Files
vibe-coding-cn/docs/references/modern-enterprise-architecture-template.md
T

4672 lines
261 KiB
Markdown
Raw Normal View History

# 唬誨隡硋像唳沲
**𧋦**嚗间2.28
**鍂撖寡情**嚗帋銝𡁶恣𤏸啣𣪧𣪧
**凒**嚗帋葉憭批硋像啣遣霈整∠頂蝏罸啣極蝔见遣霈整桐漣峕㦤嗉挽霈
**﹝摰帋**嚗𡁏𧋦霂湔唬誨隡硋像瓲敹𣪧賢𧑐頝臬
**銝㯄★靽株恥**嚗间2.28 V2.27 銝𦠜鰵憓硺銝𡁏銵峕綉園𢒰嚗峕蝑厩漣秄蝳蝑硔格鰵斢𨅯漲憭𡝗𦆮銵䎚reak-glass迤摨血憟堒虾剔㴓
---
## 0. 𧋦銝𤾸
隞嗡 V1.6 韏瑟箇瑪﹝蝞∠砍噡銝齿糓鋆弘摮埈挾嚗諹峕糓𨅯𪑛鈭𥕦摰孵歇蝏誩耦𣂼抅蝥踴𪑛鈭𥕢摰~𪑛鈭𥕦敶勗瘝餌亙藁
𧋦瘝餌
1. 霈拍恣啣𣪧笔𣪧桀𣪧典𣪧 AI 撘閧鍂隞賢抅蝥踴
2. 霈拇甈⊥沲蝥折漤𢒰寡提隞餃撉諹
3. 摰嫣瘝⊥蝔喳𧋦嚗𣪧仿霂交
4. 銝箏蝏剜嘥㦛漣銝箏虾蝥血芸𢆡㚚秄蝳餈𥡝楝敺
### 0.1 𧋦霂凋
| 𧋦敶X | | 雿輻鍂∩辣 |
| -------- | ---- | -------- |
| `V0.x` | 𠉛弦 | Y揣蹱㟲霈刻捏嚗䔶雿靝蛹隡箇瑪 |
| `V1.x` | 甇嘥㦛餈凋誨 | 瘝餌撌脩蝔喳 |
| `V1.x.y` | 䁅秤諹‘銝 | 芯耨甇聢撘譌函內靘𧢲銝齿㺿鉄銋厩撠誯䔮憸 |
| `V2.x` | 銵䔶銝𡁏 | 敹璅⊥踎蝥艾秄蝳ACI諹氜 starter kit |
| `V3.0` | 蝏蝥扯璅∪餈鞱𨯫 | 撌脖撟喳蝱atalogitOps恣霈∪餈鞱敶X剔㴓 |
𧋦漣閫
1. 芣㺿摮𨰜聢撘譌撘閧鍂嚗䔶𣂼銝餌穿臭蝙刻‘銝扇敶𨰻
2. 蝡㰘臬抅蝥踵頝舐瑪𣂼敶枏銝餌撠讐
3. 毺㮾皞僐𣪧蝥扳餈鞱颲寧憿餅𧋦撟嗉扇敶訫蔣漤𢒰
4. 璅∪啗器澆捆蝑𣇉裦嚗憿餉交沲摰∪僎敶X ADR
5. `V2.0` ◆霂芣糓霂湔峕糓質◤隞枏璅⊥踎蝥血 CI
### 0.2
| | | |
| ---- | ---- | -------- |
| `Draft` | 摰嫣冽䔝蝝 | 敺𦯀銝箸藁敺 |
| `Review` | 霂恣銝哨𣬚㮾 owner 蝖株恕 | 捂靽格㺿嚗䔶◆靽萘喲䔮憸 |
| `Baseline Candidate` | 箇瑪撌脣藁敺隞滚隡𡁜恣蝖株恕 | 舐鍂鈭舘恣嚗䔶摨𠉛鍂雿𨅯蝏枏恣霈∪藁敺 |
| `Baseline` | 撌脣耦𣂼抅蝥選銝箄憿寧𤌍閫靘脲旿 | 埈綉䀹凒湔鰵 |
| `Frozen` | 箇瑪嚗屸𡁜虜𥟇恣霈~蝞⊥憭扯璅⊥綫撟 | 霂臬摰匧靽桀憭碶敺㛖凒乩耨 |
| `Superseded` | 撌脰◤祆𤜯隞 | 宏霂湔嚗䔶銝箸鰵憿寧𤌍靘脲旿 |
敶枏𧋦
| 𧋦 | | 霂湔 |
| ---- | ---- | ---- |
| `V2.28` | `Baseline Candidate` | 銵䔶銝𡁏箏膥航粉𧋦皜園★閬61 蝏 starter kit schema/example銝𡁏銵峕綉園𢒰蝥扼秄蝳蝑硔格鰵斢𨅯漲憭𡝗𦆮銵䎚reak-glass迤摨血摨枏湔綉蝡臭蝘餅㟲恣霈∪紡𨰻恣霈∪紡箄䌊隡唳𥁒𨳍抅蝥踹渲扇敶𨰻蝑𤥁扇敶𨰻I 霂旿韐行𧋦凝靚銵諹I 鈭衤辣 playbookSCAL 鈭斗揢OA&M 湔㺿霈∪銝𡁏沲拍蒈霈啜恣霈∪紡粹秄蝳恣霈∪紡𨰻恣霈∪紡 provenance statement恣霈∪紡箇倌恣霈∪紡箇倌蝑曉 schema 璅∪亥蔭瘣硺耨憭溻格祥I 餈鞱itOps 摰匧摨娪曎霂芸𢆡𡝗嵗撉 |
### 0.3 䀹凒
| 䀹凒蝥批 | 捆 | 摰⊥鸌閬 | 𧋦敶勗 |
| -------- | -------- | -------- | -------- |
| `Editorial` | 摮𨰜钟霂剔 | ﹝ owner 芸恣 | 銝齿𧋦嚗虾霈啣銵乩 |
| `Minor` | 蝷箔汿撘綽銝齿㺿睃𣪧 | ﹝ owner 𣬚㮾 owner 蝖株恕 | 𣂼 `V1.x` 𤥁扇敶閗‘銝 |
| `Major` | 秄蝳蝔𧢲餈鞱颲寧 | I 敶勗 owner 霂恣 | 𣂼 `V1.x` |
| `Breaking` | 毺㮾皞僐𣪧蝥血摰嫘宏頝臬 | 隡恣嚗𥕦憿餅 ADR蝘餉恣鍂蝑𣇉裦 | 餈𥕦銝衤銝餌𡒊&餈𧋦 |
### 0.4 𧋦
瘥𤩺活𣂼𧋦靽萘隞乩旿嚗
1. 䀹凒嚗朞秩擧鰵憓𠺶摨笔
2. 敶勗凒嚗𡁜敶勗𤌍敶𨰻𣪧蝥艾秄蝳賢𧑐瘚
3. 霈啣嚗𡁻憭批憿駁曎 ADR 𤥁摰∟扇敶𨰻
4. 𧋦皜嚗𡁜甇交凒 `𧋦皜`僎霈 CI 𧋦𠶖air 園★𣬚揣撘閙𨳍
5. 嚗𡁜甇交凒 `憿寡𡝗𧄧嚗僎霈 CI 憿孵 schemaxample checker 霂
6. 蝝W峕郊嚗𡁜甇交凒 `docs/README.md`docs/references/README.md`metadata/taxonomy.yml` AI 撘閧鍂霂剜亙藁
7. 暹𦻖嚗帋摨枏 Markdown 暹𦻖憿駁
8. 嚗鐝arkdown lint 憿駁
9. 亙藁嚗帋𧋦撘閧鍂it commit 渲扇敶𤏪靽肽臭誑箇瑪
```bash
make sync-doc-toc
make test
git diff --check
```
### 0.5
敶𤘪銝芰祈◤扇銝 `Frozen` 𠬍
1. 銝滚湔𦻖靽格㺿𤌍敶閧𣪧秄蝳賢𧑐頝舐瑪
2. 隞颱摰噼捶憿餃𥕦遣䀹凒僎霂湔銝𡁜𦛚冽㦤宏霈∪
3. 摰匧鈭找喲睸躰秤航粥蝝扳亥‘銝憿餃銁鈭见銵仿 ADR
4. 鋡急𤜯隞憿餅霈唬蛹 `Superseded`僎霂湔蝵桀宏瘜冽鈭钅★
5. 𧋦銝滚銝擧𧊋瘛瑞鍂嚗偦★桀鍳恣霈∪撟喳蝱璅⊥踎敹◆撘閧鍂𡒊&𧋦
### 0.6 𧋦霈啣
| 𧋦 | | 䀹凒蝥批 | 喲睸 |
| ---- | ---- | -------- | -------- |
| `V1.0` | 2026-06-01 | Major | 撱箇唬誨隡硋像啣抅蝖嘥㦛嚗峕𤜯隞蝏麨𨅯之銝剖蝱滚蝱 |
| `V1.1` | 2026-06-01 | Major | 銵仿 AI 摨娪曎摰匧桐漣 AI akehouse 餈諹恕頧賣祥 |
| `V1.2` | 2026-06-01 | Minor | 憓𧼮銵䔶撖寞拚猐gent 讛悅颲寧峕楛摨西𠉛 |
| `V1.3` | 2026-06-01 | Major | 憓𧼮 AI 憌𡡞埯I 韏漣霂SDF 摰匧蝥血 FinOps 鞉𧋦瘝餌 |
| `V1.4` | 2026-06-01 | Major | 憓𧼮敺株瘝餌I 鈭衤辣 Policy as Code 蝑𣇉裦霂剛蝏煺 |
| `V1.5` | 2026-06-01 | Major | 憓𧼮敺格∪捆ubernetesitOpsatalog 𤤿毺㮾皞 |
| `V1.6` | 2026-06-01 | Major | 憓𧼮𧋦瘝餌𠶖蝥扼蝏栞 V2.0 頝舐瑪 |
| `V1.7` | 2026-06-01 | Major | 憓𧼮毺㮾皞𣂼畾萇畆tarter kit 璅⊥踎撉冽沲蝘餅瘚贝 |
| `V1.8` | 2026-06-01 | Major | 憓𧼮 RACI 蝥扼TO/RPO霂舫蝞𨰜漣頝臬 |
| `V1.9` | 2026-06-01 | Major | 憓𧼮隞枏𤘪㚚𢒰蝘颱鍂蝑𣇉裦恣霈∟ |
| `V2.0` | 2026-06-01 | Major | starter kitSON SchemaAML 蝷箔諹䌊亙藁 |
| `V2.1` | 2026-06-01 | Minor | 憓𧼮撩 starter kit schema 撋蝥行聢撘𤩺嵗撉䎚辣銝 CI |
| `V2.2` | 2026-06-01 | Minor | 銵仿 API隞嗚I 撌亙AG凝靚itOpsatalog scorecard 憟𤑳漲璅⊥踎 |
