{"schemaVersion":"developer.reits.tech/implementation-program/v1","totalKnives":36,"acceptedKnives":4,"activeKnives":1,"readyKnives":0,"plannedKnives":31,"waves":[{"id":"W0","label":"交付底座","range":"D01–D05","knives":5,"purpose":"先建立机器清单、契约、设计系统、CI 与发布证据，降低所有后续刀的并行冲突。","exit":"27 份 repository manifest 可被机器发现，跨仓契约和最小 Gate 不再靠口头约定。"},{"id":"W1","label":"身份与治理","range":"D06–D11","knives":6,"purpose":"完成浏览器认证、MFA/恢复、会话传播、组织、权限、同意与审计。","exit":"高风险命令具备主体、租户、资源、策略、step-up 与审计证据。"},{"id":"W2","label":"平台可靠性","range":"D12–D17","knives":6,"purpose":"补齐媒体、扫描、可观测、恢复、故障域与事件通知等公共服务。","exit":"平台服务有生产部署、异机证据和可恢复证明，不再只存在于蓝图。"},{"id":"W3","label":"内容、社区与预约","range":"D18–D22","knives":5,"purpose":"打通可信内容、社区发布、预约交易、商家履约与支付账本。","exit":"公共体验和运营控制面拥有独立权限、契约、部署和端到端回执。"},{"id":"W4","label":"开放平台","range":"D23–D27","knives":5,"purpose":"从四页发布竖切扩展为应用、版本、组织、机器人和公共开发者产品。","exit":"上游 XTalk 只作为对照，REITS 安全发布链和 canonical enum 不退化。"},{"id":"W5","label":"数据、实时与量化","range":"D28–D33","knives":6,"purpose":"拆分数据控制面，部署行情与量化服务，并闭合 IM/iOS/模拟器消费者证据。","exit":"正式主干、生产服务、客户端消费和确定性结果绑定同一 release identity。"},{"id":"W6","label":"UI、QA 与发布收口","range":"D34–D36","knives":3,"purpose":"把实现后的目标稿转为 CURRENT，完成多环境体验、发布、回滚和最终验收。","exit":"85 张现有 CURRENT 与本计划落地的 TARGET 全部具有可复核 receipt，programComplete=true。"}],"targetScreens":133,"currentKnife":"D05","currentOrdinal":5,"currentStatus":"ACTIVE","remainingKnives":32,"programComplete":false,"criticalPath":["D01","D02","D05","D06","D08","D09","D10","D23","D24","D31","D34","D35","D36"],"parallelLanes":["Developer Experience","Identity/Governance","Platform/SRE","Content/Community","Booking/Payments","Open Platform","Data/Realtime","Quant/Mobile"],"engineeringDelivery":{"originalPlanCompletedSubphases":50,"completedSubphases":60,"totalPlannedSubphases":60,"remainingSubphases":0,"completedRange":"D05-R01..D05-R60","currentSubphase":"D05-R60","extensionRange":"D05-R51..D05-R60","denominatorRule":"R50 复盘后一次性新增十刀实物接入扩展计划；后续不得逐刀改分母","d04AcceptedAt":"2026-07-20T16:23:57+08:00","formalProgressStalledDurationAtR49Audit":"8 天以上","displayRule":"正式验收刀数与工程子阶段必须并列显示"},"generatedAt":"2026-08-09","boundary":"This D01–D36 implementation program is separate from the completed 36/36 control-plane expansion. Documentation is not accepted implementation evidence.","currentKnifeControl":{"schemaVersion":"developer.reits.tech/current-knife-control/v1","verifiedAt":"2026-08-09","formal":{"totalKnives":36,"acceptedKnives":4,"currentOrdinal":5,"currentKnife":"D05","remainingIncludingCurrent":32,"remainingAfterAcceptance":31,"accepted":false},"delivery":{"activeSlice":"D05-A03-P03c-S08-R02-C02-F05-06-AUTHORITY-FINAL-ACCEPTANCE-HANDOFF","activeSliceLabel":"Auth 外部 Authority 接管与 D05 正式验收包最终交接","activeSliceHref":"/development-plan/archive#d05-c02-authority-final-acceptance-handoff","engineeringCompleted":60,"engineeringTotal":60,"engineeringSubphases":"60/60","engineeringRemaining":0,"formalSubsliceCompleted":6,"formalSubsliceTotal":6,"formalSubsliceRemaining":0,"c02ToolsCompleted":4,"c02ToolsTotal":4,"authProgress":"8/8","s08Progress":"1/4","r02Progress":"1/4","currentState":"AUTHORITY_HANDOFF_PLAN_1_OF_1_STEPS_8_OF_8_READY_CANDIDATE_0_OF_1_REHASHES_0_OF_4_BINDINGS_0_OF_4_BALLOTS_0_OF_4_PACKAGE_0_OF_1_G03_STALE"},"operations":{"entryId":"D05-C02-AUTHORITY-FINAL-ACCEPTANCE-HANDOFF","entryLabel":"Auth 外部 Authority 接管与 D05 正式验收包最终交接工作台","entryHref":"/development-plan/archive#d05-c02-authority-final-acceptance-handoff","currentStep":"F05_06_PREPARE_EXTERNAL_AUTHORITY_TAKEOVER_AND_D05_ACCEPTANCE_HANDOFF","currentStepLabel":"将本地候选、四席复算、Authority Binding、正式摘要、Ballot 与 D05 验收包拆成八步外部接管链","currentAuthority":"Auth Owner + Security + SRE/DBA + QA 独立见证","ownerActionsRequired":4,"ownerActionsCompleted":0,"receiverActionsCompleted":0,"quarantineActionsCompleted":0,"portalAcceptsUploads":false,"portalWritesExternalEvidence":false,"portalCanAdvanceFormalProgress":false,"ownerPacketFactory":{"id":"D05-C02-FOUR-OWNER-EXECUTION-PACKET-FACTORY","label":"四席 