create-yss-spec 3.4.9 → 3.5.0

package/template/docs/engineering/evidence/aliyun-artifact-resolution.json

@@ -0,0 +1,446 @@
+{
+  "schema_version": 1,
+  "kind": "backend-component-artifact-resolution",
+  "report_id": "aliyun-maven-artifact-resolution-2026-09-18",
+  "generated_at": "2026-09-18T22:46:00+08:00",
+  "status": "resolved-with-blockers",
+  "settings_ref": "~/.m2/settings.xml",
+  "settings_usage": "configuration-evidence-only",
+  "credentials_recorded": false,
+  "repository": {
+    "id": "2306938-snapshot-Yloqmt",
+    "url": "https://packages.aliyun.com/6381d2a25db8487f76c8149c/maven/2306938-snapshot-yloqmt"
+  },
+  "resolution_command": "./mvnw -N -U -s ~/.m2/settings.xml org.apache.maven.plugins:maven-dependency-plugin:3.6.1:get -Dartifact=<GAV> -Dtransitive=false",
+  "source_root": "isolated-worktree",
+  "source_commit": "a3be2b2e33dca4545782e2b31894aaa00d0305cd",
+  "artifacts": [
+    {
+      "capability_id": "contract.dto-wire",
+      "group_id": "com.yss.cloud",
+      "artifact_id": "yss-component-dto",
+      "declared_version": "2.0.0-SNAPSHOT",
+      "repository_id": "2306938-snapshot-Yloqmt",
+      "metadata_sha256": "feff02992897c622c6403cfa9546c4a61d17e9d00de8f539d79065b956bf240e",
+      "resolved_version": "2.0.0-20260916.162843-1",
+      "jar_sha256": "65d05ae596242fb683f29938d0d5f0247a445ff4a24cb03618f14622b41fa5a3",
+      "pom_sha256": "5653ee0785cc005efa9dfb626a00bc43a26c411f78a87da3c2efaa2fbac7c181",
+      "sources_sha256": "65d4b5d09ca77b6fca3c009ead2f7f170bcaf1f4b26f5708eaf7d49c26522366",
+      "module_path": "yss-microservice-components/yss-component-dto",
+      "source_tree": "3add70b98d26f6534a4ebf7d9b09d74790ea60a5",
+      "sources_published_by_repository": true,
+      "sources_match_source_tree": true,
+      "source_mismatch": {
+        "missing": [],
+        "extra": [],
+        "changed": []
+      },
+      "pom_matches_source_tree": true,
+      "build_jdk_spec": "1.8",
+      "namespace_signals": {
+        "javax": false,
+        "jakarta": false
+      },
+      "auto_configuration": {
+        "spring_factories": false,
+        "auto_configuration_imports": false
+      },
+      "component_subtree_clean": true,
+      "worktree_change_count": 0,
+      "blockers": []
+    },
+    {
+      "capability_id": "contract.request-validation",
+      "group_id": "com.yss.cloud",
+      "artifact_id": "yss-component-validation-jsr303",
+      "declared_version": "2.0.0-SNAPSHOT",
+      "repository_id": "2306938-snapshot-Yloqmt",
+      "metadata_sha256": "90ca51bd3b376e21e0043c48cae842d231479045d20518c708a87ada770c451c",
+      "resolved_version": "2.0.0-20260916.163229-1",
+      "jar_sha256": "5a3a73e3ddd24cceb23ddd27680107952ac3cb030bd36ef1db243dacb0bedcc1",
+      "pom_sha256": "f0aef77e7b1f9e853cc7527b3977d29410cf7f953c3f19691ff6d788791b2a48",
+      "sources_sha256": "d1b538b9c6387a1da5158ef8f469017c1a4bc6f1c2f259374e47527ae7442d56",
+      "module_path": "yss-microservice-components/yss-component-validation-jsr303",
+      "source_tree": "fe5b36afb474afa41541fe1187a6828bdae080dc",
+      "sources_published_by_repository": true,
+      "sources_match_source_tree": true,
+      "source_mismatch": {
