open-source/qinglong
1
0
Fork 0
mirror of https://github.com/whyour/qinglong.git synced 2026-09-20 16:07:11 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
45879ef0a76d36ce98eddada74636d27652196ca
qinglong/docs/adr/README.md
T

540 lines
126 KiB
Markdown
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# QingLong Architecture Decision Records
本目录记录 QingLong 3.x 的关键架构决策。总体方向见 [QingLong 3.0 Architecture RFC](../QINGLONG_3_0_ARCHITECTURE_RFC.md)。
## 状态
- `Proposed`：等待 Maintainers 评审。
- `Accepted`：已接受，实施必须遵循。
- `Superseded`：已被后续 ADR 替代。
- `Rejected`：已讨论但不采用。
- `Deprecated`：曾经采用，正在退出。
## 索引
| ADR | 标题 | 状态 |
| ----------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------- | ---------- |
| [ADR-0001](./ADR-0001-run-state-and-transaction-boundaries.md) | Run 状态模型与事务边界 | Proposed |
| [ADR-0002](./ADR-0002-legacy-crontab-compatibility-and-shadow-write.md) | Legacy Crontab 兼容、影子写入与切换策略 | Proposed |
| [ADR-0003](./ADR-0003-executor-port-and-local-process-executor.md) | Executor 端口与 LocalProcessExecutor | Proposed |
| [ADR-0004](./ADR-0004-database-repository-drivers-and-migrations.md) | SQLite/PostgreSQL Repository、驱动与 Migration 策略 | Proposed |
| [ADR-0005](./ADR-0005-durable-cancellation-dispatch.md) | Durable Cancellation Dispatch、Lease 与 Fencing | Proposed |
| [ADR-0006](./ADR-0006-node24-and-multi-architecture-support.md) | Node.js 24 与多架构支持分层 | Proposed |
| [ADR-0007](./ADR-0007-local-process-completion-receipt-and-log-survival.md) | LocalProcess completion receipt 与日志存活 | Proposed |
| [ADR-0012](./ADR-0012-remote-worker-session-placement-and-fencing.md) | Remote Worker Session、能力放置与 Fencing | Proposed |
| [ADR-0013](./ADR-0013-remote-run-activation-and-start-failure.md) | Remote Run 启动确认、Lease Fencing 与启动失败 | Proposed |
| [ADR-0014](./ADR-0014-bounded-dispatcher-and-claimed-execution-offer.md) | 有界 Dispatcher 与 Claimed Execution Offer | Proposed |
| [ADR-0021](./ADR-0021-worker-execution-offer-inbox-and-crash-recovery.md) | Worker Execution Offer Inbox 与启动崩溃恢复 | Proposed |
| [ADR-0022](./ADR-0022-pinned-task-execution-plan-materialization.md) | Pinned Task Revision 与本地执行计划物化 | Proposed |
| [ADR-0023](./ADR-0023-immutable-task-execution-revision-storage.md) | 不可变 Task Execution Revision 存储 | Proposed |
| [ADR-0024](./ADR-0024-local-context-secret-and-artifact-boundary.md) | Local Context、Secret 与 Artifact 边界 | Proposed |
| [ADR-0025](./ADR-0025-encrypted-local-secret-store.md) | 加密本地 SecretStore 与版本化密文 | Superseded |
| [ADR-0026](./ADR-0026-local-artifact-quota-and-retention.md) | 本地 Artifact 硬配额、磁盘水位与可恢复 Retention | Proposed |
| [ADR-0027](./ADR-0027-artifact-read-authorization-and-local-range-contract.md) | Artifact 读取授权与本地有界 Range Contract | Proposed |
| [ADR-0028](./ADR-0028-project-identity-rbac-and-policy-core.md) | Project Identity、版本化 RBAC 与默认拒绝 Policy Core | Proposed |
| [ADR-0029](./ADR-0029-first-owner-bootstrap-and-authenticated-principal.md) | 首 Owner 一次性 Bootstrap 与认证主体边界 | Proposed |
| [ADR-0030](./ADR-0030-legacy-panel-authentication-and-stable-user-identity.md) | Legacy Panel 认证与稳定 User Identity | Proposed |
| [ADR-0031](./ADR-0031-approval-request-and-durable-action-dispatch.md) | ApprovalRequest 与 Durable Action Dispatch | Proposed |
| [ADR-0032](./ADR-0032-approved-action-dispatch-execution-and-start-barrier.md) | Approved Action Dispatch 执行租约与 Start Barrier | Proposed |
| [ADR-0033](./ADR-0033-approved-action-recovery-evidence-and-resolution.md) | Approved Action 恢复证据与人工裁决 | Proposed |
| [ADR-0034](./ADR-0034-approved-run-action-atomic-receipt.md) | Approved Run Action 原子回执 | Proposed |
| [ADR-0035](./ADR-0035-approved-action-manual-recovery-authorization.md) | Approved Action 人工恢复授权 | Proposed |
| [ADR-0036](./ADR-0036-approved-action-profile-aware-runtime-lifecycle.md) | Approved Action Profile-aware Runtime Lifecycle | Proposed |
| [ADR-0037](./ADR-0037-postgresql-cluster-control-storage-incubation.md) | PostgreSQL Cluster-control 存储孵化与跨方言契约 | Proposed |
| [ADR-0038](./ADR-0038-cluster-driver-package-and-dependency-baseline.md) | Cluster Driver 独立交付与 PostgreSQL 依赖基线 | Proposed |
| [ADR-0039](./ADR-0039-postgresql-schema-capability-and-runtime-readiness.md) | PostgreSQL Schema Capability 与 Runtime Readiness | Proposed |
| [ADR-0040](./ADR-0040-profile-activation-and-edge-import-isolation.md) | Profile 激活顺序与 Edge 导入隔离 | Proposed |
| [ADR-0041](./ADR-0041-postgresql-run-repository-contract-parity.md) | PostgreSQL Run Repository 契约对等 | Proposed |
| [ADR-0042](./ADR-0042-profile-artifacts-and-package-dependency-direction.md) | Profile 专属产物与 Package 依赖方向 | Proposed |
| [ADR-0043](./ADR-0043-postgresql-migration-typed-schema-and-catalog-authority.md) | PostgreSQL Migration、Typed Schema 与 Catalog 权威边界 | Proposed |
| [ADR-0044](./ADR-0044-runtime-core-extraction-and-legacy-compatibility-exit.md) | Runtime Core 抽离与 Legacy 兼容副本退出 | Proposed |
| [ADR-0045](./ADR-0045-cluster-http-readiness-admission-and-drain.md) | Cluster HTTP Readiness、Admission 与 Drain | Proposed |
| [ADR-0046](./ADR-0046-cluster-two-phase-security-admission.md) | Cluster 两阶段安全 Admission | Proposed |
| [ADR-0047](./ADR-0047-postgresql-project-policy-and-role-binding-fence.md) | PostgreSQL Project Policy 与 RoleBinding Fence | Proposed |
| [ADR-0048](./ADR-0048-reviewed-cluster-route-registry.md) | Cluster 受审 Route Registry 与授权输入边界 | Proposed |
| [ADR-0049](./ADR-0049-cluster-api-credential-and-durable-security-audit.md) | Cluster API Credential 与 Durable Security Audit | Proposed |
| [ADR-0050](./ADR-0050-cluster-administration-authority-and-mutation-ledgers.md) | Cluster Administration Authority 与 Mutation Ledgers | Proposed |
| [ADR-0051](./ADR-0051-cluster-authentication-overload-shield.md) | Cluster Authentication Overload Shield | Proposed |
| [ADR-0052](./ADR-0052-cluster-run-read-api-contract.md) | Cluster Run Read API Contract | Proposed |
| [ADR-0053](./ADR-0053-cluster-startup-recovery-convergence-gate.md) | Cluster Startup Recovery Source 与 Convergence Gate | Proposed |
| [ADR-0054](./ADR-0054-cluster-recovery-claim-fencing-and-bounded-supervisor.md) | Cluster Recovery Claim、Fencing 与有界 Supervisor | Proposed |
| [ADR-0055](./ADR-0055-cluster-recovery-evidence-and-fenced-lost-transition.md) | Cluster Recovery Evidence 与 Fenced Lost Transition | Proposed |
| [ADR-0056](./ADR-0056-cluster-recovery-provider-registry-and-bootstrap-owned-convergence.md) | Cluster Recovery Provider Registry 与 Bootstrap-Owned Convergence | Proposed |
| [ADR-0057](./ADR-0057-postgresql-worker-session-and-run-lease-authority.md) | PostgreSQL Worker Session 与 Run Lease Authority | Proposed |
| [ADR-0058](./ADR-0058-authenticated-worker-ingress-and-execution-attestation.md) | Authenticated Worker Ingress 与 Execution Attestation | Proposed |
| [ADR-0059](./ADR-0059-worker-ingress-mutual-tls-and-deployment-boundary.md) | Worker Ingress Mutual TLS 与部署边界 | Proposed |
| [ADR-0060](./ADR-0060-worker-certificate-lifecycle-and-atomic-trust-reload.md) | Worker Certificate Lifecycle 与原子信任重载 | Proposed |
| [ADR-0061](./ADR-0061-worker-local-certificate-identity-and-renewal.md) | Worker 本地证书身份与显式续期 | Proposed |
| [ADR-0062](./ADR-0062-profile-vulnerability-ownership-and-legacy-dependency-remediation.md) | Profile 漏洞归属与 Legacy 依赖树治理 | Proposed |
| [ADR-0063](./ADR-0063-local-sqlite-storage-and-profile-artifact-boundary.md) | 本机 SQLite 存储权威与 Profile 产物边界 | Proposed |
| [ADR-0064](./ADR-0064-side-by-side-legacy-sqlite-adoption.md) | 2.x SQLite 旁路孵化、恢复点与显式切换 | Proposed |
| [ADR-0065](./ADR-0065-durable-local-application-cutover-supervisor.md) | 持久化本机应用切换 Supervisor 与未知结果收敛 | Proposed |
| [ADR-0066](./ADR-0066-local-application-activation-and-reverse-shutdown.md) | 本机 Application 激活门与反向停止顺序 | Proposed |
| [ADR-0067](./ADR-0067-sqlite-fact-driven-local-run-startup-recovery-preflight.md) | SQLite 事实驱动的本机 Run 启动恢复预检 | Superseded |
| [ADR-0068](./ADR-0068-receipt-first-local-run-startup-reconciliation.md) | 回执优先、进程身份感知的本机 Run 启动恢复 | Proposed |
| [ADR-0069](./ADR-0069-durable-local-process-launch-and-receipt-cleanup-journal.md) | 持久化本机进程启动屏障与数据库索引回执清理 | Proposed |
| [ADR-0070](./ADR-0070-atomic-local-run-execution-coordination.md) | 本机 Run 原子启动协调与耐久身份补偿 | Proposed |
| [ADR-0071](./ADR-0071-bounded-local-dispatch-and-artifact-admission.md) | 有界本机调度、执行计划物化与 Artifact Admission | Proposed |
| [ADR-0072](./ADR-0072-unified-local-execution-completion-and-control-lifecycle.md) | 统一的本机执行完成、取消、超时与停机生命周期 | Proposed |
| [ADR-0073](./ADR-0073-node-sqlite-encrypted-local-secret-store-and-keyring-lifecycle.md) | Node SQLite 加密本机 SecretStore 与 Keyring 生命周期 | Proposed |
