@umacloud/knowledge 1.0.16 → 1.0.18

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (123) hide show
  1. package/00-governance/governance-capabilities.md +1 -1
  2. package/00-governance/knowledge-map.md +4 -6
  3. package/ai/01-standards/app-runtime-model-configurable.md +76 -0
  4. package/ai/agent-evaluation-benchmark.md +4 -6
  5. package/ai/ai-agent-memory-context-management.md +4 -6
  6. package/ai/ai-cost-capacity-optimization-playbook.md +4 -6
  7. package/ai/ai-data-security-and-compliance-playbook.md +4 -6
  8. package/ai/ai-domain-index-and-checklist.md +4 -6
  9. package/ai/ai-governance-maturity-model.md +4 -6
  10. package/ai/ai-model-selection-and-routing-strategy.md +4 -6
  11. package/ai/ai-observability-and-oncall-runbook.md +4 -6
  12. package/ai/ai-rag-engineering-playbook.md +4 -6
  13. package/ai/ai-red-team-and-safety-evaluation.md +4 -6
  14. package/ai/ai-release-readiness-and-rollback-gate.md +4 -6
  15. package/ai/llm-agent-engineering-deep-dive.md +4 -6
  16. package/ai/prompt-and-tool-guardrails.md +4 -6
  17. package/architecture/02-playbooks/migration-playbook.md +0 -4
  18. package/architecture/02-playbooks/system-design-playbook.md +0 -4
  19. package/architecture/adr-template-and-examples.md +4 -6
  20. package/architecture/api-gateway-deep-dive.md +1 -1
  21. package/architecture/distributed-transactions.md +1 -1
  22. package/architecture/microservices-complete.md +1 -1
  23. package/architecture/service-governance.md +1 -1
  24. package/architecture/system-architecture-deep-dive.md +4 -6
  25. package/backend/01-standards/cjk-in-exports-and-documents.md +107 -0
  26. package/backend/01-standards/django-complete.md +2 -2
  27. package/backend/01-standards/nestjs-complete.md +23 -23
  28. package/cicd/cicd-blueprint-deep-dive.md +4 -6
  29. package/cloud-native/01-standards/container-security.md +0 -4
  30. package/cloud-native/01-standards/kubernetes-complete.md +0 -4
  31. package/cloud-native/02-playbooks/gitops-with-argocd.md +0 -4
  32. package/cloud-native/02-playbooks/k8s-troubleshooting-playbook.md +2 -6
  33. package/cloud-native/02-playbooks/multicloud-governance.md +0 -4
  34. package/cloud-native/02-playbooks/serverless-patterns.md +0 -4
  35. package/cloud-native/02-playbooks/service-mesh-playbook.md +0 -4
  36. package/cloud-native/03-checklists/container-security-checklist.md +0 -4
  37. package/cloud-native/03-checklists/k8s-production-readiness-checklist.md +0 -4
  38. package/cloud-native/04-antipatterns/container-antipatterns.md +0 -4
  39. package/cloud-native/04-antipatterns/k8s-antipatterns.md +0 -4
  40. package/cloud-native/05-cases/case-k8s-migration.md +0 -4
  41. package/cloud-native/05-cases/case-k8s-scaling.md +0 -4
  42. package/cloud-native/05-cases/case-k8s-security-incident.md +0 -4
  43. package/cloud-native/06-glossary/cloud-native-glossary.md +0 -4
  44. package/data/01-standards/elasticsearch-complete.md +2 -2
  45. package/data/01-standards/postgresql-complete.md +8 -8
  46. package/data/01-standards/redis-complete.md +11 -11
  47. package/data/data-governance-and-modeling-deep-dive.md +4 -6
  48. package/data-engineering/01-standards/kafka-complete.md +22 -22
  49. package/design/ui-full-lifecycle-cross-platform-playbook.md +1 -1
  50. package/design/ux-system-deep-dive.md +4 -6
  51. package/design-systems/00-craft-rules.md +1 -1
  52. package/design-systems/bold-geometric.md +1 -1
  53. package/design-systems/brutalist-bold.md +1 -1
  54. package/design-systems/editorial-clean.md +1 -1
  55. package/design-systems/glass-aurora.md +1 -1
  56. package/design-systems/modern-minimal.md +1 -1
  57. package/design-systems/premium-luxury.md +1 -1
  58. package/design-systems/soft-warm.md +1 -1
  59. package/design-systems/tech-utility.md +1 -1
  60. package/development/00-governance/document-template.md +3 -3
  61. package/development/01-standards/golang-complete.md +2 -2
  62. package/development/01-standards/python-design-patterns.md +2 -2
  63. package/development/01-standards/typescript-advanced-types.md +2 -2
  64. package/development/09-maturity/quarterly-audit-template.md +3 -5
