P2_WP13_UAT_CASES.json 20 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349
  1. {
  2. "schema_version": "1.0",
  3. "work_package": "P2-WP13",
  4. "generated_at": "2026-08-02",
  5. "result_definitions": {
  6. "PASS_LOCAL": "当前分支的本地工程证据通过,不能据此认定企业正式验收通过",
  7. "FAIL": "已执行但不符合预期",
  8. "BLOCKED_EXTERNAL": "需要企业人员、数据、环境、培训或签字,当前不能执行",
  9. "NOT_RUN": "本轮未执行且不属于外部依赖"
  10. },
  11. "cases": [
  12. {
  13. "id": "P2-WP13-UAT-001",
  14. "work_packages": ["P2-WP01"],
  15. "module_ids": ["CAT-03", "CAT-13", "CAT-20", "CAT-21"],
  16. "title": "管理员初始化第二业务域领域模板并保留版本审计",
  17. "actor": "admin",
  18. "acceptance_level": "LOCAL_ENGINEERING",
  19. "preconditions": ["备品备件领域模板已固化", "管理员具备模板管理权限"],
  20. "steps": ["执行模板差异预检", "导入模板并核对六类对象", "复核版本和追加式回滚证据"],
  21. "expected": ["模板导入不复制物料域服务", "六类对象、八条规则和三项指标一致", "历史版本不可变"],
  22. "evidence": ["docs/validation/P2_WP01_DOMAIN_TEMPLATE_EVIDENCE.md"],
  23. "result": "PASS_LOCAL",
  24. "notes": "企业来源与责任人仍保持待绑定。"
  25. },
  26. {
  27. "id": "P2-WP13-UAT-002",
  28. "work_packages": ["P2-WP01"],
  29. "module_ids": ["CAT-20", "GOV-03"],
  30. "title": "领域模板管理员、编辑者和查看者权限分离",
  31. "actor": "viewer",
  32. "acceptance_level": "LOCAL_ENGINEERING",
  33. "preconditions": ["三级本地角色可构造", "模板接口启用鉴权"],
  34. "steps": ["查看者读取模板", "编辑者执行 dry-run", "验证非管理员不能导入或回滚"],
  35. "expected": ["查看者只读", "编辑者只预检", "只有管理员可导入和回滚"],
  36. "evidence": ["tests/test_domain_template_api.py"],
  37. "result": "PASS_LOCAL",
  38. "notes": "角色为本地工程角色,不代表企业账号已配置。"
  39. },
  40. {
  41. "id": "P2-WP13-UAT-003",
  42. "work_packages": ["P2-WP02"],
  43. "module_ids": ["CAT-09", "CAT-10", "CAT-17", "CON-15"],
  44. "title": "主动元数据发现、增量游标和字段血缘",
  45. "actor": "editor",
  46. "acceptance_level": "LOCAL_ENGINEERING",
  47. "preconditions": ["受控发现计划存在", "编辑者具备运行权限"],
  48. "steps": ["执行快照与增量批次", "重放相同批次", "检查字段变化、血缘和失败原因"],
  49. "expected": ["成功批次才推进游标", "重放不追加版本", "无法解析的血缘失败关闭"],
  50. "evidence": ["docs/validation/P2_WP02_ACTIVE_METADATA_EVIDENCE.md"],
  51. "result": "PASS_LOCAL",
  52. "notes": "企业调度器和真实文件/API 来源尚未验收。"
  53. },
  54. {
  55. "id": "P2-WP13-UAT-004",
  56. "work_packages": ["P2-WP02", "P2-WP06"],
  57. "module_ids": ["CAT-23", "CAT-26", "GOV-09"],
  58. "title": "第二业务域责任人处理健康信号和资产纠错",
  59. "actor": "second_domain_owner",
  60. "acceptance_level": "LOCAL_ENGINEERING",
  61. "preconditions": ["纠错已绑定责任角色", "资产版本号有效"],
  62. "steps": ["读取四类健康信号", "提交资产纠错", "由指定责任人按版本处置"],