| [ADR-0074](./ADR-0074-authorized-local-secret-administration-and-atomic-audit.md) | 授权的本机 Secret 管理与原子安全审计 | Proposed |
| [ADR-0075](./ADR-0075-local-identity-first-owner-bootstrap-ceremony.md) | 本机稳定 Identity 与首 Owner Bootstrap Ceremony | Proposed |
| [ADR-0076](./ADR-0076-shared-local-sqlite-authority-and-stable-identity-authentication.md) | 共享本机 SQLite 操作权与稳定 Identity Credential 认证 | Proposed |
| [ADR-0077](./ADR-0077-short-lived-local-identity-provisioning-and-owner-claim.md) | 短生命周期本机 Identity Provisioning 与首 Owner 原子建权 | Proposed |
| [ADR-0078](./ADR-0078-posix-local-owner-console-proof-and-secret-delivery-gate.md) | POSIX 本机 Owner Console 证明与 Secret 交付门禁 | Proposed |
| [ADR-0079](./ADR-0079-staged-local-owner-secret-delivery-and-recovery.md) | 本机 Owner Secret 分阶段交付与崩溃恢复 | Proposed |
| [ADR-0080](./ADR-0080-local-owner-pepper-provision-backup-and-rotation-boundary.md) | 本机 Owner Pepper Provision、备份与轮换边界 | Proposed |
| [ADR-0081](./ADR-0081-digest-bound-owner-secret-acknowledgement.md) | 摘要绑定的 Owner Secret 确认与无密钥重放 | Superseded |
| [ADR-0082](./ADR-0082-sqlite-owner-delivery-acknowledgement-ledger.md) | SQLite Owner Delivery 确认账本与瞬时文件桥梁 | Proposed |
| [ADR-0083](./ADR-0083-versioned-local-owner-pepper-keyring-and-credential-recovery.md) | 版本化 Owner Pepper Keyring 与 Credential Recovery | Proposed |
| [ADR-0084](./ADR-0084-versioned-owner-delivery-acknowledgement-compaction.md) | 版本化 Owner Delivery Acknowledgement 压缩与重放 Tombstone | Proposed |
| [ADR-0085](./ADR-0085-private-command-file-local-owner-gc-cli.md) | 私有持久命令文件驱动的 Local Owner GC CLI | Proposed |
| [ADR-0086](./ADR-0086-private-command-file-local-owner-product-cli.md) | 私有命令文件驱动的 Local Owner 产品 CLI | Proposed |
| [ADR-0087](./ADR-0087-package-granularity-and-topological-build-boundary.md) | Package 粒度与拓扑构建边界 | Proposed |
| [ADR-0088](./ADR-0088-linux-resource-envelopes-and-physical-device-evidence.md) | Linux 资源档位与物理设备证据边界 | Accepted |
| [ADR-0089](./ADR-0089-versioned-task-definition-storage-and-physical-scale-evidence.md) | 版本化 TaskDefinition 存储与物理规模证据 | Accepted |
| [ADR-0090](./ADR-0090-production-package-packlist-and-map-exclusion.md) | Production Package Packlist 与开发 Map 排除 | Accepted |
| [ADR-0091](./ADR-0091-immutable-task-spec-semantic-registry-and-command-v1.md) | 不可变 TaskSpec 语义注册表与 Command v1 | Accepted |
| [ADR-0092](./ADR-0092-pinned-command-task-definition-execution-compilation.md) | Pinned Command TaskDefinition 执行编译 | Accepted |
| [ADR-0093](./ADR-0093-local-execution-revision-digest-and-atomic-publication.md) | 本机 Execution Revision 摘要与原子发布 | Accepted |
| [ADR-0094](./ADR-0094-versioned-trigger-definition-and-pinned-task-binding.md) | 版本化 Trigger 与固定任务修订绑定 | Accepted |
| [ADR-0095](./ADR-0095-bounded-legacy-crontab-adoption-classification.md) | 有界 Legacy Crontab adoption 分类与内容绑定计划 | Accepted |
| [ADR-0096](./ADR-0096-strong-bounded-legacy-adoption-decision-receipt.md) | 强认证且有界的 Legacy adoption 决策回执 | Accepted |
| [ADR-0097](./ADR-0097-private-authenticated-legacy-adoption-decision-file.md) | 私有且可认证的 Legacy adoption 决策文件 | Accepted |
| [ADR-0098](./ADR-0098-policy-fenced-atomic-legacy-task-adoption.md) | Policy 围栏下的原子 Legacy Task adoption | Accepted |
| [ADR-0099](./ADR-0099-dedicated-legacy-adoption-decision-issuer-keyring.md) | 专用 Legacy adoption decision issuer keyring | Accepted |
| [ADR-0100](./ADR-0100-private-streaming-legacy-adoption-review-cli.md) | 私有流式 Legacy adoption review-file 与签发 CLI | Accepted |
| [ADR-0101](./ADR-0101-reauthenticated-policy-fenced-legacy-adoption-commit-cli.md) | 重新认证且受 Policy 围栏约束的 adoption commit CLI | Accepted |
| [ADR-0102](./ADR-0102-physical-edge-legacy-adoption-scale-evidence.md) | 物理 Edge Legacy adoption 规模证据协议 | Accepted |
| [ADR-0103](./ADR-0103-bounded-local-cron-scheduler-run-admission.md) | 有界本机 Cron 调度与 Run 原子准入 | Accepted |
| [ADR-0104](./ADR-0104-postgresql-immutable-task-trigger-and-execution-revisions.md) | PostgreSQL 不可变 Task、Trigger 与远端执行修订 | Accepted |
| [ADR-0105](./ADR-0105-postgresql-row-lease-cluster-scheduler-admission.md) | PostgreSQL 行租约 Cluster Scheduler 与 Run 原子准入 | Accepted |
| [ADR-0106](./ADR-0106-profile-entrypoint-subpath-consolidation.md) | Profile 构建入口 Subpath 收敛 | Accepted |
| [ADR-0107](./ADR-0107-postgresql-authoritative-cluster-scheduler-clock.md) | PostgreSQL 权威 Cluster Scheduler 时钟 | Accepted |
| [ADR-0108](./ADR-0108-worker-pull-placement-and-digest-only-offer.md) | Worker Pull Placement 与摘要化 Execution Offer | Accepted |
| [ADR-0109](./ADR-0109-postgresql-remote-run-activation-ack.md) | PostgreSQL Remote Run 原子启动 ACK | Accepted |
| [ADR-0110](./ADR-0110-authenticated-worker-offer-delivery-and-durable-admission.md) | 认证 Worker Offer 传输与耐久准入 | Accepted |
| [ADR-0111](./ADR-0111-single-authority-worker-execution-inbox-and-spawn-barrier.md) | 单一 Worker 执行 Inbox 与可判定 Spawn Barrier | Accepted |
| [ADR-0112](./ADR-0112-versioned-worker-activation-transport-and-explicit-headless-lifecycle.md) | 版本化 Worker Activation Transport 与显式 Headless Lifecycle | Accepted |
| [ADR-0113](./ADR-0113-bounded-worker-secret-and-log-materialization.md) | 有界 Worker Secret 与 Log Materialization | Accepted |
| [ADR-0114](./ADR-0114-fenced-batch-remote-worker-secret-delivery.md) | 围栏化 Remote Worker 批量 Secret 交付 | Accepted |
| [ADR-0115](./ADR-0115-bounded-worker-file-log-artifact-and-output-ownership.md) | 有界 Worker 文件 Log Artifact 与 Output Ownership | Accepted |
| [ADR-0116](./ADR-0116-reviewed-worker-posix-executor-and-upload-before-completion.md) | 受审 Worker POSIX Executor 与 Upload-before-completion | Accepted |
| [ADR-0117](./ADR-0117-streamed-remote-worker-artifact-and-atomic-completion.md) | 流式 Remote Worker Artifact 与原子 Completion | Accepted |
| [ADR-0118](./ADR-0118-remote-worker-lease-control-and-durable-timeout.md) | Remote Worker Lease Control 与耐久 Timeout | Accepted |
| [ADR-0119](./ADR-0119-reviewed-production-cluster-control-route-composition.md) | 受审 Production Cluster Control Route Composition | Accepted |
| [ADR-0120](./ADR-0120-s3-compatible-immutable-remote-worker-artifact-store.md) | S3-Compatible Immutable Remote Worker Artifact Store | Accepted |
| [ADR-0121](./ADR-0121-production-worker-headless-execution-composition.md) | Production Worker Headless Execution Composition | Accepted |
| [ADR-0122](./ADR-0122-single-cadence-worker-session-product-lifecycle.md) | 单 Cadence Worker Session Product Lifecycle | Accepted |
| [ADR-0123](./ADR-0123-worker-production-credential-material-boundary.md) | Worker Production Credential Material Boundary | Accepted |
| [ADR-0124](./ADR-0124-recoverable-worker-credential-delivery-and-overlap-rotation.md) | 可恢复的 Worker Credential 交付确认与重叠轮换 | Proposed |
| [ADR-0125](./ADR-0125-postgresql-failover-admission-and-ambiguous-commit-boundary.md) | PostgreSQL Failover Admission 与不确定提交边界 | Proposed |
| [ADR-0126](./ADR-0126-locked-cluster-process-image-and-kubernetes-baseline.md) | 锁定的 Cluster 进程、镜像与 Kubernetes 部署基线 | Accepted |
| [ADR-0127](./ADR-0127-bounded-postgresql-private-ca-file-binding.md) | 有界 PostgreSQL 私有 CA 文件绑定 | Accepted |
| [ADR-0128](./ADR-0128-exact-cluster-image-sbom-and-attested-multiarch-release.md) | 精确 Cluster 镜像 SBOM 与证明化多架构发布 | Accepted |
| [ADR-0129](./ADR-0129-cloudnativepg-operator-and-database-role-authority.md) | CloudNativePG Operator 与数据库角色权威 | Accepted |
| [ADR-0130](./ADR-0130-cloudnativepg-barman-backup-and-isolated-restore.md) | CloudNativePG Barman 备份与隔离恢复 | Proposed |
| [ADR-0131](./ADR-0131-barman-plugin-cert-manager-authority.md) | Barman Plugin cert-manager 证书 Authority | Proposed |
| [ADR-0132](./ADR-0132-bounded-plugin-package-manifest-and-install-plan.md) | 有界 Plugin Package Manifest 与安装计划 | Accepted |
| [ADR-0133](./ADR-0133-immutable-tool-registry-and-policy-fenced-invocation-plan.md) | 不可变 Tool Registry 与 Policy-fenced Invocation Plan | Accepted |
| [ADR-0134](./ADR-0134-content-addressed-package-lock-and-recoverable-install-state.md) | 内容寻址 PackageLock 与可恢复安装状态 | Accepted |
| [ADR-0135](./ADR-0135-deterministic-signed-plugin-bundle-and-private-local-staging.md) | 确定性签名 Plugin Bundle 与私有本地 Staging | Accepted |
| [ADR-0136](./ADR-0136-sqlite-plugin-package-install-repository-and-head-cas.md) | SQLite Plugin Package 安装仓库与 Head CAS | Accepted |
| [ADR-0137](./ADR-0137-postgresql-plugin-package-install-repository-and-project-lock-authority.md) | PostgreSQL Plugin Package 安装仓库与 Project Lock Authority | Accepted |
| [ADR-0138](./ADR-0138-durable-plugin-package-lock-and-exact-local-activation.md) | 耐久 Plugin Package Lock 与精确本地激活 | Accepted |
