knowledge-governance

根因：生产可恢复性只有 PRODUCTION_BACKUP_RESTORE_VERIFIED 这个手填 env 开关，
页面没有任何入口去真跑一次恢复；CLI（librarydrill）又不是 worker 能复用的实现，
所以"已验证"既证明不了跑过、也证明不了跑的是当前目标。

改动：
- 共享实现 internal/libraryverify（维护隔离→捕获→基线校验→canary→恢复→复核→关窗口），
  cmd/librarydrill 改为薄封装，CLI 与 worker 只允许一份执行体。
- verify 成为独立业务作业：kind + VerifyStages(capture/verify/canary/restore/finalize)，
  与 sync/restore/baseline 共用同一把写互斥；迁移 79 加 kind 约束、重建部分唯一索引、
  新建 library_restore_verifications（按 target_id 绑定，换库/索引/桶旧证据自动失效，
  同 target+scope+job 幂等）。
- worker：admitLibraryJob + runOwnedLibraryAttempt 之后调用共享实现，阶段实时写
  library_job_stages，结束后写真实终态；通过写 passed 证据，失败写 failed+原因（不伪成功）；
  中断接管按同一作业 id 收掉维护窗口。
- API：POST/GET /api/v1/library/verifications（管理员；闸口关闭/维护中拒绝；返回完整
  整库目标、最近证据、失败原因），OpenAPI 同步。
- 闸口：同步/恢复/续作的证据判断改为读当前目标证据；历史 env 仅在证据缺失时兜底，
  证据存在时以证据为准。
- 页面：生产保护与恢复面板加「恢复验证」块（完整 KB/索引/桶、状态、最近证据、失败原因、
  管理员按钮、5s 轮询），作业类型补 verify 文案。

测试：make verify 16/16 全绿（go 1387 例 + web 454 例 + 契约/迁移/密钥/依赖锁定）；
新增用例覆盖证据四条件、闸口证据优先、页面无证据/失败/通过三种呈现与管理员可见性。

2026-11-03 10:14:08 +08:00

migrations

2026-11-03 10:14:08 +08:00

pgtest

fix(library): 守卫按行取作业身份、同作业多代次、原作业续作与执行域准入

2026-10-30 17:20:40 +08:00

artifact_fetch_manifest_integration_test.go

fix(fetch): 修复钉钉来源身份与取件失败监控

2026-10-27 14:36:24 +08:00

artifact_fetch_requeue_integration_test.go

2026-10-08 15:41:13 +08:00

artifact_fetch_store.go

fix(fetch): 修复钉钉来源身份与取件失败监控

2026-10-27 14:36:24 +08:00

auth_test.go

feat(auth): accounts, sessions, RBAC and server-stamped actors

2026-09-30 10:54:07 +08:00

auth.go

feat(web): login gate, session identity UI and member management

2026-09-30 10:54:07 +08:00

auto_review_integration_test.go

feat(release): 建批时冻结 + 验收通过自动批准 —— 把"每份文档 8 步"砍掉两步并去掉两次卡死

2026-10-10 15:05:20 +08:00

backup_schedule_integration_test.go

test(backup): 迁移计数更新到 45 并补 44/45 内容断言；新增 backup_schedule 真实库往返集成测试

2026-10-09 13:55:35 +08:00

backup_schedule.go

feat(backup): 系统设置里的存储与备份——定时时间与储存天数可配、下发到目标主机 cron

2026-10-09 13:50:23 +08:00

bind_time_freeze_integration_test.go

feat(release): 建批时冻结 + 验收通过自动批准 —— 把"每份文档 8 步"砍掉两步并去掉两次卡死

2026-10-10 15:05:20 +08:00

c4_concurrent_operation_integration_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

catalog_change_sets_integration_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