  65. package/development/11-ui-excellence/ui-aesthetic-system.md +3 -5
  66. package/development/13-implementation-assets/knowledge-gates-execution.md +3 -5
  67. package/development/api-contract-and-versioning-guide.md +4 -6
  68. package/development/api-governance-complete.md +4 -6
  69. package/development/backend-engineering-complete.md +4 -6
  70. package/development/concurrency-reliability-complete.md +4 -6
  71. package/development/database-engineering-complete.md +4 -6
  72. package/development/engineering-effectiveness-complete.md +4 -6
  73. package/development/engineering-standards-deep-dive.md +4 -6
  74. package/development/frontend-engineering-complete.md +4 -6
  75. package/development/performance-capacity-complete.md +4 -6
  76. package/development/refactor-migration-complete.md +4 -6
  77. package/development/refactoring-and-techdebt-playbook.md +4 -6
  78. package/development/security-in-development-complete.md +4 -6
  79. package/devops/01-standards/docker-complete.md +2 -2
  80. package/devops/01-standards/terraform-complete.md +3 -3
  81. package/frontend/01-standards/i18n-and-localization.md +1 -1
  82. package/frontend/01-standards/react-hooks-complete.md +33 -33
  83. package/frontend/01-standards/vue3-complete.md +2 -2
  84. package/high-quality-engineering-playbook.md +4 -6
  85. package/incident/02-playbooks/chaos-engineering-playbook.md +0 -4
  86. package/incident/postmortem-and-response-deep-dive.md +4 -6
  87. package/mobile/01-standards/flutter-complete.md +2 -7
  88. package/mobile/01-standards/react-native-complete.md +2 -7
  89. package/mobile/02-playbooks/mobile-performance.md +2 -8
  90. package/mobile/03-checklists/mobile-release-checklist.md +2 -4
  91. package/mobile/04-antipatterns/mobile-antipatterns.md +2 -4
  92. package/operations/01-standards/prometheus-monitoring-complete.md +2 -2
  93. package/operations/aiops-anomaly-detection.md +4 -8
  94. package/operations/capacity-planning.md +4 -8
  95. package/operations/chaos-engineering.md +4 -8
  96. package/operations/incident-command-system.md +4 -6
  97. package/operations/observability-complete.md +4 -8
  98. package/operations/slo-sli-playbook.md +4 -8
  99. package/operations/sre-operations-deep-dive.md +4 -6
  100. package/package.json +1 -1
  101. package/product/feature-prioritization-framework.md +97 -35
  102. package/product/kpi-and-metric-tree.md +69 -26
  103. package/product/product-discovery-and-prd-deep-dive.md +4 -6
  104. package/security/01-standards/owasp-top10-complete.md +2 -2
  105. package/security/02-playbooks/incident-response-security-playbook.md +0 -4
  106. package/security/02-playbooks/penetration-testing-playbook.md +0 -4
  107. package/security/compliance-automation.md +1 -1
  108. package/security/container-security.md +1 -1
  109. package/security/devsecops-complete.md +1 -1
  110. package/security/sast-dast-sca.md +1 -1
  111. package/security/secrets-management.md +1 -1
  112. package/security/security-architecture-deep-dive.md +4 -6
  113. package/security/threat-modeling-stride-playbook.md +4 -6
  114. package/seed-templates/auth-system.md +1 -1
  115. package/seed-templates/blog-content.md +1 -1
  116. package/seed-templates/dashboard.md +1 -1
  117. package/seed-templates/docs-site.md +1 -1
  118. package/seed-templates/e-commerce.md +1 -1
  119. package/seed-templates/saas-landing.md +1 -1
  120. package/seed-templates/settings-page.md +1 -1
  121. package/testing/02-playbooks/e2e-testing-playbook.md +0 -4
  122. package/testing/risk-based-test-matrix.md +75 -25
  123. package/testing/testing-strategy-deep-dive.md +4 -6
@@ -1,15 +1,13 @@
1
1
  ---
2
2
  id: high-quality-engineering-playbook
3
- title: high-quality-engineering-playbook
4
- domain: high-quality-engineering-playbook.md
3
+ title: 高质量工程知识库(Web 全栈版)
4
+ domain: development
5
5
  difficulty: intermediate
6
- tags: [engineering, high, high-quality-engineering-playbook.md, playbook, quality, 全栈版]
6
+ tags: [高质量工程, engineering, web全栈, 工程规范, 全栈, development, 商业级]
7
7
  quality_score: 70
8
8
  last_updated: 2026-06-15
9
9
  ---
10
- # high-quality-engineering-playbook
11
-
12
- ## 高质量工程知识库(Web 全栈版)
10
+ # 高质量工程知识库(Web 全栈版)
13
11
 
