{
  "evidence_version": "foodsafe-delivery-independent-review-v1",
  "review_date_beijing": "2026-10-21",
  "reviewer": {
    "agent": "/root/foodsafe1_upgrade_audit",
    "role": "独立只读升级审核与交付工具复审",
    "independent_of_tool_author": true
  },
  "scope": {
    "candidate_package": "private/dm-package",
    "candidate_manifest_sha256": "a2c57bdbecff1fe68d310107d1907755463f22d2e71d765e487dfca3a2e99cd0",
    "database_connections_performed_by_reviewer": 0,
    "database_statements_executed_by_reviewer": 0,
    "actual_database_operations": false,
    "business_code_modified": false,
    "delivery_scripts_modified_by_reviewer": false,
    "customer_rows_or_passwords_in_this_evidence": false,
    "test_method": "真实交付脚本的独立外部副本配合 fake dmdb 与 fake DIsql；全部对象、配置和数据仅为合成 fixture；随后只读比对实际候选包及手册。",
    "limitation": "fake 测试证明工具门禁及接口行为，不代替主代理执行的真实达梦全量导入、元数据核验或客户现场验收。"
  },
  "regression_summary": {
    "total_cases": 18,
    "passed": 18,
    "failed": 0,
    "categories": [
      {
        "category": "import_admission_and_paths",
        "fixture_directory_relative_to_runtime": "delivery-import-regression-ksg7gl2r",
        "case_count": 8,
        "cases": [
          {"case": "missing_probe", "expected": "reject_before_connection", "observed_exit": 1, "connected": false, "disql_sessions": 0, "passed": true},
          {"case": "valid_probe_client_bound", "expected": "allow_fake_import", "observed_exit": 0, "connected_to_fake_driver": true, "fake_disql_sessions": 3, "passed": true},
          {"case": "different_driver_since_probe", "expected": "reject_before_connection", "observed_exit": 1, "connected": false, "disql_sessions": 0, "passed": true},
          {"case": "different_disql_since_probe", "expected": "reject_before_connection", "observed_exit": 1, "connected": false, "disql_sessions": 0, "passed": true},
          {"case": "wrong_package_probe", "expected": "reject_before_connection", "observed_exit": 1, "connected": false, "disql_sessions": 0, "passed": true},
          {"case": "traversal_used_path", "expected": "reject_before_connection", "observed_exit": 1, "connected": false, "disql_sessions": 0, "passed": true},
          {"case": "unlisted_used_path", "expected": "reject_before_connection", "observed_exit": 1, "connected": false, "disql_sessions": 0, "passed": true},
          {"case": "parent_symlink", "expected": "reject_before_connection", "observed_exit": 1, "connected": false, "disql_sessions": 0, "passed": true}
        ]
      },
      {
        "category": "identity_evidence_binding",
        "fixture_directory_relative_to_runtime": "delivery-finalize-regression-2ohzzwyi",
        "case_count": 6,
        "cases": [
          {"case": "valid_bound_run", "expected": "write_synthetic_evidence", "observed_exit": 0, "evidence_written": true, "passed": true},
          {"case": "wrong_package_run", "expected": "reject_without_evidence", "observed_exit": 1, "evidence_written": false, "passed": true},
          {"case": "wrong_table_names_counts", "expected": "reject_without_evidence", "observed_exit": 1, "evidence_written": false, "passed": true},
          {"case": "wrong_identity_clone", "expected": "reject_without_evidence", "observed_exit": 1, "evidence_written": false, "passed": true},
          {"case": "wrong_client", "expected": "reject_without_evidence", "observed_exit": 1, "evidence_written": false, "passed": true},
          {"case": "python_optimized_rejected", "expected": "reject_without_evidence", "observed_exit": 1, "evidence_written": false, "passed": true}
        ]
      },
      {
        "category": "private_provision_generation",
        "fixture_directory_relative_to_runtime": "delivery-prepare-audit-r_bbbjqf",
        "case_count": 4,
        "cases": [
          {"case": "admin_rejected", "expected": "reject_without_private_directory", "observed_exit": 1, "private_directory_created": false, "passed": true},
          {"case": "traversal_rejected", "expected": "reject_without_private_directory", "observed_exit": 1, "private_directory_created": false, "passed": true},
          {"case": "generate_only", "expected": "generate_private_files_without_database_execution", "observed_exit": 0, "guard_before_create": true, "private_directory_mode": "0700", "private_files_mode": "0600", "distinct_business_and_probe_users": true, "no_drop_or_reuse_clause": true, "passed": true},
          {"case": "repeat_refuses_overwrite", "expected": "reject_and_preserve_generated_private_files", "observed_exit": 1, "private_file_hashes_unchanged": true, "passed": true}
