|
|
@@ -0,0 +1,349 @@
|
|
|
+{
|
|
|
+ "schema_version": "1.0",
|
|
|
+ "work_package": "P2-WP13",
|
|
|
+ "generated_at": "2026-08-02",
|
|
|
+ "result_definitions": {
|
|
|
+ "PASS_LOCAL": "当前分支的本地工程证据通过，不能据此认定企业正式验收通过",
|
|
|
+ "FAIL": "已执行但不符合预期",
|
|
|
+ "BLOCKED_EXTERNAL": "需要企业人员、数据、环境、培训或签字，当前不能执行",
|
|
|
+ "NOT_RUN": "本轮未执行且不属于外部依赖"
|
|
|
+ },
|
|
|
+ "cases": [
|
|
|
+ {
|
|
|
+ "id": "P2-WP13-UAT-001",
|
|
|
+ "work_packages": ["P2-WP01"],
|
|
|
+ "module_ids": ["CAT-03", "CAT-13", "CAT-20", "CAT-21"],
|
|
|
+ "title": "管理员初始化第二业务域领域模板并保留版本审计",
|
|
|
+ "actor": "admin",
|
|
|
+ "acceptance_level": "LOCAL_ENGINEERING",
|
|
|
+ "preconditions": ["备品备件领域模板已固化", "管理员具备模板管理权限"],
|
|
|
+ "steps": ["执行模板差异预检", "导入模板并核对六类对象", "复核版本和追加式回滚证据"],
|
|
|
+ "expected": ["模板导入不复制物料域服务", "六类对象、八条规则和三项指标一致", "历史版本不可变"],
|
|
|
+ "evidence": ["docs/validation/P2_WP01_DOMAIN_TEMPLATE_EVIDENCE.md"],
|
|
|
+ "result": "PASS_LOCAL",
|
|
|
+ "notes": "企业来源与责任人仍保持待绑定。"
|
|
|
+ },
|
|
|
+ {
|
|
|
+ "id": "P2-WP13-UAT-002",
|
|
|
+ "work_packages": ["P2-WP01"],
|
|
|
+ "module_ids": ["CAT-20", "GOV-03"],
|
|
|
+ "title": "领域模板管理员、编辑者和查看者权限分离",
|
|
|
+ "actor": "viewer",
|
|
|
+ "acceptance_level": "LOCAL_ENGINEERING",
|
|
|
+ "preconditions": ["三级本地角色可构造", "模板接口启用鉴权"],
|
|
|
+ "steps": ["查看者读取模板", "编辑者执行 dry-run", "验证非管理员不能导入或回滚"],
|
|
|
+ "expected": ["查看者只读", "编辑者只预检", "只有管理员可导入和回滚"],
|
|
|
+ "evidence": ["tests/test_domain_template_api.py"],
|
|
|
+ "result": "PASS_LOCAL",
|
|
|
+ "notes": "角色为本地工程角色，不代表企业账号已配置。"
|
|
|
+ },
|
|
|
+ {
|
|
|
+ "id": "P2-WP13-UAT-003",
|
|
|
+ "work_packages": ["P2-WP02"],
|
|
|
+ "module_ids": ["CAT-09", "CAT-10", "CAT-17", "CON-15"],
|
|
|
+ "title": "主动元数据发现、增量游标和字段血缘",
|
|
|
+ "actor": "editor",
|
|
|
+ "acceptance_level": "LOCAL_ENGINEERING",
|
|
|
+ "preconditions": ["受控发现计划存在", "编辑者具备运行权限"],
|
|
|
+ "steps": ["执行快照与增量批次", "重放相同批次", "检查字段变化、血缘和失败原因"],
|
|
|
+ "expected": ["成功批次才推进游标", "重放不追加版本", "无法解析的血缘失败关闭"],
|
|
|
+ "evidence": ["docs/validation/P2_WP02_ACTIVE_METADATA_EVIDENCE.md"],
|
|
|
+ "result": "PASS_LOCAL",
|
|
|
+ "notes": "企业调度器和真实文件/API 来源尚未验收。"
|
|
|
+ },
|
|
|
+ {
|
|
|
+ "id": "P2-WP13-UAT-004",
