李建琦
6d655c9903
Release / update-version (push) Has been cancelled
Release / build-frontend (push) Has been cancelled
Release / release (push) Has been cancelled
Release / sync-version-file (push) Has been cancelled
CI / shell (push) Canceled after 0s
CI / test (push) Canceled after 0s
CI / frontend (push) Canceled after 0s
CI / golangci-lint (push) Canceled after 0s
Security Scan / backend-security (push) Canceled after 0s
Security Scan / frontend-security (push) Canceled after 0s
32 lines
1.5 KiB
Markdown
32 lines
1.5 KiB
Markdown
# Prompt Audit implementation evidence
|
|
|
|
This file records reproducible implementation-time evidence. It contains no prompt bodies, Guard credentials, Authorization values, or Redis payloads.
|
|
|
|
## 2026-07-16 — source freeze and target baseline
|
|
|
|
### Frozen source restore
|
|
|
|
- Base commit: `7a50378851a80650cb0c086260b23abeb3469e6b`
|
|
- Freeze manifest: `source-freeze/MANIFEST.md`
|
|
- Manifest SHA-256: `badab312bf6af4d2c77857a9400381f4da4fbf45722d9f4a6df23bc7005273b6`
|
|
- Restore result: tracked patch and untracked archive restored into a detached worktree; `git diff --check` passed.
|
|
- `go test ./internal/service/promptaudit -count=1`: passed.
|
|
- `go test ./internal/router ./internal/relay ./internal/gatewayadapter/transport -run 'PromptGuard|PromptAudit|ConcurrencyOrder' -count=1`: passed.
|
|
|
|
### Target pre-change baseline
|
|
|
|
- `cd backend && go test ./internal/service -run ContentModeration -count=1`: passed (`1.138s`).
|
|
- `pnpm --dir frontend exec vitest run src/views/admin/__tests__/RiskControlView.spec.ts src/router/__tests__/feature-access.spec.ts`: passed (2 files, 9 tests).
|
|
|
|
### Review slices
|
|
|
|
Implementation is partitioned into independently reviewable slices without changing the final scope:
|
|
|
|
1. Data and core contracts.
|
|
2. Async audit engine.
|
|
3. Admin API and console.
|
|
4. Coordinator and synchronous guard.
|
|
5. Observability, verification, rollout, and deployment evidence.
|
|
|
|
The feature remains default-off throughout implementation. Production blocking remains prohibited until the signed rollout gates in `verification.md` are satisfied.
|