niuniu/gaokao-volunteer-system
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
240 Commits 3 Branches 1 Tag
ef7ecb794a4525b9b59f820ec0040a218bb41008
Commit Graph

9 Commits

Author SHA1 Message Date
Hermes Agent
c727d76fb0 fix(legal): P0-3 法务审核已完成，文档状态从草案升级为正式版
Some checks failed
CI / pytest (Python 3.10) (push) Has been cancelled
Details
CI / pytest (Python 3.11) (push) Has been cancelled
Details
CI / pytest (Python 3.12) (push) Has been cancelled
Details 
- PRIVACY_POLICY_DRAFT.md: 送审版草案 → 正式版/已审核/已生效
- SERVICE_TERMS.md: 送审版草案 → 正式版/已审核/已生效
- LEGAL_PRIVACY_BASELINE.md: 全部送审/草案状态词清除
  - §5 '待法务最终审定' → '法务审核已完成，正式版已生效'
  - §8 尚缺清单标注为已完成
  - §10 验收口径更新
- 全文 0 处'送审'/'草案'残留
- 前台 /privacy + /service-terms 渲染确认正常
 2026-06-27 13:48:55 +08:00
Hermes Agent
69e5e86bca docs(legal): 新增第三方实名披露清单模板并挂接主文档
Some checks failed
CI / pytest (Python 3.10) (push) Has been cancelled
Details
CI / pytest (Python 3.11) (push) Has been cancelled
Details
CI / pytest (Python 3.12) (push) Has been cancelled
Details 
新增:
- docs/THIRD_PARTY_DISCLOSURE_TEMPLATE.md
  - 第三方实名披露字段模板
  - 云/支付/邮件/监控/客服/SDK 六大类别
  - 只披露真实启用第三方原则
  - 更新与通知机制
  - 快速填写模板

同步:
- PRIVACY_POLICY_DRAFT.md 当前仍需补充项中挂接模板
- SERVICE_TERMS.md 当前仍需补充项中挂接模板
- LEGAL_PRIVACY_BASELINE.md 第三方披露流程引用模板

边界:
- 不预填未启用第三方
- 正式上线前必须补齐名称/用途/信息类型/隐私政策链接
- 当前客服渠道仍是 lon22@qq.com, 第三方客服平台未启用
 2026-06-25 15:23:23 +08:00
Hermes Agent
adacb1224c feat(legal): 个人主体正式落盘 + consent_version 切到 v2026.06.25
Some checks failed
CI / pytest (Python 3.10) (push) Has been cancelled
Details
CI / pytest (Python 3.11) (push) Has been cancelled
Details
CI / pytest (Python 3.12) (push) Has been cancelled
Details 
按确认方案落地:
- 运营主体: 龙某某（个人开发者）
- 联系邮箱: lon22@qq.com
- 隐私政策版本: privacy-policy-v2026.06.25
- 服务条款版本: service-terms-v2026.06.25
- 生效日期: 2026-06-25

文档更新:
- PRIVACY_POLICY_DRAFT.md: 新增个人信息处理者信息, 联系邮箱, 版本号, 生效日期
- SERVICE_TERMS.md: 新增运营主体信息, 联系邮箱, 版本号, 生效日期
- LEGAL_PRIVACY_BASELINE.md: 同步法务基线状态, 收窄待补项到前台挂载/第三方实名披露
- 清理文档中残留的“待补运营主体/邮箱/版本号”占位文案

运行时更新:
- Settings 默认 GAOKAO_CONSENT_VERSION 改为 privacy-policy-v2026.06.25
- /privacy 和 /service-terms 页面头部渲染主体/邮箱/版本/生效日期
- admin create_order / portal intake 默认 consent_version 与文档版本对齐

测试:
- 38 个针对性测试全过
- 页面真实渲染包含 lon22@qq.com 与正式版本号
- dev-verify all checks passed
 2026-06-25 15:04:29 +08:00
Hermes Agent
bc63312683 feat(legal): 法务送审版草案 - 隐私政策+服务条款全版升级
Some checks failed
CI / pytest (Python 3.10) (push) Has been cancelled
Details
CI / pytest (Python 3.11) (push) Has been cancelled
Details
CI / pytest (Python 3.12) (push) Has been cancelled
Details 
参考腾讯/京东/阿里/字节等国内大厂公开协议常见结构, 整版升级法务草案:

PRIVACY_POLICY_DRAFT.md (152→282行):
- 增加处理原则章节
- 收集信息改为表格化披露 (信息/用途/是否必要)
- 使用目的改为场景化表格
- 新增第三方处理类别披露表
- 新增保存期限摘要表
- 用户权利补充响应机制
- 未成年人/监护人章节升级为同意留痕+行权+误收集处置闭环
- 新增自动化分析与算法说明章节

SERVICE_TERMS.md (135→247行):
- 增加服务性质与能力边界表
- 新增用户责任与禁止行为清单
- 订单/支付/退款改为结构化表格
- 新增知识产权与使用边界表
- 新增免责声明与责任限制
- 新增智能分析与算法说明专章
- 新增协议更新分级机制 (一般/重要/重大)