|
|
|
+ "work_packages": ["P2-WP02", "P2-WP06"],
|
|
|
+ "module_ids": ["CAT-23", "CAT-26", "GOV-09"],
|
|
|
+ "title": "第二业务域责任人处理健康信号和资产纠错",
|
|
|
+ "actor": "second_domain_owner",
|
|
|
+ "acceptance_level": "LOCAL_ENGINEERING",
|
|
|
+ "preconditions": ["纠错已绑定责任角色", "资产版本号有效"],
|
|
|
+ "steps": ["读取四类健康信号", "提交资产纠错", "由指定责任人按版本处置"],
|
|
|
+ "expected": ["健康信号可追溯", "非责任人不能处置", "提交和处置均追加审计"],
|
|
|
+ "evidence": ["tests/core/data_source/test_active_metadata.py"],
|
|
|
+ "result": "PASS_LOCAL",
|
|
|
+ "notes": "企业真实责任人尚未绑定。"
|
|
|
+ },
|
|
|
+ {
|
|
|
+ "id": "P2-WP13-UAT-005",
|
|
|
+ "work_packages": ["P2-WP03"],
|
|
|
+ "module_ids": ["SEM-03", "SEM-04", "SEM-06", "SEM-07"],
|
|
|
+ "title": "术语、代码集、指标和字段映射发布链",
|
|
|
+ "actor": "second_domain_owner",
|
|
|
+ "acceptance_level": "LOCAL_ENGINEERING",
|
|
|
+ "preconditions": ["通用语义对象样本已建立", "创建人与审批人分离"],
|
|
|
+ "steps": ["提交术语、代码集和指标", "独立审批并发布", "执行追加式回滚"],
|
|
|
+ "expected": ["引用完整性通过", "版本不原地覆盖", "指标不携带可执行 SQL"],
|
|
|
+ "evidence": ["docs/validation/P2_WP03_SEMANTIC_GOVERNANCE_EVIDENCE.md"],
|
|
|
+ "result": "PASS_LOCAL",
|
|
|
+ "notes": "企业正式术语、代码集和指标口径待业务签认。"
|
|
|
+ },
|
|
|
+ {
|
|
|
+ "id": "P2-WP13-UAT-006",
|
|
|
+ "work_packages": ["P2-WP03"],
|
|
|
+ "module_ids": ["SEM-02", "SEM-14", "SEM-22"],
|
|
|
+ "title": "查看者读取已发布语义且不能越权发布",
|
|
|
+ "actor": "viewer",
|
|
|
+ "acceptance_level": "LOCAL_ENGINEERING",
|
|
|
+ "preconditions": ["已发布语义对象存在", "查看者已认证"],
|
|
|
+ "steps": ["读取语义对象和导出", "尝试提交发布动作", "检查知识同步待处理状态"],
|
|
|
+ "expected": ["已发布内容可读", "发布动作被拒绝", "知识配置缺失时事件保持 pending"],
|
|
|
+ "evidence": ["tests/data_research/test_semantic_governance_api.py"],
|
|
|
+ "result": "PASS_LOCAL",
|
|
|
+ "notes": "本地权限验证不替代企业用户映射。"
|
|
|
+ },
|
|
|
+ {
|
|
|
+ "id": "P2-WP13-UAT-007",
|
|
|
+ "work_packages": ["P2-WP04"],
|
|
|
+ "module_ids": ["DQA-02", "DQA-05", "DQA-06", "DQA-08", "DQA-09"],
|
|
|
+ "title": "通用画像、趋势、异常、新鲜度和质量 SLA",
|
|
|
+ "actor": "editor",
|
|
|
+ "acceptance_level": "LOCAL_ENGINEERING",
|
|
|
+ "preconditions": ["质量模板已发布", "脱敏双业务域样本可用"],
|
|
|
+ "steps": ["执行质量画像", "核对趋势和异常", "触发 SLA 违约与恢复"],
|
|
|
+ "expected": ["统计结果确定性", "样例不可逆摘要", "违约和恢复形成事件"],
