mirror of
https://github.com/whyour/qinglong.git
synced 2026-09-20 08:05:22 +08:00
129 KiB
129 KiB
QingLong Architecture Decision Records
本目录记录 QingLong 3.x 的关键架构决策。总体方向见 QingLong 3.0 Architecture RFC。
状态
Proposed：等待 Maintainers 评审。Accepted：已接受，实施必须遵循。Superseded：已被后续 ADR 替代。Rejected：已讨论但不采用。Deprecated：曾经采用，正在退出。
索引
| ADR | 标题 | 状态 |
|---|---|---|
| ADR-0001 | Run 状态模型与事务边界 | Proposed |
| ADR-0002 | Legacy Crontab 兼容、影子写入与切换策略 | Proposed |
| ADR-0003 | Executor 端口与 LocalProcessExecutor | Proposed |
| ADR-0004 | SQLite/PostgreSQL Repository、驱动与 Migration 策略 | Proposed |
| ADR-0005 | Durable Cancellation Dispatch、Lease 与 Fencing | Proposed |
| ADR-0006 | Node.js 24 与多架构支持分层 | Proposed |
| ADR-0007 | LocalProcess completion receipt 与日志存活 | Proposed |
| ADR-0012 | Remote Worker Session、能力放置与 Fencing | Proposed |
| ADR-0013 | Remote Run 启动确认、Lease Fencing 与启动失败 | Proposed |
| ADR-0014 | 有界 Dispatcher 与 Claimed Execution Offer | Proposed |
| ADR-0021 | Worker Execution Offer Inbox 与启动崩溃恢复 | Proposed |
| ADR-0022 | Pinned Task Revision 与本地执行计划物化 | Proposed |
| ADR-0023 | 不可变 Task Execution Revision 存储 | Proposed |
| ADR-0024 | Local Context、Secret 与 Artifact 边界 | Proposed |
| ADR-0025 | 加密本地 SecretStore 与版本化密文 | Superseded |
| ADR-0026 | 本地 Artifact 硬配额、磁盘水位与可恢复 Retention | Proposed |
| ADR-0027 | Artifact 读取授权与本地有界 Range Contract | Proposed |
| ADR-0028 | Project Identity、版本化 RBAC 与默认拒绝 Policy Core | Proposed |
| ADR-0029 | 首 Owner 一次性 Bootstrap 与认证主体边界 | Proposed |
| ADR-0030 | Legacy Panel 认证与稳定 User Identity | Proposed |
| ADR-0031 | ApprovalRequest 与 Durable Action Dispatch | Proposed |
| ADR-0032 | Approved Action Dispatch 执行租约与 Start Barrier | Proposed |
| ADR-0033 | Approved Action 恢复证据与人工裁决 | Proposed |
| ADR-0034 | Approved Run Action 原子回执 | Proposed |
| ADR-0035 | Approved Action 人工恢复授权 | Proposed |
| ADR-0036 | Approved Action Profile-aware Runtime Lifecycle | Proposed |
| ADR-0037 | PostgreSQL Cluster-control 存储孵化与跨方言契约 | Proposed |
| ADR-0038 | Cluster Driver 独立交付与 PostgreSQL 依赖基线 | Proposed |
| ADR-0039 | PostgreSQL Schema Capability 与 Runtime Readiness | Proposed |
| ADR-0040 | Profile 激活顺序与 Edge 导入隔离 | Proposed |
| ADR-0041 | PostgreSQL Run Repository 契约对等 | Proposed |
| ADR-0042 | Profile 专属产物与 Package 依赖方向 | Proposed |
| ADR-0043 | PostgreSQL Migration、Typed Schema 与 Catalog 权威边界 | Proposed |
| ADR-0044 | Runtime Core 抽离与 Legacy 兼容副本退出 | Proposed |
| ADR-0045 | Cluster HTTP Readiness、Admission 与 Drain | Proposed |
| ADR-0046 | Cluster 两阶段安全 Admission | Proposed |
| ADR-0047 | PostgreSQL Project Policy 与 RoleBinding Fence | Proposed |
| ADR-0048 | Cluster 受审 Route Registry 与授权输入边界 | Proposed |
| ADR-0049 | Cluster API Credential 与 Durable Security Audit | Proposed |
| ADR-0050 | Cluster Administration Authority 与 Mutation Ledgers | Proposed |
| ADR-0051 | Cluster Authentication Overload Shield | Proposed |
| ADR-0052 | Cluster Run Read API Contract | Proposed |
| ADR-0053 | Cluster Startup Recovery Source 与 Convergence Gate | Proposed |
| ADR-0054 | Cluster Recovery Claim、Fencing 与有界 Supervisor | Proposed |
| ADR-0055 | Cluster Recovery Evidence 与 Fenced Lost Transition | Proposed |
| ADR-0056 | Cluster Recovery Provider Registry 与 Bootstrap-Owned Convergence | Proposed |
| ADR-0057 | PostgreSQL Worker Session 与 Run Lease Authority | Proposed |
| ADR-0058 | Authenticated Worker Ingress 与 Execution Attestation | Proposed |
| ADR-0059 | Worker Ingress Mutual TLS 与部署边界 | Proposed |
| ADR-0060 | Worker Certificate Lifecycle 与原子信任重载 | Proposed |
| ADR-0061 | Worker 本地证书身份与显式续期 | Proposed |
| ADR-0062 | Profile 漏洞归属与 Legacy 依赖树治理 | Proposed |
| ADR-0063 | 本机 SQLite 存储权威与 Profile 产物边界 | Proposed |
| ADR-0064 | 2.x SQLite 旁路孵化、恢复点与显式切换 | Proposed |
| ADR-0065 | 持久化本机应用切换 Supervisor 与未知结果收敛 | Proposed |
| ADR-0066 | 本机 Application 激活门与反向停止顺序 | Proposed |
| ADR-0067 | SQLite 事实驱动的本机 Run 启动恢复预检 | Superseded |
| ADR-0068 | 回执优先、进程身份感知的本机 Run 启动恢复 | Proposed |
| ADR-0069 | 持久化本机进程启动屏障与数据库索引回执清理 | Proposed |
| ADR-0070 | 本机 Run 原子启动协调与耐久身份补偿 | Proposed |
| ADR-0071 | 有界本机调度、执行计划物化与 Artifact Admission | Proposed |
| ADR-0072 | 统一的本机执行完成、取消、超时与停机生命周期 | Proposed |
| ADR-0073 | Node SQLite 加密本机 SecretStore 与 Keyring 生命周期 | Proposed |
| ADR-0074 | 授权的本机 Secret 管理与原子安全审计 | Proposed |
| ADR-0075 | 本机稳定 Identity 与首 Owner Bootstrap Ceremony | Proposed |
| ADR-0076 | 共享本机 SQLite 操作权与稳定 Identity Credential 认证 | Proposed |