+        "missing": [],
+        "extra": [],
+        "changed": []
+      },
+      "pom_matches_source_tree": true,
+      "build_jdk_spec": "1.8",
+      "namespace_signals": {
+        "javax": true,
+        "jakarta": false
+      },
+      "auto_configuration": {
+        "spring_factories": false,
+        "auto_configuration_imports": false
+      },
+      "component_subtree_clean": true,
+      "worktree_change_count": 0,
+      "blockers": []
+    },
+    {
+      "capability_id": "contract.error-mapping",
+      "group_id": "com.yss.cloud",
+      "artifact_id": "yss-component-exception",
+      "declared_version": "2.0.0-SNAPSHOT",
+      "repository_id": "2306938-snapshot-Yloqmt",
+      "metadata_sha256": "f8ae4611bfdc80ee23b89ff626712c0586a95495f4aa0c7c89dc9a4f76c5d2c4",
+      "resolved_version": "2.0.0-20260916.162932-1",
+      "jar_sha256": "520363b8ced9df0c6a664a6abb5eec6439818ccae0d92de77184d229e64b6732",
+      "pom_sha256": "d51a60e37a97a686c295bb1d5001b376e939698eac256eb6b8cd4eee55ae68b3",
+      "sources_sha256": "ae75fb5bf395fcdd166db011dd597388f7461f252a473c0b39f169632608a090",
+      "module_path": "yss-microservice-components/yss-component-exception",
+      "source_tree": "e5d71e213f26cd7e52d419ded1c2f5e7b7fbf40b",
+      "sources_published_by_repository": true,
+      "sources_match_source_tree": true,
+      "source_mismatch": {
+        "missing": [],
+        "extra": [],
+        "changed": []
+      },
+      "pom_matches_source_tree": true,
+      "build_jdk_spec": "1.8",
+      "namespace_signals": {
+        "javax": true,
+        "jakarta": false
+      },
+      "auto_configuration": {
+        "spring_factories": true,
+        "auto_configuration_imports": false
+      },
+      "component_subtree_clean": false,
+      "worktree_change_count": 5,
+      "blockers": [
+        "candidate-not-published: isolated hardening worktree differs from the resolved artifact"
+      ]
+    },
+    {
+      "capability_id": "framework.mybatis",
+      "group_id": "com.yss.cloud",
+      "artifact_id": "yss-component-mybatis-plus-starter",
+      "declared_version": "2.0.0-SNAPSHOT",
+      "repository_id": "2306938-snapshot-Yloqmt",
+      "metadata_sha256": "6c5be1e763f10f97d4c7ddbdbd911ef9154d06dccc1ac60dab0c08ada71cbc61",
+      "resolved_version": "2.0.0-20260916.162918-1",
+      "jar_sha256": "bdb2a477bef0825e2bc668c242f83e75b72f6ee5d9f34b3edfdb887481ff2a05",
+      "pom_sha256": "51e036bc15fcf79e38c5656d056731c78385750adf700bcf885d7a0954bb9ff9",
+      "sources_sha256": "be55556c98042e2c1abbe089c235c7e364b55990dc32d0f54ac328a0eb717939",
+      "module_path": "yss-microservice-components/yss-component-persistence/yss-component-mybatis-plus-starter",
+      "source_tree": "03e29e6d74cf0b2bc8e4b879f7252766fb607356",
+      "sources_published_by_repository": true,
+      "sources_match_source_tree": true,
+      "source_mismatch": {
+        "missing": [],
+        "extra": [],
+        "changed": []
+      },
+      "pom_matches_source_tree": true,
+      "build_jdk_spec": "1.8",
+      "namespace_signals": {
+        "javax": true,
+        "jakarta": false
+      },
+      "auto_configuration": {
+        "spring_factories": true,
