diff --git a/governance/GOVERNANCE.yaml b/governance/GOVERNANCE.yaml index 713525b..3f225de 100644 --- a/governance/GOVERNANCE.yaml +++ b/governance/GOVERNANCE.yaml @@ -182,13 +182,14 @@ domains: flows: governance_change: - # 治理仓(.github governance|standards、agent-registry、CI-Workflows workflows/)内容变更的唯一合法路径 + # 治理仓(.github governance|standards、CI-Workflows workflows/)内容变更的唯一合法路径 + # (agent-registry 随 ADR-0085 退役移出本清单) # 授权凭证 = ADR + PR 记录;破玻璃保留但被监控 classes: - id: C1 - scope: ["governance/(整目录——含 GOVERNANCE/REPOS.yaml、rulesets、expected-state、apply/drift 脚本、policy)", standards/, specs/, scripts/, ".github/(CI 门禁自身——改门禁=改治理)", CODEOWNERS, profile/, "tests/(agent-registry 验证器元测试——验证器之验证)", "template-service 脚手架面(.github/、AGENTS.md、Makefile、docs/、zizmor.yml——供应链入口:模板防线被污染=全部新仓继承后门,红队修复 P0;src/ 业务面属 C3。ADR-0021 收敛范围:整仓 C1 会与 SC-3 依赖 automerge 冲突——依赖 PR 无 ADR 不可自动合并)"] + scope: ["governance/(整目录——含 GOVERNANCE/REPOS.yaml、rulesets、expected-state、apply/drift 脚本、policy)", standards/, specs/, scripts/, ".github/(CI 门禁自身——改门禁=改治理)", CODEOWNERS, profile/, "tests/(治理检测器元测试——验证器之验证;原 agent-registry 验证器已随 ADR-0085 退役)", "template-service 脚手架面(.github/、AGENTS.md、Makefile、docs/、zizmor.yml——供应链入口:模板防线被污染=全部新仓继承后门,红队修复 P0;src/ 业务面属 C3。ADR-0021 收敛范围:整仓 C1 会与 SC-3 依赖 automerge 冲突——依赖 PR 无 ADR 不可自动合并)"] requires: [PR, "ADR(新建或引用编号)", "drift-check 本地预检", owner-merge] - rationale: "治理意图变更必须可追溯到一个决策记录;无 ADR 不合并。scope 与机器执法路径全集一致(.github gate:governance/standards/scripts/.github/CODEOWNERS/profile;agent-registry validate:standards/decisions/scripts/.github/CODEOWNERS/tests——评审项:声明与执行不得互斥);template-service 的脚手架面是新仓派生源头,视同治理意图变更(gate adr-required 机器检查 + owner-only review;ADR-0021 范围收敛后与 CI-Workflows ci.yml 的 C1 路径判定一致)" + rationale: "治理意图变更必须可追溯到一个决策记录;无 ADR 不合并。scope 与机器执法路径全集一致(.github gate:governance/standards/scripts/.github/CODEOWNERS/profile;CI-Workflows ci.yml adr-required:本仓整体 C1——评审项:声明与执行不得互斥;agent-registry validate 已随 ADR-0085 退役废止);template-service 的脚手架面是新仓派生源头,视同治理意图变更(gate adr-required 机器检查 + owner-only review;ADR-0021 范围收敛后与 CI-Workflows ci.yml 的 C1 路径判定一致)" - id: C2 scope: ["业务仓 AGENTS.md/CODEOWNERS"] # agent-registry/registry/ 随 ADR-0085 退役;C2 validate 门随声明层废止 requires: [PR] @@ -214,12 +215,10 @@ flows: - {step: 5, action: "差分 job 进 gate", policy: T-09} - {step: 6, action: "mutation 周跑盯 score", policy: T-10} - {step: 7, action: "v2 发布走环境审批+升级/回滚测试", policies: [RL-1, R-01..R-05]} - agent_team_lifecycle: - rules: - - {step: 1, action: "从 agent-registry 声明实例化 team(引用 id@version)", gate: AR-1} - - {step: 2, action: "运行期事件按 event.schema 追加到数据层;拦截记录 tool_called.denied_by", policies: [AR-5, AR-7]} - - {step: 3, action: "ephemeral 完成→执行 team 侧 handoff:artifacts 走 PR、retrospective、轨迹归档(销毁前置只含 team 侧项)", policy: AR-6} - - {step: 4, action: "persistent 团队(team:stewardship)消费归档资产异步执行 stewardship 侧 handoff(memory-distill/adr-write)并审核入库;完成态审计走事件流——run_finished.handoff_done 仅表达 team 侧销毁前置完成,stewardship 侧由 handoff_step(side=stewardship_side) 事件逐项留痕(评审项:单一布尔无法承载双侧完成态)", policy: AR-6} + # agent_team_lifecycle:随 ADR-0085 声明层退役整体废止(四步全部引用已退役的 + # team 实例化/event.schema/handoff 语义,AR-5/6/7 已不存在;历史正文见 + # archive/retired/)。