Owner 执行任务包工厂","href":"/development-plan/archive#owner-execution-packet-factory","apiHref":"/api/d05-auth-owner-execution-packets","schemaHref":"/schemas/auth-s08-r02-c02-owner-execution-packets.v1.schema.json","packetsReady":4,"packetsTotal":4,"realDispatches":0,"acceptsUploads":false,"containsCredentials":false,"dispatchesExternally":false,"advancesFormalProgress":false},"ownerInputIntegrity":{"id":"D05-C02-FOUR-OWNER-PUBLIC-INPUT-INTEGRITY","label":"四席 Owner 公开输入完整性工作台","href":"/development-plan/archive#owner-input-integrity-workbench","apiHref":"/api/d05-auth-owner-execution-bundle-integrity","schemaHref":"/schemas/auth-s08-r02-c02-owner-execution-bundle-integrity.v1.schema.json","bundlesPinned":4,"bundlesTotal":4,"artifactsPerBundle":5,"uniqueArtifacts":8,"runtimeBundlesVerified":0,"acceptsUploads":false,"writesExternalEvidence":false,"advancesFormalProgress":false},"receiverReadinessIntegrity":{"id":"D05-C02-RECEIVER-READINESS-INTEGRITY","label":"接收侧公开工具链完整性工作台","href":"/development-plan/archive#receiver-readiness-integrity-workbench","apiHref":"/api/d05-auth-receiver-readiness-integrity","schemaHref":"/schemas/auth-s08-r02-c02-receiver-readiness-integrity.v1.schema.json","bundlesPinned":1,"bundlesTotal":1,"publicAssetsPinned":7,"publicAssetsTotal":7,"ownerLanesPrepared":4,"expectedInboundFiles":12,"runtimeBundlesVerified":0,"realArrivals":0,"acceptsUploads":false,"readsOwnerMaterial":false,"writesExternalEvidence":false,"advancesFormalProgress":false},"externalCeremonyCoordination":{"id":"D05-C02-EXTERNAL-CEREMONY-COORDINATION","label":"四席外部执行仪式协调工作台","href":"/development-plan/archive#external-ceremony-coordination-workbench","apiHref":"/api/d05-auth-external-ceremony-coordination","schemaHref":"/schemas/auth-s08-r02-c02-external-ceremony-coordination.v1.schema.json","plansReady":4,"plansTotal":4,"roleSlots":24,"roleBindings":0,"controlSlots":8,"controlsBound":0,"gateRows":8,"gateCells":32,"gateCellsReady":8,"gateCellsHeld":20,"gateCellsDenied":4,"firstUnmetGate":"G03_PRODUCTION_BASELINE_REQUALIFICATION","checkpoints":28,"checkpointsCompleted":0,"acceptsUploads":false,"acceptsRealIdentity":false,"writesExternalEvidence":false,"advancesFormalProgress":false},"runbook":[{"id":"REBASE_G03","ordinal":1,"label":"四席独立读回任务包与受控分发","actor":"Auth Owner + Security + SRE/DBA + QA 独立见证","href":"/development-plan/archive#d05-c02-four-lane-readback-dispatch","input":"F05-02 当前版本基线 + 四席职责/主体域/控制域隔离 + 八项只读任务","output":"四份可下载任务包 + 分发 Manifest + 浏览器/Node.js 整组验真；不自动分发、不代签","realState":"PACKETS_4_OF_4_READY_EXTERNAL_RUNS_0_OF_4"},{"id":"P02","ordinal":2,"label":"单席本地预检","actor":"当前 Owner","href":"/d05-auth-owner-local-preflight","input":"冻结 Dossier + 单席公开贡献","output":"净化预检回执候选","realState":"WAITING_OWNER_EXECUTION"},{"id":"P04","ordinal":3,"label":"移交清单与保全","actor":"当前 Owner","href":"/d05-auth-contribution-custody","input":"通过 P02 的公开贡献","output":"移交清单 + 空白确认候选 + 原始公开包","realState":"WAITING_OWNER_EXECUTION"},{"id":"TRANSFER","ordinal":4,"label":"批准带外交接","actor":"发送方 + 接收方","href":"/development-plan/archive#external-ceremony-coordination-workbench","input":"P04 三件套","output":"真实到达事件；Portal 不接收文件","realState":"WAITING_EXTERNAL_TRANSFER"},{"id":"P05","ordinal":5,"label":"接收登记与独立重算","actor":"真实接收方 + 独立见证","href":"/d05-auth-receiver-intake-rehash","input":"P04 三件套 + 到达时间","output":"摘要匹配候选 + 原始公开包","realState":"WAITING_REAL_ARRIVAL"},{"id":"P03","ordinal":6,"label":"四席隔离集合","actor":"隔离操作员","href":"/d05-auth-contribution-quarantine","input":"四份 P05 匹配候选 + 四份原始公开包","output":"独立四槽隔离回执","realState":"WAITING_FOUR_MATCHED_SLOTS"},{"id":"BIND","ordinal":7,"label":"Authority 显式绑定","actor":"独立绑定权威","href":"/d05-auth-authority-handoff-kits","input":"四槽隔离回执 + 冻结 Dossier","output":"四席绑定效果","realState":"HELD"},{"id":"C03","ordinal":8,"label":"Ballot 收件与裁定","actor":"Ballot 