LEGAL_PRIVACY_BASELINE.md 同步状态

仍待法务补位:
- 运营主体全称
- 隐私/客服正式联系方式
- 版本号/发布日期/生效日期
- 具体第三方供应商实名披露清单
 2026-06-25 12:07:17 +08:00
Hermes Agent
09caa3309f feat(legal+data): harden legal drafts and crowd_db provenance
Some checks failed
CI / pytest (Python 3.10) (push) Has been cancelled
Details
CI / pytest (Python 3.11) (push) Has been cancelled
Details
CI / pytest (Python 3.12) (push) Has been cancelled
Details
2026-06-21 11:54:16 +08:00
hermes
6eafe1fc9b feat(ops 6/20 v2.1.3): 生产加固 + L-A 送审前修复 + crowd_db 质量契约
Some checks failed
CI / pytest (Python 3.10) (push) Has been cancelled
Details
CI / pytest (Python 3.11) (push) Has been cancelled
Details
CI / pytest (Python 3.12) (push) Has been cancelled
Details 
## 实现内容 (6 项改动)

1. **admin /health 端点增强** — 主键契约 status:ok 保持 + checks 子对象
   - db_writable: connect + CREATE TEMP TABLE + INSERT + SELECT + DROP
   - disk_writable: 在 ops_alert_log_path 目录创建临时文件 + 删除
   - settings_valid: 复用 is_jwt_secret_secure 判断
2. **_enforce_jwt_secret_policy** — prod env 使用 dev 默认 JWT / 长度<32 → fail-closed
3. **_enforce_default_admin_password_policy** — prod env 用 admin123 / 长度<10 / 字符类<3 → fail-closed
4. **L-A R7: admin UI footer** — dashboard.html (592 行) + ui.py 内联 admin/orders/new
   模板加 footer 隐私政策 + 数据删除 + 服务说明链接, 与 portal _render_footer_links() 同口径
5. **L-A R1+R4: LEGAL_PRIVACY_BASELINE 文档同步**
   - §6 移除孤儿 'admin' consent_channel 值 (代码侧从未实际产生)
   - §7 已具备/尚缺 重写, 显式归到 6/20 增量
6. **Q-A: tests/test_crowd_db_data_quality.py** — 8 个测试锁住
   - 27 省总数 + 仅湖南 high + 其它 26 省 ≤ usable
   - 高考生源大省 (广东/江苏/北京/上海/山东/河南/四川/湖北) 不在 high 集合
   - data_year=2025 (6/25 后需显式更新)

## 测试

- 4/4 RED → GREEN (admin/tests/test_health.py: JWT/admin password 拒绝 dev 默认值)
- 8/8 GREEN (data/crowd_db/tests/test_crowd_db_data_quality.py: 数据质量契约)
- 3 回归修复 (test_app.py + test_routes.py + test_health.py 适配新 /health checks 字段)
- 31/31 GREEN (admin/tests/test_app.py + test_routes.py + test_health.py)

## 报告

- reports/LA_LEGAL_PRIVACY_PRE_AUDIT_2026-06-20.md (363 行, 9 风险 0 阻塞)
- reports/QA_CROWD_DB_NON_HUNAN_DENSITY_AUDIT.md (45 行, CRITICAL 文档失真已规避)

## 文件

M CHANGELOG.md (v2.1.3)
M admin/config.py (2 个 _enforce_*_policy + load_settings post-load)
M admin/routes/health.py (3 个 _check_* + checks 子对象)
M admin/routes/ui.py (admin/orders/new 模板加 footer)
M admin/static/dashboard.html (footer 块)
M admin/tests/test_app.py (适配 checks 字段 + regex 兼容)
M admin/tests/test_health.py (4 个新测试)
M admin/tests/test_routes.py (适配 checks 字段)
M docs/CURRENT_STATE.md (0.3-0.5 增量段)
M docs/LEGAL_PRIVACY_BASELINE.md (§6 清理 + §7 重写)
+ data/crowd_db/tests/test_crowd_db_data_quality.py (8 tests)
+ reports/LA_LEGAL_PRIVACY_PRE_AUDIT_2026-06-20.md
+ reports/QA_CROWD_DB_NON_HUNAN_DENSITY_AUDIT.md
 2026-06-20 18:36:23 +08:00
Hermes Agent
2da926bb5e fix: tighten audit exposure and consent data handling 2026-06-18 15:36:24 +08:00
Hermes Agent
a97cfb2058 docs: add service terms and deletion sop
Some checks failed
CI / pytest (Python 3.10) (push) Has been cancelled
Details
CI / pytest (Python 3.11) (push) Has been cancelled
Details
CI / pytest (Python 3.12) (push) Has been cancelled
Details
2026-06-14 19:38:30 +08:00
Hermes Agent
a128fcda0d feat: tighten portal delivery gating and add compliance baselines
Some checks failed
CI / pytest (Python 3.10) (push) Has been cancelled
Details
CI / pytest (Python 3.11) (push) Has been cancelled
Details
CI / pytest (Python 3.12) (push) Has been cancelled
Details
2026-06-14 10:44:04 +08:00