| ADR-0077 | 短生命周期本机 Identity Provisioning 与首 Owner 原子建权 | Proposed |
| ADR-0078 | POSIX 本机 Owner Console 证明与 Secret 交付门禁 | Proposed |
| ADR-0079 | 本机 Owner Secret 分阶段交付与崩溃恢复 | Proposed |
| ADR-0080 | 本机 Owner Pepper Provision、备份与轮换边界 | Proposed |
| ADR-0081 | 摘要绑定的 Owner Secret 确认与无密钥重放 | Superseded |
| ADR-0082 | SQLite Owner Delivery 确认账本与瞬时文件桥梁 | Proposed |
| ADR-0083 | 版本化 Owner Pepper Keyring 与 Credential Recovery | Proposed |
| ADR-0084 | 版本化 Owner Delivery Acknowledgement 压缩与重放 Tombstone | Proposed |
| ADR-0085 | 私有持久命令文件驱动的 Local Owner GC CLI | Proposed |
| ADR-0086 | 私有命令文件驱动的 Local Owner 产品 CLI | Proposed |
| ADR-0087 | Package 粒度与拓扑构建边界 | Proposed |
| ADR-0088 | Linux 资源档位与物理设备证据边界 | Accepted |
| ADR-0089 | 版本化 TaskDefinition 存储与物理规模证据 | Accepted |
| ADR-0090 | Production Package Packlist 与开发 Map 排除 | Accepted |
| ADR-0091 | 不可变 TaskSpec 语义注册表与 Command v1 | Accepted |
| ADR-0092 | Pinned Command TaskDefinition 执行编译 | Accepted |
| ADR-0093 | 本机 Execution Revision 摘要与原子发布 | Accepted |
| ADR-0094 | 版本化 Trigger 与固定任务修订绑定 | Accepted |
| ADR-0095 | 有界 Legacy Crontab adoption 分类与内容绑定计划 | Accepted |
| ADR-0096 | 强认证且有界的 Legacy adoption 决策回执 | Accepted |
| ADR-0097 | 私有且可认证的 Legacy adoption 决策文件 | Accepted |
| ADR-0098 | Policy 围栏下的原子 Legacy Task adoption | Accepted |
| ADR-0099 | 专用 Legacy adoption decision issuer keyring | Accepted |
| ADR-0100 | 私有流式 Legacy adoption review-file 与签发 CLI | Accepted |
| ADR-0101 | 重新认证且受 Policy 围栏约束的 adoption commit CLI | Accepted |
| ADR-0102 | 物理 Edge Legacy adoption 规模证据协议 | Accepted |
| ADR-0103 | 有界本机 Cron 调度与 Run 原子准入 | Accepted |
| ADR-0104 | PostgreSQL 不可变 Task、Trigger 与远端执行修订 | Accepted |
| ADR-0105 | PostgreSQL 行租约 Cluster Scheduler 与 Run 原子准入 | Accepted |
| ADR-0106 | Profile 构建入口 Subpath 收敛 | Accepted |
| ADR-0107 | PostgreSQL 权威 Cluster Scheduler 时钟 | Accepted |
| ADR-0108 | Worker Pull Placement 与摘要化 Execution Offer | Accepted |
| ADR-0109 | PostgreSQL Remote Run 原子启动 ACK | Accepted |
| ADR-0110 | 认证 Worker Offer 传输与耐久准入 | Accepted |
| ADR-0111 | 单一 Worker 执行 Inbox 与可判定 Spawn Barrier | Accepted |
| ADR-0112 | 版本化 Worker Activation Transport 与显式 Headless Lifecycle | Accepted |
| ADR-0113 | 有界 Worker Secret 与 Log Materialization | Accepted |
| ADR-0114 | 围栏化 Remote Worker 批量 Secret 交付 | Accepted |
| ADR-0115 | 有界 Worker 文件 Log Artifact 与 Output Ownership | Accepted |
| ADR-0116 | 受审 Worker POSIX Executor 与 Upload-before-completion | Accepted |
| ADR-0117 | 流式 Remote Worker Artifact 与原子 Completion | Accepted |
| ADR-0118 | Remote Worker Lease Control 与耐久 Timeout | Accepted |
| ADR-0119 | 受审 Production Cluster Control Route Composition | Accepted |
| ADR-0120 | S3-Compatible Immutable Remote Worker Artifact Store | Accepted |
| ADR-0121 | Production Worker Headless Execution Composition | Accepted |
| ADR-0122 | 单 Cadence Worker Session Product Lifecycle | Accepted |
| ADR-0123 | Worker Production Credential Material Boundary | Accepted |
| ADR-0124 | 可恢复的 Worker Credential 交付确认与重叠轮换 | Proposed |
| ADR-0125 | PostgreSQL Failover Admission 与不确定提交边界 | Proposed |
| ADR-0126 | 锁定的 Cluster 进程、镜像与 Kubernetes 部署基线 | Accepted |
| ADR-0127 | 有界 PostgreSQL 私有 CA 文件绑定 | Accepted |
| ADR-0128 | 精确 Cluster 镜像 SBOM 与证明化多架构发布 | Accepted |
| ADR-0129 | CloudNativePG Operator 与数据库角色权威 | Accepted |
| ADR-0130 | CloudNativePG Barman 备份与隔离恢复 | Proposed |
| ADR-0131 | Barman Plugin cert-manager 证书 Authority | Proposed |
| ADR-0132 | 有界 Plugin Package Manifest 与安装计划 | Accepted |
| ADR-0133 | 不可变 Tool Registry 与 Policy-fenced Invocation Plan | Accepted |
| ADR-0134 | 内容寻址 PackageLock 与可恢复安装状态 | Accepted |
| ADR-0135 | 确定性签名 Plugin Bundle 与私有本地 Staging | Accepted |
| ADR-0136 | SQLite Plugin Package 安装仓库与 Head CAS | Accepted |
| ADR-0137 | PostgreSQL Plugin Package 安装仓库与 Project Lock Authority | Accepted |
| ADR-0138 | 耐久 Plugin Package Lock 与精确本地激活 | Accepted |
| ADR-0139 | Kubernetes Plugin Package Active Pointer CAS | Accepted |
| ADR-0140 | 有界 Plugin Package 启动恢复与准入门禁 | Accepted |
| ADR-0141 | Profile-neutral Approved Action 与 Package 准入边界 | Accepted |
| ADR-0142 | 认证后 Plugin Package 管理 Facade 与 Profile Ceremony | Accepted |
| ADR-0143 | 私有认证 Local Plugin Package CLI | Accepted |
| ADR-0144 | Cluster Plugin Package 管理 Transport 与双 Authority 边界 | Proposed |
| ADR-0145 | 有界 Cluster Plugin Package 管理 Host 与可选部署 | Accepted |