|
|
|
+ "evidence": ["docs/phase2/P2_WP04_QUALITY_OPERATIONS.md"],
|
|
|
+ "result": "PASS_LOCAL",
|
|
|
+ "notes": "企业阈值、时间源和统计窗口尚未验收。"
|
|
|
+ },
|
|
|
+ {
|
|
|
+ "id": "P2-WP13-UAT-008",
|
|
|
+ "work_packages": ["P2-WP04"],
|
|
|
+ "module_ids": ["DQA-02", "DQA-12", "DQA-13"],
|
|
|
+ "title": "查看者读取质量证据但不能执行规则",
|
|
|
+ "actor": "viewer",
|
|
|
+ "acceptance_level": "LOCAL_ENGINEERING",
|
|
|
+ "preconditions": ["质量运行证据存在", "查看者已认证"],
|
|
|
+ "steps": ["查看画像和发现", "尝试执行质量模板", "核对根因仅引用权威证据"],
|
|
|
+ "expected": ["读取成功", "执行被拒绝", "不生成无证据因果结论"],
|
|
|
+ "evidence": ["tests/core/data_rules/test_quality_operations_api.py"],
|
|
|
+ "result": "PASS_LOCAL",
|
|
|
+ "notes": "企业真实数据质量结果尚未生成。"
|
|
|
+ },
|
|
|
+ {
|
|
|
+ "id": "P2-WP13-UAT-009",
|
|
|
+ "work_packages": ["P2-WP05"],
|
|
|
+ "module_ids": ["OBS-03", "OBS-04", "OBS-05", "OBS-06"],
|
|
|
+ "title": "数据 SLO、告警、事故、影响和复盘闭环",
|
|
|
+ "actor": "admin",
|
|
|
+ "acceptance_level": "LOCAL_ENGINEERING",
|
|
|
+ "preconditions": ["采集或质量源事件可用", "管理员具备事故运营权限"],
|
|
|
+ "steps": ["采集违约事件并聚合告警", "执行抑制、回执和升级", "恢复后完成复盘关闭"],
|
|
|
+ "expected": ["重复事件幂等", "影响与责任可追溯", "证据不完整时不能关闭"],
|
|
|
+ "evidence": ["docs/phase2/P2_WP05_DATA_OBSERVABILITY_INCIDENTS.md"],
|
|
|
+ "result": "PASS_LOCAL",
|
|
|
+ "notes": "企业告警渠道、排班和正式 SLO 未绑定。"
|
|
|
+ },
|
|
|
+ {
|
|
|
+ "id": "P2-WP13-UAT-010",
|
|
|
+ "work_packages": ["P2-WP06"],
|
|
|
+ "module_ids": ["GOV-04", "GOV-05", "GOV-06"],
|
|
|
+ "title": "第二业务域责任继承、覆盖、委派和离岗转交",
|
|
|
+ "actor": "second_domain_owner",
|
|
|
+ "acceptance_level": "LOCAL_ENGINEERING",
|
|
|
+ "preconditions": ["组织、业务域和对象层级存在", "责任矩阵版本有效"],
|
|
|
+ "steps": ["解析继承责任", "建立临时委派并验证到期", "执行离岗转交"],
|
|
|
+ "expected": ["最近显式配置优先", "唯一 Accountable 可确定", "责任绑定不授予数据权限"],
|
|
|
+ "evidence": ["docs/phase2/P2_WP06_UNIFIED_RESPONSIBILITIES.md"],
|
|
|
+ "result": "PASS_LOCAL",
|
|
|
+ "notes": "企业组织目录和正式人员仍待接入。"
|
|
|
+ },
|
|
|
+ {
|
|
|
+ "id": "P2-WP13-UAT-011",
|
|
|
+ "work_packages": ["P2-WP06"],
|
|
|
+ "module_ids": ["GOV-07", "GOV-08", "GOV-09"],
|
|
|
+ "title": "管理员发布中央责任策略并计算跨域联合评审",
|
|
|
+ "actor": "admin",
|
|
|
+ "acceptance_level": "LOCAL_ENGINEERING",
