Files

verify / verify (push) Has been cancelled

Details

Make the first RAG slice executable without risking production data

The Stage 1 foundation now proves provider contracts with mocks and validates PostgreSQL/pgvector ingestion, approval binding, retrieval, reranking, and idempotency using only synthetic data. Live Bailian validation remains gated on rotating the exposed key.

Constraint: The key shown in chat is compromised and cannot be used or committed

Rejected: Mark Stage 1 complete from mock and offline results | real three-model smoke is still required

Confidence: high

Scope-risk: moderate

Reversibility: clean

Directive: Do not enable real-data ingestion until Stage 3 cloud approval and outbound manifest controls are enforced end to end

Tested: make verify; 41 pytest tests; strict mypy; Ruff; Compose config; pinned image build; empty-volume migration; role denial; two idempotent 20-vector seeds; database restart persistence

Not-tested: Live Bailian calls require a newly rotated key; React product UI is not implemented

2026-07-12 15:41:58 +08:00

postgres/init

Make the first RAG slice executable without risking production data

2026-07-12 15:41:58 +08:00

README.md

Establish a safe foundation before implementing the geology RAG system

2026-07-12 14:42:11 +08:00

README.md

Operations

本目录保存部署和数据库初始化等运维资产，不保存任何凭证。

postgres/init/：实现阶段加入仅在全新数据卷执行的角色、扩展和 schema 初始化脚本；
迁移由后端 Alembic 管理，初始化脚本不得代替版本化迁移；
所有密码通过 secrets/ 挂载，脚本只能读取 *_FILE 路径，不得打印其内容。