| ADR-0146 | PostgreSQL Durable Plugin Package 管理配额 | Accepted |
| ADR-0147 | PostgreSQL 持久 Plugin Package 身份 keyset ledger | Accepted |
| ADR-0148 | Plugin Package 管理 Live Evidence 与默认拒绝 Egress | Accepted |
| ADR-0149 | 原子 Plugin Package Resource Generation Identity | Accepted |
| ADR-0150 | 有界 Plugin Package 语义物化 | Accepted |
| ADR-0151 | SQLite/PostgreSQL 不可变 Plugin Package 物化修订仓库 | Accepted |
| ADR-0152 | Generation 绑定的原子 Plugin Package Task Reconciliation | Accepted |
| ADR-0153 | 有界的生产 Plugin Package Task 发布与启动恢复 | Accepted |
| ADR-0154 | Project-scoped 不可变 Tool Definition Snapshot | Accepted |
| ADR-0155 | Snapshot-bound Trusted Tool Handler 与执行准入 | Accepted |
| ADR-0156 | 耐久 StepRun Aggregate 与 Run Fence | Accepted |
| ADR-0157 | 有界 Tool Execution Trace 与 Audit Evidence | Accepted |
| ADR-0158 | 同事务 Tool Execution Start Barrier | Accepted |
| ADR-0159 | 不透明 Tool Invocation 与脱敏 Preview Artifact | Accepted |
| ADR-0160 | SQLite/PostgreSQL 不可变 Tool Invocation Artifact 仓库 | Accepted |
| ADR-0161 | Tool Execution Start 与 Artifact 的不可变绑定 | Accepted |
| ADR-0162 | 首个 Trusted Built-in Run Read Tool Adapter | Accepted |
| ADR-0163 | 原子加密 Tool 成功完成协议 | Accepted |
| ADR-0164 | Trusted Tool 成功协调器与 Profile 存储装配 | Accepted |
| ADR-0165 | Trusted Tool 失败与超时终态完成协议 | Accepted |
| ADR-0166 | Trusted Tool Result Key Catalog 与 Completion Fence | Accepted |
| ADR-0167 | 可选、受预算约束的 AI Model Gateway | Accepted |
| ADR-0168 | Durable ModelInvocation 与 StepRun Fence | Accepted |
| ADR-0169 | Project-bound AI Provider Credential Binding 与可清零 Secret Material | Accepted |
| ADR-0170 | Durable Model Usage Ledger 与有界 Project Accounting | Accepted |
| ADR-0171 | 原子 Project Model Quota Reservation 与 Settlement | Accepted |
| ADR-0172 | 不可变 Model Price Quote 与 Canonical Cost Settlement | Accepted |
| ADR-0173 | 耐久 Model Price Catalog 发布、激活与撤销 | Accepted |
| ADR-0174 | 授权型 Model Price Catalog 管理 facade | Accepted |
| ADR-0175 | 私有认证 Local Model Price Catalog CLI | Accepted |
| ADR-0176 | 显式 Local AI Feature 启用与非破坏性停用 | Accepted |
| ADR-0177 | Active Head 驱动的本机 AI Application Composition | Accepted |
| ADR-0178 | Concrete Local Headless Application Process | Accepted |
| ADR-0179 | Materialized Local Plugin Package Recovery Catalog | Accepted |
| ADR-0180 | Authenticated Local Plugin Package Recovery Catalog Publication | Accepted |
| ADR-0181 | Immutable Package Signature Time and Local Publisher Trust Overlap Rotation | Accepted |
| ADR-0182 | Safe Local Plugin Package Publisher Key Retirement | Accepted |
| ADR-0183 | Emergency Local Plugin Package Publisher Key Revocation | Accepted |
| ADR-0184 | 本机 Plugin Package 离线隔离与能力撤出 | Accepted |
| ADR-0185 | Workspace Package 边界审计与最小 Profile 交付梯度 | Accepted |
| ADR-0186 | Cluster PostgreSQL Plugin Package 隔离与能力撤出 | Accepted |
| ADR-0187 | Cluster Plugin Package 发布者 Provenance 与撤销影响集 | Accepted |
| ADR-0188 | Cluster 持久发布者 Trust Authority 与受批撤销 | Accepted |
| ADR-0189 | Cluster Effective Publisher Trust Material Binding | Accepted |
| ADR-0190 | Cluster Approved Publisher Trust Overlap Add 与 Safe Retire | Proposed |
| ADR-0191 | 私有 Cluster Plugin Package 管理 Client | Accepted |
| ADR-0192 | Kubernetes 私有管理 Tunnel Client | Accepted |
| ADR-0193 | Fresh Local Profile Setup 与 Application | Accepted |
| ADR-0194 | 可重放的本机部署准备 | Accepted |
| ADR-0195 | AI-excluded 本机 Application 镜像 | Accepted |
| ADR-0196 | 本机镜像证明化多架构发布契约 | Accepted |
| ADR-0197 | Generation CAS 本机 Compose 镜像选择 | Accepted |
| ADR-0198 | Digest-bound 本机 Compose Rollout Preflight | Accepted |
| ADR-0199 | Generation-fenced 本机 Compose Rollout | Accepted |
| ADR-0200 | 本机 SQLite Rollout 写契约与升级前快照 | Accepted |
| ADR-0201 | 显式、围栏化的本机 SQLite 恢复 | Accepted |
| ADR-0202 | 显式、可重放的 Compose 恢复证据收集 | Accepted |
| ADR-0203 | 物理 Edge Compose 存储恢复候选证据 | Accepted |
| ADR-0204 | 物理 Edge Native Application 首次 Active 候选证据 | Accepted |
| ADR-0205 | 物理 Edge Init-managed Service 首次 Active 候选证据 | Accepted |
| ADR-0206 | 直连 Init-managed Release 与有界启动凭据 | Accepted |
| ADR-0207 | 强认证 Local Secret 产品 CLI 与事务内 Credential Fence | Accepted |
| ADR-0208 | 强认证 Local Project Role Policy CLI 与防锁死交接 | Accepted |
| ADR-0209 | Owner 围栏化 Local Identity/Credential 管理与私有交付 | Accepted |
| ADR-0210 | Owner 围栏化 Local Identity/Credential 查询 | Accepted |
| ADR-0211 | Local Identity/Credential 的实例 Authority Project | Accepted |
| ADR-0212 | Owner 围栏化 Local Project 生命周期 | Accepted |