| `V2.3` | 2026-06-01 | Minor | 銵仿摨娪曎霂憭硔PI/Event 澆捆扳𥁒𠰴 GitOps 瞍憟𤑳漲璅⊥踎 |
| `V2.4` | 2026-06-01 | Minor | 憓𧼮箏膥航粉𧋦皜tarter kit pair 皜𣬚甇交嵗撉諹 |
| `V2.5` | 2026-06-02 | Minor | 惩𤐄格祥I 餈鞱itOps 摰匧摨娪曎摮埈挾 |
| `V2.6` | 2026-06-02 | Minor | 箏膥航粉憿寡𡝗𤏪憿孵 schemaxample checker 桅曎 |
| `V2.7` | 2026-06-02 | Minor | 舐鍂 starter kit 銝交聢 schema 璅∪嚗諹 `additionalProperties=false` 撟園獈剜𧊋畾菟 |
| `V2.8` | 2026-06-02 | Minor | 銵仿摮埈挾蝑𣇉裦eature Flag / Kill SwitchI 憡璅∪銵諹蝻睃撟喳蝱鈭批 |
| `V2.9` | 2026-06-02 | Minor | 銵仿敶勗蝳颯憭齿霂𨰻enAI 閫𡃏 |
| `V2.10` | 2026-06-02 | Minor | 銵仿霈輸䔮憭齿瓲亥蔭瘣硺耨憭溻摨行綉園★ |
| `V2.11` | 2026-06-02 | Minor | 銵仿恣霈∪紡 |
| `V2.12` | 2026-06-02 | Minor | 銵仿摰∟恣撖澆枂芸𢆡硋𦶢隞 |
| `V2.13` | 2026-06-02 | Minor | 銵仿恣霈∠倌蝵脤𡡒 |
| `V2.14` | 2026-06-02 | Minor | 銵仿箇瑪䀹凒霈啣皛朞 |
2026-06-02 02:30:20 +08:00
| `V2.15` | 2026-06-02 | Minor | 銵仿 OSCAL 鈭斗揢 |
2026-06-02 02:49:44 +08:00
| `V2.16` | 2026-06-02 | Minor | 銵仿摰∟恣撖澆枂 |
| `V2.17` | 2026-06-02 | Minor | 銵仿摰∟恣撖澆枂摰峕㟲撣峕嵗撉 |
| `V2.18` | 2026-06-02 | Minor | 銵仿摰∟恣撖澆枂 provenance statement 𣬚𣂷銝𧢲餈賣滲 |
| `V2.19` | 2026-06-02 | Minor | 銵仿摰∟恣撖澆枂蝑曉蝑𣇉裦 provenance payload 蝑曉鈭斗𦻖 |
| `V2.20` | 2026-06-02 | Minor | 銵仿摰∟恣撖澆枂蝑曉撉𣬚倌函倌桅𡡒 |
| `V2.21` | 2026-06-02 | Minor | 銵仿 POA&M 湔㺿霈∪ OSCAL 湔㺿閫㦛霂剔㴓 |
| `V2.22` | 2026-06-02 | Minor | 銵仿憌𡡞埯餉扇OA&M恣霈∪紡剔㴓 |
| `V2.23` | 2026-06-02 | Minor | 銵仿箏膥航粉霈啣抅蝥踹 ADR 蝏穃 |
| `V2.24` | 2026-06-02 | Minor | 銵仿箏膥航粉 AI 鈭衤辣 playbook AI 餈鞱剔㴓 |
| `V2.25` | 2026-06-02 | Minor | 銵仿箏膥航粉 AI 霂旿韐行𧋦 AI 鈭批蝥扯桅𡡒 |
| `V2.26` | 2026-06-02 | Minor | 銵仿箏膥航粉敺株餈鞱 AI 敺株摰∟恣剔㴓 |
| `V2.27` | 2026-06-02 | Minor | 銵仿箏膥航粉隞枏䀹凒蝡臭𧋦箇瑪靽脲擪 |
| `V2.28` | 2026-06-02 | Minor | 銵仿蝥扼秄蝳蝑硔憭𡝗𦆮銵漲憭齿瓲剔㴓 |
### 0.7 V2.28 銵䔶銝𡁏楝蝥踹㦛
V2.0 撌脣 V1.9 箇瑪頧砍銝箇洵銝孵虾2.1 蝏抒賒𠰴畾萇漲內靘衤餈𦦵 CI 銵亙撩銝箏虾2.2 𠹺蜓撠誯銝剔 API隞嗚I 撌亙AG凝靚itOpsatalog scorecard 蝥喳 schema/example 2.3 蝏抒賒𠰴摨娪曎霂憭硔摰寞扳𥁒𠰴 GitOps 瞍蝥喳箏膥舀嵗撉抅蝥踴2.4 𠰴𠶖tarter kit pair 皜air 𣬚揣撘訫甇亥𤐄箏膥航粉𧋦皜銝准2.5 𠰴虾蝥扼TO/RPO霈輸䔮摰∟恣I 憸銝𡡞蝥扼itOps 餈鞱摰匧摨娪曎 source/vulnerability/scorecard 霂𣂼 starter kit 撘箏摮埈挾2.6 憓𧼮憿寡𡝗𤏪𠰴銝𡁏綉 schema 摮埈挾內靘见畾萄 checker 閫嚗屸𨧀𨀣㗇綉瘜閗擧綉2.7 舐鍂銝交聢 schema 璅∪嚗諹 starter kit 匧笆鞊∟孵ㄟ `additionalProperties=false` checker 餅鱏芰䰻摮埈挾2.8 銵仿摮埈挾蝑𣇉裦eature Flag / Kill SwitchI 憡璅∪銵諹蝻睃撟喳蝱鈭批2.9 蝏抒賒𢠃極蝔卝瑁器憭齿olicy as Code 瘚贝enAI 瘚𧢲 FinOps 鞉𧋦銵交銵諹2.10 𡃏挪亥蔭瘣硺耨憭溻摨衣熙交綉嗥𤌍敶𤏪煺漣摰匧餈鞱𨯫坔銁𨀣嗅漲鈭箇舘‘撘梯桃𠶖2.11 𦠜銝芣綉園★株楝敺𠶖鰵斢𨅯漲恣霈∪紡蝟餌熙餉揭嚗屸滚恣霈⊥𧒄鞉挾蝧餅擧綉2.12 憓𧼮摰∟恣撖澆枂芸𢆡硋𦶢隞歹嗥𤌍敶𨰻𨰻喲睸臭漱隞睃恣霈∪2.13 憓𧼮嚗峕甇仿𡡒蝏𤘪圈★雿䠷蝑曄蔡2.14 憓𧼮箇瑪䀹凒霈啣嚗峕箇瑪𦶢隞文頝臬蝥喳銵諹2.15 憓𧼮 OSCAL 鈭斗揢𠰴冽綉 catalogomponent-definitionystem-security-planssessment-results POA&M 閫2.16 憓𧼮摰∟恣撖澆枂嚗峕撖澆枂SON/Markdown/OSCAL 颲枏枂蝥喳 `make test`2.17 憓𧼮摰∟恣撖澆枂摰峕㟲𤏪 SHA-256屸俈蝭⊥㺿蝥喳摰∟恣2.18 憓𧼮摰∟恣撖澆枂 provenance statement嚗峕 subject撱箏銋剹鈭文皞鞱韏𣇉熙亙虾餈賣滲霂2.19 憓𧼮摰∟恣撖澆枂蝑曉蝑𣇉裦嚗峕 provenance payload 齿䲮撘譌蝑曉𦶢隞文憭㚚蝑曉鈭斗𦻖蝥喳2.20 憓𧼮摰∟恣撖澆枂蝑曉撉𣬚倌嚗峕憭㚚蝑曉摰峕𡒊 bundle 銋西澈隞賬IDC issuer𤩺蝑曄𦦵熙桅曎2.21 憓𧼮 POA&M 湔㺿霈∪嚗峕𤑳緵憿嫘提隞颱犖蝔讠倌蝵脣 OSCAL POA&M 颲枏枂蝥喳剔㴓2.22 憓𧼮憌𡡞埯餉扇嚗峕憌𡡞埯園★OA&M雿䠷摰∪摰∟恣撖澆枂憌𡡞埯閫㦛蝥喳剔㴓2.23 憓𧼮霈啣嚗峕 ADR 銝𠹺㗇䲮獢蝑硔娍綉園★OA&M摰∪箇瑪䀹凒蝏穃蝥喳剔㴓2.24 憓𧼮 AI 鈭衤辣 playbook嚗峕撟餉瑕儐AG 蝝W瘙⊥摨𥪜銝剜鱏撣詻瘚卝蝥扼皛𡁜憭滨蝥喳剔㴓2.25 憓𧼮 AI 霂旿韐行𧋦嚗峕璅∪romptAG隡啜瘚卝隞嗅摨𢛵桐蝙摮睃憭滚恣蝥喳 AI 鈭批蝥扯桅𡡒2.26 憓𧼮敺株餈鞱旿嚗峕霈剔唳旿撉諹蕭頦芥隡啜讠蒈霈啜摨血敶寧熙 AI 敺株摰∟恣剔㴓2.27 憓𧼮隞枏䀹凒嚗峕 CODEOWNERS靽脲擪𣈲R 摰⊥䰻
V2.28 韏瑞𡠺嚗
1. 毺㮾皞𣂼畾萇畆𡒊& `domain.yaml`service.yaml`ai-product.yaml`data-product.yaml`atalogitOps runtime 畾菜
2. 憟𤑳漲璅⊥踎嚗𡁏靘𥟇桐漣I 鈭批gent 撌亙AG凝靚itOps 𣬚鈭批停蝏芣芋
3. 芸𢆡㚚秄蝳 API隞嗚蝥艾I BOMLO蝑曉 catalog entry 蝥喳 CI
4. RACI嚗𡁏蝖格沲笔𣪧啣𣪧桀𣪧典𣪧I 鈭批RE owner 蝑𡝗
5. 隞枏𤘪㚚𢒰嚗朞 monorepo隞瓐𡠺蝡 GitOps 隞瓐峕㺭璅∪
6. 蝥改銵仿 Tier-1 / Tier-2 / Tier-3TOPO霂舫蝞堒 on-call 漣頝臬
