{"schemaVersion":"developer.reits.tech/implementation-program/v1","totalKnives":36,"acceptedKnives":4,"activeKnives":1,"readyKnives":0,"plannedKnives":31,"waves":[{"id":"W0","label":"交付底座","range":"D01–D05","knives":5,"purpose":"先建立机器清单、契约、设计系统、CI 与发布证据，降低所有后续刀的并行冲突。","exit":"23 个工作树可被机器发现，跨仓契约和最小 Gate 不再靠口头约定。"},{"id":"W1","label":"身份与治理","range":"D06–D11","knives":6,"purpose":"完成浏览器认证、MFA/恢复、会话传播、组织、权限、同意与审计。","exit":"高风险命令具备主体、租户、资源、策略、step-up 与审计证据。"},{"id":"W2","label":"平台可靠性","range":"D12–D17","knives":6,"purpose":"补齐媒体、扫描、可观测、恢复、故障域与事件通知等公共服务。","exit":"平台服务有生产部署、异机证据和可恢复证明，不再只存在于蓝图。"},{"id":"W3","label":"内容、社区与预约","range":"D18–D22","knives":5,"purpose":"打通可信内容、社区发布、预约交易、商家履约与支付账本。","exit":"公共体验和运营控制面拥有独立权限、契约、部署和端到端回执。"},{"id":"W4","label":"开放平台","range":"D23–D27","knives":5,"purpose":"从四页发布竖切扩展为应用、版本、组织、机器人和公共开发者产品。","exit":"上游 XTalk 只作为对照，REITS 安全发布链和 canonical enum 不退化。"},{"id":"W5","label":"数据、实时与量化","range":"D28–D33","knives":6,"purpose":"拆分数据控制面，部署行情与量化服务，并闭合 IM/iOS/模拟器消费者证据。","exit":"正式主干、生产服务、客户端消费和确定性结果绑定同一 release identity。"},{"id":"W6","label":"UI、QA 与发布收口","range":"D34–D36","knives":3,"purpose":"把实现后的目标稿转为 CURRENT，完成多环境体验、发布、回滚和最终验收。","exit":"85 张现有 CURRENT 与本计划落地的 TARGET 全部具有可复核 receipt，programComplete=true。"}],"targetScreens":133,"currentKnife":"D05","currentOrdinal":5,"currentStatus":"ACTIVE","remainingKnives":32,"programComplete":false,"criticalPath":["D01","D02","D05","D06","D08","D09","D10","D23","D24","D31","D34","D35","D36"],"parallelLanes":["Developer Experience","Identity/Governance","Platform/SRE","Content/Community","Booking/Payments","Open Platform","Data/Realtime","Quant/Mobile"],"generatedAt":"2026-07-20","boundary":"This D01–D36 implementation program is separate from the completed 36/36 control-plane expansion. Documentation is not accepted implementation evidence.","audit":{"verifiedAt":"2026-07-21T08:13:05Z","method":"Authenticated against Gitea 1.25.4, enumerated 21 organization repositories, fetched all 22 remotes, fast-forwarded 10 clean default-branch worktrees, preserved two active feature branches, audited three registered runners and organization scope, then re-inventoried the shared production EC2 systemd, OCI and storage boundaries without mutation.","repositories":{"organization":21,"sharedSdk":1,"localPortal":1,"workingTrees":23},"sourceTruth":{"exactToRemoteDefault":20,"staleFeatureBranches":2,"localOnlyPortal":1,"imCoreRemoteDefault":"2c0e09e9e9a7","imCoreProduction":"d5306718153d","matrixXFormalMain":"1f19d6d041ba"},"runtime":{"systemdServices":33,"runningContainers":17,"rootVolumeUsed":"192 GiB / 256 GiB · 75%","productionMissing":["reits-media","trading-data-source","quant-platform","matrixantai-sim","organization/policy service","incident/audit service"]},"ui":{"currentScreens":85,"targetScreens":133,"acceptedScreens":0,"evidenceTasks":1105,"readyEvidenceTasks":85}},"truthRules":["The