+        "auto_configuration_imports": false
+      },
+      "component_subtree_clean": true,
+      "worktree_change_count": 0,
+      "blockers": []
+    },
+    {
+      "capability_id": "component.cache",
+      "group_id": "com.yss.cloud",
+      "artifact_id": "yss-component-cache-starter",
+      "declared_version": "3.0.0-SNAPSHOT",
+      "repository_id": "2306938-snapshot-Yloqmt",
+      "metadata_sha256": "8d8130760288af01085e3fbc8ecdf3e66e0b892d56654faa9edbf6c46bb5ee4c",
+      "resolved_version": "3.0.0-20260916.163035-1",
+      "jar_sha256": "1631b4e5bc64d0d59727f3988366962c4bbc9fc368581f359e89aed757fe10c2",
+      "pom_sha256": "55b57d85d2b21fe4ec3ca2536631b4a0c850a06a891e9104f620e9b8160b8bda",
+      "sources_sha256": null,
+      "module_path": "yss-microservice-components/yss-component-cache-parent/yss-component-cache-starter",
+      "source_tree": "da5acccf1450fe48014ffff36d2ad212119a33a2",
+      "sources_published_by_repository": false,
+      "sources_match_source_tree": null,
+      "pom_matches_source_tree": true,
+      "build_jdk_spec": "1.8",
+      "namespace_signals": {
+        "javax": false,
+        "jakarta": false
+      },
+      "auto_configuration": {
+        "spring_factories": false,
+        "auto_configuration_imports": false
+      },
+      "component_subtree_clean": true,
+      "worktree_change_count": 0,
+      "blockers": [
+        "source-binding-missing: repository metadata does not publish a sources JAR",
+        "component-platform-generation-mismatch: published 3.x artifact was built with JDK 8 and belongs to the Boot 2 generation"
+      ]
+    },
+    {
+      "capability_id": "component.current-user-context",
+      "group_id": "com.yss.cloud",
+      "artifact_id": "yss-component-userinfo-starter",
+      "declared_version": "2.0.0-SNAPSHOT",
+      "repository_id": "2306938-snapshot-Yloqmt",
+      "metadata_sha256": "6562cde961b7f588200bf7ccc000eeb499863a94d2d7818e882e1a66b10c8491",
+      "resolved_version": "2.0.0-20260916.163623-1",
+      "jar_sha256": "cf85f2c6528c06adb296dd9c050b954fa33e6316fb22cdb2c57db5a59acf10c9",
+      "pom_sha256": "a56c3ed0e65f96ab81f8ebca378b70ad684b0c78e7a83e661aa5cef8912dbe0c",
+      "sources_sha256": "8941410b7a545e6ab8c9135a29dc7fb79d5408867ec1e941ca5af84ac992639c",
+      "module_path": "yss-microservice-components/yss-component-userinfo-starter",
+      "source_tree": "fc77d57e0be6ee81b10247c0746baed6a09c6bb4",
+      "sources_published_by_repository": true,
+      "sources_match_source_tree": true,
+      "source_mismatch": {
+        "missing": [],
+        "extra": [],
+        "changed": []
+      },
+      "pom_matches_source_tree": true,
+      "build_jdk_spec": "1.8",
+      "namespace_signals": {
+        "javax": true,
+        "jakarta": false
+      },
+      "auto_configuration": {
+        "spring_factories": false,
+        "auto_configuration_imports": false
+      },
+      "component_subtree_clean": false,
+      "worktree_change_count": 5,
+      "blockers": [
+        "candidate-not-published: isolated hardening worktree differs from the resolved artifact"
+      ]
+    },
+    {
+      "capability_id": "component.audit-log",
+      "group_id": "com.yss.cloud",
