create-yss-spec 3.4.5 → 3.4.7

package/template/docs/engineering/backend-platforms.json

@@ -1,5 +1,5 @@
 {
-  "schema_version": 1,
+  "schema_version": 2,
   "kind": "backend-platform-catalog",
   "profiles": [
     {
@@ -33,7 +33,8 @@
         "YSS parent/BOM/starter combination and real Maven/startup evidence required"
       ],
       "spring_cloud_line": "2021.0",
-      "openfeign_line": "3.1"
+      "openfeign_line": "3.1",
+      "component_platform_line": "boot2-java8"
     },
     {
       "id": "spring-boot-3.5-jdk17",
@@ -63,10 +64,15 @@
         "surefire": "3.5.4"
       },
       "candidate_blockers": [
-        "YSS parent/BOM/starter combination and real Maven/startup evidence required"
+        "YSS parent/BOM/starter combination and real Maven/startup evidence required",
+        "component-evidence-missing: Boot 3/JDK17 candidate artifacts, exact resolution metadata, AutoConfiguration.imports and DDD/MVC evidence are not published"
       ],
       "spring_cloud_line": "2025.0",
-      "openfeign_line": "4.3"
+      "openfeign_line": "4.3",
+      "component_platform_line": "boot3-java17",
+      "spring_cloud_version": "2025.0.3",
+      "spring_cloud_alibaba_version": "2025.0.0.0",
+      "auto_configuration_imports_path": "META-INF/spring/org.springframework.boot.autoconfigure.AutoConfiguration.imports"
     },
     {
       "id": "spring-boot-3.5-jdk21",
@@ -96,10 +102,12 @@
         "surefire": "3.5.4"
       },
       "candidate_blockers": [
-        "YSS parent/BOM/starter combination and real Maven/startup evidence required"
+        "YSS parent/BOM/starter combination and real Maven/startup evidence required",
+        "component-unavailable-for-platform: no YSS Jakarta/Boot-specific component artifacts are registered for this profile"
       ],
       "spring_cloud_line": "2025.0",
-      "openfeign_line": "4.3"
+      "openfeign_line": "4.3",
+      "component_platform_line": "boot3-java17"
     },
     {
       "id": "spring-boot-4.1-jdk17",
@@ -129,7 +137,8 @@
         "surefire": "3.5.4"
       },
       "candidate_blockers": [
-        "YSS parent/BOM/starter combination and real Maven/startup evidence required"
+        "YSS parent/BOM/starter combination and real Maven/startup evidence required",
+        "component-unavailable-for-platform: no YSS Jakarta/Boot-specific component artifacts are registered for this profile"
       ],
       "spring_cloud_line": "2025.1",
       "openfeign_line": "5.0",
@@ -163,12 +172,656 @@
         "surefire": "3.5.4"
       },
       "candidate_blockers": [
-        "YSS parent/BOM/starter combination and real Maven/startup evidence required"
+        "YSS parent/BOM/starter combination and real Maven/startup evidence required",
+        "component-unavailable-for-platform: no YSS Jakarta/Boot-specific component artifacts are registered for this profile"
       ],
       "spring_cloud_line": "2025.1",
       "openfeign_line": "5.0",
       "spring_cloud_minimum": "2025.1.2"
     }
   ],
-  "compatibility": []
+  "compatibility": [
+    {
+      "id": "yss-cloud-microservice-2.0.0-snapshot-boot-2.7-jdk8",
+      "profile_id": "spring-boot-2.7-jdk8",
+      "spring_boot_version": "2.7.18",
+      "parent": {
+        "group_id": "com.yss.cloud",
+        "artifact_id": "yss-cloud-microservice",
+        "version": "2.0.0-SNAPSHOT"
+      },
+      "bom": {
+        "group_id": "com.yss.cloud",
+        "artifact_id": "yss-components-bom",
+        "version": "2.0.0-SNAPSHOT"
+      },
+      "status": "blocked",
+      "capabilities": [],
+      "component_capabilities": {
+        "contract.dto-wire": {
+          "status": "blocked",
+          "verified_architectures": [],
+          "artifacts": [
+            {
+              "group_id": "com.yss.cloud",
+              "artifact_id": "yss-component-dto",
+              "declared_version": "2.0.0-SNAPSHOT",
+              "resolved_version": "2.0.0-20260916.162843-1",
+              "pom_sha256": "sha256:5653ee0785cc005efa9dfb626a00bc43a26c411f78a87da3c2efaa2fbac7c181",