7.宏銝𤾸摰帋抒頂蝏毺PI 𧋦撘桐漣摰嫘I 璅∪敶孵撟喳蝱銝讠瑪瘚
8. 撉諹𣂷 `make test`chema 內靘衤摨枏摰∟恣霂旿皜嚗諹虾隞亥氜銵䎚
9. Starter Kit嚗𡁏 ` starter kit` 銝讠 61 蝏 schema/example憟堒畾菜嵗撉䎚聢撘𤩺嵗撉䎚格祥I 餈鞱銝𡁏銵峕綉園𢒰蝥扼秄蝳蝑硔摨枏湔綉蝡臭蝘餅㟲I 霂旿韐行𧋦凝靚銵諹I 鈭衤辣 playbookitOps 摰匧蝑𤥁扇敶𨰻拍蒈霈啜桅曎撉𣬚摮埈挾𣬚內靘贝楊辣銝
10. 𧋦皜嚗𡁏 `𧋦皜`嚗諹悟敶枏𧋦𠶖air 皜𣬚揣撘訫甇亥 CI
11. 憿寡𡝗𤏪𣂷 `憿寡𡝗𧄧嚗諹悟喲睸憿孵 schemaxample checker 桅曎餈𥕦 CI
12. 銝交聢 schema 璅∪嚗窃tarter kit 笆鞊 schema 敹◆憯唳 `additionalProperties=false`嚗峕鰵憓𧼮畾萄憿餃餈𥕦憟𤑳漲內靘见 checker 霂
13. 摮埈挾蝑𣇉裦嚗𡁏鰵憓 `extension-policy.yaml`嚗諹悟隡銋匧畾萄蘨埈綉暺䁅恕蝑𣇉裦餈𥕦
14. 皜鞱撘誩 `feature-flag-control.yaml`嚗峕 Feature Flagill Switch摨行LO 隞嗥熙仿秄蝳
15. AI 憡璅∪嚗𡁏鰵憓 `ai-threat-model.yaml`嚗峕 OWASP LLM / Agentic AICP 撌亙枂蝡䠷畾衤憌𡡞埯蝥喳
16. 餈鞱蝻矋 `lineage-event.yaml`嚗峕唳旿鈭批 producer jobunnput/output datasetchema蝻睃蝡舐熙亙恣霈~
17. 撟喳蝱鈭批嚗𡁏鰵憓 `platform-product-metrics.yaml`嚗峕 Platform PMolden Path 𤏸誩漲頧賢撟喳蝱 SLO 蝥喳銵峕
18. 敶勗摯嚗𡁏鰵憓 `privacy-impact-assessment.yaml`嚗峕 DPIA𤌍瘜訫抅蝖蜓雿𤘪 AI 雿輻鍂𣂼蝥喳
19.𠉛氖嚗𡁏鰵憓 `tenant-boundary.yaml`嚗峕 namespaceerviceAccountecret esourceQuotaetworkPolicy 亦熙桅曎
20. 瞍𠉛嚗𡁏鰵憓 `recovery-drill-evidence.yaml`嚗峕 RTO/RPO 隞𤾸ㄟ𤾸蝥找蛹瞍𠉛蝏𤘪隞賬憭齿𠯫敹堒憭滨
21. 蝑𣇉裦瘚贝嚗𡁏鰵憓 `policy-test-report.yaml`嚗峕 OPA / Cedar / Kyverno 蝑厩霂閧仃韐交㺭屸獈蝑𣇉熙仿秄蝳
22. GenAI 閫嚗𡁏鰵憓 `genai-observability-contract.yaml`嚗峕 OpenTelemetry GenAIokenAG span 峕𠯫敹𡑒讐熙蝥艾
23. 鞉𧋦旿嚗𡁏鰵憓 `cost-allocation-evidence.yaml`嚗峕倌閬𧊋鞉𧋦/AI/唳旿鞉𧋦𤥁函熙 FinOps 霂
24. 霈輸䔮憭齿瓲嚗𡁏鰵憓 `identity-access-review.yaml`嚗峕頨思遢皞僐reak-glassFA 霈箇熙仿秄蝳
25.𤨎頧格揢嚗𡁏鰵憓 `secrets-rotation-evidence.yaml`嚗峕 Secret providerMSW𪂹脫醌頧格揢蝏𤘪蝥喳
26. 瞍𤩺靽桀嚗𡁏鰵憓 `vulnerability-remediation-evidence.yaml`嚗峕瞍𤩺銝仿摨艾EV LA耨憭齿𠯫雿䠷蝥喳憿嫘
27. 鈭𧢲憭滨嚗𡁏鰵憓 `incident-postmortem.yaml`嚗峕/園𡢿𨬭unbook 湔鰵屸秄蝳箇熙仿𡡒
28.摨佗 `evidence-freshness-policy.yaml`嚗峕憭批僑樴蝐餃蝑𣇉裦I 罸獈剔熙亙恣霈∠賢𪂹
29. 嚗𡁏鰵憓 `control-evidence-map.yaml`嚗峕 ID株楝敺𠶖鰵斢𨅯漲餅鱏撅墧抒熙亙恣霈⊥餉揭
30. 摰∟恣撖澆枂皜嚗𡁏鰵憓 `audit-export-manifest.yaml`嚗峕撖澆枂摰嫘蝑𣇉裦蝥喳臭漱隞䁅
31. 摰∟恣撖澆枂芸𢆡 `摰∟恣撖澆枂賭誘`嚗𣬚 `build/modern-enterprise-architecture-audit/audit-export.json`audit-export.md`oscal-summary.json`audit-export-integrity.json`audit-export-provenance.json` `audit-export-signing-policy.json`
32. 嚗𡁏鰵憓 `control-assessment-report.yaml`嚗峕隡唬犖圈★雿䠷蝑曄蔡亙恣霈⊿𡡒
33. 箇瑪䀹凒霈啣嚗𡁏鰵憓 `baseline-change-record.yaml`嚗峕箇瑪𧋦摨讐𦶢隞文霈∪蝥喳䀹凒
2026-06-02 02:30:20 +08:00
34. OSCAL 鈭斗揢嚗𡁏鰵憓 `oscal-export-profile.yaml`嚗峕隡啣湔㺿 OSCAL 鈭斗揢閫㦛嚗 `oscal-summary.json`
35. 摰∟恣撖澆枂嚗𡁏鰵憓 `audit-export-gate.yaml` `摰∟恣撖澆枂賭誘`嚗峕撖澆枂颲枏枂銝滚讐熙 `make test`
36. 摰∟恣撖澆枂摰峕㟲𤏪 `audit-export-integrity.yaml` `audit-export-integrity.json`嚗峕 SHA-256屸俈蝭⊥㺿蝥喳摰∟恣
37. 摰∟恣撖澆枂 provenance statement嚗𡁏鰵憓 `audit-export-provenance.yaml` `audit-export-provenance.json`嚗峕 subject撱箏銋剹鈭文皞鞱韏𣇉熙亙虾餈賣滲霂
38. 摰∟恣撖澆枂蝑曉蝑𣇉裦嚗𡁏鰵憓 `audit-export-signing-policy.yaml` `audit-export-signing-policy.json`嚗峕 provenance payload 齿䲮撘譌蝑曉𦶢隞文憭㚚蝑曉鈭斗𦻖蝥喳摰∟恣
39. 摰∟恣撖澆枂蝑曉撉𣬚倌嚗𡁏鰵憓 `audit-export-signature-receipt.yaml`嚗峕憭㚚蝑曉𡒊 bundle 銋西澈隞賬𤩺蝑曄𦦵熙桅𡡒
40. POA&M 湔㺿霈∪嚗𡁏鰵憓 `poam-record.yaml`嚗峕𤑳緵憿嫘提隞颱犖蝔讠倌蝵脣憭滚恣蝥喳 OSCAL POA&M 霂剔㴓
41.憌𡡞埯餉扇嚗𡁏鰵憓 `risk-register.yaml`嚗峕憌𡡞埯園★OA&M雿䠷摰∪摰∟恣撖澆枂憌𡡞埯閫㦛蝥喳剔㴓
42. 霈啣嚗𡁏鰵憓 `architecture-decision-record.yaml`嚗峕 ADR 銝𠹺㗇䲮獢蝑硔娍綉園★OA&M摰∪箇瑪䀹凒蝏穃蝥喳剔㴓
43. AI 鈭衤辣 playbook嚗𡁏鰵憓 `ai-incident-playbook.yaml`嚗峕撟餉瑕儐AG 蝝W瘙⊥摨𥪜銝剜鱏撣詻瘚衤縑蝥扼皛𠾼AG Kill Switch𡁜憭滨蝥喳 AI 餈鞱剔㴓
44. AI 霂旿韐行𧋦嚗𡁏鰵憓 `ai-evidence.yaml`嚗峕璅∪romptAG隡啜瘚卝隞嗅摨𢛵桐蝙摮睃憭滚恣瘙颱蛹 AI 鈭批蝥扯餉揭
45. 敺株餈鞱旿嚗𡁏鰵憓 `fine-tuning-run.yaml`嚗峕霈剔唳旿撉諹蕭頦芥隡啜讠蒈霈啜摨血敶寧熙 AI 敺株摰∟恣剔㴓
46. 隞枏䀹凒嚗𡁏鰵憓 `repository-change-control.yaml`嚗峕 CODEOWNERS靽脲擪𣈲R 摰⊥䰻齿鈭扎甇Y凒 tag 靽脲擪蝡臭斤𠶖蝘餅㟲OA&M 拍蒈霈啁熙砍抅蝥蹂
