Data Horizon 第一阶段实施路线图与任务包索引
0. 路线图规则
本文是 work-package 级状态入口，不是产品定义、工程排期或每日 handoff。
排序原则：
- 先证明独立 IH 信息产品闭环；
- 再收束 reusable objects 和 internal-machine Interface；
- 再用至少两个异构 B workloads 验证 portability；
- C 当前不进入 Roadmap；
- consumer-specific 需求只能触发 generic capability evidence 或明确 Adapter；
- 每项分别记录 Governance、Implementation、Production 和 Acceptance。
- 路线重排不等于撤回既有支持；compatibility assets 的安全修复、运行维护和事故恢复可独立继续，任何 breaking transition 必须有迁移包和单独授权。
1. 状态定义
| 状态轴 | 可能状态 |
|---|---|
| Governance | Proposed direction / Candidate / Compatibility-only / Not approved |
| Implementation | Absent / Partial / Substantial / Implemented |
| Production | Not verified / Partial / Verified / Known drift |
| Acceptance | Not accepted / Local only / Activation-gated / Accepted |
当前读法（2026-08-31）：第一阶段收束完成。 第一阶段已按 Phase 1 Closure 口径收束完成（收束判定 PASS）；四轴历史状态为 Governance Partial / Implementation Substantial / Production Partial / Acceptance Not accepted，保留为历史事实、不倒推为 Accepted。本路线图自此按第一阶段历史与兼容义务索引读取：各任务包与 gate 状态不改写，兼容义务与安全维护继续有效；未了结事项的处置去向登记在 第二阶段实施计划的遗留处置清单。第二阶段已提议、未启动。
2. 当前路线
3. Active / candidate work packages
| Order | Work package | Governance | Implementation | Production | Acceptance | Next gate |
|---|---|---|---|---|---|---|
| 1 | DH-IH-01 Information Operations Trial | Proposed direction；CPI trial charter Owner-approved | Implemented：bounded local CPI trial + replay/tamper tests；CPI BLS provenance/acquisition-time remediation deployed | Partial：正常 schedule sync 已回读；negative receipt 证明 current architecture 无 macro raw custody/operator enforcement | Local only | storage/review enforcement 决策已延后（deferred future decision）；真实 operator closure 仍待独立证据 |
| 2 | DH-IH-02 Evidence and Lifecycle Trial | Proposed semantic direction；无已批准的 lifecycle/consumption trial | Absent in canonical：P2/P3 trial-local 探索仅作为历史工程事实保留，未获 accepted proposal 批准，不登记为治理/路线状态或 completion claim | Not verified：无部署或生产动作 | Not accepted | lifecycle fixture/replay 仍待独立授权；相关架构决策为 deferred future decision |
| 3 | DH-IH-03 Operations Evidence Registry | Candidate | Evidence surfaces substantial/fragmented | Partial | Not accepted | 定义 release/migration/job/cost/acceptance evidence register |
| 4 | DH-OBJ-01 Information Identity/Lifecycle Evaluation | Candidate | 候选比较与反事实 deletion tests substantial（仅作架构分类）；未采用正式对象 | Not verified across real producers/consumers | Not accepted | Owner 对正式对象与 lifecycle 形态的决策为 deferred future decision |
| 5 | DH-IF-01 Consumer-neutral Interface Evaluation | Candidate | current Interfaces 仍并存；query/change/bulk 分类比较待 reference evidence；无已批准的 Adapter proof | Not verified：无真实 consumer session 或新 Interface | Local only | Owner 决定 Feed classification；正式形态、ledger 与新 endpoint 继续 Deferred |
| 6 | DH-RIGHTS-01 Rights and Output-purpose Inventory | Proposed direction | Technical authz substantial | Legal rights evidence absent | Not accepted | source→asset→output→purpose/consumer evidence |
| 7 | DH-MACRO-01 Release/Observation/Vintage Evaluation | Candidate | Lifecycle/retries/receipts substantial；occurrence/observation/vintage semantic split 候选仍待 Owner 决策，不做 DDL | Partial：lifecycle columns/index、heartbeat 与正常 sync readback 已在生产（2026-08-27 只读确认）；current fill/revision/provider-vintage branch 未取证 | Not accepted | 两个 provider vintages + revision readback；storage decision 为 deferred future decision |
| 8 | DH-CTRL-01 Configuration Concurrency | Candidate | Current control plane substantial | Known overwrite incident | Not accepted | conditional-write/patch/command comparison |
| 9 | DH-CTRL-02 Scheduler Scope | Candidate | Partial dual mechanism；selected static jobs have receipts | Partial；new receipts not deployed/read back | Not accepted | scope decision + rollback/restart tests |
| 10 | DH-CTRL-03 Migration History | Proposed direction, implementation candidate | Manual assets + guarded macro migration; no ledger/checksum/lock | Concrete drift repaired；new migration not executed | Not accepted | tool-neutral ledger/checksum/lock/receipt proposal |
| 11 | DH-B-01 Existing News v1 Bounded Acceptance | Compatibility-only | Implemented/tested；tail anchor fixed at HEAD | Index gate closed; HEAD not deployed | Activation-gated | deploy/readback + secret-safe wire/cursor replay → bounded window |
| 12 | DH-B-02 Heterogeneous B Pilot | Candidate | 无已批准的 pilot 或 Adapter proof；external rights 均 withheld | 无真实 B session、rights clearance 或第二 B evidence | Not accepted | real pilot charter + 第二异构 B + rights/SLA/metering/support/exit evidence |
4. Existing work packages reclassified
4.1 DH-WP-001 Trading Matrix source candidate
Current classification: internal-machine validation work package / compatibility practice, not Data Horizon overall P0.