previous 36/36 program expanded architecture and execution control surfaces; it did not implement product capabilities.","D01–D04 were accepted only after manifests, contracts, UI adapters, real stack checks, Task Packet/consumer evidence and authenticated Gitea branch rules passed; runner execution remains separately fail-closed and currently queues 17 repositories.","One knife is a vertically testable outcome, not one repository, one page, one day or one AI prompt.","Candidate branches, local builds, production deployments and accepted product behavior remain separate states."],"gapDomains":[{"id":"identity","label":"身份与个人安全","targetScreens":8,"current":"Auth Session Registry 与 K21 Phase A 已上线","missing":"浏览器授权、MFA、恢复、设备联邦、Consent 与个人安全聚合未闭环","knives":["D06","D07","D08","D11"]},{"id":"resource","label":"资源与可观测","targetScreens":8,"current":"Alloy/Loki/Grafana 在线；reits-media 有代码","missing":"Media 未部署；扫描、状态聚合、Incident、统一 Audit、隔离恢复未实现","knives":["D12","D13","D14","D15","D16"]},{"id":"portal","label":"公共资讯门户","targetScreens":10,"current":"公共站与 76 个 operations 页面同仓","missing":"内容契约、边界拆分、主链测试、真实多环境 UI 证据不足","knives":["D18","D34"]},{"id":"community","label":"社区","targetScreens":8,"current":"NodeBB + 自定义主题在线","missing":"6k+ 行主题集中 UI/API/策略/审计；创建和风控状态机缺独立合同","knives":["D19","D34"]},{"id":"booking","label":"预约与商家","targetScreens":12,"current":"公共发现、预约和商家能力同一 Node 服务在线","missing":"容量并发、幂等、成员角色、配置 revision、发布/回滚和控制面拆分不足","knives":["D20","D21"]},{"id":"open-commerce","label":"支付与数据治理","targetScreens":4,"current":"Open Platform 无 PaymentOrder/Finance 模型","missing":"Provider、双重账本、对账、结算、DSR 与高风险审批未实现","knives":["D22"]},{"id":"open-core","label":"开放平台核心","targetScreens":8,"current":"四个 Portal 页面与安全发布竖切在线","missing":"类型枚举冲突、详情/配置/版本审核/能力/请求产品不完整","knives":["D23","D24"]},{"id":"open-org","label":"组织与服务账号","targetScreens":8,"current":"单 owner 与 machine app grants","missing":"Organization、Membership、Role、ResourceGrant、Entitlement 与治理台未实现","knives":["D09","D10","D25"]},{"id":"open-bot","label":"机器人与自动化","targetScreens":7,"current":"只有 generic app kind 字段","missing":"Bot identity、installation、command、credential、delivery/ACK/retry 均未实现","knives":["D17","D26"]},{"id":"open-public","label":"公共开发者体验","targetScreens":6,"current":"XTalk 已导入并完成差异盘点","missing":"REITS 文档、SDK 合同、能力声明、公告订阅和兼容矩阵尚未产品化","knives":["D27"]},{"id":"data","label":"内容数据控制面","targetScreens":15,"current":"15 模块与生产采集已存在","missing":"8k+ 行单页、SecretRef、双数据库 Gate、跨机恢复和 action scope 待落地","knives":["D28"]},{"id":"trading","label":"行情数据控制面","targetScreens":10,"current":"正式 main 可构建，本地候选存在","missing":"生产部署为 0；SecretRef、持久 RunAttempt、切片/迁移/恢复合同未闭环","knives":["D29"]},{"id":"matrix","label":"IM 与 Matrix X","targetScreens":14,"current":"im-core production=remote main；iOS formal main 