POLICY VALIDMERGE BLOCKEDAdmin · dashboard

能力申请与审核

开放平台 · /apps/:appId/capability-requests

IMPLEMENTATION OWNER开放平台
QA OWNERQA Architecture
SOURCEdocs/ui-blueprint/10-k08-open-platform-core.md
VIEWPORTS1440×900 · 1280×800 · 390×844

REGISTRY POLICY

设计契约检查全部通过,不等于产品证据通过

Stable Screen IDstable-id
PASS
Isolated F4 TARGETf4-target
PASS
Nine-state familynine-state
PASS
Actions definedinteraction
PASS
Data contracts definedcontracts
PASS
Architecture guards definedguards
PASS
G1–G8 evidence planevidence-plan
PASS

NINE-STATE FIXTURE MAP

九个状态都有产品语义,但 fixture 文件尚待实现

状态名称来自该 Screen Contract;K16 canonical key 用于跨仓聚合。产品仓必须提交确定性数据,而不是让 CI 依赖线上随机状态。

01READY

申请与时间线就绪

FIXTURE MISSING
02LOADING

申请记录加载

FIXTURE MISSING
03EMPTY

尚无申请

FIXTURE MISSING
04PARTIAL_ERROR

审核时间线部分失败

FIXTURE MISSING
05ERROR

申请保存失败

FIXTURE MISSING
06OFFLINE_STALE

离线只读草稿

FIXTURE MISSING
07FORBIDDEN

缺少 capability:request

FIXTURE MISSING
08DESTRUCTIVE_CONFIRM

提交/撤回确认

FIXTURE MISSING
09SUCCESS_RECEIPT

申请 revision 已提交

FIXTURE MISSING

G1–G8 EVIDENCE

缺一项就保持阻断

路径是跨仓约定,不表示文件已经存在。上传凭证、token、PII、signed URL 与原始敏感 payload 永远不能成为证据内容。

G1

Task packet

scope、owner paths、依赖、non-goals 与 rollback

ui-ci/target-open-requests/task-packet.yaml
MISSING
G1

Screen contract

稳定 Screen ID、route、regions、actions、states、contracts 与 risks

/api/ui-ci/target-open-requests
REGISTERED
G2

Static report

format、lint、typecheck、schema 与 secret scan

ui-ci/target-open-requests/static/report.json
MISSING
G3

State fixture pack

九态确定性 fixture、long/large/locale 与错误注入

ui-ci/target-open-requests/fixtures/manifest.json
MISSING
G4

Consumer contract

producer schema、consumer fixtures、compatibility 与 migration window

ui-ci/target-open-requests/contracts/results.json
MISSING
G5

Experience bundle

visual、a11y、interaction、responsive 与 native device matrix

ui-ci/target-open-requests/experience/manifest.json
MISSING
G6

Security negative

authz、resource binding、abuse、privacy、redaction 与 artifact integrity

ui-ci/target-open-requests/security/results.json
MISSING
G7

Release manifest

exact commit、artifact digest、SBOM、config、migration 与 rollback drill

ui-ci/target-open-requests/release/manifest.json
MISSING
G8

Production proof

external synthetic、telemetry、error budget、owner ack 与 incident link

ui-ci/target-open-requests/production/evidence.json
MISSING

CONTRACTS & ACTIONS

实现输入

Contracts
  • CapabilityRequest
  • RiskAssessment
  • UsageJustification
  • FailureRecoveryPlan
  • EvidenceAttachment
  • ReviewTimeline
  • ReviewDecision
  • AuditReceipt
Actions
  • 新建能力申请
  • 保存补件草稿
  • 重新提交审核
  • 撤回申请
  • 查看审核标准
  • 复制申请证据
  • 处理审核结果