catalog_change_sets.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

catalog_node_binding_integration_test.go

2026-09-30 10:54:07 +08:00

catalog_refresh_progress.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

catalog_routing_integration_test.go

2026-09-30 10:54:07 +08:00

catalog_routing_operation_integration_test.go

feat(governance): policy-driven ingestion from catalog annotations

2026-09-30 10:54:07 +08:00

catalog_routing.go

perf(catalog): resolve filename filters once per query, not per row

2026-09-30 10:54:07 +08:00

catalog_scan_progress_integration_test.go

style(go): 清掉存量 gofmt（6 个文件的字段对齐与文件末尾换行）

2026-10-12 00:10:31 +08:00

change_set_execution.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

dingtalk_space_test.go

fix(settings): add DingTalk spaces and render the real login QR

2026-09-30 10:54:07 +08:00

dingtalk_space.go

feat(settings): 汇总全部数据源配置操作审计

2026-10-27 10:42:30 +08:00

filename_filters_allow_test.go

feat(filters): allowlist mode for filename filters

2026-09-30 10:54:07 +08:00

filename_filters_integration_test.go

feat(ingest): 源与目录文件名过滤及钉钉文档导出

2026-09-30 10:54:07 +08:00

filename_filters.go

feat(monitor): 死信中文提示与成功/取消自动退信

2026-09-30 10:54:07 +08:00

integration_isolation_external_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

