{"schemaVersion":"developer.reits.tech/d05-auth-mainline-convergence-admission/v7","subknifeId":"D05-A03-P03c-S08-R02-C01","parentSubknife":"D05-A03-P03c-S08-R01","title":"Auth S08 R02 四席独立 Ballot 接入与验证工作台","status":"BALLOT_CONTRACT_READY_EXTERNAL_AUTHORITIES_AND_BALLOTS_PENDING_PRODUCTION_HELD","observedAt":"2026-07-30T06:27:12Z","generatedFrom":{"predecessorDigest":"sha256:da041ab282b1381da59dbd00e18debc9aa94a8635a9563b0924299fecc124866","s07ProgramDigest":"sha256:ba539bb41cc1317409932af2afaa50bfcd36065c7bceb2319b6e2c2138e52236","programDigest":"sha256:ec71c33ae8cc20e21381931343d75feae3ca73f808e9c97ae8571fdf5972250c","rehearsalDigest":"sha256:43b474973757701b64636a538aa1db43694b98a0226ee30c87c651b2645e1db2","compatibleRuntimeDigest":"sha256:3cfa97150f1d04ab0e6e3c64ffab4551be344fa5858e5aeb9e9e08c5c3505631","stagingRehearsalDigest":"sha256:314bca95cc8c8d4755bd9a9d42d03fc4473dfe2fe658e069fb28575bc75f3021","reviewDossierDigest":"sha256:1d058267da393b085bebe2095cf98271cdac079521bb54795bd0ffbd1c444a12","ballotIntakeDigest":"sha256:46140e246c6ac6b7acd8e5a86adb8f2157cacaee43adddb2ccb91e341e99e33e"},"formalProgress":{"currentKnife":"D05","currentOrdinal":5,"acceptedKnives":4,"totalKnives":36,"remainingIncludingCurrent":32,"d05GatesSatisfied":0,"d05GatesRequired":11},"engineeringProgress":{"completed":60,"total":60,"remaining":0,"nextEngineeringKnife":null,"newEngineeringKnifeAllowed":false},"acceptanceClosure":{"completed":2,"current":3,"total":5,"remainingIncludingCurrent":3,"status":"A03_NOT_ADMITTED"},"repositoryBridge":{"completed":3,"total":3,"remaining":0,"currentCloseout":"D05-A03-P03c-H01","status":"REPOSITORY_DEVELOPMENT_BRIDGE_COMPLETE"},"productionActivation":{"completed":3,"current":4,"total":5,"remainingIncludingCurrent":2,"status":"FIXTURE_RUNTIME_READY_PRODUCTION_BINDINGS_HELD"},"executionReadiness":{"completed":0,"current":1,"total":12,"remainingIncludingCurrent":12,"status":"REAL_EXECUTION_NOT_STARTED"},"ownerReadiness":{"signed":0,"total":4,"remaining":4},"artifactReadiness":{"present":0,"total":8,"remaining":8},"realEvidence":{"present":0,"totalRequired":15,"gates":"0/11","owners":"0/4"},"correctionProgress":{"completed":3,"total":3,"remaining":0,"label":"C01 主干基线 + C02 远程 CI 恢复 + C03 S08 Dossier · 3/3"},"convergenceReadiness":{"completed":7,"current":8,"total":8,"remainingIncludingCurrent":1},"s08Progress":{"completed":1,"current":2,"total":4,"remainingIncludingCurrent":3,"currentLabel":"R02 四席独立 Ballot"},"principle":"R01 只把 S07 精确证据整理成四方可独立复算的生产变更评审 Dossier；Dossier、Portal、CI 与 Codex 都不能代替真实 Owner Ballot，也不能创建生产窗口、连接数据库、执行 011/012、部署 Auth、启用 shadow/active、切换 ES256/JWKS 或推进正式 D05。","sourceTopology":{"repository":"reits/reits-auth","defaultBranch":"main","reviewBaselineRevision":"a3ebd7a947570498a602438e20f11a9b847753fa","currentMainRevision":"d18b62b0be8da75f82d8faf0fbdae1d349942aa0","reviewDossierBranch":"codex/auth-s08-four-owner-review-dossier","reviewDossierRevision":"c05001d884c3b98c28b82e0fb2d990772552774a","pullRequest":{"number":25,"url":"https://gitea.reits.tech/reits/reits-auth/pulls/25","state":"MERGED","baseRevision":"a3ebd7a947570498a602438e20f11a9b847753fa","headRevision":"c05001d884c3b98c28b82e0fb2d990772552774a","mergeRevision":"d18b62b0be8da75f82d8faf0fbdae1d349942aa0","mergedAt":"2026-07-30T06:25:20Z","checks":[{"runNumber":70,"workflow":"REITS Minimum CI / gate","scope":"pull_request","conclusion":"success","headRevision":"c05001d884c3b98c28b82e0fb2d990772552774a"},{"runNumber":71,"workflow":"reits-auth security CI / verify","scope":"pull_request","conclusion":"success","headRevision":"c05001d884c3b98c28b82e0fb2d990772552774a"},{"runNumber":72,"workflow":"REITS Minimum CI / gate","scope":"main","conclusion":"success","headRevision":"d18b62b0be8da75f82d8faf0fbdae1d349942aa0"},{"runNumber":73,"workflow":"reits-auth security CI / verify","scope":"main","conclusion":"success","headRevision":"d18b62b0be8da75f82d8faf0fbdae1d349942aa0"}]}},"runnerEligibility":{"requiredLabel":"ubuntu-latest","executionScope":"reits/reits-auth","strategy":"仓库级临时注册、容量 1、Host 标签兼容、主干门禁完成后立即退役","actRunnerVersion":"2.3.0","image":"HOST","imageDigest":"NOT_APPLICABLE","runtimeHost":"本地 macOS 临时隔离执行面","isolationControls":["Runner 仅注册到 reits/reits-auth 仓库，标签只暴露 ubuntu-latest:host，最大并行度固定为 1。","不加载生产 DSN、生产 Auth 配置、生产密钥、生产数据库文件或远程数据库参数。","Go 工具链缓存和作业目录只存在于本刀临时路径；作业完成后删除临时目录与动作缓存。","注册令牌不写入仓库、回执、日志或门户数据；Runner 在 PR 与 main 双门禁完成后从 Gitea 删除。","最终独立读回仓库 Runner 为 0、本地守护进程为 0、本地工作目录为 0、动作缓存为 0。"],"incidentLedger":[{"runNumber":65,"result":"FAILURE_THEN_RERUN","rootCause":"actions/setup-go 下载并展开 Go 1.24.13 时本机数据卷空间不足。","resolution":"移除本刀临时 MariaDB 依赖、旧 REITS 临时发布目录和失败动作缓存，释放 3.2GiB 后重新执行。"},{"runNumber":65,"result":"SUCCESS_AFTER_CAPACITY_RECOVERY","rootCause":"失败属于执行机容量，不属于源码、测试或工作流语义。","resolution":"同一提交 1e6bb35 在第三次运行完成 setup-go、gofmt、vet、race 和无 CGO 构建。"}],"completedJobs":[{"runNumber":65,"name":"Security CI / verify","scope":"pull_request","headRevision":"1e6bb35f512a1fd2e6d5be5b8d4232c08f74c60e","conclusion":"success"},{"runNumber":66,"name":"REITS Minimum CI / gate","scope":"pull_request","headRevision":"1e6bb35f512a1fd2e6d5be5b8d4232c08f74c60e","conclusion":"success"},{"runNumber":67,"name":"Security CI / verify","scope":"main","headRevision":"a3ebd7a947570498a602438e20f11a9b847753fa","conclusion":"success"},{"runNumber":68,"name":"REITS Minimum CI / gate","scope":"main","headRevision":"a3ebd7a947570498a602438e20f11a9b847753fa","conclusion":"success"}],"retirementReadback":{"repositoryRunnerCount":0,"scopedContainerCount":0,"scopedVolumeCount":0,"registrationTokenPersisted":false},"decision":"S07_COMPLETE_PR_AND_MAIN_CI_GREEN_RUNNER_RETIRED","boundary":"远程 CI 与受保护合并只封存 S07 演练器和证据；生产 Auth 仍未部署，生产数据库、路由、签名算法和 JWKS 均未推进。"},"runnerReadback":{"name":"codex-auth-s08-062044","version":"v2.3.0","scope":"reits/reits-auth","labels":["ubuntu-latest:host"],"maxParallel":1,"repositoryRunnerCount":0,"localRunnerProcesses":0,"localRunnerDirectories":0,"localActionCaches":0,"registrationTokenPersisted":false,"incident":{"id":"INC-S08-01","symptom":"主线 Security CI 收尾时本地 actcache 写入报告 no space left on device。","impact":"run 70/71/72/73 均成功；没有源码、测试或生产影响。","resolution":"在全部远程结论成功后停止并删除仓库 Runner，清理 .runner、临时目录与 1.6GiB actcache，独立读回 Runner/进程/目录/缓存均为 0。","regression":"后续一次性 Runner 启动前必须预留工具链展开与缓存空间；容量不足只允许失败关闭，不能跳过远程 CI。"