  63. "expected": ["健康信号可追溯", "非责任人不能处置", "提交和处置均追加审计"],
  64. "evidence": ["tests/core/data_source/test_active_metadata.py"],
  65. "result": "PASS_LOCAL",
  66. "notes": "企业真实责任人尚未绑定。"
  67. },
  68. {
  69. "id": "P2-WP13-UAT-005",
  70. "work_packages": ["P2-WP03"],
  71. "module_ids": ["SEM-03", "SEM-04", "SEM-06", "SEM-07"],
  72. "title": "术语、代码集、指标和字段映射发布链",
  73. "actor": "second_domain_owner",
  74. "acceptance_level": "LOCAL_ENGINEERING",
  75. "preconditions": ["通用语义对象样本已建立", "创建人与审批人分离"],
  76. "steps": ["提交术语、代码集和指标", "独立审批并发布", "执行追加式回滚"],
  77. "expected": ["引用完整性通过", "版本不原地覆盖", "指标不携带可执行 SQL"],
  78. "evidence": ["docs/validation/P2_WP03_SEMANTIC_GOVERNANCE_EVIDENCE.md"],
  79. "result": "PASS_LOCAL",
  80. "notes": "企业正式术语、代码集和指标口径待业务签认。"
  81. },
  82. {
  83. "id": "P2-WP13-UAT-006",
  84. "work_packages": ["P2-WP03"],
  85. "module_ids": ["SEM-02", "SEM-14", "SEM-22"],
  86. "title": "查看者读取已发布语义且不能越权发布",
  87. "actor": "viewer",
  88. "acceptance_level": "LOCAL_ENGINEERING",
  89. "preconditions": ["已发布语义对象存在", "查看者已认证"],
  90. "steps": ["读取语义对象和导出", "尝试提交发布动作", "检查知识同步待处理状态"],
  91. "expected": ["已发布内容可读", "发布动作被拒绝", "知识配置缺失时事件保持 pending"],
  92. "evidence": ["tests/data_research/test_semantic_governance_api.py"],
  93. "result": "PASS_LOCAL",
  94. "notes": "本地权限验证不替代企业用户映射。"
  95. },
  96. {
  97. "id": "P2-WP13-UAT-007",
  98. "work_packages": ["P2-WP04"],
  99. "module_ids": ["DQA-02", "DQA-05", "DQA-06", "DQA-08", "DQA-09"],
  100. "title": "通用画像、趋势、异常、新鲜度和质量 SLA",
  101. "actor": "editor",
  102. "acceptance_level": "LOCAL_ENGINEERING",
  103. "preconditions": ["质量模板已发布", "脱敏双业务域样本可用"],
  104. "steps": ["执行质量画像", "核对趋势和异常", "触发 SLA 违约与恢复"],
  105. "expected": ["统计结果确定性", "样例不可逆摘要", "违约和恢复形成事件"],
  106. "evidence": ["docs/phase2/P2_WP04_QUALITY_OPERATIONS.md"],
  107. "result": "PASS_LOCAL",
  108. "notes": "企业阈值、时间源和统计窗口尚未验收。"
  109. },
  110. {
  111. "id": "P2-WP13-UAT-008",
  112. "work_packages": ["P2-WP04"],
  113. "module_ids": ["DQA-02", "DQA-12", "DQA-13"],
  114. "title": "查看者读取质量证据但不能执行规则",
  115. "actor": "viewer",
  116. "acceptance_level": "LOCAL_ENGINEERING",
  117. "preconditions": ["质量运行证据存在", "查看者已认证"],
  118. "steps": ["查看画像和发现", "尝试执行质量模板", "核对根因仅引用权威证据"],
  119. "expected": ["读取成功", "执行被拒绝", "不生成无证据因果结论"],
  120. "evidence": ["tests/core/data_rules/test_quality_operations_api.py"],
  121. "result": "PASS_LOCAL",
  122. "notes": "企业真实数据质量结果尚未生成。"
  123. },
  124. {
  125. "id": "P2-WP13-UAT-009",