验收权威","href":"/d05-auth-mainline-convergence-admission","input":"四席绑定证据","output":"C02 重新裁定；不是自动推进","realState":"DENIED"}]},"externalTruth":{"ownersRequired":4,"dispatched":0,"arrived":0,"rehashed":0,"digestMatched":0,"quarantined":0,"authorityBound":0,"ballotsReceived":0,"ballotsValid":0,"ballotsAccepted":0,"c02Complete":false,"c03Admitted":false},"ownerLanes":[{"id":"AUTH","owner":"Auth Owner","responsibility":"Auth 主线与签名材料","currentAction":"复核源码测试、主干与生产 Release 三头是否同一版本","requiredEvidence":"源码测试回执 + Release 绑定 + Auth Owner 独立读回引用","state":"WAITING_F05_06_AUTHORITY_HANDOFF"},{"id":"SECURITY","owner":"Security Owner","responsibility":"算法、密钥用途与拒绝边界","currentAction":"复核 Access/ID Token 分轨、JWKS 用途与公开端点","requiredEvidence":"算法用途裁定 + JWKS/端点读回 + Security 独立读回引用","state":"WAITING_F05_06_AUTHORITY_HANDOFF"},{"id":"SRE_DBA","owner":"SRE / DBA Owner","responsibility":"运行、存储与恢复边界","currentAction":"复核 systemd、Auth:8095、依赖、配置状态与隔离演练","requiredEvidence":"运行态读回 + 迁移/回滚演练 + SRE/DBA 独立读回引用","state":"WAITING_F05_06_AUTHORITY_HANDOFF"},{"id":"QA_WITNESS","owner":"QA Witness","responsibility":"独立见证与负向验收","currentAction":"从公开面独立重采六层证据并验证跨服务身份不混淆","requiredEvidence":"负向用例 + 四席引用一致性 + QA 独立重算的新摘要","state":"WAITING_F05_06_AUTHORITY_HANDOFF"}],"executionStages":[{"id":"REBASE_G03","label":"生产基线重新取证","toolState":"READY","realCount":"0/4","authority":"Auth + Security + SRE/DBA + QA"},{"id":"P02_P04","label":"Owner 生成与保全","toolState":"HELD","realCount":"0/4","authority":"四位外部 Owner"},{"id":"TRANSFER","label":"批准带外交接","toolState":"HELD","realCount":"0/4","authority":"发送方 + 接收方"},{"id":"P05","label":"接收登记与独立重算","toolState":"HELD","realCount":"0/4","authority":"真实接收方"},{"id":"P03","label":"四席隔离组装","toolState":"HELD","realCount":"0/4","authority":"隔离操作员"},{"id":"BIND","label":"Authority 显式绑定","toolState":"HELD","realCount":"0/4","authority":"独立绑定权威"},{"id":"C03","label":"Ballot 收件与裁定","toolState":"DENIED","realCount":"0/4","authority":"Ballot 验收权威"}],"unblockConditions":["四席针对当前 Auth 主干与 EC2 Release 重建 R01 证据包，完成隔离演练、独立读回并生成新摘要","组织负责人在 Portal 外为四席分别绑定六个真实角色，并完成职责分离检查","每席批准一个带外通道和一个不超过二十四小时的执行窗口","四位 Owner 各自完成真实公开贡献包的本地预检与移交清单生成","接收方逐席登记到达，并从收到的原始公开包独立重算 SHA-256","四席摘要全部匹配后进入 P03 隔离集合，形成独立隔离回执","Authority Binding 与 Ballot 验收分别由独立权威完成，不能由 Portal 或 Fixture 代写"],"nextRequiredEvent":"F05-06 已提供 Authority 最终接管与 D05 验收包八步交接面；下一真实事件仍是四席先完成 F05-04/F05-05 外部执行并形成候选，再由 Portal 外独立 Authority 接管、四席重算、绑定、铸造正式摘要和收取四票。完成前候选 0/1、Authority 0/4、Ballot 0/4、验收包 0/1、G03 STALE。","truthRule":"正式计划当前仍是第 5/36 刀；F05 内部六个 UI/合同子切片已完成 6/6，这只代表开发交接面齐备，不等于第 5 刀被正式验收。没有真实候选、四席独立 Authority、正式摘要、四份 Ballot 与 D05 正式验收回执，就不能把正式已验收从 4/36 改为 5/36。"},"audit":{"verifiedAt":"2026-07-29T04:47:01Z","method":"通过 Gitea 1.25.4 认证遍历 reits 组织全部 26 仓与 jx-im 全部 26 仓，刷新所有可用远端，快进干净的 matrix-quant-im-ios 与 miniapp-open-platform 主干，保留已有脏工作树和功能分支；Developer Portal 历史已归一，未执行强制覆盖或生产变更。","repositories":{"organization":26,"canonicalOrganization":26,"sharedSdk":1,"localPortal":0,"workingTrees":27},"sourceTruth":{"exactToRemoteDefault":23,"staleFeatureBranches":2,"divergentWorktrees":3,"localOnlyPortal":0,"sourceSplits":0,"releaseObserved":1,"imCoreRemoteDefault":"edecf6ace591","imCoreProduction":"d5306718153d","matrixXFormalMain":"33edf0d5f9da"},"runtime":{"systemdServices":33,"runningContainers":17,"rootVolumeUsed":"192 GiB / 256 GiB · 75%","productionMissing":["reits-media","trading-data-source","quant-platform","matrixantai-sim","organization/policy service","incident/audit service"]},"ui":{"currentScreens":85,"targetScreens":133,"acceptedScreens":0,"evidenceTasks":1105,"readyEvidenceTasks":85}},"truthRules":["The previous 36/36 program expanded architecture and execution control surfaces; it did not implement product capabilities.","D01–D04 were accepted only after manifests, contracts, UI adapters, real stack checks, Task Packet/consumer evidence and authenticated Gitea branch rules passed; runner execution remains