14
12
  ### 1. 目标与范围
15
13
  - 本知识库面向商业级 Web 应用,覆盖需求澄清、架构设计、交互体验、工程质量、上线运维与复盘。
@@ -11,10 +11,6 @@ quality_score: 70
11
11
  ---
12
12
 
13
13
  # 混沌工程作战手册
14
- # 功能:混沌工程全流程作战手册
15
- # 作用:指导团队安全地实施混沌实验以验证系统韧性
16
- # 创建时间:2026-03-28
17
- # 最后修改:2026-03-28
18
14
 
19
15
  ## 目标
20
16
 
@@ -1,16 +1,14 @@
1
1
  ---
2
2
  id: postmortem-and-response-deep-dive
3
- title: postmortem-and-response-deep-dive
3
+ title: 事故响应与复盘深度知识库
4
4
  domain: incident
5
- category: postmortem-and-response-deep-dive.md
5
+ category: 01-standards
6
6
  difficulty: intermediate
7
- tags: [and, deep, dive, incident, postmortem, response, 事故响应与复盘深度知识库]
7
+ tags: [事故响应, postmortem, 复盘, incident-response, 根因分析, incident]
8
8
  quality_score: 70
9
9
  last_updated: 2026-06-15
10
10
  ---
11
- # postmortem-and-response-deep-dive
12
-
13
- ## 事故响应与复盘深度知识库
11
+ # 事故响应与复盘深度知识库
14
12
 
15
13
  ### 目标
16
14
  - 把每次故障转化为可复用的组织能力,持续降低重复事故概率。
@@ -2,17 +2,15 @@
2
2
  title: Flutter 完整开发标准
3
3
  category: mobile/standards
4
4
  version: 1.0.0
5
- last_updated: 2026-03-20
6
- maintainer: Excellent()
5
+ last_updated: 2026-06-29
7
6
  knowledge_score: 9.3/10
8
7
  domain: mobile
9
8
  difficulty: intermediate
10
- quality_score: 70
9
+ quality_score: 83
11
10
  ---
12
11
 
13
12
  # Flutter 完整开发标准
14
13
 
15
- ## Flutter 完整开发标准
16
14
 
17
15
  ### 1. 架构与分层
18
16
  - 遵循 Clean Architecture 或 MVVM 模式。
@@ -79,7 +77,6 @@ quality_score: 70
79
77
 
80
78
  ### Widget 组件示例
81
79
  ```dart
82
- // 开发:Excellent()
83
80
  // 功能:用户头像组件
84
81
  // 作用:展示用户头像,支持默认头像和加载状态
85
82
  // 创建时间:2026-03-20
@@ -150,7 +147,6 @@ class UserAvatar extends StatelessWidget {
150
147
 
151
148
  ### 网络请求封装示例
152
149
  ```dart
153
- // 开发:Excellent()
154
150
  // 功能:API 客户端封装
155
151
  // 作用:统一管理网络请求,包含认证和错误处理
156
152
  // 创建时间:2026-03-20
@@ -230,7 +226,6 @@ final apiClient = ApiClient();
230
226
 