+              "jar_sha256": "sha256:65d05ae596242fb683f29938d0d5f0247a445ff4a24cb03618f14622b41fa5a3",
+              "source_tree": "3add70b98d26f6534a4ebf7d9b09d74790ea60a5"
+            }
+          ],
+          "evidence": [],
+          "blockers": [
+            "component-evidence-missing: domain-driven and layered-mvc consuming-application certification is not recorded"
+          ],
+          "component_digest": "sha256:b66bef9e19909e82c582cddbe1d259fd76f5477fb7c01551c295edb782fb22b6",
+          "platform_line": "boot2-java8",
+          "lifecycle": "active",
+          "adoption_policy": "allowed"
+        },
+        "contract.request-validation": {
+          "status": "blocked",
+          "verified_architectures": [],
+          "artifacts": [
+            {
+              "group_id": "com.yss.cloud",
+              "artifact_id": "yss-component-validation-jsr303",
+              "declared_version": "2.0.0-SNAPSHOT",
+              "resolved_version": "2.0.0-20260916.163229-1",
+              "pom_sha256": "sha256:f0aef77e7b1f9e853cc7527b3977d29410cf7f953c3f19691ff6d788791b2a48",
+              "jar_sha256": "sha256:5a3a73e3ddd24cceb23ddd27680107952ac3cb030bd36ef1db243dacb0bedcc1",
+              "source_tree": "fe5b36afb474afa41541fe1187a6828bdae080dc"
+            }
+          ],
+          "evidence": [],
+          "blockers": [
+            "component-new-adoption-forbidden: validation is platform-managed; migrate to spring-boot-starter-validation",
+            "component-evidence-missing: domain-driven and layered-mvc consuming-application certification is not recorded"
+          ],
+          "component_digest": "sha256:5ec5fbac65d34914e62be351a2b1b808e47165c75385452771b7e6bc9a6fed14",
+          "platform_line": "boot2-java8",
+          "lifecycle": "deprecated",
+          "adoption_policy": "forbidden",
+          "replacement_gav": "org.springframework.boot:spring-boot-starter-validation"
+        },
+        "contract.error-mapping": {
+          "status": "blocked",
+          "verified_architectures": [],
+          "artifacts": [
+            {
+              "group_id": "com.yss.cloud",
+              "artifact_id": "yss-component-exception",
+              "declared_version": "2.0.0-SNAPSHOT",
+              "resolved_version": "2.0.0-20260916.162932-1",
+              "pom_sha256": "sha256:d51a60e37a97a686c295bb1d5001b376e939698eac256eb6b8cd4eee55ae68b3",
+              "jar_sha256": "sha256:520363b8ced9df0c6a664a6abb5eec6439818ccae0d92de77184d229e64b6732",
+              "source_tree": "e5d71e213f26cd7e52d419ded1c2f5e7b7fbf40b"
+            }
+          ],
+          "evidence": [],
+          "blockers": [
+            "component-binding-drift: resolved artifact binds the fixed source commit and does not include the current hardening candidate",
+            "component-evidence-missing: domain-driven and layered-mvc consuming-application certification is not recorded"
+          ],
+          "component_digest": "sha256:1e37fc04a5a8ac5583d4ed0713263afce8d45003c22cd74b42efe7d3163dde48",
+          "platform_line": "boot2-java8",
+          "lifecycle": "active",
+          "adoption_policy": "allowed"
+        },
+        "framework.mybatis": {
+          "status": "blocked",
+          "verified_architectures": [],
+          "artifacts": [
+            {
+              "group_id": "com.yss.cloud",
+              "artifact_id": "yss-component-mybatis-plus-starter",
+              "declared_version": "2.0.0-SNAPSHOT",
+              "resolved_version": "2.0.0-20260916.162918-1",
+              "pom_sha256": "sha256:51e036bc15fcf79e38c5656d056731c78385750adf700bcf885d7a0954bb9ff9",
+              "jar_sha256": "sha256:bdb2a477bef0825e2bc668c242f83e75b72f6ee5d9f34b3edfdb887481ff2a05",
+              "source_tree": "03e29e6d74cf0b2bc8e4b879f7252766fb607356"
+            }
+          ],
+          "evidence": [],
+          "blockers": [
+            "component-evidence-missing: domain-driven and layered-mvc consuming-application certification is not recorded"
