{ "metadata": { "generated_at": "2026-05-27T14:52:04+08:00", "source_reports": [ "/root/.openclaw/workspace/talent-review-system/docs/roadmap/POSITION_CAPABILITY_HARDCODED_RULES_REGISTRY_APPLY_PREP.md", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/position_capability_hardcoded_rules_registry_apply_prep.json", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/POSITION_CAPABILITY_HARDCODED_RULES_REFACTOR_PREVIEW.md", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/position_capability_hardcoded_rules_refactor_preview.json", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/POSITION_CAPABILITY_TASK_ASSET_AUDIT.md", "/root/.openclaw/workspace/talent-review-system/docs/roadmap/position_capability_task_asset_audit.json", "/var/www/talent-review/outputs/position_capability_task_config_center_summary_v1.json", "/var/www/talent-review/outputs/position_capability_schema_registry_v1.json", "/var/www/talent-review/outputs/position_capability_permission_policy_registry_v1.json", "/var/www/talent-review/outputs/position_capability_impact_registry_v1.json" ], "stage": "P0_POSITION_CAPABILITY_HARDCODED_RULES_REGISTRY", "purpose": "沉淀岗位-能力-任务配置中心的高风险硬编码规则分类、目标 schema 映射、P0 优先级、影响预览要求、人工复核要求、权限审批要求、红线和后续 controlled apply 路线。", "warning": "This is a P0 readonly registry. It does not modify code, replace hardcoded logic, write database, change active positions, execute people actions, or write back to Feishu.", "writes_database": false, "modifies_code": false, "replaces_hardcoded_logic": false, "modifies_active_position": false, "modifies_grade_system": false, "modifies_capability_model": false, "modifies_permission_bundle": false, "creates_assessment_task": false, "creates_training_task": false, "executes_certification": false, "modifies_performance_result": false, "executes_people_action": false, "feishu_writeback_required": false, "expands_permission": false, "impact_preview_required_before_refactor": true, "controlled_apply_gate_required_before_refactor": true }, "registry_summary": { "high_critical_hardcoded_risk_asset_count": 2981, "hardcoded_type_count": 13, "p0_priority_type_count": 11, "registry_phase": "Phase_0_hardcoded_inventory", "position_capability_schema_registry_available": true, "position_capability_schema_registry_path": "/outputs/position_capability_schema_registry_v1.json", "position_capability_permission_policy_registry_available": true, "position_capability_permission_policy_registry_path": "/outputs/position_capability_permission_policy_registry_v1.json", "position_capability_impact_registry_available": true, "position_capability_impact_registry_path": "/outputs/position_capability_impact_registry_v1.json" }, "hardcoded_type_taxonomy": [ { "type_id": "hardcoded_position_or_fpos", "type_name": "hardcoded position or fpos", "description": "position / FPOS / legacy position / placeholder position", "target_schema_object": "position_config_base", "business_risk": "May affect position governance, Talent Review OS, profile/cadre archive, org capability diagnosis, org canvas, people actions, permissions, or external mappings.", "p0_priority": true, "candidate_count": 520, "requires_manual_review": true, "requires_permission_approval": false, "impact_preview_required": true, "direct_refactor_allowed": false, "recommended_phase": "Phase 0 inventory then Phase 1 registry extraction" }, { "type_id": "hardcoded_grade", "type_name": "hardcoded grade", "description": "grade / level / job family / career path / salary band", "target_schema_object": "job_family_grade_config", "business_risk": "May affect position governance, Talent Review OS, profile/cadre archive, org capability diagnosis, org canvas, people actions, permissions, or external mappings.", "p0_priority": true, "candidate_count": 310, "requires_manual_review": true, "requires_permission_approval": false, "impact_preview_required": true, "direct_refactor_allowed": false, "recommended_phase": "Phase 0 inventory then Phase 1 registry extraction" }, { "type_id": "hardcoded_responsibility", "type_name": "hardcoded responsibility", "description": "responsibility / key task / decision right / collaboration interface", "target_schema_object": "position_responsibility_config", "business_risk": "May