231
227
  ### 状态管理示例(Provider)
232
228
  ```dart
233
- // 开发:Excellent()
234
229
  // 功能:用户状态管理
235
230
  // 作用:管理用户登录状态和用户信息
236
231
  // 创建时间:2026-03-20
@@ -2,17 +2,15 @@
2
2
  title: React Native 完整开发标准
3
3
  category: mobile/standards
4
4
  version: 1.0.0
5
- last_updated: 2026-03-20
6
- maintainer: Excellent()
5
+ last_updated: 2026-06-29
7
6
  knowledge_score: 9.2/10
8
7
  domain: mobile
9
8
  difficulty: intermediate
10
- quality_score: 70
9
+ quality_score: 83
11
10
  ---
12
11
 
13
12
  # React Native 完整开发标准
14
13
 
15
- ## React Native 完整开发标准
16
14
 
17
15
  ### 1. 架构与分层
18
16
  - 业务层、展示层、数据层严格分离。
@@ -79,7 +77,6 @@ quality_score: 70
79
77
  ### TypeScript 组件示例
80
78
  ```typescript
81
79
  /**
82
- * 开发:Excellent()
83
80
  * 功能:用户头像组件
84
81
  * 作用:展示用户头像,支持默认头像和加载状态
85
82
  * 创建时间:2026-03-20
@@ -138,7 +135,6 @@ const styles = StyleSheet.create({
138
135
  ### 网络请求封装示例
139
136
  ```typescript
140
137
  /**
141
- * 开发:Excellent()
142
138
  * 功能:API 客户端封装
143
139
  * 作用:统一管理网络请求,包含认证和错误处理
144
140
  * 创建时间:2026-03-20
@@ -201,7 +197,6 @@ export const apiClient = new ApiClient();
201
197
  ### FlatList 优化示例
202
198
  ```typescript
203
199
  /**
204
- * 开发:Excellent()
205
200
  * 功能:用户列表组件
206
201
  * 作用:高性能渲染用户列表,支持下拉刷新和加载更多
207
202
  * 创建时间:2026-03-20
@@ -2,17 +2,15 @@
2
2
  title: 移动应用性能优化手册
3
3
  category: mobile/playbooks
4
4
  version: 1.0.0
5
- last_updated: 2026-03-20
6
- maintainer: Excellent()
5
+ last_updated: 2026-06-29
7
6
  knowledge_score: 9.0/10
8
7
  domain: mobile
9
8
  difficulty: intermediate
10
- quality_score: 70
9
+ quality_score: 83
11
10
  ---
12
11
 
13
12
  # 移动应用性能优化手册
14
13
 
15
- ## 移动应用性能优化手册
16
14
 
17
15
  ### 执行步骤
18
16
 
@@ -88,7 +86,6 @@ quality_score: 70
88
86
  #### React Native 优化
89
87
  ```typescript
90
88
  /**
91
- * 开发:Excellent()
92
89
  * 功能:优化 FlatList 性能
93
90
  * 作用:通过配置优化参数提升长列表渲染性能
94
91
  * 创建时间:2026-03-20
@@ -165,7 +162,6 @@ export default OptimizedList;
165
162
 
166
163
  #### Flutter 优化
167
164
  ```dart
168
- // 开发:Excellent()
169
165
  // 功能:优化 ListView 性能
170
166
  // 作用:通过 const 和 builder 提升长列表渲染性能
171
167
  // 创建时间:2026-03-20
@@ -231,7 +227,6 @@ class _ItemTile extends StatelessWidget {
231
227
  #### React Native 性能监控
232
228
  ```typescript
233
229
  /**
234
- * 开发:Excellent()
235
230
  * 功能:性能监控工具
236
231
  * 作用:记录和上报关键性能指标
237
232
  * 创建时间:2026-03-20
@@ -326,7 +321,6 @@ export const performanceMonitor = PerformanceMonitor.getInstance();
326
321
 
327
322
  #### Flutter 性能监控
328
323
  ```dart
329
- // 开发:Excellent()
330
324
  // 功能:性能监控工具
331
325
  // 作用:记录和上报关键性能指标
332
326
  // 创建时间:2026-03-20
@@ -2,17 +2,15 @@
2
2
  title: 移动应用发布检查清单
3
3
  category: mobile/checklists
4
4
  version: 1.0.0
5
- last_updated: 2026-03-20
6
- maintainer: Excellent()
5
+ last_updated: 2026-06-29
7
6
  knowledge_score: 9.1/10
8
7
  domain: mobile
9
8
  difficulty: intermediate
10
- quality_score: 70
9
+ quality_score: 85
11
10
  ---
12
11
 
13
12
  # 移动应用发布检查清单
14
13
 
15
- ## 移动应用发布检查清单
16
14
 
17
15
  ### 一、功能完整性检查
18
16
 
@@ -2,17 +2,15 @@
2
2
  title: 移动开发反模式库
3
3
  category: mobile/antipatterns
4
4
  version: 1.0.0
5
- last_updated: 2026-03-20
6
- maintainer: Excellent()
5
+ last_updated: 2026-06-29
7
6
  knowledge_score: 9.0/10
8
7
  domain: mobile
9
8
  difficulty: intermediate
10
- quality_score: 70
9
+ quality_score: 88
11
10
  ---
12
11
 
