Files
gongxue-base/docs/refactor/production-launch-evidence.template.json
2026-07-12 19:26:57 +08:00

687 lines
30 KiB
JSON

{
"schemaVersion": 1,
"environment": "production",
"releaseTargets": [
"h5"
],
"artifactIntegrityNote": "Every check must record artifactSha256. Generate it with sha256sum or shasum -a 256; launch gate rejects missing, empty, or hash-mismatched artifacts. The H5 release manifest also records full-directory treeSha256 values, which deployment verifies against the candidate release.",
"commit": "replace-with-deployed-git-sha",
"target": {
"apiBaseUrl": "replace-with-real-production-api-https-url",
"studentH5Url": "replace-with-real-production-student-h5-https-url",
"tenantAdminH5Url": "replace-with-real-production-tenant-admin-h5-https-url",
"platformAdminH5Url": "replace-with-real-production-platform-admin-h5-https-url"
},
"liveH5": {
"releaseManifestArtifact": "launch-artifacts/taro-h5-release-manifest.json",
"releaseManifestSha256": "replace-with-64-char-sha256"
},
"checks": [
{
"id": "readiness.production.env",
"status": "pass",
"command": "npm run readiness:production -- --json > docs/refactor/launch-artifacts/readiness-production.json",
"completedAt": "2026-06-30T10:00:00+08:00",
"artifact": "launch-artifacts/readiness-production.json",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"blocker": 0
}
},
{
"id": "readiness.production.db",
"status": "pass",
"command": "npm run readiness:production:db -- --json > docs/refactor/launch-artifacts/readiness-production-db.json",
"completedAt": "2026-06-30T10:05:00+08:00",
"artifact": "launch-artifacts/readiness-production-db.json",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"blocker": 0
}
},
{
"id": "db.migration-history",
"status": "pass",
"command": "node -e \"const fs=require('fs'),crypto=require('crypto');const source='docs/refactor/launch-artifacts/readiness-production-db.json';const bytes=fs.readFileSync(source);const readiness=JSON.parse(bytes);const check=readiness.checks.find(item=>item.id==='db.migrations.current'&&item.status==='pass');if(!check)throw new Error('readiness db.migrations.current pass evidence is missing');const d=check.details||{};const payload={schemaVersion:1,status:'pass',failed:0,latestRepositoryMigration:String(d.expectedVersion||''),latestAppliedMigration:String(d.latestAppliedVersion||''),missingMigrations:d.expectedVersionApplied===true?[]:[String(d.expectedVersion||'')],readinessArtifactSha256:crypto.createHash('sha256').update(bytes).digest('hex')};fs.writeFileSync('docs/refactor/launch-artifacts/db-migration-history.json',JSON.stringify(payload,null,2)+'\\n')\"",
"completedAt": "2026-06-30T10:06:00+08:00",
"artifact": "launch-artifacts/db-migration-history.json",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"schemaVersion": 1,
"status": "pass",
"failed": 0,
"latestRepositoryMigration": "replace-with-repository-latest-migration-version",
"latestAppliedMigration": "replace-with-production-latest-applied-migration-version",
"missingMigrations": [],
"readinessArtifactSha256": "replace-with-64-char-sha256"
}
},
{
"id": "postgres.tuning-evidence",
"status": "pass",
"command": "PG_TUNING_PROFILE=shared-host npm run perf:postgres:evidence -- --strict --json > docs/refactor/launch-artifacts/postgres-tuning-evidence.json",
"completedAt": "2026-06-30T10:08:00+08:00",
"artifact": "launch-artifacts/postgres-tuning-evidence.json",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"status": "pass",
"profile": "shared-host",
"failures": 0,
"pgStatStatementsAvailable": true,
"pendingRestart": 0
}
},
{
"id": "auth.remote-smoke",
"status": "pass",