}},"databaseCloneRehearsal":{"schemaVersion":"developer.reits.tech/auth-database-clone-rehearsal-receipt/v1","subknifeId":"D05-A03-P03c-S05","status":"PASS_DATABASE_CLONE_REHEARSAL_PRODUCTION_HELD","observedAt":"2026-07-29T13:21:58.456051Z","isolation":{"engine":"MariaDB 10.5 isolated datadir","transport":"LOCAL_UNIX_SOCKET_ONLY","networkListening":false,"productionDsnLoaded":false,"productionCredentialsLoaded":false,"syntheticDataOnly":true,"workDirectoryRetired":true,"socketRetired":true,"processRetired":true},"productionReadback":{"mode":"SCHEMA_ONLY_SINGLE_TRANSACTION_NO_LOCKS","schemaDigest":"dfc09fd0f18e26d95dabb3041a2983e7f68f9e950c62633d2a797ade6d5b2be5","cloneImportDigest":"dfc09fd0f18e26d95dabb3041a2983e7f68f9e950c62633d2a797ade6d5b2be5","databaseWrites":0,"ddlStatements":0,"dmlStatements":0,"authDeployments":0},"migrationLedger":{"migrationIds":["001","002","003","004","011"],"freshFirstApplied":5,"freshSecondExactDigestSkips":5,"cloneBaselineExactDigests":4,"cloneFirstApplied":1,"cloneSecondExactDigestSkips":5,"ledgerDigest":"2231d64d64c284a744bfe8e35d9c686461564dd723b3318fa42d05c751c073a3"},"schema":{"freshAfterFirst":"2cc98fa947236a2cebd638490d9abdb5745a9e60e5a33b197452461378e57c61","cloneBefore":"4cc7c605aac89923d509db4718b93cb58f7b95169a9382d73ef4f364308ab452","cloneAfter":"b610698769b0f6d26d480147d3d1d81721eb8094e18eaf1f24676051faa323af","restore":"4cc7c605aac89923d509db4718b93cb58f7b95169a9382d73ef4f364308ab452","convergenceTables":3,"convergenceRows":0},"legacyData":{"tables":["auth_accounts","auth_account_identities","auth_clients","auth_sessions","auth_session_events"],"rowCountsBefore":[1,1,1,1,1],"rowCountsAfter":[1,1,1,1,1],"rowCountsRestore":[1,1,1,1,1],"digestBefore":"e8c647cf23feab9e4758ff77a17d82779ea7e18260a4a284ccdf32f1b80e7583","digestAfter":"e8c647cf23feab9e4758ff77a17d82779ea7e18260a4a284ccdf32f1b80e7583","digestRestore":"e8c647cf23feab9e4758ff77a17d82779ea7e18260a4a284ccdf32f1b80e7583"},"compatibility":{"legacyBinaryRevision":"f5f96747e68936b38b3e793cb5a8e378771f3e3a","legacyBinaryStorePreflight":"PASS","currentBinaryRevision":"ecd099c31e74e9739cc02599c65dc11c817c8b17","currentBinaryStorePreflight":"PASS","writeOperations":0},"recovery":{"backupDigest":"f620aabe314f9ebabcefee36020518eb99fbf920b7aa6e0bc3a4bcba973bf078","schemaRestoredExactly":true,"legacyDataRestoredExactly":true,"rowCountsRestoredExactly":true},"decision":{"s05Complete":true,"s06Allowed":true,"productionMigrationAllowed":false,"productionAuthDeploymentAllowed":false,"productionActivationAllowed":false,"nextStage":"S06_COMPATIBLE_RUNTIME"}},"compatibleRuntimeCandidate":{"schemaVersion":"developer.reits.tech/auth-compatible-runtime-candidate-receipt/v1","subknifeId":"D05-A03-P03c-S06","parentSubknife":"D05-A03-P03c-S05","status":"PASS_COMPATIBLE_RUNTIME_CANDIDATE_PRODUCTION_HELD","observedAt":"2026-07-29T14:27:30Z","repository":{"slug":"reits/reits-auth","baseRevision":"ecd099c31e74e9739cc02599c65dc11c817c8b17","candidateRevision":"346563a73d95abc6025277fec73aa2edd0a1f676","mergeRevision":"0eeb47982f3fc37e9a9758347b14bf6ca1dc3867","branch":"codex/auth-compatible-runtime-s06","pullRequestNumber":22,"pullRequestUrl":"https://gitea.reits.tech/reits/reits-auth/pulls/22"},"identityRuntime":{"transactionIsolation":"SERIALIZABLE","legacyLookup":"SHA256_READ_ONLY","canonicalLookup":"VERSIONED_DOMAIN_HMAC_SHA256","keyVersionVerifier":"CONSTANT_TIME_PREWRITE","concurrentWorkers":32,"singleAccountConvergence":true,"dualLinkConflictRejected":true,"invalidIdentityWrites":0,"conflictPolicy":"FAIL_CLOSED_NO_CROSS_ACCOUNT_MERGE"},"refreshRuntime":{"tokenFormat":"rfr2_<version>_<opaque>","tokenDigest":"VERSIONED_DOMAIN_HMAC_SHA256","replayWitness":"LEGACY_DOMAIN_HMAC_SHA256","promotion":"SERIALIZABLE_ONE_TIME","rotation":"EXACT_CURRENT_TOKEN_ONLY","legacyShaClearedAfterPromotion":true,"crossInstanceReplayDetected":true,"wholeFamilyRevokedOnReplay":true,"unknownPepperVersionRejected":true,"expiredSessionRejected":true},"validatorRuntime":{"classes":["email_otp","phone_otp","hosted","pws","im_delegate","machine"],"requiredClaims":["issuer","audience","client","principal","tenant","scope","amr","iat","exp","auth_time"],"crossClassFallbackAllowed":false,"hostileMutationClasses":9,"deterministicClock":true},"configurationRuntime":{"loader":"LoadStrict","supportedModes":["disabled","shadow"],"activeModeRejected":true,"productionNonDisabledRejected":true,"shadowSchemaState":"012-ready","shadowPreflight":"READ_ONLY_VERSION_VERIFIER_AND_STATUS","listenerStartsAfterPreflight":true,"conflictsRejected":["环境别名值冲突","内联秘密与文件秘密同时配置","重复身份密钥版本","重复刷新 pepper 版本","重复或缺失校验器","schema 状态不是 012-ready","生产环境启用非 disabled 模式"]},"databaseRuntime":{"migration":"012_auth_convergence_compatible_runtime.sql","dormant":true,"additiveOnly":true,"tables":["auth_convergence_refresh_pepper_versions","auth_convergence_refresh_families","auth_convergence_refresh_tokens","auth_convergence_refresh_replay_witnesses"],"receiptTargetFamilyForeignKey":true,"dataWrites":0,"destructiveStatements":0,"plaintextTokenColumns":0,"bearerDigestCopies":0},"qualityEvidence":{"local":[{"command":"test -z \"$(gofmt -l .)