pomaster 0.1.0

package/catalog/policies/policy.web.api.session_recovery_split.json

@@ -0,0 +1,94 @@
+{
+  "x-vocab-pr": {
+    "status": "vocab_pr_candidate",
+    "finding": "kind='policy' 不在 vocab-lock kinds_registry.truth_bodies（POLICY. 前缀已冻结注册，closed-world）",
+    "proposal": "词汇表 PR 登记 policy kind；或 Owner 裁决 policy 条目住 catalog/ 而非 truth/objects 正文层（与前批 45 条同因同请，合并进同一 vocab PR）",
+    "locked_vocab_untouched": true
+  },
+  "x-batch4-uplift": {
+    "status": "PROPOSAL",
+    "package": "batch-4 语料批 Universal 上提（工程策略族 split-ledger 驱动）",
+    "human_review_required": true,
+    "evidence": "PLANNED",
+    "provenance": "POMaster_VNext/corpus/master/batch-4/split-ledger.yaml"
+  },
+  "x-applicability-review": {
+    "status": "annotated",
+    "campaign": "W1-A2 P0.5-1 T3 标注战役（PRD v0.5.2 §5.2/§14；Owner 裁决 8 ②，2026-09-01）",
+    "axes": [
+      "lanes",
+      "capabilities",
+      "applicability_note"
+    ],
+    "basis": "policy.web.api 族（case-b W1-A1 同族标注）"
+  },
+  "id": "POLICY.WEB.API.SESSION_RECOVERY_SPLIT",
+  "kind": "policy",
+  "axis_profile": "policy_default",
+  "classification": "UNIVERSAL_POLICY",
+  "axes": {
+    "lifecycle": "PROPOSED",
+    "confidence": "UNRESOLVED",
+    "evidence": "PLANNED",
+    "change": "STABLE"
+  },
+  "title_zh": "会话恢复与权限拒绝分判",
+  "statement_zh": "认证失效与权限拒绝分开处理：认证失效走『单飞刷新一次 + 原请求重放一次』；权限拒绝不刷新、直接失败；逐请求重放上限显式声明，防止循环重放。",
+  "statement_en_keywords": [
+    "401 refresh once",
+    "403 reject no refresh",
+    "single flight",
+    "replay cap"
+  ],
+  "applies_when": {
+    "lane": "frontend",
+    "condition": "实现会话失效与权限拒绝处理时",
+    "lanes": [
+      "frontend"
+    ],
+    "capabilities": [
+      "CAPABILITY.API_CONTRACT"
+    ],
+    "applicability_note": "实现会话失效与权限拒绝处理时"
+  },
+  "enforcement": "required_when_applicable",
+  "authority": {
+    "owner": "HUMAN_OWNER",
+    "delegates": [],
+    "write_policy": "EVOLUTION_CHANNEL",
+    "escalation_hint": "catalog-batch4-uplift"
+  },
+  "origin": "ingested",
+  "origin_note": "batch-4 语料批 split-ledger UNIVERSAL/HYBRID universal 半上提；词面独立改写（clean-room），零逐字拷贝源文本",
+  "sub_rules": [
+    {
+      "rule_id": "clients.appClient",
+      "statement_zh": "业务客户端对认证失效与权限拒绝必须分开处理：认证失效时刷新一次并以原请求重放一次；权限拒绝直接拒绝、不触发刷新；令牌刷新必须全局单飞；每个请求的重放次数必须设显式上限。",
+      "provenance": {
+        "asset_id": "http-client-policy",
+        "entry_id": "clients.appClient",
+        "decision": "HYBRID",
+        "merge_group": "MG-HTTP-RECOVERY",
+        "corpus_batch": "batch-4/HTTP_CLIENT",
+        "split_ledger": "POMaster_VNext/corpus/master/batch-4/split-ledger.yaml"
+      }
+    }
+  ],
+  "sources": [
+    {
+      "type": "design_seed",
+      "ref": "POMaster_VNext/corpus/master/batch-4/split-ledger.yaml",
+      "captured_by": "agent:claude/batch-4-catalog-uplift",
+      "locator": {
+        "asset": "http-client-policy",
+        "entry": "clients.appClient",
+        "corpus_batch": "batch-4/HTTP_CLIENT",
+        "upstream_source_ref": "outputs/frontend/10_planned/http-client-policy.yaml"
+      },
+      "clean_room_note": "independently rewritten from field corpus batch-4 material; zero verbatim copy"
+    }
+  ],
+  "review_notes": [
+    "与既有 POLICY.WEB.API.ERROR_NORMALIZATION / POLICY.WEB.API.RETRY_DISCIPLINE 面审（MIG-B4）：本条只覆盖会话恢复链（刷新单飞/重放上限/权限拒绝不刷新），错误归一化与一般重试纪律仍归既有条款管辖。"
+  ]
+}

