 GaoYiYuan_0626
|
a78e9d4d31
|
fix: B6 复审收口——测试 Redis 隔离/网关审计口径 platform/死常量清理/回归断言补强
- P2: test_risk_api env 注入 FakePublisher,aml 推送不触真 Redis
- P3: deny/_authz_audit 增 agent_type 参数,simulate 越权审计传 platform
(与网关放行审计同口径);删 HANDLE_RESULTS 死常量(Literal 单处定义)
- P3: 补 start_date/end_date 过滤+分页 422 边界+suitability api 层审计断言;
补 app/service/risk/__init__.py
- 挂账: B7 行新增④项(启动期拒绝/引擎工厂覆盖三实例化点/handle 原子性/
input_guard_log);B9b 行核查单(disclaimer/scan 幂等/Swagger 手测/analyst);
TODO.md T-30/T-31/T-32 进度同步
|
2026-09-06 19:21:15 +08:00 |
|
|
GaoYiYuan_0626
|
3e40a2bb49
|
fix: B6 评审修复——鉴权审计统一 deny/401 留痕、start_date/end_date 对齐 PRD、simulate 回挂鉴权、异常与审计注入收敛
- P1-1: 403/401 全部经 deps.deny/_authz_audit 留痕(event_type='authz')
- P2-1: GET /alerts 参数名 start_date/end_date 对齐 PRD;page/page_size 用 fastapi.Query
- P2-2: /api/simulate/trade 回挂 get_auth_context(risk_demo 或本人),越权 403+审计
- P2-3: suitability/aml 直调补审计+request_ref 透传
- P3-1: 多角色 fail-closed 口径固化进测试;P3-3/P3-4 core_ro/risk_repo 必传;
P3-5 LookupError→NotFoundError 统一;P3-9 alert_service import 上提
- 测试: test_risk_api 权限矩阵/审计断言/多角色组合/非 dev 拒绝;
test_trade_gateway 客户本人 vs 越权 403(P3-4 模拟 _repo 注入 sqlite)
- 挂账: P3-2/P3-7(响应外壳+disclaimer)→B7;P3-6(scan 幂等)→B9b 前
|
2026-09-06 18:58:48 +08:00 |
|
|
GaoYiYuan_0626
|
e3fcf28b27
|
feat: 鉴权依赖(debug头/归属断言/越权审计) + 风控4 API(台账/处置/校验/AML扫描, B6)
|
2026-09-06 18:37:53 +08:00 |
|
|
GaoYiYuan_0626
|
46a1f24870
|
fix: 引擎异常审计降级/审计全量输入输出/TRD-TEST 注入点(B5 评审 P1-1、P2-1~3、P3 批量)
|
2026-09-06 18:17:44 +08:00 |
|
|
GaoYiYuan_0626
|
2a95b65ec8
|
feat: 模拟交易网关(suitability 阻断→落库→引擎, convert 400, B5)
|
2026-09-06 18:05:44 +08:00 |
|
|
GaoYiYuan_0626
|
03f8b63780
|
fix: FR-4 payload 上下文补组装/种子名单唯一命中/规则流水升序等(B4 评审 P1-1、P2-2~5、P3×7)
|
2026-09-06 17:40:13 +08:00 |
|
|
GaoYiYuan_0626
|
e8e5f7e981
|
feat: AML 名单匹配/全量扫描 + 事件引擎编排 + R-05 scoring 占位(B4)
|
2026-09-06 17:19:54 +08:00 |
|
|
GaoYiYuan_0626
|
65d4618968
|
refactor: L3 risk_score 一期不写保持 NULL,归 R-05 首写(B3 评审 P3-4 用户拍板)
|
2026-09-06 17:04:38 +08:00 |
|
|
GaoYiYuan_0626
|
026c4ce75c
|
fix: L3 乐观锁防丢更新/last_alert_id 保留语义/竞态日志(B3 评审 P1-1、P2-1~5)
|
2026-09-06 16:42:18 +08:00 |
|
|
GaoYiYuan_0626
|
1f4217899d
|
feat: L3 画像最小写入 profile_l3(最高档合并防降级 + 并发首单兜底, B3)
|
2026-09-06 16:26:04 +08:00 |
|
|
GaoYiYuan_0626
|
645092d7ad
|
fix: FakePublisher 对齐 publisher 契约(dict 入参,实现方序列化)
|
2026-09-06 15:49:25 +08:00 |
|
|
GaoYiYuan_0626
|
6f38c9b129
|
feat: 预警聚合/去重/审计/PubSub 推送 alert_service(B2)
|
2026-09-06 15:44:34 +08:00 |
|
|
GaoYiYuan_0626
|
19c72b9b0d
|
feat: 风控规则纯函数 RISK-001~005(B1)
|
2026-09-06 15:40:55 +08:00 |
|
|
GaoYiYuan_0626
|
98b1fba695
|
fix: 评审修复——SUIT-008 配置贯通/精确规则编号 rule_id/trace 兜底/request_ref 透传/测试补强
|
2026-09-06 15:37:05 +08:00 |
|
|
GaoYiYuan_0626
|
3c07de67b7
|
feat: suitability 公共校验服务(SUIT-001~008) + AuthContext 模型冻结(A4)
|
2026-09-06 15:18:35 +08:00 |
|
|
GaoYiYuan_0626
|
4eb8b462cd
|
feat: risk_repository 风控四表读写(A3)
|
2026-09-06 15:15:51 +08:00 |
|
|
GaoYiYuan_0626
|
fdf0c9675f
|
feat: core_ro 扩展当日申赎合计查询 sum_trades_on_date(A2)
|
2026-09-06 15:11:01 +08:00 |
|
|
GaoYiYuan_0626
|
2f96f7c8e5
|
feat: trace 贯通与脱敏工具 + risk 阈值配置(A1)
|
2026-09-06 15:09:14 +08:00 |
|