"command": "AUTH_SMOKE_REQUIRE_ADMIN_TOKENS=true npm run smoke:auth:remote > docs/refactor/launch-artifacts/auth-remote-smoke.log && echo 'TIKU_LAUNCH_GATE_SUCCESS:auth.remote-smoke' >> docs/refactor/launch-artifacts/auth-remote-smoke.log",
"completedAt": "2026-06-30T10:10:00+08:00",
"artifact": "launch-artifacts/auth-remote-smoke.log",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"failed": 0,
"requireAdminTokens": true
}
},
{
"id": "auth.platform-admin-bootstrap",
"status": "pass",
"command": "Run npm run bootstrap:platform-admin dry-run, then npm run bootstrap:platform-admin -- --apply --confirm BOOTSTRAP_FIRST_PLATFORM_ADMIN, verify the platform.admin.bootstrapped audit event, and run npm run smoke:auth:remote with AUTH_SMOKE_EXPECTED_PLATFORM_ADMIN_USER_ID set to the same Auth identity; save the three raw artifacts and generate this redacted summary with SHA-256 identity bindings",
"completedAt": "2026-06-30T10:10:30+08:00",
"artifact": "launch-artifacts/platform-admin-bootstrap.json",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"schemaVersion": 1,
"status": "pass",
"failed": 0,
"dryRunVerified": true,
"applied": true,
"adminUserIdSha256": "replace-with-sha256-of-bootstrap-auth-user-uuid",
"authSmokeExpectedUserIdSha256": "replace-with-same-sha256",
"identityMatches": true,
"auditEvent": "platform.admin.bootstrapped",
"auditVerified": true,
"dryRunArtifactSha256": "replace-with-64-char-sha256",
"applyArtifactSha256": "replace-with-64-char-sha256",
"authSmokeArtifactSha256": "replace-with-64-char-sha256",
"auditArtifactSha256": "replace-with-64-char-sha256"
}
},
{
"id": "auth.sms-pnvs-diagnostics",
"status": "pass",
"command": "PNVS_TENANT_ID=00000000-0000-0000-0000-000000000001 npm run diagnose:aliyun-pnvs > docs/refactor/launch-artifacts/sms-pnvs-diagnostics.json",
"completedAt": "2026-06-30T10:11:00+08:00",
"artifact": "launch-artifacts/sms-pnvs-diagnostics.json",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"ok": true,
"env": {
"providerMatchesPnvs": true
},
"provider": {
"found": true,
"provider": "aliyun-pnvs",
"status": "active",
"publicConfig": {
"templateParamHasCodePlaceholder": true
}
},
"secret": {
"found": true,
"accessKeyIdLength": 16,
"accessKeySecretLength": 32
}
}
},
{
"id": "auth.sms-pnvs-remote-smoke",
"status": "pass",
"command": "SMS_SMOKE_API_BASE_URL=https://api.example.com SMS_SMOKE_TENANT_ID=00000000-0000-0000-0000-000000000001 SMS_SMOKE_PHONE=replace-with-real-phone SMS_SMOKE_ORIGIN=https://admin.example.com npm run smoke:sms-login:remote -- --write docs/refactor/launch-artifacts/sms-pnvs-remote-smoke.json",
"completedAt": "2026-06-30T10:12:00+08:00",
"artifact": "launch-artifacts/sms-pnvs-remote-smoke.json",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"failed": 0,
"provider": "aliyun-pnvs",
"loginVerified": true,
"authMe": true
}
},
{
"id": "rls.tenant-isolation",
"status": "pass",
"command": "DATABASE_URL=<isolated-production-schema-clone-url> npm run test:rls > docs/refactor/launch-artifacts/rls-tenant-isolation.log && echo 'TIKU_LAUNCH_GATE_SUCCESS:rls.tenant-isolation' >> docs/refactor/launch-artifacts/rls-tenant-isolation.log",
"completedAt": "2026-06-30T10:20:00+08:00",
"artifact": "launch-artifacts/rls-tenant-isolation.log",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"failed": 0,
"databaseEnvironment": "ci",
"databaseSource": "isolated-production-schema-or-sanitized-snapshot-clone"
}
},
{
"id": "db.tenant-foreign-key-audit",
"status": "pass",
"command": "DATABASE_URL=<isolated-production-schema-clone-url> npm run audit:tenant-foreign-keys -- --confirm=SMOKE_SEED_LOCAL_OR_CI_ONLY --write=docs/refactor/launch-artifacts/tenant-foreign-key-audit.json",
"completedAt": "2026-06-30T10:25:00+08:00",
"artifact": "launch-artifacts/tenant-foreign-key-audit.json",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"status": "pass",