\"","conclusion":"PASS"},{"command":"go vet ./...","conclusion":"PASS"},{"command":"go test -race ./...","conclusion":"PASS"},{"command":"CGO_ENABLED=0 go build -trimpath -o /tmp/reits-auth-s06 ./cmd/server","conclusion":"PASS"},{"command":"REITS CI gate","conclusion":"PASS_12_CHECKS_5_PACKETS_5_EVIDENCE"}],"remote":[{"runNumber":61,"scope":"pull_request","workflow":"Security CI / verify","conclusion":"success"},{"runNumber":62,"scope":"pull_request","workflow":"REITS Minimum CI / gate","conclusion":"success"},{"runNumber":63,"scope":"main","workflow":"Security CI / verify","conclusion":"success"},{"runNumber":64,"scope":"main","workflow":"REITS Minimum CI / gate","conclusion":"success"}],"runnerRetirement":{"repositoryRunners":0,"containers":0,"volumes":0,"registrationTokenPersisted":false}},"productionBoundary":{"releaseRevision":"18c553c2cac155f33d9626f72ae25c5f2a8d5634","currentRelease":"/opt/reits-auth/releases/sso-s39-20260727T023532Z","serviceState":"ACTIVE","databaseMigrations":0,"databaseWrites":0,"authDeployments":0,"routeChanges":0,"productionKeyReads":0,"productionKeyWrites":0,"accountMutations":0,"sessionMutations":0,"tokenIssuanceChanges":0,"algorithm":"HS256","publicJwksKeys":0},"decision":{"s06Complete":true,"s07Allowed":true,"productionMigrationAllowed":false,"productionAuthDeploymentAllowed":false,"activeModeAllowed":false,"productionActivationAllowed":false,"nextStage":"S07_STAGING_REHEARSAL"}},"stagingRehearsal":{"schemaVersion":"developer.reits.tech/auth-isolated-staging-rehearsal-receipt/v1","subknifeId":"D05-A03-P03c-S07","parentSubknife":"D05-A03-P03c-S06","status":"PASS_ISOLATED_STAGING_REHEARSAL_PRODUCTION_HELD","observedAt":"2026-07-29T15:26:27Z","source":{"repository":"reits/reits-auth","revision":"e85ec44fabd1382f53b06d5569cce1d8d0895eb6","binarySha256":"85607848f264ba4b7c6605aeda7ccbc2e9cd9f5c2b021aef3aef362ee415bda4"},"isolation":{"databaseEngine":"11.4.12-MariaDB","databaseTransport":"LOCAL_UNIX_SOCKET_ONLY","authTransport":"LOCAL_LOOPBACK_ONLY","databaseNetworkListening":false,"remoteDatabaseParametersAccepted":false,"productionDsnLoaded":false,"productionCredentialsLoaded":false,"productionDataLoaded":false,"syntheticDataOnly":true},"migrationLedger":{"migrationIds":["001","002","003","004","011","012"],"firstApplied":6,"secondExactDigestSkips":6,"convergenceTables":7,"schemaAfterFirst":"db02d96c85fab1c26a3b5100965bb4af50e5c5a1b5e8791d8d7ba4f71cfa02c3","schemaAfterSecond":"db02d96c85fab1c26a3b5100965bb4af50e5c5a1b5e8791d8d7ba4f71cfa02c3","ledgerDigest":"8aaa1764a5863f47637600c0062dc8af35bf02974fb1258a4c812a2bb7a48fdd"},"journeys":{"status":"PASS_SQL_AND_RESOURCE_JOURNEYS","sourceRevision":"e85ec44fabd1382f53b06d5569cce1d8d0895eb6","identity":{"keyVersion":7,"preflight":"PASS","concurrentWorkers":32,"legacyLinksCreated":1,"canonicalReads":31,"singleAccountConverged":true,"ownershipConflictDenied":true,"invalidIdentityWrites":0},"refresh":{"pepperVersion":3,"instances":2,"preflights":2,"concurrentLegacySuccesses":1,"concurrentReplayDenials":1,"crossInstanceReplayDenied":true,"familyRevokedAfterReplay":true,"rotationGeneration":2,"consumedTokenReplayDenied":true,"expiredSessionDenied":true,"unknownPepperDenied":true},"resourceValidator":{"classes":["email_otp","phone_otp","hosted","pws","im_delegate","machine"],"exactJourneys":6,"hostileCases":54,"crossClassFallbacks":0,"deterministicClock":true,"allHostileCasesDenied":true},"database":{"identityKeyRows":1,"pepperRows":1,"identityLinks":2,"refreshFamilies":2,"refreshTokens":3,"replayWitnesses":2,"refreshReceipts":2}},"shadowRuntime":{"storePreflight":"PASS","listenerStartedAfterPreflight":true,"mode":"shadow","schemaState":"012-ready","productionActivated":false,"observationChecks":24,"observationFailures":0,"prelistenerConflictDenials":4,"activeModeDenied":true,"keyConflictDenied":true,"schemaConflictDenied":true,"productionShadowDenied":true},"recovery":{"backupDigest":"d9aba8a3274eed71e62fb584a5ab303caf6648848cd2fa8fd1b8625fce9410d6","schemaBeforeBackup":"db02d96c85fab1c26a3b5100965bb4af50e5c5a1b5e8791d8d7ba4f71cfa02c3","schemaAfterRestore":"db02d96c85fab1c26a3b5100965bb4af50e5c5a1b5e8791d8d7ba4f71cfa02c3","dataBeforeBackup":"0d6fca10a986371b3825883c951b6777daa0bb10d56725f9c0a1ce1f4e16b6a5","dataAfterRestore":"0d6fca10a986371b3825883c951b6777daa0bb10d56725f9c0a1ce1f4e16b6a5","schemaRestoredExactly":true,"dataRestoredExactly":true,"rollbackFloorRevision":"e85ec44fabd1382f53b06d5569cce1d8d0895eb6","rollbackFloorStorePreflight":"PASS"},"retirement":{"authProcesses":0,"databaseProcesses":0,"databaseSockets":0,"loopbackListeners":0,"temporaryWorkDirectories":0,"secretMounts":0},"productionBoundary":{"connections":0,"databaseMigrations":0,"databaseWrites":0,"authDeployments":0,"routeChanges":0,"keyReads":0,"keyWrites":0,"accountMutations":0,"sessionMutations":0,"tokenIssuanceChanges":0,"algorithmChanges":0,"jwksChanges":0},"decision":{"s07Complete":true,"s08Allowed":true,"productionMigrationAllowed":false,"productionAuthDeploymentAllowed":false,"activeModeAllowed":false,"productionActivationAllowed":false,"nextStage":"S08_FOUR_OWNER_PRODUCTION_CHANGE_REVIEW"}},"reviewDossier":{"schemaVersion":"reits.tech/auth-s08-four-owner-review-dossier/v1","subknifeId":"D05-A03-P03c-S08-R01","parentStage":"D05-A03-P03c-S07","status":"REVIEW_DOSSIER_ASSEMBLED_BALLOTS_PENDING_PRODUCTION_HELD","observedAt":"2026-07-30T06:12:44Z","progress":{"auth":{"completed":7,"total":8},"s08":{"completedSteps":1,"currentStep":2,"totalSteps":4,"remainingIncludingCurrent":3},"ballots":{"accepted":0,"total":4}},"truthBoundary":{"externalHumanSignersRequired":true,"proxySignatureAllowed":false,"defaultApprovalAllowed":false,"portalCanSign":false,"dossierIsExecutionPermit":false},"source":{"repository":"reits/reits-auth","mainRevision":"a3ebd7a947570498a602438e20f11a9b847753fa","stagingSourceRevision":"e85ec44fabd1382f53b06d5569cce1d8d0895eb6","stagingEvidenceRevision":"1e6bb35f512a1fd2e6d5be5b8d4232c08f74c60e","stagingBinarySha256":"85607848f264ba4b7c6605aeda7ccbc2e9cd9f5c2b021aef3aef362ee415bda4","stagingReceiptSha256":"27523c8bb94ea64f6501fb39d8889ad701892a3fb411674b9553aad1c52cf6e3","rollbackFloorRevision":"e85ec44fabd1382f53b06d5569cce1d8d0895eb6","productionReleaseRevision":"18c553c2cac155f33d9626f72ae25c5f2a8d5634"},"assembly":{"required":16,"bound":16,"missing":0},"evidenceBindings":[{"id":"EV01","authority":"GIT_DAG","subject":"Auth 受保护主干 a3ebd7a947570498a602438e20f11a9b847753fa","digest":"e8d2c6a0c12ddeb57651a41b328e4262324e38e0189a6a3a949cfa507d30649a","state":"BOUND"},{"id":"EV02","authority":"REPRODUCIBLE_BUILD","subject":"S07 隔离演练二进制","digest":"85607848f264ba4b7c6605aeda7ccbc2e9cd9f5c2b021aef3aef362ee415bda4","state":"BOUND"},{"id":"EV03","authority":"S07_IMMUTABLE_RECEIPT","subject":"S07 