separately fail-closed and currently queues 17 repositories.","One knife is a vertically testable outcome, not one repository, one page, one day or one AI prompt.","Candidate branches, local builds, production deployments and accepted product behavior remain separate states."],"gapDomains":[{"id":"identity","label":"身份与个人安全","targetScreens":8,"current":"Auth Session Registry 与 K21 Phase A 已上线","missing":"浏览器授权、MFA、恢复、设备联邦、Consent 与个人安全聚合未闭环","knives":["D06","D07","D08","D11"]},{"id":"resource","label":"资源与可观测","targetScreens":8,"current":"Alloy/Loki/Grafana 在线；reits-media 有代码","missing":"Media 未部署；扫描、状态聚合、Incident、统一 Audit、隔离恢复未实现","knives":["D12","D13","D14","D15","D16"]},{"id":"portal","label":"公共资讯门户","targetScreens":10,"current":"公共站与 76 个 operations 页面同仓","missing":"内容契约、边界拆分、主链测试、真实多环境 UI 证据不足","knives":["D18","D34"]},{"id":"community","label":"社区","targetScreens":8,"current":"NodeBB + 自定义主题在线","missing":"6k+ 行主题集中 UI/API/策略/审计；创建和风控状态机缺独立合同","knives":["D19","D34"]},{"id":"booking","label":"预约与商家","targetScreens":12,"current":"公共发现、预约和商家能力同一 Node 服务在线","missing":"容量并发、幂等、成员角色、配置 revision、发布/回滚和控制面拆分不足","knives":["D20","D21"]},{"id":"open-commerce","label":"支付与数据治理","targetScreens":4,"current":"Open Platform 无 PaymentOrder/Finance 模型","missing":"Provider、双重账本、对账、结算、DSR 与高风险审批未实现","knives":["D22"]},{"id":"open-core","label":"开放平台核心","targetScreens":8,"current":"四个 Portal 页面与安全发布竖切在线","missing":"类型枚举冲突、详情/配置/版本审核/能力/请求产品不完整","knives":["D23","D24"]},{"id":"open-org","label":"组织与服务账号","targetScreens":8,"current":"单 owner 与 machine app grants","missing":"Organization、Membership、Role、ResourceGrant、Entitlement 与治理台未实现","knives":["D09","D10","D25"]},{"id":"open-bot","label":"机器人与自动化","targetScreens":7,"current":"只有 generic app kind 字段","missing":"Bot identity、installation、command、credential、delivery/ACK/retry 均未实现","knives":["D17","D26"]},{"id":"open-public","label":"公共开发者体验","targetScreens":6,"current":"XTalk 已导入并完成差异盘点","missing":"REITS 文档、SDK 合同、能力声明、公告订阅和兼容矩阵尚未产品化","knives":["D27"]},{"id":"data","label":"内容数据控制面","targetScreens":15,"current":"15 模块与生产采集已存在","missing":"8k+ 行单页、SecretRef、双数据库 Gate、跨机恢复和 action scope 待落地","knives":["D28"]},{"id":"trading","label":"行情数据控制面","targetScreens":10,"current":"正式 main 可构建，本地候选存在","missing":"生产部署为 0；SecretRef、持久 RunAttempt、切片/迁移/恢复合同未闭环","knives":["D29"]},{"id":"matrix","label":"IM 与 Matrix X","targetScreens":14,"current":"im-core production=remote main；iOS formal main 已核验","missing":"本地工作分支陈旧；replay/ACK、SDK pin、Wallet 强认证、MiniApp host 与四环境证据待闭合","knives":["D30","D31"]},{"id":"quant","label":"量化研究与模拟","targetScreens":15,"current":"backtest/sim/iOS/backend 有分散 main 或候选代码","missing":"远程 job、策略/数据目录、run/signal store、生产服务、签名包和真实客户端消费未闭环","knives":["D32","D33"]}],"knives":[{"id":"D01","wave":"W0","title":"统一仓库清单与生命周期","outcome":"为 21 个组织仓、1 个共享 SDK 与 Developer Portal 建立 repository.manifest，区分 product、prototype、reference、shared package 和 portal。","repositories":["all repositories","developer-portal"],"dependencies":[],"targetScreens":0,"owner":"Developer Experience","acceptance":["Gitea 组织清单与本地/门户清单自动做差","manifest 含 owner、default branch、runtime、surfaces、contracts、tests、SLO 和 lifecycle","apps-* 与 xtalk-open-source 的 reference/retirement 决策可追踪"],"status":"ACCEPTED"},{"id":"D02","wave":"W0","title":"跨仓契约注册表与代码生成","outcome":"收敛 Auth、App、Release、Event、Media、Order、MarketSlice 与 Run 的版本化 schema、枚举和兼容策略。","repositories":["reits-auth","miniapp-open-platform","im-core","public-booking-platform","trading-data-source","quant-platform"],"dependencies":["D01"],"targetScreens":0,"owner":"Architecture + API Governance","acceptance":["消除普通/企业 0/1 反转并改用命名枚举","producer/consumer fixture 与破坏性 diff Gate 进入 CI","契约 owner、版本、弃用窗和错误 envelope 可查询"],"status":"ACCEPTED"},{"id":"D03","wave":"W0","title":"共享 UI Foundation 与宿主映射","outcome":"将 Web、Admin、SwiftUI 与 MiniApp 的语义 token、组件状态和六种 shell 