| [ADR-0139](./ADR-0139-kubernetes-plugin-package-active-pointer-cas.md) | Kubernetes Plugin Package Active Pointer CAS | Accepted |
| [ADR-0140](./ADR-0140-bounded-plugin-package-startup-recovery-and-admission.md) | 有界 Plugin Package 启动恢复与准入门禁 | Accepted |
| [ADR-0141](./ADR-0141-profile-neutral-approved-action-and-package-admission-boundary.md) | Profile-neutral Approved Action 与 Package 准入边界 | Accepted |
| [ADR-0142](./ADR-0142-authenticated-plugin-package-management-facade.md) | 认证后 Plugin Package 管理 Facade 与 Profile Ceremony | Accepted |
| [ADR-0143](./ADR-0143-private-authenticated-local-plugin-package-cli.md) | 私有认证 Local Plugin Package CLI | Accepted |
| [ADR-0144](./ADR-0144-cluster-plugin-package-management-transport-boundary.md) | Cluster Plugin Package 管理 Transport 与双 Authority 边界 | Proposed |
| [ADR-0145](./ADR-0145-bounded-cluster-plugin-package-management-host.md) | 有界 Cluster Plugin Package 管理 Host 与可选部署 | Accepted |
| [ADR-0146](./ADR-0146-postgresql-durable-plugin-package-management-quota.md) | PostgreSQL Durable Plugin Package 管理配额 | Accepted |
| [ADR-0147](./ADR-0147-postgresql-durable-plugin-package-identity-keyset-ledger.md) | PostgreSQL 持久 Plugin Package 身份 keyset ledger | Accepted |
| [ADR-0148](./ADR-0148-plugin-package-management-live-evidence-and-default-deny-egress.md) | Plugin Package 管理 Live Evidence 与默认拒绝 Egress | Accepted |
| [ADR-0149](./ADR-0149-atomic-plugin-package-resource-generation-identity.md) | 原子 Plugin Package Resource Generation Identity | Accepted |
| [ADR-0150](./ADR-0150-bounded-plugin-package-semantic-materialization.md) | 有界 Plugin Package 语义物化 | Accepted |
| [ADR-0151](./ADR-0151-sqlite-postgresql-immutable-plugin-package-materialized-revision-repository.md) | SQLite/PostgreSQL 不可变 Plugin Package 物化修订仓库 | Accepted |
| [ADR-0152](./ADR-0152-generation-bound-atomic-plugin-package-task-reconciliation.md) | Generation 绑定的原子 Plugin Package Task Reconciliation | Accepted |
| [ADR-0153](./ADR-0153-bounded-production-plugin-package-task-publication.md) | 有界的生产 Plugin Package Task 发布与启动恢复 | Accepted |
| [ADR-0154](./ADR-0154-project-scoped-immutable-tool-definition-snapshot.md) | Project-scoped 不可变 Tool Definition Snapshot | Accepted |
| [ADR-0155](./ADR-0155-snapshot-bound-trusted-tool-handler-and-execution-admission.md) | Snapshot-bound Trusted Tool Handler 与执行准入 | Accepted |
| [ADR-0156](./ADR-0156-durable-step-run-aggregate-and-run-fence.md) | 耐久 StepRun Aggregate 与 Run Fence | Accepted |
| [ADR-0157](./ADR-0157-bounded-tool-execution-trace-and-audit-evidence.md) | 有界 Tool Execution Trace 与 Audit Evidence | Accepted |
| [ADR-0158](./ADR-0158-atomic-tool-execution-start-barrier.md) | 同事务 Tool Execution Start Barrier | Accepted |
| [ADR-0159](./ADR-0159-opaque-tool-invocation-and-redacted-preview-artifacts.md) | 不透明 Tool Invocation 与脱敏 Preview Artifact | Accepted |
| [ADR-0160](./ADR-0160-sqlite-postgresql-immutable-tool-invocation-artifact-repository.md) | SQLite/PostgreSQL 不可变 Tool Invocation Artifact 仓库 | Accepted |
| [ADR-0161](./ADR-0161-tool-execution-start-artifact-binding.md) | Tool Execution Start 与 Artifact 的不可变绑定 | Accepted |
| [ADR-0162](./ADR-0162-first-trusted-built-in-run-read-tool-adapter.md) | 首个 Trusted Built-in Run Read Tool Adapter | Accepted |
| [ADR-0163](./ADR-0163-atomic-encrypted-tool-success-completion.md) | 原子加密 Tool 成功完成协议 | Accepted |
| [ADR-0164](./ADR-0164-trusted-tool-success-coordinator-and-profile-storage-assembly.md) | Trusted Tool 成功协调器与 Profile 存储装配 | Accepted |
| [ADR-0165](./ADR-0165-trusted-tool-terminal-failure-completion.md) | Trusted Tool 失败与超时终态完成协议 | Accepted |
| [ADR-0166](./ADR-0166-trusted-tool-result-key-catalog-and-completion-fence.md) | Trusted Tool Result Key Catalog 与 Completion Fence | Accepted |
| [ADR-0167](./ADR-0167-optional-bounded-ai-model-gateway.md) | 可选、受预算约束的 AI Model Gateway | Accepted |
| [ADR-0168](./ADR-0168-durable-model-invocation-step-run-fence.md) | Durable ModelInvocation 与 StepRun Fence | Accepted |
| [ADR-0169](./ADR-0169-project-bound-ai-provider-credential-binding.md) | Project-bound AI Provider Credential Binding 与可清零 Secret Material | Accepted |
| [ADR-0170](./ADR-0170-durable-model-usage-ledger-and-bounded-project-accounting.md) | Durable Model Usage Ledger 与有界 Project Accounting | Accepted |
| [ADR-0171](./ADR-0171-atomic-project-model-quota-reservation-and-settlement.md) | 原子 Project Model Quota Reservation 与 Settlement | Accepted |
| [ADR-0172](./ADR-0172-immutable-model-price-quote-and-canonical-cost-settlement.md) | 不可变 Model Price Quote 与 Canonical Cost Settlement | Accepted |
| [ADR-0173](./ADR-0173-durable-model-price-catalog-publication-and-activation.md) | 耐久 Model Price Catalog 发布、激活与撤销 | Accepted |
| [ADR-0174](./ADR-0174-authorized-model-price-catalog-management-facade.md) | 授权型 Model Price Catalog 管理 facade | Accepted |
| [ADR-0175](./ADR-0175-private-authenticated-local-model-price-catalog-cli.md) | 私有认证 Local Model Price Catalog CLI | Accepted |
| [ADR-0176](./ADR-0176-explicit-local-ai-feature-activation-and-deactivation.md) | 显式 Local AI Feature 启用与非破坏性停用 | Accepted |
| [ADR-0177](./ADR-0177-active-head-driven-local-ai-application-composition.md) | Active Head 驱动的本机 AI Application Composition | Accepted |
| [ADR-0178](./ADR-0178-concrete-local-headless-application-process.md) | Concrete Local Headless Application Process | Accepted |
| [ADR-0179](./ADR-0179-materialized-local-plugin-package-recovery-catalog.md) | Materialized Local Plugin Package Recovery Catalog | Accepted |
| [ADR-0180](./ADR-0180-authenticated-local-plugin-package-recovery-catalog-publication.md) | Authenticated Local Plugin Package Recovery Catalog Publication | Accepted |
| [ADR-0181](./ADR-0181-immutable-package-signature-time-and-local-publisher-trust-overlap-rotation.md) | Immutable Package Signature Time and Local Publisher Trust Overlap Rotation | Accepted |
| [ADR-0182](./ADR-0182-safe-local-plugin-package-publisher-key-retirement.md) | Safe Local Plugin Package Publisher Key Retirement | Accepted |
| [ADR-0183](./ADR-0183-emergency-local-plugin-package-publisher-key-revocation.md) | Emergency Local Plugin Package Publisher Key Revocation | Accepted |
| [ADR-0184](./ADR-0184-offline-local-plugin-package-quarantine-withdrawal.md) | 本机 Plugin Package 离线隔离与能力撤出 | Accepted |
| [ADR-0185](./ADR-0185-workspace-package-boundary-consolidation.md) | Workspace Package 边界审计与最小 Profile 交付梯度 | Accepted |
| [ADR-0186](./ADR-0186-cluster-postgresql-plugin-package-quarantine.md) | Cluster PostgreSQL Plugin Package 隔离与能力撤出 | Accepted |
| [ADR-0187](./ADR-0187-cluster-plugin-package-publisher-provenance-and-revocation-impact.md) | Cluster Plugin Package 发布者 Provenance 与撤销影响集 | Accepted |
| [ADR-0188](./ADR-0188-cluster-durable-publisher-trust-authority-and-approved-revocation.md) | Cluster 持久发布者 Trust Authority 与受批撤销 | Accepted |
| [ADR-0189](./ADR-0189-cluster-effective-publisher-trust-material-binding.md) | Cluster Effective Publisher Trust Material Binding | Accepted |
| [ADR-0190](./ADR-0190-cluster-approved-publisher-trust-overlap-add-and-safe-retire.md) | Cluster Approved Publisher Trust Overlap Add 与 Safe Retire | Proposed |
| [ADR-0191](./ADR-0191-private-cluster-plugin-package-management-client.md) | 私有 Cluster Plugin Package 管理 Client | Accepted |
| [ADR-0192](./ADR-0192-kubernetes-private-management-tunnel-client.md) | Kubernetes 私有管理 Tunnel Client | Accepted |
| [ADR-0193](./ADR-0193-fresh-local-profile-setup-and-application.md) | Fresh Local Profile Setup 与 Application | Accepted |
| [ADR-0194](./ADR-0194-replay-safe-local-deployment-preparation.md) | 可重放的本机部署准备 | Accepted |
| [ADR-0195](./ADR-0195-ai-excluded-local-application-image.md) | AI-excluded 本机 Application 镜像 | Accepted |
| [ADR-0196](./ADR-0196-local-image-attested-multiarch-release-contract.md) | 本机镜像证明化多架构发布契约 | Accepted |
| [ADR-0197](./ADR-0197-generation-cas-local-compose-image-selection.md) | Generation CAS 本机 Compose 镜像选择 | Accepted |
| [ADR-0198](./ADR-0198-digest-bound-local-compose-rollout-preflight.md) | Digest-bound 本机 Compose Rollout Preflight | Accepted |
| [ADR-0199](./ADR-0199-generation-fenced-local-compose-rollout.md) | Generation-fenced 本机 Compose Rollout | Accepted |
| [ADR-0200](./ADR-0200-local-sqlite-rollout-write-contract-and-snapshot.md) | 本机 SQLite Rollout 写契约与升级前快照 | Accepted |
| [ADR-0201](./ADR-0201-explicit-fenced-local-sqlite-restore.md) | 显式、围栏化的本机 SQLite 恢复 | Accepted |
