20260525-oakiss1`, and ASSET1D evidence. Treat the top remaining launch gates as real business closeout, 7-day stabilization, backup/restore drill, and data-governance/training acceptance.
 - OMAT1 is the current maturity-gap review goal after OALAUNCH1: use `issues/2026-05-23_17-20-00-oa-maturity-gap-review-v1.csv` as the reviewable ledger for every problem or suggestion. It includes domestic benchmark sources, a domain capability comparison matrix, manual decision Q&A checklist, review decision packet, status audit, and MAGI round reviews in the manual trial-run report, the small-team rule that maturity means controlled operation before feature breadth, explicit adopt/defer/reject decision回填, and a need for a concise evidence view. Follow the MAGI cycle wording as audit structure only: review/evaluate first, record or solve bounded evidence gaps second, then prioritize direction. Do not implement OMAT1 suggestions until the user chooses adopt/defer/reject and a proper Issue CSV exists for the adopted work.
 - WEGOV1 changes the current WeCom route to "Enterprise WeChat owns mature HR/attendance flows; OA stores self-owned history, audit, entry, messages, and emergency fallback." Treat four domains explicitly: WeCom-owned domain is check-in, leave, missed punch, outing, overtime, leave balance, and HR assistant; OA-owned domain remains reimbursement, procurement, contracts, projects, payments, invoices, bank receipts, sensitive attachments, and operating audit; OA archive domain stores WeCom business history, full external keys, and necessary snapshots; OA emergency domain is manually enabled only when WeCom is unavailable. Do not assume a full isolated WeCom sandbox; use the controlled test domain `SMOKE002 -> SMOKE101`, `OA-POC` templates, low-risk approvals, synthetic tests, public live runners, and limited real-device confirmation. WARCH1 now supplies the minimum leave/missed-punch archive implementation, WARCH2 supplies the formal read-only history query surface, and WROAD2 supplies controlled ops daily checks. Do not start deep mirror until WROAD2-CLOSEOUT, WROAD2-BIZ1, WAPPR1, WRULE1, WAUTO1/WEXT1LD, WFULLSMOKE1, WTCLOSE2, WEXT1-FORMAL, WREAL1 question gates or explicit approval, and the mirror stage's own contract are complete.
 - For reimbursement, invoice, OCR, duplicate invoice, or attachment work, read `docs/报销发票附件规则.md` and `references/reimbursement.md`.

docs/trialrun/人工试运行报告.md

@@ -759,3 +759,50 @@ git show 5da05eb:docs/trialrun/人工试运行报告.md
 | 边界 | 不改后端编号、不改权限模型、不写公网业务数据；部署后仍需公网 PC 只读视觉矩阵复测 |
 