+          ],
+          "component_digest": "sha256:46ab69b46b413d7f7f09eec237db829b39da9e5585724b171e29222945a61951",
+          "platform_line": "boot2-java8",
+          "lifecycle": "active",
+          "adoption_policy": "allowed"
+        },
+        "component.cache": {
+          "status": "blocked",
+          "verified_architectures": [],
+          "artifacts": [
+            {
+              "group_id": "com.yss.cloud",
+              "artifact_id": "yss-component-cache-starter",
+              "declared_version": "3.0.0-SNAPSHOT",
+              "resolved_version": "3.0.0-20260916.163035-1",
+              "pom_sha256": "sha256:55b57d85d2b21fe4ec3ca2536631b4a0c850a06a891e9104f620e9b8160b8bda",
+              "jar_sha256": "sha256:1631b4e5bc64d0d59727f3988366962c4bbc9fc368581f359e89aed757fe10c2",
+              "source_tree": null
+            }
+          ],
+          "evidence": [],
+          "blockers": [
+            "component-platform-generation-mismatch: component 3.x is reserved for Boot 3/JDK 17 and cannot bind to the Boot 2/JDK 8 line",
+            "component-artifact-coordinate-conflict: source module is 3.0.0-SNAPSHOT while yss-components-bom 2.0.0-SNAPSHOT manages 2.0.0-SNAPSHOT",
+            "component-evidence-missing: resolved artifact lacks a verified published-source-to-Git-tree binding",
+            "component-evidence-missing: domain-driven and layered-mvc consuming-application certification is not recorded"
+          ],
+          "component_digest": "sha256:740a5402670577a3e2b49a5337bb4957df23572fbf5e05261426fcaccca98df2",
+          "platform_line": "boot2-java8",
+          "lifecycle": "active",
+          "adoption_policy": "allowed"
+        },
+        "component.current-user-context": {
+          "status": "blocked",
+          "verified_architectures": [],
+          "artifacts": [
+            {
+              "group_id": "com.yss.cloud",
+              "artifact_id": "yss-component-userinfo-starter",
+              "declared_version": "2.0.0-SNAPSHOT",
+              "resolved_version": "2.0.0-20260916.163623-1",
+              "pom_sha256": "sha256:a56c3ed0e65f96ab81f8ebca378b70ad684b0c78e7a83e661aa5cef8912dbe0c",
+              "jar_sha256": "sha256:cf85f2c6528c06adb296dd9c050b954fa33e6316fb22cdb2c57db5a59acf10c9",
+              "source_tree": "fc77d57e0be6ee81b10247c0746baed6a09c6bb4"
+            }
+          ],
+          "evidence": [],
+          "blockers": [
+            "component-artifact-coordinate-conflict: source module inherits com.yss.cloud while yss-components-bom records com.yss.datamiddle",
+            "component-binding-drift: resolved artifact binds the fixed source commit and does not include the current hardening candidate",
+            "component-evidence-missing: domain-driven and layered-mvc consuming-application certification is not recorded"
+          ],
+          "component_digest": "sha256:df6b3e1c7863cedaf38a46d15b99e9fa8676a94e172b78800131bf73bebcfb93",
+          "platform_line": "boot2-java8",
+          "lifecycle": "active",
+          "adoption_policy": "allowed"
+        },
+        "component.audit-log": {
+          "status": "blocked",
+          "verified_architectures": [],
+          "artifacts": [
+            {
+              "group_id": "com.yss.cloud",
+              "artifact_id": "yss-component-audit-log",
+              "declared_version": "2.0.0-SNAPSHOT",
+              "resolved_version": "2.0.0-20260916.163223-1",
+              "pom_sha256": "sha256:1eb2d2d1495ddc539e033c55a8cf4981427c9d054936a8dc09e794d81e5ddc9b",
+              "jar_sha256": "sha256:01dd17d7fdf10bf1eef04957d59cf74f3b3abf2fbcf9bba6a1719055a537fb44",
+              "source_tree": "d00f2e156714e43e8ec70b28e0bd33967d130485"
+            }
+          ],
+          "evidence": [],
+          "blockers": [
+            "component-evidence-missing: domain-driven and layered-mvc consuming-application certification is not recorded"
+          ],