affect position governance, Talent Review OS, profile/cadre archive, org capability diagnosis, org canvas, people actions, permissions, or external mappings.", "p0_priority": false, "candidate_count": 185, "requires_manual_review": true, "requires_permission_approval": false, "impact_preview_required": true, "direct_refactor_allowed": false, "recommended_phase": "Phase 1 registry extraction then Phase 2 impact preview" }, { "type_id": "hardcoded_qualification", "type_name": "hardcoded qualification", "description": "education / experience / skill / certification / values / promotion requirement", "target_schema_object": "position_qualification_config", "business_risk": "May affect position governance, Talent Review OS, profile/cadre archive, org capability diagnosis, org canvas, people actions, permissions, or external mappings.", "p0_priority": false, "candidate_count": 215, "requires_manual_review": true, "requires_permission_approval": false, "impact_preview_required": true, "direct_refactor_allowed": false, "recommended_phase": "Phase 1 registry extraction then Phase 2 impact preview" }, { "type_id": "hardcoded_capability_model", "type_name": "hardcoded capability model", "description": "capability dimensions / competency dimensions / weights / behavior indicators", "target_schema_object": "capability_model_config", "business_risk": "May affect position governance, Talent Review OS, profile/cadre archive, org capability diagnosis, org canvas, people actions, permissions, or external mappings.", "p0_priority": true, "candidate_count": 340, "requires_manual_review": true, "requires_permission_approval": false, "impact_preview_required": true, "direct_refactor_allowed": false, "recommended_phase": "Phase 0 inventory then Phase 1 registry extraction" }, { "type_id": "hardcoded_task_rule", "type_name": "hardcoded task rule", "description": "assessment / training / certification / probation / promotion / reassessment task rules", "target_schema_object": "position_task_rule_config", "business_risk": "May affect position governance, Talent Review OS, profile/cadre archive, org capability diagnosis, org canvas, people actions, permissions, or external mappings.", "p0_priority": true, "candidate_count": 210, "requires_manual_review": true, "requires_permission_approval": false, "impact_preview_required": true, "direct_refactor_allowed": false, "recommended_phase": "Phase 1 registry extraction then Phase 2 impact preview" }, { "type_id": "hardcoded_assessment_linkage", "type_name": "hardcoded assessment linkage", "description": "applicable / mandatory / optional assessment templates and result mapping requirements", "target_schema_object": "position_assessment_linkage_config", "business_risk": "May affect position governance, Talent Review OS, profile/cadre archive, org capability diagnosis, org canvas, people actions, permissions, or external mappings.", "p0_priority": true, "candidate_count": 260, "requires_manual_review": true, "requires_permission_approval": false, "impact_preview_required": true, "direct_refactor_allowed": false, "recommended_phase": "Phase 0 inventory then Phase 1 registry extraction" }, { "type_id": "hardcoded_training_certification_requirement", "type_name": "hardcoded training certification requirement", "description": "training catalogs / certification requirements / key role prerequisites", "target_schema_object": "position_training_certification_linkage_config", "business_risk": "May affect position governance, Talent Review OS, profile/cadre archive, org capability diagnosis, org canvas, people actions, permissions, or external mappings.", "p0_priority": true, "candidate_count": 170, "requires_manual_review": true, "requires_permission_approval": false, "impact_preview_required": true, "direct_refactor_allowed": false, "recommended_phase": "Phase 1 registry extraction then Phase 2 impact preview" }, { "type_id": "hardcoded_performance_threshold", "type_name": "hardcoded performance threshold", "description": "performance thresholds and mappings to Talent Review / promotion / compensation / elimination", "target_schema_object": "position_performance_linkage_config", "business_risk": "May affect position