"kind": "tenant-foreign-key-audit",
"safety": {
"databaseEnvironment": "ci"
},
"schema": {
"schemaMatches": true,
"relationCount": 189,
"exceptionCount": 3
},
"data": {
"auditedRelations": 189,
"invalidRelations": 0
}
}
},
{
"id": "migration.pb-production-dry-run",
"status": "pass",
"command": "npm run pb:import:dry-run -- --profile=production --json --fail-on-warnings > docs/refactor/launch-artifacts/pb-production-dry-run.json",
"completedAt": "2026-06-30T10:30:00+08:00",
"artifact": "launch-artifacts/pb-production-dry-run.json",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"blocker": 0,
"warning": 0,
"migrationProfile": "production",
"requiredCollectionsMissing": 0,
"criticalFieldCoverageWarnings": 0
}
},
{
"id": "migration.pb-import-validate",
"status": "pass",
"command": "FAIL_ON_WARNINGS=true npm run pb:import:validate > docs/refactor/launch-artifacts/pb-import-validate.log && echo 'TIKU_LAUNCH_GATE_SUCCESS:migration.pb-import-validate' >> docs/refactor/launch-artifacts/pb-import-validate.log",
"completedAt": "2026-06-30T10:40:00+08:00",
"artifact": "launch-artifacts/pb-import-validate.log",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"fail": 0
}
},
{
"id": "migration.pb-import-sample",
"status": "pass",
"command": "PB_SAMPLE_WRITE_REPORT=true npm run pb:import:sample > docs/refactor/launch-artifacts/pb-import-sample.log && echo 'TIKU_LAUNCH_GATE_SUCCESS:migration.pb-import-sample' >> docs/refactor/launch-artifacts/pb-import-sample.log",
"completedAt": "2026-06-30T10:45:00+08:00",
"artifact": "launch-artifacts/pb-import-sample.log",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"fail": 0,
"warn": 0,
"skip": 0,
"pass": 0
}
},
{
"id": "performance.api-real-data-read",
"status": "pass",
"command": "PERF_START_SERVER=false PERF_API_BASE=https://api.example.com PERF_DURATION_SECONDS=300 PERF_CONCURRENCY=30 PERF_RAMP_SECONDS=30 PERF_INCLUDE_WRITES=false npm run perf:api:local > docs/refactor/launch-artifacts/api-real-data-read-benchmark.log && echo 'TIKU_LAUNCH_GATE_SUCCESS:performance.api-real-data-read' >> docs/refactor/launch-artifacts/api-real-data-read-benchmark.log",
"completedAt": "2026-06-30T10:48:00+08:00",
"artifact": "launch-artifacts/api-real-data-read-benchmark.log",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"errors": 0,
"errorRate": 0,
"p95Ms": 0,
"p99Ms": 0,
"concurrency": 30,
"durationSeconds": 300,
"includeWrites": false
}
},
{
"id": "performance.api-real-data-mixed",
"status": "pass",
"command": "PERF_START_SERVER=false PERF_API_BASE=https://api.example.com PERF_DURATION_SECONDS=120 PERF_CONCURRENCY=50 PERF_RAMP_SECONDS=15 PERF_INCLUDE_WRITES=true PERF_PRACTICE_FLOW_RATIO=0.1 PERF_AUTH_MODE=app_session npm run perf:api:local > docs/refactor/launch-artifacts/api-real-data-mixed-benchmark.log && echo 'TIKU_LAUNCH_GATE_SUCCESS:performance.api-real-data-mixed' >> docs/refactor/launch-artifacts/api-real-data-mixed-benchmark.log",
"completedAt": "2026-06-30T10:49:00+08:00",
"artifact": "launch-artifacts/api-real-data-mixed-benchmark.log",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"errors": 0,
"errorRate": 0,
"p95Ms": 0,
"p99Ms": 0,
"concurrency": 50,
"durationSeconds": 120,
"includeWrites": true
}
},
{
"id": "performance.tenant-students-100k",
"status": "pass",
"command": "output_dir=$(mktemp -d) && DATABASE_URL=<target-spec-isolated-production-schema-clone-url> npm run perf:tenant-students:evidence -- --count=100000 --batch-size=10000 --iterations=20 --warmup-iterations=3 --output-dir=\"$output_dir\" --confirm=SMOKE_SEED_LOCAL_OR_CI_ONLY && cp \"$output_dir\"/tenant-student-capacity-*.json docs/refactor/launch-artifacts/tenant-student-capacity-100k.json",
"completedAt": "2026-06-30T10:49:10+08:00",