已核验","missing":"本地工作分支陈旧；replay/ACK、SDK pin、Wallet 强认证、MiniApp host 与四环境证据待闭合","knives":["D30","D31"]},{"id":"quant","label":"量化研究与模拟","targetScreens":15,"current":"backtest/sim/iOS/backend 有分散 main 或候选代码","missing":"远程 job、策略/数据目录、run/signal store、生产服务、签名包和真实客户端消费未闭环","knives":["D32","D33"]}],"knives":[{"id":"D01","wave":"W0","title":"统一仓库清单与生命周期","outcome":"为 21 个组织仓、1 个共享 SDK 与 Developer Portal 建立 repository.manifest，区分 product、prototype、reference、shared package 和 portal。","repositories":["all repositories","developer-portal"],"dependencies":[],"targetScreens":0,"owner":"Developer Experience","acceptance":["Gitea 组织清单与本地/门户清单自动做差","manifest 含 owner、default branch、runtime、surfaces、contracts、tests、SLO 和 lifecycle","apps-* 与 xtalk-open-source 的 reference/retirement 决策可追踪"],"status":"ACCEPTED"},{"id":"D02","wave":"W0","title":"跨仓契约注册表与代码生成","outcome":"收敛 Auth、App、Release、Event、Media、Order、MarketSlice 与 Run 的版本化 schema、枚举和兼容策略。","repositories":["reits-auth","miniapp-open-platform","im-core","public-booking-platform","trading-data-source","quant-platform"],"dependencies":["D01"],"targetScreens":0,"owner":"Architecture + API Governance","acceptance":["消除普通/企业 0/1 反转并改用命名枚举","producer/consumer fixture 与破坏性 diff Gate 进入 CI","契约 owner、版本、弃用窗和错误 envelope 可查询"],"status":"ACCEPTED"},{"id":"D03","wave":"W0","title":"共享 UI Foundation 与宿主映射","outcome":"将 Web、Admin、SwiftUI 与 MiniApp 的语义 token、组件状态和六种 shell 变成可消费包。","repositories":["im-ui","developer-portal","matrix-x-chat-ios","matrix-quant-im-ios","public-booking-platform","miniapp-open-platform"],"dependencies":["D01"],"targetScreens":0,"owner":"Design Systems","acceptance":["token source 有唯一 owner、版本和 drift check","九态、focus、Dynamic Type、VoiceOver 与 reduced motion 有组件测试","代表性 Web/Admin/iOS/MiniApp 页面通过视觉基线"],"status":"ACCEPTED"},{"id":"D04","wave":"W0","title":"全仓最小 CI 与多 AI 任务协议","outcome":"把 lint/build/unit/contract/security/UI Gate 和 task packet 复制到缺少 workflow 的核心仓。","repositories":["all core repositories"],"dependencies":["D01","D02","D03"],"targetScreens":0,"owner":"Quality Architecture","acceptance":["每个核心仓至少有可重复最小 workflow","跨仓任务含 scope、owner、contract、rollback、evidence 与 idempotency key","受保护分支只接受有 consumer evidence 的变更"],"status":"ACCEPTED"},{"id":"D05","wave":"W0","title":"发布身份、配置、Secret 与制品标准","outcome":"先补隔离的组织级 CI 执行面，再统一 exact source、artifact digest、SBOM、config/migration digest、SecretRef、部署和回滚 receipt。","repositories":["all deployed repositories","developer-portal","platform operations"],"dependencies":["D01","D04"],"targetScreens":0,"owner":"Platform Engineering","acceptance":["隔离的 organization/instance Linux runner 能领取 18 仓 Gate，Mac 原生 runner 恢复且队列/容量可见","健康/meta 公开安全 build identity 且不泄露 secret","容器与 systemd 不再以可读明文环境作为长期凭据真值","每次发布能从 immutable artifact 与 config unit 回滚"],"status":"ACTIVE"},{"id":"D06","wave":"W1","title":"浏览器认证 SDK / BFF","outcome":"解决 