        ]
      }
    ]
  },
  "review_findings": [
    {
      "id": "P1-CAPABILITY-ADMISSION",
      "severity": "P1",
      "initial_issue": "原导入器未要求已通过且绑定当前包的现场能力探测证据即可开始写入。",
      "status": "fixed_and_independently_regressed",
      "resolution": "首条数据库连接及 DDL 前核验 capabilityEvidenceFile、目标指纹、包指纹及完整 identity clone 结果。"
    },
    {
      "id": "P1-IMPORT-EVIDENCE-BINDING",
      "severity": "P1",
      "initial_issue": "原 finalize 可接受仅同总行数、同表数量但属于另一包或每表记录错误的导入报告。",
      "status": "fixed_and_independently_regressed",
      "resolution": "导入报告及 finalize 绑定 manifest/source/schema/mapping、端口/表空间、实际客户端、探测报告摘要以及每表名称和行数。"
    },
    {
      "id": "P1-USED-PATH-CHECKSUM-COVERAGE",
      "severity": "P1",
      "initial_issue": "原实际执行文件集合与 manifest.files 校验集合未绑定，清单外路径及父目录符号链接未完整拒绝。",
      "status": "fixed_and_independently_regressed",
      "resolution": "统一包内路径解析，要求所有实际使用文件由 manifest 覆盖，拒绝绝对路径、父级穿越和各级符号链接，再核大小与 SHA。"
    },
    {
      "id": "P1-CAPABILITY-CLIENT-DRIFT",
      "severity": "P1",
      "initial_issue": "原探测与导入未绑定实际 DIsql/驱动，环境覆盖可能改变已探测的运行组件。",
      "status": "fixed_and_independently_regressed",
      "resolution": "移除导入器环境覆盖并绑定 Node、dmdb 入口/版本/摘要、DIsql 与 DPI 实际路径及摘要。"
    },
    {
      "id": "P1-CANDIDATE-COPY-CONSISTENCY",
      "severity": "P1",
      "initial_issue": "初次阅读候选包时仍为旧脚本副本，手册引用的 bind_probe.py 和新 payload_contract.cjs 尚未同步。",
      "status": "fixed_and_rechecked_in_actual_candidate",
      "resolution": "主代理完成同步后，按候选 manifest a2c57bdbecff1fe68d310107d1907755463f22d2e71d765e487dfca3a2e99cd0 重新核验实际包，15 个引用文件全部存在且摘要、大小匹配。"
    },
    {
      "id": "HARDENING-PYTHON-OPTIMIZATION",
      "severity": "hardening",
      "status": "fixed_and_independently_regressed",
      "resolution": "finalize 入口拒绝 Python 优化模式，避免 assert 门禁被移除。"
    },
    {
      "id": "HARDENING-ADMIN-PRINCIPALS",
      "severity": "hardening",
      "status": "fixed_and_statically_rechecked",
      "resolution": "候选导入器已拒绝 SYS、PUBLIC、SYSDBA、SYSAUDITOR、SYSSSO。"
    }
  ],
  "candidate_reference_file_check": {
    "checked_count": 15,
    "all_exist": true,
    "all_manifest_covered": true,
    "all_size_and_sha256_match": true,
    "files": [
      "prepare_target.py",
      "probe_target.cjs",
      "bind_probe.py",
      "import_dm.cjs",
      "session_guard.cjs",
      "payload_contract.cjs",
      "identity_clones.cjs",
      "finalize_identity.py",
      "capture_roles.py",
      "capture_role_evidence.cjs",
      "verify_dm_metadata.cjs",
      "verification/scripts/export_dm_verify.cjs",
      "verification/scripts/dm_verify_contract.py",
      "verification/private/mysql-upgraded-baseline.json",
      "verification/private/expected-normalized-manifest.json"
    ]
  },
  "manual_interface_review": {
    "file": "private/dm-package/INSTALL.md",
    "status": "pass",
    "capability_probe_then_binding_then_import": "consistent",
    "nohup_background_import_and_reconnect_log_paths": "consistent",
    "probe_and_run_directory_selection": "consistent",
    "finalize_arguments": "consistent",
    "capture_roles_getpass_stdin_arguments": "consistent",
    "metadata_verifier_arguments_and_report_path": "consistent",
    "value_verifier_pipeline_arguments_and_default_baselines": "consistent",
    "customer_pack30_default_and_app_probe_separation": "consistent",
    "expected_tables": 119,
    "expected_columns": 1392,
    "expected_rows": 985311,
    "old_system_stopped_writing_statement": "consistent_with_user_confirmation",
    "rehearsal_build_not_misrepresented_as_customer_acceptance": true,
    "ddl_partial_commit_failure_requires_dba_review": "explicitly_documented"
  },
  "additional_static_review": {
    "sysdba_password_handling": "getpass to child stdin; no administrator password in argv or persistent configuration",
    "disql_session_guard": "each actual DIsql session includes target fingerprint guard",
    "probe_scope": "dedicated FOODSAFE..._PROBE schema; synthetic data only",
    "provisioning_limit": "checks precede CREATE, but DDL is not transactionally atomic; partial failure requires DBA inspection"
  },
  "conclusion": {
    "status": "pass_for_reviewed_candidate",
    "new_p0_findings": 0,
    "new_p1_findings": 0,
    "unresolved_p0_p1_findings": 0,
    "outer_package_sealing_at_review_time": "pending主代理生成与最终核验 PAYLOAD.sha256、压缩包和外层.sha256",
    "customer_database_acceptance": "not_performed_by_this_reviewer"
  }
}