"artifact": "launch-artifacts/tenant-student-capacity-100k.json",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"databaseEnvironment": "test",
"fixture": {
"platformUsers": 100000,
"tenantMemberships": 100000,
"studentProfiles": 100000
},
"caseCount": 5,
"deepCursorApproximateOffset": 90000,
"firstPageP95Ms": 0,
"deepCursorP95Ms": 0,
"searchP95MaxMs": 0,
"keysetIndexUsed": true,
"trigramIndexUsed": true,
"cleanupVerified": true,
"remainingManagedUsers": 0
}
},
{
"id": "api.dynamic-tenant-cors-smoke",
"status": "pass",
"command": "TENANT_CORS_API_BASE_URL=https://api.example.com TENANT_CORS_ACTIVE_ORIGIN=https://active-tenant.example.com TENANT_CORS_DISABLED_ORIGIN=https://disabled-tenant.example.com TENANT_CORS_UNKNOWN_ORIGIN=https://unknown-tenant.example.com npm run smoke:tenant-cors:remote -- --write docs/refactor/launch-artifacts/tenant-cors-remote-smoke.json",
"completedAt": "2026-06-30T10:49:15+08:00",
"artifact": "launch-artifacts/tenant-cors-remote-smoke.json",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"failed": 0,
"activeTenantOriginAllowed": true,
"unknownOriginDenied": true,
"disabledOriginDenied": true,
"noOriginHealthAllowed": true
}
},
{
"id": "deploy.linux-systemd-verify",
"status": "pass",
"command": "(systemd-analyze verify /etc/systemd/system/tiku-api.service /etc/systemd/system/tiku-worker@.service /etc/systemd/system/tiku-worker-job@.service /etc/systemd/system/tiku-worker-*.service /etc/systemd/system/tiku-worker-*.timer && systemctl is-active tiku-api.service tiku-workers.target && systemctl list-timers 'tiku-worker-*' --no-legend && echo 'TIKU_LAUNCH_GATE_SUCCESS:deploy.linux-systemd-verify') > docs/refactor/launch-artifacts/linux-systemd-verify.log",
"completedAt": "2026-06-30T10:49:20+08:00",
"artifact": "launch-artifacts/linux-systemd-verify.log",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"failed": 0,
"apiServiceActive": true,
"workerTargetActive": true,
"workerJobServices": 9,
"enabledTimers": 6
}
},
{
"id": "backup.restore-drill",
"status": "pass",
"command": "RESTORE_DRILL_VERIFY_COMMAND=<provider-specific-isolated-restore-and-integrity-command> && eval \"$RESTORE_DRILL_VERIFY_COMMAND\" > docs/refactor/launch-artifacts/backup-restore-verification.log && node -e \"const fs=require('fs'),crypto=require('crypto');const required=name=>{const value=String(process.env[name]||'').trim();if(!value)throw new Error(name+' is required');return value};const number=name=>{const value=Number(required(name));if(!Number.isFinite(value)||value<0)throw new Error(name+' must be non-negative');return value};const verification=fs.readFileSync('docs/refactor/launch-artifacts/backup-restore-verification.log');const payload={schemaVersion:1,status:'pass',failed:0,snapshotId:required('RESTORE_DRILL_SNAPSHOT_ID'),restoreTarget:required('RESTORE_DRILL_TARGET'),isolated:true,integrityVerified:true,rtoMinutes:number('RESTORE_DRILL_RTO_MINUTES'),rpoMinutes:number('RESTORE_DRILL_RPO_MINUTES'),verificationArtifactSha256:crypto.createHash('sha256').update(verification).digest('hex')};fs.writeFileSync('docs/refactor/launch-artifacts/backup-restore-drill.json',JSON.stringify(payload,null,2)+'\\n')\"",
"completedAt": "2026-06-30T10:49:25+08:00",
"artifact": "launch-artifacts/backup-restore-drill.json",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"schemaVersion": 1,
"status": "pass",
"failed": 0,
"snapshotId": "replace-with-provider-snapshot-or-backup-id",
"restoreTarget": "replace-with-isolated-restore-target",
"isolated": true,
"integrityVerified": true,
"rtoMinutes": 0,
"rpoMinutes": 0,
"verificationArtifactSha256": "replace-with-64-char-sha256"
}
},
{
"id": "api.launch-persona-smoke",
"status": "pass",