  126. "work_packages": ["P2-WP05"],
  127. "module_ids": ["OBS-03", "OBS-04", "OBS-05", "OBS-06"],
  128. "title": "数据 SLO、告警、事故、影响和复盘闭环",
  129. "actor": "admin",
  130. "acceptance_level": "LOCAL_ENGINEERING",
  131. "preconditions": ["采集或质量源事件可用", "管理员具备事故运营权限"],
  132. "steps": ["采集违约事件并聚合告警", "执行抑制、回执和升级", "恢复后完成复盘关闭"],
  133. "expected": ["重复事件幂等", "影响与责任可追溯", "证据不完整时不能关闭"],
  134. "evidence": ["docs/phase2/P2_WP05_DATA_OBSERVABILITY_INCIDENTS.md"],
  135. "result": "PASS_LOCAL",
  136. "notes": "企业告警渠道、排班和正式 SLO 未绑定。"
  137. },
  138. {
  139. "id": "P2-WP13-UAT-010",
  140. "work_packages": ["P2-WP06"],
  141. "module_ids": ["GOV-04", "GOV-05", "GOV-06"],
  142. "title": "第二业务域责任继承、覆盖、委派和离岗转交",
  143. "actor": "second_domain_owner",
  144. "acceptance_level": "LOCAL_ENGINEERING",
  145. "preconditions": ["组织、业务域和对象层级存在", "责任矩阵版本有效"],
  146. "steps": ["解析继承责任", "建立临时委派并验证到期", "执行离岗转交"],
  147. "expected": ["最近显式配置优先", "唯一 Accountable 可确定", "责任绑定不授予数据权限"],
  148. "evidence": ["docs/phase2/P2_WP06_UNIFIED_RESPONSIBILITIES.md"],
  149. "result": "PASS_LOCAL",
  150. "notes": "企业组织目录和正式人员仍待接入。"
  151. },
  152. {
  153. "id": "P2-WP13-UAT-011",
  154. "work_packages": ["P2-WP06"],
  155. "module_ids": ["GOV-07", "GOV-08", "GOV-09"],
  156. "title": "管理员发布中央责任策略并计算跨域联合评审",
  157. "actor": "admin",
  158. "acceptance_level": "LOCAL_ENGINEERING",
  159. "preconditions": ["两个业务域存在", "管理员具备责任管理权限"],
  160. "steps": ["发布中央策略", "下发到业务域", "计算跨域联合评审结果"],
  161. "expected": ["策略版本不可变", "最小同意数确定性计算", "责任运营指标可追溯"],
  162. "evidence": ["tests/core/governance/test_unified_responsibilities.py"],
  163. "result": "PASS_LOCAL",
  164. "notes": "企业联合评审制度尚未签认。"
  165. },
  166. {
  167. "id": "P2-WP13-UAT-012",
  168. "work_packages": ["P2-WP07"],
  169. "module_ids": ["WFC-03", "WFC-04", "WFC-05", "WFC-07", "WFC-08"],
  170. "title": "统一流程、条件路由、多人审批和治理工单",
  171. "actor": "editor",
  172. "acceptance_level": "LOCAL_ENGINEERING",
  173. "preconditions": ["已发布结构化流程", "编辑者参与目标任务"],
  174. "steps": ["创建四类源事项任务", "完成多人审批和转签", "关闭并重开治理工单"],
  175. "expected": ["同一源事项活动任务幂等", "创建人不能自审", "源模块状态不被工作中心直接改写"],
  176. "evidence": ["docs/phase2/P2_WP07_UNIFIED_WORK_CENTER.md"],
  177. "result": "PASS_LOCAL",
  178. "notes": "迁移类任务接入和企业流程参与人仍待配置。"
  179. },
  180. {
  181. "id": "P2-WP13-UAT-013",
  182. "work_packages": ["P2-WP07"],
  183. "module_ids": ["WFC-06", "WFC-10", "WFC-11", "WFC-12", "WFC-15"],
  184. "title": "站内通知、邮件重试、超时升级和运营看板",
