归档(08-09-deployment-contract-single-source-harness): 收口部署工具加固

.trellis/tasks/archive/2026-08/08-09-deployment-contract-single-source-harness/implement.md

@@ -34,7 +34,7 @@
 ## Phase E：规约与提交
 
 - [x] 使用 `trellis-update-spec` 更新现有 `deployment-trialrun.md`，记录候选构建身份的单一来源与远端消费验证职责。
-- [ ] 中文 commit 引用 `08-09-deployment-contract-single-source-harness`。
+- [x] 中文 commit 引用 `08-09-deployment-contract-single-source-harness`（`621934a`）。
 - [x] 不部署、不运行生产 preflight；任务证据明确为 local tooling hardening。
 
 ## 质量检查记录

.trellis/tasks/archive/2026-08/08-09-deployment-contract-single-source-harness/task.json

@@ -3,7 +3,7 @@
   "name": "deployment-contract-single-source-harness",
   "title": "部署合同单一事实源与失败路径覆盖",
   "description": "收敛 deploy.sh 与 production preflight 的候选构建身份合同，并以本地 fake SSH/Docker harness 覆盖历史失败路径；不连接或修改生产。",
-  "status": "in_progress",
+  "status": "completed",
   "dev_type": null,
   "scope": "deploy/trialrun/check-source-provenance.mjs, deploy.sh, production-preflight.mjs/remote helper, validate-env-contract.js and focused deployment safety tests",
   "package": null,
@@ -11,7 +11,7 @@
   "creator": "shunli",
   "assignee": "shunli",
   "createdAt": "2026-08-09",
-  "completedAt": null,
+  "completedAt": "2026-08-09",
   "branch": null,
   "base_branch": "main",
   "worktree_path": null,
@@ -23,4 +23,4 @@
   "relatedFiles": [],
   "notes": "本地 tooling hardening 已实现并通过 31/31 focused tests、全部门禁与只读 reviewer 复核；未连接生产。低风险 residual：deploy.sh 整对象解析尚无完整 fake deployment 子进程。",
   "meta": {}
-}
+}