"command": "LAUNCH_SMOKE_AUTH_MODE=app_session npm run smoke:launch-persona -- --write docs/refactor/launch-artifacts/launch-persona-smoke.json --write-md docs/refactor/launch-artifacts/launch-persona-smoke.md > docs/refactor/launch-artifacts/launch-persona-smoke.log",
"completedAt": "2026-06-30T10:49:30+08:00",
"artifact": "launch-artifacts/launch-persona-smoke.json",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"status": "pass",
"authMode": "app_session",
"student": {
"status": "pass",
"result": {
"entitlement": {
"isSvip": true
},
"practice": {
"questionCount": 3
},
"favorite": {
"favoriteCount": 1,
"reviewSessionId": "replace-with-favorite-review-session-id"
},
"wrongReview": {
"reviewPlanCount": 0
}
}
},
"tenantAdmin": {
"status": "pass",
"result": {
"guards": {
"studentDashboardDenied": "TENANT_ADMIN_REQUIRED",
"crossTenantDenied": "AUTH_TENANT_MISMATCH"
}
}
},
"platformAdmin": {
"status": "pass",
"result": {
"guards": {
"studentPlatformDenied": "PLATFORM_ADMIN_REQUIRED"
}
}
}
}
},
{
"id": "api.integration",
"status": "pass",
"command": "npm run test:api > docs/refactor/launch-artifacts/api-integration.log && echo 'TIKU_LAUNCH_GATE_SUCCESS:api.integration' >> docs/refactor/launch-artifacts/api-integration.log",
"completedAt": "2026-06-30T10:50:00+08:00",
"artifact": "launch-artifacts/api-integration.log",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"failed": 0
}
},
{
"id": "worker.assets",
"status": "pass",
"command": "npm run test:worker:assets > docs/refactor/launch-artifacts/worker-assets.log && echo 'TIKU_LAUNCH_GATE_SUCCESS:worker.assets' >> docs/refactor/launch-artifacts/worker-assets.log",
"completedAt": "2026-06-30T11:00:00+08:00",
"artifact": "launch-artifacts/worker-assets.log",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"failed": 0
}
},
{
"id": "worker.commerce",
"status": "pass",
"command": "npm run test:worker:commerce > docs/refactor/launch-artifacts/worker-commerce.log && echo 'TIKU_LAUNCH_GATE_SUCCESS:worker.commerce' >> docs/refactor/launch-artifacts/worker-commerce.log",
"completedAt": "2026-06-30T11:10:00+08:00",
"artifact": "launch-artifacts/worker-commerce.log",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"failed": 0
}
},
{
"id": "worker.platform-billing",
"status": "pass",
"command": "npm run test:worker:platform-billing > docs/refactor/launch-artifacts/worker-platform-billing.log && echo 'TIKU_LAUNCH_GATE_SUCCESS:worker.platform-billing' >> docs/refactor/launch-artifacts/worker-platform-billing.log",
"completedAt": "2026-06-30T11:15:00+08:00",
"artifact": "launch-artifacts/worker-platform-billing.log",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"failed": 0
}
},
{
"id": "worker.platform-dunning",
"status": "pass",
"command": "npm run test:worker:platform-dunning > docs/refactor/launch-artifacts/worker-platform-dunning.log && echo 'TIKU_LAUNCH_GATE_SUCCESS:worker.platform-dunning' >> docs/refactor/launch-artifacts/worker-platform-dunning.log",
"completedAt": "2026-06-30T11:18:00+08:00",
"artifact": "launch-artifacts/worker-platform-dunning.log",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"failed": 0
}
},
{
"id": "worker.imports",
"status": "pass",
"command": "npm run test:worker:imports > docs/refactor/launch-artifacts/worker-imports.log && echo 'TIKU_LAUNCH_GATE_SUCCESS:worker.imports' >> docs/refactor/launch-artifacts/worker-imports.log",
"completedAt": "2026-06-30T11:20:00+08:00",
"artifact": "launch-artifacts/worker-imports.log",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"failed": 0
}
},
{
"id": "worker.public-banks",
"status": "pass",
"command": "npm run test:worker:public-banks > docs/refactor/launch-artifacts/worker-public-banks.log && echo 'TIKU_LAUNCH_GATE_SUCCESS:worker.public-banks' >> docs/refactor/launch-artifacts/worker-public-banks.log",
