TARGETF4Admin · 验证上传完整性、包安全边界和晋级证据的 Media/Security owner

隔离验证与晋级

把对象版本、长度、checksum、ZIP 路径/膨胀边界、manifest 和晋级 destination 组成可审计证据

/ops/media/quarantineplatform-operations
UI STUDIOplatform-media-quarantine
Admin1440 × 900100%
100%
/ops/media/quarantine
TARGET UI1440 × 900FIT 100%
K15 F4 TARGETCURRENT RUNTIME + CODE EVIDENCE + TARGET CONTROL PLANEreits-media db8c55a · EC2 snapshot 2026-07-17
RESOURCE & OBSERVABILITY / platform-media-quarantine

隔离验证与晋级

把对象版本、长度、checksum、ZIP 路径/膨胀边界、manifest 和晋级 destination 组成可审计证据

PRESIGNED07structure sample
PROCESSING01single claimant
REJECTED02bounded validation
READY24immutable promoted
QUARANTINE WORK QUEUEPackage evidence, not a generic scan claimNO LIST API CURRENT
Risk Lens 0.8.2upl_7HM…2QPROCESSING
!Scene Atlas 1.4.0upl_7HF…91REJECTED
Strategy Sim 1.0.0upl_7H2…72READY
Market Notes 2.2.1upl_7GW…3KPRESIGNED
Queue, pagination, reviewer claim and manual disposition are TARGET contracts.
VALIDATION EVIDENCEupl_7HM…2Q / ast_4NK…8CPROCESSING

S3 object versionquarantine-version-1PASS

Length + checksum18.42 MB · 3ad91c…4f0ePASS

ZIP path safety4,821 entries · no traversalPASS

Expansion bounds312 MB · ratio 16.9×PASS

Manifest + entrymanifest.json · index.htmlPASS

!Malware / policy scanscanner lane not implementedGAP

IMMUTABLE DESTINATIONminiapp_package/ast_4NK…8C/3ad91c…4f0e.zip

Promotion occurs only after object version, checksum, bounded ZIP and manifest evidence pass.

REFERENCE VIEWPORT1440 × 900Desktop first · responsive
PRIMARY TASK领取验证主操作、权限与完成反馈必须同屏可验证
DATA CONTRACTQuarantineItemready / loading / empty / error 使用同一 fixture
ACCESSIBILITYKeyboard + WCAG AA焦点顺序、可读名称、对比度进入 UI CI
VISUAL BASELINETARGET · 2026-07-17桌面/移动、浅色/错误态按稳定 Screen ID 留档

IMPLEMENTATION MAP

可以直接拆成开发任务的目标定义

目标稿与当前实现严格分轨;只有产品仓实现、测试与生产证据齐全后,才会转为 current evidence。

01

页面区域

  • 队列与筛选
  • 选中 upload
  • 验证证据
  • 缺失扫描 Gate
  • 不可变 destination
  • 拒绝/晋级回执
02

用户动作

  • 领取验证
  • 查看 validation evidence
  • 按原因拒绝
  • 重试瞬时失败
  • 晋级 artifact
  • 打开资产
03

必须状态

  • 运营证据已就绪
  • 多源证据聚合中
  • 当前范围为空
  • 部分证据源失败
  • 运营视图读取失败
  • 离线快照只读
  • 资源或环境权限拒绝
  • 高风险命令确认
  • 命令与证据回执完成
04

数据契约

  • QuarantineItem
  • UploadClaim
  • StoredObjectVersion
  • IntegrityEvidence
  • PackageValidationEvidence
  • PolicyVerdict
  • PromotionReceipt

TARGET MODULES

目标页面必须交付的模块

  1. 01quarantine queue target
  2. 02single-claim processing
  3. 03object version
  4. 04integrity checks
  5. 05bounded ZIP validation
  6. 06policy scanner target
  7. 07immutable promotion

PRODUCT ROUTE INDEX

REITs Platform · Resource & Observability 的 8 个稳定 Screen ID

同一产品内的页面共享 token、导航和状态语言,但每个 Screen ID 保留自己的字段、数据契约和 QA 基线。

01
资源上传与预检/ops/media/uploads/new
Admin
02
隔离验证与晋级/ops/media/quarantine
Admin
03
不可变资源库/ops/media/assets
Admin
04
平台服务状态/status · /ops/status
Admin
05
日志与关联检索/ops/logs
Admin
06
Incident 指挥与时间线/ops/incidents/:incidentId
Admin
07
跨域审计事件详情/ops/audit/:eventId
Admin
08
隔离恢复演练/ops/recovery/drills/:drillId
Admin