soloforge 1.1.46 → 1.1.48

package/templates/shared//350/257/201/346/215/256/351/251/261/345/212/250/344/270/216/345/217/215/345/271/273/350/247/211.md

@@ -1,10 +1,23 @@
 ---
-id: ka-hard-rule-证据驱动与反幻觉规则
+id: ka-guidance-证据驱动与反幻觉
 kind: guidance
 title: 证据驱动与反幻觉
-owner_mechanism: mc-evidence-grounding
 sync_policy: copy_to_project
 status: active
+triggers:
+  - 架构选型
+  - 技术决策
+  - 代码重构
+  - 方案评估
+  - 风险评估
+  - 事实核查
+  - 证据验证
+  - 验证
+  - 测试
+  - 发布
+  - 完成
+  - 通过
+  - 确认
 extra:
   name: evidence-driven-anti-hallucination
   scope:
@@ -13,21 +26,14 @@ extra:
     - '*'
   type: constraint
   lifecycle_status: active
-  version: 1.1.0
-  last_reviewed: '2026-06-01'
+  version: 2.0.0
+  last_reviewed: '2026-06-17'
   verification_layer: L2
   stage: _global
-triggers:
-  - 架构选型
-  - 技术决策
-  - 代码重构
-  - 方案评估
-  - 风险评估
-  - 事实核查
-  - 证据验证
+  owner_mechanism: mc-evidence-grounding
 ---
 
-# 证据驱动与反幻觉规则
+# 证据驱动与反幻觉
 
 ## 硬规则
 
@@ -44,10 +50,10 @@ triggers:
 
 ## 风险分级
 
-- **critical**: 发布门禁、生产环境、安全相关 → 任何证据缺失必须阻断
-- **high**: 架构、编码、迁移、验证 → 事实声明必须有权威证据
-- **medium**: 普通功能开发 → 关键声明需要证据
-- **low**: 通用问答、低风险操作 → 可标注为通用建议
+- **critical**：发布门禁、生产环境、安全相关 → 任何证据缺失必须阻断
+- **high**：架构、编码、迁移、验证 → 事实声明必须有权威证据
+- **medium**：普通功能开发 → 关键声明需要证据
+- **low**：通用问答、低风险操作 → 可标注为通用建议
 
 ## 检查项
 
@@ -58,3 +64,7 @@ triggers:
 - [ ] 高风险声明未用 stale/deprecated 证据
 - [ ] 验证结论基于真实执行结果
 - [ ] 生成的推理未单独支撑事实
+
+## 与其他规则的关系
+
+验证失败的修复流程见 [[反馈修复闭环]]。技术决策的确认要求见 [[开发者宪法]]。

