49 lines
2.5 KiB
Markdown
49 lines
2.5 KiB
Markdown
|
# 规划设计对齐验证报告（Checkpoint-20 / TOK-REAL-002 审计查询与差距复审）
|
|||
|
|
|
|||
|
|
- 日期：2026-03-30
|
|||
|
|
- 触发条件：补齐 token 审计查询能力并更新 TOK-REAL 差距结论
|
|||
|
|
|
|||
|
|
## 1. 结论
|
|||
|
|
|
|||
|
|
结论：**开发阶段对齐通过。token 审计查询能力已并入实现与契约，M-021 指标覆盖从 9 项扩展到 12 项且全部通过。**
|
|||
|
|
|
|||
|
|
## 2. 对齐范围
|
|||
|
|
|
|||
|
|
1. `platform-token-runtime/internal/auth/service/token_verifier.go`
|
|||
|
|
2. `platform-token-runtime/internal/auth/service/inmemory_runtime.go`
|
|||
|
|
3. `platform-token-runtime/internal/httpapi/token_api.go`
|
|||
|
|
4. `platform-token-runtime/internal/httpapi/token_api_test.go`
|
|||
|
|
5. `docs/platform_token_api_contract_openapi_draft_v1_2026-03-29.yaml`
|
|||
|
|
6. `sql/postgresql/token_runtime_schema_v1.sql`
|
|||
|
|
7. `scripts/ci/token_runtime_readiness_check.sh`
|
|||
|
|
8. `scripts/ci/superpowers_stage_validate.sh`
|
|||
|
|
9. `scripts/ci/superpowers_release_pipeline.sh`
|
|||
|
|
10. `reports/gates/token_runtime_readiness_2026-03-30_173728.md`
|
|||
|
|
11. `reports/gates/superpowers_stage_validation_2026-03-30_173726.md`
|
|||
|
|
12. `reports/gates/superpowers_release_pipeline_2026-03-30_173726.md`
|
|||
|
|
13. `reports/token_runtime_implementation_gap_review_2026-03-30.md`
|
|||
|
|
|
|||
|
|
## 3. 核查结果
|
|||
|
|
|
|||
|
|
| 核查项 | 结果 | 证据 |
|
|||
|
|
|---|---|---|
|
|||
|
|
| 审计查询接口已落地（代码） | PASS | `token_api.go`（`/api/v1/platform/tokens/audit-events`） |
|
|||
|
|
| 审计查询接口已落地（契约） | PASS | `platform_token_api_contract_openapi_draft_v1_2026-03-29.yaml` |
|
|||
|
|
| 审计查询能力具备可执行测试 | PASS | `token_api_test.go` |
|
|||
|
|
| token 运行态持久化表结构工件存在 | PASS | `sql/postgresql/token_runtime_schema_v1.sql` |
|
|||
|
|
| M-021 检查项扩展后仍 100% | PASS | `token_runtime_readiness_2026-03-30_173728.md`（13/13） |
|
|||
|
|
| 阶段门禁与总控流水复跑通过 | PASS | `superpowers_stage_validation_2026-03-30_173726.md` + `superpowers_release_pipeline_2026-03-30_173726.md` |
|
|||
|
|
| TOK-REAL 差距结论已更新为“开发收敛+联调待闭环” | PASS | `token_runtime_implementation_gap_review_2026-03-30.md` |
|
|||
|
|
|
|||
|
|
## 4. 限制与说明
|
|||
|
|
|
|||
|
|
1. 真实 staging 凭证仍未就绪，PHASE-07 继续 DEFERRED。
|
|||
|
|
2. 因存在真实联调缺口，发布结论仍不得上调为生产 `GO`。
|
|||
|
|
3. 本轮只关闭开发阶段能力缺口，不替代真实环境验收。
|
|||
|
|
|
|||
|
|
## 5. 下一步
|
|||
|
|
|
|||
|
|
1. 进入真实联调窗口后执行 staging 全链路复跑并回填。
|
|||
|
|
2. 更新最终签署稿中 M-021 与 TOK-REAL 风险状态。
|
|||
|
|
3. 将 token 审计查询结果并入安全看板与取证流程（租户/主体维度）。
|