review(codex): 固化 V2R1 最新发布审查结论

.agent/blockers.json

@@ -0,0 +1,57 @@
+{
+  "schema": "aios.v2.agent-blockers.v1",
+  "task_id": "AIOS-V2R1-PRODUCTION-SUPERVISOR-20260720",
+  "updated_at": "2026-07-21T04:30:00Z",
+  "blockers": [
+    {
+      "blocker_id": "BLK-OPENCLAW-PLAINTEXT-SECRETS",
+      "severity": "high",
+      "status": "resolved",
+      "root_cause": "OpenClaw 三处 managed plaintext。",
+      "fix": "迁移为单一 file Secret Provider 并轮换 Gateway Token。",
+      "verification": "最终 audit 四类计数均为 0，OneAPI 实际调用通过。",
+      "commit": "bf01a13f3aaf42a386232ed2f5409feb0f79fcf6",
+      "resolved_at": "2026-07-20T10:18:36Z"
+    },
+    {
+      "blocker_id": "BLK-AIOS-V2-SIGNING-MATERIAL-MISSING",
+      "severity": "high",
+      "status": "resolved",
+      "root_cause": "Ed25519 Key ID 与 HMAC 实现不一致且材料缺失。",
+      "fix": "真实 Ed25519 合同及受保护材料。",
+      "verification": "0600、sign/verify、篡改拒绝通过。",
+      "commit": "8a36f7832bc105e4b9d32ffbe018abed2ff1b1ab",
+      "resolved_at": "2026-07-20T10:18:36Z"
+    },
+    {
+      "blocker_id": "BLK-CANDIDATE-NOT-MERGED",
+      "severity": "high",
+      "status": "resolved",
+      "root_cause": "OpenClaw 任务未包含 Candidate。",
+      "fix": "--no-ff 合并最新 Candidate。",
+      "verification": "Candidate 为 OpenClaw HEAD 祖先且 OID 同步。",
+      "commit": "f55dfd975e9d716b690c7693742e7cf2beaa55e7",
+      "resolved_at": "2026-07-20T10:18:36Z"
+    },
+    {
+      "blocker_id": "BLK-OPENCLAW-RUN-PROVENANCE-MISSING",
+      "severity": "high",
+      "status": "resolved",
+      "root_cause": "旧插件只有进程内 runId/sender Map，缺少 Owner-signed Schema、持久 Store 和限定 Git Writer。",
+      "fix": "部署 aios-tenant-boundary rc2，增加 Ed25519 issuer/store、Run/Sender/OID/期限绑定、一次性 permit 与七路径专用 Writer。",
+      "verification": "Provenance openclaw-v2r1-20260721T031523Z 完成 heartbeat 写入、Commit、普通 Push 和审计；README.md 越权写入被拒绝；Node 测试 9/9。",
+      "commit": "25c25abd3ed19091fe078d4d7a271c57f23e87fb",
+      "resolved_at": "2026-07-21T03:23:44Z"
+    },
+    {
+      "blocker_id": "BLK-CONTROLLER-LEGACY-GITEA-CHECK",
+      "severity": "high",
+      "status": "resolved",
+      "root_cause": "硬编码旧仓库。",
+      "fix": "配置化 V2R1 OID 健康检查并使用只读 Credential。",
+      "verification": "12 项测试、detached clean、fully_synced。",
+      "commit": "6188da26453505dacde9d6d298191437164c8d27",
+      "resolved_at": "2026-07-20T10:18:36Z"
+    }
+  ]
+}

