 GaoYiYuan_0626
|
40a9ee21a6
|
fix: T-04 评审闭环——P1-1 留痕降级提 error 带定位字段/P1-2 对话越权接鉴权双写(utils/authz.py 下沉公共出口,deps 复用,service 不反向依赖 api)/P2 入参白名单+days 钳制[1,365]/list_holdings SQL LIMIT+truncated/时间窗集中 _now_naive; 补测 24 例(days 边界/非法入参/inactive 归属/双写断言/降级日志/上下文截断), 321 绿
|
2026-09-07 09:42:37 +08:00 |
|
|
GaoYiYuan_0626
|
3cec034026
|
feat: T-02 审计中间件——http_access 全量访问审计(auth 注入 request.state, 排障路径跳过, 写库失败降级) + 独立 request_id(X-Request-Id 白名单透传贯通, B7 复审 P3-4) + 422/404/405/500 统一错误体(500 由 trace 中间件兜底生成并回写 trace 头, B7 复审 P2-2) + input_guard_log 双写(deps 401/403 留痕, platform 网关跳过 ENUM 口径, 挂账⑧收口) + repo.insert_input_guard_log + tests/test_audit_middleware 12 例, 240 绿
|
2026-09-07 02:32:03 +08:00 |
|
|
GaoYiYuan_0626
|
fe29b736ea
|
fix: B7 复审 P1-1——dispose_engines 显式 Engine.dispose()(手写单例字典替代 lru_cache, test_db 3 例, 独立评审有条件通过→闭环)
|
2026-09-06 23:06:32 +08:00 |
|
|
GaoYiYuan_0626
|
6195349dd6
|
feat: main 集成(路由挂载/trace 中间件/lifespan) + B7 挂账收口(引擎工厂/统一错误体/锁公共化/L3 缓存 DEL/死代码清理/处置原子事务/启动期 debug 校验, B7)
|
2026-09-06 20:48:50 +08:00 |
|
|
GaoYiYuan_0626
|
e3fcf28b27
|
feat: 鉴权依赖(debug头/归属断言/越权审计) + 风控4 API(台账/处置/校验/AML扫描, B6)
|
2026-09-06 18:37:53 +08:00 |
|
|
GaoYiYuan_0626
|
03f8b63780
|
fix: FR-4 payload 上下文补组装/种子名单唯一命中/规则流水升序等(B4 评审 P1-1、P2-2~5、P3×7)
|
2026-09-06 17:40:13 +08:00 |
|
|
GaoYiYuan_0626
|
2f96f7c8e5
|
feat: trace 贯通与脱敏工具 + risk 阈值配置(A1)
|
2026-09-06 15:09:14 +08:00 |
|
 zhanghongyu_0626
|
0374010b37
|
Implement initial project structure and setup
|
2026-09-05 17:09:21 +08:00 |
|