变成可消费包。","repositories":["im-ui","developer-portal","matrix-x-chat-ios","matrix-quant-im-ios","public-booking-platform","miniapp-open-platform"],"dependencies":["D01"],"targetScreens":0,"owner":"Design Systems","acceptance":["token source 有唯一 owner、版本和 drift check","九态、focus、Dynamic Type、VoiceOver 与 reduced motion 有组件测试","代表性 Web/Admin/iOS/MiniApp 页面通过视觉基线"],"status":"ACCEPTED"},{"id":"D04","wave":"W0","title":"全仓最小 CI 与多 AI 任务协议","outcome":"把 lint/build/unit/contract/security/UI Gate 和 task packet 复制到缺少 workflow 的核心仓。","repositories":["all core repositories"],"dependencies":["D01","D02","D03"],"targetScreens":0,"owner":"Quality Architecture","acceptance":["每个核心仓至少有可重复最小 workflow","跨仓任务含 scope、owner、contract、rollback、evidence 与 idempotency key","受保护分支只接受有 consumer evidence 的变更"],"status":"ACCEPTED"},{"id":"D05","wave":"W0","title":"发布身份、配置、Secret 与制品标准","outcome":"先补隔离的组织级 CI 执行面，再统一 exact source、artifact digest、SBOM、config/migration digest、SecretRef、部署和回滚 receipt。","repositories":["all deployed repositories","developer-portal","platform operations"],"dependencies":["D01","D04"],"targetScreens":0,"owner":"Platform Engineering","acceptance":["隔离的 organization/instance Linux runner 能领取 18 仓 Gate，Mac 原生 runner 恢复且队列/容量可见","健康/meta 公开安全 build identity 且不泄露 secret","容器与 systemd 不再以可读明文环境作为长期凭据真值","每次发布能从 immutable artifact 与 config unit 回滚"],"status":"ACTIVE"},{"id":"D06","wave":"W1","title":"浏览器认证 SDK / BFF","outcome":"解决 Open Portal 登录 421 契约和 localStorage bearer，统一登录、刷新、登出、过期与 step-up 入口。","repositories":["reits-auth","miniapp-open-platform","public-booking-platform","opensdk"],"dependencies":["D02","D05"],"targetScreens":3,"owner":"Identity Platform","acceptance":["浏览器不持有长期 dual token","redirect/popup/BFF 的 issuer、client、origin、PKCE 和 CSRF fail closed","登录、过期、撤销和回跳旅程有自动化负向测试"],"status":"PLANNED"},{"id":"D07","wave":"W1","title":"MFA、恢复与签名密钥 Phase B","outcome":"完成 TOTP/可信设备/恢复码、真实 OTP synthetic、operator-approved rotation 与 ES256/JWKS 迁移路径。","repositories":["reits-auth","im-core"],"dependencies":["D05","D06"],"targetScreens":2,"owner":"Identity Security","acceptance":["MFA enrollment/challenge/recovery/lockout 可审计","active/previous key 原子轮换与回滚演练通过","OTP abuse、delivery、expiry 和 no-secret observability 有生产证据"],"status":"PLANNED"},{"id":"D08","wave":"W1","title":"设备会话与撤销全消费者传播","outcome":"把 durable session authority、设备绑定、replay protection 与 allow→revoke→deny 扩展到全部资源服务器。","repositories":["reits-auth","im-core","miniapp-open-platform","public-booking-platform","opensdk","reits-media"],"dependencies":["D06","D07"],"targetScreens":1,"owner":"Identity + Resource Owners","acceptance":["每个 consumer 校验 client/scope/tenant/object/active session","撤销在声明时限内传播且无正向授权缓存","设备/session inventory 与远程退出拥有真实 receipt"],"status":"PLANNED"},{"id":"D09","wave":"W1","title":"Organization、Membership 与 RBAC","outcome":"建立自然人、组织、成员、系统角色、自定义权限和资源范围的服务端权威模型。","repositories":["miniapp-open-platform","reits-auth","im-core"],"dependencies":["D02","D08"],"targetScreens":4,"owner":"Organization Platform","acceptance":["App ownership 从个人 owner 演进为 tenant + creator + audit actor","邀请、加入、暂停、移除和角色变更有状态机","所有页面/按钮权限均由服务端 policy 再校验"],"status":"PLANNED"},{"id":"D10","wave":"W1","title":"Entitlement、Capability、Consent 与 Policy","outcome":"统一产品订阅、应用能力、用户同意、ResourceGrant 和策略版本，支持企业应用与 MiniApp 宿主。","repositories":["miniapp-open-platform","im-core","matrix-x-chat-ios","reits-auth"],"dependencies":["D09"],"targetScreens":2,"owner":"Policy Platform","acceptance":["企业应用创建/发布/运行逐次验证 active entitlement","capability grant 与 user consent 分离并支持撤销","授权决定记录 policy revision、reason 与 trace"],"status":"PLANNED"},{"id":"D11","wave":"W1","title":"安全活动、审批与不可变审计","outcome":"建立 append-only AuditEvent、四眼审批、高风险 step-up 与个人安全聚合。","repositories":["reits-auth","miniapp-open-platform","public-booking-platform","data-sources","im-core"],"dependencies":["D08","D09","D10"],"targetScreens":2,"owner":"Security Governance","acceptance":["审计能回答 