0100ab2582
Move line-walk/delta/phase2/frontend audits and legacy memory into docs/archive/, add functional development SSOT, thin AGENTS/CLAUDE stubs, and regenerate changelog/audit indexes via consolidate_docs.py.
2.0 KiB
2.0 KiB
Phase 4 — 插件驱动审计收尾 Closure
日期: 2026-06-04
计划: .cursor/plans/插件驱动审计验证_5bf6bf55.plan.md
完成矩阵
| 阶段 | 内容 | 状态 | 证据 |
|---|---|---|---|
| Phase 0 | local_verify 基线 + npm 代理文档 | ✅ | docs/changelog/2026-06-04-npm-proxy-mysql-mcp.md |
| Phase 1 | D1–D8 delta 审计 | ✅ | audit-delta-2026-06-04-waveD*.md |
| Phase 2 | P2-1~P2-9 深审 | ✅ | audit-phase2-2026-06-04-waveP2-*.md |
| L2b | local_verify | ✅ | 每波全绿 |
| L2c | pytest 157 | ✅ | 2026-06-04 |
| L3 | pre_deploy_check | ⚠️ Gate7 需 commit 后复验 | docs/audit/2026-06-04-plugin-audit-gate7-closure.md |
| L4 | Playwright 本地 55/55 | ✅ | docs/changelog/2026-06-04-l4-local-playwright-pass.md |
| L5 | 生产部署 | ❌ 未执行 | 需用户批准 |
前端 14 页覆盖(SSOT)
专用深审: docs/reports/audit-frontend-14p-2026-06-04-closure.md
| 批次 | 页面 | H |
|---|---|---|
| batch1 | Dashboard, Servers, Terminal, Files, Push | 14 |
| batch2 | Scripts, Credentials, Schedules, Retries, Commands | 15 |
| batch3 | Alerts, Audit, Settings, Login | 14 |
| 合计 14 页 / 4112 行 | 43 |
FINDING 汇总
| 级别 | 新增(本计划) | 已接受 RISK |
|---|---|---|
| P0/P1 | 0 | WS query JWT、Agent global key、sshpass |
| P2 | 0 待修 | install-deps 包名 questing 差异 |
插件使用记录
| 插件 | 用途 | 状态 |
|---|---|---|
| mysql-mcp | 项目配置 | 可用 |
| Playwright CLI | L4 E2E | ✅ 55 pass |
| Playwright MCP | 浏览器 | errored,CLI 替代 |
| Chainguard | 镜像扫描 | 用户跳过 |
| security-reviewer | 各波 H 扫描 | 报告内 Closure |
DoD
- Phase 1 + Phase 2 全波报告
- 14 页前端 closure
- L4 本地验收
- Gate7 审计清单文件
- L5 生产(可选)
下一步
git add+ commit 工作区 → 复跑pre_deploy_check.sh- 用户批准 → L5 SSH 部署 + 生产 smoke