47. 蝑厩漣嚗𡁏鰵憓 `conformance-profile.yaml`嚗峕漣憌𡡞埯蝞∪撩摨艾笔漲I 憌𡡞埯蝑厩漣憿餅銵𣬚蝑厩漣蝏穃
48. `control-plane.yaml`嚗峕憿嫘wner剔漣詨𪂹蝏煺韐行𧋦
49. 霈啣嚗𡁏鰵憓 `release-gate-decision.yaml`嚗峕瘥𤩺活辺隞嗆𦆮銵䎚憭硔reak-glass 皛朞亙虾摰∟恣霂
---
## 1. 峕艶銝𤾸遣霈曄𤌍
銝𡁜𦛚蝥蹂鈭批 AI 摨𠉛鍂嚗䔶蝏煺誑憿寧𤌍鈭支梁頂蝏麄銝剖恣鈭箏極餈鞟輕銝箔蜓 IT 撱箄挽璅∪歇蝏誯𠗕隞交𣈲穃翰𣇉銝𡁜𦛚
隡删璅∪撣貉𡠺嚗
1. 銝𡁜𦛚蝟餌撱箄挽嚗諹偦𠗕憭滨鍂
2. 滚蝱靘肽葉撟喳蝱 IT 嚗䔶漱隞睃𪂹罸鵭
3. 唳旿銝𡁜𦛚蝟餌銝哨銝滨舀綉
4. 撟喳蝱靘肽撌亙䔶犖撌仿蝵殷𥪜雿汿
5. 瘝餌銝餉靘肽憪𥪜隡𠾼蝔见鈭箏極璉曆誑閫
6. 蝟餌餈鞱遙銝齿銝𡁜𦛚唳旿
䭾迨嚗峕𧋦遣霈曄𤌍糓撱箇憟烾𢒰𤑳緵隞銝𡁶硋像蝟鳴
> 滚蝱蝡臬蝡航瘝㗇𥕦唳旿鈭批啣𣪧靘𥡝䌊撌亦摨訫漣嚗峕祥𣪧芸𢆡碶蛹撟喳蝱嚗諹韏㚚銝剖恣
祆沲臬遣霈曆銝芯葉憭桀鈭急嚗諹峕糓撱箄挽銝銝芰眏憭帋葵憸鈭批桐漣典像瘝餌銝𡁶漣𤥁𤤿蝏栶
---
## 2.
唬誨隡硋像啁眏銝葵蝥萄銝芣赤烐祥
```text
/ 摰X / / 睃極 / 餈鞱𨯫鈭箏
Web / App / 撠讐 / Open API / 餈鞱𨯫𤾸蝱 / Partner Portal
鈭䎚撉𣬚
BFF / API Gateway / GraphQL / Workflow / Event Subscription
銝剹I
AI 摨𠉛鍂 / Agent Runtime / LLM Gateway / RAG / Vector Store / PromptOps / Evals
𥕢漣
/ / 霈W / / 撅亦漲 / 憌擧綉 / 仿 /
鈭𢛵桐漣蝏𨅯
Source-aligned Data Product / Aggregate Data Product / Consumer-aligned Data Product
/ 霂凋 / / 蝝W / 亥” / AI 唳旿滚𦛚
撟喳蝱撌亦
Developer Portal / Golden Path / CI/CD / IaC / GitOps / Kubernetes / 瘚𧢲 / AI Platform
抅蝖霈暹鴌銝𦒘
Cloud / Kubernetes / Network / Storage / Database / Queue / Cache / Search / GPU / Vector DB
璅芸韐舐忽嚗
瘝餌撟喲𢒰
頨思遢 / API / 唳旿憟𤑳漲 / AI 瘝餌 / 摰匧蝑𣇉裦 / 靘𥕦 / 摰∟恣 /
SLO / 鞉𧋦閫 / 韐券 / Policy as Code / 芸𢆡𡝗 / SBOM / Provenance
```
臭誑璁𡠺銝綽
> 唬誨隡硋像 = 滚蝱雿㯄 + 雿㯄蝻𡝗 + AI + 憸鈭批 + 唳旿鈭批蝵𤑳 + 芸𨭌撘誩像啣極蝔 + 鈭穃笔抅蝖霈暹鴌 + 瘝餌
## 2.1 憿寧𤌍蝏𤘪
撌亦隞枏摨娍銝滚蝐餃𦦵嚗屸齿蝥艾銵䎚﹝瘛瑟銝芰𤌍敶𨰻
銝钅𢒰蝏𤘪銝𡁶漣硋像銝齿糓撘箏𥅾`services/*`apps/*`𡠺蝡 GitOps 隞枏隞𤘪芋撘𧶏銋笔虾隞交窒憿颱滚𦛚皞鞟㴓憓蝵脫𤤿𠶖銵𣬚𠶖𤌍敶訫𥕦瘝餌銝滩瘛瑟銝芰
```text
repo/
apps/ # 滚蝱雿㯄毺㮾皞琜WebppI 雿㯄亙藁
web/ # Web 滚蝱摨𠉛鍂嚗𥕦蘨撉䔶漱隞矋銝齿
mobile/ # 蝘餃𢆡蝡臬 BFF/API 瘨晶憸
admin/ # 餈鞱𨯫𤾸蝱嚗𥟇㗁頧賜恣撉䕘銝滨凒亥挪
partner-portal/ # 寥秄埈綉 API 交𦻖
open-api-portal/ # 撘 API 嚗𥕦蝷箏蝥艾𤚗霂瑕摰∟恣亙藁
ai-experiences/ # AI 雿㯄亙藁嚗𥕦 Agent/RAG/Prompt 韏 ai/
ai/ # AI 嚗鋫gentAGLMOps AI 鈭批餈鞱
applications/ # 銝𡁜𦛚箸艶 AI 摨𠉛鍂
agents/ # Agent 摰帋𣂼餈鞱蝑𣇉裦
workflows/ # Agent 撌乩犖撌亦&霈斤諹‘
prompts/ # Prompt 璅⊥踎瘚𧢲甅靘见䀹凒霈啣
evals/ # 璅∪romptAG Agent 霂
rag/ # 揣撘訫蝝X瘞渡瑪
tools/ # AI 典極 MCP/A2A
model-gateway/ # 璅∪頝舐眏恣霈∪滨漣嚗𥕢靽嘥靘𥕦
guardrails/ # 摰匧箸嵗撉䎚II 蝑𣇉裦
observability/ # Token辣餈麄劂閫剹鞉𧋦閫
model-registry/ # 璅∪mbedding埝芋
fine-tuning/ # 敺株唳旿撉諹蕭頦芥隡啣
docs/
domains/ # 憸鈭批毺㮾皞琜璅∪PI隞嗅唳旿鈭批
customer/
domain.yaml # 憸颲寧wnerLO銝𧢲虜靘肽
apis/ # 憸 API 憟𤑳漲
events/ # 憸鈭衤辣憟𤑳漲
services/ # 憸滚𦛚餈鞱嚗偦霈斗綫鞉𦆮憸𧼮撩嗅𣈲銝雿滨蔭
customer-profile-service/
src/ # 滚𦛚皞鞟嚗𥕢 cmd/src/internal 蝑
Dockerfile # 𨅯遣摰帋嚗偦𤩺𧋦雿栞 registry嚗䔶餈𥕦 Git
service.yaml # 滚𦛚餈鞱憟𤑳漲嚗駅wner韏硔皞鞱LO
README.md # 滚𦛚霂湔銵峕䲮撘譌unbook 亙藁
tests/ # 滚𦛚霂𤏪頝典瘚贝 tests/
workflows/ # 憸屸鵭鈭见𦛚蝻𡝗
data-products/ # 憸桐漣
policies/ # 憸霈輸䔮蝑𣇉裦
scorecards/ # 憸摨血餈鞱韐券
docs/
order/
payment/
fulfillment/
risk/
marketing/
platform/ # 穃像嚗𡁏𤏸
portal/ # Developer Portal嚗𥡝PI桐漣I 鈭批 scorecard
golden-paths/ # 頝臬嚗𥕦撱箸桐漣I 鈭批其漱隞䀹芋
scaffolds/ # 𡁏滚𦛚撉冽沲ockerfileervice.yamlatalog descriptor
orchestration/ # 撟喳蝱蝻𡝗嚗𥡝䌊拍𤚗霂瑁皞僐㴓憓𣂼
ci-cd/ # 瘚偌蝥踵芋銝滢摮䀹銝芣銝𡁜𦛚
environments/ # 質情 prod 𦆮 infra/gitops/
observability/ # 曎頝航蕭頦芸暺䁅恕隞芾”䀹芋
security/ # 摰匧交𦻖蝑𣇉裦璅⊥踎
data-platform/ # 唳旿撟喳蝱芸𨭌嚗𡁶𤌍敶𨰻蝻塩恣蝞
ai-platform/ # AI 撟喳蝱芸𨭌嚗匁LM GatewayAGvalsgent Runtime
supply-chain/ # SBOMrovenance蝑曉
cost/ # FinOps蝞𨰜虜璉
developer-tools/ # CLIDK𣂼砍𧑐撘穃極
scorecards/ # 撟喳蝱桐漣 AI 鈭批摨西
docs/ # 撟喳蝱 onboarding
contracts/ # 頝典𣪧典虾霂餃蝥衣嚗𥡝 CI
apis/ # OpenAPI / GraphQL 蝑㗇𦻖
events/ # AsyncAPI topicchema 摰寧
schemas/ # JSON Schemarotovro 蝑匧 Schema
datasets/ # 唳旿鈭批憟𤑳漲祗銋匧峕㺭株挪
ai/ # AI 撌亙romptAG隡啜凝靚憟𤑳漲
resources/ # 鈭𤏸皞僐erraform moduleubernetes CRD 蝑㕑皞𣂼
policies/ # OPA/RegoedarAM 蝑厩
catalog/ # 𤑳緵毺㮾皞琜蝟餌隞嗚皞僐wner賢𪂹喟頂
systems/ # 蝟餌蝥扯銵刻噢銝隞嗅峕𣈲𤑳銝𡁜𦛚蝟餌
components/ # 滚𦛚蝡胯蝑厩隞嗆辺皞鞟 GitOps 頝臬
resources/ # 唳旿摨瓐𨰜摮塩笆鞊∪蝑㕑皞鞉辺
apis/ # API 嚗𥟇 contracts/apis apis
data-products/ # 唳旿鈭批嚗𥟇 data-products 峕㺭
ai-products/ # AI 鈭批嚗𥟇 ai/applications 峕祥
models/ # 璅∪嚗𥕦抅蝖璅∪凝靚mbedding 埝芋
agents/ # Agent 嚗𥡝蝥批 owner
domains/ # 憸嚗偦 owner銝𧢲虜𥕦𧑐
scorecards/ # 鈭扳笔漲鈭批停蝏芥
governance/ # 瘝餌毺㮾皞琜蝑硔秄蝳憭滨
standards/ # API隞嗚極蝔卝
decisions/ # ADR嚗𥡝扇敶閖憭扳沲蝑硔𡒊賒銵𢆡
ownership/ # ACI蝥扯楝敺滚𦛚 owner
slo/ # SLO 霂舫蝞堒鈭衤辣蝑𣇉裦
security/ # 憡撱箸芋蝥扼