package/catalog/policies/policy.web.api.single_http_client.json

@@ -0,0 +1,88 @@
+{
+  "x-vocab-pr": {
+    "status": "vocab_pr_candidate",
+    "finding": "kind='policy' 不在 vocab-lock kinds_registry.truth_bodies（POLICY. 前缀已冻结注册，closed-world）",
+    "proposal": "词汇表 PR 登记 policy kind；或 Owner 裁决 policy 条目住 catalog/ 而非 truth/objects 正文层（两种落法待裁决，见 candidates-draft.json meta.vocab_findings[0]，affected=45）",
+    "locked_vocab_untouched": true
+  },
+  "x-pilot-proposal": {
+    "status": "PROPOSAL",
+    "package": "语义分解试点送审包（2026-08-28）",
+    "human_review_required": true,
+    "source_type": "design_seed",
+    "evidence": "PLANNED",
+    "provenance": "POMaster_VNext/catalog/candidates/candidates-draft.json",
+    "enforcement_note": "命中 applies_when 条件时必须遵守；是否升 MUST、接入哪个 gate 由 Human Review 裁决",
+    "clean_room_note": "statement_zh 为独立改写（clean-room），零逐字拷贝源协议"
+  },
+  "x-applicability-review": {
+    "status": "annotated",
+    "campaign": "W1-A2 P0.5-1 T3 标注战役（PRD v0.5.2 §5.2/§14；Owner 裁决 8 ②，2026-09-01）",
+    "axes": [
+      "lanes",
+      "capabilities",
+      "applicability_note"
+    ],
+    "basis": "policy.web.api 族（case-b W1-A1 同族标注）；HTTP Client 契约消费面"
+  },
+  "id": "POLICY.WEB.API.SINGLE_HTTP_CLIENT",
+  "kind": "policy",
+  "axis_profile": "policy_default",
+  "classification": "LANE_POLICY",
+  "axes": {
+    "lifecycle": "PROPOSED",
+    "confidence": "UNRESOLVED",
+    "evidence": "PLANNED",
+    "change": "STABLE"
+  },
+  "title_zh": "HTTP Client 单点统一",
+  "statement_zh": "base URL、认证、超时、取消、trace 与响应 envelope 必须由统一 HTTP Client 单点处理。",
+  "statement_en_keywords": [
+    "single http client",
+    "base url",
+    "auth",
+    "timeout",
+    "cancellation",
+    "trace",
+    "envelope"
+  ],
+  "applies_when": {
+    "lane": "frontend",
+    "condition": "构建请求基础设施",
+    "lanes": [
+      "frontend"
+    ],
+    "capabilities": [
+      "CAPABILITY.API_CONTRACT"
+    ],
+    "applicability_note": "构建请求基础设施"
+  },
+  "enforcement": "required_when_applicable",
+  "authority": {
+    "owner": "HUMAN_OWNER",
+    "delegates": [],
+    "write_policy": "EVOLUTION_CHANNEL",
+    "escalation_hint": "catalog-pilot-human-review"
+  },
+  "origin": "ingested",
+  "sources": [
+    {
+      "type": "design_seed",
+      "ref": "pomaster/components/frontend-hard-spec/assets/universal/15-request-api-protocol.md",
+      "captured_by": "agent:claude/semantic-decomposition-pilot",
+      "locator": {
+        "section": "MUST 第2条"
+      }
+    }
+  ],
+  "review_notes": [],
+  "review": {
+    "disposition": "ACCEPT",
+    "seq": "pilot-0001",
+    "ref": "docs/catalog-pilot-report.md:L226（§8.2 #24）",
+    "absorbed_duplicates": [
+      "POLICY.WEB.API.NO_RAW_FETCH",
+      "POLICY.WEB.API.NO_LOGIC_DUPLICATION"
+    ]
+  }
+}

