fix(api): fail closed on stale production runtime deploy readback
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / build-and-deploy (push) Has been cancelled
CD Pipeline / post-deploy-checks (push) Has been cancelled
CD Pipeline / tests (push) Has been cancelled

This commit is contained in:
Your Name
2026-06-30 18:55:15 +08:00
parent 12c1811e50
commit 76fee33e1b
5 changed files with 112 additions and 10 deletions

View File

@@ -1,3 +1,16 @@
## 2026-06-30 — 19:22 P0-006 production deploy closure false-positive guard
**照主線修正的問題**
- Production Delivery Workbench 仍讀到舊 runtime build `7890778b83`,但舊 `production_image_tag_matches_main=true` 只代表 runtime build 等於舊 GitOps desired tag不能證明 runtime build 已等於目前 Gitea main。
- `awoooi_production_deploy_readback_blocker.py` 現在要求 runtime build 同時等於 GitOps desired tag、committed source-control readback 與 committed production image tag才可宣稱 `production_image_tag_matches_main=true`
- `verify-awoooi-non110-cd-closure.py` 現在把 runtime/source/image 三個 readback 布林納入 closure 判定live production 目前正確回 `blocked_production_image_not_current`,下一步是完成 CD 後重跑 production route/readback。
**驗證**
- `pytest apps/api/tests/test_awoooi_production_deploy_readback_blocker.py apps/api/tests/test_delivery_closure_workbench_api.py ops/runner/test_verify_awoooi_non110_cd_closure.py ops/runner/test_cd_controlled_runtime_profile.py -q``43 passed`
- `py_compile``git diff --check`:通過。
**邊界**:未 workflow_dispatch未 SSH 寫主機,未重啟主機,未 restart Docker daemon / host Nginx / K3s / DB / Redis / firewall未 prune / restore / DB write未讀 secret / token / raw sessions / SQLite / `.env`,未使用 GitHub / `gh` / GitHub API。
## 2026-06-30 — 18:52 P0-006 StockPlatform receipt updated after upstream recovery
**照主線修正的問題**