From 3192bb0cf2ca173ac00f141eeae41d89478078d7 Mon Sep 17 00:00:00 2001 From: root Date: Sat, 11 Jul 2026 08:41:58 +0200 Subject: [PATCH] =?UTF-8?q?docs:=20=E8=A1=A5=E9=BD=90=20PaC=20source=20art?= =?UTF-8?q?ifact=20=E4=BB=BB=E5=8A=A1=E6=8A=A5=E5=91=8A?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .../R1.1_Task_Report.md | 9 +++++++++ .../R1.2_Task_Report.md | 10 ++++++++++ .../R1.3_Task_Report.md | 10 ++++++++++ .../pac-source-pipeline-yaml-sync/R1_Task_Report.md | 12 ++++++++++++ 4 files changed, 41 insertions(+) create mode 100644 docs/MDTODO/details/pac-source-pipeline-yaml-sync/R1.1_Task_Report.md create mode 100644 docs/MDTODO/details/pac-source-pipeline-yaml-sync/R1.2_Task_Report.md create mode 100644 docs/MDTODO/details/pac-source-pipeline-yaml-sync/R1.3_Task_Report.md create mode 100644 docs/MDTODO/details/pac-source-pipeline-yaml-sync/R1_Task_Report.md diff --git a/docs/MDTODO/details/pac-source-pipeline-yaml-sync/R1.1_Task_Report.md b/docs/MDTODO/details/pac-source-pipeline-yaml-sync/R1.1_Task_Report.md new file mode 100644 index 00000000..e45fa8fd --- /dev/null +++ b/docs/MDTODO/details/pac-source-pipeline-yaml-sync/R1.1_Task_Report.md @@ -0,0 +1,9 @@ +# R1.1 任务报告 + +- 上下文：[HWLAB #2490](https://github.com/pikasTech/HWLAB/issues/2490)、[HWLAB PR #2492](https://github.com/pikasTech/HWLAB/pull/2492)、UniDesk #1745/#1753/#1756。 +- 审查结论：source-artifact、YAML serializer 与 HWLAB normal Pipeline provenance 共用 owning YAML + domain renderer，不从 live Pipeline 反向生成 desired。 +- provenance：`config/hwlab-node-lanes.yaml#lanes.v03.targets.NC01`、config SHA `sha256:1ccef7c0a86212f05e94de6179a2247d1f114f46f9f94442c8c48f6a2a473bdb`、renderer `hwlab-runtime-lane`、mode `remote-pipeline-annotation`。 +- canonical SHA：`sha256:3fb6e00ba833a30c0dd0ac51a67ebcc4a2494bc12f0fd74da41c9d42fc46ac38`。 +- 测试：UniDesk 定向测试 28/28、314 assertions，覆盖 serializer scalar 保真、provenance 四字段、完整 spec 与 fail-closed 负例。 +- PR merge 后只观察 GitHub webhook → Gitea mirror/snapshot → PaC → Tekton → GitOps/Argo 自动链。 +- 禁止手工 `closeout/apply/trigger/sync/flush` 补齐失败链路；自动链失败必须修自动链。 diff --git a/docs/MDTODO/details/pac-source-pipeline-yaml-sync/R1.2_Task_Report.md b/docs/MDTODO/details/pac-source-pipeline-yaml-sync/R1.2_Task_Report.md new file mode 100644 index 00000000..37212a3f --- /dev/null +++ b/docs/MDTODO/details/pac-source-pipeline-yaml-sync/R1.2_Task_Report.md @@ -0,0 +1,10 @@ +# R1.2 任务报告 + +- 上下文：[HWLAB #2490](https://github.com/pikasTech/HWLAB/issues/2490)、[HWLAB PR #2492](https://github.com/pikasTech/HWLAB/pull/2492)、UniDesk #1753/#1756。 +- 幂等证据：首次机械生成 `mutation=true`，连续相同 write 为 `mutation=false`；最终 source `aligned=true`、`provenanceAligned=true`。 +- 文件 SHA-256：PaC wrapper `4558e40f1470b36bbbf1c77d438675c6ca532441a6aa59aa5d8614035842c694`；Pipeline `54850119b10305ba67c85506bc0d086e2f787f780a181fc04e572e41767e7784`。 +- YAML 验证：两份文件均为单文档、单 EOF 换行，`git diff --check` 通过。 +- 合同验证：六个 Kafka refresh replay env、runtime GitOps postprocess 与 verify 均来自 renderer；测试不再把 YAML 当 JSON，也不依赖引号排版。 +- 测试：HWLAB PaC 结构合同 1/1；Kafka capability 可组合合同 1/1；UniDesk renderer/serializer/provenance 28/28。 +- PR merge 后由 GitHub webhook → Gitea mirror/snapshot → PaC → Tekton → GitOps/Argo 自动交付。 +- 禁止使用 `closeout`、`apply`、`trigger-current`、手工 `sync`、`flush` 或裸 PipelineRun 补链。 diff --git a/docs/MDTODO/details/pac-source-pipeline-yaml-sync/R1.3_Task_Report.md b/docs/MDTODO/details/pac-source-pipeline-yaml-sync/R1.3_Task_Report.md new file mode 100644 index 00000000..403f8ab1 --- /dev/null +++ b/docs/MDTODO/details/pac-source-pipeline-yaml-sync/R1.3_Task_Report.md @@ -0,0 +1,10 @@ +# R1.3 任务报告 + +- PR：[HWLAB #2492](https://github.com/pikasTech/HWLAB/pull/2492)，关联 [HWLAB #2490](https://github.com/pikasTech/HWLAB/issues/2490)，目标分支 `v0.3`。 +- 代码提交：`d2790974`；MDTODO 收口提交：`9ce3b78f564f8570e92e15b3db2b42948db1c0a2`。 +- 生成哈希：canonical `sha256:3fb6e00ba833a30c0dd0ac51a67ebcc4a2494bc12f0fd74da41c9d42fc46ac38`；config `sha256:1ccef7c0a86212f05e94de6179a2247d1f114f46f9f94442c8c48f6a2a473bdb`。 +- 文件哈希：PaC wrapper `4558e40f1470b36bbbf1c77d438675c6ca532441a6aa59aa5d8614035842c694`；Pipeline `54850119b10305ba67c85506bc0d086e2f787f780a181fc04e572e41767e7784`。 +- 测试：UniDesk 28/28、314 assertions；HWLAB 定向 2/2；YAML/EOF/`git diff --check` 通过。 +- 报告写入前 PR preflight 为 `MERGEABLE/CLEAN`；报告提交推送后再次运行最终 preflight。 +- 合并后唯一交付链：GitHub webhook → Gitea controlled mirror/snapshot → PaC → Tekton → GitOps/Argo → runtime。 +- 若自动链不推进，必须修复自动链；禁止 `closeout/apply/trigger-current/sync/flush` 或裸 PipelineRun 手工补链。 diff --git a/docs/MDTODO/details/pac-source-pipeline-yaml-sync/R1_Task_Report.md b/docs/MDTODO/details/pac-source-pipeline-yaml-sync/R1_Task_Report.md new file mode 100644 index 00000000..6c91f219 --- /dev/null +++ b/docs/MDTODO/details/pac-source-pipeline-yaml-sync/R1_Task_Report.md @@ -0,0 +1,12 @@ +# R1 任务报告 + +- 问题：[HWLAB #2490](https://github.com/pikasTech/HWLAB/issues/2490)。 +- 交付：[HWLAB PR #2492](https://github.com/pikasTech/HWLAB/pull/2492)，目标分支 `v0.3`。 +- 生成 authority：UniDesk `b125fb358d466cb2fe931092d75c69c2b0d4e184` 的 owning YAML 与 `hwlab-runtime-lane` renderer。 +- desired canonical SHA-256：`sha256:3fb6e00ba833a30c0dd0ac51a67ebcc4a2494bc12f0fd74da41c9d42fc46ac38`。 +- effective config SHA-256：`sha256:1ccef7c0a86212f05e94de6179a2247d1f114f46f9f94442c8c48f6a2a473bdb`。 +- 生成物 SHA-256：PaC wrapper `4558e40f1470b36bbbf1c77d438675c6ca532441a6aa59aa5d8614035842c694`；Pipeline `54850119b10305ba67c85506bc0d086e2f787f780a181fc04e572e41767e7784`。 +- 验证：连续 write 收敛为 `mutation=false`；source `aligned=true`、`provenanceAligned=true`；YAML 单文档、单 EOF 换行与 `git diff --check` 通过。 +- 测试：UniDesk source-artifact 28/28、314 assertions；HWLAB PaC 结构合同 1/1；Kafka capability 合同 1/1。 +- 自动交付：仅允许 PR merge 后由 GitHub webhook → Gitea controlled mirror/snapshot → PaC → Tekton → GitOps/Argo → runtime 自动推进。 +- 禁止项：不得用 `closeout`、`apply`、`trigger-current`、手工 `sync`、`flush` 或裸 PipelineRun 补链。