{"schemaVersion":"developer.reits.tech/ui-ci/v1","generatedAt":"2026-07-17","policy":"This packet proves a registered design contract only. Repository-owned evidence is required for merge, release and production readiness.","packet":{"screenId":"target-open-service-accounts","slice":"K09","title":"服务账号与工作负载身份","product":"miniapp-open-platform","productLabel":"开放平台 · 组织","route":"/console/service-accounts","platform":"Admin","pattern":"dashboard","source":"docs/ui-blueprint/11-k09-open-platform-organization.md","checkedAt":"2026-07-17","owners":{"architecture":"Architecture Office","implementation":"开放平台 · 组织","quality":"QA Architecture"},"viewports":["1440×900","1280×800","390×844"],"stateFamily":[{"key":"READY","definition":"服务主体目录就绪"},{"key":"LOADING","definition":"主体和授权加载"},{"key":"EMPTY","definition":"尚无服务账号"},{"key":"PARTIAL_ERROR","definition":"令牌活动部分失败"},{"key":"ERROR","definition":"服务账号变更失败"},{"key":"OFFLINE_STALE","definition":"离线只读目录"},{"key":"FORBIDDEN","definition":"缺少 service_account:manage"},{"key":"DESTRUCTIVE_CONFIRM","definition":"暂停/撤销确认"},{"key":"SUCCESS_RECEIPT","definition":"服务主体变更已记录"}],"contracts":["ServicePrincipal","WorkloadTrustPolicy","TokenExchange","ResourceGrant","CredentialException","ServicePrincipalActivity","UnusedAccessRecommendation","AuditReceipt"],"actions":["创建服务账号","配置 OIDC 信任","授予应用资源","查看令牌交换","调查异常来源","暂停主体","撤销全部授权","清理长期密钥"],"guards":["这是 K09 必需的新增路由，不来自旧编译站，也没有现行后端模型","AI/CI 禁止复用人类 refresh token；优先 OIDC 交换短期、限 audience 的凭证","创建长期 key 是受控例外，秘密只显示一次并需要 sponsor、到期和强认证"],"policyChecks":[{"id":"stable-id","label":"Stable Screen ID","pass":true},{"id":"f4-target","label":"Isolated F4 TARGET","pass":true},{"id":"nine-state","label":"Nine-state family","pass":true},{"id":"interaction","label":"Actions defined","pass":true},{"id":"contracts","label":"Data contracts defined","pass":true},{"id":"guards","label":"Architecture guards defined","pass":true},{"id":"evidence-plan","label":"G1–G8 evidence plan","pass":true}],"evidence":[{"id":"task-packet","gate":"G1","label":"Task packet","proof":"scope、owner paths、依赖、non-goals 与 rollback","path":"ui-ci/target-open-service-accounts/task-packet.yaml","status":"missing"},{"id":"screen-contract","gate":"G1","label":"Screen contract","proof":"稳定 Screen ID、route、regions、actions、states、contracts 与 risks","path":"/api/ui-ci/target-open-service-accounts","status":"registered"},{"id":"static-report","gate":"G2","label":"Static report","proof":"format、lint、typecheck、schema 与 secret scan","path":"ui-ci/target-open-service-accounts/static/report.json","status":"missing"},{"id":"fixture-pack","gate":"G3","label":"State fixture pack","proof":"九态确定性 fixture、long/large/locale 与错误注入","path":"ui-ci/target-open-service-accounts/fixtures/manifest.json","status":"missing"},{"id":"consumer-contract","gate":"G4","label":"Consumer contract","proof":"producer schema、consumer fixtures、compatibility 与 migration window","path":"ui-ci/target-open-service-accounts/contracts/results.json","status":"missing"},{"id":"experience-bundle","gate":"G5","label":"Experience bundle","proof":"visual、a11y、interaction、responsive 与 native device matrix","path":"ui-ci/target-open-service-accounts/experience/manifest.json","status":"missing"},{"id":"security-negative","gate":"G6","label":"Security negative","proof":"authz、resource binding、abuse、privacy、redaction 与 artifact integrity","path":"ui-ci/target-open-service-accounts/security/results.json","status":"missing"},{"id":"release-manifest","gate":"G7","label":"Release manifest","proof":"exact commit、artifact digest、SBOM、config、migration 与 rollback drill","path":"ui-ci/target-open-service-accounts/release/manifest.json","status":"missing"},{"id":"production-proof","gate":"G8","label":"Production proof","proof":"external synthetic、telemetry、error budget、owner ack 与 incident link","path":"ui-ci/target-open-service-accounts/production/evidence.json","status":"missing"}],"registryValid":true,"mergeReady":false,"releaseReady":false,"productionReady":false}}