13
12
  # 移动开发反模式库
14
13
 
15
- ## 移动开发反模式库
16
14
 
17
15
  ### 1. 性能反模式
18
16
 
@@ -5,8 +5,8 @@ domain: operations
5
5
  category: 01-standards
6
6
  difficulty: intermediate
7
7
  tags: [complete, grafana仪表盘, kubernetes监控, monitoring, operations, prometheus, prometheus核心概念, promql查询语言]
8
- quality_score: 70
9
- last_updated: 2026-06-15
8
+ quality_score: 90
9
+ last_updated: 2026-06-29
10
10
  ---
11
11
  # Prometheus监控完整指南
12
12
 
@@ -1,18 +1,14 @@
1
1
  ---
2
2
  id: aiops-anomaly-detection
3
- title: aiops-anomaly-detection
3
+ title: AIOps 异常检测体系
4
4
  domain: operations
5
- category: aiops-anomaly-detection.md
5
+ category: 01-standards
6
6
  difficulty: intermediate
7
- tags: [aiops, anomaly, detection, operations, 告警降噪, 实施架构, 常见失败模式, 异常检测算法]
7
+ tags: [aiops, 异常检测, anomaly-detection, 告警降噪, 时序, 根因, operations]
8
8
  quality_score: 70
9
9
  last_updated: 2026-06-15
10
10
  ---
11
- # aiops-anomaly-detection
12
- # 功能:AIOps 异常检测实践指南
13
- # 作用:利用机器学习和 AI 技术自动化检测和诊断系统异常
14
- # 创建时间:2026-03-20
15
- # 最后修改:2026-03-20
11
+ # AIOps 异常检测体系
16
12
 
17
13
  ## 目标
18
14
  建立 AIOps 异常检测体系,通过机器学习算法自动识别系统异常、减少告警噪音、加速根因定位、实现智能运维。
@@ -1,18 +1,14 @@
1
1
  ---
2
2
  id: capacity-planning
3
- title: capacity-planning
3
+ title: 容量规划体系
4
4
  domain: operations
5
- category: capacity-planning.md
5
+ category: 01-standards
6
6
  difficulty: intermediate
7
- tags: [capacity, operations, planning, 容量规划报告, 容量规划流程, 当前状态, 执行摘要, 核心概念]
7
+ tags: [容量规划, capacity-planning, 资源预测, 扩容, 成本, operations]
8
8
  quality_score: 70
9
9
  last_updated: 2026-06-15
10
10
  ---
11
- # capacity-planning
12
- # 功能:容量规划实践指南
13
- # 作用:提供系统容量预测、规划和优化的完整方法论
14
- # 创建时间:2026-03-20
15
- # 最后修改:2026-03-20
11
+ # 容量规划体系
16
12
 
17
13
  ## 目标
18
14
  建立科学的容量规划体系,预测业务增长带来的资源需求,提前规划扩容,避免性能瓶颈和资源浪费,实现成本与性能的最优平衡。
@@ -1,18 +1,14 @@
1
1
  ---
2
2
  id: chaos-engineering
3
- title: chaos-engineering
3
+ title: 混沌工程实践
4
4
  domain: operations
5
- category: chaos-engineering.md
5
+ category: 01-standards
6
6
  difficulty: intermediate
7
- tags: [chaos, engineering, operations, 分钟, 实施流程, 实验信息, 实验概况, 核心原则]
7
+ tags: [混沌工程, chaos-engineering, 故障注入, 韧性, 演练, operations]
8
8
  quality_score: 70
9
9
  last_updated: 2026-06-15
10
10
  ---
11
- # chaos-engineering
12
- # 功能:混沌工程实践指南
13
- # 作用:通过主动注入故障验证系统韧性,提前发现和修复潜在问题
14
- # 创建时间:2026-03-20
15
- # 最后修改:2026-03-20
11
+ # 混沌工程实践
16
12
 
17
13
  ## 目标
18
14
  建立混沌工程实践体系,通过受控的故障注入实验,验证系统在生产环境真实负载下的韧性,提前发现和修复潜在问题,提升服务可靠性。
@@ -1,16 +1,14 @@
1
1
  ---
2
2
  id: incident-command-system
3
- title: incident-command-system
3
+ title: 事故指挥体系(ICS)手册
4
4
  domain: operations
5
- category: incident-command-system.md
5
+ category: 02-playbooks
6
6
  difficulty: intermediate
7
- tags: [command, incident, operations, system]
7
+ tags: [事故指挥, incident-command, ics, 应急响应, 值班, operations]
8
8
  quality_score: 70
9
9
  last_updated: 2026-06-15
10
10
  ---
11
- # incident-command-system
12
-
13
- ## 事故指挥体系(ICS)手册
11
+ # 事故指挥体系(ICS)手册
14
12
 