package/templates/shared//350/264/241/347/214/256/350/247/204/350/214/203.md

@@ -0,0 +1,78 @@
+---
+id: ka-knowledge-贡献规范
+kind: knowledge
+title: 模板贡献规范
+sync_policy: copy_to_project
+status: active
+triggers:
+  - 贡献
+  - 新增模板
+  - frontmatter
+  - 新增规则
+  - 新增知识
+  - 软下限
+  - 硬下限
+extra:
+  name: contribution-guide
+  scope:
+    - '*'
+  products:
+    - '*'
+  type: knowledge
+  lifecycle_status: active
+  version: 1.0.0
+  last_reviewed: '2026-06-17'
+  verification_layer: L2
+  stage: _global
+  owner_mechanism: mc-registry-infrastructure
+---
+
+# 模板贡献规范
+
+> 给未来维护者（含 AI 维护者）：怎么新增/修改 md 资产。
+> SoloForge 由 AI 维护，必须简单、数据驱动、配置扩展。参见 [[机制说明]]。
+
+## frontmatter 必填四件套
+
+每个 md 必须有：
+- `id`（全局唯一）
+- `kind`（artifact / guidance / enforced / knowledge）
+- `sync_policy`（copy_to_project / engine_only / internal）
+- `status`（active / retired）
+
+## 选 kind 的判断
+
+| 想达到的效果 | 用什么 kind | 关键要求 |
+|-------------|------------|---------|
+| AI 产出某个文档的骨架 | artifact | 放对应域目录 |
+| 注入 AI prompt 的方法论/纪律 | guidance | **必须有非空 triggers，否则永不注入=僵尸** |
+| 确定性门禁检查 | enforced | **必须有 gate + 非空 checks** |
+| 只供搜索查阅的参考 | knowledge | 注意：**不注入运行时 prompt** |
+
+## 软下限 vs 硬下限
+
+- **软下限 = guidance**：注入指导，不阻断。靠 triggers 匹配 intent 注入。
+- **硬下限 = enforced**：门禁检查，阻断。靠 check.gate 聚合到 *-gate 执行。
+
+新增硬下限注意：
+- check 的 `executor` 必须是已注册的（`regex_pattern_scan` / `document_structure` / `semantic`）
+- 未注册 executor → fail-closed 判失败
+- `regex_pattern_scan` 按行扫、不区分注释，容易误报，先想好是否该 warning 级
+
+## 避坑清单
+
+- guidance 没 triggers = 僵尸文件
+- enforced 没 gate/checks = 僵尸文件
+- knowledge 写成核心纪律 = 白写（不注入），核心纪律用 guidance
+- 不要造同义字段，新增字段先查 frontmatter 字段字典
+- artifact 改名要同步 domain contract 的 produces 和 CROSS_VALIDATION_ARTIFACT_PATHS 映射
+
+## 用户自定义资产（线B 已落地）
+
+用户在 `.soloforge/knowledge/`（项目级）或 `~/.soloforge/patterns/`（全局级）放 md（frontmatter 同内置格式），SoloForge 自动按 kind 分流：
+- `kind: guidance` → loadGuidance 注入 prompt（软下限，按 triggers 匹配 intent）
+- `kind: enforced` → gate 聚合执行（硬下限，按 `check.gate` 归属到对应 *-gate）
+- `kind: knowledge` → sf_knowledge 索引搜索
+- `kind: artifact` → 用户 artifact md 用 `artifact_contract` 块声明 `domain`/`artifact_kind`/`path_pattern`/`gate`/`required`，自动并入对应域 contract produces（AI 可选 target 产出，observer 列 pending）；模板按文件名在 .soloforge/knowledge/ 加载
+
+**内置优先**：同 id 用户资产不覆盖内置。规则文件 `rule_source` 用绝对路径定位（executor resolve 兼容用户目录）。