 Portal 首屏工作台化继续保留为 7 天真实使用反馈后的观察项，不能凭审美偏好在启用前大重排。
+
+## OAKISS1 全业务流程 KISS 审查
+
+本节承接用户手动操作发现问题后的全业务审查要求。审查方法按 MAGI 三段执行：先审视范围和风险，再执行只读自动化证据，最后按 KISS 原则提出保留、简化、后置和人工验收建议。本轮不改业务代码、不创建真实业务数据、不付款、不删除数据、不写企业微信。
+
+| 证据 | 结论 | 说明 |
+| --- | --- | --- |
+| OAKISS1 合同 | 已建档 | `issues/2026-05-25_20-53-34-oa-business-flow-kiss-review-v1.csv` 覆盖报销/OCR、审批、采购/费用、合同/项目、付款/AP、票据池、资产、权限、移动/企微入口和 KISS 建议。 |
+| OAOPS1 公网日巡检 | 通过 | `artifacts/qa-flow/oa-real-use-daily-20260525-205848/summary.json` 为 `PASS_OA_REAL_USE_DAILY_READY`，公网 `/ready`、live smoke、角色 readiness、feature flags、只读业务探针、移动入口、企微渲染和隐私检查均通过。 |
+| OALAUNCH1 汇总 | 暂停人工门禁 | `artifacts/qa-flow/oa-final-launch-readiness-20260525-211233/summary.json` 为 `PAUSED_MANUAL_CONFIRMATION`；权限矩阵证据已接入，但真实业务闭环、7 天稳定化、备份恢复演练、数据治理培训仍缺。 |
+| 权限矩阵 | 通过 | `artifacts/qa-flow/oa-permission-matrix-20260525T130601Z/summary.json` 为 `PASS_PERMISSION_MATRIX_READY`，7 个角色、43 个正例、42 个负例均通过，普通员工不能越权进入付款、AP、审计、系统配置等入口。 |
+| PC 只读视觉矩阵 | 通过 | `artifacts/qa-flow/oafront3-pc-readonly-visual-20260525-210819/summary.json` 为 `PASS_PC_READONLY_VISUAL_READY`，7 个角色、32 个 PC 关键页面无 finding；审计日志 UUID 属于 C 类排障页例外。 |
+| OAFLOW1 负责人本人审批 | 通过 | 远端只读诊断 `owner-application-approval-route-20260525-oakiss1/summary.json` 为 `PASS_OWNER_APPLICATION_ROUTE_READY`，`HYD000006` 负责人本人申请会进入 `finance_mgr` 非本人兜底，不自审。 |
+| 资产台账 | 通过 | `asset1d-public-trial-20260523-155346` 已证明 `FA/EA-SYS/EA-REPO/EA-BKP` 公网试录通过；`asset-redacted-index-import-live-20260523-162358` 已证明 3 条脱敏 `EA-DOC` 受控导入通过。 |
+| OCR 健康补充 | 有自动化维护项 | live readiness 中真实 OCR 样本能在约 1.2 秒返回终态，本次样本因重复或同票据归为可解释结果；远端 `check-pending-ocr` 直接执行遇到 Prisma Client 构造兼容问题，记录为 QA 脚本维护项，不作为 OCR 业务失败。 |
+
+### KISS 审查结论
+
+| 业务 | 当前判断 | KISS 建议 |
+| --- | --- | --- |
+| 报销 / PDF OCR | 主路径可用，员工报销页能看到草稿、审批中、已通过、已支付等状态；真实闭环仍缺一条从 PDF 发票到付款/AP 导出的人工证据。 | 保留当前主流程；不要扩大到图片 OCR、企业卡或复杂费用控制。优先让员工只做“上传 PDF、确认字段、提交”，重复票提示用业务语义表达。 |
+| 审批 / 进度 | 审批链、负责人本人兜底和移动审批入口已有证据；复杂 BPM 不应进入 V1。 | 保留一层主管/指定角色 + 非本人兜底；审批页只突出“待我审批”和“我发起的进度”，不要让申请人理解完整规则矩阵。 |
+| 采购 / 费用 | 模块入口可达，但当前真实采购样本不足，OALAUNCH1 仍要求补 1 条低风险采购/费用关联项目或合同。 | 先做轻流程：标题、金额、用途、项目/合同、附件说明和审批；预算硬控、供应商准入、询比价后置。 |
+| 合同 / 项目 | 合同台账分组已改善，但列表中 `TEST/SMOKE` 数据较多，真实使用时会干扰查找。 | 保留摘要台账和线下归档位置，不上传涉密正文；建议后续增加“隐藏测试数据/仅正式合同”默认筛选，项目页只串联摘要和风险。 |
+| 付款 / AP / 代账 | 付款批次、AP、回单入口可达，实际付款仍应在线下银行完成；财务 AP 页面信息密度高但适合财务角色。 | 保留“待付款、已付款、异常、导出”四类核心视图；默认优先待付款和异常，不把全部历史测试单压到首屏。 |
+| 票据池 / OCR | 票据池可读，长编号已压缩；少量样本足以证明常见 PDF 路径，不需要一次跑完整历史发票库。 | 小团队采用够用策略：固定少量代表性样本 + 真实业务闭环。不要批量上传历史票据原图到测试报告。 |
+| 资产台账 | 统一资产台账可用，但管理员页仍承担分类维护、资产列表和详情长表单，学习成本偏高。 | 保留统一台账；分类维护建议后续移到折叠区或独立管理入口，`ERP 同步状态` 在 ERP 关闭期间默认折叠。继续不做 `EA-ACC` 密码/账号资产。 |