integration_isolation_test.go

test(library): 真实PG验证超出历史窗口仍能取回写集合

2026-10-30 02:32:26 +08:00

job_failures.go

fix(monitor): 修复取件死信无法重排与列表 NULL 标志导致的 500

2026-10-08 12:09:34 +08:00

library_dead_letters.go

feat(library): 死信按精确指纹解除，保留上游记录

2026-10-29 06:55:13 +08:00

library_dispatch_test.go

2026-11-01 11:35:09 +08:00

library_dispatch.go

2026-11-03 10:14:08 +08:00

library_execution_test.go

2026-11-01 11:35:09 +08:00

library_execution.go

feat(library): 整库发布身份、写集合与收尾边界

2026-11-01 11:35:10 +08:00

library_executor_status_integration_test.go

feat(library): 封存执行器可用性与还原条件来自真实观测

2026-10-29 13:01:37 +08:00

library_executor_status.go

feat(library): 封存执行器可用性与还原条件来自真实观测

2026-10-29 13:01:37 +08:00

library_identity_integration_test.go

fix(library): DS01 激活消费真实维护 journal 证据

2026-11-02 18:48:10 +08:00

library_instance_maintenance.go

fix(library): 维护窗口起始时间只属于本次占用

2026-10-30 01:33:45 +08:00

library_job_mutex_integration_test.go

fix(library): 基线崩溃续作与维护原状态保留

2026-10-29 19:08:58 +08:00

library_jobs.go

fix(library): 续作在事务内校验阶段并原子入队

2026-11-01 22:05:02 +08:00

library_lease_contract_test.go

2026-11-01 11:35:09 +08:00

library_legacy_source_test.go

2026-11-01 11:35:09 +08:00

library_legacy_source.go

feat(library): 整库发布身份、写集合与收尾边界

2026-11-01 11:35:10 +08:00

library_maintenance_integration_test.go

fix(library): 基线崩溃续作与维护原状态保留

2026-10-29 19:08:58 +08:00

library_maintenance_window_integration_test.go

fix(library): 维护窗口起始时间只属于本次占用

2026-10-30 01:33:45 +08:00

library_maintenance.go

fix(library): 维护窗口起始时间只属于本次占用

2026-10-30 01:33:45 +08:00

library_operations.go

feat(library): 整库发布身份、写集合与收尾边界

2026-11-01 11:35:10 +08:00

library_protection.go

style: gofmt 新增的三个文件

2026-10-30 16:16:45 +08:00

library_reconcile_test.go

feat(library): 云测试发布目标接入的角色分离、快照搬运与图谱门禁

2026-10-30 18:38:38 +08:00

library_recovery_identity.go

feat(library): 整库发布身份、写集合与收尾边界

2026-11-01 11:35:10 +08:00

library_recovery_retry.go

style(library): gofmt 恢复重排文件

2026-10-29 01:38:46 +08:00

library_restore_dispatch_activation.go

fix(library): 跨SHA兼容需受信证明默认拒绝

2026-11-02 21:16:45 +08:00

library_restore_dispatch_binding.go

fix(library): 收紧 DS01 派发租约/投递/治理身份与绑定冲突

2026-11-02 20:36:36 +08:00

library_restore_dispatch_final_binding_test.go

test(library): 使用点复核同SHA错display

2026-11-02 21:24:27 +08:00

library_restore_dispatch_g1_test.go

fix(library): DS01 激活消费真实维护 journal 证据

2026-11-02 18:48:10 +08:00

library_restore_dispatch_linearization_test.go

fix(library): 收紧 DS01 派发租约/投递/治理身份与绑定冲突

2026-11-02 20:36:36 +08:00

library_restore_dispatch_test.go

fix(library): 收紧 DS01 派发租约/投递/治理身份与绑定冲突

2026-11-02 20:36:36 +08:00

library_restore_dispatch.go

fix(library): 跨SHA兼容需受信证明默认拒绝

2026-11-02 21:16:45 +08:00

library_resume_r25_test.go

fix(library): 续作在事务内校验阶段并原子入队

2026-11-01 22:05:02 +08:00

library_source_candidate_test.go

2026-11-01 11:35:09 +08:00

library_source_candidate.go

feat(library): 整库发布身份、写集合与收尾边界

2026-11-01 11:35:10 +08:00

library_target_test.go

fix(library): 按目标身份隔离版本授权与执行历史

2026-10-31 02:15:15 +08:00

library_verification.go

2026-11-03 10:14:08 +08:00

library_version_lookup_integration_test.go

fix(library): 当前生效版本改按精确查询

2026-10-30 03:09:21 +08:00

library_write_fence.go

feat(library): 整库发布身份、写集合与收尾边界

2026-11-01 11:35:10 +08:00

manual_publication_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

manual_publication.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

migrate.go

feat(library): 云测试发布目标接入的角色分离、快照搬运与图谱门禁

2026-10-30 18:38:38 +08:00

migrations_test.go

2026-11-03 10:14:08 +08:00

monitor_removal_retry.go

feat(monitor): 卡片概况与统一文件处理表

2026-10-27 12:14:19 +08:00

monitor_tasks_integration_test.go

fix(fetch): 修复钉钉来源身份与取件失败监控

2026-10-27 14:36:24 +08:00

monitor_tasks.go

fix(fetch): 修复钉钉来源身份与取件失败监控

2026-10-27 14:36:24 +08:00

operation_requests.go

feat(qaops): 接通网页通讯录持久化同步与后台接管

2026-10-17 17:36:07 +08:00

operation_wrappers.go

2026-10-10 15:29:31 +08:00

p2_identity_integration_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

p3_confirm_integration_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

p5_job_identity_integration_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

p6_dlq_integration_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

policy_intents.go

2026-09-30 10:54:07 +08:00

pp_import_integration_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

pp_import.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

processing_confirmations.go

feat(governance): policy-driven ingestion from catalog annotations

2026-09-30 10:54:07 +08:00

production_bindings_integration_test.go

2026-10-08 15:41:13 +08:00

production_bindings.go

2026-10-08 15:41:13 +08:00

production_delete_integration_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

publication_cancel_integration_test.go

fix(monitor): keep failing publications visible outside the queue page

2026-09-30 10:54:07 +08:00

publication_removal.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

qa_downvote_migration_test.go

fix(qaops): 点踩问题统一判为不正确

2026-10-20 08:18:03 +08:00

qa_durable_master_migration_test.go

feat(qa-ops): 建立独立正式主表并保真导入历史问答

2026-10-19 08:49:18 +08:00

qa_inline_weekly_migration_test.go

fix(qaops): 点踩问题统一判为不正确

2026-10-20 08:18:03 +08:00

qa_region_catalog_migration_test.go

feat(qa-ops): 支持自定义区域与分级部门批量归属

2026-10-18 21:50:29 +08:00

qa_weekly_quality_migration_test.go

feat(qa-ops): 交付十一项统计看板与完整图片导出

2026-10-18 23:26:55 +08:00

queue_sql.go

feat(release): 发布管理整库视图 + R4/R5/R6/R7 修复

2026-10-28 12:28:04 +08:00

r1_release_change_set_integration_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

r4_rollback_levels_integration_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

r5_manifest_seal_integration_test.go

feat(release): 建批时冻结 + 验收通过自动批准 —— 把"每份文档 8 步"砍掉两步并去掉两次卡死

2026-10-10 15:05:20 +08:00

r6_audit_chain_integration_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

release_audit_chain.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

release_authorization_integration_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