+      "artifact_id": "yss-component-audit-log",
+      "declared_version": "2.0.0-SNAPSHOT",
+      "repository_id": "2306938-snapshot-Yloqmt",
+      "metadata_sha256": "ba24c144ae630df1f0c0bc4dae467decebe03e3f21d483ab22b8d2a4a7aef803",
+      "resolved_version": "2.0.0-20260916.163223-1",
+      "jar_sha256": "01dd17d7fdf10bf1eef04957d59cf74f3b3abf2fbcf9bba6a1719055a537fb44",
+      "pom_sha256": "1eb2d2d1495ddc539e033c55a8cf4981427c9d054936a8dc09e794d81e5ddc9b",
+      "sources_sha256": "3483a0f158875f83beac1a46e098d75513d36d45ee77bff76033cffe28be5f84",
+      "module_path": "yss-microservice-components/yss-component-audit-log",
+      "source_tree": "d00f2e156714e43e8ec70b28e0bd33967d130485",
+      "sources_published_by_repository": true,
+      "sources_match_source_tree": true,
+      "source_mismatch": {
+        "missing": [],
+        "extra": [],
+        "changed": []
+      },
+      "pom_matches_source_tree": true,
+      "build_jdk_spec": "1.8",
+      "namespace_signals": {
+        "javax": true,
+        "jakarta": false
+      },
+      "auto_configuration": {
+        "spring_factories": false,
+        "auto_configuration_imports": false
+      },
+      "component_subtree_clean": true,
+      "worktree_change_count": 0,
+      "blockers": []
+    },
+    {
+      "capability_id": "component.excel-import-export",
+      "group_id": "com.yss.cloud",
+      "artifact_id": "yss-component-excel-starter",
+      "declared_version": "2.0.0-SNAPSHOT",
+      "repository_id": "2306938-snapshot-Yloqmt",
+      "metadata_sha256": "4e91090c8c13ceb3d775909b60b3e1ea236b812d3afd8ed39754ef6a61a3c2c9",
+      "resolved_version": "2.0.0-20260916.163244-1",
+      "jar_sha256": "1d5523b7b134c1bf63094ab274fa8d79fbea7c4e752cf434ef4b43a25ed86ce3",
+      "pom_sha256": "f106de25eef3c6b4a83dd5a5558cfc2e906b5a210b917638f26289be4019f466",
+      "sources_sha256": "a7077ca1c680800fec6d0c95e3a6563066d993f4495e0d8e91d2619a5b736b05",
+      "module_path": "yss-microservice-components/yss-component-excel-starter",
+      "source_tree": "82345616c26950981497f254c45bf0b2bc2077a8",
+      "sources_published_by_repository": true,
+      "sources_match_source_tree": true,
+      "source_mismatch": {
+        "missing": [],
+        "extra": [],
+        "changed": []
+      },
+      "pom_matches_source_tree": true,
+      "build_jdk_spec": "1.8",
+      "namespace_signals": {
+        "javax": true,
+        "jakarta": false
+      },
+      "auto_configuration": {
+        "spring_factories": true,
+        "auto_configuration_imports": false
+      },
+      "component_subtree_clean": true,
+      "worktree_change_count": 0,
+      "blockers": []
+    },
+    {
+      "capability_id": "component.excel-import-export",
+      "group_id": "com.yss.cloud",
+      "artifact_id": "yss-component-excel-mvc",
+      "declared_version": "2.0.0-SNAPSHOT",
+      "repository_id": "2306938-snapshot-Yloqmt",
+      "metadata_sha256": "ba3d5f3e05b048203c0ab7fe8716d4814c30c511bbba88857315a428d71a8586",
+      "resolved_version": "2.0.0-20260916.163630-1",
+      "jar_sha256": "986f4c5441749bd6f4d076893460b17c3015f74d2296969c89441da7d74e3bf7",
+      "pom_sha256": "fa6e8fb94edfc492e1b6da0814be266328c0f526347564797c3eaed8c8ca6a10",