"completedAt": "2026-06-30T11:30:00+08:00",
"artifact": "launch-artifacts/worker-public-banks.log",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"failed": 0
}
},
{
"id": "taro.check",
"status": "pass",
"command": "npm run check:taro > docs/refactor/launch-artifacts/taro-check.log && echo 'TIKU_LAUNCH_GATE_SUCCESS:taro.check' >> docs/refactor/launch-artifacts/taro-check.log",
"completedAt": "2026-06-30T11:40:00+08:00",
"artifact": "launch-artifacts/taro-check.log",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"failed": 0
}
},
{
"id": "taro.supply-chain",
"status": "pass",
"command": "npm --silent run audit:taro:supply-chain -- --json > docs/refactor/launch-artifacts/taro-supply-chain.json",
"completedAt": "2026-06-30T11:45:00+08:00",
"artifact": "launch-artifacts/taro-supply-chain.json",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"schemaVersion": 1,
"status": "pass-with-reviewed-toolchain-risk",
"securedBundleDependencies": {
"swiper": "12.1.2",
"lodash-es": "4.18.1"
},
"audit": {
"counts": {
"critical": 3,
"high": 10
}
},
"reviewedInvalidEdgeCount": 4,
"riskBoundaryPresent": true,
"riskControlCount": 4
}
},
{
"id": "taro.build.student",
"status": "pass",
"command": "npm run build:taro:h5:student > docs/refactor/launch-artifacts/taro-build-student.log && echo 'TIKU_LAUNCH_GATE_SUCCESS:taro.build.student' >> docs/refactor/launch-artifacts/taro-build-student.log",
"completedAt": "2026-06-30T11:50:00+08:00",
"artifact": "launch-artifacts/taro-build-student.log",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"failed": 0
}
},
{
"id": "taro.build.tenant",
"status": "pass",
"command": "npm run build:taro:h5:tenant > docs/refactor/launch-artifacts/taro-build-tenant.log && echo 'TIKU_LAUNCH_GATE_SUCCESS:taro.build.tenant' >> docs/refactor/launch-artifacts/taro-build-tenant.log",
"completedAt": "2026-06-30T12:00:00+08:00",
"artifact": "launch-artifacts/taro-build-tenant.log",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"failed": 0
}
},
{
"id": "taro.build.platform",
"status": "pass",
"command": "npm run build:taro:h5:platform > docs/refactor/launch-artifacts/taro-build-platform.log && echo 'TIKU_LAUNCH_GATE_SUCCESS:taro.build.platform' >> docs/refactor/launch-artifacts/taro-build-platform.log",
"completedAt": "2026-06-30T12:10:00+08:00",
"artifact": "launch-artifacts/taro-build-platform.log",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"failed": 0
}
},
{
"id": "taro.h5-static-smoke",
"status": "pass",
"command": "npm --silent run smoke:taro:h5 -- --json > docs/refactor/launch-artifacts/taro-h5-static-smoke.json",
"completedAt": "2026-06-30T12:12:00+08:00",
"artifact": "launch-artifacts/taro-h5-static-smoke.json",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"fail": 0,
"portals": 3,
"tenantResolveRequests": 3
}
},
{
"id": "taro.h5-interaction-smoke",
"status": "pass",
"command": "npm --silent run smoke:taro:h5:interaction -- --json > docs/refactor/launch-artifacts/taro-h5-interaction-smoke.json",
"completedAt": "2026-06-30T12:13:00+08:00",
"artifact": "launch-artifacts/taro-h5-interaction-smoke.json",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"fail": 0,
"pass": 32,
"mockApi": {
"keyRequests": {
"answers": 1,
"favorites": 2,
"ordersCreated": 1,
"paymentsCreated": 1,
"orderStatus": 1,
"tenantResolve": 3,
"tenantContentWrites": 1,
"tenantAdminWrites": 1,
"crmWrites": 1,
"commissionWrites": 1,
"platformAdminWrites": 1
}
}
}
},
{
"id": "taro.h5-release-guardrails",
"status": "pass",
"command": "node scripts/taro-h5-release-guardrails-test.js --require-dist --require-runtime-config --json > docs/refactor/launch-artifacts/taro-h5-release-guardrails.json",
"completedAt": "2026-06-30T12:15:00+08:00",