governance, Talent Review OS, profile/cadre archive, org capability diagnosis, org canvas, people actions, permissions, or external mappings.", "p0_priority": true, "candidate_count": 165, "requires_manual_review": true, "requires_permission_approval": false, "impact_preview_required": true, "direct_refactor_allowed": false, "recommended_phase": "Phase 1 registry extraction then Phase 2 impact preview" }, { "type_id": "hardcoded_permission_bundle", "type_name": "hardcoded permission bundle", "description": "default page / data / field / action / approval / config permissions", "target_schema_object": "position_permission_bundle_config", "business_risk": "May affect position governance, Talent Review OS, profile/cadre archive, org capability diagnosis, org canvas, people actions, permissions, or external mappings.", "p0_priority": true, "candidate_count": 230, "requires_manual_review": true, "requires_permission_approval": true, "impact_preview_required": true, "direct_refactor_allowed": false, "recommended_phase": "Phase 1 registry extraction then Phase 2 impact preview" }, { "type_id": "hardcoded_people_action_constraint", "type_name": "hardcoded people action constraint", "description": "probation / promotion / transfer / demotion / elimination / cadre pool / org canvas constraints", "target_schema_object": "position_people_action_constraint_config", "business_risk": "May affect position governance, Talent Review OS, profile/cadre archive, org capability diagnosis, org canvas, people actions, permissions, or external mappings.", "p0_priority": true, "candidate_count": 190, "requires_manual_review": true, "requires_permission_approval": false, "impact_preview_required": true, "direct_refactor_allowed": false, "recommended_phase": "Phase 1 registry extraction then Phase 2 impact preview" }, { "type_id": "hardcoded_feishu_external_mapping", "type_name": "hardcoded feishu external mapping", "description": "Feishu fields / external training certification performance compensation mappings / webhook / writeback", "target_schema_object": "position_config_base", "business_risk": "May affect position governance, Talent Review OS, profile/cadre archive, org capability diagnosis, org canvas, people actions, permissions, or external mappings.", "p0_priority": true, "candidate_count": 120, "requires_manual_review": true, "requires_permission_approval": true, "impact_preview_required": true, "direct_refactor_allowed": false, "recommended_phase": "Phase 1 registry extraction then Phase 2 impact preview" }, { "type_id": "hardcoded_business_effective_position_rule", "type_name": "hardcoded business effective position rule", "description": "formal people action / active position interpretation / formal cadre usage / org canvas apply rules", "target_schema_object": "position_audit_version", "business_risk": "May affect position governance, Talent Review OS, profile/cadre archive, org capability diagnosis, org canvas, people actions, permissions, or external mappings.", "p0_priority": true, "candidate_count": 66, "requires_manual_review": true, "requires_permission_approval": true, "impact_preview_required": true, "direct_refactor_allowed": false, "recommended_phase": "Phase 1 registry extraction then Phase 2 impact preview" } ], "p0_priority_rules": [ { "priority_rank": 1, "hardcoded_type": "hardcoded_position_or_fpos", "target_schema_object": "position_config_base", "why_priority": "Foundation object or high blast-radius hardcoded rule; must be governed before any future replacement.", "affected_centers": [ "position_capability_task_config_center", "config_governance_center", "talent_review_os" ], "affects_talent_review": false, "affects_profile_or_cadre": true, "affects_org_capability": false, "affects_org_canvas": false, "affects_people_action": false, "affects_permission": false, "affects_feishu_or_external_system": false, "manual_review_required": true, "permission_approval_required": false, "impact_preview_required": true, "recommended_phase": "Phase 0 / Phase 1" }, { "priority_rank": 2, "hardcoded_type": "hardcoded_grade", "target_schema_object": "job_family_grade_config", "why_priority": "Foundation object or high blast-radius hardcoded rule; must be governed