Sub2API v1.0 - AI API 网关（二开初始版本，基于上游 Wei-Shaw/sub2api）

2026-08-21 18:30:13 +08:00
commit 6d655c9903
3584 changed files with 1270640 additions and 0 deletions
@@ -0,0 +1,31 @@
+# Prompt Audit implementation evidence
+
+This file records reproducible implementation-time evidence. It contains no prompt bodies, Guard credentials, Authorization values, or Redis payloads.
+
+## 2026-07-16 — source freeze and target baseline
+
+### Frozen source restore
+
+- Base commit: `7a50378851a80650cb0c086260b23abeb3469e6b`
+- Freeze manifest: `source-freeze/MANIFEST.md`
+- Manifest SHA-256: `badab312bf6af4d2c77857a9400381f4da4fbf45722d9f4a6df23bc7005273b6`
+- Restore result: tracked patch and untracked archive restored into a detached worktree; `git diff --check` passed.
+- `go test ./internal/service/promptaudit -count=1`: passed.
+- `go test ./internal/router ./internal/relay ./internal/gatewayadapter/transport -run 'PromptGuard|PromptAudit|ConcurrencyOrder' -count=1`: passed.
+
+### Target pre-change baseline
+
+- `cd backend && go test ./internal/service -run ContentModeration -count=1`: passed (`1.138s`).
+- `pnpm --dir frontend exec vitest run src/views/admin/__tests__/RiskControlView.spec.ts src/router/__tests__/feature-access.spec.ts`: passed (2 files, 9 tests).
+
+### Review slices
+
+Implementation is partitioned into independently reviewable slices without changing the final scope:
+
+1. Data and core contracts.
+2. Async audit engine.
+3. Admin API and console.
+4. Coordinator and synchronous guard.
+5. Observability, verification, rollout, and deployment evidence.
+
+The feature remains default-off throughout implementation. Production blocking remains prohibited until the signed rollout gates in `verification.md` are satisfied.