{
  "id": "deployment-contract-single-source-harness",
  "name": "deployment-contract-single-source-harness",
  "title": "部署合同单一事实源与失败路径覆盖",
  "description": "收敛 deploy.sh 与 production preflight 的候选构建身份合同，并以本地 fake SSH/Docker harness 覆盖历史失败路径；不连接或修改生产。",
  "status": "in_progress",
  "dev_type": null,
  "scope": "deploy/trialrun/check-source-provenance.mjs, deploy.sh, production-preflight.mjs/remote helper, validate-env-contract.js and focused deployment safety tests",
  "package": null,
  "priority": "P2",
  "creator": "shunli",
  "assignee": "shunli",
  "createdAt": "2026-08-09",
  "completedAt": null,
  "branch": null,
  "base_branch": "main",
  "worktree_path": null,
  "commit": null,
  "pr_url": null,
  "subtasks": [],
  "children": [],
  "parent": null,
  "relatedFiles": [],
  "notes": "本地 tooling hardening 已实现并通过 31/31 focused tests、全部门禁与只读 reviewer 复核；未连接生产。低风险 residual：deploy.sh 整对象解析尚无完整 fake deployment 子进程。",
  "meta": {}
}