| [ADR-0202](./ADR-0202-explicit-compose-evidence-collection.md) | 显式、可重放的 Compose 恢复证据收集 | Accepted |
| [ADR-0203](./ADR-0203-physical-edge-compose-storage-recovery-evidence.md) | 物理 Edge Compose 存储恢复候选证据 | Accepted |
| [ADR-0204](./ADR-0204-physical-edge-native-application-start-evidence.md) | 物理 Edge Native Application 首次 Active 候选证据 | Accepted |
| [ADR-0205](./ADR-0205-physical-edge-init-managed-service-start-evidence.md) | 物理 Edge Init-managed Service 首次 Active 候选证据 | Accepted |
| [ADR-0206](./ADR-0206-direct-init-managed-release-startup-receipt.md) | 直连 Init-managed Release 与有界启动凭据 | Accepted |
| [ADR-0207](./ADR-0207-authenticated-local-secret-product-cli.md) | 强认证 Local Secret 产品 CLI 与事务内 Credential Fence | Accepted |
| [ADR-0208](./ADR-0208-authenticated-local-project-role-policy-cli.md) | 强认证 Local Project Role Policy CLI 与防锁死交接 | Accepted |
| [ADR-0209](./ADR-0209-owner-fenced-local-identity-credential-administration.md) | Owner 围栏化 Local Identity/Credential 管理与私有交付 | Accepted |
| [ADR-0210](./ADR-0210-owner-fenced-local-identity-credential-inspection.md) | Owner 围栏化 Local Identity/Credential 查询 | Accepted |
| [ADR-0211](./ADR-0211-instance-authority-project-for-local-identity-credential.md) | Local Identity/Credential 的实例 Authority Project | Accepted |
| [ADR-0212](./ADR-0212-owner-fenced-local-project-lifecycle.md) | Owner 围栏化 Local Project 生命周期 | Accepted |
| [ADR-0213](./ADR-0213-owner-fenced-bounded-local-project-query.md) | Owner 围栏化、有界的 Local Project 查询 | Accepted |
| [ADR-0214](./ADR-0214-owner-fenced-bounded-local-role-binding-query.md) | Owner 围栏化、有界的 Local RoleBinding 查询 | Accepted |
| [ADR-0215](./ADR-0215-instance-owner-fenced-bounded-local-security-audit-query.md) | 实例 Owner 围栏化、有界的 Local Security Audit 查询 | Accepted |
| [ADR-0216](./ADR-0216-owner-fenced-bounded-local-security-audit-compaction.md) | 实例 Owner 围栏化、有界的 Local Security Audit 诊断压缩 | Accepted |
| [ADR-0217](./ADR-0217-workspace-package-boundary-convergence.md) | QingLong 3.0 workspace package 边界收敛 | Accepted |
| [ADR-0218](./ADR-0218-deployment-owned-croner-provider-boundary.md) | 部署 Owner 持有的 Croner Provider 边界 | Accepted |
| [ADR-0219](./ADR-0219-pinned-semver-runtime-adapter-boundary.md) | 固定 SemVer 运行时适配器边界 | Accepted |
| [ADR-0220](./ADR-0220-plugin-package-installation-inventory-query.md) | Plugin Package 当前安装清单查询 | Accepted |
| [ADR-0221](./ADR-0221-atomic-plugin-package-lifecycle-overlay.md) | 原子、可重放的 Plugin Package 生命周期 Overlay | Proposed |
| [ADR-0222](./ADR-0222-generation-bound-plugin-package-automation-publication.md) | 按 generation 绑定的 Plugin Package 自动化发布账本 | Proposed |
| [ADR-0223](./ADR-0223-generation-bound-plugin-package-workflow-execution-plan.md) | 按 generation 绑定的 Plugin Package Workflow 执行计划 | Proposed |
| [ADR-0224](./ADR-0224-sqlite-atomic-plugin-package-workflow-admission.md) | SQLite Plugin Package Workflow 原子准入 | Proposed |
| [ADR-0225](./ADR-0225-postgresql-serializable-plugin-package-workflow-admission.md) | PostgreSQL Serializable Plugin Package Workflow 准入 | Proposed |
| [ADR-0226](./ADR-0226-bounded-plugin-package-workflow-frontier.md) | 有界 Plugin Package Workflow Frontier | Proposed |
| [ADR-0227](./ADR-0227-generation-bound-workflow-task-attempt-admission.md) | Generation-bound Workflow Task Attempt 准入 | Proposed |
| [ADR-0228](./ADR-0228-bounded-plugin-package-workflow-cancellation-convergence.md) | 有界 Plugin Package Workflow 整体取消收敛 | Proposed |
| [ADR-0229](./ADR-0229-local-workflow-task-runtime-lifecycle.md) | Local Workflow Task 单 cadence 运行生命周期 | Proposed |
| [ADR-0230](./ADR-0230-cluster-workflow-single-scheduler-cadence.md) | Cluster Workflow 复用单一 Scheduler cadence | Accepted |
| [ADR-0231](./ADR-0231-in-process-worker-ingress-runtime-capability-port.md) | Worker ingress 复用 control 进程并注入 runtime capability port | Accepted |
| [ADR-0232](./ADR-0232-cluster-runtime-recovery-and-lost-retry-single-cadence.md) | Cluster runtime recovery 与 lost retry 复用单一 Scheduler cadence | Accepted |
| [ADR-0233](./ADR-0233-authority-gated-mounted-cluster-secret-provider.md) | Cluster Secret 使用 authority-gated mounted-files provider | Accepted |
| [ADR-0234](./ADR-0234-single-identity-production-worker-process-and-deployment.md) | 单身份 Production Worker 进程与部署边界 | Accepted |
| [ADR-0235](./ADR-0235-production-worker-postgresql-live-contract-and-transition-typing.md) | Production Worker PostgreSQL 真实合约与 Session Transition 类型边界 | Accepted |
| [ADR-0236](./ADR-0236-production-worker-run-contract-and-authentication-attempt-budget.md) | Production Worker Run 纵切面与认证尝试预算 | Accepted |
| [ADR-0237](./ADR-0237-capability-oriented-dependency-boundary-reconciliation.md) | 面向能力的依赖边界对账 | Accepted |
| [ADR-0238](./ADR-0238-production-worker-certificate-renewal-single-cadence.md) | Production Worker 证书续期单 Cadence 装配 | Accepted |
| [ADR-0239](./ADR-0239-kubernetes-worker-generation-rollout-and-pvc-recovery.md) | Kubernetes Worker Generation Rollout 与 PVC 恢复边界 | Accepted |
| [ADR-0240](./ADR-0240-kubernetes-worker-credential-staging-and-short-lived-rbac.md) | Kubernetes Worker Credential Staging 与短期最小 RBAC | Accepted |
| [ADR-0241](./ADR-0241-kubernetes-worker-credential-tokenrequest-session.md) | Kubernetes Worker Credential TokenRequest Session | Accepted |
| [ADR-0242](./ADR-0242-approved-worker-credential-management-and-execution.md) | 受批 Worker Credential 管理与一次性执行边界 | Proposed |
| [ADR-0243](./ADR-0243-remove-unconsumed-local-cutover-package.md) | 删除无产品消费者的 Local Cutover 孵化包 | Accepted |
| [ADR-0244](./ADR-0244-purpose-bound-management-identity-assertions.md) | 按管理能力绑定身份断言用途 | Accepted |
| [ADR-0245](./ADR-0245-worker-management-external-oidc-ceremony-evidence.md) | Worker 管理外部 OIDC 双用户 Ceremony 证据 | Accepted |
| [ADR-0246](./ADR-0246-worker-management-durable-audit-evidence.md) | Worker 管理持久审计的独立只读证据 | Accepted |
| [ADR-0247](./ADR-0247-worker-management-mutual-tls-client-boundary.md) | Worker 管理业务路由的客户端证书边界 | Accepted |
| [ADR-0248](./ADR-0248-worker-management-pki-rotation-evidence.md) | Worker 管理 PKI 吊销与滚动替换证据 | Accepted |
| [ADR-0249](./ADR-0249-bounded-worker-management-client-ca-rollover.md) | Worker 管理客户端 CA 有界重叠与安全退休 | Accepted |
| [ADR-0250](./ADR-0250-worker-management-client-ca-rollover-evidence.md) | Worker 管理客户端 CA 三阶段生产证据 | Accepted |
| [ADR-0251](./ADR-0251-worker-management-revocation-trust-domain-separation.md) | Worker 管理吊销证据的双 PKI 信任域分离 | Accepted |
| [ADR-0252](./ADR-0252-worker-management-unified-release-evidence.md) | Worker 管理统一 Release Evidence | Accepted |
| [ADR-0253](./ADR-0253-private-worker-management-evidence-image-release-gate.md) | 私密 Worker 管理证据的镜像发布门 | Accepted |
| [ADR-0254](./ADR-0254-digest-pinned-cross-architecture-os-vulnerability-release-gate.md) | Digest 固定的跨架构 OS 漏洞发布门 | Accepted |
| [ADR-0255](./ADR-0255-build-once-scanned-oci-digest-promotion.md) | Build-once Scanned OCI Digest Promotion | Accepted |
| [ADR-0256](./ADR-0256-owner-authenticated-local-task-definition-management.md) | Owner-authenticated Local TaskDefinition Management | Accepted |
| [ADR-0257](./ADR-0257-profile-runtime-artifact-pruning-and-tiered-import-budget.md) | Profile 运行制品裁剪与分层 Import RSS 预算 | Accepted |
| [ADR-0258](./ADR-0258-owner-authenticated-local-trigger-management-and-current-task-fence.md) | Owner-authenticated Local Trigger 管理与 Current Task 围栏 | Accepted |
| [ADR-0259](./ADR-0259-purpose-bound-cluster-automation-management-process.md) | 用途隔离的 Cluster Automation Management 进程 | Accepted |
| [ADR-0260](./ADR-0260-generation-bound-content-free-plugin-package-prompt-execution.md) | Generation-bound、Content-free 的 Plugin Package Prompt 执行 | Proposed |
| [ADR-0261](./ADR-0261-explicit-encrypted-durable-plugin-package-prompt-output-artifact.md) | 显式加密的 Durable Plugin Package Prompt 输出 Artifact | Proposed |
| [ADR-0262](./ADR-0262-kubernetes-secret-backed-cluster-prompt-output-key-retirement.md) | Kubernetes Secret-backed Cluster Prompt 输出 Key Retirement | Accepted |
| [ADR-0263](./ADR-0263-explicit-cluster-ai-composition-and-provider-credential-authority.md) | 显式 Cluster AI 组合与 Provider Credential Authority | Accepted |
| [ADR-0264](./ADR-0264-dedicated-cluster-model-provider-credential-management-boundary.md) | 独立 Cluster Model Provider Credential 管理边界 | Accepted |
| [ADR-0265](./ADR-0265-bounded-one-shot-model-provider-credential-test-connection.md) | 有预算的一次性 Model Provider Credential Test Connection | Accepted |
| [ADR-0266](./ADR-0266-externally-staged-cluster-prompt-output-active-key-rotation.md) | Externally staged、resourceVersion-fenced 的 Cluster Prompt Output Active Key Rotation | Accepted |