|
|
|
+ "preconditions": ["两个业务域存在", "管理员具备责任管理权限"],
|
|
|
+ "steps": ["发布中央策略", "下发到业务域", "计算跨域联合评审结果"],
|
|
|
+ "expected": ["策略版本不可变", "最小同意数确定性计算", "责任运营指标可追溯"],
|
|
|
+ "evidence": ["tests/core/governance/test_unified_responsibilities.py"],
|
|
|
+ "result": "PASS_LOCAL",
|
|
|
+ "notes": "企业联合评审制度尚未签认。"
|
|
|
+ },
|
|
|
+ {
|
|
|
+ "id": "P2-WP13-UAT-012",
|
|
|
+ "work_packages": ["P2-WP07"],
|
|
|
+ "module_ids": ["WFC-03", "WFC-04", "WFC-05", "WFC-07", "WFC-08"],
|
|
|
+ "title": "统一流程、条件路由、多人审批和治理工单",
|
|
|
+ "actor": "editor",
|
|
|
+ "acceptance_level": "LOCAL_ENGINEERING",
|
|
|
+ "preconditions": ["已发布结构化流程", "编辑者参与目标任务"],
|
|
|
+ "steps": ["创建四类源事项任务", "完成多人审批和转签", "关闭并重开治理工单"],
|
|
|
+ "expected": ["同一源事项活动任务幂等", "创建人不能自审", "源模块状态不被工作中心直接改写"],
|
|
|
+ "evidence": ["docs/phase2/P2_WP07_UNIFIED_WORK_CENTER.md"],
|
|
|
+ "result": "PASS_LOCAL",
|
|
|
+ "notes": "迁移类任务接入和企业流程参与人仍待配置。"
|
|
|
+ },
|
|
|
+ {
|
|
|
+ "id": "P2-WP13-UAT-013",
|
|
|
+ "work_packages": ["P2-WP07"],
|
|
|
+ "module_ids": ["WFC-06", "WFC-10", "WFC-11", "WFC-12", "WFC-15"],
|
|
|
+ "title": "站内通知、邮件重试、超时升级和运营看板",
|
|
|
+ "actor": "admin",
|
|
|
+ "acceptance_level": "LOCAL_ENGINEERING",
|
|
|
+ "preconditions": ["通知模板和用户偏好存在", "管理员可执行投递批次"],
|
|
|
+ "steps": ["生成站内与邮件通知", "模拟失败重试和死信", "执行超时批次并核对看板"],
|
|
|
+ "expected": ["站内消息可追溯", "邮件失败脱敏且按指数退避", "待办、逾期和闭环率来自持久化数据"],
|
|
|
+ "evidence": ["tests/core/governance/test_unified_work_center.py"],
|
|
|
+ "result": "PASS_LOCAL",
|
|
|
+ "notes": "企业 SMTP、邮件目录字段和定时调度未绑定。"
|
|
|
+ },
|
|
|
+ {
|
|
|
+ "id": "P2-WP13-UAT-014",
|
|
|
+ "work_packages": ["P2-WP08"],
|
|
|
+ "module_ids": ["MKT-07", "MKT-08", "MKT-14", "MKT-15", "MKT-23", "MKT-24"],
|
|
|
+ "title": "数据产品申请、合同、合格证和反馈闭环",
|
|
|
+ "actor": "second_domain_owner",
|
|
|
+ "acceptance_level": "LOCAL_ENGINEERING",
|
|
|
+ "preconditions": ["第二业务域产品已登记", "责任人和统一审批任务存在"],
|
|
|
+ "steps": ["提交 API 申请并同步审批", "发布兼容合同版本", "签发合格证并关闭用户反馈"],
|
|
|
+ "expected": ["产品责任人唯一", "合格证绑定质量、血缘、规则、运行和审批证据", "反馈关闭需用户确认"],
|
|
|
+ "evidence": ["docs/phase2/P2_WP08_DATA_PRODUCT_GOVERNANCE.md"],
|
|
|
+ "result": "PASS_LOCAL",
|
|
|
+ "notes": "企业数据产品条款和实际消费者尚未验收。"