Open Portal 登录 421 契约和 localStorage bearer，统一登录、刷新、登出、过期与 step-up 入口。","repositories":["reits-auth","miniapp-open-platform","public-booking-platform","opensdk"],"dependencies":["D02","D05"],"targetScreens":3,"owner":"Identity Platform","acceptance":["浏览器不持有长期 dual token","redirect/popup/BFF 的 issuer、client、origin、PKCE 和 CSRF fail closed","登录、过期、撤销和回跳旅程有自动化负向测试"],"status":"PLANNED"},{"id":"D07","wave":"W1","title":"MFA、恢复与签名密钥 Phase B","outcome":"完成 TOTP/可信设备/恢复码、真实 OTP synthetic、operator-approved rotation 与 ES256/JWKS 迁移路径。","repositories":["reits-auth","im-core"],"dependencies":["D05","D06"],"targetScreens":2,"owner":"Identity Security","acceptance":["MFA enrollment/challenge/recovery/lockout 可审计","active/previous key 原子轮换与回滚演练通过","OTP abuse、delivery、expiry 和 no-secret observability 有生产证据"],"status":"PLANNED"},{"id":"D08","wave":"W1","title":"设备会话与撤销全消费者传播","outcome":"把 durable session authority、设备绑定、replay protection 与 allow→revoke→deny 扩展到全部资源服务器。","repositories":["reits-auth","im-core","miniapp-open-platform","public-booking-platform","opensdk","reits-media"],"dependencies":["D06","D07"],"targetScreens":1,"owner":"Identity + Resource Owners","acceptance":["每个 consumer 校验 client/scope/tenant/object/active session","撤销在声明时限内传播且无正向授权缓存","设备/session inventory 与远程退出拥有真实 receipt"],"status":"PLANNED"},{"id":"D09","wave":"W1","title":"Organization、Membership 与 RBAC","outcome":"建立自然人、组织、成员、系统角色、自定义权限和资源范围的服务端权威模型。","repositories":["miniapp-open-platform","reits-auth","im-core"],"dependencies":["D02","D08"],"targetScreens":4,"owner":"Organization Platform","acceptance":["App ownership 从个人 owner 演进为 tenant + creator + audit actor","邀请、加入、暂停、移除和角色变更有状态机","所有页面/按钮权限均由服务端 policy 再校验"],"status":"PLANNED"},{"id":"D10","wave":"W1","title":"Entitlement、Capability、Consent 与 Policy","outcome":"统一产品订阅、应用能力、用户同意、ResourceGrant 和策略版本，支持企业应用与 MiniApp 宿主。","repositories":["miniapp-open-platform","im-core","matrix-x-chat-ios","reits-auth"],"dependencies":["D09"],"targetScreens":2,"owner":"Policy Platform","acceptance":["企业应用创建/发布/运行逐次验证 active entitlement","capability grant 与 user consent 分离并支持撤销","授权决定记录 policy revision、reason 与 trace"],"status":"PLANNED"},{"id":"D11","wave":"W1","title":"安全活动、审批与不可变审计","outcome":"建立 append-only AuditEvent、四眼审批、高风险 step-up 与个人安全聚合。","repositories":["reits-auth","miniapp-open-platform","public-booking-platform","data-sources","im-core"],"dependencies":["D08","D09","D10"],"targetScreens":2,"owner":"Security Governance","acceptance":["审计能回答 actor/tenant/action/target/outcome/policy/trace","高风险命令绑定 step-up、审批、safe diff 与 receipt","导出、retention、redaction 和完整性链有策略与测试"],"status":"PLANNED"},{"id":"D12","wave":"W2","title":"Media 生产部署与隔离直传","outcome":"将 reits-media 从代码仓推进到生产，提供 subject/resource auth、UploadIntent、短时 ticket、checksum 