+| 权限 / 审计 / 移动入口 | 自动负例和移动/企微入口均通过；最终启用仍需要真实用户反馈和 Day 7 Go/No-Go。 | 保持角色入口收敛，一个角色只看到当下该做的事；普通员工无权限提示要简短可理解。审计页允许内部编号，普通页不展示 UUID。 |
+
+### 必须人工完成的最小验收包
+
+1. 员工提交 1 条真实低风险报销：上传真实 PDF 发票，确认 OCR 字段和重复票据提示，提交审批。
+2. 审批人先打开详情再处理：验证审批历史、当前节点和非自审。
+3. 财务创建付款批次：真实付款仍走银行；付款后在 OA 上传银行回单或回单摘要，标记已付款，导出 AP/代账资料。
+4. 员工或负责人提交 1 条低风险采购/费用：关联项目或合同，完成审批。
+5. 管理员录入 1 条真实合同台账：只写摘要、归档位置、负责人和关联项目，不上传涉密合同正文。
+6. 管理员抽查资产台账：至少核验 1 条真实固定资产或电子资产的负责人、保管人、归档/验证日期。
+7. 运维做备份恢复演练或影子库恢复验证：记录 RTO/RPO、负责人和脱敏证据。
+8. Day 1-7 每天登记阻断、非阻断和建议：阻断当天建修复合同，非阻断进入反馈池。
+
+### 后续建议分级
+
+| 级别 | 建议 |
+| --- | --- |
+| P0 启用前必须补 | 真实报销闭环、采购/费用真实样本、合同台账真实样本、备份恢复演练、7 天稳定化起始日期和每日问题登记。 |
+| P1 稳定期后优先 | 默认隐藏 `TEST/SMOKE` 数据、财务 AP 默认待处理视图、资产分类维护降噪、合同/项目到期和责任提醒、Portal 首屏按真实反馈小步调整。 |
+| P2 继续冻结 | 图片 OCR、复杂 BPM、预算硬控、ERP/银行深集成、真实支付直连、电子签章、完整电子档案系统、HR 深镜像、应急接管、恢复写回和 RuleOps。 |

docs/文档事实源状态矩阵.md

@@ -115,7 +115,8 @@
 | `OMAT1` | `issues/2026-05-23_17-20-00-oa-maturity-gap-review-v1.csv` | `CURRENT` | 当前成熟度缺口审查台账：按 MAGI 审视/执行/提升轮次调查 hyb-oa 是否成熟，并对标国内主流 OA/协同/低代码/财务/资产系统；已补充国内对标来源、小团队取舍原则、用户决策回填和成熟度证据视图；所有问题和建议先记录为待用户采纳、暂缓或否决，不直接改业务代码 |
 | `OPOLICY1` | `issues/2026-05-24_01-20-52-oa-policy-system-alignment-v1.csv` | `CURRENT` | 当前制度与 OA 对齐合同：先调整外部制度包为小团队 V1，再回写 OA 事实源和启用门禁；制度参数、资料留存、用印台账、审批异常 SOP、制度签收和 P2 冻结进入 OALAUNCH1 数据治理门禁；现有合同台账、资产台账和公告能力可承载 V1，不立即做 schema 或业务代码改造 |
 | `OAFLOW1` | `issues/2026-05-24_19-03-07-oa-owner-application-fallback-approval-v1.csv` | `CURRENT` | 当前负责人本人申请兜底审批合同：`wangshunli/HYD000006` 本人报销不配置假直属主管、不允许自审、不把 `admin` 当业务审批权；报销审批规则新增 `ownerSelfFallbackRole`，首版只允许 `finance_mgr` 或置空，现有启用规则默认 `finance_mgr`，提交时生成新单审批快照并移除本人 `ceo` 节点和重复兜底角色；公网低风险验证需另行批准 |
-| `OAFRONT6` | `issues/2026-05-25_12-29-03-oa-frontend-maturity-small-step-v1.csv` | `CURRENT` | 当前前端成熟化小步收口合同：承接 OAFRONT5 部署后 PC 硬问题清零和设计审计；路由标题修复、资产台账详情分区、移动视觉矩阵稳定等待和合同台账表单分组已实施并部署；长编号压缩已本地实施并待部署复测；Portal 观察继续后置；本合同不写公网业务数据，不替代 OALAUNCH1 真实业务、备份恢复、7 天稳定化或 Go/No-Go |
+| `OAFRONT6` | `issues/2026-05-25_12-29-03-oa-frontend-maturity-small-step-v1.csv` | `CURRENT` | 当前前端成熟化小步收口合同：承接 OAFRONT5 部署后 PC 硬问题清零和设计审计；路由标题修复、资产台账详情分区、移动视觉矩阵稳定等待、合同台账表单分组和长编号压缩均已实施部署，公网 PC 只读视觉矩阵复测 `PASS_PC_READONLY_VISUAL_READY` 且 `findingCount=0`；Portal 观察继续后置；本合同不写公网业务数据，不替代 OALAUNCH1 真实业务、备份恢复、7 天稳定化或 Go/No-Go |
+| `OAKISS1` | `issues/2026-05-25_20-53-34-oa-business-flow-kiss-review-v1.csv` | `CURRENT` | 当前全业务流程 KISS 审查合同：按 MAGI 审视/执行/提升轮次，对报销/OCR、审批、采购/费用、合同/项目、付款/AP、票据池、资产、权限、移动/企微入口逐项做自动化和人工步骤审查；输出 KISS 建议台账，不直接改业务代码；OALAUNCH1 真实业务闭环、备份恢复、7 天稳定化和 Go/No-Go 仍是正式启用前硬门禁 |
 | `WREAL1-PREP` | `issues/2026-05-20_14-35-42-wecom-real-trial-prep-v1.csv` | `CURRENT` | 真实小范围试用准备合同：只固化候选员工、非自审审批人、回滚联系人、允许流程、暂停条件和验收标准；当前不启用真实员工，真实试用必须等请假/补卡/外出/加班四类测试号证据、WAPPR1 审批规则门禁和 WFULLSMOKE1 全域主路径可解释通过后再问 |
 