.agent/claim.json

@@ -0,0 +1,13 @@
+{
+  "schema": "aios.v2.agent-claim.v1",
+  "task_id": "AIOS-V2R1-PRODUCTION-SUPERVISOR-20260720",
+  "executor": "codex",
+  "executor_instance": "windows-chatgpt-owner-supervisor",
+  "task_branch": "task/codex/AIOS-V2R1-PRODUCTION-SUPERVISOR-20260720",
+  "candidate_branch": "integration/aios-v2r1-cto-production-candidate-20260720",
+  "candidate_commit": "ba7669c3b49f98cf3500af6ea966ba0db472ff3b",
+  "claimed_at": "2026-07-20T08:51:25Z",
+  "owner_observation": "五项 Blocker、Gate A/B、离线验收、OpenClaw 在线合同、双服务重启与回滚均通过；Hermes 完整在线 Worker 生命周期仍缺服务端点证据，Codex 维持 STOP_PREPRODUCTION。",
+  "owner_observation_at": "2026-07-21T04:30:00Z",
+  "reviewed_openclaw_commit_before_evidence": "b158041b8633e658c34ce182f3c8aa97b4bf5f9a"
+}

.agent/credential-status.json

@@ -0,0 +1,18 @@
+{
+  "schema": "aios.agent.credential-status.v1",
+  "task_id": "task/codex/AIOS-V2R1-PRODUCTION-SUPERVISOR-20260720",
+  "last_updated": "2026-07-21T04:30:00Z",
+  "plaintext_findings_before": 3,
+  "plaintext_findings_after": 0,
+  "gateway_token_rotated": true,
+  "secret_values_recorded": false,
+  "signing_material_configured": true,
+  "signing_key_id": "openclaw-v2r1-candidate-ed25519",
+  "runtime_sign_verify_test": "passed",
+  "controller_credential_scope": "read:repository",
+  "run_provenance_status": "resolved",
+  "provenance_id": "openclaw-v2r1-20260721T031523Z",
+  "openclaw_runtime_plugin_version": "2.1.0-rc.3",
+  "runtime_public_key_only_hot_path": true,
+  "secret_values_recorded_in_evidence": false
+}

.agent/heartbeat.json

@@ -0,0 +1,10 @@
+{
+  "schema": "aios.v2.agent-heartbeat.v1",
+  "task_id": "AIOS-V2R1-PRODUCTION-SUPERVISOR-20260720",
+  "executor": "codex",
+  "heartbeat_at": "2026-07-21T04:30:00Z",
+  "state": "reviewing",
+  "current_step": "FINAL_REVIEW_HERMES_ONLINE_GAP",
+  "reviewed_commit": "b158041b8633e658c34ce182f3c8aa97b4bf5f9a",
+  "openclaw_evidence_commit": "0be3ba09e42b4f6db56461e3ca3a3fcc0a487f31"
+}