| ADR-0213 | Owner 围栏化、有界的 Local Project 查询 | Accepted |
| ADR-0214 | Owner 围栏化、有界的 Local RoleBinding 查询 | Accepted |
| ADR-0215 | 实例 Owner 围栏化、有界的 Local Security Audit 查询 | Accepted |
| ADR-0216 | 实例 Owner 围栏化、有界的 Local Security Audit 诊断压缩 | Accepted |
| ADR-0217 | QingLong 3.0 workspace package 边界收敛 | Accepted |
| ADR-0218 | 部署 Owner 持有的 Croner Provider 边界 | Accepted |
| ADR-0219 | 固定 SemVer 运行时适配器边界 | Accepted |
| ADR-0220 | Plugin Package 当前安装清单查询 | Accepted |
| ADR-0221 | 原子、可重放的 Plugin Package 生命周期 Overlay | Proposed |
| ADR-0222 | 按 generation 绑定的 Plugin Package 自动化发布账本 | Proposed |
| ADR-0223 | 按 generation 绑定的 Plugin Package Workflow 执行计划 | Proposed |
| ADR-0224 | SQLite Plugin Package Workflow 原子准入 | Proposed |
| ADR-0225 | PostgreSQL Serializable Plugin Package Workflow 准入 | Proposed |
| ADR-0226 | 有界 Plugin Package Workflow Frontier | Proposed |
| ADR-0227 | Generation-bound Workflow Task Attempt 准入 | Proposed |
| ADR-0228 | 有界 Plugin Package Workflow 整体取消收敛 | Proposed |
| ADR-0229 | Local Workflow Task 单 cadence 运行生命周期 | Proposed |
| ADR-0230 | Cluster Workflow 复用单一 Scheduler cadence | Accepted |
| ADR-0231 | Worker ingress 复用 control 进程并注入 runtime capability port | Accepted |
| ADR-0232 | Cluster runtime recovery 与 lost retry 复用单一 Scheduler cadence | Accepted |
| ADR-0233 | Cluster Secret 使用 authority-gated mounted-files provider | Accepted |
| ADR-0234 | 单身份 Production Worker 进程与部署边界 | Accepted |
| ADR-0235 | Production Worker PostgreSQL 真实合约与 Session Transition 类型边界 | Accepted |
| ADR-0236 | Production Worker Run 纵切面与认证尝试预算 | Accepted |
| ADR-0237 | 面向能力的依赖边界对账 | Accepted |
| ADR-0238 | Production Worker 证书续期单 Cadence 装配 | Accepted |
| ADR-0239 | Kubernetes Worker Generation Rollout 与 PVC 恢复边界 | Accepted |
| ADR-0240 | Kubernetes Worker Credential Staging 与短期最小 RBAC | Accepted |
| ADR-0241 | Kubernetes Worker Credential TokenRequest Session | Accepted |
| ADR-0242 | 受批 Worker Credential 管理与一次性执行边界 | Proposed |
| ADR-0243 | 删除无产品消费者的 Local Cutover 孵化包 | Accepted |
| ADR-0244 | 按管理能力绑定身份断言用途 | Accepted |
| ADR-0245 | Worker 管理外部 OIDC 双用户 Ceremony 证据 | Accepted |
| ADR-0246 | Worker 管理持久审计的独立只读证据 | Accepted |
| ADR-0247 | Worker 管理业务路由的客户端证书边界 | Accepted |
| ADR-0248 | Worker 管理 PKI 吊销与滚动替换证据 | Accepted |
| ADR-0249 | Worker 管理客户端 CA 有界重叠与安全退休 | Accepted |
| ADR-0250 | Worker 管理客户端 CA 三阶段生产证据 | Accepted |
| ADR-0251 | Worker 管理吊销证据的双 PKI 信任域分离 | Accepted |
| ADR-0252 | Worker 管理统一 Release Evidence | Accepted |
| ADR-0253 | 私密 Worker 管理证据的镜像发布门 | Accepted |
| ADR-0254 | Digest 固定的跨架构 OS 漏洞发布门 | Accepted |
| ADR-0255 | Build-once Scanned OCI Digest Promotion | Accepted |
| ADR-0256 | Owner-authenticated Local TaskDefinition Management | Accepted |
| ADR-0257 | Profile 运行制品裁剪与分层 Import RSS 预算 | Accepted |
| ADR-0258 | Owner-authenticated Local Trigger 管理与 Current Task 围栏 | Accepted |
| ADR-0259 | 用途隔离的 Cluster Automation Management 进程 | Accepted |
| ADR-0260 | Generation-bound、Content-free 的 Plugin Package Prompt 执行 | Proposed |
| ADR-0261 | 显式加密的 Durable Plugin Package Prompt 输出 Artifact | Proposed |
| ADR-0262 | Kubernetes Secret-backed Cluster Prompt 输出 Key Retirement | Accepted |
| ADR-0263 | 显式 Cluster AI 组合与 Provider Credential Authority | Accepted |
| ADR-0264 | 独立 Cluster Model Provider Credential 管理边界 | Accepted |
| ADR-0265 | 有预算的一次性 Model Provider Credential Test Connection | Accepted |
| ADR-0266 | Externally staged、resourceVersion-fenced 的 Cluster Prompt Output Active Key Rotation | Accepted |
| ADR-0267 | 机器可验证的 Workspace Package 边界账本 | Accepted |
| ADR-0268 | 签名的外部 Prompt 输出密钥托管与恢复证明 | Proposed |
| ADR-0269 | Profile-aware Local SQLite Readiness 诊断边界 | Accepted |
| ADR-0270 | 受认证的本机 Plugin Package Workflow 产品入口 | Accepted |
| ADR-0271 | 受认证的 Cluster Plugin Package Workflow 产品入口 | Accepted |
| ADR-0272 | 有界且授权原子的 Cluster Automation Inspection | Accepted |
| ADR-0273 | 本机 AI Provider Credential 产品 Authority | Accepted |
| ADR-0274 | 受认证的本机 Plugin Package Prompt 产品入口 | Accepted |
| ADR-0275 | 受认证的 Cluster Plugin Package Prompt 产品入口 | Accepted |
| ADR-0276 | Package 内部领域目录与兼容 export 布局 | Accepted |
| ADR-0277 | 本机 Plugin Package Workflow 取消产品入口 | Accepted |
| ADR-0278 | Profile 分层的 Linux Workflow 取消资源发布门 | Accepted |
| ADR-0279 | 受认证的 Cluster Plugin Package Workflow 取消产品入口 | Accepted |
| ADR-0280 | Local SQLite Storage 与 Administration Composition 布局 | Accepted |