+          "component_digest": "sha256:c4307432942253f2087e27b97e7d3027e1db5e9148b35c791b85a4be8c17be13",
+          "platform_line": "boot2-java8",
+          "lifecycle": "active",
+          "adoption_policy": "allowed"
+        },
+        "component.excel-import-export": {
+          "status": "blocked",
+          "verified_architectures": [],
+          "artifacts": [
+            {
+              "group_id": "com.yss.cloud",
+              "artifact_id": "yss-component-excel-starter",
+              "declared_version": "2.0.0-SNAPSHOT",
+              "resolved_version": "2.0.0-20260916.163244-1",
+              "pom_sha256": "sha256:f106de25eef3c6b4a83dd5a5558cfc2e906b5a210b917638f26289be4019f466",
+              "jar_sha256": "sha256:1d5523b7b134c1bf63094ab274fa8d79fbea7c4e752cf434ef4b43a25ed86ce3",
+              "source_tree": "82345616c26950981497f254c45bf0b2bc2077a8"
+            },
+            {
+              "group_id": "com.yss.cloud",
+              "artifact_id": "yss-component-excel-mvc",
+              "declared_version": "2.0.0-SNAPSHOT",
+              "resolved_version": "2.0.0-20260916.163630-1",
+              "pom_sha256": "sha256:fa6e8fb94edfc492e1b6da0814be266328c0f526347564797c3eaed8c8ca6a10",
+              "jar_sha256": "sha256:986f4c5441749bd6f4d076893460b17c3015f74d2296969c89441da7d74e3bf7",
+              "source_tree": "acc02f7747905f715708dfe029c3f66a8457e3a5"
+            }
+          ],
+          "evidence": [],
+          "blockers": [
+            "component-evidence-missing: domain-driven and layered-mvc consuming-application certification is not recorded"
+          ],
+          "component_digest": "sha256:e346ae4a4cbc292cf3e7ae0b79e2197b52cc5b094e5e49e13599c37bbf3a3621",
+          "platform_line": "boot2-java8",
+          "lifecycle": "active",
+          "adoption_policy": "allowed"
+        },
+        "component.distributed-id": {
+          "status": "blocked",
+          "verified_architectures": [],
+          "artifacts": [
+            {
+              "group_id": "com.yss.cloud",
+              "artifact_id": "yss-component-distributed-id",
+              "declared_version": "3.0.0-SNAPSHOT",
+              "resolved_version": "3.0.0-20260916.163140-1",
+              "pom_sha256": "sha256:0f43860eb182da2c82c6668c75436bff44e392279033bb5b24694a4e4ab63fb6",
+              "jar_sha256": "sha256:b22f0751d4fd6e465621e1743bae3452a66f8a648dc3e0aa2e74f8a0b75e71a8",
+              "source_tree": "ac54e61f980cfea3e0a574b0559b5fc6a6ccb9f6"
+            }
+          ],
+          "evidence": [],
+          "blockers": [
+            "component-platform-generation-mismatch: component 3.x is reserved for Boot 3/JDK 17 and cannot bind to the Boot 2/JDK 8 line",
+            "component-evidence-missing: domain-driven and layered-mvc consuming-application certification is not recorded"
+          ],
+          "component_digest": "sha256:1ec80b096146056ad78b331560834e1f0a7da66cee2a3c31dc42adaf9654e858",
+          "platform_line": "boot2-java8",
+          "lifecycle": "active",
+          "adoption_policy": "allowed"
+        },
+        "component.security-algorithm": {
+          "status": "blocked",
+          "verified_architectures": [],
+          "artifacts": [
+            {
+              "group_id": "com.yss.cloud",
+              "artifact_id": "yss-component-security-algorithm",
+              "declared_version": "2.0.0-SNAPSHOT",
+              "resolved_version": "2.0.0-20260916.163215-1",
+              "pom_sha256": "sha256:e839c11d06abd1c324cc9e6c56339cbd65b7aad6e3fe80ea882372671e6a5a8a",
+              "jar_sha256": "sha256:e0a10bb655c24bb10397e8c75579bcb2b38469a48efc363a101d526f486f7f2d",
+              "source_tree": "a28f507af00845909eef3ad6bdf8b716660f5b9d"
+            }
+          ],
+          "evidence": [],
+          "blockers": [
+            "component-new-adoption-forbidden: use Spring Security and an approved external KMS or Secret Provider",
+            "component-binding-drift: resolved artifact binds the fixed source commit and does not include the current hardening candidate",