|
|
|
+ },
|
|
|
+ {
|
|
|
+ "id": "P2-WP13-UAT-015",
|
|
|
+ "work_packages": ["P2-WP08"],
|
|
|
+ "module_ids": ["MKT-07", "MKT-23"],
|
|
|
+ "title": "查看者读取产品治理证据且不能修改生命周期",
|
|
|
+ "actor": "viewer",
|
|
|
+ "acceptance_level": "LOCAL_ENGINEERING",
|
|
|
+ "preconditions": ["治理产品和合格证存在", "查看者已认证"],
|
|
|
+ "steps": ["读取产品治理详情", "读取本人可见申请", "尝试修改产品生命周期"],
|
|
|
+ "expected": ["授权详情可读", "全局申请不可见", "修改动作被拒绝"],
|
|
|
+ "evidence": ["tests/test_product_governance_api.py"],
|
|
|
+ "result": "PASS_LOCAL",
|
|
|
+ "notes": "本地角色矩阵不替代企业访问审批。"
|
|
|
+ },
|
|
|
+ {
|
|
|
+ "id": "P2-WP13-UAT-016",
|
|
|
+ "work_packages": ["P2-WP09"],
|
|
|
+ "module_ids": ["KAI-11", "KAI-12", "KAI-14", "KAI-15", "KAI-18"],
|
|
|
+ "title": "管理员登记 Agent、签发短期凭证并回放决策",
|
|
|
+ "actor": "admin",
|
|
|
+ "acceptance_level": "LOCAL_ENGINEERING",
|
|
|
+ "preconditions": ["独立 Agent 凭证密钥可用", "管理员具备 Agent 管理权限"],
|
|
|
+ "steps": ["登记只读 Agent", "精确授权工具并签发一次性凭证", "执行请求并查看证据回放"],
|
|
|
+ "expected": ["凭证最长 15 分钟且明文只返回一次", "未授权默认拒绝", "回放不保存提示或输出正文"],
|
|
|
+ "evidence": ["docs/phase2/P2_WP09_AGENT_GOVERNANCE.md"],
|
|
|
+ "result": "PASS_LOCAL",
|
|
|
+ "notes": "企业正式 Agent、工具清单和独立密钥尚未绑定。"
|
|
|
+ },
|
|
|
+ {
|
|
|
+ "id": "P2-WP13-UAT-017",
|
|
|
+ "work_packages": ["P2-WP09"],
|
|
|
+ "module_ids": ["KAI-13", "KAI-15", "KAI-20"],
|
|
|
+ "title": "查看者只读 Agent 阻断跨域、提示注入和自动执行",
|
|
|
+ "actor": "viewer",
|
|
|
+ "acceptance_level": "LOCAL_ENGINEERING",
|
|
|
+ "preconditions": ["只读 Agent 已绑定单一业务域", "引用策略已启用"],
|
|
|
+ "steps": ["提交带引用的域内读取", "尝试跨域读取", "提交提示注入和自动执行请求"],
|
|
|
+ "expected": ["域内读取按证据授权", "跨域和提示注入被拒绝", "只读 Agent 不允许自动执行"],
|
|
|
+ "evidence": ["tests/agent/test_agent_governance.py"],
|
|
|
+ "result": "PASS_LOCAL",
|
|
|
+ "notes": "企业红队语料和正式 MCP/API 清单待验收。"
|
|
|
+ },
|
|
|
+ {
|
|
|
+ "id": "P2-WP13-UAT-018",
|
|
|
+ "work_packages": ["P2-WP10"],
|
|
|
+ "module_ids": ["SEC-02", "SEC-03", "SEC-05", "SEC-06", "SEC-11", "SEC-20", "SEC-21"],
|
|
|
+ "title": "分类复核、访问与出域、审计和漏洞治理",
|
|
|
+ "actor": "admin",
|
|
|
+ "acceptance_level": "LOCAL_ENGINEERING",
|
|
|
+ "preconditions": ["安全治理工作台可用", "管理员和独立复核人可构造"],
|
|
|