supply-chain/ # SLSABOM蝑曉
ai-governance/ # AI 鈭批rompt凝靚 Agent 撌亙瘝餌
data-governance/ # 唳旿鈭批II𣂼
architecture-gates/ # 煺漣撠梁貌笔停蝏芥桐漣停蝏芸 AI
migration/ # 餈摰嫘敶孵蝏墧芋撘𤩺祥
evidence/ # 恣霈~旿皜
risk-register/ # 憌𡡞埯餉扇嚗𥕦憿餅 owner園𡢿
postmortems/ # 鈭𧢲憭滨嚗𥕦秄蝳𥕦 playbook
playbooks/ # 餈鞱嚗𥕦蘨𡁶鍂瘚嚗䔶銝芣函蔡蝏
ai-incident-playbook.md # AI 銝枏鈭衤辣嚗𡁜劂閫剹瑕仃AG 瘙⊥
infra/ # 餈鞱摨訫漣毺㮾皞琜鈭𤏸皞僐ubernetesitOps蝏𨅯
cloud/ # 鈭𤏸揭PCAM抅蝖 IaC
kubernetes/ # Kubernetes base manifest蝢斤笆鞊
base/ # base嚗𡲬eploymentervicePADBetworkPolicy
services/
policies/ # od 摰匧蝏栶蝑曄蝑𣇉裦
gitops/ # 蝥扳𤤿𠶖憯唳 dev/staging/prod 函蔡隞
environments/
dev/ # 撘𤑳㴓憓 overlay嚗𥕢舀𧋦憸腈撉峕
staging/ # 憸 overlay嚗𥟇𦻖餈𤑳鈭改撉諹峕㺭
prod/ # 煺漣 overlay嚗偦 digesteplicas皞僐摨衣
networking/ # DNSngress/Gatewayervice Mesh蝏𦦵
databases/ # 唳旿摨枏靘卝隞賬蝘餃霈輸䔮亙藁
vector-databases/ # 唳旿摨枏蝝W滚𦛚餈鞱滨蔭
feature-stores/ # 函瑪/蝳餌瑪摮睃餈鞱滨蔭
model-serving/ # 璅∪滚𦛚PU拍憬摰寥
messaging/ # Kafkaulsar𨰜opic 韐寧滨蔭
storage/ # 撖寡情摮睃隞嗅賢𪂹滨蔭
secrets/ # Secret 撘閧鍂亦頂蝏毺摰𡄯銝滢摮䀹
disaster-recovery/ # 憭憭溻箏捆瞍𠉛𡁏𧋦
environments/ # 𦶢滨征憸嘥蝥扯
shared/ # 曹澈撅∟祗銋厩摨瓐DK霂訫允
tools/ # 撘穃極蝘餃極
scripts/ # 芸𢆡𡁏𧋦
tests/ # 頝典瘚贝蝥行霂訫隞枏
docs/ # 鈭箇掩航粉﹝嚗䔶蹂誨 contracts/catalog/governance
.github/ or ci/ # CI 撌乩
```
颲寧斗鱏嚗
| | 毺㮾蝐餃 | 銝滚輯蝸 |
| ---- | -------- | -------- |
| `apps/` | 雿㯄㮖漱隞条 | 憸霈輸䔮 |
| `ai/` | AI 摨𠉛鍂gentAGrompt隡啣璅∪毺㮾 | 憸𧊋蝏𤩺祥湔𦻖唳旿霈輸䔮 |
| `domains/` | 銝𡁜𦛚唳旿鈭批毺㮾 | 撟喳蝱𡁶鍂撌亙銝剖恣 |
| `platform/` | 𤏸芸𨭌撌亦毺㮾 | 銝𡁜𦛚閫 |
| `contracts/` | API隞嗚chemaI 撌亙𣬚蝥衣 | 朞秩 |
| `catalog/` | 蝟餌隞嗚皞僐I 鈭批wner 𣬚賢𪂹 | 餈鞱 |
| `governance/` | 蝑硔秄蝳憭滨毺㮾 | 銝𡁜𦛚隞 |
| `infra/` | 鈭𤏸皞僐銵𣬚㴓憓蝏𨅯毺㮾 | 銝𡁜𦛚 |
| `shared/` | ∟祗銋厩 | 憸璅∪ |
餈坔蝏𤘪瓲敹𨀣銝𡁻餈嗘辣憭嫖峕糓𠹺𣬚賢𪂹 owner蝥抒𤌍敶訫臭誑諹提颲寧銝滩
### 2.1.1 霈曇恣銝芸ế剝䔮憸
隞颱𡝗隞嗅𥕢葵
1. 餈嗘葵韏 owner 嚗帋笔𣪧啣𣪧RE格祥舀沲
2. 餈嗘葵韏糓隞憭拙瘝餌餈䀹糓芸銁
3. 餈嗘葵韏韐寞䲮嚗帋犖蝐餃𤏸I/CDeveloper Portalubernetes恣霈∠頂蝏麄桀像 AI Runtime
4. 餈嗘葵韏臬虾毺㮾皞琜賢炏鋡急嵗撉䎚蝵脯恣霈⊥餅鱏
銝芣隞嗅嗉◤憭帋葵憸𤑳靽格㺿∩犖蝐駁霂餃箏膥嗉”颲曆函蔡蝏嚗屸𡁜虜霂湔𦆮雿滨蔭嚗峕𣂼蝥艾蝵脯𤌍敶訫瘝餌鈭𠉛掩韏
### 2.1.2 楛摨西
| | 銝餉 owner | 䀹凒閫血 | 箏膥瘨 | 瘛勗漲霂湔 |
| ---- | ---------- | ------------ | ---------- | -------- |
| `apps/` | 雿㯄 / 銝𡁜𦛚瘚𣪧 | 鰵憿菟𢒰/B 摰鮋 | CI蝡臬瘚讠頂蝏 | 芣㗁頧賭撉䔶漱隞睃雿㯄蝻𡝗臭誑靚鍂 BFFPI極雿𨀣 AI 雿㯄亙藁嚗䔶銝齿𥅾摰痹銝滨凒亥粉 |
| `ai/` | AI 鈭批 / AI 撟喳蝱 | Prompt gent 撌亙䀹凒AG 蝝W湔鰵贝楝隡圈秄蝳 | LLM Gatewaygent Runtimevals瘚讠頂蝏 | 蝞 AI 鈭批銵諹鈭扼虾隞亙ㄟ AgentromptAG隡啜敺株餈鞱旿嚗䔶 AI 撅舀鰵嚗䔶 API桐漣颲寧 |
| `domains/` | 憸 / Stream-aligned Team | 憸璅∪PI/鈭衤辣憟𤑳漲桐漣 | CI蝥行霂𨰻atalog桀像 | 蝞⊿𥕢漣臭誑臬𣈲銝敶X滚𦛚函𡠺蝡衤㚚▲撅 `services/`嚗憿駁 `service.yaml` `catalog/components` ownerPI隞嗚桐漣 GitOps 頝臬 |
| `platform/` | 撟喳蝱 / Platform Team | Golden Path 餈凋誨𧢲沲瘞渡瑪璅⊥踎 API | Developer Portal𧢲沲I/CD亦頂蝏 | 蝞﹦𨅯雿閙凒摰寞凒摰匧撱箏鈭支亦恣銝𡁜𦛚滚𦛚嚗䔶銝滨凒銝箸銝芣函蔡嚗𥕦𣂷璅⊥踎霈方楝敺芸𨭌亙藁 |
| `contracts/` | 憟𤑳漲 owner + 瘝餌 owner | API隞嗚I 撌亙皞𣂼蝑𣇉裦憟𤑳漲䀹凒 | CI摰寞 | 蝞∟楊蝥艾𥣞敶勗摰寞株捶𤩺𦻖賢銁餈䠷蝑劐遠雿滨蔭箏膥航粉憟𤑳漲 |
| `catalog/` | 撟喳蝱 + owner | 鰵 API唳旿鈭批鰵 AI 鈭批鰵韏餉扇 | Developer Portalcorecard恣霈∪紡韏硋㦛 | 蝞﹦𡏭韐蠘提韏𤥁笔漲憒atalog 銝齿糓皞鞟隞瓐摰鮋蝵脩𠶖銋煺銵屸蝵桐葉敹 |
| `governance/` | 瘝餌 / 摰匧 / 唳旿瘝餌 / | DR拍蒈霈啜憭硋恣秄蝳蝥扼 | CI恣霈∠頂蝏麄olicy as Code摰⊥ | 蝞∟蝑硋鈭批憿餃偷𤩺㦤典虾霂鳴憭硔園★OA&MDR株揭摨磰鋡怨䌊冽嵗撉峕撖澆枂 |
| `infra/` | 撟喳蝱撌亦 / SRE / owner | 䀹凒蝢斤 | GitOpsubernetes撟喳蝱瘚讠頂蝏 | 蝞∟摨批銝齿𥅾嚗𥕦𡏭典𪑛牐葵芯葵 digest皞僐䲮撘謿 |
| `shared/` | 撟喳蝱鈭怠 owner | 𡁶鍂 SDK霂訫允銝𡁜𦛚霂凋撌亙漣 | 蝻𤥁霂𨰻 | 憭滨鍂𥅾曹澈隞憪贝”颲曇恥𨰻𣈲隞塩悼蝥衣銝𡁜𦛚璁艙嚗𧼮撖孵嚗䔶摨娍 `shared/` 瞍𥪜敶V葉 |
### 2.1.3 隞枏瘛瑕隞梶賢𧑐
蝏𤘪臭誑蝘滢摨𤘪𡢅
| 𤘪 | 箸艶 | 𡁏 | 憌𡡞埯 |
| ---- | -------- | -------- | -------- |
| Monorepo | 撘箝蝏煺旿 | 靽萘銝𡃏膩嚗峕鈭批銁銝銝芯摨枏 CODEOWNERS楝敺秄蝳 CI | 敹匧𣪧𤩺㺿厩𤌍敶𤏪 `domains/`platform/`infra/`governance/` owner |
| 憭帋 Polyrepo | 滚𦛚擃睃漲芣祥蝳餃撩𣪧憟誩榆撘之 | 滚𦛚皞鞟滚𦛚隞橒銝剖隞㮖 `contracts/`catalog/`governance/`platform/`infra/gitops/` 𣇉鍂芸𢆡峕郊 | 敹 catalog 霈啣 `sourceRoot`gitopsPath`wnerPI隞嗚LO株楝敺滚𦛚憭梯 |
| 瘛瑕 Hybrid | 隡撣貉嚗𥕦像itOps 葉嚗屸銝准𡠺蝡 | 憸憟𤑳漲atalog GitOps 葉嚗𥟇摨行𦆮 `domains/*/services/*` 𣇉𡠺蝡𧢲 | 敹𡒊&隞賣糓憟𤑳漲毺㮾皞琜銝剖隞枏滚𦛚隞枏嗥輕憟𤑳漲撖潸稲瞍宏 |
臬炏𦠜𦆮 `domains/*/services/*`嚗隞枏𤘪嚗諹舀沲蹱𧋦頨怒坔蘨閬瘥譍葵滚𦛚鋡怨蕭皞臬
```text
owner -> 滚𦛚皞鞟 -> API / Event 憟𤑳漲 -> 𨅯遣摰帋 -> digest -> GitOps -> 餈鞱 -> 摰∟恣霂
```
滚𦛚皞鞟銝滚銁 `domains/*/services/*`嚗諹秐撠𤏸其誑銝衤蝵桀ㄟ𤾸𤑳揣撘𤏪
```yaml
service: customer-profile-service
domain: customer
owner: team-customer
sourceRoot: https://git.example.com/customer/customer-profile-service