+            "component-evidence-missing: domain-driven and layered-mvc consuming-application certification is not recorded"
+          ],
+          "component_digest": "sha256:c6551ee47fdc1ba3ca8265ef63e26b8c621615c6adb36dcd9feb7a719fae8694",
+          "platform_line": "boot2-java8",
+          "lifecycle": "deprecated",
+          "adoption_policy": "forbidden",
+          "replacement_gav": "org.springframework.security:spring-security-core"
+        },
+        "component.gateway-resilience": {
+          "status": "blocked",
+          "verified_architectures": [],
+          "artifacts": [
+            {
+              "group_id": "com.yss.cloud",
+              "artifact_id": "yss-component-resilience4j-starter",
+              "declared_version": "2.0.0-SNAPSHOT",
+              "resolved_version": "2.0.0-20260916.163208-1",
+              "pom_sha256": "sha256:a4410689d02120d34e1b08cdbf46c513bec07aca0b3b9b8cdba9cf9149b68a59",
+              "jar_sha256": "sha256:69b92bb710267f5fe5d73cb144462157aaaa250c05685beeae62ee8aa623c58c",
+              "source_tree": "10cdf49599161c77137cac47d047b23998aad75b"
+            }
+          ],
+          "evidence": [],
+          "blockers": [
+            "component-binding-drift: resolved artifact binds the fixed source commit and does not include the current hardening candidate",
+            "component-evidence-missing: domain-driven and layered-mvc consuming-application certification is not recorded"
+          ],
+          "component_digest": "sha256:904769eb74998c1fde8dfcc9629191df2c5f9ed936fac2ed6496337a8537b58e",
+          "platform_line": "boot2-java8",
+          "lifecycle": "active",
+          "adoption_policy": "allowed"
+        }
+      },
+      "evidence": [],
+      "artifact_resolution_evidence": {
+        "report_id": "aliyun-maven-artifact-resolution-2026-09-18",
+        "repository_id": "2306938-snapshot-Yloqmt",
+        "ref": ".template-source/evidence/maintenance/2026-09-18-yss-backend-components/aliyun-artifact-resolution.json",
+        "digest": "sha256:35a82e84eb93d35046900886affb806f3620b1416b4b097f67f42c658b676bca"
+      }
+    },
+    {
+      "id": "yss-cloud-microservice-3.0.0-snapshot-boot-3.5-jdk17",
+      "profile_id": "spring-boot-3.5-jdk17",
+      "spring_boot_version": "3.5.16",
+      "parent": {
+        "group_id": "com.yss.cloud",
+        "artifact_id": "yss-cloud-microservice",
+        "version": "3.0.0-SNAPSHOT"
+      },
+      "bom": {
+        "group_id": "com.yss.cloud",
+        "artifact_id": "yss-components-bom",
+        "version": "3.0.0-SNAPSHOT"
+      },
+      "status": "blocked",
+      "capabilities": [],
+      "component_capabilities": {
+        "contract.dto-wire": {
+          "status": "blocked",
+          "verified_architectures": [],
+          "artifacts": [
+            {
+              "group_id": "com.yss.cloud",
+              "artifact_id": "yss-component-dto",
+              "declared_version": "3.0.0-SNAPSHOT",
+              "resolved_version": null,
+              "pom_sha256": null,
+              "jar_sha256": null,
+              "source_tree": null
+            }
+          ],
+          "evidence": [],
+          "blockers": [
+            "component-evidence-missing: Boot 3/JDK 17 component 3.x artifacts, Jakarta namespace, AutoConfiguration.imports and DDD/MVC reports are not available"
+          ],
+          "component_digest": "sha256:9970b72c5081d552f0b6b4eb65aa290711e9fca88db55451e6ae700889d28a12",
+          "platform_line": "boot3-java17",
+          "lifecycle": "active",
+          "adoption_policy": "allowed"
+        },
+        "contract.error-mapping": {
+          "status": "blocked",
+          "verified_architectures": [],
+          "artifacts": [
+            {
+              "group_id": "com.yss.cloud",
+              "artifact_id": "yss-component-exception",
+              "declared_version": "3.0.0-SNAPSHOT",
+              "resolved_version": null,
+              "pom_sha256": null,