package/templates/verify/enforced.md

@@ -5,117 +5,19 @@ gate: verify-gate
 title: verify阶段强制检查清单
 sync_policy: engine_only
 status: active
+extra:
+  owner_mechanism: mc-stage-gate-engine
 checks:
   - id: SOLID-DIP
     executor: regex_pattern_scan
-    rule: "禁止直接构造依赖（new Service/Repository/Dao），必须依赖注入"
+    rule: "禁止直接构造依赖（new Service/Repository/Dao），必须依赖注入（Java/Spring；TS 无 DI 容器不适用）"
     severity: error
     check_type: deterministic
     pattern: '/\bnew\s+\w*(Service|Repository|Repo|Dao|Mapper|Manager)\s*\(/'
-    languages: [通用]
+    languages: [java]
     evidence_required: ["regex_pattern_scan 扫描结果（git diff 变更文件无直接构造依赖命中）"]
     gate: verify-gate
     target: "self"
-  - id: CON-01
-    executor: regex_pattern_scan
-    rule: "共享可变状态必须有并发保护"
-    severity: error
-    check_type: deterministic
-    pattern: '/\b(public|private|protected)\s+static\s+[\w<>,\s]*\b(HashMap|ArrayList|HashSet|LinkedList)\b/'
-    languages: [java]
-    evidence_required: ["regex_pattern_scan 扫描结果（git diff 变更文件无未保护共享状态命中）"]
-    gate: build-gate
-    target: "self"
-  - id: CON-02
-    executor: regex_pattern_scan
-    rule: "分布式环境禁止使用 JVM 级锁"
-    severity: error
-    check_type: deterministic
-    pattern: '/\bsynchronized\s*\(/'
-    languages: [java]
-    evidence_required: ["regex_pattern_scan 扫描结果（git diff 变更文件无 JVM 级锁误用命中）"]
-    gate: build-gate
-    target: "self"
-  - id: CON-03
-    executor: regex_pattern_scan
-    rule: "先查后改（如库存/计数）必须用原子操作"
-    severity: error
-    check_type: deterministic
-    pattern: '/\.(findById|getById|getOne|selectById)\s*\([^)]*\)/'
-    languages: [java]
-    evidence_required: ["regex_pattern_scan 扫描结果（git diff 变更文件无非原子先查后改命中）"]
-    gate: build-gate
-    target: "self"
-  - id: CON-04
-    executor: regex_pattern_scan
-    rule: "禁止 @Transactional 同类内部调用导致事务失效"
-    severity: error
-    check_type: deterministic
-    pattern: '/\bthis\.\w+\s*\(/'
-    languages: [java]
-    evidence_required: ["regex_pattern_scan 扫描结果（git diff 变更文件无事务自调用命中）"]
-    gate: build-gate
-    target: "self"
-  - id: CON-05
-    executor: regex_pattern_scan
-    rule: "事务内禁止执行外部调用（HTTP/RPC）"
-    severity: error
-    check_type: deterministic
-    pattern: '/\.(getForObject|postForObject|exchange|execute)\s*\(/'
-    languages: [java]
-    evidence_required: ["regex_pattern_scan 扫描结果（git diff 变更文件无事务内外部调用命中）"]
-    gate: build-gate
-    target: "self"
-  - id: CON-06
-    executor: regex_pattern_scan
-    rule: "SimpleDateFormat 非线程安全，禁止作为共享成员"
-    severity: error
-    check_type: deterministic
-    pattern: '/\bstatic\s+[\w<>,\s]*SimpleDateFormat\b/'
-    languages: [java]
-    evidence_required: ["regex_pattern_scan 扫描结果（git diff 变更文件无 SimpleDateFormat 共享命中）"]
-    gate: build-gate
-    target: "self"
-  - id: CON-07
-    executor: regex_pattern_scan
-    rule: "ThreadLocal 必须清理避免内存泄漏"
-    severity: error
-    check_type: deterministic
-    pattern: '/\bnew\s+ThreadLocal\b/'
-    languages: [java]
-    evidence_required: ["regex_pattern_scan 扫描结果（git diff 变更文件无 ThreadLocal 未清理命中）"]
-    gate: build-gate
-    target: "self"
-  - id: CON-08
-    executor: regex_pattern_scan
-    rule: "HashMap/ArrayList 等禁止作为共享可变类成员"
-    severity: error
-    check_type: deterministic
-    pattern: '/\b(private|protected|public)\s+(?!static)[\w<>,\s]*\b(HashMap|ArrayList|HashSet|LinkedList)\s*[=;]/'
-    languages: [java]
-    evidence_required: ["regex_pattern_scan 扫描结果（git diff 变更文件无非线程安全集合成员命中）"]
-    gate: build-gate
-    target: "self"
-  - id: CON-09
-    executor: regex_pattern_scan
-    rule: "CompletableFuture 链必须处理异常"
-    severity: error
-    check_type: deterministic
-    pattern: '/\.(runAsync|supplyAsync)\s*\(/'
-    languages: [java]
-    evidence_required: ["regex_pattern_scan 扫描结果（git diff 变更文件无未处理异常命中）"]
-    gate: build-gate
-    target: "self"
-  - id: CON-10
-    executor: regex_pattern_scan
-    rule: "线程池必须正确配置拒绝策略"
-    severity: error
-    check_type: deterministic
-    pattern: '/\bnew\s+ThreadPoolExecutor\s*\(/'
-    languages: [java]
-    evidence_required: ["regex_pattern_scan 扫描结果（git diff 变更文件无未配置拒绝策略命中）"]
-    gate: build-gate
-    target: "self"
   - id: PER-01
     executor: regex_pattern_scan
     rule: "禁止循环内逐条数据库调用（N+1 问题）"
@@ -206,114 +108,15 @@ checks:
     evidence_required: ["regex_pattern_scan 扫描结果（git diff 变更文件无未优化图片命中）"]
     gate: verify-gate
