feat(governance): pin selective upstream import contract

2026-08-15 12:13:09 +08:00
parent 0fd111d16b
commit 8abd248f49
11 changed files with 1053 additions and 51 deletions
@@ -0,0 +1,34 @@
+# PR-0 Upstream Governance Baseline — 2026-08-14
+
+## Scope
+
+Read-only baseline before implementing PR-0 from `Jyotisha_Coding_Agent_Execution_and_Test_Plan_2026-08-14.md`. This PR is limited to upstream provenance, one-way selective-import policy, deterministic manifests, and regression guards. It does not modify consultation, rectification, report runtime, authentication, billing, database, deployment, production, or DNS behavior.
+
+## Repository baseline
+
+- Commercial repository: `root/Jyotisha`
+- Branch: `codex/pr0-upstream-governance`
+- Base and refreshed `origin/staging`: `0fd111d16b45796086a6c1d0945dbd3de6755d8a`
+- Worktree at baseline: clean
+- Baseline recorded at: `2026-08-14T02:43:14Z`
+
+## Research input identity
+
+- Repository: `https://github.com/732642856/yinduzhanxing`
+- Commit: `5db72537741fcedaa7b5498502d4a31b0f9fc147`
+- Git tree object: `16935cb68a6fa1ef72661cfca4650a42c60e9b2c`
+- ZIP SHA-256: `07d6b71af311160c544433eb9d51beb5b0a5e4bd0afabd4a7d43d3edb573518d`
+- Importer-compatible source tree SHA-256: `18e3122ef73c2776a950bfec128efeb09ac0524ec1d2179390260166b87ca814`
+- Root research `SKILL.md` SHA-256: `ef453dd8dd4a9da72b56010ec33bb7dab57fd72333d8785cac0986d5456e17c5`
+- ZIP versus Git commit comparison: 2,901 files; zero missing, extra, or byte differences
+
+## Baseline checks
+
+| Command | Result | Duration | Notes |
+|---|---:|---:|---|
+| `.venv/bin/python scripts/pre_work_check.py --remote-timeout 8 --command-timeout 45` | pass | about 17s | Python 3.12.12; fragment scan, external adapters, remote visibility, and focused tests passed |
+| `.venv/bin/python -m pytest -q tests/test_import_yinduzhanxing.py tests/test_report_orchestrator_reader_contract.py` | 15 passed | 1.68s | Existing importer and report provenance baseline |
+
+## Protected surfaces
+
+PR-0 must not modify the commercial root `SKILL.md`, the birth-time rectification Skill, frontend production code, authentication, identity, billing, payment, subscriptions, entitlements, database migrations/RLS/RPC, deployment workflows, production, or DNS.