feat(ISSUE-263): W2-C2 g060 落地治理仓 (#274) - #297
Merged
Merged
Conversation
Contributor
|
auto-fix 上限触发（ADR-0040）：gate 失败 3 次 ≥ 上限 3。自动关闭并不再重试；失败历史见 .github 仓说明 issue。人工续作：修复后新开 PR（勿 reopen 本 PR）。 |
[skip ci] re-run ADR gate
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
ADR-0061 g060 语义扩展至治理仓：
specs/*/suite/**按 IR 分片锁定，非授权身份修改时 exit 2 阻断并自动开 issue 路由 owner 裁决。CODEOWNERS:specs/*/suite/**的 CODEOWNER =verifier-app[bot]+@randypandingscripts/g060-lock.sh: 锁定检查主脚本；非授权身份修改锁定路径时 exit 2，并自动开裁决 issue（标签state:needs-human，assigneerandypanding）scripts/g060-escalation.py: 裁决闭环；解析/g060-adopt//g060-reject指令，终态须带证据引用（机器可核），超 TTL（72h）触发 dead-man 提醒governance/policy/testing.yaml: 新增g060_guard条款（引用 T-14 / T-15），登记 enforcement_tools 与 escalation 参数Blast radius
.github:CODEOWNERS,scripts/g060-lock.sh,scripts/g060-escalation.py,governance/policy/testing.yamlscripts/g060-bridge.sh（跨仓桥接，另开 PR）Blocked
.github/workflows/g060-guard.yml: 当前 cloudbrid-agent App 无workflows权限，向上游推 workflow 文件会失败。已在本地实现完整代码（dotgithub/.github/workflows/g060-guard.yml），待权限开通后经 owner-merge 通道合入。g060-lock.sh/g060-escalation.py/ policy 条款已可独立在 CI-Workflows 桥接调用。Closes #274