tasks(aios-v2): 完整中文化 Codex 生产监督任务

tasks/codex-production-supervisor-task.yaml

@@ -2,38 +2,126 @@ apiVersion: aios.v2/v1
 kind: AgentTask
 metadata:
   name: codex-production-supervisor-task
+  displayName: AIOS V2R1 Codex 架构监督、阻塞处理与发布审查任务
   owner: AIOS-Control-Plane
+  language: zh-CN
 spec:
   executor: codex
   role: architecture-supervisor
+  candidateBranch: integration/aios-v2r1-cto-production-candidate-20260720
+  taskBranch: task/codex/AIOS-V2R1-PRODUCTION-SUPERVISOR-20260720
+  initialState: queued
   objective: >-
-    Supervise AIOS V2R1 production candidate deployment, resolve blocking issues,
-    review patches, and maintain architecture/document consistency.
+    监督 AIOS V2R1 Candidate 的预发布部署和缺陷修复，持续检查唯一控制面、
+    多租户、安全、文档、测试和回滚边界；分析并解决 OpenClaw 无法独立处理的阻塞，
+    最终输出统一的发布就绪结论。
+  inputs:
+    - docs/aios-v2/
+    - docs/aios-v2/adr/
+    - AIOS-V2R1-PRODUCTION-CANDIDATE.md
+    - tasks/openclaw-production-deploy-task.yaml
+    - deploy/aios-v2/
+    - active-runtime/app/
+    - tests/aios_v2_candidate/
+    - tools/aios_v2_docs_code_check.py
   responsibilities:
-    - review OpenClaw deployment evidence
-    - review Hermes runtime issues
-    - analyze failed tests and blockers
-    - approve or reject patch direction
-    - verify docs/code/traceability consistency
-    - require ADR updates for architecture changes
-    - maintain final release readiness assessment
+    - 领取任务并写入 claim 证据
+    - 定期写入 heartbeat、progress 和监督结论
+    - 审阅 OpenClaw 的部署、健康检查、联调和回滚证据
+    - 分析失败测试、运行时异常和阻塞根因
+    - 审查所有 patch 的架构边界、租户隔离和 Secret 安全
+    - 解决需要跨模块修改的阻塞问题
+    - 对控制面、数据模型、状态机或 Runtime Contract 变化要求新增或更新 ADR
+    - 执行文档与代码匹配检查
+    - 验证需求、架构、契约、代码、测试、部署和验收追踪完整
+    - 拒绝缺少复现、测试、文档或回滚说明的修改
+    - 将所有阻塞、审查结论、修复 Commit 和剩余风险提交到系统
+    - 输出是否允许进入合并、Tag 和生产部署 Gate 的最终建议
   prohibited:
-    - bypass GitOps process
-    - directly apply unreviewed production changes
-    - weaken tenant isolation or security gates
-    - approve missing evidence
-  required_checks:
-    - requirement traceability
-    - architecture boundary compliance
-    - test evidence
-    - secret safety
-    - rollback readiness
-    - document synchronization
-  evidence_required:
-    - claim
-    - heartbeat
-    - progress
-    - blocker
-    - review_result
-    - commit
-    - final_recommendation
+    - 绕过 GitOps 直接应用生产修改
+    - 直接 push main 或创建生产 Tag
+    - 在没有证据时批准发布
+    - 为快速通过测试而削弱租户隔离、安全门禁或文档门禁
+    - 忽略 OpenClaw 提交的 blocker
+    - 未经 AIOS Owner 批准接受重大剩余风险
+  requiredChecks:
+    architecture:
+      - AIOS 仍是唯一控制面
+      - Agent Router 只承担调度
+      - OpenClaw 与 Hermes 不拥有权威 Task Lifecycle
+      - Web 不直接访问 Runtime
+    tenancy:
+      - 所有新资源和接口包含 tenant_id
+      - 跨租户负向测试存在且通过
+      - Runtime Result tenant/task/trace 校验存在
+    security:
+      - Git 中无明文 Secret
+      - Secret 仅通过引用或受保护文件解析
+      - 身份代理防伪边界明确
+    quality:
+      - 文档—代码匹配检查通过
+      - 测试命令、exit code 和 pass/fail 有证据
+      - 重启、健康检查和回滚演练有证据
+      - 本地与 Gitea Candidate OID 一致
+    documentation:
+      - 用户需求已同步
+      - 目标架构已同步
+      - 模块契约已同步
+      - 追踪矩阵已同步
+      - ADR 已同步
+      - 候选报告已同步
+  blockerWorkflow:
+    states: [new, analyzing, fix_proposed, fix_in_progress, verification, resolved, accepted_risk]
+    requiredFields:
+      - blocker_id
+      - severity
+      - affected_requirement
+      - affected_module
+      - reproduction
+      - root_cause
+      - proposed_fix
+      - owner
+      - patch_branch
+      - verification
+      - documentation_updates
+      - exit_condition
+  evidenceRequired:
+    claim:
+      fields: [task_id, executor, branch, candidate_commit, claimed_at]
+    heartbeat:
+      intervalSeconds: 300
+      fields: [status, current_step, reviewed_commits, open_blockers, heartbeat_at]
+    review:
+      fields:
+        - patch_branch
+        - patch_commit
+        - architecture_result
+        - tenant_result
+        - security_result
+        - documentation_result
+        - test_result
+        - decision
+    result:
+      fields:
+        - final_status
+        - candidate_commit
+        - reviewed_commits
+        - resolved_blockers
+        - open_blockers
+        - accepted_risks
+        - documentation_sync_status
+        - test_evidence_status
+        - preproduction_status
+        - rollback_status
+        - local_gitea_oid_status
+        - final_recommendation
+  acceptanceCommands:
+    - python3 tools/aios_v2_docs_code_check.py --base-ref integration/aios-v2r1-cto-production-candidate-20260720
+    - python3 -m unittest discover -s tests/aios_v2_candidate -p 'test_*.py' -v
+    - bash deploy/aios-v2/acceptance/run-all.sh
+  completionCriteria:
+    - OpenClaw 部署与修复结果已完整审阅
+    - 所有严重和高风险 blocker 已解决或由 Owner 明确接受
+    - 文档、代码、测试和部署一致
+    - Candidate 精确 Commit 的测试和预发布证据完整
+    - 输出明确的进入下一 Gate、继续修复或停止发布建议