| [ADR-0267](./ADR-0267-machine-verifiable-workspace-package-boundary-ledger.md) | 机器可验证的 Workspace Package 边界账本 | Accepted |
| [ADR-0268](./ADR-0268-signed-external-prompt-output-key-custody-and-recovery-proof.md) | 签名的外部 Prompt 输出密钥托管与恢复证明 | Proposed |
| [ADR-0269](./ADR-0269-profile-aware-local-sqlite-readiness-diagnostic.md) | Profile-aware Local SQLite Readiness 诊断边界 | Accepted |
| [ADR-0270](./ADR-0270-authenticated-local-plugin-package-workflow-product-entry.md) | 受认证的本机 Plugin Package Workflow 产品入口 | Accepted |
| [ADR-0271](./ADR-0271-authenticated-cluster-plugin-package-workflow-product-entry.md) | 受认证的 Cluster Plugin Package Workflow 产品入口 | Accepted |
| [ADR-0272](./ADR-0272-bounded-authorized-cluster-automation-inspection.md) | 有界且授权原子的 Cluster Automation Inspection | Accepted |
| [ADR-0273](./ADR-0273-local-ai-provider-credential-product-authority.md) | 本机 AI Provider Credential 产品 Authority | Accepted |
| [ADR-0274](./ADR-0274-authenticated-local-plugin-package-prompt-product-entry.md) | 受认证的本机 Plugin Package Prompt 产品入口 | Accepted |
| [ADR-0275](./ADR-0275-authenticated-cluster-plugin-package-prompt-product-entry.md) | 受认证的 Cluster Plugin Package Prompt 产品入口 | Accepted |
| [ADR-0276](./ADR-0276-domain-oriented-package-source-layout.md) | Package 内部领域目录与兼容 export 布局 | Accepted |
| [ADR-0277](./ADR-0277-local-plugin-package-workflow-cancellation-product-entry.md) | 本机 Plugin Package Workflow 取消产品入口 | Accepted |
| [ADR-0278](./ADR-0278-profile-separated-linux-workflow-cancellation-resource-gate.md) | Profile 分层的 Linux Workflow 取消资源发布门 | Accepted |
| [ADR-0279](./ADR-0279-authenticated-cluster-plugin-package-workflow-cancellation-product-entry.md) | 受认证的 Cluster Plugin Package Workflow 取消产品入口 | Accepted |
| [ADR-0280](./ADR-0280-local-sqlite-storage-and-administration-composition-layout.md) | Local SQLite Storage 与 Administration Composition 布局 | Accepted |
| [ADR-0281](./ADR-0281-source-bound-cross-architecture-linux-resource-release-evidence.md) | 同源绑定的跨架构 Linux 资源发布证据 | Accepted |
| [ADR-0282](./ADR-0282-authenticated-local-plugin-package-workflow-run-inspection.md) | 受认证的本机 Plugin Package Workflow Run 查询 | Accepted |
| [ADR-0283](./ADR-0283-authenticated-cluster-plugin-package-workflow-run-inspection.md) | 受认证的 Cluster Plugin Package Workflow Run 查询 | Accepted |
| [ADR-0284](./ADR-0284-bounded-authenticated-package-bound-workflow-step-run-list.md) | 有界且受认证的 Package-bound Workflow StepRun 列表 | Accepted |
| [ADR-0285](./ADR-0285-bounded-authenticated-package-bound-workflow-run-event-list.md) | 有界且受认证的 Package-bound Workflow RunEvent 时间线 | Accepted |
| [ADR-0286](./ADR-0286-bounded-authenticated-package-bound-workflow-run-history.md) | 有界且受认证的 Package-bound Workflow Run 历史列表 | Accepted |
| [ADR-0287](./ADR-0287-content-free-package-prompt-catalog.md) | Content-free 的 Package Prompt 目录读取 | Accepted |
| [ADR-0288](./ADR-0288-content-free-package-prompt-execution-inspection.md) | 按调用方 Request ID 精确读取 Content-free Package Prompt 执行状态 | Accepted |
| [ADR-0289](./ADR-0289-request-keyed-durable-package-prompt-output-recovery.md) | 按执行 Request ID 恢复并读取 Durable Package Prompt 输出 | Accepted |
| [ADR-0290](./ADR-0290-local-sqlite-completion-receipt-journal-collaborator.md) | Local SQLite Completion Receipt Journal 内部 Collaborator | Accepted |
| [ADR-0291](./ADR-0291-local-sqlite-run-reader-internal-module.md) | Local SQLite Run Reader 内部模块 | Accepted |
| [ADR-0292](./ADR-0292-local-sqlite-run-persistence-support-module.md) | Local SQLite Run Persistence Support 内部模块 | Accepted |
| [ADR-0293](./ADR-0293-local-sqlite-security-authority-store.md) | Local SQLite Security Authority Store 与 Run Facade 解耦 | Accepted |
| [ADR-0294](./ADR-0294-local-sqlite-domain-neutral-persistence-primitives.md) | Local SQLite 领域中立 Persistence Primitives | Accepted |
| [ADR-0295](./ADR-0295-shallow-profile-package-dependency-firewall-proof.md) | 浅层 Profile Package 的依赖防火墙证明 | Accepted |
| [ADR-0296](./ADR-0296-root-entrypoint-line-ratchet-and-local-admin-domain-entry.md) | 根入口行数棘轮与 Local Admin 领域入口 | Accepted |
| [ADR-0297](./ADR-0297-ai-root-implementation-domain-ownership.md) | AI 根实现的领域归属与公开 Subpath 稳定性 | Accepted |
| [ADR-0298](./ADR-0298-local-sqlite-root-runtime-and-adoption-ownership.md) | Local SQLite 根 Runtime 与 Adoption 实现归属 | Accepted |
| [ADR-0299](./ADR-0299-cluster-control-root-composition-ownership.md) | Cluster Control 根 Composition 实现归属 | Accepted |
| [ADR-0300](./ADR-0300-worker-runtime-application-composition-ownership.md) | Worker Runtime Application Composition 实现归属 | Accepted |
| [ADR-0301](./ADR-0301-cluster-admin-runtime-and-security-administration-ownership.md) | Cluster Admin Runtime 与 Security Administration 实现归属 | Accepted |
| [ADR-0302](./ADR-0302-local-owner-console-application-runtime-ownership.md) | Local Owner Console Application Runtime 实现归属 | Accepted |
| [ADR-0303](./ADR-0303-runtime-core-domain-infrastructure-layout.md) | Runtime Core 领域实现与基础设施端口归属 | Accepted |
| [ADR-0304](./ADR-0304-root-public-export-proof-and-owner-command-ownership.md) | 根 Public Export 纯转发证明与 Owner Command 实现归属 | Accepted |
| [ADR-0305](./ADR-0305-local-sqlite-run-facade-security-authority-retirement.md) | Local SQLite Run Facade 安全 Authority 兼容面退役 | Accepted |
| [ADR-0306](./ADR-0306-local-sqlite-run-runtime-capability-projection.md) | Local SQLite Run Runtime 最小能力投影 | Accepted |
| [ADR-0307](./ADR-0307-bounded-durable-local-deployment-status.md) | 有界且诚实的本机部署持久状态 | Accepted |
| [ADR-0308](./ADR-0308-local-application-startup-module-cohesion.md) | Local Application 启动模块内聚与 Profile 制品防火墙 | Accepted |
| [ADR-0309](./ADR-0309-deployment-owned-legacy-silence-commitment.md) | 部署侧 Legacy Silence Commitment 与 adopted v3 启动门 | Accepted |
| [ADR-0310](./ADR-0310-docker-target-start-restart-barrier.md) | Docker Target 启动/重启屏障与人工终态 | Accepted |
| [ADR-0311](./ADR-0311-local-owner-pepper-custody-package-consolidation.md) | Local Owner Pepper Custody 的 Package 收敛 | Accepted |
| [ADR-0312](./ADR-0312-profile-composition-subpath-consolidation.md) | Local Profile Composition 的 Subpath 收敛 | Accepted |
| [ADR-0313](./ADR-0313-instance-lineage-and-two-phase-cutover-manual-resolution.md) | 实例 Cutover Lineage 与双阶段人工恢复 | Accepted |
| [ADR-0314](./ADR-0314-docker-target-stop-and-reconciliation-evidence.md) | Docker Target Stop 与写后 Reconciliation 证据 | Accepted |
| [ADR-0315](./ADR-0315-two-phase-legacy-rollback-ceremony.md) | 双阶段 Legacy Rollback Ceremony | Accepted |
| [ADR-0316](./ADR-0316-ai-migration-dialect-ownership.md) | AI Migration 方言归属与包内拆分 | Accepted |
| [ADR-0317](./ADR-0317-ai-migration-schema-group-ownership.md) | AI Migration Schema Group 归属 | Accepted |
| [ADR-0318](./ADR-0318-local-publisher-trust-contract-seam.md) | Local Publisher Trust Contract Seam | Accepted |
| [ADR-0319](./ADR-0319-local-publisher-trust-codec-and-private-store.md) | Local Publisher Trust Codec 与 Private Filesystem Store | Accepted |
| [ADR-0320](./ADR-0320-local-publisher-trust-lifecycle-ownership.md) | Local Publisher Trust Lifecycle Ownership | Accepted |
| [ADR-0321](./ADR-0321-plugin-package-install-domain-ownership.md) | Plugin Package Install 领域归属与 Package/Module 粒度 | Accepted |
| [ADR-0322](./ADR-0322-trusted-tool-invocation-domain-ownership.md) | Trusted Tool Invocation 领域归属 | Accepted |
| [ADR-0323](./ADR-0323-local-sqlite-adoption-domain-ownership.md) | Local SQLite Adoption 领域归属 | Accepted |
| [ADR-0324](./ADR-0324-local-owner-secret-delivery-domain-ownership.md) | Local Owner Secret Delivery 领域归属 | Accepted |
| [ADR-0325](./ADR-0325-local-identity-credential-command-domain-ownership.md) | Local Identity Credential Command 领域归属 | Accepted |
| [ADR-0326](./ADR-0326-local-plugin-package-prompt-command-domain-ownership.md) | Local Plugin Package Prompt Command 领域归属 | Accepted |
| [ADR-0327](./ADR-0327-local-plugin-package-workflow-command-domain-ownership.md) | Local Plugin Package Workflow Command 领域归属 | Accepted |
| [ADR-0328](./ADR-0328-runtime-core-workflow-administration-domain-ownership.md) | Runtime Core Workflow Administration 领域归属 | Accepted |
| [ADR-0329](./ADR-0329-local-sqlite-identity-credential-administration-domain-ownership.md) | Local SQLite Identity Credential Administration 领域归属 | Accepted |
| [ADR-0330](./ADR-0330-local-model-invocation-repository-domain-ownership.md) | Local Model Invocation Repository 领域归属 | Accepted |
| [ADR-0331](./ADR-0331-postgresql-model-invocation-repository-domain-ownership.md) | PostgreSQL Model Invocation Repository 领域归属 | Accepted |