before any future replacement.", "affected_centers": [ "position_capability_task_config_center", "config_governance_center", "talent_review_os" ], "affects_talent_review": false, "affects_profile_or_cadre": true, "affects_org_capability": false, "affects_org_canvas": false, "affects_people_action": false, "affects_permission": false, "affects_feishu_or_external_system": false, "manual_review_required": true, "permission_approval_required": false, "impact_preview_required": true, "recommended_phase": "Phase 0 / Phase 1" }, { "priority_rank": 3, "hardcoded_type": "hardcoded_capability_model", "target_schema_object": "capability_model_config", "why_priority": "Foundation object or high blast-radius hardcoded rule; must be governed before any future replacement.", "affected_centers": [ "position_capability_task_config_center", "config_governance_center", "talent_review_os" ], "affects_talent_review": true, "affects_profile_or_cadre": true, "affects_org_capability": true, "affects_org_canvas": false, "affects_people_action": false, "affects_permission": false, "affects_feishu_or_external_system": false, "manual_review_required": true, "permission_approval_required": false, "impact_preview_required": true, "recommended_phase": "Phase 0 / Phase 1" }, { "priority_rank": 4, "hardcoded_type": "hardcoded_assessment_linkage", "target_schema_object": "position_assessment_linkage_config", "why_priority": "Foundation object or high blast-radius hardcoded rule; must be governed before any future replacement.", "affected_centers": [ "position_capability_task_config_center", "config_governance_center", "talent_review_os" ], "affects_talent_review": true, "affects_profile_or_cadre": false, "affects_org_capability": true, "affects_org_canvas": false, "affects_people_action": false, "affects_permission": false, "affects_feishu_or_external_system": false, "manual_review_required": true, "permission_approval_required": false, "impact_preview_required": true, "recommended_phase": "Phase 0 / Phase 1" }, { "priority_rank": 5, "hardcoded_type": "hardcoded_task_rule", "target_schema_object": "position_task_rule_config", "why_priority": "Foundation object or high blast-radius hardcoded rule; must be governed before any future replacement.", "affected_centers": [ "position_capability_task_config_center", "config_governance_center", "talent_review_os" ], "affects_talent_review": false, "affects_profile_or_cadre": false, "affects_org_capability": false, "affects_org_canvas": false, "affects_people_action": false, "affects_permission": false, "affects_feishu_or_external_system": false, "manual_review_required": true, "permission_approval_required": false, "impact_preview_required": true, "recommended_phase": "Phase 0 / Phase 1" }, { "priority_rank": 6, "hardcoded_type": "hardcoded_permission_bundle", "target_schema_object": "position_permission_bundle_config", "why_priority": "Foundation object or high blast-radius hardcoded rule; must be governed before any future replacement.", "affected_centers": [ "position_capability_task_config_center", "config_governance_center", "talent_review_os" ], "affects_talent_review": false, "affects_profile_or_cadre": false, "affects_org_capability": false, "affects_org_canvas": false, "affects_people_action": false, "affects_permission": true, "affects_feishu_or_external_system": false, "manual_review_required": true, "permission_approval_required": true, "impact_preview_required": true, "recommended_phase": "Phase 0 / Phase 1" }, { "priority_rank": 7, "hardcoded_type": "hardcoded_people_action_constraint", "target_schema_object": "position_people_action_constraint_config", "why_priority": "Foundation object or high blast-radius hardcoded rule; must be governed before any future replacement.", "affected_centers": [ "position_capability_task_config_center", "config_governance_center", "talent_review_os" ], "affects_talent_review": false, "affects_profile_or_cadre": false, "affects_org_capability": true, "affects_org_canvas": true, "affects_people_action": true, "affects_permission": false, "affects_feishu_or_external_system": false, "manual_review_required": true, "permission_approval_required": false, "impact_preview_required": true, "recommended_phase": "Phase 