完全隔离演练回执","digest":"27523c8bb94ea64f6501fb39d8889ad701892a3fb411674b9553aad1c52cf6e3","state":"BOUND"},{"id":"EV04","authority":"GIT_DAG","subject":"S07 精确候选源码 e85ec44fabd1382f53b06d5569cce1d8d0895eb6","digest":"b7a2b70e2316dd018a2149984c0a846b5fd2a35f14d86ce16ec9e9c280157583","state":"BOUND"},{"id":"EV05","authority":"MIGRATION_SOURCE","subject":"001/002/003/004/011/012 迁移集合与文件摘要","digest":"67ce2423ad884f7fd71dfb0bfe41f0470d53808a411b0dfd97cf6dd165be6532","state":"BOUND"},{"id":"EV06","authority":"MARIADB_SCHEMA_READBACK","subject":"S07 两轮迁移后结构摘要","digest":"db02d96c85fab1c26a3b5100965bb4af50e5c5a1b5e8791d8d7ba4f71cfa02c3","state":"BOUND"},{"id":"EV07","authority":"SQL_AND_RESOURCE_JOURNEYS","subject":"身份、刷新与六类资源服务器旅程","digest":"81139b973f3ce5e55e70366c4df08b3a564443aea816f7c13a01d4440b7b7c65","state":"BOUND"},{"id":"EV08","authority":"SHADOW_OBSERVER","subject":"24 次 shadow 观察与四类监听前拒绝","digest":"ba65c4b07bb262efee02797eec1220e025adef5831bf208a1ef82ae4f13028e1","state":"BOUND"},{"id":"EV09","authority":"BACKUP_RESTORE_READBACK","subject":"结构、数据精确恢复与回滚下限","digest":"0f4cad1fc9305855b2b9c8f1c19553fa2e10760e1511301700363f72407871ac","state":"BOUND"},{"id":"EV10","authority":"RESOURCE_RETIREMENT_READBACK","subject":"临时进程、Socket、监听、目录与秘密挂载六项清场","digest":"b5668d3285ecfb9f94eaa0b7b8dbc7e2c902af9d8dcba10e79feb99db5cb8334","state":"BOUND"},{"id":"EV11","authority":"PRODUCTION_ZERO_EFFECT_READBACK","subject":"生产连接、迁移、写入、部署、路由、密钥、账户、会话、签发、算法与 JWKS 十二项为零","digest":"15c71297c3101faec0bb378c11dcd14598f9be3af537affc1deabb79ce746c16","state":"BOUND"},{"id":"EV12","authority":"GITEA_ACTIONS","subject":"PR run 65/66、main run 67/68 与合并提交","digest":"9f1258433ba0abda97d24539d275114bee0f9e39c3eac203c9736f4946709514","state":"BOUND"},{"id":"EV13","authority":"CONFIG_FAIL_CLOSED_SOURCE","subject":"生产非 disabled、active 与冲突配置监听前拒绝","digest":"81959e1ce981ff3c565e87be7dd5a83bc06067973037b57126440453ece37fd9","state":"BOUND"},{"id":"EV14","authority":"CHINESE_ARCHITECTURE_RECORD","subject":"S07 隔离演练架构、事故与 QA 说明","digest":"d54cc27130e55ec0ec29eecd1268483eb2d094885ea9963634ae735a6cf2c95f","state":"BOUND"},{"id":"EV15","authority":"ROLLBACK_FLOOR_PREFLIGHT","subject":"e85ec44 回滚下限与恢复后 Store preflight","digest":"7fd0a9c6dfd78b192975b8e4f0f65aa3e487eb1ce4fbdede8a6e68c3c45c3b04","state":"BOUND"},{"id":"EV16","authority":"INDEPENDENT_PRODUCTION_RUNTIME_READBACK","subject":"生产 release 18c553c、productionSafe、HS256、JWKS 0 与 Auth 部署 0","digest":"23118d7e39010fbc793bacf62567a54f6a0aa6db6414261508e6105c9da93746","state":"BOUND"}],"reviewSteps":[{"id":"R01","name":"精确评审 Dossier 组装","state":"COMPLETE","exit":"十六项证据 16/16 绑定、四份逐席检查包和十二项停止条件通过本地确定性验证。"},{"id":"R02","name":"四席独立 Ballot","state":"CURRENT","exit":"Auth、Security、SRE/DBA、QA/Witness 使用四个不同 IdentityRef 与 KeyRef 对同一 Dossier 摘要形成 4/4 决定。"},{"id":"R03","name":"一次性生产窗口许可","state":"BLOCKED","exit":"四席全部接受后，另行生成绑定精确时间、目标、停止条件和回滚预算的非 Bearer 单次许可。"},{"id":"R04","name":"独立最终裁决","state":"BLOCKED","exit":"独立见证复算 Ballot、窗口和生产零变更读回后，才决定 S08 是否完成；Dossier 本身不能自我晋级。"}],"ownerPackets":[{"id":"AUTH","role":"Auth Owner","decision":"PENDING_EXTERNAL_SIGNATURE","identityRef":null,"keyRef":null,"signature":null,"signedAt":null,"delegationAllowed":false,"evidenceRefs":["EV01","EV02","EV03","EV04","EV07","EV13","EV15"],"checks":["确认 a3ebd7a 是唯一受保护主干，旧 Hosted/PWS 分叉不进入发布谱系。","复算 e85ec44 源码、S07 二进制和不可变回执摘要。","确认身份双读、刷新升级和六类校验器没有通用 fallback。","确认生产默认保持 disabled，active 与 production shadow 仍在监听前拒绝。","确认回滚下限可在恢复后通过 Store preflight。","确认本 Ballot 不等于部署、迁移、active 或正式 D05 推进许可。"]},{"id":"SECURITY","role":"Security Owner","decision":"PENDING_EXTERNAL_SIGNATURE","identityRef":null,"keyRef":null,"signature":null,"signedAt":null,"delegationAllowed":false,"evidenceRefs":["EV02","EV03","EV07","EV08","EV10","EV11","EV13"],"checks":["确认演练只使用非生产密钥、合成数据、Unix Socket 数据库和 loopback Auth。","确认六类资源服务器 6/6 正向与 54/54 敌对向量结果。","确认跨类别 fallback 为 0，issuer、audience、tenant、scope、AMR 与时限失败关闭。","确认回执、日志、文档和门户不包含秘密、Bearer、个人数据或可重放摘要。","确认生产密钥读取、写入、算法变化和 JWKS 发布均为 0。","确认签署必须绑定独立 IdentityRef、KeyRef 和 Dossier 摘要，禁止代理或默认同意。"]},{"id":"SRE_DBA","role":"SRE / DBA Owner","decision":"PENDING_EXTERNAL_SIGNATURE","identityRef":null,"keyRef":null,"signature":null,"signedAt":null,"delegationAllowed":false,"evidenceRefs":["EV03","EV05","EV06","EV08","EV09","EV10","EV15","EV16"],"checks":["确认 001/002/003/004/011/012 文件集合和两轮 6+6 迁移账本。","确认结构摘要、数据摘要、逐表定位和二进制安全备份恢复完全一致。","确认 shadow 必须先完成 Store preflight 才允许创建 listener。","确认十二项停止条件均映射为立即中止并保持生产关闭。","确认临时进程、Socket、监听器、工作目录与秘密挂载 6/6 清零。","确认真实生产窗口、备份点、回滚预算和单次许可仍不存在。"]},{"id":"QA_WITNESS","role":"QA / Independent Witness","decision":"PENDING_EXTERNAL_SIGNATURE","identityRef":null,"keyRef":null,"signature":null,"signedAt":null,"delegationAllowed":false,"evidenceRefs":["EV01","EV03","EV06","EV07","EV08","EV09","EV10","EV11","EV12","EV16"],"checks":["独立复算十六项 Evidence Binding，不能信任页面显示值或同一生成进程。","独立复核 32 路身份、双实例刷新、六类资源与 54 个敌对向量终态。","独立复核 24 次观察、四类监听前拒绝、精确恢复和回滚下限。","独立读取 Gitea PR/main 四条 CI、合并提交与 Runner 退役状态。","独立读取生产 release、HS256、JWKS 0 和十二项生产效果 0。","四席不是 4/4、IdentityRef/KeyRef 重复或摘要不同即裁决 DENY。"]}],"approvalGates":[{"id":"G01","name":"十六项评审证据完整且摘要有效","state":"PASS"},{"id":"G02","name":"S07 精确回执、源码、二进制和恢复下限连续","state":"PASS"},{"id":"G03","name":"当前生产独立读回仍为旧 release 与十二项零效果","state":"PASS"},{"id":"G04","name":"Auth Owner 独立 Ballot","state":"WAITING"},{"id":"G05","name":"Security Owner 独立 Ballot","state":"WAITING"},{"id":"G06","name":"SRE / DBA Owner 独立 Ballot","state":"WAITING"},{"id":"G07","name":"QA / Independent Witness 独立 Ballot","state":"WAITING"},{"id":"G08","name":"4/4 Ballot 独立复算与身份、密钥去重","state":"HELD"},{"id":"G09","name":"精确生产变更窗口和单次非 Bearer 许可","state":"HELD"},{"id":"G10","name":"备份点、回滚预算、自动停止和恢复许可","state":"HELD"},{"id":"G11","name":"生产迁移、Auth 部署与 shadow/active 单独授权","state":"HELD"},{"id":"G12","name":"独立最终裁决与正式计划推进","state":"HELD"}],"stopConditions":[{"id":"SC01","trigger":"任一源码、二进制、回执或证据摘要不一致","action":"ABORT_AND_HOLD_PRODUCTION"},{"id":"SC02","trigger":"四席 IdentityRef、KeyRef 不完整、重复或发生代理签署","action":"ABORT_AND_HOLD_PRODUCTION"},{"id":"SC03","trigger":"Ballot 未绑定同一 Dossier 摘要、有效时间或明确决定","action":"ABORT_AND_HOLD_PRODUCTION"},{"id":"SC04","trigger":"生产结构与 