+      "sources_sha256": "7a25a9578dba56e4d0a052271ce619c6f48a4bb49d5486eb92f30f7cc49201a5",
+      "module_path": "yss-microservice-components/yss-component-excel-mvc",
+      "source_tree": "acc02f7747905f715708dfe029c3f66a8457e3a5",
+      "sources_published_by_repository": true,
+      "sources_match_source_tree": true,
+      "source_mismatch": {
+        "missing": [],
+        "extra": [],
+        "changed": []
+      },
+      "pom_matches_source_tree": true,
+      "build_jdk_spec": "1.8",
+      "namespace_signals": {
+        "javax": true,
+        "jakarta": false
+      },
+      "auto_configuration": {
+        "spring_factories": false,
+        "auto_configuration_imports": false
+      },
+      "component_subtree_clean": true,
+      "worktree_change_count": 0,
+      "blockers": []
+    },
+    {
+      "capability_id": "component.distributed-id",
+      "group_id": "com.yss.cloud",
+      "artifact_id": "yss-component-distributed-id",
+      "declared_version": "3.0.0-SNAPSHOT",
+      "repository_id": "2306938-snapshot-Yloqmt",
+      "metadata_sha256": "ebc6e7431776dbb3d990fa6d1a297a51b4b145c56924aaa92ee672a56833430d",
+      "resolved_version": "3.0.0-20260916.163140-1",
+      "jar_sha256": "b22f0751d4fd6e465621e1743bae3452a66f8a648dc3e0aa2e74f8a0b75e71a8",
+      "pom_sha256": "0f43860eb182da2c82c6668c75436bff44e392279033bb5b24694a4e4ab63fb6",
+      "sources_sha256": "66dd0e67581264ce2b487e8bc739444937b276747dfab113219b6e42ed81b9a7",
+      "module_path": "yss-microservice-components/yss-component-distributed-id",
+      "source_tree": "ac54e61f980cfea3e0a574b0559b5fc6a6ccb9f6",
+      "sources_published_by_repository": true,
+      "sources_match_source_tree": true,
+      "source_mismatch": {
+        "missing": [],
+        "extra": [],
+        "changed": []
+      },
+      "pom_matches_source_tree": true,
+      "build_jdk_spec": "1.8",
+      "namespace_signals": {
+        "javax": true,
+        "jakarta": false
+      },
+      "auto_configuration": {
+        "spring_factories": true,
+        "auto_configuration_imports": false
+      },
+      "component_subtree_clean": true,
+      "worktree_change_count": 0,
+      "blockers": [
+        "component-platform-generation-mismatch: published 3.x artifact was built with JDK 8 and belongs to the Boot 2 generation"
+      ]
+    },
+    {
+      "capability_id": "component.security-algorithm",
+      "group_id": "com.yss.cloud",
+      "artifact_id": "yss-component-security-algorithm",
+      "declared_version": "2.0.0-SNAPSHOT",
+      "repository_id": "2306938-snapshot-Yloqmt",
+      "metadata_sha256": "56936651f0a9455db800111a017f7f27fb40aa1445f963d4eef6bc5ba1762bb9",
+      "resolved_version": "2.0.0-20260916.163215-1",
+      "jar_sha256": "e0a10bb655c24bb10397e8c75579bcb2b38469a48efc363a101d526f486f7f2d",
+      "pom_sha256": "e839c11d06abd1c324cc9e6c56339cbd65b7aad6e3fe80ea882372671e6a5a8a",
+      "sources_sha256": "a8016b719d65a8a12c9800f1462290cc0ca2f92300be67b8ca9357fb5ee0a10e",
+      "module_path": "yss-microservice-components/yss-component-security-algorithm",
+      "source_tree": "a28f507af00845909eef3ad6bdf8b716660f5b9d",
