{"version":"1.3","auditedAt":"2026-07-19","summary":{"repositories":20,"releaseGates":8,"stateVariants":9,"automatedWorkflows":54},"releaseGates":[{"id":"G1","name":"Scope","checks":"task packet · owner · affected repos · rollback","blocks":"范围、owner 或回滚缺失"},{"id":"G2","name":"Static","checks":"format · lint · typecheck · secret scan","blocks":"任何静态或密钥错误"},{"id":"G3","name":"Unit","checks":"domain logic · deterministic fixtures · mutation-sensitive paths","blocks":"关键域单测或 golden 不通过"},{"id":"G4","name":"Contract","checks":"route/event/schema diff · producer/consumer fixtures","blocks":"破坏兼容且无迁移窗口"},{"id":"G5","name":"Experience","checks":"screen states · a11y · visual · responsive · locale","blocks":"关键旅程、可访问性或截图回归"},{"id":"G6","name":"Security","checks":"authz · abuse · privacy · dependency · artifact integrity","blocks":"fail-open、越权或不可验证制品"},{"id":"G7","name":"Release","checks":"build digest · migration · SBOM · config · rollback drill","blocks":"制品与部署证据不完整"},{"id":"G8","name":"Production","checks":"synthetic smoke · telemetry · error budget · owner ack","blocks":"健康、主链或错误预算失败"}],"testLayers":[{"layer":"L0","name":"Static & schema","owner":"repository","cadence":"every commit","evidence":"lint/type/schema/secret report"},{"layer":"L1","name":"Unit & golden","owner":"domain package","cadence":"every commit","evidence":"test log + deterministic fixture"},{"layer":"L2","name":"Contract","owner":"producer + consumers","cadence":"every contract diff","evidence":"versioned schema + consumer results"},{"layer":"L3","name":"Component & screen","owner":"UI surface","cadence":"every UI diff","evidence":"state fixture + a11y + screenshot"},{"layer":"L4","name":"Journey & environment","owner":"product","cadence":"merge / nightly","evidence":"browser/device trace + test data"},{"layer":"L5","name":"Production assurance","owner":"service + platform ops","cadence":"deploy / continuous","evidence":"synthetic + telemetry + incident link"}],"uiStateModel":[{"state":"loading","proof":"skeleton/progress has accessible label and no layout jump"},{"state":"empty","proof":"explains why empty and offers a valid next action"},{"state":"ready","proof":"fixture covers real density, long text and localization"},{"state":"partial","proof":"available content remains usable; missing dependency is named"},{"state":"error","proof":"retryability, error ID and safe fallback are explicit"},{"state":"offline","proof":"cached truth and stale timestamp are visible"},{"state":"forbidden","proof":"no sensitive data leaks; request/access path is clear"},{"state":"destructive","proof":"impact, subject, confirmation and audit receipt are visible"},{"state":"success","proof":"receipt, resulting revision, next action and safe undo/rollback are explicit"}],"projects":[{"repository":"reits-info-portal","unit":"partial","contract":"partial","journey":"missing","visual":"missing","accessibility":"missing","workflow":"0","production":"partial","currentEvidence":"1 test file · 88 routes · production pages","nextGate":"公共主链 smoke + operations 权限矩阵"},{"repository":"reits-bbs","unit":"partial","contract":"partial","journey":"partial","visual":"missing","accessibility":"missing","workflow":"0","production":"partial","currentEvidence":"55 test/validation assets · live NodeBB","nextGate":"topic/composer/moderation consumer contract"},{"repository":"data-sources","unit":"strong","contract":"partial","journey":"partial","visual":"missing","accessibility":"missing","workflow":"0","production":"partial","currentEvidence":"main/origin/EC2 VERSION@cb37d2c · 157 Go / 63 Go tests · 15 shells 200 / 15 protected reads 401 · 88 sources · public/storage denominator split","nextGate":"E04 authenticated 45-slot capture + command receipts + off-domain restore drill + App.vue split"},{"repository":"im-core","unit":"strong","contract":"partial","journey":"partial","visual":"target","accessibility":"target","workflow":"1","production":"partial","currentEvidence":"main/production@deea700 exact · 225 Go / 78 tests / 56 SQL / 405 HandleFunc · public health 200 · four product containers running · latest commits strengthen durable upload reference tests","nextGate":"publish safe build metadata + rerun lease/fencing integrations with Redis + iOS replay/ACK consumer evidence + multi-node failure domain"},{"repository":"matrix-x-chat-ios","unit":"strong","contract":"partial","journey":"strong","visual":"partial","accessibility":"partial","workflow":"49","production":"partial","currentEvidence":"main@257e604 · 1,711 Swift · 466 View sources · 530 tests · Xcode 26.3 simulator build PASS · 215 warnings / 54 Swift 6","nextGate":"R18 14-screen / 56-slot Native baseline + OTP/realtime + plugin route + wallet strong auth + MiniApp signature/origin"},{"repository":"im-media-send-kit","unit":"strong","contract":"partial","journey":"target","visual":"target","accessibility":"target","workflow":"0","production":"target","currentEvidence":"main/origin@d9e5cf4 · 12 Swift · 4 XCTest · local hash/chunk/video/sidecar QA only","nextGate":"standalone CI + host byte-preservation matrix + upload/business-send consumer evidence"},{"repository":"matrixantai-backtest","unit":"strong","contract":"partial","journey":"strong","visual":"target","accessibility":"target","workflow":"0","production":"missing","currentEvidence":"candidate@069ebcb (2 ahead main) · 3/3 hash · 4/4 golden · 3/3 look-ahead · 4/4 deterministic · EC2 absent","nextGate":"merge main + CI + immutable input/template/engine/result hash compatibility gate"},{"repository":"matrixantai-sim","unit":"strong","contract":"strong","journey":"partial","visual":"partial","accessibility":"partial","workflow":"0","production":"missing","currentEvidence":"candidate@18aee8d (9 ahead main) · 18 files · 9/9 tests · package validation/build with reviewed synthetic fixture · EC2 absent","nextGate":"merge main + R19 4-context visual/a11y + signed clean-room promotion"},{"repository":"reits-knowledge","unit":"target","contract":"partial","journey":"target","visual":"target","accessibility":"target","workflow":"0","production":"target","currentEvidence":"448 documents · ADR/runbook source","nextGate":"link/schema lint + owner/freshness policy"},{"repository":"apps-ecosystem","unit":"target","contract":"partial","journey":"target","visual":"target","accessibility":"target","workflow":"0","production":"target","currentEvidence":"ecosystem manifest and planning","nextGate":"machine manifest validation"},{"repository":"apps-info-portal","unit":"target","contract":"partial","journey":"target","visual":"target","accessibility":"target","workflow":"0","production":"target","currentEvidence":"app manifest / compatibility scope","nextGate":"host compatibility consumer fixture"},{"repository":"apps-bbs","unit":"target","contract":"partial","journey":"target","visual":"target","accessibility":"target","workflow":"0","production":"target","currentEvidence":"app manifest / compatibility scope","nextGate":"host capability contract"},{"repository":"public-booking-platform","unit":"partial","contract":"strong","journey":"strong","visual":"partial","accessibility":"partial","workflow":"0","production":"partial","currentEvidence":"main/EC2@cc24662 · source 111 / home 51 / discovery 220 · 218 seed demos · 654 covers · Auth meta environment drift","nextGate":"E03 27-slot capture + public booking idempotency/capacity race + Auth production correction + console split"},{"repository":"trading-data-source","unit":"partial","contract":"partial","journey":"missing","visual":"target","accessibility":"target","workflow":"0","production":"missing","currentEvidence":"formal main/origin@55b1ad8 · candidate@43742e5 +3 unmerged · Go tests/Vue build green · local seed 2/7/3/7/7 · EC2 service/vhost/listener/process/release 0/0/0/0/0","nextGate":"E05 authenticated 30-slot capture + SecretRef/CSRF/CORS hardening + persistent RunAttempt + candidate merge decision + production deploy/smoke"},{"repository":"miniapp-open-platform","unit":"strong","contract":"strong","journey":"partial","visual":"partial","accessibility":"missing","workflow":"1","production":"partial","currentEvidence":"E06 formal main@fa9283d · production@fb1a1b4 (-1) ACTIVE SPLIT · UX@bc62595 (+1) and runtime@5e51842 (+18) unmerged · main/UX/runtime tests+build green · 4 route probes · /api/apps 401 · writes 0","nextGate":"E06 12-slot capture + localStorage bearer removal + synthetic OTP + authorized inventory/ownership negatives + idempotent create + six-stage release/iOS/rollback/restore receipts"},{"repository":"reits-auth","unit":"strong","contract":"strong","journey":"strong","visual":"target","accessibility":"target","workflow":"1","production":"partial","currentEvidence":"production@157b859 · 18 top-level / 37 race results · K21 safe smoke + active/previous/no-kid matrix · K20 17/17 witness · MySQL registry","nextGate":"operator-approved Phase B + production OTP synthetic + remaining consumers + product UI evidence"},{"repository":"opensdk","unit":"partial","contract":"partial","journey":"partial","visual":"target","accessibility":"target","workflow":"0","production":"partial","currentEvidence":"host SDK and booking integration","nextGate":"multi-host compatibility matrix"},{"repository":"reits-media","unit":"strong","contract":"partial","journey":"missing","visual":"target","accessibility":"target","workflow":"1","production":"missing","currentEvidence":"main/origin@db8c55a · 13 Go · 4 tests · 1 migration · 1 workflow · 7 routes · go test/vet green · R14 3 Media pages / 27 states · EC2 0/0/0/0","nextGate":"subject/resource auth + malicious ZIP/policy scanner + concurrent claim + Open Platform media E2E + 3-screen visual/a11y + restore drill"},{"repository":"matrix-quant-im-ios","unit":"strong","contract":"strong","journey":"partial","visual":"partial","accessibility":"partial","workflow":"1","production":"missing","currentEvidence":"candidate@604987a (22 ahead main@631176e) · 202 Swift · 37 test files · 24 AppRoutes · MatrixIMCore 110 tests PASS · strict format 26 blocked · EC2 Quant absent","nextGate":"strict format + merge decision + E08 14-screen/56-slot evidence + App Store exact + production adapter journey"},{"repository":"quant-platform","unit":"strong","contract":"strong","journey":"partial","visual":"target","accessibility":"target","workflow":"0","production":"missing","currentEvidence":"candidate@8a6ed05 (20 ahead README-only main) · 61 Go · 17 tests · 3 migrations · go test/vet/build PASS · EC2 0/0/0/0","nextGate":"merge main + deployable artifact/config/migration + auth/market/strategy/signal production smoke and rollback"}]}