  185. "actor": "admin",
  186. "acceptance_level": "LOCAL_ENGINEERING",
  187. "preconditions": ["通知模板和用户偏好存在", "管理员可执行投递批次"],
  188. "steps": ["生成站内与邮件通知", "模拟失败重试和死信", "执行超时批次并核对看板"],
  189. "expected": ["站内消息可追溯", "邮件失败脱敏且按指数退避", "待办、逾期和闭环率来自持久化数据"],
  190. "evidence": ["tests/core/governance/test_unified_work_center.py"],
  191. "result": "PASS_LOCAL",
  192. "notes": "企业 SMTP、邮件目录字段和定时调度未绑定。"
  193. },
  194. {
  195. "id": "P2-WP13-UAT-014",
  196. "work_packages": ["P2-WP08"],
  197. "module_ids": ["MKT-07", "MKT-08", "MKT-14", "MKT-15", "MKT-23", "MKT-24"],
  198. "title": "数据产品申请、合同、合格证和反馈闭环",
  199. "actor": "second_domain_owner",
  200. "acceptance_level": "LOCAL_ENGINEERING",
  201. "preconditions": ["第二业务域产品已登记", "责任人和统一审批任务存在"],
  202. "steps": ["提交 API 申请并同步审批", "发布兼容合同版本", "签发合格证并关闭用户反馈"],
  203. "expected": ["产品责任人唯一", "合格证绑定质量、血缘、规则、运行和审批证据", "反馈关闭需用户确认"],
  204. "evidence": ["docs/phase2/P2_WP08_DATA_PRODUCT_GOVERNANCE.md"],
  205. "result": "PASS_LOCAL",
  206. "notes": "企业数据产品条款和实际消费者尚未验收。"
  207. },
  208. {
  209. "id": "P2-WP13-UAT-015",
  210. "work_packages": ["P2-WP08"],
  211. "module_ids": ["MKT-07", "MKT-23"],
  212. "title": "查看者读取产品治理证据且不能修改生命周期",
  213. "actor": "viewer",
  214. "acceptance_level": "LOCAL_ENGINEERING",
  215. "preconditions": ["治理产品和合格证存在", "查看者已认证"],
  216. "steps": ["读取产品治理详情", "读取本人可见申请", "尝试修改产品生命周期"],
  217. "expected": ["授权详情可读", "全局申请不可见", "修改动作被拒绝"],
  218. "evidence": ["tests/test_product_governance_api.py"],
  219. "result": "PASS_LOCAL",
  220. "notes": "本地角色矩阵不替代企业访问审批。"
  221. },
  222. {
  223. "id": "P2-WP13-UAT-016",
  224. "work_packages": ["P2-WP09"],
  225. "module_ids": ["KAI-11", "KAI-12", "KAI-14", "KAI-15", "KAI-18"],
  226. "title": "管理员登记 Agent、签发短期凭证并回放决策",
  227. "actor": "admin",
  228. "acceptance_level": "LOCAL_ENGINEERING",
  229. "preconditions": ["独立 Agent 凭证密钥可用", "管理员具备 Agent 管理权限"],
  230. "steps": ["登记只读 Agent", "精确授权工具并签发一次性凭证", "执行请求并查看证据回放"],
  231. "expected": ["凭证最长 15 分钟且明文只返回一次", "未授权默认拒绝", "回放不保存提示或输出正文"],
  232. "evidence": ["docs/phase2/P2_WP09_AGENT_GOVERNANCE.md"],
  233. "result": "PASS_LOCAL",
  234. "notes": "企业正式 Agent、工具清单和独立密钥尚未绑定。"
  235. },
  236. {
  237. "id": "P2-WP13-UAT-017",
  238. "work_packages": ["P2-WP09"],
  239. "module_ids": ["KAI-13", "KAI-15", "KAI-20"],
  240. "title": "查看者只读 Agent 阻断跨域、提示注入和自动执行",
  241. "actor": "viewer",
  242. "acceptance_level": "LOCAL_ENGINEERING",