+      "sources_published_by_repository": true,
+      "sources_match_source_tree": true,
+      "source_mismatch": {
+        "missing": [],
+        "extra": [],
+        "changed": []
+      },
+      "pom_matches_source_tree": true,
+      "build_jdk_spec": "1.8",
+      "namespace_signals": {
+        "javax": true,
+        "jakarta": false
+      },
+      "auto_configuration": {
+        "spring_factories": true,
+        "auto_configuration_imports": false
+      },
+      "component_subtree_clean": false,
+      "worktree_change_count": 5,
+      "blockers": [
+        "candidate-not-published: isolated hardening worktree differs from the resolved artifact"
+      ]
+    },
+    {
+      "capability_id": "component.gateway-resilience",
+      "group_id": "com.yss.cloud",
+      "artifact_id": "yss-component-resilience4j-starter",
+      "declared_version": "2.0.0-SNAPSHOT",
+      "repository_id": "2306938-snapshot-Yloqmt",
+      "metadata_sha256": "a0d242173e1a6b54b2a701e46f5ced0492edc5d9e6648c7acbc022a7cafc56dd",
+      "resolved_version": "2.0.0-20260916.163208-1",
+      "jar_sha256": "69b92bb710267f5fe5d73cb144462157aaaa250c05685beeae62ee8aa623c58c",
+      "pom_sha256": "a4410689d02120d34e1b08cdbf46c513bec07aca0b3b9b8cdba9cf9149b68a59",
+      "sources_sha256": "66094d40ff02de7f44c717e898b1d417cd46f4ee8237e9e532c1a694eda723c0",
+      "module_path": "yss-microservice-components/yss-component-resilience4j-starter",
+      "source_tree": "10cdf49599161c77137cac47d047b23998aad75b",
+      "sources_published_by_repository": true,
+      "sources_match_source_tree": true,
+      "source_mismatch": {
+        "missing": [],
+        "extra": [],
+        "changed": []
+      },
+      "pom_matches_source_tree": true,
+      "build_jdk_spec": "1.8",
+      "namespace_signals": {
+        "javax": false,
+        "jakarta": false
+      },
+      "auto_configuration": {
+        "spring_factories": false,
+        "auto_configuration_imports": false
+      },
+      "component_subtree_clean": false,
+      "worktree_change_count": 11,
+      "blockers": [
+        "candidate-not-published: isolated hardening worktree differs from the resolved artifact"
+      ]
+    }
+  ],
+  "summary": {
+    "requested": 12,
+    "resolved": 12,
+    "source_bound": 11,
+    "candidate_subtree_clean": 8
+  },
+  "global_blockers": [
+    "architecture-evidence-missing: domain-driven and layered-mvc consuming-application reports are not recorded",
+    "candidate-publication-missing: hardening changes for Exception, UserInfo, Security and Resilience4j are not present in the resolved artifacts",
+    "settings-warning: distributionManagement under an active settings profile is ignored by Maven and must live in the publishing POM"
+  ]
+}

package/template/docs/process/contract-reading.md

@@ -0,0 +1,46 @@
+# 合同阅读、准备与显式迁移
+
+本文件描述工具入口；阶段、批准和执行门禁仍由 `docs/process/lifecycle-registry.yaml` 及资产所有者定义。YAML 是权威文件，视图不能编辑、批准合同或授予执行权限。
+
+```sh
+scripts/contract view <资产> --kind <类型> [--profile review|task|full] [--unit <ID>] [--json]
+scripts/contract diff <旧资产> <新资产> --kind <类型> [--json]
+```
+
+默认 `review` 展示目标、非目标、验收、取舍、风险及未决事项，隐藏机器摘要明细，不附带折叠完整 JSON。`task` 保留适用工作单元、执行目录、写边界、Skill、验证、证据和未分类约束；Slice 必须明确 `--unit`。`full` 读取完整权威内容与绑定。三种视图均显示权威身份、版本、完整 SHA-256 和检查范围。批准有效性未核验；执行仍使用原预检和派发入口。来源未提供风险或取舍时明确标记缺口，不推断为无风险。