 旧 Issue CSV 保留为历史审计证据：不删除、不批量回写、不移动到 `docs/archive/` 或其他归档目录。新连续合同如替代旧合同，只在新合同 `Notes` 或文档索引中说明 supersedes。
@@ -124,8 +125,8 @@
 
 | Doc_ID | Path | Category | Authority | Status | Owner | Related_Issues | Evidence | Supersedes | Last_Audited | Audit_Method | Risk | Notes |
 | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
-| `IDX` | `docs/文档索引.md` | 入口索引 | 最高文档入口 | `CURRENT` | product/dev | `GOV8,QAOPS9,P2D,P2-ORG,P2-FIN-DECISION,P2-FIN-V1,P2-OCR-SAMPLE,P2Q,P2AUTO,P2AF,P2-FIN-LIVE-DECISION,P2-FIN-LIVE,PRELAUNCH,CASHIER-VOUCHER-V1,LAUNCH-DEPLOY-FINANCE,FIN-PROD-ENABLE,ACCOUNTING-HANDOFF-V1,SYSTEM-COMPLETE-GATE,LAUNCH-OPS-V1,REQ-COMPLETE-AUDIT,ATTV1,LAUNCH-AUTO-OPS-V1,AUTO-REMAINING-CLOSEOUT,HR-WECOM-DIRECTORY-V1,WFOC,DBWFOC,WFDG,WDRG,WCP1,WCPC,WHMS,WHMSLIVE,WOUA,WAPI,WRRA,WOUAFIX,WRV1,WRA1,WMSG1,WAPC1,WAPC2,WPROC1,WPROC2,WAPC2F,WAPC2FLIVE,WCBK1,WEGOV1,WARCH1,WARCH2,WROAD2,WARCH3,WCHECK1,WEXT1,WOPS1,WROAD2C,WROAD2B,WAPPR1,WRULE1,WAUTO1,WEXT1LD,WFULLSMOKE1,WTCLOSE2,WREAL1P,OAOPS1,ASSET1,OSMOKE1,OALAUNCH1,OMAT1,OPOLICY1,OAFLOW1,OAFRONT6` | `rg` | none | 2026-05-25 | `node scripts/qa/audit-docs.mjs --check-registry` | medium | 判断当前该读什么；OAOPS1/ASSET1/OSMOKE1 后优先读取 OALAUNCH1 最终启用门禁、OMAT1 成熟度缺口、OPOLICY1 制度与 OA 对齐、OAFLOW1 负责人本人报销兜底、OAFRONT6 前端成熟化规划、小团队 V1、每日巡检、备份恢复和 P2 冻结口径 |
+| `IDX` | `docs/文档索引.md` | 入口索引 | 最高文档入口 | `CURRENT` | product/dev | `GOV8,QAOPS9,P2D,P2-ORG,P2-FIN-DECISION,P2-FIN-V1,P2-OCR-SAMPLE,P2Q,P2AUTO,P2AF,P2-FIN-LIVE-DECISION,P2-FIN-LIVE,PRELAUNCH,CASHIER-VOUCHER-V1,LAUNCH-DEPLOY-FINANCE,FIN-PROD-ENABLE,ACCOUNTING-HANDOFF-V1,SYSTEM-COMPLETE-GATE,LAUNCH-OPS-V1,REQ-COMPLETE-AUDIT,ATTV1,LAUNCH-AUTO-OPS-V1,AUTO-REMAINING-CLOSEOUT,HR-WECOM-DIRECTORY-V1,WFOC,DBWFOC,WFDG,WDRG,WCP1,WCPC,WHMS,WHMSLIVE,WOUA,WAPI,WRRA,WOUAFIX,WRV1,WRA1,WMSG1,WAPC1,WAPC2,WPROC1,WPROC2,WAPC2F,WAPC2FLIVE,WCBK1,WEGOV1,WARCH1,WARCH2,WROAD2,WARCH3,WCHECK1,WEXT1,WOPS1,WROAD2C,WROAD2B,WAPPR1,WRULE1,WAUTO1,WEXT1LD,WFULLSMOKE1,WTCLOSE2,WREAL1P,OAOPS1,ASSET1,OSMOKE1,OALAUNCH1,OMAT1,OPOLICY1,OAFLOW1,OAFRONT6,OAKISS1` | `rg` | none | 2026-05-25 | `node scripts/qa/audit-docs.mjs --check-registry` | medium | 判断当前该读什么；OAOPS1/ASSET1/OSMOKE1 后优先读取 OALAUNCH1 最终启用门禁、OMAT1 成熟度缺口、OPOLICY1 制度与 OA 对齐、OAFLOW1 负责人本人报销兜底、OAFRONT6 前端成熟化规划、OAKISS1 全业务 KISS 审查、小团队 V1、每日巡检、备份恢复和 P2 冻结口径 |
-| `REG` | `docs/文档事实源状态矩阵.md` | 文档台账 | 文档分类和状态事实源 | `CURRENT` | product/dev | `GOV8,QAOPS9,P2D,P2-ORG,P2-FIN-DECISION,P2-FIN-V1,P2-OCR-SAMPLE,P2Q,P2AUTO,P2AF,P2-FIN-LIVE-DECISION,P2-FIN-LIVE,PRELAUNCH,CASHIER-VOUCHER-V1,LAUNCH-DEPLOY-FINANCE,FIN-PROD-ENABLE,ACCOUNTING-HANDOFF-V1,SYSTEM-COMPLETE-GATE,LAUNCH-OPS-V1,REQ-COMPLETE-AUDIT,ATTV1,LAUNCH-AUTO-OPS-V1,AUTO-REMAINING-CLOSEOUT,HR-WECOM-DIRECTORY-V1,WFOC,DBWFOC,WFDG,WDRG,WCP1,WCPC,WHMS,WHMSLIVE,WOUA,WAPI,WRRA,WOUAFIX,WRV1,WRA1,WMSG1,WAPC1,WAPC2,WPROC1,WPROC2,WAPC2F,WAPC2FLIVE,WCBK1,WEGOV1,WARCH1,WARCH2,WROAD2,WARCH3,WCHECK1,WEXT1,WOPS1,WROAD2C,WROAD2B,WAPPR1,WRULE1,WAUTO1,WEXT1LD,WFULLSMOKE1,WTCLOSE2,WREAL1P,OAOPS1,ASSET1,OSMOKE1,OALAUNCH1,OMAT1,OPOLICY1,OAFLOW1,OAFRONT6` | `audit-docs` | none | 2026-05-25 | `audit-docs --check-registry` | medium | 判断文档权威性；登记当前 OALAUNCH1 最终启用 Go/No-Go、OMAT1 成熟度缺口、OPOLICY1 制度与 OA 对齐、OAFLOW1 负责人本人报销兜底、OAFRONT6 前端成熟化规划、OAOPS1、ASSET1、OSMOKE1、每日巡检、阻断即修和冻结项事实 |
+| `REG` | `docs/文档事实源状态矩阵.md` | 文档台账 | 文档分类和状态事实源 | `CURRENT` | product/dev | `GOV8,QAOPS9,P2D,P2-ORG,P2-FIN-DECISION,P2-FIN-V1,P2-OCR-SAMPLE,P2Q,P2AUTO,P2AF,P2-FIN-LIVE-DECISION,P2-FIN-LIVE,PRELAUNCH,CASHIER-VOUCHER-V1,LAUNCH-DEPLOY-FINANCE,FIN-PROD-ENABLE,ACCOUNTING-HANDOFF-V1,SYSTEM-COMPLETE-GATE,LAUNCH-OPS-V1,REQ-COMPLETE-AUDIT,ATTV1,LAUNCH-AUTO-OPS-V1,AUTO-REMAINING-CLOSEOUT,HR-WECOM-DIRECTORY-V1,WFOC,DBWFOC,WFDG,WDRG,WCP1,WCPC,WHMS,WHMSLIVE,WOUA,WAPI,WRRA,WOUAFIX,WRV1,WRA1,WMSG1,WAPC1,WAPC2,WPROC1,WPROC2,WAPC2F,WAPC2FLIVE,WCBK1,WEGOV1,WARCH1,WARCH2,WROAD2,WARCH3,WCHECK1,WEXT1,WOPS1,WROAD2C,WROAD2B,WAPPR1,WRULE1,WAUTO1,WEXT1LD,WFULLSMOKE1,WTCLOSE2,WREAL1P,OAOPS1,ASSET1,OSMOKE1,OALAUNCH1,OMAT1,OPOLICY1,OAFLOW1,OAFRONT6,OAKISS1` | `audit-docs` | none | 2026-05-25 | `audit-docs --check-registry` | medium | 判断文档权威性；登记当前 OALAUNCH1 最终启用 Go/No-Go、OMAT1 成熟度缺口、OPOLICY1 制度与 OA 对齐、OAFLOW1 负责人本人报销兜底、OAFRONT6 前端成熟化规划、OAKISS1 全业务 KISS 审查、OAOPS1、ASSET1、OSMOKE1、每日巡检、阻断即修和冻结项事实 |
 | `PRD-MVP` | `docs/海音达OA-MVP需求规格说明书.md` | 需求事实源 | PRD 主事实源 | `CURRENT` | product | `REQ8,P2T,GOV8,HR-WECOM-DIRECTORY-V1,WFOC,DBWFOC,WFDG,WDRG,WCP1,WCPC,WHMS,WHMSLIVE,WOUA,WAPI,WRRA,WAPC1,WAPC2,WAPC2FLIVE,WCBK1,WEGOV1,WACP3,WACP3R,WARCH1,WARCH2,WROAD2,WARCH3,WCHECK1,WEXT1` | Issue CSV | `docs/requirements-specification.md` | 2026-05-20 | `rg` | high | WARCH3/WCHECK1/WEXT1/WOPS1 后定义 HR/考勤企微主办、OA 自建留存、受控测试域、只读历史查询、自动巡检、打卡摘要、外出/加班 dry-run、WEXT1-FORMAL、WREAL1 前置和深度镜像边界；ERP 未来不接入 OA |
 | `PRODUCT-SCOPE` | `docs/产品口径.md` | 需求事实源 | 产品边界事实源 | `CURRENT` | product | `REQ8,P2T,WFDG,WDRG,WCP1,WCPC,WHMS,WHMSLIVE,WOUA,WAPI,WRRA,WAPC1,WAPC2FLIVE,WCBK1,WEGOV1` | `rg` | none | 2026-05-19 | `rg` | high | 记录已拍板产品边界、企微/OA 设计门禁、开发路线图、WCBK1 真实回调事件证据、WEGOV1 混合主办边界和 OA 自建留存策略 |
 | `DESIGN-UI` | `docs/产品设计规则.md` | 设计事实源 | PC/移动/企业微信设计事实源 | `CURRENT` | design/frontend | `MIA7,MIF7,GOV8,DG8,DG9,WFDG` | Playwright/视觉审查/DG8/DG9/WFDG | none | 2026-05-18 | `rg` | high | 页面改动必须读取；DG8 后飞书为主 UI/布局参考；DG9 后按页面分层和样板选型；WFDG 后区分 OA 主办、企微镜像和 OA 应急接管 |