15
13
  ### 目标
16
14
  - 在生产事故中实现统一指挥、快速止损、清晰协同。
@@ -1,18 +1,14 @@
1
1
  ---
2
2
  id: observability-complete
3
- title: observability-complete
3
+ title: 可观测性完整知识库
4
4
  domain: operations
5
- category: observability-complete.md
5
+ category: 01-standards
6
6
  difficulty: intermediate
7
- tags: [complete, dashboard, observability, operations, 告警设计, 实施清单, 常见失败模式, 技术选型]
7
+ tags: [可观测性, observability, 监控, 追踪, 日志, 告警, operations]
8
8
  quality_score: 70
9
9
  last_updated: 2026-06-15
10
10
  ---
11
- # observability-complete
12
- # 功能:可观测性完整体系
13
- # 作用:提供日志、指标、追踪三大支柱的完整实施指南
14
- # 创建时间:2026-03-20
15
- # 最后修改:2026-03-20
11
+ # 可观测性完整知识库
16
12
 
17
13
  ## 目标
18
14
  建立生产环境全链路可观测能力,实现故障快速定位、性能瓶颈精准识别、用户体验量化评估。
@@ -1,18 +1,14 @@
1
1
  ---
2
2
  id: slo-sli-playbook
3
- title: slo-sli-playbook
3
+ title: SLO/SLI 实践手册
4
4
  domain: operations
5
- category: slo-sli-playbook.md
5
+ category: 02-playbooks
6
6
  difficulty: intermediate
7
- tags: [budget, operations, playbook, sli, slo, 实施流程, 核心概念, 目标]
7
+ tags: [slo, sli, 可靠性, 错误预算, error-budget, 服务质量, operations]
8
8
  quality_score: 70
9
9
  last_updated: 2026-06-15
10
10
  ---
11
- # slo-sli-playbook
12
- # 功能:SLO/SLI 实战手册
13
- # 作用:提供服务水平目标(SLO)和服务水平指标(SLI)的完整实施指南
14
- # 创建时间:2026-03-20
15
- # 最后修改:2026-03-20
11
+ # SLO/SLI 实践手册
16
12
 
17
13
  ## 目标
18
14
  建立以 SLO 为中心的可靠性工程体系,量化服务质量,平衡功能交付与稳定性,实现数据驱动的故障响应和容量规划。
@@ -1,16 +1,14 @@
1
1
  ---
2
2
  id: sre-operations-deep-dive
3
- title: sre-operations-deep-dive
3
+ title: 运维环节深度知识库
4
4
  domain: operations
5
- category: sre-operations-deep-dive.md
5
+ category: 01-standards
6
6
  difficulty: intermediate
7
- tags: [deep, dive, operations, sre, 运维环节深度知识库]
7
+ tags: [sre, 运维, 可观测, 应急, 容量, operations]
8
8
  quality_score: 70
9
9
  last_updated: 2026-06-15
10
10
  ---
11
- # sre-operations-deep-dive
12
-
13
- ## 运维环节深度知识库
11
+ # 运维环节深度知识库
14
12
 