     target: "self"
-  - id: API-01
-    executor: regex_pattern_scan
-    rule: "Controller 禁止返回 Entity，必须返回 DTO"
+  - id: REVIEW-STRUCT
+    executor: document_structure
+    rule: "代码审查报告须含「审查信息」「维度覆盖矩阵」「发现项」「审查清单校验」「完成判定」章节"
     severity: error
     check_type: deterministic
-    pattern: '/\bpublic\s+\w*Entity\b\s+\w+\s*\(/'
-    languages: [java]
-    evidence_required: ["regex_pattern_scan 扫描结果（git diff 变更文件无 Entity 直接返回命中）"]
-    gate: build-gate
-    target: "self"
-  - id: API-02
-    executor: regex_pattern_scan
-    rule: "写操作（POST/PUT/DELETE）必须有 @Transactional"
-    severity: error
-    check_type: deterministic
-    pattern: '/\.(save|insert|update|delete|remove)\s*\(/'
-    languages: [java]
-    evidence_required: ["regex_pattern_scan 扫描结果（git diff 变更文件无写操作缺事务命中）"]
-    gate: build-gate
-    target: "self"
-  - id: API-03
-    executor: regex_pattern_scan
-    rule: "接口必须有权限注解"
-    severity: error
-    check_type: deterministic
-    pattern: '/@(Get|Post|Put|Delete|Request)Mapping\s*\(/'
-    languages: [java]
-    evidence_required: ["regex_pattern_scan 扫描结果（git diff 变更文件无接口缺权限注解命中）"]
-    gate: build-gate
-    target: "self"
-  - id: API-04
-    executor: regex_pattern_scan
-    rule: "禁止硬编码分页参数，必须参数化"
-    severity: error
-    check_type: deterministic
-    pattern: '/\b(pageNum|pageSize)\s*=\s*\d/'
-    languages: [java]
-    evidence_required: ["regex_pattern_scan 扫描结果（git diff 变更文件无硬编码分页命中）"]
-    gate: build-gate
-    target: "self"
-  - id: API-05
-    executor: regex_pattern_scan
-    rule: "请求参数必须有 @Valid/@RequestBody 等校验注解"
-    severity: error
-    check_type: deterministic
-    pattern: '/@RequestBody\b/'
-    languages: [java]
-    evidence_required: ["regex_pattern_scan 扫描结果（git diff 变更文件无缺参数校验命中）"]
-    gate: build-gate
-    target: "self"
-  - id: API-06
-    executor: regex_pattern_scan
-    rule: "接口路径须符合 RESTful 规范"
-    severity: error
-    check_type: deterministic
-    pattern: '/@(Get|Post|Put|Delete)Mapping\s*\(\s*[^\)]*(get|list|create|delete|update)/i'
-    languages: [java]
-    evidence_required: ["regex_pattern_scan 扫描结果（git diff 变更文件无路径违规命中）"]
-    gate: build-gate
-    target: "self"
-  - id: API-07
-    executor: regex_pattern_scan
-    rule: "接口必须使用统一响应包装（ApiResult/Result/R）"
-    severity: error
-    check_type: deterministic
-    pattern: '/\bResponseEntity\s*<\s*\w*Entity\b/'
-    languages: [java]
-    evidence_required: ["regex_pattern_scan 扫描结果（git diff 变更文件无裸返回命中）"]
-    gate: build-gate
-    target: "self"
-  - id: API-08
-    executor: regex_pattern_scan
-    rule: "分页接口必须返回标准分页结构"
-    severity: error
-    check_type: deterministic
-    pattern: '/\.(findAll|listAll)\s*\(\s*\d/'
-    languages: [java]
-    evidence_required: ["regex_pattern_scan 扫描结果（git diff 变更文件无非标准分页命中）"]
-    gate: build-gate
-    target: "self"
-  - id: API-09
-    executor: regex_pattern_scan
-    rule: "接口路径须含版本号"
-    severity: error
-    check_type: deterministic
-    pattern: '/@(Get|Post|Put|Delete|Request)Mapping\s*\(\s*"\/(?!api\/v\d)/i'
-    languages: [java]
-    evidence_required: ["regex_pattern_scan 扫描结果（git diff 变更文件无缺版本号命中）"]
-    gate: build-gate
-    target: "self"
-  - id: API-10
-    executor: regex_pattern_scan
-    rule: "接口必须有 Swagger/OpenAPI 文档注解"
-    severity: error
-    check_type: deterministic
-    pattern: '/@(Get|Post|Put|Delete)Mapping\s*\([^)]*\)[\s\S]{0,200}(?!.*@ApiOperation)/'
-    languages: [java]
-    evidence_required: ["regex_pattern_scan 扫描结果（git diff 变更文件无缺文档注解命中）"]
-    gate: build-gate
-    target: "self"
-  - id: VRF-G02
-    executor: semantic
-    rule: "所有信任分级为黑盒的审查项必须有人类签署确认（人工签署判断，不可代码确定性判定）"
-    severity: info
-    check_type: semantic
-    evidence_required: ["LLM/人工语义评估结论（pending 标记，advisory 不阻断，随 Reflexion 反馈供客户端 AI 评判）"]
+    required_artifact: 代码审查报告模版
+    evidence_required: ["docs/audits/02-代码审查报告.md"]
     gate: verify-gate
-    target: "self"
+    target: self
   - id: VRF-G03
     executor: vitest_run
     rule: "端到端核心业务流程验证必须全部通过，证据级别至少 E1（运行时证据）"
@@ -332,95 +135,116 @@ checks:
     target: "self"
   - id: VRF-G05
     executor: file_evidence
-    rule: "验收场景覆盖正常路径、边界条件和异常路径，证据含截图或日志，三类均有 >=1 条证据"
-    severity: error
+    rule: "产出验收证据文件（file_evidence 验证存在+非空）；正常/边界/异常三类覆盖须人工确认（每类≥1条）"
+    severity: warning
     check_type: deterministic
