Files
sub2api/openspec/changes/add-openai-compatible-prompt-audit/implementation-evidence.md
T
李建琦 6d655c9903
Release / update-version (push) Has been cancelled
Release / build-frontend (push) Has been cancelled
Release / release (push) Has been cancelled
Release / sync-version-file (push) Has been cancelled
CI / shell (push) Canceled after 0s
CI / test (push) Canceled after 0s
CI / frontend (push) Canceled after 0s
CI / golangci-lint (push) Canceled after 0s
Security Scan / backend-security (push) Canceled after 0s
Security Scan / frontend-security (push) Canceled after 0s
Sub2API v1.0 - AI API 网关(二开初始版本,基于上游 Wei-Shaw/sub2api)
2026-08-21 18:30:13 +08:00

1.5 KiB

Prompt Audit implementation evidence

This file records reproducible implementation-time evidence. It contains no prompt bodies, Guard credentials, Authorization values, or Redis payloads.

2026-07-16 — source freeze and target baseline

Frozen source restore

  • Base commit: 7a50378851a80650cb0c086260b23abeb3469e6b
  • Freeze manifest: source-freeze/MANIFEST.md
  • Manifest SHA-256: badab312bf6af4d2c77857a9400381f4da4fbf45722d9f4a6df23bc7005273b6
  • Restore result: tracked patch and untracked archive restored into a detached worktree; git diff --check passed.
  • go test ./internal/service/promptaudit -count=1: passed.
  • go test ./internal/router ./internal/relay ./internal/gatewayadapter/transport -run 'PromptGuard|PromptAudit|ConcurrencyOrder' -count=1: passed.

Target pre-change baseline

  • cd backend && go test ./internal/service -run ContentModeration -count=1: passed (1.138s).
  • pnpm --dir frontend exec vitest run src/views/admin/__tests__/RiskControlView.spec.ts src/router/__tests__/feature-access.spec.ts: passed (2 files, 9 tests).

Review slices

Implementation is partitioned into independently reviewable slices without changing the final scope:

  1. Data and core contracts.
  2. Async audit engine.
  3. Admin API and console.
  4. Coordinator and synchronous guard.
  5. Observability, verification, rollout, and deployment evidence.

The feature remains default-off throughout implementation. Production blocking remains prohibited until the signed rollout gates in verification.md are satisfied.