package/catalog/policies/policy.web.api.single_loading_source.json

@@ -0,0 +1,81 @@
+{
+  "x-vocab-pr": {
+    "status": "vocab_pr_candidate",
+    "finding": "kind='policy' 不在 vocab-lock kinds_registry.truth_bodies（POLICY. 前缀已冻结注册，closed-world）",
+    "proposal": "词汇表 PR 登记 policy kind；或 Owner 裁决 policy 条目住 catalog/ 而非 truth/objects 正文层（两种落法待裁决，见 candidates-draft.json meta.vocab_findings[0]，affected=45）",
+    "locked_vocab_untouched": true
+  },
+  "x-pilot-proposal": {
+    "status": "PROPOSAL",
+    "package": "语义分解试点送审包（2026-08-28）",
+    "human_review_required": true,
+    "source_type": "design_seed",
+    "evidence": "PLANNED",
+    "provenance": "POMaster_VNext/catalog/candidates/candidates-draft.json",
+    "enforcement_note": "仅建议：任何 gate 永不因本条目单独 FAIL，至多产生 WARN/HINT 或进入 Human Review 议程",
+    "clean_room_note": "statement_zh 为独立改写（clean-room），零逐字拷贝源协议"
+  },
+  "x-applicability-review": {
+    "status": "annotated",
+    "campaign": "W1-A2 P0.5-1 T3 标注战役（PRD v0.5.2 §5.2/§14；Owner 裁决 8 ②，2026-09-01）",
+    "axes": [
+      "lanes",
+      "capabilities",
+      "applicability_note"
+    ],
+    "basis": "policy.web.api 族（case-b W1-A1 同族标注）"
+  },
+  "id": "POLICY.WEB.API.SINGLE_LOADING_SOURCE",
+  "kind": "policy",
+  "axis_profile": "policy_default",
+  "classification": "LANE_POLICY",
+  "axes": {
+    "lifecycle": "PROPOSED",
+    "confidence": "UNRESOLVED",
+    "evidence": "PLANNED",
+    "change": "STABLE"
+  },
+  "title_zh": "loading 状态单一来源",
+  "statement_zh": "loading 状态来源应唯一，避免多处布尔重复。",
+  "statement_en_keywords": [
+    "single loading source",
+    "no duplicated boolean state"
+  ],
+  "applies_when": {
+    "lane": "frontend",
+    "condition": "页面加载态管理",
+    "lanes": [
+      "frontend"
+    ],
+    "capabilities": [
+      "CAPABILITY.API_CONTRACT"
+    ],
+    "applicability_note": "页面加载态管理"
+  },
+  "enforcement": "advisory",
+  "authority": {
+    "owner": "HUMAN_OWNER",
+    "delegates": [],
+    "write_policy": "EVOLUTION_CHANNEL",
+    "escalation_hint": "catalog-pilot-human-review"
+  },
+  "origin": "ingested",
+  "sources": [
+    {
+      "type": "design_seed",
+      "ref": "pomaster/components/frontend-hard-spec/assets/universal/15-request-api-protocol.md",
+      "captured_by": "agent:claude/semantic-decomposition-pilot",
+      "locator": {
+        "section": "SHOULD 第2条"
+      }
+    }
+  ],
+  "review_notes": [
+    "SHOULD 正确降级 advisory"
+  ],
+  "review": {
+    "disposition": "ACCEPT",
+    "seq": "pilot-0001",
+    "ref": "docs/catalog-pilot-report.md:L241（§8.2 #39）"
+  }
+}