actor/tenant/action/target/outcome/policy/trace","高风险命令绑定 step-up、审批、safe diff 与 receipt","导出、retention、redaction 和完整性链有策略与测试"],"status":"PLANNED"},{"id":"D12","wave":"W2","title":"Media 生产部署与隔离直传","outcome":"将 reits-media 从代码仓推进到生产，提供 subject/resource auth、UploadIntent、短时 ticket、checksum 与对象版本。","repositories":["reits-media","miniapp-open-platform","im-media-send-kit","im-core"],"dependencies":["D05","D08"],"targetScreens":1,"owner":"Media Platform","acceptance":["media service/vhost/listener/health/release identity 全部可验证","上传先进入隔离区且 owner/purpose/quota/idempotency 受控","Open Platform 与 iOS 样本保持原始字节和摘要"],"status":"PLANNED"},{"id":"D13","wave":"W2","title":"扫描、隔离、资源库与保留","outcome":"补齐 malware/policy scanner、并发 claim、人工复核、资产目录、引用图和删除 preflight。","repositories":["reits-media","miniapp-open-platform","im-media-send-kit"],"dependencies":["D12","D11"],"targetScreens":2,"owner":"Media Security","acceptance":["ZIP bomb、MIME 欺骗、恶意样本和超限 fixture fail closed","扫描/review/promote/reject/retry 有版本化状态机","被引用资产不能绕过 retention decision 删除"],"status":"PLANNED"},{"id":"D14","wave":"W2","title":"关联可观测、状态与事件指挥","outcome":"统一 request/run/entity/release correlation，补 Status aggregator、Incident timeline、SLO 和安全日志查询。","repositories":["all deployed repositories","developer-portal"],"dependencies":["D05","D11"],"targetScreens":4,"owner":"Site Reliability Engineering","acceptance":["日志、指标、trace 和 audit 使用同一 correlation contract","状态页区分 probe/readiness/business journey 与影响范围","Incident 的事实、假设、决定、回滚和对外更新有 receipt"],"status":"PLANNED"},{"id":"D15","wave":"W2","title":"完整备份与隔离恢复","outcome":"覆盖 Gitea PostgreSQL、BBS、IM、Auth、OpenAPI、内容数据与日志，建立异机副本和业务旅程恢复演练。","repositories":["platform operations","all stateful services"],"dependencies":["D05","D14"],"targetScreens":1,"owner":"Recovery Engineering","acceptance":["每个 data owner 有 RPO/RTO、manifest、checksum 与 encryption","隔离环境恢复后执行关键业务 journey，不以 gzip success 代替恢复","恢复临时资源销毁与凭据轮换有回执"],"status":"PLANNED"},{"id":"D16","wave":"W2","title":"拆解单 EC2 共同故障域","outcome":"分离 Edge、业务、状态、日志、代码托管和备份故障域，定义容量、扩缩、故障转移与演练。","repositories":["platform operations","im-core","data-sources","reits-bbs","reits-info-portal"],"dependencies":["D14","D15"],"targetScreens":0,"owner":"Platform Architecture","acceptance":["单实例/根卷/Docker daemon 故障不再同时清空全部能力","数据库和对象存储有受支持的 HA/恢复拓扑","容量阈值、告警、故障转移和成本边界被验证"],"status":"PLANNED"},{"id":"D17","wave":"W2","title":"通知、Webhook 与可靠事件投递","outcome":"建立 EventEnvelope、订阅、签名、去重、ACK、重试、DLQ、redelivery 与用户通知偏好。","repositories":["im-core","miniapp-open-platform","reits-auth","public-booking-platform"],"dependencies":["D02","D10","D14"],"targetScreens":0,"owner":"Event Platform","acceptance":["事件版本、tenant、actor、resource、idempotency 与 trace 明确","Webhook secret 可轮换且 payload 可重放验证","站内/Push/Email/Webhook partial failure 独立可见"],"status":"PLANNED"},{"id":"D18","wave":"W3","title":"可信内容链与 Portal 边界重构","outcome":"固定 source→document→community→publication→AI citation 合同，并拆分公共站与 operations 的所有权/权限/发布。","repositories":["data-sources","reits-info-portal","reits-bbs","reits-knowledge"],"dependencies":["D02","D04","D14"],"targetScreens":10,"owner":"Content Platform","acceptance":["source/as-of/revision/hash/correction 在全链一致","公共体验不继承内部 operations 权限和故障半径","10 张 Portal 目标页实现九态、移动/桌面、SEO 与来源降级"],"status":"PLANNED"},{"id":"D19","wave":"W3","title":"BBS 领域拆分与可信创建闭环","outcome":"拆分 6k+ 行主题中的 view/API/policy/audit，闭合 feed/topic/composer/moderation 的状态机。","repositories":["reits-bbs","data-sources","reits-info-portal"],"dependencies":["D11","D17","D18"],"targetScreens":8,"owner":"Community Platform","acceptance":["互动/发布/机构回答状态机有契约与幂等测试","来源引用、媒体、风险预检和人工处置形成 receipt","8 张目标页覆盖未登录、争议、锁定、部分失败与 a11y"],"status":"PLANNED"},{"id":"D20","wave":"W3","title":"预约客户交易与容量一致性","outcome":"从发现到 booking receipt 完成服务端 availability quote、幂等、容量竞争、隐私和恢复。","repositories":["public-booking-platform","reits-auth","opensdk"],"dependencies":["D06","D08","D17"],"targetScreens":5,"owner":"Booking