S05/S07 基线出现未知迁移或摘要漂移","action":"ABORT_AND_HOLD_PRODUCTION"},{"id":"SC05","trigger":"生产备份点、恢复演练、回滚下限或预算缺失","action":"ABORT_AND_HOLD_PRODUCTION"},{"id":"SC06","trigger":"生产环境不是 productionSafe、Preview 开启或现有服务不健康","action":"ABORT_AND_HOLD_PRODUCTION"},{"id":"SC07","trigger":"生产算法、JWKS、路由或 release 在评审窗口外发生变化","action":"ABORT_AND_HOLD_PRODUCTION"},{"id":"SC08","trigger":"任何生产 DSN、密钥、Bearer、身份明文或个人数据进入 Dossier","action":"ABORT_AND_HOLD_PRODUCTION"},{"id":"SC09","trigger":"迁移 011/012 在单次窗口许可签发前被执行","action":"ABORT_AND_HOLD_PRODUCTION"},{"id":"SC10","trigger":"Auth 候选在独立部署许可前进入生产 current","action":"ABORT_AND_HOLD_PRODUCTION"},{"id":"SC11","trigger":"shadow 或 active 在 S08 最终裁决前被启用","action":"ABORT_AND_HOLD_PRODUCTION"},{"id":"SC12","trigger":"任何门户、机器人、CI 或单一 Owner 尝试自我晋级正式进度","action":"ABORT_AND_HOLD_PRODUCTION"}],"productionBoundary":{"connections":0,"databaseMigrations":0,"databaseWrites":0,"authDeployments":0,"routeChanges":0,"keyReads":0,"keyWrites":0,"accountMutations":0,"sessionMutations":0,"tokenIssuanceChanges":0,"algorithmChanges":0,"jwksChanges":0},"permissions":{"productionDatabaseConnection":false,"productionMigration":false,"productionAuthDeployment":false,"shadowMode":false,"activeMode":false,"es256Activation":false,"jwksPublication":false,"formalAdvance":false}},"ballotIntake":{"schemaVersion":"reits.tech/auth-s08-owner-ballot-intake/v1","subknifeId":"D05-A03-P03c-S08-R02-C01","parentSubknife":"D05-A03-P03c-S08-R01","status":"BALLOT_CONTRACT_READY_EXTERNAL_AUTHORITIES_AND_BALLOTS_PENDING_PRODUCTION_HELD","dossier":{"path":".reits/review-dossiers/knife5-s08-four-owner-production-change-review.json","digest":"684783317dc35c1c7a1303e57b7143278d1f5fb2e3ba743671c6555f4a883f6b"},"progress":{"formal":{"currentKnife":5,"acceptedKnives":4,"totalKnives":36},"auth":{"completed":7,"total":8},"s08":{"completedSteps":1,"currentStep":2,"totalSteps":4},"r02Engineering":{"completedSlices":1,"currentSlice":2,"totalSlices":4,"remainingIncludingCurrent":3},"ballots":{"received":0,"valid":0,"accepted":0,"required":4}},"truthBoundary":{"externalHumanSignersRequired":true,"portalCanSign":false,"ciCanSign":false,"codexCanSign":false,"proxyAllowed":false,"ballotIsExecutionPermit":false,"fourAcceptsOnlyAdmitR03":true},"owners":[{"id":"AUTH","role":"Auth Owner","state":"WAITING_EXTERNAL_AUTHORITY","identityRef":null,"keyRef":null,"publicKeyFingerprint":null,"ballotRef":null,"validation":"NOT_RUN"},{"id":"SECURITY","role":"Security Owner","state":"WAITING_EXTERNAL_AUTHORITY","identityRef":null,"keyRef":null,"publicKeyFingerprint":null,"ballotRef":null,"validation":"NOT_RUN"},{"id":"SRE_DBA","role":"SRE / DBA Owner","state":"WAITING_EXTERNAL_AUTHORITY","identityRef":null,"keyRef":null,"publicKeyFingerprint":null,"ballotRef":null,"validation":"NOT_RUN"},{"id":"QA_WITNESS","role":"QA / Independent Witness","state":"WAITING_EXTERNAL_AUTHORITY","identityRef":null,"keyRef":null,"publicKeyFingerprint":null,"ballotRef":null,"validation":"NOT_RUN"}],"validationPipeline":[{"id":"V01","name":"读取并验证 R01 Dossier 固定摘要","failure":"REJECT_AND_HOLD_PRODUCTION"},{"id":"V02","name":"验证 Ballot Schema、子阶段和 Owner 席位","failure":"REJECT_AND_HOLD_PRODUCTION"},{"id":"V03","name":"验证 IdentityRef 与 KeyRef 绑定","failure":"REJECT_AND_HOLD_PRODUCTION"},{"id":"V04","name":"验证四席身份和密钥全局去重","failure":"REJECT_AND_HOLD_PRODUCTION"},{"id":"V05","name":"验证六项逐席检查及证据向量摘要","failure":"REJECT_AND_HOLD_PRODUCTION"},{"id":"V06","name":"验证 issuedAt、expiresAt 与一小时上限","failure":"REJECT_AND_HOLD_PRODUCTION"},{"id":"V07","name":"验证 nonce 与 Ballot ID 未重放","failure":"REJECT_AND_HOLD_PRODUCTION"},{"id":"V08","name":"验证 Ed25519 外部签名","failure":"REJECT_AND_HOLD_PRODUCTION"},{"id":"V09","name":"验证禁止代理、人工独立审阅和非执行许可声明","failure":"REJECT_AND_HOLD_PRODUCTION"},{"id":"V10","name":"汇总四席全票或任一否决并只准入 R03","failure":"REJECT_AND_HOLD_PRODUCTION"}],"rejectionRules":[{"id":"BR01","trigger":"Dossier 摘要不一致","action":"REJECT_AND_HOLD_PRODUCTION"},{"id":"BR02","trigger":"Ballot Schema 或子阶段不一致","action":"REJECT_AND_HOLD_PRODUCTION"},{"id":"BR03","trigger":"Owner 不属于四个固定席位","action":"REJECT_AND_HOLD_PRODUCTION"},{"id":"BR04","trigger":"同一 Owner 出现重复 Ballot","action":"REJECT_AND_HOLD_PRODUCTION"},{"id":"BR05","trigger":"IdentityRef 缺失、错误或跨席重复","action":"REJECT_AND_HOLD_PRODUCTION"},{"id":"BR06","trigger":"KeyRef 缺失、错误或跨席重复","action":"REJECT_AND_HOLD_PRODUCTION"},{"id":"BR07","trigger":"外部 Ed25519 公钥无效","action":"REJECT_AND_HOLD_PRODUCTION"},{"id":"BR08","trigger":"签名无效或签署后字段被篡改","action":"REJECT_AND_HOLD_PRODUCTION"},{"id":"BR09","trigger":"Ballot 尚未生效、过期或有效期超过一小时","action":"REJECT_AND_HOLD_PRODUCTION"},{"id":"BR10","trigger":"Ballot ID 或 nonce 重放","action":"REJECT_AND_HOLD_PRODUCTION"},{"id":"BR11","trigger":"六项逐席检查缺失、乱序或 ACCEPT 中存在未接受项","action":"REJECT_AND_HOLD_PRODUCTION"},{"id":"BR12","trigger":"证据向量或检查摘要格式无效","action":"REJECT_AND_HOLD_PRODUCTION"},{"id":"BR13","trigger":"代理签署、非人工签署或非独立审阅","action":"REJECT_AND_HOLD_PRODUCTION"},{"id":"BR14","trigger":"Ballot 声称自身是执行许可","action":"REJECT_AND_HOLD_PRODUCTION"},{"id":"BR15","trigger":"任一有效 Ballot 明确 REJECT","action":"REJECT_AND_HOLD_PRODUCTION"},{"id":"BR16","trigger":"不足四份有效 ACCEPT Ballot","action":"REJECT_AND_HOLD_PRODUCTION"}],"permissions":{"productionDatabaseConnection":false,"productionMigration":false,"productionAuthDeployment":false,"shadowMode":false,"activeMode":false,"es256Activation":false,"jwksPublication":false,"formalAdvance":false},"effects":{"authorityBindings":0,"ballotsReceived":0,"ballotsValidated":0,"ballotsAccepted":0,"productionConnections":0,"databaseMigrations":0,"databaseWrites":0,"authDeployments":0,"routeChanges":0,"keyChanges":0,"sessionChanges":0,"algorithmChanges":0,"jwksChanges":0,"formalAdvances":0}},"r02Delivery":{"repository":"reits/reits-auth","stage":"D05-A03-P03c-S08-R02-C01","branch":"codex/auth-s08-r02-ballot-intake","headRevision":"eecb37d765ae167668bd9db3059c4c26f32f6f5f","currentMainRevision":"038707beb43936672d5cbf2ef68f7dd4fe706660","pullRequest":{"number":27,"url":"https://gitea.reits.tech/reits/reits-auth/pulls/27","state":"MERGED","baseRevision":"d18