| Axis | Status |
|---|---|
| Governance | Consumer-specific validation package；generic source-quality parts remain candidates |
| Implementation | Substantial：baseline/export/UI/sourceprofile/rubric exist |
| Production | Not re-verified as complete loop |
| Acceptance | TM trial consumption and feedback-driven closure not accepted |
| Next gate | Split generic source-quality evidence from TM Adapter；do not freeze TM schema as DH object；preserve existing export/API/feedback compatibility |
4.2 DH-WP-002 KOL Control Room
Current classification: IH/private-information practice + TM Adapter, not a trading product owned by DH.
| Axis | Status |
|---|---|
| Governance | Generic perception/rights/review scope pending；trading semantics stay in Adapter |
| Implementation | Substantial R1–R3 surfaces and jobs |
| Production | Not re-verified comprehensively |
| Acceptance | Static profile automation and TM validation closure incomplete |
| Next gate | IH workflow trial、rights evidence、counterfactual TM-dependency test、generic output challenge；不授权删除现有 TM surfaces |
4.3 Former WP-P0-01 Ops workspace
Replaced by DH-IH-01. Existing UI is implementation material; success is measured by user workflow, not dashboard breadth.
4.4 Former WP-P0-02 source health
Implementation is substantial, not Pending. It enters DH-IH-01 and DH-CTRL hardening; production control acceptance remains open.
4.5 Former WP-P0-03 review gate
Push-path implementation exists. It enters DH-IH-02; cross-output scope and lifecycle semantics remain open.
4.6 Former WP-P1-01/P1-02/P1-03
Event/signal objects, contract shapes and feedback evidence are split into DH-OBJ-01, DH-IF-01 and DH-IH-03. Existing TM-centric contracts remain compatibility/practice assets.
4.7 Former WP-P2-01 source authorization
Technical implementation is substantial. Legal rights and output-purpose evidence move to DH-RIGHTS-01.
4.8 Former WP-P3-01 historical market data
No durable market-data asset closure exists. Current crypto pass-through is separately recorded and does not close this item. Durable market data remains a later candidate after independent closure and cost/rights evaluation.