与对象版本。","repositories":["reits-media","miniapp-open-platform","im-media-send-kit","im-core"],"dependencies":["D05","D08"],"targetScreens":1,"owner":"Media Platform","acceptance":["media service/vhost/listener/health/release identity 全部可验证","上传先进入隔离区且 owner/purpose/quota/idempotency 受控","Open Platform 与 iOS 样本保持原始字节和摘要"],"status":"PLANNED"},{"id":"D13","wave":"W2","title":"扫描、隔离、资源库与保留","outcome":"补齐 malware/policy scanner、并发 claim、人工复核、资产目录、引用图和删除 preflight。","repositories":["reits-media","miniapp-open-platform","im-media-send-kit"],"dependencies":["D12","D11"],"targetScreens":2,"owner":"Media Security","acceptance":["ZIP bomb、MIME 欺骗、恶意样本和超限 fixture fail closed","扫描/review/promote/reject/retry 有版本化状态机","被引用资产不能绕过 retention decision 删除"],"status":"PLANNED"},{"id":"D14","wave":"W2","title":"关联可观测、状态与事件指挥","outcome":"统一 request/run/entity/release correlation，补 Status aggregator、Incident timeline、SLO 和安全日志查询。","repositories":["all deployed repositories","developer-portal"],"dependencies":["D05","D11"],"targetScreens":4,"owner":"Site Reliability Engineering","acceptance":["日志、指标、trace 和 audit 使用同一 correlation contract","状态页区分 probe/readiness/business journey 与影响范围","Incident 的事实、假设、决定、回滚和对外更新有 receipt"],"status":"PLANNED"},{"id":"D15","wave":"W2","title":"完整备份与隔离恢复","outcome":"覆盖 Gitea PostgreSQL、BBS、IM、Auth、OpenAPI、内容数据与日志，建立异机副本和业务旅程恢复演练。","repositories":["platform operations","all stateful services"],"dependencies":["D05","D14"],"targetScreens":1,"owner":"Recovery Engineering","acceptance":["每个 data owner 有 RPO/RTO、manifest、checksum 与 encryption","隔离环境恢复后执行关键业务 journey，不以 gzip success 代替恢复","恢复临时资源销毁与凭据轮换有回执"],"status":"PLANNED"},{"id":"D16","wave":"W2","title":"拆解单 EC2 共同故障域","outcome":"分离 Edge、业务、状态、日志、代码托管和备份故障域，定义容量、扩缩、故障转移与演练。","repositories":["platform operations","im-core","data-sources","reits-bbs","reits-info-portal"],"dependencies":["D14","D15"],"targetScreens":0,"owner":"Platform Architecture","acceptance":["单实例/根卷/Docker daemon 故障不再同时清空全部能力","数据库和对象存储有受支持的 HA/恢复拓扑","容量阈值、告警、故障转移和成本边界被验证"],"status":"PLANNED"},{"id":"D17","wave":"W2","title":"通知、Webhook 与可靠事件投递","outcome":"建立 EventEnvelope、订阅、签名、去重、ACK、重试、DLQ、redelivery 与用户通知偏好。","repositories":["im-core","miniapp-open-platform","reits-auth","public-booking-platform"],"dependencies":["D02","D10","D14"],"targetScreens":0,"owner":"Event Platform","acceptance":["事件版本、tenant、actor、resource、idempotency 与 trace 明确","Webhook secret 可轮换且 payload 可重放验证","站内/Push/Email/Webhook partial failure 独立可见"],"status":"PLANNED"},{"id":"D18","wave":"W3","title":"可信内容链与 Portal 边界重构","outcome":"固定 source→document→community→publication→AI citation 合同，并拆分公共站与 operations 的所有权/权限/发布。","repositories":["data-sources","reits-info-portal","reits-bbs","reits-knowledge"],"dependencies":["D02","D04","D14"],"targetScreens":10,"owner":"Content Platform","acceptance":["source/as-of/revision/hash/correction 