Merge pull request #133 from dunmin1980-ux/cursor/tickflow-pro-rate-limit-p0

TickFlow Pro: process-local 80% RPM safety + Phase 1 probe scaffold

docs/tickflow-pro-phase1-probe.md

@@ -0,0 +1,37 @@
+# TickFlow Pro Phase 1 probe
+
+Process-local rate-limit safety (80% RPM) is already on branch `cursor/tickflow-pro-rate-limit-p0`.
+
+## Dry-run (safe anytime)
+
+```bash
+cd backend
+python3 scripts/probe_tickflow_pro.py
+```
+
+Writes sanitized plan under `reports/tickflow_pro_probe/<timestamp>/` with status `DRY_RUN_OK`
+(gates/plan only — not proof of SDK methods, network, or auth).
+
+## Live probe (off-peak)
+
+Uses real SDK namespaces aligned with the app: `tf.klines.batch` and `tf.quotes.get`.
+Do not start multiple Phase 1 probe/sync processes concurrently.
+
+Requirements:
+
+- `TICKFLOW_API_KEY` in the environment (never commit the key)
+- Prefer after **16:00 Asia/Shanghai** (Stage A off-peak vs Gold)
+- Before 16:00 only with `--force`
+
+```bash
+cd backend
+TICKFLOW_API_KEY=... python3 scripts/probe_tickflow_pro.py --live
+```
+
+Golden symbols: `000403.SZ`, `600489.SH`, `300059.SZ`.
+
+## Out of scope
+
+- Full-market backfill
+- Gold Shadow deploy / Telegram ownership
+- Claiming cross-product shared rate limits (still process-local)

docs/tickflow-pro-shared-rate-limit.md

@@ -0,0 +1,28 @@
+# TickFlow Pro 限频安全预算（进程内 + 跨产品错峰）
+
+## 决策（经 ChatGPT/Codex 评析修订）
+- `backend/app/tickflow/rate_limits.py` 提供**单 Python 进程内**的 rpm 槽位限速与 `SAFETY_RPM_FACTOR=0.8`。
+- **不要**把「各进程各扣 80%」当成账户级共享限频：Gold Shadow 容器与 A 股面板进程状态独立，理论聚合可达 160%。
+- Stage A 期间跨产品靠**错峰**，不在 Gold 上部署分布式限频重构。
+
+## 预算表示例（Pro，单进程 80%）
+| capability | 套餐 rpm | 进程内 80% |
+|---|---:|---:|
+| quote.batch | 120 | 96 |
+| quote.pool | 60 | 48 |
+| kline.daily.batch | 60 | 48 |
+| kline.minute.batch | 30 | 24 |
+| depth5.batch | 30 | 24 |
+| adj_factor | 60 | 48 |
+
+## 错峰（Stage A）
+- 盘中：优先 Gold Shadow 观察与 legacy `gold-monitor`。
+- A 股 Pro 探测/大批量同步：建议 **16:00 后**。
+- 禁止全市场一年分钟一次性回填。
+
+## 实现要点
+- `resolve_limit(..., apply_safety=True)` 默认对 rpm 做 `floor(rpm * 0.8)`。
+- `sleep_between_batches`：`index=0` 只占槽不 sleep（首批突发；**并发多个 index=0 仍可能超 rpm**）；后续 batch 按槽位等待。
+- Phase 1 / Stage A：**不要并发**启动多个 probe 或大批量 sync。
+- 诊断可传 `apply_safety=False`；跨容器账户预算需另设（Stage A 不做）。
+- 任一 429 / fallback 应记入证据链，禁止静默混源。