| [ADR-0332](./ADR-0332-local-plugin-package-prompt-admission-repository-domain-ownership.md) | Local Plugin Package Prompt Admission Repository 领域归属 | Accepted |
| [ADR-0333](./ADR-0333-postgresql-plugin-package-prompt-admission-repository-domain-ownership.md) | PostgreSQL Plugin Package Prompt Admission Repository 领域归属 | Accepted |
| [ADR-0334](./ADR-0334-local-model-price-catalog-repository-domain-ownership.md) | Local Model Price Catalog Repository 领域归属 | Accepted |
| [ADR-0335](./ADR-0335-postgresql-model-price-catalog-repository-domain-ownership.md) | PostgreSQL Model Price Catalog Repository 领域归属 | Accepted |
| [ADR-0336](./ADR-0336-model-price-catalog-management-domain-ownership.md) | Model Price Catalog Management 领域归属 | Accepted |
| [ADR-0337](./ADR-0337-plugin-package-prompt-execution-domain-ownership.md) | Plugin Package Prompt Execution 领域归属 | Accepted |
| [ADR-0338](./ADR-0338-postgresql-model-provider-credential-test-connection-ownership.md) | PostgreSQL Model Provider Credential Test Connection 领域归属 | Accepted |
| [ADR-0339](./ADR-0339-postgresql-plugin-package-prompt-application-ownership.md) | PostgreSQL Plugin Package Prompt Application 领域归属 | Accepted |
| [ADR-0340](./ADR-0340-model-invocation-protocol-ownership.md) | Model Invocation Protocol 领域归属 | Accepted |
| [ADR-0341](./ADR-0341-ai-profile-composition-ownership.md) | AI Profile Composition 领域归属 | Accepted |
| [ADR-0342](./ADR-0342-postgresql-model-provider-credential-repository-ownership.md) | PostgreSQL Model Provider Credential Repository 领域归属 | Accepted |
| [ADR-0343](./ADR-0343-plugin-package-prompt-output-artifact-protocol-ownership.md) | Plugin Package Prompt Output Artifact 协议归属 | Accepted |
| [ADR-0344](./ADR-0344-model-provider-credential-test-connection-protocol-ownership.md) | Model Provider Credential Test Connection 协议归属 | Accepted |
| [ADR-0345](./ADR-0345-tool-registry-protocol-ownership.md) | Tool Registry 协议归属 | Accepted |
| [ADR-0346](./ADR-0346-bounded-local-runtime-artifact-pruning.md) | 有界本机 Runtime Artifact 裁剪 | Accepted |
| [ADR-0347](./ADR-0347-optional-authenticated-local-mcp-run-read.md) | 可选、受认证的本机 MCP Run 读取入口 | Accepted |
| [ADR-0348](./ADR-0348-bounded-local-mcp-run-event-list.md) | 有界、低敏的本机 MCP Run 事件诊断 | Accepted |
| [ADR-0349](./ADR-0349-bounded-local-mcp-project-run-discovery.md) | 有界、Project-scoped 的本机 MCP Run 发现 | Accepted |
| [ADR-0350](./ADR-0350-bounded-local-mcp-task-discovery.md) | 有界、低敏的本机 MCP Task 发现 | Accepted |
| [ADR-0351](./ADR-0351-mcp-only-tool-projection-ownership.md) | MCP 单一消费者 Tool Projection 的包内归属 | Accepted |
| [ADR-0352](./ADR-0352-bounded-local-mcp-trigger-discovery.md) | 有界、低敏的本机 MCP Trigger 发现 | Accepted |
| [ADR-0353](./ADR-0353-bounded-local-mcp-approval-observation.md) | 有界、低敏的本机 MCP Approval 观察 | Accepted |
| [ADR-0354](./ADR-0354-exact-local-mcp-approval-preview.md) | 精确、双授权的本机 MCP Approval 预览 | Accepted |
| [ADR-0355](./ADR-0355-human-approval-decision-product-gate.md) | 强人类认证、摘要绑定的 Approval 决策产品门 | Accepted |
| [ADR-0356](./ADR-0356-optional-authenticated-cluster-approval-management.md) | 可选、受认证且独立授权的 Cluster Approval 管理面 | Accepted |
| [ADR-0357](./ADR-0357-thin-package-root-and-stable-export-map.md) | 薄 Package 根目录与稳定 Export Map | Accepted |
| [ADR-0358](./ADR-0358-runtime-package-manifest-projection.md) | 最终运行制品的 Package Manifest 投影 | Accepted |
| [ADR-0359](./ADR-0359-approval-management-kubernetes-live-evidence.md) | Approval Management Kubernetes 多节点实证门 | Accepted |
| [ADR-0360](./ADR-0360-production-worker-kubernetes-session-lifecycle-evidence.md) | Production Worker Kubernetes Session 生命周期实证门 | Accepted |
| [ADR-0361](./ADR-0361-durable-postgresql-ha-evidence-publication.md) | PostgreSQL HA 证据的私有持久发布与离线审计 | Accepted |
| [ADR-0362](./ADR-0362-dual-authority-system-service-bridge.md) | systemd/OpenRC 双 Authority Service Bridge | Proposed |
| [ADR-0363](./ADR-0363-bounded-application-shutdown-receipt-and-physical-stop-evidence.md) | 有界 Application Shutdown Receipt 与物理 Service Stop 证据 | Proposed |
| [ADR-0364](./ADR-0364-package-internal-source-layout-ratchet.md) | Package 内部源码布局 Ratchet | Accepted |
| [ADR-0365](./ADR-0365-bounded-unified-local-product-cli.md) | 有界统一 Local 产品 CLI | Accepted |
| [ADR-0366](./ADR-0366-thin-package-boundary-ratchet.md) | 薄 Package 边界 Ratchet | Accepted |
| [ADR-0367](./ADR-0367-single-process-authenticated-local-run-http-api.md) | 单进程、受认证的 Local Run HTTP API | Proposed（实现完成，固定实机门待补） |
| [ADR-0368](./ADR-0368-bounded-project-run-discovery-http-api.md) | 有界、Project-scoped 的 Run Discovery HTTP API | Proposed |
| [ADR-0369](./ADR-0369-profile-exact-runtime-export-projection.md) | Profile 精确 Runtime Export 投影 | Accepted |
| [ADR-0370](./ADR-0370-bounded-project-run-event-timeline-http-api.md) | 有界、Project-scoped 的 RunEvent 时间线 HTTP API | Accepted |
| [ADR-0371](./ADR-0371-bounded-project-run-step-list-http-and-mcp-api.md) | 有界、Project-scoped 的 Run StepRun HTTP 与 MCP API | Accepted |
| [ADR-0372](./ADR-0372-two-phase-authenticated-local-run-cancellation-api.md) | 两阶段认证的 Local Run Cancellation API | Proposed（Linux 组合门已完成，固定物理设备报告待补） |
| [ADR-0373](./ADR-0373-profile-reachable-runtime-javascript-projection.md) | Profile 可达的 Runtime JavaScript 投影 | Accepted |
| [ADR-0374](./ADR-0374-shared-bounded-task-discovery-http-api.md) | 共享、有界的 Task Discovery HTTP API | Accepted |
| [ADR-0375](./ADR-0375-shared-current-task-point-read-api.md) | 共享的 current Task point-read API | Proposed（设计冻结，实现中） |
| [ADR-0376](./ADR-0376-policy-and-digest-fenced-task-start.md) | Policy 与 digest fenced 的 Task Start | Accepted |
| [ADR-0377](./ADR-0377-profile-aware-run-attempt-log-range-read.md) | Profile-aware Run Attempt 日志 Range 读取 | Accepted |
| [ADR-0378](./ADR-0378-local-run-attempt-log-retention-and-tombstones.md) | Local Run Attempt 日志有界保留与 durable tombstone | Accepted |
| [ADR-0379](./ADR-0379-cluster-run-attempt-log-retention.md) | Cluster Run Attempt 日志多副本保留与条件删除 | Accepted |
| [ADR-0380](./ADR-0380-local-lost-run-retry-single-control-cadence.md) | Local lost Run retry 复用单一 execution-control cadence | Accepted |
| [ADR-0381](./ADR-0381-strong-local-manual-run-retry.md) | 强认证的 Local 手动 Run retry | Accepted |
| [ADR-0382](./ADR-0382-postgresql-cluster-manual-run-retry-authority.md) | PostgreSQL Cluster 手动 Run retry 原子 Authority | Accepted |
| [ADR-0383](./ADR-0383-strong-cluster-run-management-plane.md) | 强认证的 Cluster Run Management Plane 与专用数据库角色 | Accepted |
| [ADR-0384](./ADR-0384-strong-cluster-run-stop-management.md) | 强认证的 Cluster Run Stop Management 与列级数据库权限 | Accepted |
| [ADR-0385](./ADR-0385-strong-local-run-stop-product-entry.md) | 强认证的 Local Run Stop 产品入口与原子审计 | Accepted |
| [ADR-0386](./ADR-0386-cluster-run-management-kubernetes-live-evidence.md) | Cluster Run Management Kubernetes 多节点实证 | Accepted |
| [ADR-0387](./ADR-0387-local-api-cancellation-linux-live-evidence.md) | Local API Cancellation Linux 组合实证门 | Accepted |
| [ADR-0388](./ADR-0388-bounded-unified-cluster-product-cli.md) | 有界统一 Cluster Operator 产品 CLI | Accepted |
| [ADR-0389](./ADR-0389-owner-private-cluster-operator-context.md) | Owner-private Cluster Operator Context | Accepted |
| [ADR-0390](./ADR-0390-offline-cluster-operator-context-preflight.md) | Offline Cluster Operator Context Preflight | Accepted |
| [ADR-0391](./ADR-0391-read-only-cluster-operator-context-readiness.md) | Read-only Cluster Operator Context Readiness | Accepted |
| [ADR-0392](./ADR-0392-atomic-plugin-package-automation-security-withdrawal.md) | Plugin Package Automation 安全隔离原子撤回 | Accepted |
| [ADR-0393](./ADR-0393-generation-bound-plugin-package-secret-binding-ledger.md) | 按 Generation 固定的 Plugin Package Secret 绑定账本 | Accepted |
| [ADR-0394](./ADR-0394-generation-bound-plugin-package-secret-materialization.md) | 按 Generation 固定的 Plugin Package Secret Materialization | Accepted |
| [ADR-0395](./ADR-0395-owner-confirmed-plugin-package-secret-binding.md) | Owner 确认的 Plugin Package Secret 首次绑定 | Proposed |
| [ADR-0396](./ADR-0396-generation-transition-plugin-package-secret-binding.md) | 按 Package Generation 切换 Plugin Package Secret Binding | Proposed |
| [ADR-0397](./ADR-0397-explicit-cluster-secret-action-manual-recovery.md) | Cluster Secret Action 显式人工恢复 | Accepted（实现、单节点 PostgreSQL、完整 workspace/后端/边界与 physical HA 门完成） |
| [ADR-0398](./ADR-0398-pre-activation-plugin-package-candidate-qualification.md) | Plugin Package 激活前候选资格校验与自动保留旧版本 | Proposed（v2 私有报告/离线审计已编排、全量/HA 门完成；远端 Kubernetes 成功记录与物理低配门待闭合） |