     evidence_required: ["正常路径验收证据","边界条件验收证据","异常路径验收证据","场景覆盖统计（3 类均有 >=1 条证据）"]
     gate: verify-gate
     target: "self"
   - id: VRF-G06
     executor: report_structure
-    rule: "主链路集成检查：所有模块为 integrated 状态，无孤岛模块；部署决策必须经人类审批"
+    rule: "代码审查报告结构完整非空壳（report_structure 验证≥200字+≥2章节）；integrated 无孤岛 + 部署审批须人工确认"
     severity: error
     check_type: deterministic
+    required_artifact: 代码审查报告模版
     evidence_required: ["0 implemented_not_integrated + 无孤岛模块","人类审批记录（审批人/时间/决策）"]
     gate: verify-gate
     target: "self"
   - id: ARC-09
     executor: external_command
+    command: grep
+    args: ["-rl", "--include=*.java", "@RestControllerAdvice", "src/"]
     rule: "项目须配置全局异常处理器；grep 项目级存在性，找到(@RestControllerAdvice/@ControllerAdvice)=exitCode 0 通过，缺失=exitCode 1 失败"
     severity: warning
     check_type: deterministic
     evidence_required: ["external_command 结果（项目存在全局异常处理器 = exitCode 0 通过）"]
     gate: verify-gate
     target: "self"
-  - id: ARC-05
-    executor: external_command
-    rule: "单个前端组件文件超过 300 行应拆分；eslint max-lines 检测，超长=exitCode 非0。引用 rules/架构审查.md ARC-05"
+  # —— ARCH-DEP 已删（假覆盖：external_command 缺 command → dependency-cruiser 从未真跑、永远 fail-closed）。
+  #     分层依赖 / 组件行数非确定性（需 AST / 项目特定规则 / 跨语言工具 dependency-cruiser·ArchUnit），
+  #     降级软下限《架构语义红线》+ AI/人工审查。ARC-05（组件<300行）幽灵 check 引用同步清除 ——
+  - id: XVAL-REVIEW-REQ
+    executor: cross_validation
+    rule: "REQ-* 一致性"
+    severity: warning
+    check_type: deterministic
+    required_artifact: 代码审查报告模版
+    evidence_required: ["需求分析模版"]
+    gate: verify-gate
+    target: "self"
+  - id: XVAL-REVIEW-API
+    executor: cross_validation
+    rule: "DD-A* 一致性"
+    severity: warning
+    check_type: deterministic
+    required_artifact: 代码审查报告模版
+    evidence_required: ["API接口规格文档模版"]
+    gate: verify-gate
+    target: "self"
+  - id: XVAL-REVIEW-DB
+    executor: cross_validation
+    rule: "DD-T* 一致性"
     severity: warning
     check_type: deterministic
-    evidence_required: ["external_command 结果（eslint max-lines 报告，超 300 行组件 = exitCode 非0）"]
+    required_artifact: 代码审查报告模版
+    evidence_required: ["数据库设计文档模版"]
     gate: verify-gate
     target: "self"
-  - id: ARCH-DEP
+  # —— 前端承接一致性（XVAL-REVIEW-FE：审查报告引用的 FE-* 须与架构 §6.3 一致；纯后端双方无 FE-* warning 可忽略）——
+  - id: XVAL-REVIEW-FE
+    executor: cross_validation
+    rule: "FE-* 一致性"
+    severity: warning
+    check_type: deterministic
+    required_artifact: 代码审查报告模版
+    evidence_required: ["架构设计模版"]
+    gate: verify-gate
+    target: "self"
+  # —— 附件校验（openapi.yaml，redocly lint）——
+  - id: OPENAPI-LINT
     executor: external_command
-    rule: "模块依赖须遵循分层方向、无循环依赖、表现层不得直接访问数据层；dependency-cruiser 检测，违规=exitCode 非0。覆盖 rules/架构设计.md ARCH-DEP-01/02/03"
+    command: npx
+    args: ["@redocly/cli", "lint", "--config", "redocly.yaml", "docs/api/openapi.yaml"]
+    rule: "openapi.yaml 须通过 redocly lint --config redocly.yaml（SoloForge 锁定规则；YAML 语法+OpenAPI 规范）"
     severity: warning
     check_type: deterministic
-    evidence_required: ["external_command 结果（dependency-cruiser 报告，依赖违规 = exitCode 非0）"]
+    evidence_required: ["redocly lint 输出（exitCode 0 通过）"]
     gate: verify-gate
     target: "self"
-  - id: ARCH-C-REVIEW
-    executor: semantic
-    rule: "客户端 AI 评判架构语义红线（不可代码确定性判定，需结合业务上下文人工/AI 评估）：① 禁止 Patch JAR/docker commit/运行时文件替换交付代码 ② 禁止前端/Controller/定时任务跨服务边界直接访问持久化实现 ③ 禁止绕过统一认证与数据范围控制暴露业务接口 ④ 新增写操作须有可追溯审计记录 ⑤ 异步消息/定时任务/补偿逻辑须幂等 ⑥ 模块边界单一职责无过度耦合（ARCH-R04）⑦ NFR 目标值可测量（ARCH-R07）⑧ 部署方案环境规划/CI-CD 完整（ARCH-R09）⑨ 风险登记覆盖度充分（ARCH-R10）"
-    severity: info
-    check_type: semantic
-    evidence_required: ["LLM 语义评估结论（pending 标记，advisory 不阻断，随 Reflexion 反馈供客户端 AI 评判/重试）"]
+  # —— 字段映射复审（数据库 §3/§7 ↔ schema.sql，verify 域复审一致）——
+  - id: FMAP-REVIEW
+    executor: field_mapping_validation
+    rule: "表.字段 一致性+覆盖率"
+    severity: warning
+    check_type: deterministic
+    required_artifact: 数据库设计文档模版
+    evidence_required: ["docs/design/schema.sql"]
+    gate: verify-gate
+    target: "self"
+  - id: CODEREVIEW-BLOCK
+    executor: document_structure
+    check_type: deterministic
+    severity: error
     gate: verify-gate
+    required_artifact: 代码审查报告模版
+    rule: "审查维度矩阵/发现项章节须有表格行（反退化：禁只列前几条后省略/其余见附件）"
+    block_check:
+      item_pattern: '^##\s+(2|3)\.'
+      require_table: true
+      min_table_rows: 1
+    evidence_required: ["代码审查报告模版"]
     target: "self"
 ---
 