| ADR-0281 | 同源绑定的跨架构 Linux 资源发布证据 | Accepted |
| ADR-0282 | 受认证的本机 Plugin Package Workflow Run 查询 | Accepted |
| ADR-0283 | 受认证的 Cluster Plugin Package Workflow Run 查询 | Accepted |
| ADR-0284 | 有界且受认证的 Package-bound Workflow StepRun 列表 | Accepted |
| ADR-0285 | 有界且受认证的 Package-bound Workflow RunEvent 时间线 | Accepted |
| ADR-0286 | 有界且受认证的 Package-bound Workflow Run 历史列表 | Accepted |
| ADR-0287 | Content-free 的 Package Prompt 目录读取 | Accepted |
| ADR-0288 | 按调用方 Request ID 精确读取 Content-free Package Prompt 执行状态 | Accepted |
| ADR-0289 | 按执行 Request ID 恢复并读取 Durable Package Prompt 输出 | Accepted |
| ADR-0290 | Local SQLite Completion Receipt Journal 内部 Collaborator | Accepted |
| ADR-0291 | Local SQLite Run Reader 内部模块 | Accepted |
| ADR-0292 | Local SQLite Run Persistence Support 内部模块 | Accepted |
| ADR-0293 | Local SQLite Security Authority Store 与 Run Facade 解耦 | Accepted |
| ADR-0294 | Local SQLite 领域中立 Persistence Primitives | Accepted |
| ADR-0295 | 浅层 Profile Package 的依赖防火墙证明 | Accepted |
| ADR-0296 | 根入口行数棘轮与 Local Admin 领域入口 | Accepted |
| ADR-0297 | AI 根实现的领域归属与公开 Subpath 稳定性 | Accepted |
| ADR-0298 | Local SQLite 根 Runtime 与 Adoption 实现归属 | Accepted |
| ADR-0299 | Cluster Control 根 Composition 实现归属 | Accepted |
| ADR-0300 | Worker Runtime Application Composition 实现归属 | Accepted |
| ADR-0301 | Cluster Admin Runtime 与 Security Administration 实现归属 | Accepted |
| ADR-0302 | Local Owner Console Application Runtime 实现归属 | Accepted |
| ADR-0303 | Runtime Core 领域实现与基础设施端口归属 | Accepted |
| ADR-0304 | 根 Public Export 纯转发证明与 Owner Command 实现归属 | Accepted |
| ADR-0305 | Local SQLite Run Facade 安全 Authority 兼容面退役 | Accepted |
| ADR-0306 | Local SQLite Run Runtime 最小能力投影 | Accepted |
| ADR-0307 | 有界且诚实的本机部署持久状态 | Accepted |
| ADR-0308 | Local Application 启动模块内聚与 Profile 制品防火墙 | Accepted |
| ADR-0309 | 部署侧 Legacy Silence Commitment 与 adopted v3 启动门 | Accepted |
| ADR-0310 | Docker Target 启动/重启屏障与人工终态 | Accepted |
| ADR-0311 | Local Owner Pepper Custody 的 Package 收敛 | Accepted |
| ADR-0312 | Local Profile Composition 的 Subpath 收敛 | Accepted |
| ADR-0313 | 实例 Cutover Lineage 与双阶段人工恢复 | Accepted |
| ADR-0314 | Docker Target Stop 与写后 Reconciliation 证据 | Accepted |
| ADR-0315 | 双阶段 Legacy Rollback Ceremony | Accepted |
| ADR-0316 | AI Migration 方言归属与包内拆分 | Accepted |
| ADR-0317 | AI Migration Schema Group 归属 | Accepted |
| ADR-0318 | Local Publisher Trust Contract Seam | Accepted |
| ADR-0319 | Local Publisher Trust Codec 与 Private Filesystem Store | Accepted |
| ADR-0320 | Local Publisher Trust Lifecycle Ownership | Accepted |
| ADR-0321 | Plugin Package Install 领域归属与 Package/Module 粒度 | Accepted |
| ADR-0322 | Trusted Tool Invocation 领域归属 | Accepted |
| ADR-0323 | Local SQLite Adoption 领域归属 | Accepted |
| ADR-0324 | Local Owner Secret Delivery 领域归属 | Accepted |
| ADR-0325 | Local Identity Credential Command 领域归属 | Accepted |
| ADR-0326 | Local Plugin Package Prompt Command 领域归属 | Accepted |
| ADR-0327 | Local Plugin Package Workflow Command 领域归属 | Accepted |
| ADR-0328 | Runtime Core Workflow Administration 领域归属 | Accepted |
| ADR-0329 | Local SQLite Identity Credential Administration 领域归属 | Accepted |
| ADR-0330 | Local Model Invocation Repository 领域归属 | Accepted |
| ADR-0331 | PostgreSQL Model Invocation Repository 领域归属 | Accepted |
| ADR-0332 | Local Plugin Package Prompt Admission Repository 领域归属 | Accepted |
| ADR-0333 | PostgreSQL Plugin Package Prompt Admission Repository 领域归属 | Accepted |
| ADR-0334 | Local Model Price Catalog Repository 领域归属 | Accepted |
| ADR-0335 | PostgreSQL Model Price Catalog Repository 领域归属 | Accepted |
| ADR-0336 | Model Price Catalog Management 领域归属 | Accepted |
| ADR-0337 | Plugin Package Prompt Execution 领域归属 | Accepted |
| ADR-0338 | PostgreSQL Model Provider Credential Test Connection 领域归属 | Accepted |
| ADR-0339 | PostgreSQL Plugin Package Prompt Application 领域归属 | Accepted |
| ADR-0340 | Model Invocation Protocol 领域归属 | Accepted |
| ADR-0341 | AI Profile Composition 领域归属 | Accepted |
| ADR-0342 | PostgreSQL Model Provider Credential Repository 领域归属 | Accepted |
| ADR-0343 | Plugin Package Prompt Output Artifact 协议归属 | Accepted |
| ADR-0344 | Model Provider Credential Test Connection 协议归属 | Accepted |
| ADR-0345 | Tool Registry 协议归属 | Accepted |
| ADR-0346 | 有界本机 Runtime Artifact 裁剪 | Accepted |
| ADR-0347 | 可选、受认证的本机 MCP Run 读取入口 | Accepted |
| ADR-0348 | 有界、低敏的本机 MCP Run 事件诊断 | Accepted |