package/catalog/policies/policy.web.api.transport_vs_business.json

@@ -0,0 +1,81 @@
+{
+  "x-vocab-pr": {
+    "status": "vocab_pr_candidate",
+    "finding": "kind='policy' 不在 vocab-lock kinds_registry.truth_bodies（POLICY. 前缀已冻结注册，closed-world）",
+    "proposal": "词汇表 PR 登记 policy kind；或 Owner 裁决 policy 条目住 catalog/ 而非 truth/objects 正文层（两种落法待裁决，见 candidates-draft.json meta.vocab_findings[0]，affected=45）",
+    "locked_vocab_untouched": true
+  },
+  "x-pilot-proposal": {
+    "status": "PROPOSAL",
+    "package": "语义分解试点送审包（2026-08-28）",
+    "human_review_required": true,
+    "source_type": "design_seed",
+    "evidence": "PLANNED",
+    "provenance": "POMaster_VNext/catalog/candidates/candidates-draft.json",
+    "enforcement_note": "命中 applies_when 条件时必须遵守；是否升 MUST、接入哪个 gate 由 Human Review 裁决",
+    "clean_room_note": "statement_zh 为独立改写（clean-room），零逐字拷贝源协议"
+  },
+  "x-applicability-review": {
+    "status": "annotated",
+    "campaign": "W1-A2 P0.5-1 T3 标注战役（PRD v0.5.2 §5.2/§14；Owner 裁决 8 ②，2026-09-01）",
+    "axes": [
+      "lanes",
+      "capabilities",
+      "applicability_note"
+    ],
+    "basis": "policy.web.api 族（case-b W1-A1 同族标注）"
+  },
+  "id": "POLICY.WEB.API.TRANSPORT_VS_BUSINESS",
+  "kind": "policy",
+  "axis_profile": "policy_default",
+  "classification": "UNIVERSAL_POLICY",
+  "axes": {
+    "lifecycle": "PROPOSED",
+    "confidence": "UNRESOLVED",
+    "evidence": "PLANNED",
+    "change": "STABLE"
+  },
+  "title_zh": "传输成功与业务成功分判",
+  "statement_zh": "传输成功与业务成功必须分别判定；HTTP 非成功状态、契约解析失败、取消、超时、离线与业务错误不得混为同一类。",
+  "statement_en_keywords": [
+    "transport vs business success",
+    "error taxonomy separation"
+  ],
+  "applies_when": {
+    "lane": "frontend",
+    "condition": "请求结果判定",
+    "lanes": [
+      "frontend"
+    ],
+    "capabilities": [
+      "CAPABILITY.API_CONTRACT"
+    ],
+    "applicability_note": "请求结果判定"
+  },
+  "enforcement": "required_when_applicable",
+  "authority": {
+    "owner": "HUMAN_OWNER",
+    "delegates": [],
+    "write_policy": "EVOLUTION_CHANNEL",
+    "escalation_hint": "catalog-pilot-human-review"
+  },
+  "origin": "ingested",
+  "sources": [
+    {
+      "type": "design_seed",
+      "ref": "pomaster/components/frontend-hard-spec/assets/universal/15-request-api-protocol.md",
+      "captured_by": "agent:claude/semantic-decomposition-pilot",
+      "locator": {
+        "section": "MUST 第7条"
+      }
+    }
+  ],
+  "review_notes": [
+    "语义上跨车道通用（任何 client 侧）；pilot-0001 R-F：已上提 UNIVERSAL_POLICY（判据：语句实体——传输/业务成功判定——可跨 lane 存在；applies_when.lane 维持不动，待 V7 lane 轴登记后再议）"
+  ],
+  "review": {
+    "disposition": "ADJUST",
+    "seq": "pilot-0001",
+    "ref": "docs/catalog-pilot-report.md:L231（§8.2 #29）"
+  }
+}

