r
9c9a51263c
汇总未提交工作区：Servers 列表 site_url 链接、终端页与选机器 UI、SSH 连通性与 Telegram 通知、agent/offline/unset_path 后台调度与 gate_ai_review 门控；更新 AGENTS 与 agent-exploration 规则（仅本机 commit）；同步 web/app 构建产物与相关文档。
36 lines
1.1 KiB
Markdown
36 lines
1.1 KiB
Markdown
# 审计 — 2026-06-14 门控 Gate 8 AI Review
|
|
|
|
**Changelog**: `docs/changelog/2026-06-14-gate-ai-review.md`
|
|
|
|
## Step 3 规则扫描
|
|
|
|
| 文件 | 规则 | 结论 |
|
|
|------|------|------|
|
|
| `scripts/gate_ai_review.py` | 无静默吞错 | PASS — 失败 exit 1 + 明确 stderr |
|
|
| `scripts/gate_ai_review.py` | 无明文密钥 | PASS — 仅用 env CURSOR_API_KEY（标准） |
|
|
| `scripts/gate_ai_review.py` | subprocess 安全 | PASS — 固定 argv，无 shell 拼接用户输入 |
|
|
| `deploy/pre_deploy_check.sh` | 门控计数一致 | PASS — GATES_TOTAL=8 |
|
|
| `docs/reviews/` | 产物可追溯 | PASS — JSON 含 head_sha、verdict、findings |
|
|
|
|
## Closure
|
|
|
|
| 项 | 状态 | 说明 |
|
|
|----|------|------|
|
|
| gate_ai_review.py | SAFE | 只读 review + 写 docs/reviews |
|
|
| pre_deploy_check.sh Gate 8 | SAFE | 调用 python 脚本 |
|
|
| 应急跳过 | SAFE | NEXUS_SKIP_AI_REVIEW=1 显式 opt-out |
|
|
|
|
## 文件清单
|
|
|
|
- `scripts/gate_ai_review.py`
|
|
- `scripts/gate_ai_review.sh`
|
|
- `deploy/pre_deploy_check.sh`
|
|
- `docs/reviews/.gitkeep`
|
|
|
|
## DoD
|
|
|
|
- [x] Step 3 规则扫描
|
|
- [x] Closure 表
|
|
- [x] 文件清单与 git diff 对齐
|
|
- [x] changelog ≥10 行
|