| ADR-0349 | 有界、Project-scoped 的本机 MCP Run 发现 | Accepted |
| ADR-0350 | 有界、低敏的本机 MCP Task 发现 | Accepted |
| ADR-0351 | MCP 单一消费者 Tool Projection 的包内归属 | Accepted |
| ADR-0352 | 有界、低敏的本机 MCP Trigger 发现 | Accepted |
| ADR-0353 | 有界、低敏的本机 MCP Approval 观察 | Accepted |
| ADR-0354 | 精确、双授权的本机 MCP Approval 预览 | Accepted |
| ADR-0355 | 强人类认证、摘要绑定的 Approval 决策产品门 | Accepted |
| ADR-0356 | 可选、受认证且独立授权的 Cluster Approval 管理面 | Accepted |
| ADR-0357 | 薄 Package 根目录与稳定 Export Map | Accepted |
| ADR-0358 | 最终运行制品的 Package Manifest 投影 | Accepted |
| ADR-0359 | Approval Management Kubernetes 多节点实证门 | Accepted |
| ADR-0360 | Production Worker Kubernetes Session 生命周期实证门 | Accepted |
| ADR-0361 | PostgreSQL HA 证据的私有持久发布与离线审计 | Accepted |
| ADR-0362 | systemd/OpenRC 双 Authority Service Bridge | Proposed |
| ADR-0363 | 有界 Application Shutdown Receipt 与物理 Service Stop 证据 | Proposed |
| ADR-0364 | Package 内部源码布局 Ratchet | Accepted |
| ADR-0365 | 有界统一 Local 产品 CLI | Accepted |
| ADR-0366 | 薄 Package 边界 Ratchet | Accepted |
| ADR-0367 | 单进程、受认证的 Local Run HTTP API | Proposed（实现完成，固定实机门待补） |
| ADR-0368 | 有界、Project-scoped 的 Run Discovery HTTP API | Proposed |
| ADR-0369 | Profile 精确 Runtime Export 投影 | Accepted |
| ADR-0370 | 有界、Project-scoped 的 RunEvent 时间线 HTTP API | Accepted |
| ADR-0371 | 有界、Project-scoped 的 Run StepRun HTTP 与 MCP API | Accepted |
| ADR-0372 | 两阶段认证的 Local Run Cancellation API | Proposed（Linux 组合门已完成，固定物理设备报告待补） |
| ADR-0373 | Profile 可达的 Runtime JavaScript 投影 | Accepted |
| ADR-0374 | 共享、有界的 Task Discovery HTTP API | Accepted |
| ADR-0375 | 共享的 current Task point-read API | Proposed（设计冻结，实现中） |
| ADR-0376 | Policy 与 digest fenced 的 Task Start | Accepted |
| ADR-0377 | Profile-aware Run Attempt 日志 Range 读取 | Accepted |
| ADR-0378 | Local Run Attempt 日志有界保留与 durable tombstone | Accepted |
| ADR-0379 | Cluster Run Attempt 日志多副本保留与条件删除 | Accepted |
| ADR-0380 | Local lost Run retry 复用单一 execution-control cadence | Accepted |
| ADR-0381 | 强认证的 Local 手动 Run retry | Accepted |
| ADR-0382 | PostgreSQL Cluster 手动 Run retry 原子 Authority | Accepted |
| ADR-0383 | 强认证的 Cluster Run Management Plane 与专用数据库角色 | Accepted |
| ADR-0384 | 强认证的 Cluster Run Stop Management 与列级数据库权限 | Accepted |
| ADR-0385 | 强认证的 Local Run Stop 产品入口与原子审计 | Accepted |
| ADR-0386 | Cluster Run Management Kubernetes 多节点实证 | Accepted |
| ADR-0387 | Local API Cancellation Linux 组合实证门 | Accepted |
| ADR-0388 | 有界统一 Cluster Operator 产品 CLI | Accepted |
| ADR-0389 | Owner-private Cluster Operator Context | Accepted |
| ADR-0390 | Offline Cluster Operator Context Preflight | Accepted |
| ADR-0391 | Read-only Cluster Operator Context Readiness | Accepted |
| ADR-0392 | Plugin Package Automation 安全隔离原子撤回 | Accepted |
| ADR-0393 | 按 Generation 固定的 Plugin Package Secret 绑定账本 | Accepted |
| ADR-0394 | 按 Generation 固定的 Plugin Package Secret Materialization | Accepted |
| ADR-0395 | Owner 确认的 Plugin Package Secret 首次绑定 | Proposed |
| ADR-0396 | 按 Package Generation 切换 Plugin Package Secret Binding | Proposed |
| ADR-0397 | Cluster Secret Action 显式人工恢复 | Accepted（实现、单节点 PostgreSQL、完整 workspace/后端/边界与 physical HA 门完成） |
| ADR-0398 | Plugin Package 激活前候选资格校验与自动保留旧版本 | Proposed（v2 私有报告/离线审计已编排、全量/HA 门完成；远端 Kubernetes 成功记录与物理低配门待闭合） |
| ADR-0399 | 物理 Edge 证据的外部发布归档证明 | Accepted（exact recorder 重建与离线验签已实现；固定实机 ceremony 待执行） |
| ADR-0400 | 有界、受信的 Run 对比 Tool | Accepted |
| ADR-0401 | 可选本机 MCP Run 对比产品入口 | Accepted |
| ADR-0402 | 有界的 Task 最近成功/失败 Run 对比 | Accepted |
| ADR-0403 | 有界、脱敏且不授予行动权的 Run 日志尾部 Tool | Accepted |
| ADR-0404 | 可选本机 MCP Run 日志摘录产品入口与私有文件边界 | Accepted |
| ADR-0405 | 有界故障诊断 Prompt 与显式模型出口策略 | Accepted |
| ADR-0406 | Cluster Projected Tool Result Key Authority | Accepted |
| ADR-0407 | Cluster Copilot Failure Diagnosis Run Admission | Accepted |
| ADR-0408 | Cluster Copilot Failure Diagnosis Tool Execution 与原子 Model 解锁 | Accepted |
| ADR-0409 | Cluster Copilot Failure Diagnosis Model Execution、密文输出与 Run 终态化 | Accepted |
| ADR-0410 | Cluster Copilot Failure Diagnosis Output Projected Key Authority | Accepted |
| ADR-0411 | 默认关闭的 Cluster Copilot Failure Diagnosis Composition | Accepted |
| ADR-0412 | 耐久 Copilot Pre-Model 终态化与 Model Unknown Resolution | Accepted |
| ADR-0413 | 默认关闭的 Cluster Copilot Failure Diagnosis API | Accepted |
| ADR-0414 | Copilot 故障诊断请求键读模型 | Accepted |
| ADR-0415 | 受围栏的 Copilot 故障诊断取消入口 | Accepted |
