From 21705182c8dbc2d30f104a5c2820a12533e7bbd8 Mon Sep 17 00:00:00 2001
From: randypanding <66171646+randypanding@users.noreply.github.com>
Date: Thu, 20 Aug 2026 13:58:53 +0800
Subject: [PATCH 1/2] =?UTF-8?q?governance:=20=E5=A5=91=E7=BA=A6=E5=85=BC?=
 =?UTF-8?q?=E5=AE=B9=E6=80=A7=20policy=20=E8=90=BD=E7=9B=98=20+=20GOVERNAN?=
 =?UTF-8?q?CE=20CI-5=EF=BC=88P2-4=EF=BC=8CADR-0038=EF=BC=89?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 governance/policy/contracts.yaml | 61 ++++++++++++++++++++++++++++++++
 1 file changed, 61 insertions(+)
 create mode 100644 governance/policy/contracts.yaml

diff --git a/governance/policy/contracts.yaml b/governance/policy/contracts.yaml
new file mode 100644
index 0000000..ac1d847
--- /dev/null
+++ b/governance/policy/contracts.yaml
@@ -0,0 +1,61 @@
+version: 1
+# ============================================================================
+# 契约兼容性检测政策（P2-4，.github#89，ADR-0038）—— 机器可判定的 SoT。
+# 消费方: CI-Workflows scripts/contract/contract_check.py（contract-check job）。
+# 读法:
+#   defaults.breaking_requires_adr —— breaking 契约变更须 PR 引用真实存在的
+#       ADR-NNNN（agent-registry/decisions/，防幽灵 ADR）才放行，否则红。
+#   defaults.openapi_fail_on —— oasdiff --fail-on 档位（ERR=社区默认；
+#       WARN=从严：删可选响应属性也拦——customer_upgrade_failure 姿态）。
+#   repos.<name>.contracts[]     —— kind ∈ openapi|jsonschema（proto 未实装，
+#       声明即报错：组织无 proto，首个 proto 仓落地时修订 ADR-0038 实装 buf breaking）
+#   repos.<name>.migrations      —— tool ∈ alembic|sql + dir。
+#       destructive DDL 模式清单与逆操作映射落盘引擎
+#       （CI-Workflows scripts/contract/contract_check.py，T7 fixture 回归锁定）。
+#   失明防护（T6）: 声明路径在 HEAD 必须命中 ≥1 文件、迁移目录必须非空，
+#       否则红——契约文件被移走后检测器不得静默失明。
+#   N/A 显式: 未声明契约面的仓，contract-check 真跑并显式输出 N/A（非 skipped）。
+# 盘点基线（2026-08-20，#89 执行步骤 1）: 全组织无 OpenAPI/proto 文件；
+#   契约面 = JSON Schema ×3 仓 + alembic ×1 仓。
+# ============================================================================
+defaults:
+  breaking_requires_adr: true
+  openapi_fail_on: WARN
+
+repos:
+  template-service:
+    # 盘点：无契约文件、无迁移——N/A 显式路径的模板载体（新服务仓复制此接线后
+    # 声明自己的契约面即可纳入检测）
+    contracts: []
+    migrations: null
+
+  AI_Web_School:
+    contracts:
+      - {kind: jsonschema, path: "specs/contracts/**"}
+    migrations:
+      tool: alembic
+      dir: alembic/versions
+    # 与 contract.yml（contract-watch，P5 冻结契约变更检测）职责互补：
+    # P5 = 冻结文件任何变更须走契约变更申请；本门 = 全部契约的 breaking 判定 +
+    # 迁移 destructive DDL 判定（ADR-0038）
+
+  Shorts_Director:
+    contracts:
+      - {kind: jsonschema, path: "schema/contracts/**"}
+      - {kind: jsonschema, path: "schema/entities/**"}
+      - {kind: jsonschema, path: "schema/common/**"}
+    migrations: null
+
+  agent-registry:
+    # L1 声明层契约。接线延后：validate.yml 为单 job 架构（gate job 内联全部检查，
+    # 无 needs 聚合层），接入需先做 aggregator 拆分重构——独立小卡（.github#89 留言，
+    # ADR-0038 决策 9）。声明先行：contract-check 一旦在该仓运行即生效。
+    contracts:
+      - {kind: jsonschema, path: "registry/schemas/**"}
+    migrations: null
+
+  # 盘点备注（不声明、不接线）：
+  #   agent-registry 之外的注册表消费方 agent-platform —— 仅 vendor/ 拷贝，
+  #     源头真身在 agent-registry（vendor 漂移属另一关注面，不在本卡范围）
+  #   mutual —— spec/01-schemas.md 为散文 schema，不可机判；落地 JSON Schema 后再声明
+  #   Script_Writer / agent-tools / Use-up-Plan / .github / CI-Workflows —— 无契约面

From 09866f1b07706720252b07775f23801521d8f57c Mon Sep 17 00:00:00 2001
From: randypanding <66171646+randypanding@users.noreply.github.com>
Date: Thu, 20 Aug 2026 13:58:56 +0800
Subject: [PATCH 2/2] =?UTF-8?q?governance:=20=E5=A5=91=E7=BA=A6=E5=85=BC?=
 =?UTF-8?q?=E5=AE=B9=E6=80=A7=20policy=20=E8=90=BD=E7=9B=98=20+=20GOVERNAN?=
 =?UTF-8?q?CE=20CI-5=EF=BC=88P2-4=EF=BC=8CADR-0038=EF=BC=89?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 governance/GOVERNANCE.yaml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/governance/GOVERNANCE.yaml b/governance/GOVERNANCE.yaml
index 7bb3c75..2b56493 100644
--- a/governance/GOVERNANCE.yaml
+++ b/governance/GOVERNANCE.yaml
@@ -62,6 +62,11 @@ domains:
         intent: "工作流安全静态审计（zizmor medium+ 拦截）"
         strength: enforced
         platform: {github: {mechanism: hygiene-job, part_of: CI-1}}
+      - id: CI-5
+        intent: "契约兼容性检测门：OpenAPI/JSON Schema breaking 变更须 ADR 引用；DB migration destructive DDL 须 ADR + downgrade 逆操作；policy 声明路径与实际文件对账（失明即红）"
+        strength: enforced
+        platform: {github: {mechanism: reusable-workflows, repo: CI-Workflows, workflow: contract.yml, policy: "governance/policy/contracts.yaml"}}
+        verify: {method: "contract-selftest（CI-Workflows ci.yml，卡内 T1-T7 fixture 全套）+ 声明路径失明防护红测（T6）"}
 
   supply_chain:
     measures:
@@ -232,4 +237,4 @@ portability:
     github-app:         {gitlab: project-access-token+deploy-tokens, generic: fine-grained-pat}
     environment:        {gitlab: protected-environments}
     reusable-workflows: {gitlab: includes, generic: shared-ci-scripts}
-  migration_rule: "换平台 = 重写 platform 段 + apply/drift 脚本；intent/verify/flows 原样保留"
\ No newline at end of file
+  migration_rule: "换平台 = 重写 platform 段 + apply/drift 脚本；intent/verify/flows 原样保留"