catalogComponent: catalog/components/customer-profile-service.yaml
gitopsPath: infra/gitops/environments/prod/customer/customer-profile-service
apis:
- contracts/apis/customer-profile.openapi.yaml
events:
publishes:
- contracts/events/customer.profile.updated.asyncapi.yaml
```
### 2.1.4 曄蔭
| 閬𦆮 | 雿滨蔭 | 銝齿綫𣂷 | |
| ---------- | -------- | ---------- | ---- |
| 滚𦛚皞鞟 | `domains/{domain}/services/{service}/` 𣇉𡠺蝡𧢲撟嗅銁 catalog 憯唳 | `platform/`infra/` | 滚𦛚撅硺嚗䔶撅硺撟喳蝱璅⊥踎𣇉㴓憓 |
| Dockerfile / Containerfile | 滚𦛚皞鞟 | `infra/gitops/` | Dockerfile 讛膩憒遣餈鞱嚗䔶讛膩鞟㴓憓蝵脣𪑛銝芰 |
| 煺漣𨅯𧋦 | `infra/gitops/environments/prod/...` 雿輻鍂 digest | `domains/*/services/*` | 煺漣餈鞱 owner 蝞∴銝滚𤌍敶閙 |
| OpenAPI / AsyncAPI | `contracts/` `domains/*/apis`domains/*/events` | `docs/` | 憟𤑳漲閬 CI𣂼澆捆 |
| 唳旿鈭批憟𤑳漲 | `domains/*/data-products/` `contracts/datasets/` | BI 亥” | 唳旿鈭批臬虾瘝餌漣嚗䔶芣糓亥”颲枏 |
| RAG 蝝W憟𤑳漲 | `contracts/ai/`ai/rag/` | 摨𠉛鍂隞撣賊 | RAG 𣳇膄蝑𣇉裦恣霈∪ |
| Prompt 𧋦 | `ai/prompts/` `contracts/ai/prompts/` | 撌亦蝖祉 | Prompt 臬虾霂虾摰⊥鸌韏漣 |
| 敺株餈鞱旿 | `ai/fine-tuning/`governance/evidence/ai/` starter kit `fine-tuning-run.yaml` | 璅∪撟喳蝱芸㦛憭抵扇敶 | 敺株◆霂唳旿撉諹蕭頦芥隡啜蒈霈啜 |
| Kubernetes Deployment | `infra/kubernetes/` `infra/gitops/` | 滚𦛚皞鞟雿靝蛹毺㮾 | Deployment 舐㴓憓𤤿𠶖撱箏銋厩賢𪂹 |
| 滚𦛚 owner 韏硋 | `catalog/components/` + `domains/*/domain.yaml` | README 霂湔 | owner韏硋笔𦶢 Developer Portal恣霈∪ scorecard 瘨晶 |
| | `governance/decisions/` | 單𧒄𠰴予霈啣 | ADR 虾餈賣滲虾憭滚恣憌𡡞埯峕綉園★ |
| 摰匧靘见 | `governance/architecture-gates/` `governance/evidence/` | CI 瘜券 | 靘见 owner𧒄踵綉芸𢆡餅鱏 |
### 2.1.5 撠誩虾賢𧑐
銝滩甈⊥批遣蝡见渡𤌍敶𤏪雿𦒘隞乩漣嚗
```text
domains/{domain}/domain.yaml # 憸颲寧wnerLO 銝𧢲虜
domains/{domain}/services/{service}/ # 滚𦛚皞鞟 sourceRoot
contracts/apis/ # 撖孵 API 憟𤑳漲
contracts/events/ # 頝典鈭衤辣憟𤑳漲
contracts/ai/ # AI 撌亙AGrompt凝靚摯憟𤑳漲
catalog/components/ # 滚𦛚𤑳緵wner賢𪂹 GitOps 頝臬
catalog/data-products/ # 唳旿鈭批𤑳緵 owner
catalog/ai-products/ # AI 鈭批𤑳緵蝥批旿頝臬
infra/gitops/environments/ #
platform/golden-paths/ # 𥕦遣䔶漱隞䁅楝敺
governance/standards/ #
governance/decisions/ # ADR
governance/architecture-gates/ #
governance/evidence/ # 摰∟恣
```
餈嗘葵撠誩賢𧑐喲睸䔮憸矋
1. 靚𥅾銝芾
2.
3. 摰笆憭𡝗㗁霂箔蝥艾
4. 摰蝵脣芯葵𧋦
5. 摰行說頞喳秄蝳
6. 摰憌𡡞埯憭硔蝑硋典𪑛
### 2.1.6 摮埈挾蝥抒拚猐
蝏𤘪賢𧑐摰寞粹䔮憸条銝齿糓峕糓銝芸畾菔◤憭𡁜蝏湔擪誑銝见畾萄憿餅𡒊&銝餉提雿滨蔭嚗
| 摮埈挾碶縑 | 毺㮾皞 | | 嗡誑靚 |
| ---------- | ---------- | -------------- | -------------- |
| 憸 owner蠘器 SLO | `domains/{domain}/domain.yaml` | `catalog/domains/`摰⊥𥁒 | `domain.yaml` |
| 滚𦛚 owner賢𪂹unbook | `domains/*/services/*/service.yaml` 𡝗憟𤑳漲 | `catalog/components/`eveloper Portal | `service.yaml` |
| 滚𦛚皞鞟雿滨蔭 | 滚𦛚隞栞楝敺 `domains/*/services/*` | `catalog/components/*.yaml` `sourceRoot` | 摰鮋 Git 皞鞟 |
| 𨅯 | 滚𦛚 `Dockerfile` / `Containerfile` | 撟喳蝱𡁏I 璅⊥踎 | 滚𦛚遣摰帋 |
| 𨅯 digest | Container Registry / provenance | `infra/gitops/` | registry digest + provenance |
| prod 函蔡𧋦eplicas皞鞾 | `infra/gitops/environments/prod/...` | catalog 餈鞱瘚钅𢒰 | GitOps |
| API 憟𤑳漲 | `contracts/apis/` `domains/*/apis/` | API portalatalog/apis | 箏膥航粉 OpenAPI / GraphQL 憟𤑳漲 |
| 鈭衤辣憟𤑳漲 | `contracts/events/` `domains/*/events/` | 鈭衤辣臬像 UI | 箏膥航粉 AsyncAPI / Schema 憟𤑳漲 |
| 唳旿鈭批 | `domains/*/data-products/` + `contracts/datasets/` | catalog/data-products桃𤌍敶 | 唳旿鈭批憟𤑳漲 |
| PromptAG摯憟𤑳漲 | `ai/` + `contracts/ai/` | catalog/ai-productsI 閫X踎 | 𧋦 AI 憟𤑳漲 |
| 敺株唳旿銵諹 | `ai/fine-tuning/` `governance/evidence/ai/` | starter kit讠蒈霈啁頂蝏 | `fine-tuning-run` 霂旿 |
| 憭硋憌𡡞埯 | `governance/architecture-gates/`risk-register/`evidence/` | PR 霂恣霈∪紡 | 瘝餌旿 |
1. 箏膥航粉憟𤑳漲隡睃鈭舘䌊嗉祗閮霂湔
2. GitOps 滨蔭隡睃鈭擧霈文
3. catalog 韐蠘提𤑳緵𣬚揣撘𤏪銝滩皞鞟蝥血函蔡毺㮾
4. governance 臭誑餅鱏扇敶蓥憭硋銵亙嚗䔶銝滚𣂷蛹銝𡁜𦛚摮埈挾𠯫撣貊颲穃
5. README 嚗䔶摨娍銝箏𣈲銝鈭见嚗𥕦𥣞臬蔣摰寞恣霈∪餈鞱摮埈挾嚗屸摨磰亙虾
### 2.1.7 䀹凒曇楝
蝏𤘪摰𧼮極雿𨀣誑銝衤⊿曎頝舀糓隡賢𧑐𤐄摰𡁶頝臬
啣遣煺漣敺格
```text
撱箸芋
-> domains/{domain}/domain.yaml 憯唳颲寧 owner
-> domains/{domain}/services/{service}/ 𣇉𡠺蝡𧢲𥕦遣皞鞟
-> service.yaml 憯唳蝡臬藁韏硔LO皞鞱𨅯隞枏
-> contracts/apis 銝 contracts/events 憯唳憭㚚憟𤑳漲
-> catalog/components 瘜典滚𦛚 sourceRoot/gitopsPath
-> CI 𨅯 SBOMrovenance瞍𤩺