在全链一致","公共体验不继承内部 operations 权限和故障半径","10 张 Portal 目标页实现九态、移动/桌面、SEO 与来源降级"],"status":"PLANNED"},{"id":"D19","wave":"W3","title":"BBS 领域拆分与可信创建闭环","outcome":"拆分 6k+ 行主题中的 view/API/policy/audit，闭合 feed/topic/composer/moderation 的状态机。","repositories":["reits-bbs","data-sources","reits-info-portal"],"dependencies":["D11","D17","D18"],"targetScreens":8,"owner":"Community Platform","acceptance":["互动/发布/机构回答状态机有契约与幂等测试","来源引用、媒体、风险预检和人工处置形成 receipt","8 张目标页覆盖未登录、争议、锁定、部分失败与 a11y"],"status":"PLANNED"},{"id":"D20","wave":"W3","title":"预约客户交易与容量一致性","outcome":"从发现到 booking receipt 完成服务端 availability quote、幂等、容量竞争、隐私和恢复。","repositories":["public-booking-platform","reits-auth","opensdk"],"dependencies":["D06","D08","D17"],"targetScreens":5,"owner":"Booking Platform","acceptance":["并发抢占、过期 quote、重复提交和通知失败有确定性测试","订单状态、取消/改期规则和隐私边界由服务端权威返回","5 张客户目标页在移动/桌面完成端到端 journey"],"status":"PLANNED"},{"id":"D21","wave":"W3","title":"预约商家工作区与配置发布","outcome":"拆分巨型 Node 控制面，补项目成员 RBAC、Schedule/Service/Storefront revision、If-Match、预览和回滚。","repositories":["public-booking-platform","reits-auth"],"dependencies":["D09","D11","D20"],"targetScreens":7,"owner":"Booking Merchant","acceptance":["商家身份、项目选择和对象授权 fail closed","多人配置冲突、受影响预约集合和原子 publish pointer 可测试","7 张商家目标页含危险动作、部分失败与恢复路径"],"status":"PLANNED"},{"id":"D22","wave":"W3","title":"Payment Ledger、对账与结算","outcome":"建立支付 Provider adapter、幂等订单、退款/争议、双重账本、对账、结算和强认证审批。","repositories":["public-booking-platform","miniapp-open-platform","im-core","reits-auth"],"dependencies":["D10","D11","D20","D21"],"targetScreens":4,"owner":"Payments + Finance","acceptance":["金额、币种、provider reference 与内部 ledger 可追溯且不复制权威","退款/争议/结算使用 step-up、审批、幂等和不可变审计","4 张 Open commerce 页只显示经授权真实数据和明确空态"],"status":"PLANNED"},{"id":"D23","wave":"W4","title":"Canonical App 模型与核心控制台","outcome":"实现命名 AppKind/AppType/AppStatus、详情、配置、版本、能力和请求 API/页面，保留 REITS 安全边界。","repositories":["miniapp-open-platform","xtalk-open-source","reits-auth"],"dependencies":["D02","D06","D09","D10"],"targetScreens":8,"owner":"Developer Platform","acceptance":["legacy enum 只在 adapter 显式翻译","应用详情/更新/名称校验/配置/能力有 revision 和 object auth","8 张核心目标页不使用虚构调用量、权限或发布结果"],"status":"PLANNED"},{"id":"D24","wave":"W4","title":"包审核、签名、目录与回滚流水线","outcome":"把隔离上传、校验、审核、ReleaseCandidate、签名、catalog projection、host smoke 和 rollback 变成持久状态机。","repositories":["miniapp-open-platform","reits-media","matrix-x-chat-ios"],"dependencies":["D13","D17","D23"],"targetScreens":0,"owner":"MiniApp Release Engineering","acceptance":["package/review/release/catalog 各有不可变 identity 和事件历史","控制面 live 与 Gateway/iOS 投影不一致时 fail closed","发布、下线、回滚和恢复在真实宿主有证据"],"status":"PLANNED"},{"id":"D25","wave":"W4","title":"组织治理控制台与服务账号","outcome":"实现组织验证、成员、角色、服务账号、短期凭据、资源授权、审批和审计页面。","repositories":["miniapp-open-platform","reits-auth"],"dependencies":["D09","D10","D11","D23"],"targetScreens":8,"owner":"Developer