.agent/progress.json

@@ -0,0 +1,73 @@
+{
+  "schema": "aios.v2.agent-progress.v1",
+  "task_id": "AIOS-V2R1-PRODUCTION-SUPERVISOR-20260720",
+  "updated_at": "2026-07-21T04:30:00Z",
+  "state": "reviewing",
+  "candidate_oid": "634f6b164f5b20372ab9ec8144bbf76df97de335",
+  "openclaw_task_oid_at_review": "0be3ba09e42b4f6db56461e3ca3a3fcc0a487f31",
+  "codex_task_oid_before_evidence": "be4726178aa8fa59321aafaabcff8a83653cc1b8",
+  "gitea_sync": {
+    "candidate_match": true,
+    "openclaw_task_match": true,
+    "codex_task_match_before_this_evidence": true
+  },
+  "completed_checks": [
+    "worktree",
+    "candidate_merge",
+    "secrets_audit_zero",
+    "ed25519_sign_verify",
+    "controller_fully_synced",
+    "owner_signed_provenance_writer",
+    "unauthorized_path_denied",
+    "provenance_audit_chain",
+    "gate_a",
+    "gate_b_10_of_10",
+    "offline_acceptance_8_0_1",
+    "openclaw_online_contract",
+    "aios_openclaw_restart_recovery",
+    "controlled_rollback_and_forward"
+  ],
+  "review_conclusion": "五项 Blocker、文档/代码 Gate、候选测试、离线验收、OpenClaw 在线合同、重启与回滚均通过；Hermes 完整在线 Worker 生命周期未形成服务端点证据，预发布仍停止。",
+  "check_time_window": {
+    "started_at": "2026-07-20T08:24:30Z",
+    "ended_at": "2026-07-20T09:03:08Z"
+  },
+  "operator": "windows-chatgpt-owner-supervisor",
+  "reviewer": "codex-supervisor + Spark architect/explorer/implementer/validator/docs_reporter",
+  "approver": "AIOS Owner gate recorded by Windows ChatGPT Owner Supervisor",
+  "evidence_artifacts": [
+    "task/openclaw/AIOS-V2R1-PRODUCTION-DEPLOY-20260720@1aa71f233d2c2a6ed7290d0a3ddcb04dcd84febe",
+    "task/codex/AIOS-V2R1-PRODUCTION-SUPERVISOR-20260720:.agent/",
+    "/data/aios-gitops/runtime/backups/gitea-db-before-openclaw-token-rotation-20260720T084251Z.sqlite3",
+    "/home/aiman/.ssh/known_hosts.aios-v2r1-backup-20260720T083647Z",
+    "/var/log/aios-openclaw-v2r1-evidence-repair-20260720.json"
+  ],
+  "independent_reviews": {
+    "architect": "REJECT；只允许修复+复验，禁止生产放行。",
+    "explorer": "OpenClaw evidence OID 已重新闭环，但 Candidate 未合并、Secret 与预发布仍未确认。",
+    "implementer": "IMPLEMENTATION_SAFE_WITH_BLOCKERS；已实施动作无需立即回滚。",
+    "validator": "BLOCKED；Secret、环境、预发布门禁未通过。",
+    "docs_reporter": "已补齐时间窗、证据路径、operator/reviewer/approver、blocker 与 final_decision。"
+  },
+  "final_decision": "STOP_PREPRODUCTION",
+  "aios_v2_env_status": {
+    "exists": true,
+    "owner": "root",
+    "group": "gitops",
+    "mode": "0640",
+    "four_fields_nonempty": true,
+    "credential_ref_target_exists": true,
+    "signing_material_target_exists": true
+  },
+  "open_checks": [
+    "hermes_online_claim_start_heartbeat_complete_fail_cancel",
+    "hermes_online_lease_expiry_worker_crash_recovery",
+    "hermes_online_cell_profile_and_invalid_result_rejection"
+  ],
+  "gate_a": "passed",
+  "gate_b": "passed_10_of_10",
+  "offline_acceptance": "passed_8_failed_0_warning_1",
+  "online_openclaw": "passed",
+  "restart_recovery": "passed",
+  "rollback_drill": "passed"
+}

.agent/result.json

@@ -0,0 +1,27 @@
+{
+  "schema": "aios.v2.agent-result.v1",
+  "task_id": "AIOS-V2R1-PRODUCTION-SUPERVISOR-20260720",
+  "final_status": "PARTIAL",
+  "candidate_commit": "ba7669c3b49f98cf3500af6ea966ba0db472ff3b",
+  "reviewed_commit": "b158041b8633e658c34ce182f3c8aa97b4bf5f9a",
+  "gitea_sync": {
+    "candidate_match": true,
+    "openclaw_task_match": true,
+    "codex_task_match_before_this_evidence": true
+  },
+  "credential_rotation_status": "secretref_resolved",
+  "test_status": "Gate A 通过；Gate B 10/10；离线 8/0/1；OpenClaw 在线、重启恢复、回滚通过；Hermes 完整在线 Worker 生命周期未覆盖",
+  "deployment_status": "STOP_PREPRODUCTION",
+  "rollback_status": "Previous 2a2b702 与 Current b158041 双向演练通过且业务状态保留",
+  "documentation_sync_status": "updated",
+  "open_blockers": [],
+  "release_recommendation": "STOP_PREPRODUCTION",
+  "completed_at": "2026-07-21T04:30:00Z",
+  "openclaw_evidence_commit": "0be3ba09e42b4f6db56461e3ca3a3fcc0a487f31",
+  "independent_validation": "PASS_FOR_IMPLEMENTED_OPENCLAW_BOUNDARY",
+  "operator": "windows-chatgpt-owner-supervisor",
+  "reviewer": "codex-supervisor + Spark roles",
+  "approver": "AIOS Owner gate recorded",
+  "remaining_risk": "Hermes 完整在线 Worker 生命周期缺少可调用服务端点与实时证据",
+  "formal_online_acceptance": "partial"
+}