b62b0be8da75f82d8faf0fbdae1d349942aa0","headRevision":"eecb37d765ae167668bd9db3059c4c26f32f6f5f","mergeRevision":"038707beb43936672d5cbf2ef68f7dd4fe706660","mergedAt":"2026-07-30T08:11:48Z"},"checks":[{"runNumber":76,"workflowFile":"ci.yml","scope":"pull_request","conclusion":"success","headRevision":"eecb37d765ae167668bd9db3059c4c26f32f6f5f"},{"runNumber":77,"workflowFile":"reits-minimum-ci.yml","scope":"pull_request","conclusion":"success","headRevision":"eecb37d765ae167668bd9db3059c4c26f32f6f5f"},{"runNumber":78,"workflowFile":"ci.yml","scope":"main","conclusion":"success","headRevision":"038707beb43936672d5cbf2ef68f7dd4fe706660"},{"runNumber":79,"workflowFile":"reits-minimum-ci.yml","scope":"main","conclusion":"success","headRevision":"038707beb43936672d5cbf2ef68f7dd4fe706660"}],"runnerReadback":{"repositoryRunnerCount":0,"remoteRunnerContainers":0,"remoteRunnerVolumes":0,"localRunnerProcesses":0,"localActionCaches":0,"registrationTokenPersisted":false},"dispatchIncident":{"id":"R02-CI-QUEUE-01","state":"CLOSED","symptom":"首批按目标编号命名的一次性 Runner 实际承接了仓库中更早排队的 #74/#75。","cause":"Gitea 按仓库任务队列调度；Runner 名称不构成 run_number 绑定证据。","rejectedAsEvidenceFor":[76,77],"correctiveAction":"读取实际 task 与 Run API 后立即清退旧容器和卷，重新注册两台仓库级一次性 Runner，确认 #76/#77 进入 in_progress 后才继续；主干 #78/#79 再使用另一组全新 Runner。","truthRule":"只按 Gitea Run API 的 run_number、head_sha、event、status、conclusion 记账，不按 Runner 名称推断。"}},"r02Engineering":{"completedSlices":1,"currentSlice":2,"totalSlices":4,"remainingIncludingCurrent":3},"r02EngineeringProtocol":[{"id":"C01","name":"合同与失败关闭验证器","state":"COMPLETE","exit":"两份 Schema、十步流水线、十六类拒绝、Ed25519 验证与负向 QA 通过。"},{"id":"C02","name":"四席外部权威绑定","state":"CURRENT","exit":"四席分别提交不同 IdentityRef、KeyRef 与 Ed25519 公钥；私钥不离开各自控制域。"},{"id":"C03","name":"Ballot 收件与独立复算","state":"BLOCKED","exit":"四份 Ballot 绑定同一 Dossier、六项检查、有效期、唯一 nonce 并通过签名验证。"},{"id":"C04","name":"全票裁决与 R03 交接","state":"BLOCKED","exit":"四份有效 ACCEPT 只生成 ADMIT_R03_ONLY；任一 REJECT 或缺席继续关闭。"}],"ballotContract":{"schemaHref":"/schemas/auth-s08-owner-ballot.v1.schema.json","authoritySchemaHref":"/schemas/auth-s08-owner-authority-set.v1.schema.json","signatureAlgorithm":"ED25519","maximumValiditySeconds":3600,"requiredFields":["schemaVersion","subknifeId","ballotId","dossierSubknifeId","dossierDigest","ownerId","decision","identityRef","keyRef","nonce","issuedAt","expiresAt","evidenceVectorDigest","checksDigest","checkResults","attestation","signatureAlgorithm","signature"],"decisions":["ACCEPT","REJECT"],"checkCount":6,"fourOfFourMeans":"ADMIT_R03_ONLY","executionPermit":false},"ballotAuthoritySummary":{"required":4,"bound":0,"waiting":4},"ballotSummary":{"received":0,"valid":0,"accepted":0,"required":4},"productionRuntimeReadback":{"releaseRevision":"18c553c2cac155f33d9626f72ae25c5f2a8d5634","currentRelease":"/opt/reits-auth/releases/sso-s39-20260727T023532Z","serviceState":"ACTIVE","databaseMigrations":0,"databaseWrites":0,"authDeployments":0,"routeChanges":0,"productionKeyReads":0,"productionKeyWrites":0,"accountMutations":0,"sessionMutations":0,"tokenIssuanceChanges":0,"algorithm":"HS256","publicJwksKeys":0},"changedSurfaces":[{"path":".reits/review-dossiers/knife5-s08-r02-owner-ballot-intake.json","kind":"R02 安全空态机器合同","purpose":"固定正式 5/36、Auth 7/8、S08 1/4、R02 工程 1/4、Ballot 0/4、十步验证与十六类拒绝。"},{"path":".reits/review-dossiers/auth-s08-owner-ballot.v1.schema.json","kind":"Owner Ballot Schema","purpose":"固定十八组签票字段、最长一小时有效期、六项检查、独立人工声明、ED25519 和非执行许可。"},{"path":".reits/review-dossiers/auth-s08-owner-authority-set.v1.schema.json","kind":"四席 Authority Set Schema","purpose":"固定四席公开 IdentityRef、KeyRef、公钥和禁止代理字段；私钥永不进入合同或门户。"},{"path":"internal/review/ballot.go","kind":"失败关闭验证核心","purpose":"验证 Dossier 摘要、四席身份/密钥去重、检查摘要、时间窗、重放、签名和全票边界。"},{"path":"internal/review/ballot_test.go","kind":"正负向签票 QA","purpose":"在进程内生成一次性 Fixture，验证 4/4 只准入 R03，并拒绝篡改、过期、重复身份与代理。"},{"path":"cmd/s08-ballot-verify/main.go","kind":"独立见证 CLI","purpose":"安全空态可直接验证；外部 Authority Set 与 Ballot 目录必须同时提供，只读复算且不接触私钥。"},{"path":"docs/knife5-s08-r02-independent-owner-ballots.md","kind":"中文架构与 QA 说明","purpose":"解释四个工程切片、十八组字段、十步验证、十六类拒绝、操作命令和真实下一动作。"},{"path":".gitea/workflows/ci.yml","kind":"远程安全门禁","purpose":"在 gofmt、vet、race 和构建之外强制运行 R01/R02 两个只读验证器。"},{"path":".reits/task-packets/knife5-s08-r02-owner-ballot-intake.json","kind":"多机协作任务包","purpose":"固定本切片范围、验收、回滚、私钥禁区和跨仓消费责任。"},{"path":".reits/consumer-evidence/knife5-s08-r02-owner-ballot-intake.json","kind":"Auth 自消费证据","purpose":"绑定合同、Schema、验证器、测试、中文文档和任务包摘要；Portal 在自己的仓库另建消费证据。"}],"admissionChecks":[{"id":"AC01","name":"当前主干精确继承","authority":"Git DAG","state":"PASS","detail":"S06 候选父提交为 S05 主线 ecd099c3，未从旧 Hosted/PWS 分叉直接合并。"},{"id":"AC02","name":"只扩展数据库边界","authority":"SQL 静态隐私与迁移测试","state":"PASS","detail":"012 只创建休眠结构和外键，不含数据写入、破坏性 DDL、明文令牌或 Bearer 摘要。"},{"id":"AC03","name":"本地代码质量","authority":"Go toolchain","state":"PASS","detail":"gofmt、go vet、go test -race 与 CGO_ENABLED=0 构建在候选 346563a7 全部通过。"},{"id":"AC04","name":"最低治理合同","authority":"REITS CI gate","state":"PASS","detail":"12 项治理检查、5 个任务包与 5 份消费方证据全部通过。"},{"id":"AC05","name":"S05 数据库副本基线","authority":"S05 clone receipt","state":"PASS","detail":"生产只读结构摘要、001–004+011 双次重放、五张旧表不变量和精确恢复保持有效。"},{"id":"AC06","name":"版本化身份双读","authority":"identity memory + SQL tests","state":"PASS","detail":"32 并发调用收敛到单一账户；双链接、旧新冲突和无效身份均失败关闭，非法路径写操作为 0。"},{"id":"AC07","name":"身份版本密钥验证","authority":"identity SQL preflight","state":"PASS","detail":"版本行在事务中锁定并做常量时间 verifier 校验；未知、禁用或不匹配版本在写前拒绝。"},{"id":"AC08","name":"刷新会话原子升级","authority":"refresh memory + SQL tests","state":"PASS","detail":"仍有效旧会话只升级一次，新令牌按版本 pepper 生成并精确轮换；过期或未知版本拒绝。"},{"id":"AC09","name":"重放整族撤销","authority":"refresh replay tests","state":"PASS","detail":"legacy SHA 清除后仍由 replay witness 识别跨实例重放，并原子撤销整个 token family。"},{"id":"AC10","name":"六类校验矩阵","authority":"token validator table tests","state":"PASS","detail":"Email、Phone、Hosted、PWS、IM Delegate、Machine 六类均逐项校验发行者、受众、租户、scope、AMR 与时限。"},{"id":"AC11","name":"跨类降级禁止","authority":"hostile mutation matrix","state":"PASS","detail":"issuer、audience、client、principal、tenant、scope、AMR、TTL、auth_time 任一变异均不能回退到其他类别。"