15
13
  ### 目标
16
14
  - 构建可观测、可响应、可恢复的生产运行体系。
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@umacloud/knowledge",
3
- "version": "1.0.16",
3
+ "version": "1.0.18",
4
4
  "description": "UmaDev curated engineering knowledge corpus (standards, methodologies, expert playbooks, design systems, miniprogram/uniapp guides). Platform-independent data shipped once so npm users get the full KB offline.",
5
5
  "license": "MIT",
6
6
  "repository": { "type": "git", "url": "https://github.com/umacloud/umadev.git" },
@@ -1,40 +1,102 @@
1
1
  ---
2
2
  id: feature-prioritization-framework
3
- title: feature-prioritization-framework
3
+ title: 功能优先级决策框架(商业级必读)
4
4
  domain: product
5
- category: feature-prioritization-framework.md
5
+ category: 02-playbooks
6
6
  difficulty: intermediate
7
- tags: [feature, framework, prioritization, product]
8
- quality_score: 70
9
- last_updated: 2026-06-15
7
+ tags: [优先级, prioritization, 排期, roadmap, rice, kano, 价值成本矩阵, 决策门, 取舍, 需求评审, 产品, 商业级]
8
+ quality_score: 95
9
+ last_updated: 2026-06-29
10
10
  ---
11
- # feature-prioritization-framework
12
-
13
- ## 功能优先级决策框架(深度版)
14
-
15
- ### 目标
16
- - 统一需求排期口径,避免“拍脑袋优先级”导致资源浪费。
17
-
18
- ### 四维评分模型
19
- - 业务价值:是否直接推动收入、留存、效率提升。
20
- - 用户价值:是否解决高频痛点或关键任务阻塞。
21
- - 实现成本:研发、测试、运维、培训与迁移成本。
22
- - 风险敞口:合规、安全、稳定性、依赖不确定性。
23
-
24
- ### 评分规则
25
- - 每维 1-5 分,最终分数 = (业务价值+用户价值)×权重 - (实现成本+风险敞口)×权重。
26
- - 默认权重:业务价值0.35、用户价值0.25、实现成本0.2、风险0.2。
27
- - 分数相近时,以“减少关键链路风险”优先。
28
-
29
- ### 决策门禁
30
- - 涉及账号、支付、权限、数据导出功能时,风险评分必须由安全与运维双签。
31
- - 涉及跨系统变更时,必须有回滚方案与兼容策略。
32
- - 未给出可量化验收标准的需求不得进入开发。
33
-
34
- ### 输出模板
35
- - 需求名称
36
- - 预期业务影响
37
- - 用户受益群体
38
- - 估算工作量
39
- - 依赖项与风险
40
- - 发布策略与回滚方案
11
+
12
+ # 功能优先级决策框架(商业级必读)
13
+
14
+ > 优先级决定一个团队把有限的研发产能投到哪里——它比"做得好不好"更早、更致命地决定产品成败。最常见的失败不是把某个功能做砸,而是把整季产能投在低价值需求上。"拍脑袋排期""谁声音大做谁的""老板说的先做"都不是优先级方法,只是把决策责任藏起来。本框架把优先级从主观争论升级为**可复算、可追责、带门禁的决策**:每个需求都要有量化打分、验收标准、回滚策略,且高风险项必须双签。
15
+
16
+ ## 1. 先分类,再打分(不要对所有需求用同一把尺)
17
+
18
+ 打分前先用一个粗筛把需求分桶,避免把"救火"和"探索"放进同一个排序里:
19
+
20
+ | 类型 | 判定 | 处置 |
21
+ |---|---|---|
22
+ | **合规/安全/止血** | 不做会违法、泄露、资损或线上事故 | 不进打分队列,直接最高优先级排期 |
23
+ | **核心价值线** | 直接驱动北极星指标(激活/留存/收入/成本) | 进加权打分,主战场 |
24
+ | **体验/效率优化** | 改善现有任务流的成功率与耗时 | 进打分,与价值线竞争产能 |
25
+ | **探索/赌注** | 高不确定性、可能高回报 | 单独留固定产能比例(如 10–20%),不与确定性需求直接比分 |
26
+ | **债务/可维护性** | 不做会持续拖慢未来交付 | 量化"拖慢成本"后进打分,禁止长期归零 |
27
+
28
+ ## 2. 四维加权评分模型
29
+
30
+ 每个进入打分队列的需求按四维各 1–5 分,给出可复算的综合分。