docs/文档索引.md

@@ -20,7 +20,7 @@
 
 ## 最近事实源链
 
-R6 -> PC6 -> PA6 -> FL6 -> AP6 -> RI6 -> LP6 -> ME6/QG6 -> DG7/MRF7 -> MIA7 -> MIF7/MIF7T(公网部署与带凭据公网复检已收口) -> DG8 -> DG9 -> R7E -> FBA -> QAOPS9/P2D -> P2-ORG -> P2-FIN-DECISION -> P2-FIN-V1 -> P2-OCR-SAMPLE -> P2Q -> P2AUTO -> P2AF -> P2-FIN-LIVE-DECISION -> P2-FIN-LIVE -> PRELAUNCH -> CASHIER-VOUCHER-V1 -> LAUNCH-DEPLOY-FINANCE -> FIN-PROD-ENABLE -> ACCOUNTING-HANDOFF-V1 -> SYSTEM-COMPLETE-GATE -> LAUNCH-OPS-V1 -> REQ-COMPLETE-AUDIT -> ATTV1 -> LAUNCH-AUTO-OPS-V1 -> AUTO-REMAINING-CLOSEOUT -> HR-WECOM-DIRECTORY-V1 -> HRWD-CONTACT-LIVE-TEST -> WCFB -> WFOC -> DBWFOC -> WFDG -> WDRG -> WCP1 -> WCPC -> WHMS -> WHMSLIVE -> WOUA -> WAPI -> WRRA -> WOUA-FIX -> WRV1 -> WRA1 -> WMSG1 -> WAPC1 -> WAPC2 -> WPROC1 -> WPROC2 -> WAPC2F dry-run -> WAPC2FLIVE -> WCBK1 -> WEGOV1 -> WACP3/WACP3R -> WREAD1 自动汇总 -> WREAD1F 新样例 -> WREAD1 真机确认 -> WADM1 自建留存模型设计 -> WARCH1 最小审批历史留存 -> WARCH2 正式只读历史查询 -> WROAD2+OPS 受控上线与每日巡检 -> WARCH3 归档稳定化自动巡检 -> WCHECK1 打卡摘要留存 -> WEXT1 外出/加班 dry-run -> WOPS1 巡检告警降噪 -> WROAD2-CLOSEOUT 三天验收 -> WROAD2-BIZ1 三天业务冒烟 -> WAPPR1 审批规则规范化 -> WRULE1 审批链校验器 POC -> WAUTO1 自动证据汇总 -> WEXT1LD live 前 dry-run -> WFULLSMOKE1 三天全域最终目标测试 -> WROUTE2 测试号收口到最小镜像路线锁定 -> WTCLOSE1 小团队自动审批规则与测试号全域收口 dry-run -> WTCLOSE2 测试号最终收口与证据复核 -> WTCLOSE2F 远端可信 IP 执行口径修正 -> WREMOTE1 远端可信 IP 收口 -> WFULLSMOKE2 全域 smoke -> WEXT1-FORMAL/WEXT1F 正式模板外出/加班测试 -> OAOPS1 小团队全员真实使用稳定化 -> ASSET1 电子资产与固定资产统一台账 -> OSMOKE1 OA-only smoke 账号治理与公网自动化恢复 -> OALAUNCH1 最终启用前收口与 Go/No-Go 门禁 -> OMAT1 成熟度缺口审查 -> OPOLICY1 制度与 OA 对齐 -> OAFRONT6 前端成熟化小步收口（标题/资产/移动/合同已部署，长编号本地已实施待部署复测）-> 后续再按需问答 WREAL1/最小镜像。
+R6 -> PC6 -> PA6 -> FL6 -> AP6 -> RI6 -> LP6 -> ME6/QG6 -> DG7/MRF7 -> MIA7 -> MIF7/MIF7T(公网部署与带凭据公网复检已收口) -> DG8 -> DG9 -> R7E -> FBA -> QAOPS9/P2D -> P2-ORG -> P2-FIN-DECISION -> P2-FIN-V1 -> P2-OCR-SAMPLE -> P2Q -> P2AUTO -> P2AF -> P2-FIN-LIVE-DECISION -> P2-FIN-LIVE -> PRELAUNCH -> CASHIER-VOUCHER-V1 -> LAUNCH-DEPLOY-FINANCE -> FIN-PROD-ENABLE -> ACCOUNTING-HANDOFF-V1 -> SYSTEM-COMPLETE-GATE -> LAUNCH-OPS-V1 -> REQ-COMPLETE-AUDIT -> ATTV1 -> LAUNCH-AUTO-OPS-V1 -> AUTO-REMAINING-CLOSEOUT -> HR-WECOM-DIRECTORY-V1 -> HRWD-CONTACT-LIVE-TEST -> WCFB -> WFOC -> DBWFOC -> WFDG -> WDRG -> WCP1 -> WCPC -> WHMS -> WHMSLIVE -> WOUA -> WAPI -> WRRA -> WOUA-FIX -> WRV1 -> WRA1 -> WMSG1 -> WAPC1 -> WAPC2 -> WPROC1 -> WPROC2 -> WAPC2F dry-run -> WAPC2FLIVE -> WCBK1 -> WEGOV1 -> WACP3/WACP3R -> WREAD1 自动汇总 -> WREAD1F 新样例 -> WREAD1 真机确认 -> WADM1 自建留存模型设计 -> WARCH1 最小审批历史留存 -> WARCH2 正式只读历史查询 -> WROAD2+OPS 受控上线与每日巡检 -> WARCH3 归档稳定化自动巡检 -> WCHECK1 打卡摘要留存 -> WEXT1 外出/加班 dry-run -> WOPS1 巡检告警降噪 -> WROAD2-CLOSEOUT 三天验收 -> WROAD2-BIZ1 三天业务冒烟 -> WAPPR1 审批规则规范化 -> WRULE1 审批链校验器 POC -> WAUTO1 自动证据汇总 -> WEXT1LD live 前 dry-run -> WFULLSMOKE1 三天全域最终目标测试 -> WROUTE2 测试号收口到最小镜像路线锁定 -> WTCLOSE1 小团队自动审批规则与测试号全域收口 dry-run -> WTCLOSE2 测试号最终收口与证据复核 -> WTCLOSE2F 远端可信 IP 执行口径修正 -> WREMOTE1 远端可信 IP 收口 -> WFULLSMOKE2 全域 smoke -> WEXT1-FORMAL/WEXT1F 正式模板外出/加班测试 -> OAOPS1 小团队全员真实使用稳定化 -> ASSET1 电子资产与固定资产统一台账 -> OSMOKE1 OA-only smoke 账号治理与公网自动化恢复 -> OALAUNCH1 最终启用前收口与 Go/No-Go 门禁 -> OMAT1 成熟度缺口审查 -> OPOLICY1 制度与 OA 对齐 -> OAFRONT6 前端成熟化小步收口（标题/资产/移动/合同/长编号已部署并公网复测通过）-> OAKISS1 全业务流程 KISS 审查 -> 后续再按需问答 WREAL1/最小镜像。
 