},{"id":"AC12","name":"配置冲突关闭","authority":"strict config negative tests","state":"PASS","detail":"环境别名、内联/文件密钥、schema 状态、重复 key/pepper/validator 和 production 非 disabled 在监听前拒绝。"},{"id":"AC13","name":"Shadow 只读预检","authority":"server bootstrap tests","state":"PASS","detail":"shadow 只读取版本 verifier/status；active 在 S06 对所有环境拒绝，生产不启动新监听。"},{"id":"AC14","name":"候选远程双 CI","authority":"Gitea Actions 61/62","state":"PASS","detail":"同一候选 346563a7 的 Security 与 Minimum CI 均成功。"},{"id":"AC15","name":"受保护主干合并","authority":"Gitea PR #22 + Git DAG","state":"PASS","detail":"PR #22 在必需检查全绿后合并为 0eeb4798，双父节点精确绑定 S05 main 与 S06 候选。"},{"id":"AC16","name":"主干远程双 CI","authority":"Gitea Actions 63/64","state":"PASS","detail":"合并后 main 0eeb4798 的 Security 与 Minimum CI 均成功。"},{"id":"AC17","name":"Runner 退役与生产边界","authority":"Gitea + EC2 + Auth independent readback","state":"PASS","detail":"仓库 Runner、临时容器、命名卷均为 0；生产 Auth 仍运行旧 release，迁移、部署、路由和签名变化均为 0。"},{"id":"AC18","name":"完全隔离网络边界","authority":"S07 shell preflight + socket readback","state":"PASS","detail":"MariaDB 只开放本地 Unix Socket 且 skip-networking；Auth 只绑定 loopback，远程数据库参数与生产 DSN、凭据、数据均未加载。"},{"id":"AC19","name":"六迁移两轮精确重放","authority":"migration ledger","state":"PASS","detail":"001/002/003/004/011/012 首轮应用 6 次、次轮同摘要跳过 6 次，两轮结构摘要完全一致。"},{"id":"AC20","name":"SQL 身份并发旅程","authority":"MariaDB SERIALIZABLE journey","state":"PASS","detail":"32 路并发得到 1 次旧链接建立与 31 次 canonical 读取，单账户收敛、所有权冲突拒绝、非法身份写入为 0。"},{"id":"AC21","name":"双实例刷新重放","authority":"two-instance SQL refresh journey","state":"PASS","detail":"两个实例完成两次预检；旧会话并发一成一拒，跨实例重放触发整族撤销，轮换达到第 2 代。"},{"id":"AC22","name":"六类资源服务器真实向量","authority":"resource validator journey","state":"PASS","detail":"六类正向令牌 6/6 通过，九维乘六类共 54 个敌对变更 54/54 拒绝，跨类 fallback 为 0。"},{"id":"AC23","name":"Shadow 观察窗口","authority":"loopback health/meta observation","state":"PASS","detail":"store preflight 通过后才监听；24 次健康与元数据观察全部成功，观察失败为 0。"},{"id":"AC24","name":"四类监听前失败关闭","authority":"negative boot matrix","state":"PASS","detail":"active、密钥冲突、Schema 冲突与 production shadow 均在 listener 创建前拒绝。"},{"id":"AC25","name":"备份恢复精确一致","authority":"schema/data digest + per-table witness","state":"PASS","detail":"恢复前后结构摘要和数据摘要分别完全一致；恢复后二进制在同一源码回滚下限再次通过 store preflight。"},{"id":"AC26","name":"实跑问题闭环","authority":"three failing rehearsals + final pass","state":"PASS","detail":"外键恢复顺序用约束围栏修复，二进制列用 hex dump 修复，TIMESTAMP 漂移用数据库 UTC 固定修复。"},{"id":"AC27","name":"候选与主干远程门禁","authority":"Gitea Actions 65/66/67/68","state":"PASS","detail":"PR #23 的 Security/Minimum CI 与合并后 main 的两条同类门禁全部成功，精确绑定 1e6bb35 与 a3ebd7a。"},{"id":"AC28","name":"临时执行面完全退役","authority":"Gitea runner + local process/filesystem readback","state":"PASS","detail":"仓库 Runner、守护进程、本地工作目录和动作缓存均独立读回为 0。"},{"id":"AC29","name":"生产十二项零效果","authority":"S07 receipt + production independent boundary","state":"PASS","detail":"生产连接、迁移、写入、部署、路由、密钥、账户、会话、签发、算法与 JWKS 变化均为 0。"}],"admissionSummary":{"passed":29,"waiting":0,"held":0,"total":29},"reviewGateSummary":{"passed":3,"waiting":4,"held":5,"total":12},"readinessStages":[{"id":"S01","name":"基线分类","owner":"架构","state":"COMPLETE","exit":"确认当前 main 是唯一发布主线，旧分支只作为设计输入。"},{"id":"S02","name":"休眠候选","owner":"Auth","state":"COMPLETE","exit":"从当前 main 创建只扩展数据库与配置基础。"},{"id":"S03","name":"远程必需 CI","owner":"CI Owner / Gitea / QA","state":"COMPLETE","exit":"仓库级一次性 Runner 完成候选远程验证并退役。"},{"id":"S04","name":"受保护主干","owner":"Auth Owner","state":"COMPLETE","exit":"休眠基础通过受保护规则进入主线并完成主干回归。"},{"id":"S05","name":"数据库副本演练","owner":"DBA / SRE","state":"COMPLETE","exit":"结构指纹、迁移账本、双次重放、备份恢复与旧二进制预检通过。"},{"id":"S06","name":"兼容运行时","owner":"Auth / Security / QA","state":"COMPLETE","exit":"身份双读、刷新按需升级、六类校验器、配置冲突关闭、候选与主线双 CI 全部通过。"},{"id":"S07","name":"预发布演练","owner":"SRE / Security / QA","state":"COMPLETE","exit":"隔离数据库迁移、shadow、SQL 旅程、资源向量、观察、恢复、回滚和资源清场全部通过。"},{"id":"S08","name":"生产变更评审","owner":"Auth / Security / SRE / QA","state":"CURRENT","exit":"R01 Dossier 已完成；四席 4/4、一次性生产窗口和独立最终裁决全部通过后，S08 才能完成。","progress":"1/4","currentStep":"R02 四席独立 Ballot","remainingIncludingCurrent":3}],"s08Protocol":[{"id":"R01","name":"精确评审 Dossier 组装","state":"COMPLETE","exit":"十六项证据 16/16 绑定、四份逐席检查包和十二项停止条件通过本地确定性验证。"},{"id":"R02","name":"四席独立 Ballot","state":"CURRENT","exit":"Auth、Security、SRE/DBA、QA/Witness 使用四个不同 IdentityRef 与 KeyRef 对同一 Dossier 摘要形成 4/4 决定。"},{"id":"R03","name":"一次性生产窗口许可","state":"BLOCKED","exit":"四席全部接受后，另行生成绑定精确时间、目标、停止条件和回滚预算的非 Bearer 单次许可。"},{"id":"R04","name":"独立最终裁决","state":"BLOCKED","exit":"独立见证复算 Ballot、窗口和生产零变更读回后，才决定 S08 是否完成；Dossier 本身不能自我晋级。"}],"ownerPackets":[{"id":"AUTH","role":"Auth Owner","decision":"PENDING_EXTERNAL_SIGNATURE","identityRef":null,"keyRef":null,"signature":null,"signedAt":null,"delegationAllowed":false,"evidenceRefs":["EV01","EV02","EV03","EV04","EV07","EV13","EV15"],"checks":["确认 a3ebd7a 是唯一受保护主干，旧 Hosted/PWS 分叉不进入发布谱系。","复算 e85ec44 源码、S07 二进制和不可变回执摘要。","确认身份双读、刷新升级和六类校验器没有通用 fallback。","确认生产默认保持 disabled，active 与 production shadow 仍在监听前拒绝。","确认回滚下限可在恢复后通过 Store preflight。","确认本 Ballot 不等于部署、迁移、active 或正式 D05 推进许可。"]},{"id":"SECURITY","role":"Security Owner","decision":"PENDING_EXTERNAL_SIGNATURE","identityRef":null,"keyRef":null,"signature":null,"signedAt":null,"delegationAllowed":false,"evidenceRefs":["EV02","EV03","EV07","EV08","EV10","EV11","EV13"],"checks":["确认演练只使用非生产密钥、合成数据、Unix Socket 数据库和 loopback Auth。","确认六类资源服务器 6/6 正向与 54/54 敌对向量结果。","确认跨类别 fallback 为 0，issuer、audience、tenant、scope、AMR 与时限失败关闭。","确认回执、日志、文档和门户不包含秘密、Bearer、个人数据或可重放摘要。","确认生产密钥读取、写入、算法变化和 JWKS 发布均为 0。","确认签署必须绑定独立 IdentityRef、KeyRef 和 Dossier 摘要，禁止代理或默认同意。"]},{"id":"SRE_DBA","role":"SRE / DBA Owner","decision":"PENDING_EXTERNAL_SIGNATURE","identityRef":null,"keyRef":null,"signature":null,"signedAt":null,"delegationAllowed":false,"evidenceRefs":["EV03","EV05","EV06","EV08","EV09","EV10","EV15","EV16"],"checks":["确认 001/002/003/004/011/012 文件集合和两轮 6+6 迁移账本。","确认结构摘要、数据摘要、逐表定位和二进制安全备份恢复完全一致。","确认 shadow 必须先完成 Store preflight 才允许创建 listener。","确认十二项停止条件均映射为立即中止并保持生产关闭。","确认临时进程、Socket、监听器、工作目录与秘密挂载 6/6 清零。","确认真实生产窗口、备份点、回滚预算和单次许可仍不存在。"]