Governance","acceptance":["8 张组织目标页消费服务端 permission catalog","人类 membership 与机器 service principal 分离但同源审计","credential 只显示一次、可轮换/撤销且不进入日志"],"status":"PLANNED"},{"id":"D26","wave":"W4","title":"Bot、命令、群授权与交付中心","outcome":"建立独立 Bot 聚合根、安装关系、命令/菜单、凭据、群授权、事件投递和公告审计。","repositories":["miniapp-open-platform","im-core","matrix-x-chat-ios"],"dependencies":["D10","D17","D25"],"targetScreens":7,"owner":"Automation Platform","acceptance":["Bot 不再只是 generic app kind 字段","token/webhook/command/group scope 由 tenant 与服务端权限约束","7 张目标页覆盖签名、去重、ACK、重试、DLQ 与 redelivery"],"status":"PLANNED"},{"id":"D27","wave":"W4","title":"公共开发者站、SDK 与 XTalk 兼容层","outcome":"把 XTalk 作为经过净化的参考基线，发布 REITS Quickstart、能力声明、公告、SDK 合同和版本/弃用策略。","repositories":["xtalk-open-source","opensdk","apps-ecosystem","apps-info-portal","apps-bbs","reits-knowledge","developer-portal"],"dependencies":["D01","D02","D23","D24","D26"],"targetScreens":6,"owner":"Developer Experience","acceptance":["文档中的每个 API/Bridge 示例都有契约测试","CURRENT/PILOT/TARGET/SAMPLE claim 可审计且有 owner/freshness","6 张公共目标页与 SDK compatibility matrix 可检索"],"status":"PLANNED"},{"id":"D28","wave":"W5","title":"Data Sources 模块化与治理","outcome":"将 15 个模块从巨型 App.vue 拆为 route module、ViewModel、command client 与 action scope，补 SecretRef 和恢复。","repositories":["data-sources","reits-bbs","reits-info-portal"],"dependencies":["D03","D04","D08","D15"],"targetScreens":15,"owner":"Content Data","acceptance":["SQLite/PostgreSQL 状态机与 migration 在 CI 双跑","BBS 凭据迁入 SecretRef，日志/审计写入前脱敏","15 张目标工作台有认证读、命令回执、三视口和隔离恢复证据"],"status":"PLANNED"},{"id":"D29","wave":"W5","title":"Trading 持久任务、SecretRef 与生产部署","outcome":"实现 Source/Template/RunAttempt/MarketSlice/transfer/storage migration 的持久合同并部署生产控制面。","repositories":["trading-data-source","quant-platform"],"dependencies":["D02","D05","D08","D15"],"targetScreens":10,"owner":"Market Data","acceptance":["明文 auth_value 清除，CORS/CSRF/operator scope fail closed","RunAttempt、stage、slice、lease、retry 和 recovery 可故障注入","10 张目标页与 production service/vhost/release/smoke 绑定"],"status":"PLANNED"},{"id":"D30","wave":"W5","title":"IM Core 领域边界与 Realtime v2","outcome":"为 405 条路由建立领域 owner/契约，闭合 durable replay/ACK、push outbox、文件引用和多节点故障语义。","repositories":["im-core","reits-auth","im-media-send-kit"],"dependencies":["D02","D08","D12","D14","D17"],"targetScreens":0,"owner":"Realtime Platform","acceptance":["route/event catalog 可生成且破坏变更有 consumer Gate","token 不出现在 URL，device cursor 持久 ACK 可恢复","Redis/NATS/WS/Push/Storage 故障注入与多节点证据通过"],"status":"PLANNED"},{"id":"D31","wave":"W5","title":"Matrix X 主干、插件与原生体验闭环","outcome":"以 formal main 而非陈旧本地功能分支为实现基线，统一 SDK pin、Auth/Realtime、Wallet、MiniApp 与 14 张原生页。","repositories":["matrix-x-chat-ios","im-core","im-media-send-kit","miniapp-open-platform"],"dependencies":["D03","D07","D24","D30"],"targetScreens":14,"owner":"Matrix