+              "jar_sha256": null,
+              "source_tree": null
+            }
+          ],
+          "evidence": [],
+          "blockers": [
+            "component-evidence-missing: Boot 3/JDK 17 component 3.x artifacts, Jakarta namespace, AutoConfiguration.imports and DDD/MVC reports are not available"
+          ],
+          "component_digest": "sha256:98f7ce8cae25562347ab6e3efde746fe9282a0b19d7c991eccbb8e5e98dee403",
+          "platform_line": "boot3-java17",
+          "lifecycle": "active",
+          "adoption_policy": "allowed"
+        },
+        "framework.mybatis": {
+          "status": "blocked",
+          "verified_architectures": [],
+          "artifacts": [
+            {
+              "group_id": "com.yss.cloud",
+              "artifact_id": "yss-component-mybatis-plus-starter",
+              "declared_version": "3.0.0-SNAPSHOT",
+              "resolved_version": null,
+              "pom_sha256": null,
+              "jar_sha256": null,
+              "source_tree": null
+            }
+          ],
+          "evidence": [],
+          "blockers": [
+            "component-evidence-missing: Boot 3/JDK 17 component 3.x artifacts, Jakarta namespace, AutoConfiguration.imports and DDD/MVC reports are not available"
+          ],
+          "component_digest": "sha256:28d682ba3ed2c86e6d49cd813e6d3e36fb87049673182b7d876483045b91241f",
+          "platform_line": "boot3-java17",
+          "lifecycle": "active",
+          "adoption_policy": "allowed"
+        },
+        "component.cache": {
+          "status": "blocked",
+          "verified_architectures": [],
+          "artifacts": [
+            {
+              "group_id": "com.yss.cloud",
+              "artifact_id": "yss-component-cache-starter",
+              "declared_version": "3.1.0-SNAPSHOT",
+              "resolved_version": null,
+              "pom_sha256": null,
+              "jar_sha256": null,
+              "source_tree": null
+            }
+          ],
+          "evidence": [],
+          "blockers": [
+            "component-evidence-missing: yss-component-cache-starter 3.1.0-SNAPSHOT resolved timestamp, POM/JAR SHA-256, source tree, AutoConfiguration.imports and DDD/MVC evidence are not published"
+          ],
+          "component_digest": "sha256:c57c6b6a2fae78d92f4c3101b9c51b8be8dd00e80a081cf45813bda67923b191",
+          "platform_line": "boot3-java17",
+          "lifecycle": "active",
+          "adoption_policy": "allowed"
+        },
+        "component.current-user-context": {
+          "status": "blocked",
+          "verified_architectures": [],
+          "artifacts": [
+            {
+              "group_id": "com.yss.cloud",
+              "artifact_id": "yss-component-userinfo-starter",
+              "declared_version": "3.0.0-SNAPSHOT",
+              "resolved_version": null,
+              "pom_sha256": null,
+              "jar_sha256": null,
+              "source_tree": null
+            }
+          ],
+          "evidence": [],
+          "blockers": [
+            "component-evidence-missing: Boot 3/JDK 17 component 3.x artifacts, Jakarta namespace, AutoConfiguration.imports and DDD/MVC reports are not available"
+          ],
+          "component_digest": "sha256:df0459c3aff3bb701d15cf557e6fc8a401700cb4c919799af760b2e179e2a02a",
+          "platform_line": "boot3-java17",
+          "lifecycle": "active",
+          "adoption_policy": "allowed"
+        },
+        "component.audit-log": {
+          "status": "blocked",
+          "verified_architectures": [],
+          "artifacts": [
+            {
+              "group_id": "com.yss.cloud",
+              "artifact_id": "yss-component-audit-log",
+              "declared_version": "3.0.0-SNAPSHOT",
+              "resolved_version": null,
+              "pom_sha256": null,
+              "jar_sha256": null,
+              "source_tree": null
+            }
+          ],
+          "evidence": [],
+          "blockers": [