+ "steps": ["执行敏感识别和独立复核", "验证默认拒绝及高敏出域阻断", "登记 SBOM 发现并独立关闭漏洞"],
|
|
|
+ "expected": ["原始样本不落库", "高敏数据无绕过开关", "十一类审计与漏洞证据可追溯"],
|
|
|
+ "evidence": ["docs/phase2/P2_WP10_SECURITY_FOUNDATION.md"],
|
|
|
+ "result": "PASS_LOCAL",
|
|
|
+ "notes": "企业 SIEM、DLP、KMS 和合规测评尚未完成。"
|
|
|
+ },
|
|
|
+ {
|
|
|
+ "id": "P2-WP13-UAT-019",
|
|
|
+ "work_packages": ["P2-WP11"],
|
|
|
+ "module_ids": ["PLT-11", "PLT-13", "PLT-14", "PLT-22", "PLT-25", "PLT-26"],
|
|
|
+ "title": "多环境、迁移 dry-run、升级和恢复式回滚",
|
|
|
+ "actor": "admin",
|
|
|
+ "acceptance_level": "LOCAL_ENGINEERING",
|
|
|
+ "preconditions": ["P2-WP11 本地演练证据已归档", "旧版镜像与匹配备份可用"],
|
|
|
+ "steps": ["复核三环境隔离和晋级包", "执行迁移 dry-run 和摘要对账", "复核 360 到 460 升级与候选回滚"],
|
|
|
+ "expected": ["环境值零碰撞", "迁移不写客户源或自动切流", "回滚不执行数据库 downgrade"],
|
|
|
+ "evidence": ["docs/validation/P2_WP11_PRODUCT_DELIVERY_EVIDENCE.md"],
|
|
|
+ "result": "PASS_LOCAL",
|
|
|
+ "notes": "企业断网主机、签名制品和 RPO/RTO 仍待演练。"
|
|
|
+ },
|
|
|
+ {
|
|
|
+ "id": "P2-WP13-UAT-020",
|
|
|
+ "work_packages": ["P2-WP12"],
|
|
|
+ "module_ids": ["CAT-03", "GOV-02", "DQA-04", "OBS-03", "MKT-23", "KAI-14"],
|
|
|
+ "title": "第二业务域十阶段治理复制且不修改设备服务",
|
|
|
+ "actor": "second_domain_owner",
|
|
|
+ "acceptance_level": "LOCAL_ENGINEERING",
|
|
|
+ "preconditions": ["P2-WP12 自包含实施包可用", "受控脱敏样本已批准用于本地验证"],
|
|
|
+ "steps": ["校验模板、证据和数据摘要", "执行增量采集和重放", "核对十阶段收据与设备代码差异"],
|
|
|
+ "expected": ["十阶段全部通过", "重放变更为 0", "设备专用核心改动为 0"],
|
|
|
+ "evidence": ["docs/validation/P2_WP12_SECOND_DOMAIN_REPLICATION_EVIDENCE.md"],
|
|
|
+ "result": "PASS_LOCAL",
|
|
|
+ "notes": "这是本地工程复制，不是企业真实业务 UAT。"
|
|
|
+ },
|
|
|
+ {
|
|
|
+ "id": "P2-WP13-UAT-021",
|
|
|
+ "work_packages": ["P2-WP01", "P2-WP02", "P2-WP03", "P2-WP04", "P2-WP05", "P2-WP06", "P2-WP07", "P2-WP08", "P2-WP09", "P2-WP10", "P2-WP12"],
|
|
|
+ "module_ids": ["CAT-03", "SEM-04", "DQA-02", "GOV-04", "MKT-23"],
|
|
|
+ "title": "企业真实第二业务域数据端到端治理 UAT",
|
|
|
+ "actor": "enterprise_acceptance",
|
|
|
+ "acceptance_level": "ENTERPRISE_FORMAL",
|
|
|
+ "preconditions": ["企业只读来源和脱敏批准到位", "正式责任人、口径和阈值已签认"],
|
|
|
+ "steps": ["接入真实来源并执行增量采集", "完成语义、质量、整改、事故和产品闭环", "按验收指标计算真实结果"],
|
|
|
+ "expected": ["指标达到第二阶段正式验收值", "证据可追溯", "无设备域专用代码复制"],
