From 9fb905b65acd232471ba533bb2aba7cd9507fc2a Mon Sep 17 00:00:00 2001 From: Codex Date: Sat, 11 Jul 2026 08:18:37 +0200 Subject: [PATCH] =?UTF-8?q?docs:=20=E5=AE=8C=E6=88=90=20HWLAB=20PaC=20prov?= =?UTF-8?q?enance=20=E4=BB=BB=E5=8A=A1=E8=AE=B0=E5=BD=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../hwlab-pac-live-provenance/R1.4_Task_Report.md | 9 +++++++++ .../details/hwlab-pac-live-provenance/R1_Task_Report.md | 7 +++++++ docs/MDTODO/hwlab-pac-live-provenance.md | 4 ++-- 3 files changed, 18 insertions(+), 2 deletions(-) create mode 100644 docs/MDTODO/details/hwlab-pac-live-provenance/R1.4_Task_Report.md create mode 100644 docs/MDTODO/details/hwlab-pac-live-provenance/R1_Task_Report.md diff --git a/docs/MDTODO/details/hwlab-pac-live-provenance/R1.4_Task_Report.md b/docs/MDTODO/details/hwlab-pac-live-provenance/R1.4_Task_Report.md new file mode 100644 index 00000000..9eb661e5 --- /dev/null +++ b/docs/MDTODO/details/hwlab-pac-live-provenance/R1.4_Task_Report.md @@ -0,0 +1,9 @@ +# R1.4 测试与 PR 报告 + +- 来源：[UniDesk #1756](https://github.com/pikasTech/unidesk/issues/1756) +- PR：[UniDesk #1758](https://github.com/pikasTech/unidesk/pull/1758)，非 draft；未合并、未部署。 +- 定向测试：29 pass、0 fail、314 assertions。 +- 正常路径测试：实际执行 control-plane provenance postprocess，最终 Pipeline 精确包含共享四字段，并保留非 provenance annotation。 +- fail-closed：覆盖 target YAML 缺失、错误 owner、错误 renderer、错误 mode 与任意四键伪造。 +- 只读原入口：source-artifact `plan` 成功，desired hash 为 `sha256:3fb6e00ba833...`，旧 source artifact 仍正确判为 drifted。 +- 自动交付边界：未手工触发 CI/CD；合并后的交付只允许走 GitHub webhook → Gitea mirror → PaC → CI/CD。 diff --git a/docs/MDTODO/details/hwlab-pac-live-provenance/R1_Task_Report.md b/docs/MDTODO/details/hwlab-pac-live-provenance/R1_Task_Report.md new file mode 100644 index 00000000..67f7a79a --- /dev/null +++ b/docs/MDTODO/details/hwlab-pac-live-provenance/R1_Task_Report.md @@ -0,0 +1,7 @@ +# R1 总结报告 + +- 来源：[UniDesk #1756](https://github.com/pikasTech/unidesk/issues/1756) +- 交付：[UniDesk PR #1758](https://github.com/pikasTech/unidesk/pull/1758)。 +- YAML owner、parser、正常 control-plane renderer 与 source-artifact renderer 已统一到一份 provenance 合同。 +- verifier 保持 fail-closed；没有运行面手工 annotation、source write、部署或 CI/CD 手工触发。 +- 剩余工作由主代理 review/preflight/merge，并在合并后观察自动交付链和运行面 alignment。 diff --git a/docs/MDTODO/hwlab-pac-live-provenance.md b/docs/MDTODO/hwlab-pac-live-provenance.md index 22a28f8a..742e2431 100644 --- a/docs/MDTODO/hwlab-pac-live-provenance.md +++ b/docs/MDTODO/hwlab-pac-live-provenance.md @@ -4,7 +4,7 @@ - 范围：只修 YAML-owned provenance 合同、共享渲染与定向验证；不部署、不手工触发 CI/CD。 -## R1 [in_progress] +## R1 [completed] 修复 [UniDesk #1756](https://github.com/pikasTech/unidesk/issues/1756) 的 HWLAB PaC live Pipeline provenance 永久漂移，完成任务后将详细报告写入[任务报告](./details/hwlab-pac-live-provenance/R1_Task_Report.md)。 @@ -20,6 +20,6 @@ 让正常 GitOps/control-plane renderer 与 source-artifact renderer复用共享 provenance overlay/postprocess，完成任务后将详细报告写入[任务报告](./details/hwlab-pac-live-provenance/R1.3_Task_Report.md)。 -### R1.4 [in_progress] +### R1.4 [completed] 补齐正常 render 精确四字段及 source-artifact/live/embedded aligned 验证，提交非 draft PR 并 preflight，完成任务后将详细报告写入[任务报告](./details/hwlab-pac-live-provenance/R1.4_Task_Report.md)。