+
+| 类型 | 资产组 | 阅读后的权威处理入口 |
+|---|---|---|
+| `plan`、`spec` | Plan、Spec 范围、用户决定 | 生命周期和用户决定校验 |
+| `product-design`、`prototype-confirmation`、`visual-baseline` | 产品设计、确认、视觉基线 | 产品设计所有者校验 |
+| `technical-design` | 技术设计 | 技术设计校验与生命周期批准 |
+| `api-decision`、`data-decision` | API / 数据决定 | 对应决定校验、工程契约批准 |
+| `scaffold`、`scaffold-decision` | 脚手架合同、架构选择 | 脚手架所有者及原始用户决定 |
+| `slice` | Slice 与工作单元 | `scripts/slice-contract inspect`、原批准与派发 |
+| `handoff`、`backend-delivery`、`frontend-acceptance` | 战略交接、后端交付、前端接收 | 对应包 / 交付 / 接收验证器 |
+| `approval`、`user-decision`、`context-reconciliation` | 会签、原始回复、Context 对账 | 原批准 / 用户决定 / Context 校验 |
+
+通用适配器保留未知字段，只做可读取、适用 schema 和可识别来源绑定核对；不支持结构核验的类型会明确标记。专用资产所有者的业务校验并未被通用视图替代。Markdown 正文完整保留。API v2 审查结果从绑定的实际记录展示。摘要字段变化、数组顺序和纯字节变化均在 diff 中保留，不据此自动认定批准可沿用。
+
+## 准备机器字段
+
+Slice 继续使用 `scripts/slice-contract prepare`。来源的原始字节摘要、版本、别名、Skill 闭包和验证映射由现有准备器生成。共用的 `scripts/lib/contract-source.mjs` 只读取明确选择的来源；冲突报告保留 supplied / observed 和恢复动作，不根据目录猜测授权。其他资产继续使用各自的生成器，不新增项目人员要维护的表单。
+
+API 决定的新结构使用独立 v2 schema，v1 schema 和读取兼容保留：
+
+```sh
+scripts/api-contract-decision prepare <来源选择.yaml> --output <新草案.yaml>
+scripts/api-contract-decision migrate <已批准v1.yaml> --version v2 --output <新候选.yaml>
+```
+
+准备输入包括决定 ID / 版本、影响、评估引用、证据和业务原因；有 API 影响时再给 `openapi.id/ref/version`、`validation_record.ref`、`draft_review.ref` 和 `freeze.version/frozen_at`。摘要自动生成；来源明确但缺失时报告缺口。准备器不能产生批准状态。新路径以排他方式写入；已存在路径不能覆盖。
+
+v2 的 `openapi` 是唯一 Draft 绑定，`draft_review` 只存 `ref/digest`，Freeze 只保存版本和时间；实际结果、阻断项与 Draft 来源从真实审查记录读取。v1/v2 在消费时归一，外部永远绑定原文件 SHA-256。迁移先验证完整 v1，旧审查额外证据合并到顶层，旧文件与旧批准保持原字节。新候选按既有差异及授权延续协议处理，不继承批准。
+
+## 验证阶段与回退
+
+预检、准备、派发各自建立私有验证阶段。阶段绑定根目录、用途、切片、工作单元、只读状态；只在本次操作内共享输入和纯校验结果。原始输入不可变，返回给调用者的是独立副本。相同 schema、输入和格式选项复用；外部 `$ref` 未追踪的校验不享受结果复用。Python 引擎、同步 API 和技术设计 Node 边界保留。
+
+成功返回前复核所有登记原字节、目录枚举及不存在项。技术设计子进程自行验证批准，再返回依赖清单；父进程合并读取集合，读取矛盾、遗漏报告或异常均阻断。此清单不是批准上下文。品牌上下文不能序列化、跨仓或从只读升级；在阶段中生成的上下文结束后失效。调用者可传入 `AbortSignal`，已收到的撤回事件须中止当前操作；下一次边界始终重新读取当前批准和回复。未接入读取追踪的消费者保留原检查，不共享结果。
+
+P1 可回用原 `slice-contract` 阅读入口；P2 可回退阶段调用与本次改动的读取适配，恢复完整重复检查；P3 可停止创建 v2，但已生成 v2 的读取能力必须保留。回退后重新验证当前来源和批准，不恢复历史通过状态。

package/template/docs/process/lifecycle-artifact-map.md

@@ -14,7 +14,7 @@
 | `stage.spec-architecture` | Spec / 功能架构 | 固化解决方案和功能边界。 | Spec 基线和功能边界可审查。 |
 | `stage.product-design` | 产品设计 | 在存在产品设计影响时校准页面流和状态。 | 命中的设计门禁通过；未命中项记录 not-applicable 及原因。 |
 | `stage.system-data-engineering` | 系统 / 数据架构与工程契约 | 固化系统、数据、工程基线和 API 契约。 | 新建后端已由用户确认 DDD / MVC 与精确 Spring Boot 版本，既有工程已核验并复用登记值；受影响工程契约冻结或记录无 API 影响；required 脚手架证据齐全。 |
-| `stage.ticket-formalization` | Ticket 正式化 | 将冻结范围拆为可追踪的父 Ticket 和垂直切片。 | 工作单元窄、依赖清晰、验收和测试 seam 可执行。 |
+| `stage.ticket-formalization` | Ticket 正式化 | 在既有功能追踪入口下，将冻结范围正式化为垂直切片。 | 工作单元窄、依赖清晰、验收和测试 seam 可执行。 |
 | `stage.vertical-slice-implementation` | 垂直切片实现 | 以批准合同驱动 TDD 实现和跨仓库协作。 | 允许写路径、禁止模式、证据和验证命令全部满足。 |
 | `stage.verification-release-retrospective` | 验证 / 发布 / 复盘 | 完成 fresh verification、发布和回顾。 | 所有命中门禁通过，人工审查点已完成，checkpoint 可追溯。 |
 
@@ -82,7 +82,7 @@
 | `artifact.implementation-repository-preparation-result` | 实现仓库准备结果 | `stage.system-data-engineering` | 后端或前端交付面进入 Ticket 正式化。 |