+            "component-evidence-missing: Boot 3/JDK 17 component 3.x artifacts, Jakarta namespace, AutoConfiguration.imports and DDD/MVC reports are not available"
+          ],
+          "component_digest": "sha256:dc4a2478ceabf78f96b38f869552f2d2777ff7bbfa17973407b028ca5ca4752f",
+          "platform_line": "boot3-java17",
+          "lifecycle": "active",
+          "adoption_policy": "allowed"
+        },
+        "component.excel-import-export": {
+          "status": "blocked",
+          "verified_architectures": [],
+          "artifacts": [
+            {
+              "group_id": "com.yss.cloud",
+              "artifact_id": "yss-component-excel-mvc",
+              "declared_version": "3.0.0-SNAPSHOT",
+              "resolved_version": null,
+              "pom_sha256": null,
+              "jar_sha256": null,
+              "source_tree": null
+            }
+          ],
+          "evidence": [],
+          "blockers": [
+            "component-evidence-missing: yss-component-excel-mvc 3.0.0-SNAPSHOT resolved timestamp, POM/JAR SHA-256, source tree and DDD/MVC evidence are not published",
+            "component-evidence-missing: org.apache.fesod:fesod-sheet:2.0.2-incubating is byte-bound, but Excel consuming-application evidence is not recorded"
+          ],
+          "component_digest": "sha256:9ebc0322ef6cb941cb2ceb8ef31cdd07c905fc3b8a55f1ae1c460bf97a3eda11",
+          "platform_line": "boot3-java17",
+          "lifecycle": "active",
+          "adoption_policy": "allowed"
+        },
+        "component.distributed-id": {
+          "status": "blocked",
+          "verified_architectures": [],
+          "artifacts": [
+            {
+              "group_id": "com.yss.cloud",
+              "artifact_id": "yss-component-distributed-id",
+              "declared_version": "3.1.0-SNAPSHOT",
+              "resolved_version": null,
+              "pom_sha256": null,
+              "jar_sha256": null,
+              "source_tree": null
+            }
+          ],
+          "evidence": [],
+          "blockers": [
+            "component-evidence-missing: yss-component-distributed-id 3.1.0-SNAPSHOT resolved timestamp, POM/JAR SHA-256, source tree, AutoConfiguration.imports and DDD/MVC evidence are not published"
+          ],
+          "component_digest": "sha256:8348b9848a0da511a13f34f4680feccc477066eee3871ef087c3f12d97a44fa6",
+          "platform_line": "boot3-java17",
+          "lifecycle": "active",
+          "adoption_policy": "allowed"
+        },
+        "component.security-algorithm": {
+          "status": "blocked",
+          "verified_architectures": [],
+          "artifacts": [
+            {
+              "group_id": "com.yss.cloud",
+              "artifact_id": "yss-component-security-algorithm",
+              "declared_version": "3.0.0-SNAPSHOT",
+              "resolved_version": null,
+              "pom_sha256": null,
+              "jar_sha256": null,
+              "source_tree": null
+            }
+          ],
+          "evidence": [],
+          "blockers": [
+            "component-new-adoption-forbidden: security-algorithm has no Boot 3 production route; use Spring Security and an approved external KMS or Secret Provider",
+            "component-evidence-missing: Boot 3/JDK 17 component 3.x artifacts, Jakarta namespace, AutoConfiguration.imports and DDD/MVC reports are not available"
+          ],
+          "component_digest": "sha256:55abc7e0867eb5540a550a5edeb0a4cba6ac25624a2e2a99ba9c61ac881c4a8b",
+          "platform_line": "boot3-java17",
+          "lifecycle": "deprecated",
+          "adoption_policy": "forbidden",
+          "replacement_gav": "org.springframework.security:spring-security-core"
+        },
+        "component.gateway-resilience": {
+          "status": "blocked",
+          "verified_architectures": [],
+          "artifacts": [
+            {
+              "group_id": "com.yss.cloud",
+              "artifact_id": "yss-component-resilience4j-starter",
+              "declared_version": "3.0.0-SNAPSHOT",
+              "resolved_version": null,