  243. "preconditions": ["只读 Agent 已绑定单一业务域", "引用策略已启用"],
  244. "steps": ["提交带引用的域内读取", "尝试跨域读取", "提交提示注入和自动执行请求"],
  245. "expected": ["域内读取按证据授权", "跨域和提示注入被拒绝", "只读 Agent 不允许自动执行"],
  246. "evidence": ["tests/agent/test_agent_governance.py"],
  247. "result": "PASS_LOCAL",
  248. "notes": "企业红队语料和正式 MCP/API 清单待验收。"
  249. },
  250. {
  251. "id": "P2-WP13-UAT-018",
  252. "work_packages": ["P2-WP10"],
  253. "module_ids": ["SEC-02", "SEC-03", "SEC-05", "SEC-06", "SEC-11", "SEC-20", "SEC-21"],
  254. "title": "分类复核、访问与出域、审计和漏洞治理",
  255. "actor": "admin",
  256. "acceptance_level": "LOCAL_ENGINEERING",
  257. "preconditions": ["安全治理工作台可用", "管理员和独立复核人可构造"],
  258. "steps": ["执行敏感识别和独立复核", "验证默认拒绝及高敏出域阻断", "登记 SBOM 发现并独立关闭漏洞"],
  259. "expected": ["原始样本不落库", "高敏数据无绕过开关", "十一类审计与漏洞证据可追溯"],
  260. "evidence": ["docs/phase2/P2_WP10_SECURITY_FOUNDATION.md"],
  261. "result": "PASS_LOCAL",
  262. "notes": "企业 SIEM、DLP、KMS 和合规测评尚未完成。"
  263. },
  264. {
  265. "id": "P2-WP13-UAT-019",
  266. "work_packages": ["P2-WP11"],
  267. "module_ids": ["PLT-11", "PLT-13", "PLT-14", "PLT-22", "PLT-25", "PLT-26"],
  268. "title": "多环境、迁移 dry-run、升级和恢复式回滚",
  269. "actor": "admin",
  270. "acceptance_level": "LOCAL_ENGINEERING",
  271. "preconditions": ["P2-WP11 本地演练证据已归档", "旧版镜像与匹配备份可用"],
  272. "steps": ["复核三环境隔离和晋级包", "执行迁移 dry-run 和摘要对账", "复核 360 到 460 升级与候选回滚"],
  273. "expected": ["环境值零碰撞", "迁移不写客户源或自动切流", "回滚不执行数据库 downgrade"],
  274. "evidence": ["docs/validation/P2_WP11_PRODUCT_DELIVERY_EVIDENCE.md"],
  275. "result": "PASS_LOCAL",
  276. "notes": "企业断网主机、签名制品和 RPO/RTO 仍待演练。"
  277. },
  278. {
  279. "id": "P2-WP13-UAT-020",
  280. "work_packages": ["P2-WP12"],
  281. "module_ids": ["CAT-03", "GOV-02", "DQA-04", "OBS-03", "MKT-23", "KAI-14"],
  282. "title": "第二业务域十阶段治理复制且不修改设备服务",
  283. "actor": "second_domain_owner",
  284. "acceptance_level": "LOCAL_ENGINEERING",
  285. "preconditions": ["P2-WP12 自包含实施包可用", "受控脱敏样本已批准用于本地验证"],
  286. "steps": ["校验模板、证据和数据摘要", "执行增量采集和重放", "核对十阶段收据与设备代码差异"],
  287. "expected": ["十阶段全部通过", "重放变更为 0", "设备专用核心改动为 0"],
  288. "evidence": ["docs/validation/P2_WP12_SECOND_DOMAIN_REPLICATION_EVIDENCE.md"],
  289. "result": "PASS_LOCAL",
  290. "notes": "这是本地工程复制,不是企业真实业务 UAT。"
  291. },
  292. {
  293. "id": "P2-WP13-UAT-021",
  294. "work_packages": ["P2-WP01", "P2-WP02", "P2-WP03", "P2-WP04", "P2-WP05", "P2-WP06", "P2-WP07", "P2-WP08", "P2-WP09", "P2-WP10", "P2-WP12"],
  295. "module_ids": ["CAT-03", "SEM-04", "DQA-02", "GOV-04", "MKT-23"],