Platform","acceptance":["并发抢占、过期 quote、重复提交和通知失败有确定性测试","订单状态、取消/改期规则和隐私边界由服务端权威返回","5 张客户目标页在移动/桌面完成端到端 journey"],"status":"PLANNED"},{"id":"D21","wave":"W3","title":"预约商家工作区与配置发布","outcome":"拆分巨型 Node 控制面，补项目成员 RBAC、Schedule/Service/Storefront revision、If-Match、预览和回滚。","repositories":["public-booking-platform","reits-auth"],"dependencies":["D09","D11","D20"],"targetScreens":7,"owner":"Booking Merchant","acceptance":["商家身份、项目选择和对象授权 fail closed","多人配置冲突、受影响预约集合和原子 publish pointer 可测试","7 张商家目标页含危险动作、部分失败与恢复路径"],"status":"PLANNED"},{"id":"D22","wave":"W3","title":"Payment Ledger、对账与结算","outcome":"建立支付 Provider adapter、幂等订单、退款/争议、双重账本、对账、结算和强认证审批。","repositories":["public-booking-platform","miniapp-open-platform","im-core","reits-auth"],"dependencies":["D10","D11","D20","D21"],"targetScreens":4,"owner":"Payments + Finance","acceptance":["金额、币种、provider reference 与内部 ledger 可追溯且不复制权威","退款/争议/结算使用 step-up、审批、幂等和不可变审计","4 张 Open commerce 页只显示经授权真实数据和明确空态"],"status":"PLANNED"},{"id":"D23","wave":"W4","title":"Canonical App 模型与核心控制台","outcome":"实现命名 AppKind/AppType/AppStatus、详情、配置、版本、能力和请求 API/页面，保留 REITS 安全边界。","repositories":["miniapp-open-platform","xtalk-open-source","reits-auth"],"dependencies":["D02","D06","D09","D10"],"targetScreens":8,"owner":"Developer Platform","acceptance":["legacy enum 只在 adapter 显式翻译","应用详情/更新/名称校验/配置/能力有 revision 和 object auth","8 张核心目标页不使用虚构调用量、权限或发布结果"],"status":"PLANNED"},{"id":"D24","wave":"W4","title":"包审核、签名、目录与回滚流水线","outcome":"把隔离上传、校验、审核、ReleaseCandidate、签名、catalog projection、host smoke 和 rollback 变成持久状态机。","repositories":["miniapp-open-platform","reits-media","matrix-x-chat-ios"],"dependencies":["D13","D17","D23"],"targetScreens":0,"owner":"MiniApp Release Engineering","acceptance":["package/review/release/catalog 各有不可变 identity 和事件历史","控制面 live 与 Gateway/iOS 投影不一致时 fail closed","发布、下线、回滚和恢复在真实宿主有证据"],"status":"PLANNED"},{"id":"D25","wave":"W4","title":"组织治理控制台与服务账号","outcome":"实现组织验证、成员、角色、服务账号、短期凭据、资源授权、审批和审计页面。","repositories":["miniapp-open-platform","reits-auth"],"dependencies":["D09","D10","D11","D23"],"targetScreens":8,"owner":"Developer Governance","acceptance":["8 张组织目标页消费服务端 permission catalog","人类 membership 与机器 service principal 分离但同源审计","credential 只显示一次、可轮换/撤销且不进入日志"],"status":"PLANNED"},{"id":"D26","wave":"W4","title":"Bot、命令、群授权与交付中心","outcome":"建立独立 Bot 聚合根、安装关系、命令/菜单、凭据、群授权、事件投递和公告审计。","repositories":["miniapp-open-platform","im-core","matrix-x-chat-ios"],"dependencies":["D10","D17","D25"],"targetScreens":7,"owner":"Automation Platform","acceptance":["Bot 不再只是 generic app kind 字段","token/webhook/command/group scope 由 tenant 与服务端权限约束","7 张目标页覆盖签名、去重、ACK、重试、DLQ 与 redelivery"],"status":"PLANNED"},{"id":"D27","wave":"W4","title":"公共开发者站、SDK 与 XTalk 兼容层","outcome":"把 XTalk 作为经过净化的参考基线，发布 REITS Quickstart、能力声明、公告、SDK 合同和版本/弃用策略。","repositories":["xtalk-open-source","opensdk","apps-ecosystem","apps-info-portal","apps-bbs","reits-knowledge","developer-portal"],"dependencies":["D01","D02","D23","D24","D26"],"targetScreens":6,"owner":"Developer Experience","acceptance":["文档中的每个 API/Bridge 示例都有契约测试","CURRENT/PILOT/TARGET/SAMPLE claim 可审计且有 owner/freshness","6 张公共目标页与 SDK compatibility matrix 可检索"],"status":"PLANNED"},{"id":"D28","wave":"W5","title":"Data Sources 模块化与治理","outcome":"将 15 个模块从巨型 App.vue 拆为 route module、ViewModel、command client 与 action scope，补 SecretRef 和恢复。","repositories":["data-sources","reits-bbs","reits-info-portal"],"dependencies":["D03","D04","D08","D15"],"targetScreens":15,"owner":"Content Data","acceptance":["SQLite/PostgreSQL 状态机与 migration 在 CI 双跑","BBS 凭据迁入 SecretRef，日志/审计写入前脱敏","15 张目标工作台有认证读、命令回执、三视口和隔离恢复证据"],"status":"PLANNED"},{"id":"D29","wave":"W5","title":"Trading 持久任务、SecretRef 与生产部署","outcome":"实现 Source/Template/RunAttempt/MarketSlice/transfer/storage migration 