| ADR-0416 | 有界 Cluster Copilot 产品客户端 | Accepted |
| ADR-0417 | 有界 Cluster Copilot MCP stdio 产品面 | Accepted |
| ADR-0418 | 显式 Cluster Copilot MCP Host 部署与资源边界 | Accepted |
| ADR-0419 | Loopback-only Cluster Copilot 只读 Console | Accepted |
| ADR-0420 | 以签名 Admin OCI 分发 Cluster Copilot 工作站 Console | Accepted |
| ADR-0421 | 显式 Cluster Run、Task 与 Workflow 观察台 | Accepted |
| ADR-0422 | 浏览器本地生成的脱敏 Cluster Evidence Bundle | Accepted |
| ADR-0423 | 独立、离线且无 Authority 的 Cluster Evidence Verifier | Accepted |
| ADR-0424 | Cluster Admin 外部发布工作站 Ceremony | Proposed |
| ADR-0425 | Deployment-family Release Candidate Contract | Accepted |
| ADR-0426 | Source-derived QingLong 3.0 Release Version Transition | Accepted |
| ADR-0427 | 完整跨镜像发布集与部署 Digest Lock | Accepted |
| ADR-0428 | 持久化 OCI Release Catalog 与独立部署验真 | Accepted |
| ADR-0429 | 离线 Release-set Deployment Lock 物化 | Accepted |
| ADR-0430 | 可审计的 Release Catalog 消费工作站 Ceremony | Accepted（真实公开 catalog 运行待实际 release tag） |
| ADR-0431 | Catalog-bound Deployment Lock 证据链 | Accepted（真实公开 catalog 运行待实际 release tag） |
| ADR-0432 | 目标侧 Catalog-bound Local Compose 修订 | Accepted |
| ADR-0433 | Catalog-bound Kubernetes 目标部署 Ceremony | Accepted |
| ADR-0434 | Resource-inventory-closed Kubernetes Deployment Head | Accepted |
| ADR-0435 | UID/resourceVersion 围栏的 Kubernetes 资源退役 Ceremony | Accepted |
| ADR-0436 | 发布后 Catalog-bound Kubernetes Release Gate | Accepted（首份真实公开 catalog evidence 待实际 release tag） |
| ADR-0437 | 发布后 Catalog-bound Local Release Gate | Accepted（首份真实公开 catalog evidence 待实际 release tag） |
| ADR-0438 | 内容无关的私有发布证据收据链 | Accepted（首份真实公开收据待实际 release tag） |
| ADR-0439 | 确定性私有证据收据与 Release-set 重放 | Accepted（首份真实线上重放待实际 release tag） |
| ADR-0440 | Release-set 闭合时私有证据 Freshness 重验证 | Accepted（首份真实线上闭合待实际 release tag） |
| ADR-0441 | Release Catalog Discovery Tag 无覆盖发布 | Accepted（首份真实 GHCR conflict/reuse 证据待实际 release tag） |
| ADR-0442 | Catalog-ready 的终态 Release Tag 发布与闭合收据 | Superseded by ADR-0443（bounded promotion/closure 机制保留） |
| ADR-0443 | Deployment-ready 的终态 Release Finalization | Accepted（首份真实 GHCR deployment-ready finalization 待实际 release tag） |
| ADR-0444 | Fail-closed Release Tag Finalizer 与重放演练 | Accepted（首份真实 GHCR response-loss 重放待实际 release tag） |
| ADR-0445 | ScheduleService 执行来源的 Shadow Run 覆盖 | Accepted（scheduled_system 后续由 ADR-0446 完成） |
| ADR-0446 | System Crond 稳定 Shadow 准入与回调重放 | Accepted |
| ADR-0447 | Boot Shadow 准入与 once/gRPC 非 Origin 边界 | Accepted |
| ADR-0448 | 有界 Legacy Shadow 启动恢复 | Accepted |
| ADR-0449 | 版本化 Legacy Shadow 启动差异报告与指标批次 | Accepted |
| ADR-0450 | 闭合窗口的 Legacy Shadow 终态差异审计 | Accepted |
| ADR-0451 | 按 Profile 有界的 Legacy Shadow 资源与关闭回滚证据 | Accepted |
| ADR-0452 | 原子且扁平兼容的 Backend 构建发布 | Accepted |
| ADR-0453 | Origin-scoped Legacy Shadow 捕获权威与 Primary 门禁 | Accepted（首次真实目标实例 manual canary 待执行） |
| ADR-0454 | 目标实例 Manual Primary Canary 与显式回滚仪式 | Accepted（首次真实用户目标实例执行待运维） |
| ADR-0455 | Profile-bounded Manual Primary 运行态激活凭据 | Accepted（首次真实目标实例执行待运维） |
| ADR-0456 | PostgreSQL 数据库时间驱动的 CancellationDispatch | Accepted |
| ADR-0457 | Worker Pull Cluster Cancellation 生产交付 | Accepted |
| ADR-0458 | 最小权限 Cancellation 诊断与精确 Rearm | Accepted |
| ADR-0459 | Project-scoped Cancellation 可用性汇总 | Accepted |
| ADR-0460 | 一次性 Cancellation 状态产品入口 | Accepted |
| ADR-0461 | Project-scoped Blocked Cancellation 固定键集分页 | Accepted |
| ADR-0462 | 可选 Console Run Management Drill-down | Accepted |
| ADR-0463 | 原生双架构 Console 容量与 Assertion 生命周期证据 | Accepted（首份原生 CI 双架构报告待实际运行） |
| ADR-0464 | 机器化 Node 24 架构支持分层 | Accepted |
| ADR-0465 | 版本化 Worker 支持等级准入 | Accepted |
| ADR-0466 | 有界 Worker Session 兼容性观察 | Accepted |
| ADR-0467 | 通用 Worker Management 产品入口与兼容路径 | Accepted |
| ADR-0468 | 可选 Console Worker 只读观察 | Accepted |
| ADR-0469 | 可选 Console Package Installation 只读观察 | Accepted |
| ADR-0470 | Console 会话级能力发现与服务端操作围栏 | Accepted |
| ADR-0471 | Legacy 核心执行 API 兼容基线 | Accepted |
| ADR-0472 | Service Manager Legacy Rollback Preparation | Accepted |
| ADR-0473 | Service Manager Legacy Rollback Commit | Accepted（OpenRC live actor 待补） |
| ADR-0474 | 有界 Legacy Core Readiness Proof | Accepted（OpenRC live actor 待补） |
| ADR-0475 | Legacy System、Script 与 Open API 兼容基线 | Accepted |
| ADR-0476 | 真实 Legacy SQLite 升级与回滚演练 | Accepted |
| ADR-0477 | 有界 Legacy Data Directory 盘点 | Accepted |
| ADR-0478 | 私有 Legacy Data Directory 暂存与稳定校验 | Accepted |