 # verify-gate 强制检查清单
 
-39 条确定性检查。bridge 从此文件聚合。
+23 条确定性检查（ARCH-DEP 已删：external_command 缺 command → dependency-cruiser 从未真跑，降级软下限；ARC-05 幽灵引用已清）。bridge 按 check.gate 聚合（CON-*/API-* 并发与 API 规范已归位 build/enforced.md——gate 本就是 build-gate；API-01/02 与 build ARC-02/03 重复已删；VRF-G02/ARCH-C-REVIEW semantic advisory 移至 guidance《架构语义红线》）。
 
 对应工程经验：
-- SOLID-DIP
-- CON-01
-- CON-02
-- CON-03
-- CON-04
-- CON-05
-- CON-06
-- CON-07
-- CON-08
-- CON-09
-- CON-10
-- PER-01
-- PER-02
-- PER-03
-- PER-04
-- PER-05
-- PER-06
-- PER-07
-- PER-08
-- PER-09
-- API-01
-- API-02
-- API-03
-- API-04
-- API-05
-- API-06
-- API-07
-- API-08
-- API-09
-- API-10
-- VRF-G02
-- VRF-G03
-- VRF-G04
-- VRF-G05
-- VRF-G06
-- ARC-09
-- ARC-05
-- ARCH-DEP
-- ARCH-C-REVIEW
+- SOLID-DIP（依赖注入，Java/Spring；TS 无 DI 容器不适用）
+- PER-01~09（性能：N+1/SELECT */分页/循环/重渲染/useMemo/连接池/大事务/图片）
+- VRF-G03（vitest E1+）/ VRF-G04（tsc）/ VRF-G05（验收三类覆盖）/ VRF-G06（主链路无孤岛+部署审批）
+- ARC-09（全局异常处理器，grep 项目级存在性）
+- XVAL-REVIEW-REQ/API/DB/FE（审查报告↔需求/API/DB/前端 一致性）
+- OPENAPI-LINT / FMAP-REVIEW
+- 分层依赖 / 组件行数：非确定性（需 AST/项目规则/跨语言工具），归软下限《架构语义红线》+ AI/人工审查