},{"id":"QA_WITNESS","role":"QA / Independent Witness","decision":"PENDING_EXTERNAL_SIGNATURE","identityRef":null,"keyRef":null,"signature":null,"signedAt":null,"delegationAllowed":false,"evidenceRefs":["EV01","EV03","EV06","EV07","EV08","EV09","EV10","EV11","EV12","EV16"],"checks":["独立复算十六项 Evidence Binding，不能信任页面显示值或同一生成进程。","独立复核 32 路身份、双实例刷新、六类资源与 54 个敌对向量终态。","独立复核 24 次观察、四类监听前拒绝、精确恢复和回滚下限。","独立读取 Gitea PR/main 四条 CI、合并提交与 Runner 退役状态。","独立读取生产 release、HS256、JWKS 0 和十二项生产效果 0。","四席不是 4/4、IdentityRef/KeyRef 重复或摘要不同即裁决 DENY。"]}],"approvalGates":[{"id":"G01","name":"十六项评审证据完整且摘要有效","state":"PASS"},{"id":"G02","name":"S07 精确回执、源码、二进制和恢复下限连续","state":"PASS"},{"id":"G03","name":"当前生产独立读回仍为旧 release 与十二项零效果","state":"PASS"},{"id":"G04","name":"Auth Owner 独立 Ballot","state":"WAITING"},{"id":"G05","name":"Security Owner 独立 Ballot","state":"WAITING"},{"id":"G06","name":"SRE / DBA Owner 独立 Ballot","state":"WAITING"},{"id":"G07","name":"QA / Independent Witness 独立 Ballot","state":"WAITING"},{"id":"G08","name":"4/4 Ballot 独立复算与身份、密钥去重","state":"HELD"},{"id":"G09","name":"精确生产变更窗口和单次非 Bearer 许可","state":"HELD"},{"id":"G10","name":"备份点、回滚预算、自动停止和恢复许可","state":"HELD"},{"id":"G11","name":"生产迁移、Auth 部署与 shadow/active 单独授权","state":"HELD"},{"id":"G12","name":"独立最终裁决与正式计划推进","state":"HELD"}],"stopConditions":[{"id":"SC01","trigger":"任一源码、二进制、回执或证据摘要不一致","action":"ABORT_AND_HOLD_PRODUCTION"},{"id":"SC02","trigger":"四席 IdentityRef、KeyRef 不完整、重复或发生代理签署","action":"ABORT_AND_HOLD_PRODUCTION"},{"id":"SC03","trigger":"Ballot 未绑定同一 Dossier 摘要、有效时间或明确决定","action":"ABORT_AND_HOLD_PRODUCTION"},{"id":"SC04","trigger":"生产结构与 S05/S07 基线出现未知迁移或摘要漂移","action":"ABORT_AND_HOLD_PRODUCTION"},{"id":"SC05","trigger":"生产备份点、恢复演练、回滚下限或预算缺失","action":"ABORT_AND_HOLD_PRODUCTION"},{"id":"SC06","trigger":"生产环境不是 productionSafe、Preview 开启或现有服务不健康","action":"ABORT_AND_HOLD_PRODUCTION"},{"id":"SC07","trigger":"生产算法、JWKS、路由或 release 在评审窗口外发生变化","action":"ABORT_AND_HOLD_PRODUCTION"},{"id":"SC08","trigger":"任何生产 DSN、密钥、Bearer、身份明文或个人数据进入 Dossier","action":"ABORT_AND_HOLD_PRODUCTION"},{"id":"SC09","trigger":"迁移 011/012 在单次窗口许可签发前被执行","action":"ABORT_AND_HOLD_PRODUCTION"},{"id":"SC10","trigger":"Auth 候选在独立部署许可前进入生产 current","action":"ABORT_AND_HOLD_PRODUCTION"},{"id":"SC11","trigger":"shadow 或 active 在 S08 最终裁决前被启用","action":"ABORT_AND_HOLD_PRODUCTION"},{"id":"SC12","trigger":"任何门户、机器人、CI 或单一 Owner 尝试自我晋级正式进度","action":"ABORT_AND_HOLD_PRODUCTION"}],"permissions":{"productionDatabaseConnection":false,"productionMigration":false,"productionAuthDeployment":false,"shadowMode":false,"activeMode":false,"es256Activation":false,"jwksPublication":false,"formalAdvance":false},"nextActions":[{"order":1,"owner":"Auth Owner","action":"在各自控制域提交不可代理 IdentityRef、KeyRef 与 Ed25519 公钥","acceptance":"四席 IdentityRef/KeyRef 必须全局唯一；私钥留在 Owner 控制域，Portal、CI 与 Codex 不读取。"},{"order":2,"owner":"Security Owner","action":"在各自控制域提交不可代理 IdentityRef、KeyRef 与 Ed25519 公钥","acceptance":"四席 IdentityRef/KeyRef 必须全局唯一；私钥留在 Owner 控制域，Portal、CI 与 Codex 不读取。"},{"order":3,"owner":"SRE / DBA Owner","action":"在各自控制域提交不可代理 IdentityRef、KeyRef 与 Ed25519 公钥","acceptance":"四席 IdentityRef/KeyRef 必须全局唯一；私钥留在 Owner 控制域，Portal、CI 与 Codex 不读取。"},{"order":4,"owner":"QA / Independent Witness","action":"在各自控制域提交不可代理 IdentityRef、KeyRef 与 Ed25519 公钥","acceptance":"四席 IdentityRef/KeyRef 必须全局唯一；私钥留在 Owner 控制域，Portal、CI 与 Codex 不读取。"}],"liveDecision":{"defaultMainEs256":false,"productionSourceRevisionBound":false,"productionAdapterBound":false,"productionConfigRefPresent":false,"ownerSealPresent":false,"windowAuthorized":false,"productionAlgorithm":"HS256","publicJwksHttpStatus":200,"publicJwksKeyCount":0,"firstRealReceiptPresent":false,"independentProductionReadbackPresent":false,"rollbackProofPresent":false,"terminalCode":"DEFAULT_MAIN_ES256_ABSENT"},"effects":{"r01AuthMainMerge":1,"r01ReviewDossierPublished":1,"r02ContractImplemented":1,"r02AuthMainMerge":1,"r02PortalContractImported":1,"authorityBindings":0,"ballotsReceived":0,"ballotsValidated":0,"ballotsAccepted":0,"productionConnections":0,"databaseMigrations":0,"databaseWrites":0,"authDeployments":0,"routeChanges":0,"keyChanges":0,"sessionChanges":0,"algorithmChanges":0,"jwksChanges":0,"formalAdvances":0},"decision":{"baselineCorrectionComplete":true,"safeCandidatePublished":true,"localQualityPassed":true,"governanceEvidencePassed":true,"remoteRequiredCiPassed":true,"protectedMainMergeAllowed":true,"authMainAdvanced":true,"databaseCloneRehearsalPassed":true,"compatibleRuntimePassed":true,"stagingRehearsalAllowed":true,"stagingRehearsalPassed":true,"fourOwnerReviewAllowed":true,"reviewDossierAssembled":true,"reviewDossierBindingsPassed":true,"ballotContractImplemented":true,"ballotContractImported":true,"externalAuthoritySetBound":false,"ballotsReceived":0,"ballotsValidated":0,"fourOwnerReviewPassed":false,"ownerBallotsAccepted":0,"ownerBallotsRequired":4,"productionWindowPermitIssued":false,"independentFinalDecisionPassed":false,"databaseMigrationAllowed":false,"authDeploymentAllowed":false,"shadowModeAllowed":false,"activeModeAllowed":false,"productionActivationAdvanced":false,"formalAdvanceAllowed":false,"d05Accepted":false,"d06GateZero":"DENIED","controller8110":"CLOSED","nextRequiredEvent":"R02-C01 已完成 Ballot/Authority Set Schema、十步验证、十六类拒绝与 Ed25519 失败关闭验证器。当前 C02 必须由 Auth、Security、SRE/DBA、QA/Witness 四席分别提供真实外部 IdentityRef、KeyRef 和公钥；私钥不得进入 Portal。四席真实 Ballot 仍为 0/4，R03/R04 与生产继续关闭。"},"integrity":{"changedSurfaces":10,"admissionChecks":29,"readinessStages":8,"nextActions":4,"evidenceBindings":16,"ownerPackets":4,"ownerChecks":24,"r02OwnerSlots":4,"r02AuthorityBindings":0,"r02ValidationSteps":10,"r02RejectionRules":16,"r02BallotsReceived":0,"r02BallotsValid":0,"r02BallotsAccepted":0,"approvalGates":12,"stopConditions":12,"deniedPermissions":8,"remoteQualityChecks":4,"validatorClasses":6,"runtimeTables":4,"stagingMigrations":6,"stagingExactSkips":6,"stagingIdentityWorkers":32,"stagingHostileCases":54,"stagingObservations":24,"stagingRetirementZeros":6,"stagingProductionZeros":12,"localQualityChecks":5,"zeroEffects":14}}