31
+
32
+ | 维度 | 含义 | 1 分 | 5 分 | 默认权重 |
33
+ |---|---|---|---|---|
34
+ | 业务价值 | 对收入/留存/成本/战略的直接推动 | 几乎无关 | 直接撬动北极星指标 | 0.35 |
35
+ | 用户价值 | 解决痛点的频率 × 强度 | 边缘场景 | 高频关键任务阻塞 | 0.25 |
36
+ | 实现成本 | 研发+测试+运维+迁移+培训(反向计入) | 一周内 | 跨团队多季度 | 0.20 |
37
+ | 风险敞口 | 合规/安全/稳定性/依赖不确定性(反向计入) | 隔离可控 | 触及账号/支付/数据 | 0.20 |
38
+
39
+ `综合分 = (业务价值×0.35 + 用户价值×0.25) − (实现成本×0.20 + 风险敞口×0.20)`
40
+
41
+ - 权重不是固定的:早期产品调高用户价值,规模化阶段调高业务价值与风险;权重一旦定了,**整季不随单个需求改**,否则打分失去公信力。
42
+ - 分数相近(差值在 0.3 内)时,**以"减少关键链路风险/降低不确定性"优先**——先做能解锁后续决策的需求。
43
+ - 打分是输入不是判决:评审用分数聚焦讨论分歧最大的维度,而不是机械按分排期。
44
+
45
+ ## 3. 价值/成本四象限(快速版,用于粗排与对齐)
46
+
47
+ 当需求多、时间紧时,用二维矩阵先对齐方向,再对争议项做四维细打分。
48
+
49
+ | | 低成本 | 高成本 |
50
+ |---|---|---|
51
+ | **高价值** | 立即做(quick win) | 重点投入,需拆分里程碑 |
52
+ | **低价值** | 顺手做/批量清 | 不做或砍掉(最危险象限:高成本低价值) |
53
+
54
+ - 警惕"高成本低价值"象限——它最容易因为"已经投入了"而被沉没成本绑架。
55
+ - "高价值高成本"必须拆成可独立交付、可独立验证的里程碑,避免一次性大爆炸。
56
+
57
+ ## 4. 满意度模型:区分"必备"与"惊喜"
58
+
59
+ 同样高分的需求,对用户满意度的作用并不线性,排期时要区分:
60
+
61
+ - **必备型**:缺了就投诉、做到顶也只是"不扣分"(如登录稳定、支付不丢单)→ 必须满足基线,但不要过度打磨。
62
+ - **期望型**:投入与满意度线性相关 → 主战场,按四维分排。
63
+ - **惊喜型**:用户没预期,做到了显著加分 → 适合作为差异化赌注,但不能挤占必备型产能。
64
+
65
+ ## 5. 决策门禁(硬约束,不可绕过)
66
+
67
+ - 涉及**账号、支付、权限、数据导出/删除**的功能,风险评分必须由**安全 + 运维双签**方可进开发。
68
+ - 涉及**跨系统/跨团队**变更,必须附**回滚方案 + 向后兼容策略**,否则不予排期。
69
+ - **没有可量化验收标准**的需求不进开发队列("做个更好的搜索"不是需求,"搜索 P95 < 300ms 且 0 结果率 < 5%"才是)。
70
+ - 每个排期需求必须绑定**至少 1 个业务指标 + 1 个质量指标**,并预设上线后的验证窗口与下线条件。
71
+
72
+ ## 6. 输出模板(每个排期需求必须填全)
73
+
74
+ - 需求名称与一句话价值主张
75
+ - 预期业务影响(绑定哪个指标、预期幅度、衡量口径)
76
+ - 受益用户群体与触发场景频率
77
+ - 四维打分 + 综合分(含权重快照)
78
+ - 估算工作量与关键依赖
79
+ - 风险敞口与缓解措施(高风险需双签记录)
80
+ - 验收标准(可判定)+ 上线后验证窗口 + 回滚/下线条件
81
+ - 发布策略(灰度比例、放量节奏)
82
+
83
+ ## 反模式
84
+
85
+ - **拍脑袋优先级**:用职级、嗓门、最近一次会议决定排期,没有可复算的打分,事后无法追责。
86
+ - **权重随需求漂移**:为了让某个需求排上去临时改权重,打分体系沦为表演。
87
+ - **只算价值不算风险**:把账号/支付/权限类高风险需求当普通功能排,绕过双签,埋下资损与合规雷。
88
+ - **沉没成本绑架**:因为"已经做了一半"就继续投入高成本低价值项,而不是及时止损。
89
+ - **无验收标准入队**:需求描述模糊、没有可量化的成功定义,导致做完无法判断成败,也无法回滚。
90
+ - **探索与确定性混排**:把高不确定性赌注和确定性需求放进同一个排序,要么赌注永远排不上、要么挤垮基本盘。
91
+ - **必备型过度打磨**:在"做到顶也只是不扣分"的必备功能上投入惊喜型的产能。
92
+
93
+ ## 最低交付 checklist
94
+
95
+ - [ ] 所有候选需求已分桶(合规止血 / 核心价值 / 体验优化 / 探索 / 债务),止血类不进打分直接排期。
96
+ - [ ] 进队列需求均有四维打分 + 综合分,权重在本季度内固定且公开。
97
+ - [ ] 高成本需求已拆为可独立交付、可独立验证的里程碑。
98
+ - [ ] 账号/支付/权限/数据类需求已完成安全+运维双签并留痕。
99
+ - [ ] 跨系统变更均附回滚方案与向后兼容策略。
100
+ - [ ] 每个排期需求绑定 ≥1 业务指标 + ≥1 质量指标,并有可判定的验收标准。
101
+ - [ ] 探索类需求有独立产能配额,未挤占确定性基本盘。
102
+ - [ ] 排期结论与未采纳需求的理由均有记录,可向相关方解释。