的持久合同并部署生产控制面。","repositories":["trading-data-source","quant-platform"],"dependencies":["D02","D05","D08","D15"],"targetScreens":10,"owner":"Market Data","acceptance":["明文 auth_value 清除，CORS/CSRF/operator scope fail closed","RunAttempt、stage、slice、lease、retry 和 recovery 可故障注入","10 张目标页与 production service/vhost/release/smoke 绑定"],"status":"PLANNED"},{"id":"D30","wave":"W5","title":"IM Core 领域边界与 Realtime v2","outcome":"为 405 条路由建立领域 owner/契约，闭合 durable replay/ACK、push outbox、文件引用和多节点故障语义。","repositories":["im-core","reits-auth","im-media-send-kit"],"dependencies":["D02","D08","D12","D14","D17"],"targetScreens":0,"owner":"Realtime Platform","acceptance":["route/event catalog 可生成且破坏变更有 consumer Gate","token 不出现在 URL，device cursor 持久 ACK 可恢复","Redis/NATS/WS/Push/Storage 故障注入与多节点证据通过"],"status":"PLANNED"},{"id":"D31","wave":"W5","title":"Matrix X 主干、插件与原生体验闭环","outcome":"以 formal main 而非陈旧本地功能分支为实现基线，统一 SDK pin、Auth/Realtime、Wallet、MiniApp 与 14 张原生页。","repositories":["matrix-x-chat-ios","im-core","im-media-send-kit","miniapp-open-platform"],"dependencies":["D03","D07","D24","D30"],"targetScreens":14,"owner":"Matrix Mobile","acceptance":["主 App 与插件实际消费版本由自动 Gate 核验","Swift 6 concurrency 风险、OTP、Wallet 强认证与 MiniApp origin/signature 修复","14 张目标页完成 iPhone/compact/iPad/AX5+VoiceOver 四环境"],"status":"PLANNED"},{"id":"D32","wave":"W5","title":"Quant 后端、行情与不可变运行合同","outcome":"将 Quant backend 从分散候选推进正式 main/production，建立 licensed data、strategy version、job、run/signal store 和 provenance。","repositories":["quant-platform","trading-data-source","matrixantai-backtest","reits-auth"],"dependencies":["D02","D08","D29"],"targetScreens":0,"owner":"Quant Platform","acceptance":["candidate 合并决策、artifact/config/migration 和生产 rollback 明确","input/template/engine/result hash 与 data_asof/entitlement 不可变","远程 job、stop/retry、resource accounting、signal validity/fan-out 有故障证据"],"status":"PLANNED"},{"id":"D33","wave":"W5","title":"Quant iOS、Backtest 与 Simulator 纵向闭环","outcome":"连接正式 Quant API、确定性引擎、reviewed slices、签名 clean-room package 和隔离宿主，保持 no-execution 边界。","repositories":["matrix-quant-im-ios","matrixantai-backtest","matrixantai-sim","quant-platform","matrix-x-chat-ios"],"dependencies":["D03","D24","D30","D32"],"targetScreens":15,"owner":"Quant Mobile + Research QA","acceptance":["Backtest golden/lookahead/determinism 与 browser-native hash 在 CI","Simulator bundle 可重复、签名、人工复核并由宿主撤销 session","15 张目标页完成真实 backend/不可用/离线/AX 环境且不暗示交易执行"],"status":"PLANNED"},{"id":"D34","wave":"W6","title":"133 TARGET 实现对账与多环境体验","outcome":"逐页把本计划落地的 TARGET 与产品代码对账，生成真实 visual、reflow、keyboard、locale、Dynamic Type 和 a11y evidence。","repositories":["all UI repositories","developer-portal"],"dependencies":["D18","D19","D20","D21","D22","D23","D25","D26","D27","D28","D29","D31","D33"],"targetScreens":133,"owner":"Design Systems + Product QA","acceptance":["每张目标页绑定 exact source、fixture、environment、artifact digest 和 reviewer","目标页只有进入产品主干且 evidence accepted 后才能转 CURRENT","九态、responsive/reflow、keyboard/a11y 与隐私断言全部通过"],"status":"PLANNED"},{"id":"D35","wave":"W6","title":"Exact Release、生产 Smoke 与回滚证明","outcome":"为全部产品 surface 绑定不可变制品、配置/迁移、部署目标、主链 smoke、观察窗口和 intentional rollback drill。","repositories":["all production repositories","platform operations"],"dependencies":["D05","D15","D16","D34"],"targetScreens":0,"owner":"Release Engineering + Operations","acceptance":["每张 CURRENT dossier 有 exact release identity","production smoke 验证业务主任务而非只查 200","rollback 后数据、会话、事件和 UI 主链恢复可复核"],"status":"PLANNED"},{"id":"D36","wave":"W6","title":"最终产品验收与 Developer 真值切换","outcome":"完成产品、设计、架构、QA 四方签署，关闭缺口账本，并把 developer.reits.tech 切换到实现后真值。","repositories":["developer-portal","all product owners"],"dependencies":["D11","D14","D34","D35"],"targetScreens":0,"owner":"Program Governance","acceptance":["每个开发刀的 scope-bound receipt accepted","85 张现有 CURRENT 与新增实现页面无阻断 Gate","旧 36/36 控制面与新 D01–D36 实施状态清楚分轨，programComplete=true"],"status":"PLANNED"}]}