 - R6、PC6、PA6、FL6、AP6、RI6、LP6 已完成并部署。
 - ME6 自动化、公网视觉矩阵和 `ME6-3` 代表性企业微信真机门禁已完成。
@@ -175,7 +175,8 @@ R6 -> PC6 -> PA6 -> FL6 -> AP6 -> RI6 -> LP6 -> ME6/QG6 -> DG7/MRF7 -> MIA7 -> M
 | `OALAUNCH1` | `issues/2026-05-23_16-49-39-oa-final-launch-readiness-v1.csv` | 当前最终启用前收口与 Go/No-Go 门禁：在 OAOPS1/ASSET1D 之上增加业务闭环、权限、备份恢复、数据治理、培训和 Day 7 决策 | 新增 `scripts/qa/run-oa-final-launch-readiness.sh`，默认只读聚合 OAOPS1、ASSET1D、权限矩阵、备份恢复演练和人工 Go/No-Go 证据，输出 `PASS_OA_LAUNCH_READY` / `PASS_WITH_FINDINGS` / `PAUSED_MANUAL_CONFIRMATION` / `SKIP/BLOCKED_BY_EXTERNAL_CONFIG` | 不创建业务数据、不执行付款、不写企业微信、不恢复数据库；未达到 `PASS_OA_LAUNCH_READY` 前不得宣布最终正式启用完成 |
 | `OMAT1` | `issues/2026-05-23_17-20-00-oa-maturity-gap-review-v1.csv` | 当前成熟度缺口审查台账：按 MAGI 审视/执行/提升轮次，对标国内主流 OA、协同、低代码、财务和资产系统，记录每个问题或建议供用户逐项采纳、暂缓或否决 | 已登记最终启用、真实业务闭环、权限、备份恢复、运营支持、流程配置、报表、财务月结、合同、采购、资产、HR 镜像、移动体验、数据治理、SLO、集成、知识档案、主数据、UX、AI 边界、国内对标来源、小团队取舍原则、用户决策回填、成熟度证据视图和最低非功能基线等候选项 | 本台账只做审查和决策，不直接触发业务代码实现；采纳项必须另建或延续对应 Issue CSV，并满足 OALAUNCH1 门禁 |
 | `OPOLICY1` | `issues/2026-05-24_01-20-52-oa-policy-system-alignment-v1.csv` | 当前制度与 OA 对齐合同：先把外部制度包裁剪为小团队 V1，再回写 OA 事实源和启用门禁 | 已固化制度参数、资料留存、用印台账、审批异常 SOP、制度签收和 P2 冻结边界；预算硬控、复杂招采、电子签章、完整电子档案系统、ERP/银行深集成和 AI 自动改规则不作为正式启用前置条件 | 本合同优先制度和事实源调整；现有合同台账/资产台账/公告能力可承载 V1，不立即做 schema 或业务代码改造 |
-| `OAFRONT6` | `issues/2026-05-25_12-29-03-oa-frontend-maturity-small-step-v1.csv` | 当前前端成熟化小步收口：承接 OAFRONT5 部署后 PC 硬问题清零和设计审计；审批规则路由标题、资产台账详情分区、移动视觉矩阵稳定等待和合同台账表单分组已实施并部署；长编号压缩已本地实施，待部署后跑公网 PC 只读视觉矩阵复测；Portal 继续后置观察 | 页面改动继续读取 `docs/产品设计规则.md` 和 OALAUNCH1 启用门禁；后续 Portal 仍需按真实使用反馈推进 | 不写公网业务数据；不替代真实业务闭环、备份恢复、7 天稳定化或 Day 7 Go/No-Go |
+| `OAFRONT6` | `issues/2026-05-25_12-29-03-oa-frontend-maturity-small-step-v1.csv` | 当前前端成熟化小步收口：承接 OAFRONT5 部署后 PC 硬问题清零和设计审计；审批规则路由标题、资产台账详情分区、移动视觉矩阵稳定等待、合同台账表单分组和长编号压缩均已实施部署，公网 PC 只读视觉矩阵复测 `PASS_PC_READONLY_VISUAL_READY` 且 `findingCount=0`；Portal 继续后置观察 | 页面改动继续读取 `docs/产品设计规则.md` 和 OALAUNCH1 启用门禁；后续 Portal 仍需按真实使用反馈推进 | 不写公网业务数据；不替代真实业务闭环、备份恢复、7 天稳定化或 Day 7 Go/No-Go |
+| `OAKISS1` | `issues/2026-05-25_20-53-34-oa-business-flow-kiss-review-v1.csv` | 当前全业务流程 KISS 审查台账：按 MAGI 审视/执行/提升轮次，对报销/OCR、审批、采购/费用、合同/项目、付款/AP、票据池、资产、权限、移动/企微入口逐项做自动化和人工步骤审查 | 已形成 OAOPS1、OALAUNCH1、权限矩阵、PC 视觉、负责人审批链、资产试录和 OCR 辅助证据；建议保留 P0 主流程、简化 TEST/SMOKE 噪声和高密度后台页、后置 P2 复杂能力 | 本台账只做审查和建议，不直接改业务代码；真实业务闭环、备份恢复和 Day 7 Go/No-Go 仍按 OALAUNCH1 人工门禁执行 |
 | `WREAL1-PREP` | `issues/2026-05-20_14-35-42-wecom-real-trial-prep-v1.csv` | 当前真实试用准备：不启用真实员工 | 固化候选员工、非自审审批人、回滚联系人、允许流程、暂停条件和验收标准；真实试用必须等请假、补卡、外出、加班四类测试号证据、WAPPR1 和 WFULLSMOKE1 通过后再问 | 当前不创建外出/加班 live 样件；真实员工名单不写入 Issue 或文档，后续通过问答确认 |
 