release_batches_test.go

feat(release): 建批时冻结 + 验收通过自动批准 —— 把"每份文档 8 步"砍掉两步并去掉两次卡死

2026-10-10 15:05:20 +08:00

release_batches.go

2026-10-10 15:29:31 +08:00

release_change_sets.go

feat(release): 建批时冻结 + 验收通过自动批准 —— 把"每份文档 8 步"砍掉两步并去掉两次卡死

2026-10-10 15:05:20 +08:00

release_execution_reads_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

release_execution_worker_store_test.go

2026-10-08 15:41:13 +08:00

release_execution_worker_store.go

2026-10-08 15:41:13 +08:00

release_executions_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

release_executions.go

fix(api): 执行明细补齐 action 与目标知识库字段

2026-10-08 17:26:26 +08:00

release_plan_policy_state_integration_test.go

fix(release): 禁止导入未被算进期望策略 —— 生产知识下不了架（计划与建批两处同源缺陷）

2026-10-10 11:36:08 +08:00

release_plan_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

release_plan.go

fix(release): 禁止导入未被算进期望策略 —— 生产知识下不了架（计划与建批两处同源缺陷）

2026-10-10 11:36:08 +08:00

review_and_seal_integration_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

review_batch_integration_test.go

2026-10-10 15:29:31 +08:00

reviews_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

reviews.go

2026-10-10 15:29:31 +08:00

routing_bindings_replan_integration_test.go

2026-10-08 15:41:13 +08:00

routing_bindings.go

2026-10-08 15:41:13 +08:00

s2_snapshot_history_integration_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

s4_refresh_progress_integration_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

s6_scope_policy_integration_test.go

feat(governance): policy-driven ingestion from catalog annotations

2026-09-30 10:54:07 +08:00

s8_change_set_contract_integration_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

scope_rules_integration_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

scope_rules.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

source_assets_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

source_assets.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

source_audit_integration_test.go

feat(settings): 汇总全部数据源配置操作审计

2026-10-27 10:42:30 +08:00

source_audit.go

feat(settings): 汇总全部数据源配置操作审计

2026-10-27 10:42:30 +08:00

source_catalog_integration_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

source_catalog.go

feat(sources): 数据源配置收敛成 dws 导入 + PP 导入；「去掉来源」= 归档下架（不删数据）

2026-10-14 12:36:32 +08:00

source_connection_archive_integration_test.go

fix(dingtalk): 登记钉钉知识库 409 space_registration_conflict —— 归档行占名 + 错误被吞

2026-10-14 12:59:52 +08:00

source_connections_integration_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

source_connections_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

source_connections.go

feat(sources): 数据源配置收敛成 dws 导入 + PP 导入；「去掉来源」= 归档下架（不删数据）

2026-10-14 12:36:32 +08:00

source_scan_integration_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

source_scan_migration_integration_test.go

2026-09-30 10:54:07 +08:00

source_scans_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

source_scans.go

feat(sources): 数据源配置收敛成 dws 导入 + PP 导入；「去掉来源」= 归档下架（不删数据）

2026-10-14 12:36:32 +08:00

source_settings.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

store_test.go

refactor(queue): single-statement complete + dead-letter retirement

2026-09-30 10:54:07 +08:00

store.go

fix(library): DS01 激活消费真实维护 journal 证据

2026-11-02 18:48:10 +08:00

test_publication_removal_integration_test.go

feat(monitor): 需下架车道可逐条移除测试库知识 —— 补齐最后一个没有页面入口的流程

2026-10-10 12:10:46 +08:00

test_publication_removal.go

feat(monitor): 需下架车道可逐条移除测试库知识 —— 补齐最后一个没有页面入口的流程

2026-10-10 12:10:46 +08:00

test_publications_integration_test.go

feat: 知识治理平台(含已验证发布/回滚契约)

2026-09-30 10:54:06 +08:00

test_publications_test.go

fix(orchestration): test poll/validate schedules carry the retry round

2026-09-30 10:54:07 +08:00

test_publications.go

feat(release): 建批时冻结 + 验收通过自动批准 —— 把"每份文档 8 步"砍掉两步并去掉两次卡死

2026-10-10 15:05:20 +08:00

ui_settings_integration_test.go

feat(governance): policy-driven ingestion from catalog annotations

2026-09-30 10:54:07 +08:00

ui_settings_test.go

feat(settings): 服务配置四项化并保存时真校验

2026-09-30 10:54:07 +08:00

ui_settings.go

feat(settings): 服务配置四项化并保存时真校验

2026-09-30 10:54:07 +08:00

v1_migration_seed_test.go