package/catalog/policies/policy.web.api.trusted_endpoint_source.json

@@ -0,0 +1,82 @@
+{
+  "x-vocab-pr": {
+    "status": "vocab_pr_candidate",
+    "finding": "kind='policy' 不在 vocab-lock kinds_registry.truth_bodies（POLICY. 前缀已冻结注册，closed-world）",
+    "proposal": "词汇表 PR 登记 policy kind；或 Owner 裁决 policy 条目住 catalog/ 而非 truth/objects 正文层（两种落法待裁决，见 candidates-draft.json meta.vocab_findings[0]，affected=45）",
+    "locked_vocab_untouched": true
+  },
+  "x-pilot-proposal": {
+    "status": "PROPOSAL",
+    "package": "语义分解试点送审包（2026-08-28）",
+    "human_review_required": true,
+    "source_type": "design_seed",
+    "evidence": "PLANNED",
+    "provenance": "POMaster_VNext/catalog/candidates/candidates-draft.json",
+    "enforcement_note": "命中 applies_when 条件时必须遵守；是否升 MUST、接入哪个 gate 由 Human Review 裁决",
+    "clean_room_note": "statement_zh 为独立改写（clean-room），零逐字拷贝源协议"
+  },
+  "x-applicability-review": {
+    "status": "annotated",
+    "campaign": "W1-A2 P0.5-1 T3 标注战役（PRD v0.5.2 §5.2/§14；Owner 裁决 8 ②，2026-09-01）",
+    "axes": [
+      "lanes",
+      "capabilities",
+      "applicability_note"
+    ],
+    "basis": "policy.web.api 族（case-b W1-A1 同族标注）"
+  },
+  "id": "POLICY.WEB.API.TRUSTED_ENDPOINT_SOURCE",
+  "kind": "policy",
+  "axis_profile": "policy_default",
+  "classification": "LANE_POLICY",
+  "axes": {
+    "lifecycle": "PROPOSED",
+    "confidence": "UNRESOLVED",
+    "evidence": "PLANNED",
+    "change": "STABLE"
+  },
+  "title_zh": "endpoint 只来自受控来源",
+  "statement_zh": "endpoint、redirect 与 base URL 只能来自受控配置或正式契约，禁止由不可信 URL 参数直接拼接。",
+  "statement_en_keywords": [
+    "trusted endpoint sources",
+    "no untrusted URL concatenation",
+    "SSRF-adjacent"
+  ],
+  "applies_when": {
+    "lane": "frontend",
+    "condition": "构造任何请求地址",
+    "lanes": [
+      "frontend"
+    ],
+    "capabilities": [
+      "CAPABILITY.API_CONTRACT"
+    ],
+    "applicability_note": "构造任何请求地址"
+  },
+  "enforcement": "required_when_applicable",
+  "authority": {
+    "owner": "HUMAN_OWNER",
+    "delegates": [],
+    "write_policy": "EVOLUTION_CHANNEL",
+    "escalation_hint": "catalog-pilot-human-review"
+  },
+  "origin": "ingested",
+  "sources": [
+    {
+      "type": "design_seed",
+      "ref": "pomaster/components/frontend-hard-spec/assets/universal/15-request-api-protocol.md",
+      "captured_by": "agent:claude/semantic-decomposition-pilot",
+      "locator": {
+        "section": "MUST 第10条"
+      }
+    }
+  ],
+  "review_notes": [
+    "安全相关；与 BE 12『正式契约=OpenAPI 权威』构成跨车道契约链；pilot-0001 互引：POLICY.API.NO_INFORMAL_CONTRACT"
+  ],
+  "review": {
+    "disposition": "ACCEPT",
+    "seq": "pilot-0001",
+    "ref": "docs/catalog-pilot-report.md:L234（§8.2 #32）"
+  }
+}