| [ADR-0399](./ADR-0399-external-release-attestation-for-physical-edge-evidence.md) | 物理 Edge 证据的外部发布归档证明 | Accepted（exact recorder 重建与离线验签已实现；固定实机 ceremony 待执行） |
| [ADR-0400](./ADR-0400-bounded-trusted-run-comparison-tool.md) | 有界、受信的 Run 对比 Tool | Accepted |
| [ADR-0401](./ADR-0401-optional-local-mcp-run-comparison-surface.md) | 可选本机 MCP Run 对比产品入口 | Accepted |
| [ADR-0402](./ADR-0402-bounded-latest-task-run-outcome-comparison.md) | 有界的 Task 最近成功/失败 Run 对比 | Accepted |
| [ADR-0403](./ADR-0403-bounded-redacted-run-log-tail-tool.md) | 有界、脱敏且不授予行动权的 Run 日志尾部 Tool | Accepted |
| [ADR-0404](./ADR-0404-optional-local-mcp-run-log-excerpt-surface.md) | 可选本机 MCP Run 日志摘录产品入口与私有文件边界 | Accepted |
| [ADR-0405](./ADR-0405-bounded-failure-diagnosis-prompt-and-model-egress-policy.md) | 有界故障诊断 Prompt 与显式模型出口策略 | Accepted |
| [ADR-0406](./ADR-0406-cluster-projected-tool-result-key-authority.md) | Cluster Projected Tool Result Key Authority | Accepted |
| [ADR-0407](./ADR-0407-cluster-copilot-failure-diagnosis-run-admission.md) | Cluster Copilot Failure Diagnosis Run Admission | Accepted |
| [ADR-0408](./ADR-0408-cluster-copilot-failure-diagnosis-tool-execution.md) | Cluster Copilot Failure Diagnosis Tool Execution 与原子 Model 解锁 | Accepted |
| [ADR-0409](./ADR-0409-cluster-copilot-failure-diagnosis-model-execution.md) | Cluster Copilot Failure Diagnosis Model Execution、密文输出与 Run 终态化 | Accepted |
| [ADR-0410](./ADR-0410-cluster-copilot-failure-diagnosis-output-key-authority.md) | Cluster Copilot Failure Diagnosis Output Projected Key Authority | Accepted |
| [ADR-0411](./ADR-0411-default-off-cluster-copilot-composition.md) | 默认关闭的 Cluster Copilot Failure Diagnosis Composition | Accepted |
| [ADR-0412](./ADR-0412-durable-copilot-pre-model-terminalization-and-unknown-resolution.md) | 耐久 Copilot Pre-Model 终态化与 Model Unknown Resolution | Accepted |
| [ADR-0413](./ADR-0413-default-off-cluster-copilot-failure-diagnosis-api.md) | 默认关闭的 Cluster Copilot Failure Diagnosis API | Accepted |
| [ADR-0414](./ADR-0414-copilot-failure-diagnosis-read-model.md) | Copilot 故障诊断请求键读模型 | Accepted |
| [ADR-0415](./ADR-0415-fenced-copilot-failure-diagnosis-cancellation.md) | 受围栏的 Copilot 故障诊断取消入口 | Accepted |
| [ADR-0416](./ADR-0416-bounded-cluster-copilot-product-client.md) | 有界 Cluster Copilot 产品客户端 | Accepted |
| [ADR-0417](./ADR-0417-bounded-cluster-copilot-mcp-stdio-surface.md) | 有界 Cluster Copilot MCP stdio 产品面 | Accepted |
| [ADR-0418](./ADR-0418-explicit-cluster-copilot-mcp-host-deployment.md) | 显式 Cluster Copilot MCP Host 部署与资源边界 | Accepted |
| [ADR-0419](./ADR-0419-loopback-read-only-cluster-copilot-console.md) | Loopback-only Cluster Copilot 只读 Console | Accepted |
| [ADR-0420](./ADR-0420-signed-admin-oci-console-workstation-distribution.md) | 以签名 Admin OCI 分发 Cluster Copilot 工作站 Console | Accepted |
| [ADR-0421](./ADR-0421-explicit-cluster-run-task-workflow-observation-console.md) | 显式 Cluster Run、Task 与 Workflow 观察台 | Accepted |
| [ADR-0422](./ADR-0422-browser-local-redacted-cluster-evidence-bundle.md) | 浏览器本地生成的脱敏 Cluster Evidence Bundle | Accepted |
| [ADR-0423](./ADR-0423-independent-offline-cluster-evidence-verifier.md) | 独立、离线且无 Authority 的 Cluster Evidence Verifier | Accepted |
| [ADR-0424](./ADR-0424-external-cluster-admin-release-workstation-ceremony.md) | Cluster Admin 外部发布工作站 Ceremony | Proposed |
| [ADR-0425](./ADR-0425-deployment-family-release-candidate-contract.md) | Deployment-family Release Candidate Contract | Accepted |
| [ADR-0426](./ADR-0426-source-derived-release-version-transition.md) | Source-derived QingLong 3.0 Release Version Transition | Accepted |
| [ADR-0427](./ADR-0427-complete-cross-image-release-set.md) | 完整跨镜像发布集与部署 Digest Lock | Accepted |
| [ADR-0428](./ADR-0428-durable-oci-release-catalog.md) | 持久化 OCI Release Catalog 与独立部署验真 | Accepted |
| [ADR-0429](./ADR-0429-offline-release-set-deployment-lock-materialization.md) | 离线 Release-set Deployment Lock 物化 | Accepted |
| [ADR-0430](./ADR-0430-auditable-release-catalog-consumption-ceremony.md) | 可审计的 Release Catalog 消费工作站 Ceremony | Accepted（真实公开 catalog 运行待实际 release tag） |
| [ADR-0431](./ADR-0431-catalog-bound-deployment-lock-chain.md) | Catalog-bound Deployment Lock 证据链 | Accepted（真实公开 catalog 运行待实际 release tag） |
| [ADR-0432](./ADR-0432-target-side-catalog-bound-local-compose-revisions.md) | 目标侧 Catalog-bound Local Compose 修订 | Accepted |
| [ADR-0433](./ADR-0433-catalog-bound-kubernetes-target-deployment-ceremony.md) | Catalog-bound Kubernetes 目标部署 Ceremony | Accepted |
| [ADR-0434](./ADR-0434-resource-inventory-closed-kubernetes-deployment-head.md) | Resource-inventory-closed Kubernetes Deployment Head | Accepted |
| [ADR-0435](./ADR-0435-uid-resource-version-fenced-kubernetes-resource-retirement.md) | UID/resourceVersion 围栏的 Kubernetes 资源退役 Ceremony | Accepted |
| [ADR-0436](./ADR-0436-post-publication-catalog-bound-kubernetes-release-gate.md) | 发布后 Catalog-bound Kubernetes Release Gate | Accepted（首份真实公开 catalog evidence 待实际 release tag） |
| [ADR-0437](./ADR-0437-post-publication-catalog-bound-local-release-gate.md) | 发布后 Catalog-bound Local Release Gate | Accepted（首份真实公开 catalog evidence 待实际 release tag） |
| [ADR-0438](./ADR-0438-content-free-private-release-evidence-receipt-chain.md) | 内容无关的私有发布证据收据链 | Accepted（首份真实公开收据待实际 release tag） |
| [ADR-0439](./ADR-0439-deterministic-private-evidence-receipts-and-release-set-replay.md) | 确定性私有证据收据与 Release-set 重放 | Accepted（首份真实线上重放待实际 release tag） |
| [ADR-0440](./ADR-0440-release-set-closure-private-evidence-freshness.md) | Release-set 闭合时私有证据 Freshness 重验证 | Accepted（首份真实线上闭合待实际 release tag） |
| [ADR-0441](./ADR-0441-no-overwrite-release-catalog-discovery-publication.md) | Release Catalog Discovery Tag 无覆盖发布 | Accepted（首份真实 GHCR conflict/reuse 证据待实际 release tag） |
| [ADR-0442](./ADR-0442-catalog-ready-terminal-release-tag-publication.md) | Catalog-ready 的终态 Release Tag 发布与闭合收据 | Superseded by ADR-0443（bounded promotion/closure 机制保留） |
| [ADR-0443](./ADR-0443-deployment-ready-terminal-release-finalization.md) | Deployment-ready 的终态 Release Finalization | Accepted（首份真实 GHCR deployment-ready finalization 待实际 release tag） |
| [ADR-0444](./ADR-0444-fail-closed-release-tag-finalizer-and-replay-rehearsal.md) | Fail-closed Release Tag Finalizer 与重放演练 | Accepted（首份真实 GHCR response-loss 重放待实际 release tag） |
| [ADR-0445](./ADR-0445-schedule-service-origin-shadow-run-coverage.md) | ScheduleService 执行来源的 Shadow Run 覆盖 | Accepted（`scheduled_system` 后续由 ADR-0446 完成） |
| [ADR-0446](./ADR-0446-system-crond-stable-shadow-admission.md) | System Crond 稳定 Shadow 准入与回调重放 | Accepted |
| [ADR-0447](./ADR-0447-boot-shadow-and-non-origin-boundaries.md) | Boot Shadow 准入与 once/gRPC 非 Origin 边界 | Accepted |
| [ADR-0448](./ADR-0448-bounded-legacy-shadow-startup-reconciliation.md) | 有界 Legacy Shadow 启动恢复 | Accepted |
| [ADR-0449](./ADR-0449-versioned-legacy-shadow-startup-difference-report-and-metrics.md) | 版本化 Legacy Shadow 启动差异报告与指标批次 | Accepted |
| [ADR-0450](./ADR-0450-closed-window-legacy-shadow-terminal-difference-audit.md) | 闭合窗口的 Legacy Shadow 终态差异审计 | Accepted |
| [ADR-0451](./ADR-0451-profile-bounded-legacy-shadow-resource-and-off-rollback-evidence.md) | 按 Profile 有界的 Legacy Shadow 资源与关闭回滚证据 | Accepted |
| [ADR-0452](./ADR-0452-atomic-flattened-backend-build-publication.md) | 原子且扁平兼容的 Backend 构建发布 | Accepted |
| [ADR-0453](./ADR-0453-origin-scoped-legacy-shadow-capture-authority-and-primary-gate.md) | Origin-scoped Legacy Shadow 捕获权威与 Primary 门禁 | Accepted（首次真实目标实例 manual canary 待执行） |
| [ADR-0454](./ADR-0454-target-instance-manual-primary-canary-ceremony.md) | 目标实例 Manual Primary Canary 与显式回滚仪式 | Accepted（首次真实用户目标实例执行待运维） |
| [ADR-0455](./ADR-0455-profile-bounded-manual-primary-runtime-activation-receipt.md) | Profile-bounded Manual Primary 运行态激活凭据 | Accepted（首次真实目标实例执行待运维） |
| [ADR-0456](./ADR-0456-database-timed-postgresql-cancellation-dispatch.md) | PostgreSQL 数据库时间驱动的 CancellationDispatch | Accepted |
| [ADR-0457](./ADR-0457-worker-pull-cluster-cancellation-delivery.md) | Worker Pull Cluster Cancellation 生产交付 | Accepted |
| [ADR-0458](./ADR-0458-least-privilege-cancellation-diagnostics-and-rearm.md) | 最小权限 Cancellation 诊断与精确 Rearm | Accepted |
| [ADR-0459](./ADR-0459-project-scoped-cancellation-availability-summary.md) | Project-scoped Cancellation 可用性汇总 | Accepted |
| [ADR-0460](./ADR-0460-one-shot-cancellation-status-product-entry.md) | 一次性 Cancellation 状态产品入口 | Accepted |
| [ADR-0461](./ADR-0461-project-scoped-blocked-cancellation-keyset.md) | Project-scoped Blocked Cancellation 固定键集分页 | Accepted |