 旧 Issue CSV 不删除、不批量回写、不移动到归档目录。若新治理流替代旧合同，只在新 CSV 的 `Notes` 或本索引说明 supersedes，旧文件保留历史审计语义。

issues/2026-05-25_20-53-34-oa-business-flow-kiss-review-v1.csv

@@ -0,0 +1,11 @@
+"ID","Title","Description","Acceptance","Test_Method","Tools","Dev_Status","Review1_Status","Regression_Status","Files","Dependencies","Notes"
+"OAKISS1-0","OAKISS1 审查范围与 MAGI 节奏","建立全业务流程 KISS 审查台账；覆盖报销/OCR、审批、采购/费用、合同/项目、付款/AP、票据池、资产、权限、移动/企微入口和运营支持；本轮只审查、自动化验证和提出建议，不改业务代码。","Issue CSV 校验通过；范围明确哪些可自动化、哪些必须人工；不创建真实业务数据、不付款、不写企微、不删除数据。","受影响流程：全业务审查启动 -> 读取现有事实源 -> 明确自动/人工边界；验证步骤：validate_issues_csv；check-process-contract general；git diff --check。","python3|node|manual","DONE","DONE","DONE","issues/2026-05-25_20-53-34-oa-business-flow-kiss-review-v1.csv","[]","已建合同并验证：validate_issues_csv、check-process-contract general 和 git diff --check 通过；MAGI 节奏用于审计结构，不替代 OALAUNCH1。回滚路径：用后续 KISS 审查 CSV supersede；不影响业务运行。"
+"OAKISS1-1","报销与 PDF OCR 主流程审查","从员工视角审查新建报销、上传 PDF 发票、OCR 识别、发票查重、提交审批、查看进度；从财务视角审查复核入口和字段可理解性。","形成报销流程问题清单；自动化 evidence 至少覆盖 readiness、OCR 小样本或现有 OCR 探针、页面可读性；人工步骤明确低风险真实单如何验证。","受影响流程：员工登录 -> 新建报销/上传 PDF 发票 -> OCR -> 提交或保存草稿 -> 审批进度；验证步骤：run-oa-real-use-daily；check-ocr-provider-samples 或 pending-ocr；必要时只读页面截图；真实提交只列人工步骤。","bash|node|playwright|manual","DONE","DONE","DONE","scripts/qa/run-oa-real-use-daily.sh;scripts/qa/check-ocr-provider-samples.mjs;client/src/pages/ReimbursementsPage.tsx;client/src/pages/ReimbursementDetailPage.tsx","[""OAKISS1-0""]","自动证据：OAOPS1 日巡检 PASS，live smoke 3/3，员工报销 PC 截图 PASS，OCR 辅助复核约 1.2s 进入重复/同票据终态。KISS 结论：保留 PDF OCR 主路径，不扩图片 OCR/企业卡；真实闭环仍需人工提交 1 条低风险报销并走到付款/AP。"
+"OAKISS1-2","审批中心与审批进度审查","审查待我审批、我发起的、审批历史、负责人本人申请兜底、催办/退回/驳回/通过语义；确认审批链不自审且页面不让用户猜流程。","形成审批流程问题清单；自动化覆盖 OAFLOW1 owner route 只读诊断、工作流待办入口和 PC/移动可读性；人工步骤明确审批人先看详情再处理。","受影响流程：申请人提交 -> 审批人查看详情 -> 通过/驳回/退回 -> 申请人看进度；验证步骤：check-owner-application-approval-route；run-oa-real-use-daily；PC/mobile 只读视觉或截图；高风险审批动作仅人工。","node|bash|playwright|manual","DONE","DONE","DONE","scripts/qa/check-owner-application-approval-route.mjs;client/src/pages/WorkflowTasksPage.tsx;client/src/pages/MobileApprovalsPage.tsx;docs/需求-统一审批中心规约.md","[""OAKISS1-0""]","自动证据：远端 owner route `owner-application-approval-route-20260525-oakiss1` 为 PASS_OWNER_APPLICATION_ROUTE_READY，HYD000006 会进入 finance_mgr 非本人兜底；PC/移动/企微入口矩阵均通过。KISS 结论：保留一层审批和兜底，不上复杂 BPM；审批人仍需人工先看详情再处理。"
+"OAKISS1-3","采购/费用流程审查","审查采购/费用申请、附件说明、审批、项目/合同关联、预算或资金说明提示；确认小团队 V1 不被复杂招采和预算硬控干扰。","形成采购/费用流程问题清单；自动化覆盖采购列表/详情可读性和 OAOPS1 探针；人工步骤明确一条低风险采购或费用单如何走完。","受影响流程：员工/负责人发起采购或费用 -> 审批 -> 关联项目/合同 -> 后续付款或 AP；验证步骤：run-oa-real-use-daily；PC 只读视觉矩阵；人工低风险流程步骤。","bash|playwright|manual","DONE","DONE","DONE","client/src/pages/PurchaseRequestsPage.tsx;docs/需求-采购费用审批规约.md;scripts/qa/run-oa-real-use-daily.sh","[""OAKISS1-0""]","自动证据：采购页面 PC 只读视觉 PASS，admin API 探针可达但当前 purchase-requests 样本数为 0。KISS 结论：先保留轻量申请、金额、用途、项目/合同关联和审批；供应商准入、询比价、预算硬控后置；仍需人工 1 条低风险采购/费用闭环。"
+"OAKISS1-4","合同台账与项目关联审查","审查合同台账编号、归档位置、负责人、续约提醒、关联项目；审查项目摘要能否串起报销、采购、合同和付款。","形成合同/项目问题清单；自动化覆盖合同/项目入口、只读页面可达和权限边界；人工步骤明确真实合同只登记摘要和线下归档位置。","受影响流程：录入合同台账 -> 关联项目 -> 查看项目摘要 -> 权限检查；验证步骤：run-oa-real-use-daily；PC 只读视觉矩阵；权限矩阵；真实合同仅人工录入摘要。","bash|playwright|manual","DONE","DONE","DONE","client/src/pages/ContractsRegistryPage.tsx;client/src/pages/ProjectsPage.tsx;docs/需求-合同附件归档规约.md","[""OAKISS1-0""]","自动证据：合同/项目入口可读，权限矩阵通过，PC 合同台账截图 PASS。观察项：TEST/SMOKE 合同样本较多会干扰真实查找。KISS 结论：保留摘要台账和线下归档位置；后续建议默认隐藏测试数据或增加仅正式合同筛选。"