-> infra/gitops/environments/{env}/... 憯唳函蔡𧋦銵𣬚
-> governance/evidence 霈啣煺漣撠梁貌靘见
```
唳旿鈭批
```text
蝖株恕唳旿霂凋
-> domains/{domain}/data-products/{data-product}.yaml 憯唳 ownerLO 韐寡
-> contracts/datasets/ 憯唳 Schema靽萘
-> data-platform 蝻塩𤩺𣂼恣唳旿
-> catalog/data-products 瘜典
-> governance/data-governance 霈啣 PII憭硋憭滚恣
```
AI 鈭批 Agent嚗
```text
AI 鈭批摰帋
-> ai/applications ai/agents 憯唳箸艶蝥扼𣂼鈭箏極蝖株恕
-> ai/promptsi/ragi/toolsi/evals 𧋦 Prompt蝝U
-> contracts/ai/ 撌亙AGrompt隡啜凝靚憟𤑳漲
-> model-gateway 滨蔭璅∪頝舐眏蝞堒滨漣曇楝
-> governance/ai-governance 銝 governance/evidence/ai 霈啣摰⊥鸌株揭敺株餈鞱
-> catalog/ai-products 瘜典 owner蝥扼韏硋 scorecard
```
餈嗘⊿曎頝舐寞糓嚗𡁏蝥艾𤌍敶𨰻蝵脯旿敹◆銝脰絲蘨撱箇𤌍敶𨰻撱粹曎頝荔隡𡁻𡝗蝐鳴芸遣曇楝嚗𣬚頂蝏煺璅⊥憭批憭望綉
### 2.1.8 撟嗉
臬炏𡠺蝡见枂劐誑銝贝坔ế
1. owner 銝滚撠勗嚗𡁻笔𣪧啣𣪧RE格祥 AI 瘝餌銝滚憸𤑳蝻𤥁蝐餅隞嗚
2. 笔𦶢銝滚撠勗嚗𡁏銝𡁜𦛚GitOps 讐㴓憓嚗峕祥摰⊥䰻摰∟恣霂憭滚恣
3. 箏膥瘨嚗鐗ubernetesIeveloper Portal汿恣霈∪紡鈭箇掩﹝銝滚靘肽隞賡蝏𤘪𡝗
4. 憌𡡞埯蝑厩漣銝滚撠勗嚗𡁶鈭折蝵脯见極II 唳旿靘𥕦憿餅港艇 owner 屸秄蝳
5. 瘝⊥蝔喳 owner㗇㦤韐寞䲮厰秄蝳銝滩嚗𥕦嚗𣬚䀹凒憸𤑳𣬚迅摰𡁜齿
6. 銝銝芰𤌍敶訫𨅯憪见嗆㗁頧賭唳芋㴓憓蝵脣瘝餌摰⊥鸌嚗蝡见朖 `domains/`platform/`infra/` `governance/`
7. 銝銝芸鈭怎𤌍敶訫𨅯枂霂㵪摨𥪜曹澈撅賣𦆮∟祗銋厩 SDK霂訫允
### 2.1.9 撣貉躰秤
1. `platform/` 𡁏憭找葉𠹺蝵脣摰⊥鸌瘚憛噼
2. `shared/` 𡁏頝典銝𡁜𦛚璅∪䔿獢塚霈拙銝芷曹澈撖寡情撘箄
3. `catalog/` 敶㯄蝵脩頂蝏函𤌍敶閙辺蝏湔擪 replicas皞鞾啣漲蝑𣇉裦
4. `docs/` 敶枏蝥衣躰䌊嗉祗閮霂湔嚗峕瓷 OpenAPIsyncAPISON Schema 𣇉隞嗚
5. `infra/` 敶㮖銁 Helm values Kustomize patch 銝𡁜𦛚閫
6. AI PromptAG 𣂼敺株摰⊥鸌坔銁摨𠉛鍂隞撖潸稲皛𡁜摰∟恣
7. 滚𦛚隞橒瘝⊥銝剖 catalog蝥血瘝餌蝝W銝𡁏瘜訫蝑婙𡏭靘肽韐蠘提拙銁
### 2.1.10 owner
蝏𤘪 owner券秄蝳摰𡄯隞𢛶𨀣隞嗅允𨅯極蝔𧢲祥頂蝏麨霈曄蔭
CODEOWNERS䀹凒霂旿嚗
| 頝臬 | owner | 雿𤾸恣 | 敹 | 䀹凒霂旿 |
| ---- | ---------- | -------- | -------- | -------- |
| `apps/**` | 雿㯄 / 銝𡁜𦛚瘚𣪧 | 摨𠉛鍂 owner 1 鈭 | 瘚贝撱箝蝡航捶虾霈輸䔮蝥行韐寞 | 霈啣皛朞恣撉峕 |
| `ai/**` | AI 鈭批 owner + AI 撟喳蝱 owner | AI owner 1 鈭綽擃㗛拙極瑕𡖂瘝餌摰⊥鸌 | Prompt/RAG/Evals蝞𨰜I 鈭衤辣 | AI 霂旿韐行𧋦隡唳𥁒𨳍/Prompt 𧋦霈啣 |
| `domains/{domain}/**` | 撖孵 | 憸 owner 1 鈭綽頝典憟𤑳漲&霈 | 憸瘚贝蝥血摰嫘LO桐漣corecard | domain 䀹凒霈啣蝥血渲扇敶 |
| `platform/**` | 撟喳蝱 | 撟喳蝱 owner 1 鈭綽 Golden Path 䀹凒憭滚恣 | 𡁏霂𨰻敶鉝 API 澆捆𤏸撉峕 | 撟喳蝱霂湔蝘餅 |
| `contracts/**` | 憟𤑳漲 owner + 瘨誨銵 | producer 諹秐撠睲 consumer | OpenAPI/AsyncAPI/Schema 澆捆霂𨰻reaking change 璉 | 憟𤑳漲𧋦摰寞扳𥁒 |
| `catalog/**` | 撟喳蝱 + 韏漣 owner | 韏漣 owner 1 鈭 | catalog schemawner 摮睃銁ourceRoot/gitopsPath 航噢 | 峕郊corecard |
| `governance/**` | 瘝餌 / 摰匧 / 唳旿瘝餌 | 瘝餌 owner 1 鈭綽憿孵䔶犖摰⊥鸌 | 憿寡格鰵斢𨅯漲/POA&M/ADR 暹𦻖摰峕㟲 | ADR拍蒈霈啜恣霈∪紡 |
| `infra/**` | SRE / 撟喳蝱撌亦 / owner | owner 1 鈭綽煺漣䀹凒 SRE 摰⊥鸌 | GitOps diff蝑整皞鞾齿 | 䀹凒𨰻itOps 峕郊霈啣皛朞 |
| `shared/**` | 曹澈摨 owner | owner 1 鈭綽韐寡&霈 | API 澆捆韏硋蔣韏𡝗 | 𧋦霂湔韐寡蝘餉扇敶 |
蹱糓嚗𡁶𤌍敶 owner 銝齿糓𣈯𡁶䰻鈭算峕糓撖寡鈭扳迤蝖格餈𥡝憟誩鈭𧢲韐蠘提賢蘨
Markdown 臬炏憟踝撉諹憟𤑳漲秄蝳餈鞱頝臬臬炏
蝥折秄蝳遣霈桀銝匧
1. 頝臬嚗𡁶鍂 CODEOWNERS靽脲擪𣈲甇Y凒桃𤌍敶𨰻
2. 霂凋嚗𡁶鍂 schema蝥血摰嫘霂𨰻corecard 坔ế摰寞糓
3. 霂嚗朞甈∪ ADR恣霈∟拇𦻖 POA&M 湔㺿霈啣
### 2.1.11 銝𡁜極琿曎
賢𧑐銝滚鈭箸撌亦輕厩揣撘𨰻𤌍敶閧鋡急笔極琿曎瘨嵗撉𧼮
| 撌亙 | 霂餃𤌍敶 | 𣇉漣 | 喲睸 |
| ---------- | ---------- | ---------------- | -------- |
| Developer Portal | `catalog/`domains/`contracts/`governance/scorecards` | 滚𦛚啣㦛PI 桐漣𤌍敶𨰻I 鈭批corecard | owner賢𪂹韏硔unbook 敹 |
| CI/CD | `apps/`domains/`ai/`contracts/`shared/` | 遣鈭抒霂閙𥁒𨳍BOMrovenance | 瘚贝蝥血摰嫘瘣𠺶 |
| Container Registry | 滚𦛚遣摰帋I provenance | 𨅯 tagigest瘣墧𥁒 | 蝳迫雿輻鍂芰倌 GitOps |
| GitOps / CD | `infra/gitops/`infra/kubernetes/` | 峕郊蝘餅𥁒𨳍 | production 雿輻鍂 digest皛朞楝敺 |
| API Gateway | `contracts/apis/`catalog/apis/` | 頝舐眏恣霈⊥𠯫敹 | OpenAPI reaking change 埈綉 |
| Event Platform | `contracts/events/`catalog/` | topicchema registry韐寡 | 鈭衤辣澆捆wnerII 扇 |
| Data Platform | `domains/*/data-products/`contracts/datasets/` | 唳旿蝻塩𤩺𥁒𨳍桀恣 | 韐券 SLOII |
| AI Platform | `ai/`contracts/ai/`catalog/ai-products/` | Prompt 𧋦AG 蝝W隡啁贝楝 | Evalsuardrails蝞𨰜犖撌亦&霈斤 |
| Observability | `catalog/`service.yaml`domain.yaml`infra/` | SLO貌銵函霅艾霂舫 | ownerLO𠯫敹//曇楝餈質葵 |
| GRC / Audit | `governance/`嗥𤌍敶𨰻evidence/`tarter kit | 恣霈∪紡OA&M | 霂摨艾倌蝵脩𠶖 |
餈坔銋㗇糓羓𤌍敶蓥靝犖蝏𤘪蝥找蛹𨅯極𦻖𨀣銝芰𤌍敶閙瓷厩迅摰 owner匧極韐嫘
瘝⊥撠曹摨磰◤𦯀蛹隡蝥扳𤌍敶𨰻
### 2.1.12 隞𡒊緵厰★蝘餃蝏𤘪
宏銝滩隞𡡞憪页𪄳毺㮾皞僐 owner‘憟𤑳漲嚗鞉郊蝘餃𢆡鞱楝敺銝页
| 嗆挾 | | | 蝳迫霂臬躹 |
| ---- | ---- | ---- | -------- |
| L0 | 𧢲啁𠶖 | 堒枂滚𦛚PI隞嗚桐漣I 韏蝵脰楝敺wner | 湔𦻖蝘餃𢆡 CI蝵脣峕𧒄憭望 |