0 / Phase 1" }, { "priority_rank": 8, "hardcoded_type": "hardcoded_training_certification_requirement", "target_schema_object": "position_training_certification_linkage_config", "why_priority": "Foundation object or high blast-radius hardcoded rule; must be governed before any future replacement.", "affected_centers": [ "position_capability_task_config_center", "config_governance_center", "talent_review_os" ], "affects_talent_review": false, "affects_profile_or_cadre": false, "affects_org_capability": false, "affects_org_canvas": false, "affects_people_action": false, "affects_permission": false, "affects_feishu_or_external_system": false, "manual_review_required": true, "permission_approval_required": false, "impact_preview_required": true, "recommended_phase": "Phase 0 / Phase 1" }, { "priority_rank": 9, "hardcoded_type": "hardcoded_performance_threshold", "target_schema_object": "position_performance_linkage_config", "why_priority": "Foundation object or high blast-radius hardcoded rule; must be governed before any future replacement.", "affected_centers": [ "position_capability_task_config_center", "config_governance_center", "talent_review_os" ], "affects_talent_review": true, "affects_profile_or_cadre": false, "affects_org_capability": false, "affects_org_canvas": false, "affects_people_action": false, "affects_permission": false, "affects_feishu_or_external_system": false, "manual_review_required": true, "permission_approval_required": false, "impact_preview_required": true, "recommended_phase": "Phase 0 / Phase 1" }, { "priority_rank": 10, "hardcoded_type": "hardcoded_feishu_external_mapping", "target_schema_object": "position_config_base", "why_priority": "Foundation object or high blast-radius hardcoded rule; must be governed before any future replacement.", "affected_centers": [ "position_capability_task_config_center", "config_governance_center", "talent_review_os" ], "affects_talent_review": false, "affects_profile_or_cadre": false, "affects_org_capability": false, "affects_org_canvas": false, "affects_people_action": false, "affects_permission": false, "affects_feishu_or_external_system": true, "manual_review_required": true, "permission_approval_required": true, "impact_preview_required": true, "recommended_phase": "Phase 0 / Phase 1" }, { "priority_rank": 11, "hardcoded_type": "hardcoded_business_effective_position_rule", "target_schema_object": "position_audit_version", "why_priority": "Foundation object or high blast-radius hardcoded rule; must be governed before any future replacement.", "affected_centers": [ "position_capability_task_config_center", "config_governance_center", "talent_review_os" ], "affects_talent_review": true, "affects_profile_or_cadre": true, "affects_org_capability": false, "affects_org_canvas": true, "affects_people_action": true, "affects_permission": false, "affects_feishu_or_external_system": false, "manual_review_required": true, "permission_approval_required": true, "impact_preview_required": true, "recommended_phase": "Phase 0 / Phase 1" } ], "target_schema_mapping": [ { "target_schema_object": "position_config_base", "accepts_hardcoded_types": [ "hardcoded_position_or_fpos", "hardcoded_feishu_external_mapping" ], "migration_risk": "critical", "impact_preview_method": "use_position_capability_impact_registry_before_any_refactor", "rollback_requirement": "mandatory_rollback_plan", "audit_requirement": "mandatory_audit_trail" }, { "target_schema_object": "job_family_grade_config", "accepts_hardcoded_types": [ "hardcoded_grade" ], "migration_risk": "critical", "impact_preview_method": "use_position_capability_impact_registry_before_any_refactor", "rollback_requirement": "mandatory_rollback_plan", "audit_requirement": "mandatory_audit_trail" }, { "target_schema_object": "position_responsibility_config", "accepts_hardcoded_types": [ "hardcoded_responsibility" ], "migration_risk": "high", "impact_preview_method": "use_position_capability_impact_registry_before_any_refactor", "rollback_requirement": "mandatory_rollback_plan", "audit_requirement": "mandatory_audit_trail" }, { "target_schema_object": "position_qualification_config", "accepts_hardcoded_types": [ "hardcoded_qualification" ], "migration_risk": "high", "impact_preview_method": "use_position_capability_impact_registry_before_any_refactor", "rollback_requirement": "mandatory_rollback_plan", "audit_requirement": "mandatory_audit_trail" }, { "target_schema_object": "capability_model_config", "accepts_hardcoded_types": [ "hardcoded_capability_model" ], "migration_risk": "critical", "impact_preview_method": "use_position_capability_impact_registry_before_any_refactor", "rollback_requirement": "mandatory_rollback_plan", "audit_requirement": "mandatory_audit_trail" }, { "target_schema_object": "position_task_rule_config", "accepts_hardcoded_types": [ "hardcoded_task_rule" ], "migration_risk": "high", "impact_preview_method": "use_position_capability_impact_registry_before_any_refactor", "rollback_requirement": "mandatory_rollback_plan", "audit_requirement": "mandatory_audit_trail" }, { "target_schema_object": "position_assessment_linkage_config", "accepts_hardcoded_types": [ "hardcoded_assessment_linkage" ], "migration_risk": "high", "impact_preview_method": "use_position_capability_impact_registry_before_any_refactor", "rollback_requirement": "mandatory_rollback_plan", "audit_requirement": "mandatory_audit_trail" }, { "target_schema_object": "position_training_certification_linkage_config", "accepts_hardcoded_types": [ "hardcoded_training_certification_requirement" ], "migration_risk": "high", "impact_preview_method": "use_position_capability_impact_registry_before_any_refactor", "rollback_requirement": "mandatory_rollback_plan", "audit_requirement": "mandatory_audit_trail" }, { "target_schema_object": "position_performance_linkage_config", "accepts_hardcoded_types": [ "hardcoded_performance_threshold" ], "migration_risk": "high", "impact_preview_method": "use_position_capability_impact_registry_before_any_refactor", "rollback_requirement": "mandatory_rollback_plan", "audit_requirement": "mandatory_audit_trail" }, { "target_schema_object": "position_permission_bundle_config", "accepts_hardcoded_types": [ "hardcoded_permission_bundle" ], "migration_risk": "critical", "impact_preview_method": "use_position_capability_impact_registry_before_any_refactor", "rollback_requirement": "mandatory_rollback_plan", "audit_requirement": "mandatory_audit_trail" }, { "target_schema_object": "position_people_action_constraint_config", "accepts_hardcoded_types": [ "hardcoded_people_action_constraint" ], "migration_risk": "critical", "impact_preview_method": "use_position_capability_impact_registry_before_any_refactor", "rollback_requirement": "mandatory_rollback_plan", "audit_requirement": "mandatory_audit_trail" }, { "target_schema_object": "position_audit_version", "accepts_hardcoded_types": [ "hardcoded_business_effective_position_rule" ], "migration_risk": "critical", "impact_preview_method": "use_position_capability_impact_registry_before_any_refactor", "rollback_requirement": "mandatory_rollback_plan", "audit_requirement": "mandatory_audit_trail" } ], "high_critical_risk_governance": { "total_high_critical_hardcoded_risk_assets": 2981, "by_hardcoded_type": { "hardcoded_position_or_fpos": 520, "hardcoded_grade": 310, "hardcoded_responsibility": 185, "hardcoded_qualification": 215, "hardcoded_capability_model": 340, "hardcoded_task_rule": 210, "hardcoded_assessment_linkage": 260, "hardcoded_training_certification_requirement": 170, "hardcoded_performance_threshold": 165, "hardcoded_permission_bundle": 230, "hardcoded_people_action_constraint": 190, "hardcoded_feishu_external_mapping": 120, "hardcoded_business_effective_position_rule": 66 }, "by_target_schema_object": { "position_config_base": 640, "job_family_grade_config": 310, "position_responsibility_config": 185, "position_qualification_config": 215, "capability_model_config": 340, "position_task_rule_config": 210, "position_assessment_linkage_config": 260, "position_training_certification_linkage_config": 170, "position_performance_linkage_config": 165, "position_permission_bundle_config": 230, "position_people_action_constraint_config": 190, "position_audit_version": 66 }, "by_business_impact": { "talent_review_profile_cadre_related": 1351, "org_capability_related": 790, "org_canvas_people_action_related": 256, "permission_related": 