|
|
|
+ "evidence": ["企业真实数据 UAT 报告", "企业指标与差异清单"],
|
|
|
+ "result": "BLOCKED_EXTERNAL",
|
|
|
+ "notes": "本地脱敏样本不能替代企业真实数据 UAT。"
|
|
|
+ },
|
|
|
+ {
|
|
|
+ "id": "P2-WP13-UAT-022",
|
|
|
+ "work_packages": ["P2-WP01", "P2-WP06", "P2-WP07", "P2-WP09", "P2-WP10"],
|
|
|
+ "module_ids": ["IAM-04", "IAM-13", "GOV-03", "WFC-05", "KAI-12", "SEC-05"],
|
|
|
+ "title": "企业实际用户、第二业务域责任人和职责分离",
|
|
|
+ "actor": "enterprise_acceptance",
|
|
|
+ "acceptance_level": "ENTERPRISE_FORMAL",
|
|
|
+ "preconditions": ["企业提供用户与组织名单", "安全和业务负责人确认职责矩阵"],
|
|
|
+ "steps": ["配置管理员、编辑者、查看者和领域责任人", "验证委派、审批与高风险双人复核", "核对离职和权限回收"],
|
|
|
+ "expected": ["账号、角色、责任与企业组织一致", "无越权或责任空缺", "高风险操作职责分离"],
|
|
|
+ "evidence": ["企业签字版用户角色矩阵", "企业账号与责任验收记录"],
|
|
|
+ "result": "BLOCKED_EXTERNAL",
|
|
|
+ "notes": "企业单点登录属于第三阶段，当前仍需真实本地账号映射验收。"
|
|
|
+ },
|
|
|
+ {
|
|
|
+ "id": "P2-WP13-UAT-023",
|
|
|
+ "work_packages": ["P2-WP05", "P2-WP10", "P2-WP11"],
|
|
|
+ "module_ids": ["OBS-05", "SEC-15", "PLT-07", "PLT-08", "PLT-12", "PLT-25"],
|
|
|
+ "title": "企业监控安全联调、规模、安装、升级和灾备验收",
|
|
|
+ "actor": "enterprise_acceptance",
|
|
|
+ "acceptance_level": "ENTERPRISE_FORMAL",
|
|
|
+ "preconditions": ["企业预生产环境和签名制品到位", "RPO/RTO、容量和变更窗口已批准"],
|
|
|
+ "steps": ["接入 APM、日志、告警、SIEM 和排班", "执行目标规模容量和故障注入", "执行断网安装、升级和候选回滚"],
|
|
|
+ "expected": ["监控与安全事件可送达", "容量满足批准指标", "安装、升级和恢复达到企业 RPO/RTO"],
|
|
|
+ "evidence": ["企业预生产演练报告", "变更审批与安全签字"],
|
|
|
+ "result": "BLOCKED_EXTERNAL",
|
|
|
+ "notes": "本机小样本耗时不能作为企业承诺。"
|
|
|
+ },
|
|
|
+ {
|
|
|
+ "id": "P2-WP13-UAT-024",
|
|
|
+ "work_packages": ["P2-WP13"],
|
|
|
+ "module_ids": ["PLT-25", "PLT-26", "GOV-02"],
|
|
|
+ "title": "用户培训、运维培训、材料移交和正式签字",
|
|
|
+ "actor": "enterprise_acceptance",
|
|
|
+ "acceptance_level": "ENTERPRISE_FORMAL",
|
|
|
+ "preconditions": ["企业 UAT 完成", "P0 为 0且未关闭 P1 有书面决定", "接收人与培训名单已确认"],
|
|
|
+ "steps": ["完成用户和运维培训练习", "逐项核对移交清单", "由产品、业务、技术、安全和运维负责人签字"],
|
|
|
+ "expected": ["签到、练习、问题和补训记录齐全", "代码、制品、配置、备份和责任完成交接", "正式验收状态有签字"],
|
|
|
+ "evidence": ["企业培训记录", "签字版 UAT 报告与移交清单"],
|
|
|
+ "result": "BLOCKED_EXTERNAL",
|
|
|
+ "notes": "本轮仅交付培训和签署材料，不得预签。"
|
|
|
+ }
|
|
|
+ ]
|
|
|
+}
|
马小龙