角色生命周期现由 ADR-0095 角色路由承载 + # (docs/agent/ROLE-*.md + ghcb 入口协议)。 portability: neutral: [intent, strength, verify, risk_posture, flows] # 平台无关,直接搬运 diff --git a/governance/REPOS.yaml b/governance/REPOS.yaml index 2d20df7..4653190 100644 --- a/governance/REPOS.yaml +++ b/governance/REPOS.yaml @@ -119,7 +119,7 @@ repos: 存量 Python 项目:11 阶段流水线 / NSW 匹配 + envy-freeness / HR@K/NDCG@5 评测门禁; Python 基线为一次性存量导入豁免——仅作重写参照与 golden fixtures 来源,重写合并后 语言面收敛为 Go+BAML) - key_paths: [src/mutual/, spec/, tests/golden/] + key_paths: [src/mutual/, spec/, golden/] # golden fixtures 实际位于仓根 golden/(原声明 tests/golden/ 与实态不符) entry_protocol: true # ADR-0095:协议块 v2 全仓下发(drift §17 逐字节对账) - name: QW_Arena1 diff --git a/governance/policy/contracts.yaml b/governance/policy/contracts.yaml index 8a50680..0403ed7 100644 --- a/governance/policy/contracts.yaml +++ b/governance/policy/contracts.yaml @@ -4,7 +4,7 @@ version: 1 # 消费方: CI-Workflows scripts/contract/contract_check.py(contract-check job)。 # 读法: # defaults.breaking_requires_adr —— breaking 契约变更须 PR 引用真实存在的 -# ADR-NNNN(agent-registry/decisions/,防幽灵 ADR)才放行,否则红。 +# ADR-NNNN(archive/adr/,ADR-0085 家园单仓化;防幽灵 ADR)才放行,否则红。 # defaults.openapi_fail_on —— oasdiff --fail-on 档位(ERR=社区默认; # WARN=从严:删可选响应属性也拦——customer_upgrade_failure 姿态)。 # repos..contracts[] —— kind ∈ openapi|jsonschema(proto 未实装, @@ -46,16 +46,10 @@ repos: - {kind: jsonschema, path: "schema/common/**"} migrations: null - agent-registry: - # L1 声明层契约。接线延后:validate.yml 为单 job 架构(gate job 内联全部检查, - # 无 needs 聚合层),接入需先做 aggregator 拆分重构——独立小卡(.github#89 留言, - # ADR-0038 决策 9)。声明先行:contract-check 一旦在该仓运行即生效。 - contracts: - - {kind: jsonschema, path: "registry/schemas/**"} - migrations: null + # agent-registry:随 ADR-0085 退役移除(归档只读仓不再有契约变更; + # 历史声明见 git 历史与 archive/retired/ 快照) # 盘点备注(不声明、不接线): - # (ADR-0085:agent-platform 退役,本条历史注释保留备查)agent-platform —— 仅 vendor/ 拷贝, - # 源头真身在 agent-registry(vendor 漂移属另一关注面,不在本卡范围) + # agent-registry / agent-platform / agent-tools —— 已随 ADR-0085 退役归档 # mutual —— spec/01-schemas.md 为散文 schema,不可机判;落地 JSON Schema 后再声明 - # Script_Writer / agent-tools / Use-up-Plan / .github / CI-Workflows —— 无契约面 + # Script_Writer / Use-up-Plan / .github / CI-Workflows —— 无契约面 diff --git a/profile/README.md b/profile/README.md index 7f7c958..a83352b 100644 --- a/profile/README.md +++ b/profile/README.md @@ -27,7 +27,7 @@ | [template-service](https://github.com/Cloudbird-Software/template-service) | L2 | 新项目模板(入口协议块下发真源) | | [arbiter](https://github.com/Cloudbird-Software/arbiter) | L2 | 仲裁内核:确定性裁决 / CAS 租约(无 LLM) | | [cnb-bridge](https://github.com/Cloudbird-Software/cnb-bridge) | L2 | CNB 免费算力桥接(可删除层,ADR-0085) | -| 产品仓(AI_Web_School / mutual / QW_Arena1 / Shorts_Director / Script_Writer / Use-up-Plan) | L2 | 业务实现——全量与状态见 REPOS.yaml | +| 产品仓(AI_Web_School / mutual / QW_Arena1 / Viral_Radar / Media-Monitor / Shorts_Director / Script_Writer / Use-up-Plan) | L2 | 业务实现——全量与状态(含已退役仓)见 REPOS.yaml | ## 意图→交付链路