YoVinchen
c3bad0f186
Some checks failed
verify / verify (push) Has been cancelled
Expose the verified synthetic retrieval path through a typed React client and a non-root Nginx edge while keeping database credentials and data-network reachability out of the browser tier. A fixed-origin gateway preserves request boundaries and now closes upstream streams even when downstream disconnects before body iteration. The deployment ADR and runbooks record the four-network topology and its accepted Web edge-egress risk. Constraint: The previously exposed Bailian key must be revoked and no live provider credential may enter Git, images, logs, or the browser. Rejected: Connect Web directly to the data network | expands lateral reach to PostgreSQL. Rejected: Publish the database-aware API on the edge network | gives a credential-bearing process a public default route. Rejected: Buffer streaming responses in either proxy | prevents incremental chat delivery in the future. Confidence: high Scope-risk: moderate Reversibility: clean Directive: Do not mark Stage 1 or Stage 2 complete until the rotated-key live smoke and remaining stage gates pass. Tested: make verify; 65 backend tests; 14 frontend tests; Docker image build; container health and isolation probes; real HTTP demo/status/search/docs/OpenAPI checks. Not-tested: Live Bailian models, real document ingestion, business chat SSE generation, and final browser screenshot automation because the browser skill runtime was unavailable.
设计文档索引
当前进度
- Stage 0“仓库、安全和设计基线”已完成并推送。
- Stage 1“模型与数据库 PoC”正在进行。
- 当前整体完成度约 12%，合理区间为 10%–15%。
- 00–03 的设计基线已完成；业务代码完成度约 18%，Stage 1 安全离线子阶段约 95%。
- 后端离线链路、20 条 synthetic 数据、React 离线演示、Nginx 单入口和四网络隔离均已验收；真实百炼三模型 smoke 仍待旧 Key 撤销并轮换。
- Stage 2 仍为
TODO：当前只完成了不依赖云密钥的前置，Worker 租约、完整 Compose 和产品工作流尚未完成。 - 后续状态、依赖、验收证据、工期和提交节点以 项目全生命周期 TODO 为准。
文档列表
| 文档 | 内容 | 状态 |
|---|---|---|
| 00-overall-design.md | 项目范围、总体架构、技术选型、接口、数据模型与 RAG 主流程 | 设计基线完成 |
| 01-data-and-evaluation.md | 语料治理、解析、验证集生成、向量入库测试和论文评测 | 设计基线完成 |
| 02-deployment-and-security.md | Docker Compose、配置、密钥、监控、备份和安全 | 设计基线完成 |
| 03-implementation-plan.md | 阶段计划、完成定义、测试与验收清单 | 设计基线完成 |
| 04-project-todo.md | 从当前状态到最终答辩、发布和归档的任务看板 | Stage 1 进行中 |
| 05-stage1-runbook.md | Secret 初始化、离线数据库/seed、真实三模型 smoke 和排障命令 | Stage 1 运行手册 |
| 06-frontend-demo-runbook.md | React/Nginx 离线检索演示、同源 API、开发与验收命令 | 离线前端运行手册 |
| adr/ | 不易逆转的架构决策记录 | 持续维护 |
文档中的工作空间地址统一使用 <workspace-id> 占位符；真实地址和凭证均属于部署配置，不写入仓库。
建议首次阅读按 00 → 01 → 02 → 03 → 04 的顺序；日常执行查看 04，数据库/模型 PoC 查看 05，React 演示查看 06。