Mobile","acceptance":["主 App 与插件实际消费版本由自动 Gate 核验","Swift 6 concurrency 风险、OTP、Wallet 强认证与 MiniApp origin/signature 修复","14 张目标页完成 iPhone/compact/iPad/AX5+VoiceOver 四环境"],"status":"PLANNED"},{"id":"D32","wave":"W5","title":"Quant 后端、行情与不可变运行合同","outcome":"将 Quant backend 从分散候选推进正式 main/production，建立 licensed data、strategy version、job、run/signal store 和 provenance。","repositories":["quant-platform","trading-data-source","matrixantai-backtest","reits-auth"],"dependencies":["D02","D08","D29"],"targetScreens":0,"owner":"Quant Platform","acceptance":["candidate 合并决策、artifact/config/migration 和生产 rollback 明确","input/template/engine/result hash 与 data_asof/entitlement 不可变","远程 job、stop/retry、resource accounting、signal validity/fan-out 有故障证据"],"status":"PLANNED"},{"id":"D33","wave":"W5","title":"Quant iOS、Backtest 与 Simulator 纵向闭环","outcome":"连接正式 Quant API、确定性引擎、reviewed slices、签名 clean-room package 和隔离宿主，保持 no-execution 边界。","repositories":["matrix-quant-im-ios","matrixantai-backtest","matrixantai-sim","quant-platform","matrix-x-chat-ios"],"dependencies":["D03","D24","D30","D32"],"targetScreens":15,"owner":"Quant Mobile + Research QA","acceptance":["Backtest golden/lookahead/determinism 与 browser-native hash 在 CI","Simulator bundle 可重复、签名、人工复核并由宿主撤销 session","15 张目标页完成真实 backend/不可用/离线/AX 环境且不暗示交易执行"],"status":"PLANNED"},{"id":"D34","wave":"W6","title":"133 TARGET 实现对账与多环境体验","outcome":"逐页把本计划落地的 TARGET 与产品代码对账，生成真实 visual、reflow、keyboard、locale、Dynamic Type 和 a11y evidence。","repositories":["all UI repositories","developer-portal"],"dependencies":["D18","D19","D20","D21","D22","D23","D25","D26","D27","D28","D29","D31","D33"],"targetScreens":133,"owner":"Design Systems + Product QA","acceptance":["每张目标页绑定 exact source、fixture、environment、artifact digest 和 reviewer","目标页只有进入产品主干且 evidence accepted 后才能转 CURRENT","九态、responsive/reflow、keyboard/a11y 与隐私断言全部通过"],"status":"PLANNED"},{"id":"D35","wave":"W6","title":"Exact Release、生产 Smoke 与回滚证明","outcome":"为全部产品 surface 绑定不可变制品、配置/迁移、部署目标、主链 smoke、观察窗口和 intentional rollback drill。","repositories":["all production repositories","platform operations"],"dependencies":["D05","D15","D16","D34"],"targetScreens":0,"owner":"Release Engineering + Operations","acceptance":["每张 CURRENT dossier 有 exact release identity","production smoke 验证业务主任务而非只查 200","rollback 后数据、会话、事件和 UI 主链恢复可复核"],"status":"PLANNED"},{"id":"D36","wave":"W6","title":"最终产品验收与 Developer 真值切换","outcome":"完成产品、设计、架构、QA 四方签署，关闭缺口账本，并把 developer.reits.tech 切换到实现后真值。","repositories":["developer-portal","all product owners"],"dependencies":["D11","D14","D34","D35"],"targetScreens":0,"owner":"Program Governance","acceptance":["每个开发刀的 scope-bound receipt accepted","85 张现有 CURRENT 与新增实现页面无阻断 Gate","旧 36/36 控制面与新 D01–D36 实施状态清楚分轨，programComplete=true"],"status":"PLANNED"}]}