| [ADR-0462](./ADR-0462-optional-console-run-management-drilldown.md) | 可选 Console Run Management Drill-down | Accepted |
| [ADR-0463](./ADR-0463-native-console-capacity-and-assertion-lifecycle-evidence.md) | 原生双架构 Console 容量与 Assertion 生命周期证据 | Accepted（首份原生 CI 双架构报告待实际运行） |
| [ADR-0464](./ADR-0464-machine-enforced-node24-architecture-support-tiers.md) | 机器化 Node 24 架构支持分层 | Accepted |
| [ADR-0465](./ADR-0465-versioned-worker-support-tier-admission.md) | 版本化 Worker 支持等级准入 | Accepted |
| [ADR-0466](./ADR-0466-bounded-worker-session-compatibility-observation.md) | 有界 Worker Session 兼容性观察 | Accepted |
| [ADR-0467](./ADR-0467-generic-worker-management-product-entry.md) | 通用 Worker Management 产品入口与兼容路径 | Accepted |
| [ADR-0468](./ADR-0468-optional-console-worker-observation.md) | 可选 Console Worker 只读观察 | Accepted |
| [ADR-0469](./ADR-0469-optional-console-package-installation-observation.md) | 可选 Console Package Installation 只读观察 | Accepted |
| [ADR-0470](./ADR-0470-session-scoped-console-capability-discovery.md) | Console 会话级能力发现与服务端操作围栏 | Accepted |
| [ADR-0471](./ADR-0471-legacy-core-api-compatibility-baseline.md) | Legacy 核心执行 API 兼容基线 | Accepted |
| [ADR-0472](./ADR-0472-service-manager-legacy-rollback-preparation.md) | Service Manager Legacy Rollback Preparation | Accepted |
| [ADR-0473](./ADR-0473-service-manager-legacy-rollback-commit.md) | Service Manager Legacy Rollback Commit | Accepted（OpenRC live actor 待补） |
| [ADR-0474](./ADR-0474-bounded-legacy-core-readiness-proof.md) | 有界 Legacy Core Readiness Proof | Accepted（OpenRC live actor 待补） |
| [ADR-0475](./ADR-0475-legacy-system-script-open-api-compatibility.md) | Legacy System、Script 与 Open API 兼容基线 | Accepted |
| [ADR-0476](./ADR-0476-real-legacy-sqlite-upgrade-and-rollback-rehearsal.md) | 真实 Legacy SQLite 升级与回滚演练 | Accepted |
| [ADR-0477](./ADR-0477-bounded-legacy-data-directory-inventory.md) | 有界 Legacy Data Directory 盘点 | Accepted |
| [ADR-0478](./ADR-0478-private-legacy-data-directory-staging.md) | 私有 Legacy Data Directory 暂存与稳定校验 | Accepted |
| [ADR-0479](./ADR-0479-private-versioned-legacy-config-keyv-ssh-transformation.md) | 私有、版本化的 Legacy Config、Keyv 与 SSH 转换 | Accepted |
| [ADR-0480](./ADR-0480-authenticated-atomic-legacy-data-application.md) | 受认证、原子且可恢复的 Legacy Data Application | Accepted |
| [ADR-0481](./ADR-0481-committed-legacy-data-deployment-lineage.md) | Committed Legacy Data Receipt 的本机部署 Lineage | Accepted |
| [ADR-0482](./ADR-0482-stopped-local-sqlite-reconciliation-recovery-bundle.md) | 停止态 Local SQLite Reconciliation Recovery Bundle | Accepted |
| [ADR-0483](./ADR-0483-sealed-reconciliation-bundle-domain-plan.md) | 密封 Reconciliation Bundle 的有界数据域计划 | Accepted |
| [ADR-0484](./ADR-0484-private-reconciliation-diagnostics-and-reviewed-decision.md) | 私有 Reconciliation 诊断与受认证人工裁决 | Accepted |
| [ADR-0485](./ADR-0485-reconciliation-application-coordinator.md) | Reconciliation 应用协调器与领域 Adapter 边界 | Accepted |
| [ADR-0486](./ADR-0486-bounded-automation-row-reconciliation-plan.md) | 有界 Automation 行级 Reconciliation Plan | Accepted |
| [ADR-0487](./ADR-0487-reconciliation-apply-storage-lifecycle.md) | Reconciliation Apply 证据封存与回滚存储生命周期 | Accepted |
| [ADR-0488](./ADR-0488-cross-domain-reconciliation-completion-fence.md) | 跨领域 Reconciliation 完成围栏与目标重启授权 | Accepted |
| [ADR-0489](./ADR-0489-service-manager-completion-restart-lineage.md) | Service Manager 完成围栏重启谱系 | Accepted |
| [ADR-0490](./ADR-0490-run-history-terminal-preservation.md) | Run History 终态保全与跨领域完成证明 | Accepted |
| [ADR-0491](./ADR-0491-bounded-secret-config-reconciliation-and-task-binding.md) | 有界 Secret/Config Reconciliation 与任务环境绑定 | Proposed（直接外部 custody 已完成；仅固定物理 Edge gate pending） |
| [ADR-0492](./ADR-0492-compatible-secret-config-completion-v3.md) | 兼容 Secret/Config 的 Reconciliation Completion v3 | Accepted |
| [ADR-0493](./ADR-0493-target-native-reconciliation-domain-preservation.md) | 目标原生 Reconciliation 域分类与身份保留 | Accepted |
| [ADR-0494](./ADR-0494-postgresql-secret-binding-and-mounted-provider-live-rotation.md) | PostgreSQL Secret Binding 与 Mounted Provider 在线轮换门 | Accepted |
| [ADR-0495](./ADR-0495-content-free-cluster-legacy-env-migration-plan-ledger.md) | 无敏感内容的 Cluster Legacy Env 迁移计划账本 | Accepted |
| [ADR-0496](./ADR-0496-opaque-cluster-environment-bundle-delivery.md) | Cluster 不透明环境 Bundle 的有界交付与 Worker 内存展开 | Accepted |
| [ADR-0497](./ADR-0497-atomic-cluster-legacy-env-migration-application.md) | Cluster Legacy Env 的原子 Task/Trigger 迁移与只追加回执 | Accepted |
| [ADR-0498](./ADR-0498-cluster-legacy-env-application-ha-replay.md) | Cluster Legacy Env Application 的 HA Promotion 后精确重放 | Accepted |
| [ADR-0499](./ADR-0499-direct-vault-kv-worker-secret-custody.md) | 直接 Vault KV Worker Secret 外部托管 | Accepted |
| [ADR-0500](./ADR-0500-short-lived-cluster-security-administration-command.md) | 短生命周期 Cluster Security Administration 产品命令 | Accepted |
| [ADR-0501](./ADR-0501-opt-in-kubernetes-security-administration-job.md) | 可选的一次性 Kubernetes Security Administration Job | Accepted |
| [ADR-0502](./ADR-0502-bounded-cluster-api-credential-pepper-keyring.md) | 有界 Cluster API Credential Pepper Keyring | Accepted |
| [ADR-0503](./ADR-0503-downloadable-local-alpha-trial-kit.md) | 可下载的 Local Alpha 试运行套件 | Proposed（原生 Linux 双架构已通过；实际可下载归档待维护者授权） |
| [ADR-0504](./ADR-0504-canonical-local-alpha-trial-kit-materialization.md) | Local Alpha Trial Kit 单一物化与离线审计 | Accepted |
| [ADR-0505](./ADR-0505-pinned-alpine-openssl-runtime-security-patch.md) | 固定 Alpine OpenSSL 运行时安全补丁 | Accepted |
| [ADR-0506](./ADR-0506-source-bound-local-alpha-verification-evidence.md) | 源码绑定的 Local Alpha 验证证据 | Accepted |
| [ADR-0507](./ADR-0507-public-local-application-and-operator-release-pair.md) | Public Local Application 与 Operator 发布对 | Accepted（首份真实公开发布待受保护 tag） |
| [ADR-0508](./ADR-0508-cross-architecture-local-alpha-milestone-closure.md) | 跨架构 Local Alpha 里程碑闭合 | Accepted（headless 与 Console 实际 milestone 均已交付） |
| [ADR-0509](./ADR-0509-cluster-alpha-bundle-and-milestone-closure.md) | Cluster Alpha Bundle 与跨架构里程碑闭合 | Accepted（首份实际 Cluster milestone 已交付） |
| [ADR-0510](./ADR-0510-cross-profile-alpha-stage-delivery-index.md) | 跨 Profile Alpha 阶段交付索引 | Accepted（首份实际 stage index 已交付） |
| [ADR-0511](./ADR-0511-runnable-local-alpha-quickstart.md) | 可直接试运行的 Local Alpha Quickstart | Accepted（v5 headless/Console 双变体 milestone 已交付） |
| [ADR-0512](./ADR-0512-bounded-offline-local-web-console.md) | 有界、离线的 Local Web Console | Accepted（Trial Kit 交付已由 ADR-0513 闭合） |
| [ADR-0513](./ADR-0513-selectable-local-console-trial-kit.md) | 可选择的 Local Console Trial Kit | Accepted（headless/Console 双变体 milestone 已交付） |
| [ADR-0514](./ADR-0514-stage-usable-first-automation-journey.md) | 阶段可用的首个自动化旅程 | Accepted（v5 headless/Console 双变体 milestone 已交付） |
| [ADR-0515](./ADR-0515-bounded-local-console-run-log.md) | Local Console 的有界 Run 日志观察面 | Accepted（首份实际 Console v5 双架构 milestone 已交付） |
| [ADR-0516](./ADR-0516-request-scoped-local-console-task-mutation.md) | request-scoped Local Console Task mutation | Accepted（D-421 双架构 milestone 已交付） |
| [ADR-0517](./ADR-0517-strong-local-console-task-authoring-lease.md) | 强认证 Local Console Task authoring lease | Accepted（D-422 双架构 milestone 已交付） |
| [ADR-0518](./ADR-0518-local-console-cron-trigger-administration.md) | Local Console cron Trigger 管理 | Accepted（D-423 双架构 milestone 已交付） |
| [ADR-0519](./ADR-0519-local-console-secret-backed-automation.md) | Local Console Secret-backed 自动化 | Accepted（D-424 双架构 milestone 已交付） |
| [ADR-0520](./ADR-0520-downloadable-local-legacy-upgrade-readiness.md) | 可下载的 Local Legacy 升级就绪盘点 | Accepted（D-425 双架构 Alpha 实物已交付） |
| [ADR-0521](./ADR-0521-reviewed-side-by-side-local-upgrade-stage.md) | 受审核计划驱动的 Local Side-by-side 升级暂存 | Accepted（D-426a 双架构 Alpha 实物已交付） |
| [ADR-0522](./ADR-0522-content-bound-offline-docker-adopted-target.md) | 内容绑定的离线 Docker Adopted Target | Accepted（D-426b 权威已由 D-426b2b 双架构实物闭合） |
| [ADR-0523](./ADR-0523-post-apply-adopted-target-baseline.md) | Apply 后的 Adopted Target 启动前基线 | Accepted（D-426b2a 基线已由 D-426b2b 双架构实物闭合） |
| [ADR-0524](./ADR-0524-exact-headless-upgrade-cutover-rehearsal.md) | Exact Headless 升级切换链演练 | Accepted（D-426b2b 双架构阶段实物已交付） |
| [ADR-0525](./ADR-0525-console-adopted-target-entry-evidence.md) | Console Adopted Target 入口证据 | Accepted（exact Console 双架构阶段实物已交付并完成离线审计） |
## 规则
1. ADR 只决定一个边界清晰的问题。
2. ADR 必须说明上下文、决策、替代方案、影响和验证方式。
3. Accepted ADR 不直接改写历史；改变决策时新增 ADR 并标记 supersedes。
4. ADR 不能静默违反主 RFC 的核心决策和架构不变量。
5. 业务实现 PR 应链接对应 ADR，并用测试证明关键约束。
Reference in New Issue View Git Blame Copy Permalink