"artifact": "launch-artifacts/taro-h5-release-guardrails.json",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"fail": 0,
"warn": 0
}
},
{
"id": "taro.h5-release-manifest",
"status": "pass",
"command": "npm --silent run manifest:taro:h5 -- --require-dist --require-runtime-config --json --write docs/refactor/launch-artifacts/taro-h5-release-manifest.json > docs/refactor/launch-artifacts/taro-h5-release-manifest.stdout.json",
"completedAt": "2026-06-30T12:16:00+08:00",
"artifact": "launch-artifacts/taro-h5-release-manifest.json",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"fail": 0,
"warn": 0,
"portals": 3,
"distReady": 3,
"runtimeConfigs": 3,
"treeHashes": 3
}
},
{
"id": "audit.runtime",
"status": "pass",
"command": "npm run audit:runtime > docs/refactor/launch-artifacts/audit-runtime.log && echo 'TIKU_LAUNCH_GATE_SUCCESS:audit.runtime' >> docs/refactor/launch-artifacts/audit-runtime.log",
"completedAt": "2026-06-30T12:20:00+08:00",
"artifact": "launch-artifacts/audit-runtime.log",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"critical": 0,
"high": 0
}
},
{
"id": "security.repo-scan",
"status": "pass",
"command": "npm run security:repo -- --json > docs/refactor/launch-artifacts/repo-security-scan.json",
"completedAt": "2026-06-30T12:22:00+08:00",
"artifact": "launch-artifacts/repo-security-scan.json",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"critical": 0,
"high": 0
}
},
{
"id": "security.codex-scan",
"status": "replace-with-pass-after-real-scan",
"command": "Run the real @codex-security scan only when the tool is exposed; save findings to docs/refactor/launch-artifacts/codex-security.md and append a final line TIKU_LAUNCH_GATE_SUCCESS:security.codex-scan only after the scan exits successfully",
"completedAt": "replace-with-real-scan-time",
"artifact": "launch-artifacts/codex-security.md",
"artifactSha256": "replace-with-64-char-sha256",
"summary": {
"critical": "replace-with-number",
"high": "replace-with-number"
}
}
],
"attestations": [
{
"id": "backup.snapshot",
"status": "approved",
"approver": "replace-with-owner",
"approvedAt": "2026-06-30T13:00:00+08:00",
"notes": "Production database backup/snapshot ID and restore test notes."
},
{
"id": "rollback.plan",
"status": "approved",
"approver": "replace-with-owner",
"approvedAt": "2026-06-30T13:05:00+08:00",
"notes": "Old PocketBase read-only snapshot, DNS rollback path and responsible people are confirmed."
},
{
"id": "migration.sampling",
"status": "approved",
"approver": "replace-with-owner",
"approvedAt": "2026-06-30T13:10:00+08:00",
"notes": "Real users, questions, orders, entitlements, assets and learning records sampled; pb:import:sample warnings, skips and manual review rows have owner-approved handling conclusions."
},
{
"id": "provider.production-accounts",
"status": "approved",
"approver": "replace-with-owner",
"approvedAt": "2026-06-30T13:15:00+08:00",
"notes": "Aliyun/Tencent SMS, WeChat/QQ OAuth, WeChat Pay and Alipay callbacks verified."
},
{
"id": "object-storage.production-controls",
"status": "approved",
"approver": "replace-with-owner",
"approvedAt": "2026-06-30T13:20:00+08:00",
"notes": "AV/content scanner, CDN anti-leeching, watermark, lifecycle and private asset access sampled."
},
{
"id": "payment.reconciliation-sampling",
"status": "approved",
"approver": "replace-with-owner",
"approvedAt": "2026-06-30T13:25:00+08:00",
"notes": "Real payment/refund bills sampled and reconciliation differences handled."
},
{
"id": "frontend.runtime-config-review",
"status": "approved",
"approver": "replace-with-owner",
"approvedAt": "2026-06-30T13:30:00+08:00",
"notes": "Student, tenant-admin and platform-admin runtime-config.json contain public values only."
}
]
}