5. Deterministic production gates
这些 gate 不改变产品优先级，但可按独立授权继续推进。
| Gate | Status | Authorization |
|---|---|---|
Image task (status, raw_news_id) index | Closed：production verified | No rerun |
| News bounded consumer acceptance | Failed strict target：P95 90 秒与 stop-line 恢复达标，item latency P50、gate age P95 与 transport reliability 未达标（2026-08 bounded window） | 不扩大生产动作；任何重试需独立授权窗口 |
| Macro schedule-only deployment/readback | Deployment complete；2026-08-27 只读回读 schedule heartbeat ok（upserted=136、backfilled=16、failed=0）；跨周期 no-churn 仍 Partial | 继续只读验收；手工触发另行授权 |
| Macro actual-fill lifecycle migration/deploy | Production schema/index 已只读确认；actual pipeline heartbeat ok（2026-08-27，outcome=no_work）；CPI schedule provenance/acquisition-time remediation 已部署并完成正常 sync/readback；behavior acceptance 仍不完整 | current fill/revision/vintage 与多周期 no-churn 尚需独立证据；job trigger 不在本包默认授权内 |
| Generic job receipt production readback | Deployed；standardize 与 macro schedule/actual receipts 已于 2026-08-27 只读回读 | heartbeat receipt 不当产品验收 |
| Standardize multi-worker activation | workers=4 已在生产激活，2026-08-27 heartbeat ok、无积压；strict performance acceptance 未通过 | 长期 SLO 与故障恢复未验收；accepted checkpoint 29dfe4e2 未整合、未部署 |
| Request-log redaction deployment verification | 已部署；受影响 Open API key 轮换与旧 key 撤销完成（Owner 授权）；D-14 其他历史凭据仍 Deferred | 历史平台日志留存为 residual；知识库不保存任何 key 值 |
| R7 cleanup | Closed：terminal predicate=0 | historical receipt gap retained as proposed audit residual; no rerun |
6. Entry criteria
一个 work package 进入工程设计前必须有：
- 对应 Gap ID 和 consumer class；
- current evidence 与 production evidence；
- product/governance status；
- rights、quality、cost 和 failure boundary；
- consumer-specific 反事实 deletion test（仅用于架构分类，不授权删除或停用现有 runtime）；
- 若影响现有 TM seam，提供 compatibility manifest、consumer regression、deprecation/rollback 方案；
- acceptance sample、timebox、stop conditions 和 Owner；
- 需要的 production/credential/DDL/DML 单独授权说明。
7. Completion criteria
Implemented 不是 Accepted。任务包只有在以下全部满足时才能标 Accepted：
- canonical objective 未漂移；
- implementation tests 通过；
- required deployment/config/migration 已有证据；
- user/consumer acceptance 在有界窗口完成；
- rollback/exit 与 residual risks 已记录；
- 不把 Adapter success 宣称为 core product success。
- 现有 TM data/API/scope/feedback/direct-push/jobs/readback 没有无迁移退化。
Changelog / 演化记录
2026-08-31：登记第一阶段收束完成（判定 PASS）；本路线图改按第一阶段历史与兼容义务索引读取，任务包与 gate 状态不改写，未了结事项处置去向指向第二阶段实施计划。
2026-08-27：工程基线刷新至 origin/main 65fde06d；按事实地图更新 deterministic gates（standardize workers=4 已激活且 heartbeat ok、generic job receipts 与 macro schedule/actual 已只读回读、日志脱敏已部署并完成受影响 key 轮换/撤销、News bounded window strict target 未通过）；登记 Phase 1 Closure 执行读法；accepted checkpoint 29dfe4e2 仍未整合未部署，生产精确 SHA 未确认。
2026-08-25：P2 lifecycle fixture、P3 two-workload Adapter 与 P4 candidate decision packet 的工程探索未获得 accepted proposal 批准（CPI 提案非目标明确不含 P2/P3）；相应条目从 active roadmap 移除，不作为任何状态轴依据。P4 相关正式对象 / Feed / lifecycle storage 决策保留为 deferred future decision，本发布不包含决策包或链接。
2026-08-25：Owner 批准 DH-IH-01 美国 CPI 受控域实施状态回写、有界生产只读验收、scoped commit/push、既有 Railway deployment approval 及后续 raw-artifact/operator acceptance package。本地 trial 11/11 checks、macro/model tests 与零告警 lint 通过；commit 1b4a768a 部署成功，19:18 正常 schedule sync 将 7 条 CPI rows 修复为稳定 FRED/BLS identity 与非空 acquisition time，且保留 lifecycle。后续 bounded package 形成 negative closure receipt：生产 Review/Audit 已部署但只门控 news push，macro 无 consumer-neutral raw custody、digest/retention/rights linkage 或 operator enforcement；BLS pseudo-source 为 disabled 且 0 raw rows，未复活或伪造 artifact。因此 Implementation 标 Implemented、Production 标 Partial、Acceptance 保持 Local only；Owner 后续决定将 storage/review enforcement 延后（deferred future decision）。证据见 DH-IH-01 CPI trial evidence。
2026-08-25：同步路线图至工程 HEAD 18838212a653，新增 macro lifecycle、generic receipt、News tail、standardize activation 与 request-log redaction 的确定性生产 gates；所有未部署能力保持 Production pending。将开放 L2 下误写为 Accepted direction 的条目恢复为 Proposed direction。
2026-08-21：重建路线图。由 TM-first 顺序改为 Gate A 独立 IH 闭环 → Gate B reusable objects/Interfaces → Gate C B portability，并并行推进 Gate D control hardening；所有条目分开记录 Governance/Implementation/Production/Acceptance；重分类 WP-001、WP-002、P0/P1/P2/P3 历史任务；生产 gate 保持独立授权。
2026-06-19：上一版以 DH-WP-001、DH-WP-002 和 TM 消费为 P0-Now。该顺序和当时状态保留在 Git 历史中，不继续作为 current roadmap。