Make the first RAG slice executable without risking production data

The Stage 1 foundation now proves provider contracts with mocks and validates PostgreSQL/pgvector ingestion, approval binding, retrieval, reranking, and idempotency using only synthetic data. Live Bailian validation remains gated on rotating the exposed key.

Constraint: The key shown in chat is compromised and cannot be used or committed

Rejected: Mark Stage 1 complete from mock and offline results | real three-model smoke is still required

Confidence: high

Scope-risk: moderate

Reversibility: clean

Directive: Do not enable real-data ingestion until Stage 3 cloud approval and outbound manifest controls are enforced end to end

Tested: make verify; 41 pytest tests; strict mypy; Ruff; Compose config; pinned image build; empty-volume migration; role denial; two idempotent 20-vector seeds; database restart persistence

Not-tested: Live Bailian calls require a newly rotated key; React product UI is not implemented

README.md

@@ -2,7 +2,7 @@
 
 本仓库用于“基于 RAG 的地质找矿知识问答系统构建与应用”毕业设计。系统计划采用 Python/FastAPI 后端、React/TypeScript 前端、PostgreSQL + pgvector 向量存储，以及阿里云百炼的 `text-embedding-v4`、`qwen3-rerank`、`deepseek-v4-flash`。
 
-当前阶段为“设计与工程骨架”。完整方案、数据构建、模型接入、Docker 部署和评测方法见 [docs/README.md](docs/README.md)。在实现阶段开始前，仓库不会伪装成已经可运行的成品。
+当前处于 Stage 1“模型与数据库 PoC”：设计基线与离线 pgvector/适配器/seed 子闭环可运行，真实百炼 smoke 仍待轮换后的新 Key，React 产品功能尚未开始。完整方案、状态和评测方法见 [docs/README.md](docs/README.md)，仓库不会把 PoC 伪装成已经完成的产品。
 
 ## 目录
 
@@ -42,4 +42,19 @@
 - [数据与评测设计](docs/01-data-and-evaluation.md)
 - [部署与安全设计](docs/02-deployment-and-security.md)
 - [实施计划与验收](docs/03-implementation-plan.md)
+- [全生命周期 TODO 与进度](docs/04-project-todo.md)
+- [Stage 1 PoC 运行手册](docs/05-stage1-runbook.md)
 - [架构决策记录](docs/adr/README.md)
+
+## 当前可运行入口
+
+```bash
+make setup-hooks
+make backend-sync
+bash scripts/init-local-secrets.sh
+docker compose up -d --build db migrate
+docker compose --profile tools run --rm seed-demo-offline
+make verify
+```
+
+这组命令不需要百炼 Key，只使用 20 条虚构数据验证 pgvector 写入、检索、重排和幂等。真实模型运行必须先轮换聊天中已暴露的旧 Key，再按 [Stage 1 运行手册](docs/05-stage1-runbook.md) 操作。