230, "feishu_external_related": 120, "position_grade_foundation_related": 830 }, "by_risk_level": { "critical": 2036, "high": 945 }, "by_requires_manual_review": { "true": 2981, "false": 0 }, "by_requires_permission_approval": { "true": 416, "false": 2565 }, "by_impact_preview_required": { "true": 2981, "false": 0 }, "by_recommended_phase": { "Phase 0 inventory then Phase 1 registry extraction": 1430, "Phase 1 registry extraction then Phase 2 impact preview": 1551 }, "blocked_from_direct_refactor_count": 2981, "p0_registry_candidates": 1430, "p1_impact_preview_candidates": 965, "manual_business_review_candidates": 2981, "permission_approval_candidates": 416, "saas_future_candidates": 186, "direct_migration_forbidden": 2981 }, "business_impact_mapping": [ { "impact_area": "position_config", "affected_by_hardcoded_types": [ "hardcoded_position_or_fpos", "hardcoded_feishu_external_mapping", "hardcoded_business_effective_position_rule" ], "risk_reason": "Hardcoded rule may change interpretation or downstream business action if replaced without controls.", "required_controls": [ "manual_review", "impact_preview", "approval", "audit", "rollback" ], "direct_refactor_allowed": false }, { "impact_area": "grade_system", "affected_by_hardcoded_types": [ "hardcoded_grade" ], "risk_reason": "Hardcoded rule may change interpretation or downstream business action if replaced without controls.", "required_controls": [ "manual_review", "impact_preview", "approval", "audit", "rollback" ], "direct_refactor_allowed": false }, { "impact_area": "capability_model", "affected_by_hardcoded_types": [ "hardcoded_capability_model" ], "risk_reason": "Hardcoded rule may change interpretation or downstream business action if replaced without controls.", "required_controls": [ "manual_review", "impact_preview", "approval", "audit", "rollback" ], "direct_refactor_allowed": false }, { "impact_area": "assessment_linkage", "affected_by_hardcoded_types": [ "hardcoded_assessment_linkage" ], "risk_reason": "Hardcoded rule may change interpretation or downstream business action if replaced without controls.", "required_controls": [ "manual_review", "impact_preview", "approval", "audit", "rollback" ], "direct_refactor_allowed": false }, { "impact_area": "training_certification", "affected_by_hardcoded_types": [ "hardcoded_training_certification_requirement", "hardcoded_task_rule" ], "risk_reason": "Hardcoded rule may change interpretation or downstream business action if replaced without controls.", "required_controls": [ "manual_review", "impact_preview", "approval", "audit", "rollback" ], "direct_refactor_allowed": false }, { "impact_area": "performance_linkage", "affected_by_hardcoded_types": [ "hardcoded_performance_threshold" ], "risk_reason": "Hardcoded rule may change interpretation or downstream business action if replaced without controls.", "required_controls": [ "manual_review", "impact_preview", "approval", "audit", "rollback" ], "direct_refactor_allowed": false }, { "impact_area": "permission_bundle", "affected_by_hardcoded_types": [ "hardcoded_permission_bundle" ], "risk_reason": "Hardcoded rule may change interpretation or downstream business action if replaced without controls.", "required_controls": [ "manual_review", "impact_preview", "approval", "audit", "rollback" ], "direct_refactor_allowed": false }, { "impact_area": "org_canvas", "affected_by_hardcoded_types": [ "hardcoded_people_action_constraint", "hardcoded_business_effective_position_rule" ], "risk_reason": "Hardcoded rule may change interpretation or downstream business action if replaced without controls.", "required_controls": [ "manual_review", "impact_preview", "approval", "audit", "rollback" ], "direct_refactor_allowed": false }, { "impact_area": "people_action", "affected_by_hardcoded_types": [ "hardcoded_people_action_constraint", "hardcoded_business_effective_position_rule" ], "risk_reason": "Hardcoded rule may change interpretation or downstream business action if replaced without controls.", "required_controls": [ "manual_review", "impact_preview", "approval", "audit", "rollback" ], "direct_refactor_allowed": false }, { "impact_area": "feishu_external_system", "affected_by_hardcoded_types": [ "hardcoded_feishu_external_mapping" ], "risk_reason": "Hardcoded rule may change interpretation or downstream business action if replaced without controls.", "required_controls": [ "manual_review", "impact_preview", "approval", "audit", "rollback" ], "direct_refactor_allowed": false }, { "impact_area": "business_effective_position_rule", "affected_by_hardcoded_types": [ "hardcoded_business_effective_position_rule" ], "risk_reason": "Hardcoded rule may change interpretation or downstream business action if replaced without controls.", "required_controls": [ "manual_review", "impact_preview", "approval", "audit", "rollback" ], "direct_refactor_allowed": false } ], "governance_phases": [ { "phase_id": "Phase_0", "phase_name": "Hardcoded Inventory", "goal": "只读清单、风险分类，不改代码，不影响 active 岗位。", "writes_database": false, "modifies_code": false, "modifies_active_position": false, "affects_grade_system": false, "affects_capability_model": false, "affects_permission_bundle": false, "executes_people_action": false, "feishu_writeback_required": false, "requires_manual_gate": true, "rollback_requirement": "not_applicable_readonly_inventory", "exit_criteria": "13 类硬编码类型、2981 个 high/critical 风险、目标 schema 和优先级明确。" }, { "phase_id": "Phase_1", "phase_name": "Registry Extraction", "goal": "抽象为只读 registry 条目，不接业务执行，不替换原逻辑。", "writes_database": false, "modifies_code": false, "modifies_active_position": false, "affects_grade_system": false, "affects_capability_model": false, "affects_permission_bundle": false, "executes_people_action": false, "feishu_writeback_required": false, "requires_manual_gate": true, "rollback_requirement": "delete_or_restore_readonly_registry", "exit_criteria": "registry JSON 可解析，数量、链接和红线校验通过。" }, { "phase_id": "Phase_2", "phase_name": "Impact Preview", "goal": "预览岗位、职级、能力、权限包、人事动作、飞书映射等影响，不修改 active。", "writes_database": false, "modifies_code": false, "modifies_active_position": false, "affects_grade_system": false, "affects_capability_model": false, "affects_permission_bundle": false, "executes_people_action": false, "feishu_writeback_required": false, "requires_manual_gate": true, "rollback_requirement": "preview_only_no_business_rollback", "exit_criteria": "风险等级、审批、审计和回滚要求明确。" }, { "phase_id": "Phase_3", "phase_name": "Controlled Apply Candidate", "goal": "人工审批、小范围、低风险、回归验证、可回滚，仍需另开 gate。", "writes_database": "only_after_separate_gate", "modifies_code": "only_after_separate_gate", "modifies_active_position": "only_after_separate_gate", "affects_grade_system": "only_after_separate_gate", "affects_capability_model": "only_after_separate_gate", "affects_permission_bundle": "only_after_separate_gate", "executes_people_action": false, "feishu_writeback_required": false, "requires_manual_gate": true, "rollback_requirement": "mandatory_verified_rollback_plan", "exit_criteria": "controlled apply gate 通过且有完整审计、回滚和验收。" } ], "redlines": [ "must_not_replace_hardcoded_logic_directly", "must_not_silently_change_position_interpretation", "must_not_modify_active_position", "must_not_modify_grade_system", "must_not_modify_capability_model", "must_not_modify_permission_bundle", "must_not_create_assessment_task", "must_not_create_training_task", "must_not_execute_certification", "must_not_modify_performance_result", "must_not_affect_org_canvas_constraints", "must_not_change_people_action_recommendations", "must_not_change_permission_visibility", "must_not_generate_business_effective_people_action", "must_not_feishu_writeback", "impact_preview_required_before_any_refactor", "approval_required_before_any_refactor", "audit_required_before_any_refactor", "rollback_required_before_any_refactor" ], "validation_rules": [ "registry_is_readonly", "json_load_required", "high_critical_hardcoded_risk_count_must_be_2981", "hardcoded_type_count_must_be_13", "p0_priority_type_count_must_be_11", "no_database_write", "no_code_change", "no_logic_replacement", "no_active_position_change", "no_grade_system_change", "no_capability_model_change", "no_permission_bundle_change", "no_assessment_task_creation", "no_training_task_creation", "no_certification_execution", "no_performance_result_change", "no_people_action_execution", "no_permission_expansion", "no_feishu_writeback" ] }