+              "pom_sha256": null,
+              "jar_sha256": null,
+              "source_tree": null
+            }
+          ],
+          "evidence": [],
+          "blockers": [
+            "component-evidence-missing: Boot 3/JDK 17 component 3.x artifacts, Jakarta namespace, AutoConfiguration.imports and DDD/MVC reports are not available"
+          ],
+          "component_digest": "sha256:3e5cab72792915c7891f0f48250e225bd33fe75f36c4ab302b96053ecad7b7a6",
+          "platform_line": "boot3-java17",
+          "lifecycle": "active",
+          "adoption_policy": "allowed"
+        },
+        "contract.request-validation": {
+          "status": "blocked",
+          "provider_kind": "platform-managed",
+          "verified_architectures": [],
+          "artifacts": [
+            {
+              "group_id": "org.springframework.boot",
+              "artifact_id": "spring-boot-starter-validation",
+              "declared_version": "3.5.16",
+              "resolved_version": null,
+              "pom_sha256": null,
+              "jar_sha256": null,
+              "source_tree": null
+            }
+          ],
+          "evidence": [],
+          "blockers": [
+            "component-evidence-missing: Spring Boot 3.5.16 managed Validation resolution, Jakarta runtime and DDD/MVC consuming-application evidence are not recorded"
+          ],
+          "platform_line": "boot3-java17",
+          "lifecycle": "active",
+          "adoption_policy": "allowed",
+          "component_digest": "sha256:06d28817d0ef95d7c6db3637adc3426a691aac19c6e17b41e0bdb2bfec51cfec"
+        }
+      },
+      "evidence": [],
+      "platform_artifact_bindings": {
+        "parent": {
+          "role": "parent",
+          "status": "candidate",
+          "group_id": "com.yss.cloud",
+          "artifact_id": "yss-cloud-microservice",
+          "declared_version": "3.0.0-SNAPSHOT",
+          "resolved_version": null,
+          "published_at": null,
+          "pom_sha256": null,
+          "jar_sha256": null,
+          "source_tree": null,
+          "evidence": [],
+          "blockers": [
+            "component-evidence-missing: Boot 3 parent POM has not been published and byte-bound to a source tree"
+          ],
+          "sources_jar_sha256": null
+        },
+        "bom": {
+          "role": "bom",
+          "status": "candidate",
+          "group_id": "com.yss.cloud",
+          "artifact_id": "yss-components-bom",
+          "declared_version": "3.0.0-SNAPSHOT",
+          "resolved_version": null,
+          "published_at": null,
+          "pom_sha256": null,
+          "jar_sha256": null,
+          "source_tree": null,
+          "evidence": [],
+          "blockers": [
+            "component-evidence-missing: Boot 3 component BOM has not been published and byte-bound to a source tree"
+          ],
+          "sources_jar_sha256": null
+        }
+      },
+      "external_snapshot_bindings": [],
+      "external_artifact_bindings": [
+        {
+          "role": "excel-engine",
+          "status": "resolved",
+          "group_id": "org.apache.fesod",
+          "artifact_id": "fesod-sheet",
+          "declared_version": "2.0.2-incubating",
+          "resolved_version": "2.0.2-incubating",
+          "published_at": null,
+          "pom_sha256": "sha256:9c1f7a78ad39264c4d2a2689251562192a6074a79291adfe6b1806f199ee8df1",
+          "jar_sha256": "sha256:39d43ea6e6fcb26b712181869859c035d1cb0742a842e2758c8c58e79c112b4e",
+          "source_tree": null,
+          "evidence": [],
+          "blockers": [],
+          "sources_jar_sha256": "sha256:fb34dffa2a8844ea1033fc3896f497a55684842e98af428a9b7c5e29047a8b38"
+        }
+      ]
+    }
+  ],
+  "component_retirement_policy": {
+    "id": "organizational-zero-consumption",
+    "local_pom_scan": "candidate-only",
+    "required_evidence": [
+      "organization-code-search",
+      "maven-download-metrics",
+      "runtime-bean-and-configuration-scan",
+      "30-90-day-zero-usage-window"
+    ]
+  }
 }