feat: 根目录文档、脚本、gitignore

2026-10-08 16:15:33 +08:00
commit e98660ce4e
284 changed files with 26838 additions and 0 deletions
@@ -0,0 +1,12 @@
+# Architecture Review Checklist
+
+| Item | Description | Status | Evidence | Notes |
+|---|---|---|---|---|
+| Scope | Architecture scope matches requirements |  |  |  |
+| Constraints | Constraints and assumptions documented |  |  |  |
+| Interfaces | Key interfaces defined |  |  |  |
+| Data model | Core data model documented |  |  |  |
+| Tradeoffs | Tradeoffs and alternatives evaluated |  |  |  |
+| Risks | Architecture risks identified and mitigations planned |  |  |  |
+| Non-functional | Performance, availability, security targets defined |  |  |  |
+| Evolution | Migration/compatibility plan documented |  |  |  |
@@ -0,0 +1,12 @@
+# Code Review Checklist
+
+| Item | Description | Status | Evidence | Notes |
+|---|---|---|---|---|
+| Requirements | Implementation matches acceptance criteria |  |  |  |
+| Tests | Unit/functional tests updated and passing |  |  |  |
+| Error handling | Errors handled and user-facing behavior defined |  |  |  |
+| Performance | Performance impact assessed |  |  |  |
+| Security | Security considerations reviewed |  |  |  |
+| Maintainability | Code readability and structure acceptable |  |  |  |
+| Compatibility | Backward compatibility assessed |  |  |  |
+| Logging/Monitoring | Observability changes documented |  |  |  |
@@ -0,0 +1,13 @@
+# Privacy & Compliance Review Checklist
+
+| Item | Description | Status | Evidence | Notes |
+|---|---|---|---|---|
+| Lawfulness/Transparency | Legal basis and user notices are documented |  |  |  |
+| Purpose limitation | Data use limited to defined purposes |  |  |  |
+| Data minimization | Only necessary data collected |  |  |  |
+| Data quality | Data accuracy and update mechanisms defined |  |  |  |
+| Storage limitation | Retention period defined and enforced |  |  |  |
+| Security safeguards | Security controls for personal data |  |  |  |
+| Individual rights | Access/rectify/delete requests supported |  |  |  |
+| Accountability | Audit trail and responsibility defined |  |  |  |
+| DPIA | DPIA completed for high-risk processing |  |  |  |
@@ -0,0 +1,12 @@
+# Security Review Checklist
+
+| Item | Description | Status | Evidence | Notes |
+|---|---|---|---|---|
+| Threat model | Threat model exists for new/changed components |  |  |  |
+| AuthN/AuthZ | Access control and permission checks reviewed |  |  |  |
+| Secrets | Secrets managed securely (no hard-coded secrets) |  |  |  |
+| Input validation | User/externally sourced inputs validated |  |  |  |
+| Dependencies | Third-party dependencies reviewed/approved |  |  |  |
+| Logging | Security-relevant events logged |  |  |  |
+| Incident response | Rollback/mitigation plan documented |  |  |  |
+| Data protection | Sensitive data protected in transit/at rest |  |  |  |