package/catalog/policies/policy.web.api.typed_domain_naming.json

@@ -0,0 +1,79 @@
+{
+  "x-vocab-pr": {
+    "status": "vocab_pr_candidate",
+    "finding": "kind='policy' 不在 vocab-lock kinds_registry.truth_bodies（POLICY. 前缀已冻结注册，closed-world）",
+    "proposal": "词汇表 PR 登记 policy kind；或 Owner 裁决 policy 条目住 catalog/ 而非 truth/objects 正文层（两种落法待裁决，见 candidates-draft.json meta.vocab_findings[0]，affected=45）",
+    "locked_vocab_untouched": true
+  },
+  "x-pilot-proposal": {
+    "status": "PROPOSAL",
+    "package": "语义分解试点送审包（2026-08-28）",
+    "human_review_required": true,
+    "source_type": "design_seed",
+    "evidence": "PLANNED",
+    "provenance": "POMaster_VNext/catalog/candidates/candidates-draft.json",
+    "enforcement_note": "命中 applies_when 条件时必须遵守；是否升 MUST、接入哪个 gate 由 Human Review 裁决",
+    "clean_room_note": "statement_zh 为独立改写（clean-room），零逐字拷贝源协议"
+  },
+  "x-applicability-review": {
+    "status": "annotated",
+    "campaign": "W1-A2 P0.5-1 T3 标注战役（PRD v0.5.2 §5.2/§14；Owner 裁决 8 ②，2026-09-01）",
+    "axes": [
+      "lanes",
+      "capabilities",
+      "applicability_note"
+    ],
+    "basis": "policy.web.api 族（case-b W1-A1 同族标注）；请求函数契约类型面"
+  },
+  "id": "POLICY.WEB.API.TYPED_DOMAIN_NAMING",
+  "kind": "policy",
+  "axis_profile": "policy_default",
+  "classification": "LANE_POLICY",
+  "axes": {
+    "lifecycle": "PROPOSED",
+    "confidence": "UNRESOLVED",
+    "evidence": "PLANNED",
+    "change": "STABLE"
+  },
+  "title_zh": "请求函数类型化与领域命名",
+  "statement_zh": "请求函数必须带类型并使用稳定的领域动词命名。",
+  "statement_en_keywords": [
+    "typed request functions",
+    "stable domain verb naming"
+  ],
+  "applies_when": {
+    "lane": "frontend",
+    "condition": "定义任何请求函数",
+    "lanes": [
+      "frontend"
+    ],
+    "capabilities": [
+      "CAPABILITY.API_CONTRACT"
+    ],
+    "applicability_note": "定义任何请求函数"
+  },
+  "enforcement": "required_when_applicable",
+  "authority": {
+    "owner": "HUMAN_OWNER",
+    "delegates": [],
+    "write_policy": "EVOLUTION_CHANNEL",
+    "escalation_hint": "catalog-pilot-human-review"
+  },
+  "origin": "ingested",
+  "sources": [
+    {
+      "type": "design_seed",
+      "ref": "pomaster/components/frontend-hard-spec/assets/universal/15-request-api-protocol.md",
+      "captured_by": "agent:claude/semantic-decomposition-pilot",
+      "locator": {
+        "section": "MUST 第3条"
+      }
+    }
+  ],
+  "review_notes": [],
+  "review": {
+    "disposition": "ACCEPT",
+    "seq": "pilot-0001",
+    "ref": "docs/catalog-pilot-report.md:L227（§8.2 #25）"
+  }
+}