 | `artifact.tactical-design` | DDD 战术设计 | `stage.system-data-engineering` | 聚合边界、状态机、一致性或持久化映射复杂到无法在系统概要设计的 Tactical DDD Check 中清楚表达。 |
 | `artifact.spec-delta` | Spec Delta | `stage.spec-architecture` | 已有冻结 Spec 的高风险行为变化。 |
-| `artifact.parent-ticket` | 功能父 Ticket | `stage.ticket-formalization` | 每个进入追踪的功能。 |
+| `artifact.parent-ticket` | 功能父 Ticket | `stage.plan` | 每个功能首次进入 Plan 或最近可信接入阶段时建立，正式化时复用；Design profile 不创建工程父 Ticket。 |
 | `artifact.vertical-slice-ticket` | 垂直切片 Ticket | `stage.ticket-formalization` | 进入实现前。 |
 | `artifact.slice-implementation-contract` | Slice Implementation Contract | `stage.ticket-formalization` | Agent 进入实现。 |
 | `artifact.frontend-implementation-plan` | 前端实现还原计划 | `stage.ticket-formalization` | UI 影响切片提升 ready-for-agent 前。 |

package/template/docs/process/lifecycle-registry-baseline.json

@@ -1,7 +1,7 @@
 {
   "schema_version": 1,
   "registry_id": "yss.lifecycle",
-  "semantic_sha256": "38afc53efe827596c036133c826acd818c8dab85fab0f430d62a60cf62005196",
+  "semantic_sha256": "09490c2a354d5452d52522cc36e04cec044faf62cb3c80c90bf95cd07963f0fb",
   "published_ids": [
     "artifact.architecture-review",
     "artifact.data-architecture",
@@ -104,6 +104,7 @@
     "stage.verification-release-retrospective",
     "stage.vertical-slice-implementation",
     "work-unit.attach-sync-integration",
+    "work-unit.backend-delivery",
     "work-unit.code-review",
     "work-unit.discovery-opportunity",
     "work-unit.discovery-requirements",

package/template/docs/process/lifecycle-registry.yaml

@@ -62,7 +62,7 @@ stages:
     exit_criteria: 新建后端已由用户确认 DDD / MVC 与精确 Spring Boot 版本，既有工程已核验并复用登记值；受影响工程契约冻结或记录无 API 影响；required 脚手架证据齐全。
   - id: stage.ticket-formalization
     name: Ticket 正式化
-    goal: 将冻结范围拆为可追踪的父 Ticket 和垂直切片。
+    goal: 在既有功能追踪入口下，将冻结范围正式化为垂直切片。
     exit_criteria: 工作单元窄、依赖清晰、验收和测试 seam 可执行。
   - id: stage.vertical-slice-implementation
     name: 垂直切片实现
@@ -309,8 +309,8 @@ artifacts:
     trigger: 已有冻结 Spec 的高风险行为变化。
   - id: artifact.parent-ticket
     name: 功能父 Ticket
-    stage: stage.ticket-formalization
-    trigger: 每个进入追踪的功能。
+    stage: stage.plan
+    trigger: 每个功能首次进入 Plan 或最近可信接入阶段时建立，正式化时复用；Design profile 不创建工程父 Ticket。
   - id: artifact.vertical-slice-ticket
     name: 垂直切片 Ticket
     stage: stage.ticket-formalization
@@ -445,7 +445,7 @@ work_units:
     name: 垂直切片 Ticket 正式化
     scope: project-instance
     input: 冻结 Spec、设计、契约和阻塞关系。
-    output: 功能父 Ticket、垂直切片和批准的 Slice Implementation Contract。
+    output: 更新既有功能父 Ticket 的关联、形成垂直切片和批准的 Slice Implementation Contract。
     completion: 切片可独立验证；生命周期复算后才能 ready-for-agent。
   - id: work-unit.slice-implementation
     name: 垂直切片实现
@@ -465,6 +465,12 @@ work_units:
     input: 不可变候选快照、Spec、Ticket、合同和执行结果。
     output: Standards、Spec、UI fidelity 三轴 Review 与 fresh verification。
     completion: findings 已处理；修复后重新捕获候选并全量复审。
+  - id: work-unit.backend-delivery
+    name: 后端职责交付终点
+    scope: project-instance
+    input: plan-to-backend 职责范围、当前 Slice 批准与独立代码审查、Backend Delivery 源文件及正式导出包。
+    output: 绑定当前源、独立审查和正式包的后端终点记录及下游前端待办。
+    completion: 完整复验源文件与正式包；仅后端可交付，不能宣布全业务完成或自动发布。
   - id: work-unit.release-and-retrospective
     name: 发布与复盘
     scope: project-instance