  296. "title": "企业真实第二业务域数据端到端治理 UAT",
  297. "actor": "enterprise_acceptance",
  298. "acceptance_level": "ENTERPRISE_FORMAL",
  299. "preconditions": ["企业只读来源和脱敏批准到位", "正式责任人、口径和阈值已签认"],
  300. "steps": ["接入真实来源并执行增量采集", "完成语义、质量、整改、事故和产品闭环", "按验收指标计算真实结果"],
  301. "expected": ["指标达到第二阶段正式验收值", "证据可追溯", "无设备域专用代码复制"],
  302. "evidence": ["企业真实数据 UAT 报告", "企业指标与差异清单"],
  303. "result": "BLOCKED_EXTERNAL",
  304. "notes": "本地脱敏样本不能替代企业真实数据 UAT。"
  305. },
  306. {
  307. "id": "P2-WP13-UAT-022",
  308. "work_packages": ["P2-WP01", "P2-WP06", "P2-WP07", "P2-WP09", "P2-WP10"],
  309. "module_ids": ["IAM-04", "IAM-13", "GOV-03", "WFC-05", "KAI-12", "SEC-05"],
  310. "title": "企业实际用户、第二业务域责任人和职责分离",
  311. "actor": "enterprise_acceptance",
  312. "acceptance_level": "ENTERPRISE_FORMAL",
  313. "preconditions": ["企业提供用户与组织名单", "安全和业务负责人确认职责矩阵"],
  314. "steps": ["配置管理员、编辑者、查看者和领域责任人", "验证委派、审批与高风险双人复核", "核对离职和权限回收"],
  315. "expected": ["账号、角色、责任与企业组织一致", "无越权或责任空缺", "高风险操作职责分离"],
  316. "evidence": ["企业签字版用户角色矩阵", "企业账号与责任验收记录"],
  317. "result": "BLOCKED_EXTERNAL",
  318. "notes": "企业单点登录属于第三阶段,当前仍需真实本地账号映射验收。"
  319. },
  320. {
  321. "id": "P2-WP13-UAT-023",
  322. "work_packages": ["P2-WP05", "P2-WP10", "P2-WP11"],
  323. "module_ids": ["OBS-05", "SEC-15", "PLT-07", "PLT-08", "PLT-12", "PLT-25"],
  324. "title": "企业监控安全联调、规模、安装、升级和灾备验收",
  325. "actor": "enterprise_acceptance",
  326. "acceptance_level": "ENTERPRISE_FORMAL",
  327. "preconditions": ["企业预生产环境和签名制品到位", "RPO/RTO、容量和变更窗口已批准"],
  328. "steps": ["接入 APM、日志、告警、SIEM 和排班", "执行目标规模容量和故障注入", "执行断网安装、升级和候选回滚"],
  329. "expected": ["监控与安全事件可送达", "容量满足批准指标", "安装、升级和恢复达到企业 RPO/RTO"],
  330. "evidence": ["企业预生产演练报告", "变更审批与安全签字"],
  331. "result": "BLOCKED_EXTERNAL",
  332. "notes": "本机小样本耗时不能作为企业承诺。"
  333. },
  334. {
  335. "id": "P2-WP13-UAT-024",
  336. "work_packages": ["P2-WP13"],
  337. "module_ids": ["PLT-25", "PLT-26", "GOV-02"],
  338. "title": "用户培训、运维培训、材料移交和正式签字",
  339. "actor": "enterprise_acceptance",
  340. "acceptance_level": "ENTERPRISE_FORMAL",
  341. "preconditions": ["企业 UAT 完成", "P0 为 0且未关闭 P1 有书面决定", "接收人与培训名单已确认"],
  342. "steps": ["完成用户和运维培训练习", "逐项核对移交清单", "由产品、业务、技术、安全和运维负责人签字"],
  343. "expected": ["签到、练习、问题和补训记录齐全", "代码、制品、配置、备份和责任完成交接", "正式验收状态有签字"],
  344. "evidence": ["企业培训记录", "签字版 UAT 报告与移交清单"],
  345. "result": "BLOCKED_EXTERNAL",
  346. "notes": "本轮仅交付培训和签署材料,不得预签。"
  347. }
  348. ]
  349. }