118 lines
4.4 KiB
JSON
118 lines
4.4 KiB
JSON
{
|
|
"version": "1.1",
|
|
"updated_at": "2026-03-22",
|
|
"description": "铸渊指令签名·授权名单 v1.1 — 铸渊只认签名，不认请求内容",
|
|
"signed_by": "TCS-0002∞",
|
|
"signed_by_name": "冰朔",
|
|
"parent_sys": "SYS-GLW-0001",
|
|
"owner": "ICE-0002∞",
|
|
"authorized_senders": {
|
|
"TCS-0002∞": {
|
|
"name": "冰朔",
|
|
"role": "MASTER",
|
|
"permission_tier": 0,
|
|
"scope": "全局",
|
|
"can_broadcast": true,
|
|
"broadcast_scope": "全权",
|
|
"note": "总主控·唯一 Tier 0"
|
|
},
|
|
"DEV-004": {
|
|
"name": "之之",
|
|
"role": "SUB_CTRL_PRIVATE",
|
|
"permission_tier": 1,
|
|
"scope": "全局",
|
|
"can_broadcast": true,
|
|
"broadcast_scope": "Tier 1 范围内",
|
|
"note": "冰朔私人副控·独立于光湖团队"
|
|
},
|
|
"DEV-002": {
|
|
"name": "肥猫",
|
|
"role": "SUB_CTRL_HOLOLAKE",
|
|
"permission_tier": 1,
|
|
"scope": "光湖",
|
|
"can_broadcast": true,
|
|
"broadcast_scope": "光湖模块范围内",
|
|
"note": "光湖团队主控"
|
|
},
|
|
"DEV-010": {
|
|
"name": "桔子",
|
|
"role": "SUB_CTRL_HOLOLAKE",
|
|
"permission_tier": 1,
|
|
"scope": "光湖",
|
|
"can_broadcast": true,
|
|
"broadcast_scope": "光湖模块范围内",
|
|
"note": "光湖团队主控"
|
|
},
|
|
"DEV-001": { "name": "页页", "role": "DEV", "permission_tier": 2, "scope": "自己分支", "can_broadcast": false, "note": "协作者" },
|
|
"DEV-003": { "name": "燕樊", "role": "DEV", "permission_tier": 2, "scope": "自己分支", "can_broadcast": false, "note": "协作者" },
|
|
"DEV-005": { "name": "小草莓", "role": "DEV", "permission_tier": 2, "scope": "自己分支", "can_broadcast": false, "note": "协作者" },
|
|
"DEV-006": { "name": "DEV-006", "role": "DEV", "permission_tier": 2, "scope": "自己分支", "can_broadcast": false, "note": "协作者" },
|
|
"DEV-007": { "name": "DEV-007", "role": "DEV", "permission_tier": 2, "scope": "自己分支", "can_broadcast": false, "note": "协作者" },
|
|
"DEV-008": { "name": "DEV-008", "role": "DEV", "permission_tier": 2, "scope": "自己分支", "can_broadcast": false, "note": "协作者" },
|
|
"DEV-009": { "name": "花尔", "role": "DEV", "permission_tier": 2, "scope": "自己分支", "can_broadcast": false, "note": "协作者" },
|
|
"DEV-011": { "name": "匆匆那年", "role": "DEV", "permission_tier": 2, "scope": "自己分支", "can_broadcast": false, "note": "协作者" },
|
|
"DEV-012": { "name": "Awen", "role": "DEV", "permission_tier": 2, "scope": "自己分支", "can_broadcast": false, "note": "协作者" },
|
|
"DEV-013": { "name": "小兴", "role": "DEV", "permission_tier": 2, "scope": "自己分支", "can_broadcast": false, "note": "协作者" },
|
|
"DEV-014": { "name": "时雨", "role": "DEV", "permission_tier": 2, "scope": "自己分支", "can_broadcast": false, "note": "协作者" },
|
|
"SYSTEM-RT02": { "name": "RT-02自动调度", "role": "SYSTEM", "permission_tier": 3, "scope": "白名单", "can_broadcast": false, "note": "仅白名单 workflow" }
|
|
},
|
|
"permission_tiers": {
|
|
"0": {
|
|
"label": "总主控",
|
|
"roles": ["MASTER"],
|
|
"allowed_operations": ["*"],
|
|
"denied_operations": []
|
|
},
|
|
"1": {
|
|
"label": "副控",
|
|
"roles": ["SUB_CTRL_PRIVATE", "SUB_CTRL_HOLOLAKE"],
|
|
"allowed_operations": [
|
|
"push_feature_branch",
|
|
"create_pr",
|
|
"trigger_sandbox_deploy",
|
|
"write_copilot_instructions",
|
|
"broadcast_tier2"
|
|
],
|
|
"denied_operations": [
|
|
"modify_branch_protection",
|
|
"modify_other_permissions",
|
|
"trigger_production_deploy",
|
|
"modify_zhuyuan_protocol"
|
|
]
|
|
},
|
|
"2": {
|
|
"label": "协作者",
|
|
"roles": ["DEV"],
|
|
"allowed_operations": [
|
|
"push_own_branch",
|
|
"create_pr",
|
|
"view_repo_status",
|
|
"write_syslog"
|
|
],
|
|
"denied_operations": [
|
|
"direct_command_zhuyuan",
|
|
"operate_other_branch",
|
|
"trigger_deploy",
|
|
"modify_branch_protection",
|
|
"modify_permissions"
|
|
]
|
|
},
|
|
"3": {
|
|
"label": "系统自动",
|
|
"roles": ["SYSTEM"],
|
|
"allowed_operations": [
|
|
"trigger_whitelisted_workflow"
|
|
],
|
|
"denied_operations": ["*_non_whitelisted"]
|
|
}
|
|
},
|
|
"system_workflow_whitelist": [
|
|
"bridge-syslog-intake",
|
|
"bridge-broadcast-pdf",
|
|
"bridge-heartbeat",
|
|
"daily-maintenance",
|
|
"zhuyuan-daily-selfcheck",
|
|
"zhuyuan-skyeye"
|
|
]
|
|
}
|