.agent/status.json

@@ -0,0 +1,18 @@
+{
+  "schema": "aios.v2.agent-status.v1",
+  "task_id": "AIOS-V2R1-PRODUCTION-SUPERVISOR-20260720",
+  "executor": "codex",
+  "state": "reviewing",
+  "claimed_at": "2026-07-20T08:51:25Z",
+  "running_at": "2026-07-20T08:51:25Z",
+  "updated_at": "2026-07-21T04:30:00Z",
+  "last_heartbeat": "2026-07-21T04:30:00Z",
+  "current_step": "FINAL_REVIEW_HERMES_ONLINE_GAP",
+  "candidate_commit": "ba7669c3b49f98cf3500af6ea966ba0db472ff3b",
+  "reviewed_commit": "b158041b8633e658c34ce182f3c8aa97b4bf5f9a",
+  "release_recommendation": "STOP_PREPRODUCTION",
+  "openclaw_evidence_commit": "0be3ba09e42b4f6db56461e3ca3a3fcc0a487f31",
+  "status": "reviewing"
+  ,"formal_online_acceptance": "partial"
+  ,"remaining_gap": "Hermes full online worker lifecycle"
+}

.agent/task.json

@@ -0,0 +1,31 @@
+{
+  "schema": "aios.v2.agent-task.v1",
+  "task_id": "AIOS-V2R1-PRODUCTION-SUPERVISOR-20260720",
+  "display_name": "AIOS V2R1 Codex 架构监督、阻塞处理与发布审查任务",
+  "language": "zh-CN",
+  "executor": "codex",
+  "role": "architecture-supervisor",
+  "state": "queued",
+  "candidate_branch": "integration/aios-v2r1-cto-production-candidate-20260720",
+  "candidate_commit": "634f6b164f5b20372ab9ec8144bbf76df97de335",
+  "canonical_task": "tasks/codex-production-supervisor-task.yaml",
+  "supervises": "task/openclaw/AIOS-V2R1-PRODUCTION-DEPLOY-20260720",
+  "claim_required": true,
+  "heartbeat_interval_seconds": 300,
+  "evidence_directory": ".agent/evidence",
+  "instructions": [
+    "领取前读取候选分支完整中文文档、ADR、追踪矩阵和候选报告",
+    "领取后写入 .agent/claim.json 并把状态改为 claimed",
+    "持续审阅 OpenClaw 的 claim、heartbeat、progress、blocker、commit 和 result",
+    "分析失败测试、架构偏移、多租户、安全和文档同步阻塞",
+    "需要修改时创建 Patch 分支、增加复现测试并同步文档",
+    "所有阻塞和审查结论必须提交到系统统一审视",
+    "禁止缺少证据时批准发布或削弱安全门禁"
+  ],
+  "acceptance_commands": [
+    "python3 tools/aios_v2_docs_code_check.py --base-ref integration/aios-v2r1-cto-production-candidate-20260720",
+    "python3 -m unittest discover -s tests/aios_v2_candidate -p test_*.py -v",
+    "bash deploy/aios-v2/acceptance/run-all.sh"
+  ],
+  "created_at": "2026-07-20T00:00:00Z"
+}

patches/task_codex_AIOS-V2R1-PRODUCTION-SUPERVISOR-20260720.branch.json

@@ -0,0 +1,9 @@
+{
+  "type": "branch",
+  "branch": "task/codex/AIOS-V2R1-PRODUCTION-SUPERVISOR-20260720",
+  "base": "integration/aios-v2r1-cto-production-candidate-20260720",
+  "created_by": "chatgpt-gitops-bot",
+  "created_at": "2026-07-20T03:49:13Z",
+  "direct_main_push": false,
+  "owner_approval_required": true
+}