| ADR-0479 | 私有、版本化的 Legacy Config、Keyv 与 SSH 转换 | Accepted |
| ADR-0480 | 受认证、原子且可恢复的 Legacy Data Application | Accepted |
| ADR-0481 | Committed Legacy Data Receipt 的本机部署 Lineage | Accepted |
| ADR-0482 | 停止态 Local SQLite Reconciliation Recovery Bundle | Accepted |
| ADR-0483 | 密封 Reconciliation Bundle 的有界数据域计划 | Accepted |
| ADR-0484 | 私有 Reconciliation 诊断与受认证人工裁决 | Accepted |
| ADR-0485 | Reconciliation 应用协调器与领域 Adapter 边界 | Accepted |
| ADR-0486 | 有界 Automation 行级 Reconciliation Plan | Accepted |
| ADR-0487 | Reconciliation Apply 证据封存与回滚存储生命周期 | Accepted |
| ADR-0488 | 跨领域 Reconciliation 完成围栏与目标重启授权 | Accepted |
| ADR-0489 | Service Manager 完成围栏重启谱系 | Accepted |
| ADR-0490 | Run History 终态保全与跨领域完成证明 | Accepted |
| ADR-0491 | 有界 Secret/Config Reconciliation 与任务环境绑定 | Proposed（直接外部 custody 已完成；仅固定物理 Edge gate pending） |
| ADR-0492 | 兼容 Secret/Config 的 Reconciliation Completion v3 | Accepted |
| ADR-0493 | 目标原生 Reconciliation 域分类与身份保留 | Accepted |
| ADR-0494 | PostgreSQL Secret Binding 与 Mounted Provider 在线轮换门 | Accepted |
| ADR-0495 | 无敏感内容的 Cluster Legacy Env 迁移计划账本 | Accepted |
| ADR-0496 | Cluster 不透明环境 Bundle 的有界交付与 Worker 内存展开 | Accepted |
| ADR-0497 | Cluster Legacy Env 的原子 Task/Trigger 迁移与只追加回执 | Accepted |
| ADR-0498 | Cluster Legacy Env Application 的 HA Promotion 后精确重放 | Accepted |
| ADR-0499 | 直接 Vault KV Worker Secret 外部托管 | Accepted |
| ADR-0500 | 短生命周期 Cluster Security Administration 产品命令 | Accepted |
| ADR-0501 | 可选的一次性 Kubernetes Security Administration Job | Accepted |
| ADR-0502 | 有界 Cluster API Credential Pepper Keyring | Accepted |
| ADR-0503 | 可下载的 Local Alpha 试运行套件 | Proposed（原生 Linux 双架构已通过；实际可下载归档待维护者授权） |
| ADR-0504 | Local Alpha Trial Kit 单一物化与离线审计 | Accepted |
| ADR-0505 | 固定 Alpine OpenSSL 运行时安全补丁 | Accepted |
| ADR-0506 | 源码绑定的 Local Alpha 验证证据 | Accepted |
| ADR-0507 | Public Local Application 与 Operator 发布对 | Accepted（首份真实公开发布待受保护 tag） |
| ADR-0508 | 跨架构 Local Alpha 里程碑闭合 | Accepted（headless 与 Console 实际 milestone 均已交付） |
| ADR-0509 | Cluster Alpha Bundle 与跨架构里程碑闭合 | Accepted（首份实际 Cluster milestone 已交付） |
| ADR-0510 | 跨 Profile Alpha 阶段交付索引 | Accepted（首份实际 stage index 已交付） |
| ADR-0511 | 可直接试运行的 Local Alpha Quickstart | Accepted（v5 headless/Console 双变体 milestone 已交付） |
| ADR-0512 | 有界、离线的 Local Web Console | Accepted（Trial Kit 交付已由 ADR-0513 闭合） |
| ADR-0513 | 可选择的 Local Console Trial Kit | Accepted（headless/Console 双变体 milestone 已交付） |
| ADR-0514 | 阶段可用的首个自动化旅程 | Accepted（v5 headless/Console 双变体 milestone 已交付） |
| ADR-0515 | Local Console 的有界 Run 日志观察面 | Accepted（首份实际 Console v5 双架构 milestone 已交付） |
| ADR-0516 | request-scoped Local Console Task mutation | Accepted（D-421 双架构 milestone 已交付） |
| ADR-0517 | 强认证 Local Console Task authoring lease | Accepted（D-422 双架构 milestone 已交付） |
| ADR-0518 | Local Console cron Trigger 管理 | Accepted（D-423 双架构 milestone 已交付） |
| ADR-0519 | Local Console Secret-backed 自动化 | Accepted（D-424 双架构 milestone 已交付） |
| ADR-0520 | 可下载的 Local Legacy 升级就绪盘点 | Accepted（D-425 双架构 Alpha 实物已交付） |
| ADR-0521 | 受审核计划驱动的 Local Side-by-side 升级暂存 | Accepted（D-426a 双架构 Alpha 实物已交付） |
| ADR-0522 | 内容绑定的离线 Docker Adopted Target | Accepted（D-426b 权威已由 D-426b2b 双架构实物闭合） |
| ADR-0523 | Apply 后的 Adopted Target 启动前基线 | Accepted（D-426b2a 基线已由 D-426b2b 双架构实物闭合） |
| ADR-0524 | Exact Headless 升级切换链演练 | Accepted（D-426b2b 双架构阶段实物已交付） |
| ADR-0525 | Console Adopted Target 入口证据 | Accepted（exact Console 双架构阶段实物已交付并完成离线审计） |
| ADR-0526 | Exact 写后 Reconciliation Capture | Accepted（同源 exact Console 双架构阶段实物已交付） |
| ADR-0527 | 受审核 Automation Reconciliation 应用与显式回滚 | Accepted（exact headless 双架构阶段实物已交付） |
| ADR-0528 | 跨域 Reconciliation Completion 演练 | Accepted（D-426c3 源码候选；双架构阶段实物待 gate） |
| ADR-0529 | 有界只读 Local 旧面板 Cron Adapter | Accepted（D-427 双架构阶段实物已交付） |
| ADR-0530 | 有界 Local 面板能力发现与启动适配 | Accepted（D-428 exact Console 双架构阶段实物已交付） |
| ADR-0531 | 现有面板到规范 Run 日志的有界桥接 | Accepted（D-429 exact Console 双架构阶段实物已交付） |
| ADR-0532 | 原生 Console 日志窗口导航 | Accepted（D-430 exact Console 双架构阶段实物已交付） |
| ADR-0533 | 原生 Console 任务、定时与运行列表分页 | Accepted（D-431 exact 双架构 Console 阶段实物已交付并复核） |
| ADR-0534 | 原生 Console 异步操作的连接代次隔离 | Accepted（D-432 源码候选；同源 CI 与实物待验证） |
| ADR-0535 | 现有面板的规范 Task/Run 执行管理 | Accepted（D-433 源码候选；同源 CI 与实物待验证） |
规则
- ADR 只决定一个边界清晰的问题。
- ADR 必须说明上下文、决策、替代方案、影响和验证方式。
- Accepted ADR 不直接改写历史；改变决策时新增 ADR 并标记 supersedes。
- ADR 不能静默违反主 RFC 的核心决策和架构不变量。
- 业务实现 PR 应链接对应 ADR，并用测试证明关键约束。