+"OAKISS1-5","付款批次、银行回单与 AP/代账交接审查","审查付款批次、银行回单上传、已付款标记、AP 导出和代账交接；确认实际付款仍在银行渠道完成，OA 只留痕。","形成财务闭环问题清单；自动化覆盖付款/AP入口只读、feature flag 和 OALAUNCH1 汇总；人工步骤明确真实付款后如何补录回单和导出。","受影响流程：审批通过 -> 财务创建付款批次 -> 上传回单 -> 标记已付款 -> 导出 AP/代账资料；验证步骤：run-oa-real-use-daily；run-oa-final-launch-readiness；payment batch flag 检查；真实付款不自动执行。","bash|node|manual","DONE","DONE","DONE","scripts/qa/run-oa-final-launch-readiness.sh;scripts/qa/check-payment-batch-flag-off.mjs;client/src/pages/PaymentBatchesPage.tsx;client/src/pages/ApOperationsPage.tsx","[""OAKISS1-0""]","自动证据：payment_batch_v1=force_on、erp_sync=force_off；财务/财务负责人付款批次和 AP 入口 PASS；OALAUNCH1 仍 PAUSED_MANUAL_CONFIRMATION。KISS 结论：OA 只留痕，实际付款在线下银行；后续默认优先待付款/异常，不把全部历史测试单压到首屏。"
+"OAKISS1-6","票据池与 OCR 样本策略审查","审查票据池、OCR 状态、重复票据、发票详情和财务复核；用少量样本证明足够，不追求一次跑完整历史发票库。","形成票据/OCR问题清单；自动化优先使用 5-10 张以内可控样本或现有探针；报告不含票面原图、完整路径或敏感值。","受影响流程：财务查看票据池 -> 看 OCR 字段 -> 判断重复/归档 -> 关联报销；验证步骤：check-ocr-provider-samples --limit 小样本或 pending-ocr；PC 只读视觉；隐私扫描。","node|playwright|manual","DONE","DONE","DONE","scripts/qa/check-ocr-provider-samples.mjs;scripts/qa/check-pending-ocr.mjs;client/src/pages/invoice-pool","[""OAKISS1-0""]","自动证据：员工/财务票据池 PC 只读视觉 PASS，长编号 finding 已清零，live OCR 样本可解释。工具观察：远端 check-pending-ocr 直接执行遇到 Prisma Client 构造兼容问题，记为 QA 脚本维护项。KISS 结论：够用即可，5-10 张代表样本足够。"
+"OAKISS1-7","资产台账与电子资产流程审查","审查 FA、EA-DOC、EA-SYS、EA-REPO、EA-BKP 的创建、筛选、详情、负责人/保管人、归档/验证日期和权限；确认 EA-ACC 继续暂缓。","形成资产流程问题清单；自动化覆盖 ASSET1D 入口、筛选和只读权限；人工步骤明确真实资产责任人核验。","受影响流程：管理员登记资产 -> 负责人查看 -> 盘点/验证 -> 离职或交接检查；验证步骤：run-asset1d-public-trial 只读或已有报告；run-oa-real-use-daily；权限矩阵。","bash|playwright|manual","DONE","DONE","DONE","scripts/qa/run-asset1d-public-trial.sh;client/src/pages/AssetRegistryPage.tsx;docs/需求-资产管理规约.md","[""OAKISS1-0""]","自动证据：ASSET1D 公网试录 PASS，3 条脱敏 EA-DOC 导入 PASS，员工/管理员资产页 PC 视觉 PASS。KISS 结论：统一台账可用；分类维护和 ERP 同步状态后续可折叠降噪；EA-ACC 继续暂缓，不做密码库。"
+"OAKISS1-8","权限矩阵、移动/企微入口与审计审查","按员工、主管、财务、HR、CEO、管理员检查关键入口、负例权限、移动入口、企业微信入口和审计日志；普通员工不能越权看财务、合同敏感附件或管理入口。","形成权限/入口问题清单；自动化覆盖 OA-only smoke readiness、permission matrix、live smoke readiness、PC/移动视觉；不输出完整账号和凭据。","受影响流程：不同角色登录 -> 进入工作台/移动/企微入口 -> 访问或拒绝敏感页面 -> 审计留痕；验证步骤：check-oa-only-smoke-readiness；check-oa-permission-matrix；run-live-smoke-readiness；run-visual-matrix。","node|bash|playwright|manual","DONE","DONE","DONE","scripts/qa/check-oa-permission-matrix.mjs;scripts/qa/check-oa-only-smoke-readiness.mjs;scripts/qa/run-live-smoke-readiness.sh;scripts/qa/run-visual-matrix.sh","[""OAKISS1-0""]","自动证据：OA-only smoke readiness PASS；权限矩阵 7 角色、43 正例、42 负例 PASS；移动入口、企微渲染和企微入口 spec 通过；PC 视觉 32 路由 PASS。KISS 结论：角色入口基本收敛；C 类审计页允许内部编号，普通页不展示 UUID。"
+"OAKISS1-9","KISS 建议与人工验收包","汇总所有业务流程发现，按 KISS 原则给出保留、简化、后置、人工 SOP 四类建议；为必须人工做的事项写清账号/角色、页面、动作、通过标准和停止条件。","输出可审查建议清单；每条建议有业务影响、是否阻断、自动证据、人工验证步骤和采纳选项；不直接进入开发。","受影响流程：审查证据 -> 问题归类 -> 建议排序 -> 用户采纳/暂缓/拒绝；验证步骤：rg OAKISS1；audit-docs；quick_validate；git diff --check；用户验收。","rg|node|python3|manual","DONE","DONE","DONE","docs/trialrun/人工试运行报告.md;docs/文档索引.md;docs/文档事实源状态矩阵.md;.agents/skills/hyb-oa-delivery/SKILL.md","[""OAKISS1-1"",""OAKISS1-2"",""OAKISS1-3"",""OAKISS1-4"",""OAKISS1-5"",""OAKISS1-6"",""OAKISS1-7"",""OAKISS1-8""]","已在人工试运行报告写入 OAKISS1 证据、KISS 审查结论、8 步人工最小验收包和 P0/P1/P2 建议；同步索引、事实源矩阵和 skill。后续采纳开发必须另走对应 Issue CSV；本行不代表 OALAUNCH1 放行。"