| L1 蝝W | 𤑳緵 | 撱 `catalog/`嚗䔶蛹瘥譍葵滚𦛚桐漣I 鈭批皞𣂼遣蝡 ownerourceRootitopsPath | catalog 敶𤘪鰵撌亙蝱韐佗銝齿𦻖 CI portal |
| L2 憟𤑳漲 | 迅颲寧 | OpenAPIsyncAPI桐漣I 撌亙𣬚蝥西 `contracts/` 蝑劐遠雿滨蔭 | README嚗䔶典虾霂餃 |
| L3 函蔡 | 氖餈鞱 | 羓㴓憓函蔡𤣰𥕦 `infra/gitops/`嚗𣬚鈭找蝙 digest 𣬚 | 霈拇𤌍敶訫 prod 𧋦皞鞾 |
| L4 瘝餌 | 銵仿 | 憓𧼮 `governance/`DR秄蝳OA&M owner | 惩恣蝔页銝滚㰘䌊冽嵗撉旿 |
| L5 撟喳蝱 | 霈斤䰻韐蠘蝸 | `platform/golden-paths`𧢲沲ortal scorecard 𦠜楝敺 | 霈拇銝芸𣪧憟𦯀峕芋 |
罸𡢿臭誑靽脲瘛瑕敶X∟粥蝏𤘪嚗峕唂滚𦛚 catalog 鈭见冽唂峕鰵
遙雿訫畾菟劐蜓毺㮾皞僐宏璉
### 2.1.13 蝏𤘪撉峕𤣰皜
憟㛖𤌍敶閧銝滨齿糓𨅯餈𥕞賢炏蝔喳隞乩
1. 瘥譍葵滚𦛚臬炏賣𪄳 owner蝵柴蝥艾itOps 頝臬LOunbook 餈睲甈∪
2. 瘥譍葵 API 隞嗆糓箏膥航粉憟𤑳漲摰寡韐寡漤𢒰 breaking change 瘚
3. 瘥譍葵唳旿鈭批臬炏 owner祗銋匧藁敺II 蝻睃憭滚恣
4. 瘥譍葵 AI 鈭批臬炏 Prompt/RAG/撌亙/璅∪/霂摯//憸/鈭箏極蝖株恕/鈭衤辣
5. 瘥譍葵煺漣函蔡臬炏 GitOps 蝞∠𡒊&𨅯 digest皞鞾PA頝臬
6. 瘥譍葵曹澈摨𤘪糓西瘝⊥輯蝸憸銝𡁜𦛚霂凋韏𡝗霂訫蝔卝
7. 瘥譍葵瘝餌憿寞糓西 schema內靘卝hecker株楝敺摰∟恣撖澆枂蝏𤘪
8. 瘥譍葵臬炏 CODEOWNERS摰𡁏 owner 憭齿瓲
9. 瘥譍葵喲睸摮埈挾臬炏銝芣嚗稪atalog 血蘨舀晷霂湔
10. 唬犖賢炏 Developer Portal catalog 10 𪄳銝芾𤤿 owner蝥艾銵𣬚𠶖憌𡡞埯
隞乩嚗諹秩𡒊𤌍敶訫蘨𦦵韏瑟䔉唬誨餈䀹瓷匧耦𣂼虾餈鞱𨯫虾摰∟恣虾瞍磰銝𡁏沲
### 2.1.14 滚𦛚皞鞟瘜訫耦
`domains/{domain}/services/{service}/` 舀綫霈文銝齿糓&蝑娍寞糓憸颲寧PI
鈭衤辣桐漣 owner 曉銁銝𠹺嚗峕鰵鈭箏捆𡏭銝芣∩蛹隞賢𧑐皞鞟雿滨蔭敺
蝳颯撱箇頂蝏麄祗閮敶勗ế銝芣⊥𦆮敺堒笆銝滚笆嚗䔶讠𤌍敶訫摮梹𣬚滚𦛚賢炏蝔喳
蝥艾atalogitOps摰∟恣曇楝
撣貉敶X銝页
| 敶X | 蝷箔頝臬 | 箸艶 | 敹◆銵仿揣撘 |
| ---- | -------- | -------- | -------------- |
| 憸 | `domains/customer/services/customer-profile-service/` | 嚗偦笔𣪧笔笆璅∪憟𤑳漲蝡臬蝡航 | `service.yaml`domain.yaml`atalog componentitOps 頝臬 |
| 憿嗅滚𦛚 | `services/customer-profile-service/` `services/customer/customer-profile-service/` | 蟮隞枏撌脫 `services/` 蝥血嚗𥕦像啣極霈斗醌誯▲撅 | `service.yaml.domain`service.yaml.owner`atalog component |
| 霂剛撌乩 | `packages/customer-profile-service/`apps/customer-api/` | Nodeoava.NET 蝑 monorepo workspace 撌脫漲摰 | workspace package metadataservice.yaml`atalog sourceRoot |
| 滚𦛚隞 | `git@example.com/customer/customer-profile-service.git` | 憭帋芣祥蝳餃撩憟誩榆撘之 | 銝剖 catalog `sourceRoot`蝥西楝敺itOps 頝臬株楝敺 |
| 蝟餌 | `legacy-adapters/customer-mainframe-adapter/` | 抒頂蝏毺/ERP/SaaS 𣂼撱箄挽 | 憸敶鍦𦻖蝥艾蝘餌𠶖刻恣拍蒈霈 |
㰘捏皞鞟曉銁嚗屸◆皛∟雲隞乩銝滚𧶏
```yaml
service: customer-profile-service
domain: customer
owner: team-customer
sourceRoot: domains/customer/services/customer-profile-service
runtimeUnit: container
buildDefinition: Dockerfile
catalogComponent: catalog/components/customer-profile-service.yaml
gitopsPath: infra/gitops/environments/prod/customer/customer-profile-service
apiContracts:
- contracts/apis/customer-profile.openapi.yaml
eventContracts:
publishes:
- contracts/events/customer.profile.updated.asyncapi.yaml
sloRef: governance/slo/tier-2.yaml
runbook: governance/playbooks/customer-profile-service.md
```
滚蘨舐瑪蝝g銝齿糓瘝餌鈭见憿餉氜冽㦤典虾霂餃蝥阡嚗䫤service.yaml` 霂湔滚𦛚𦒘韏碶
`domain.yaml` 霂湔颲寧 owner嚗𢱌catalog/components` 𣂷𤑳緵亙藁嚗𢱌infra/gitops` 霂湔煺漣頝穃𪑛銝芰穿瘝餌旿霂湔
賢炏拇糓行𦻖𨰜
### 2.1.15 蓥葵滚𦛚撠誩
銝芣∠𤌍敶蓥摨𥪜蘨隞嗅允嚗諹𨅯虾虾瘚贝虾閫虾摰∟恣餈鞱皞𣂼仍撠讐銝页
```text
customer-profile-service/
README.md # 蝏嗘犖滚𦛚霂湔冽䲮撘譌韏硋亙藁
service.yaml # 蝏蹱㦤蝥佗owneromain韏硔LO
Dockerfile # 𨅯遣摰帋嚗𤤿鈭找蝙 digest嚗䔶𢠃𤩺𧋦雿𤘪鈭方 Git
src/ # 滚𦛚皞鞟嚗𥕦雿梶隞舘祗閮雿喳
tests/ # 瘚贝隞嗆霂訫憟𤑳漲瘨晶瘚贝
apis/ # 滚𦛚𧋦 API 憟𤑳漲嚗𥕦虾峕郊 contracts/apis/
events/ # 滚𦛚/霈a𧋦隞嗅蝥佗甇交撘閧鍂 contracts/events/
migrations/ # 霂交∠𡠺䭾㺭 schema 餈宏嚗𥡝楊鈭怠
config/ # 霈日蝵桀砍𧑐撘蝵殷銝滢摮条鈭批
runbooks/ # 滚𦛚蝥扳雿𨀣蝥折𡁶鍂 playbook 隞齿𦆮 governance/
docs/ # 霈曇恣霂湔蠘‘ ADR 暹𦻖
```
滚𦛚霈豢𦆮𨀣撱箏餈鞱餈嗘葵滚𦛚霈支摰嫰銝滚霈豢𦆮𨀣銝芰㴓憓蝵脖摰嫰摨瑟亥楝敺
靘肽憯唳雿舘皞鞱摨枏蝘啣虾隞交𦆮 `service.yaml`嚗𤤿鈭批祆㺭鈭折 digest鈭批𦶢滨征
ServiceAccount HPA 曉銁 `infra/gitops/environments/prod/...`
| 捆 | ∠𤌍敶 | GitOps / Infra | |
| ---- | ---------- | ----------------- | ---- |
| 滚𦛚皞鞟霂𨰻ockerfile | | | 摰讛膩憒滚𦛚 |
| 暺䁅恕蝡臬藁摨瑟韏硋ㄟ | | 舀晷 | 摰賑撅硺滚𦛚餈鞱憟𤑳漲 |
| 煺漣𨅯 digest | | | 摰鈭𡒊㴓憓𤤿𠶖旿 |
| 煺漣 replicasPADB | | | 摰讐㴓憓摰寥蝑𣇉裦 |
| Secret | | | 靽嘥 Secret 撘閧鍂 |
| 頝典唳旿摨栞挪 | | | 餈嘥颲寧嫣蛹 API隞嗆唳旿鈭批 |
銝芣∠𤌍敶訫憪𧢲㗁頧賢銝芷銝𡁜𦛚閫嚗諹秩∟器憭改銝芣∠𤌍敶訫憪讠輕鈭抒㴓憓霂湔皞鞟
餈鞱韏瘀銝芣∠𤌍敶閙瓷 `service.yaml` 𣇉隞瑕蝥佗霂湔銝滩鋡怠像摰∟恣蝟餌蝔喳
### 2.1.16 GitOps 撠誩
GitOps 𨀣銝芰㴓憓𥡝銵䔶銝齿糓𨀣∩誨糓隞 base㴓憓 overlay 𣬚㴓憓
```text
infra/
kubernetes/
base/
services/
customer-profile-service/
deployment.yaml # 撌乩韐蠘蝸撉冽沲
service.yaml # Kubernetes Service嚗䔶蝑匧鈭𦒘 service.yaml
hpa.yaml # 暺䁅恕芸𢆡拍憬摰寧
pdb.yaml # 舐鍂
network-policy.yaml # 暺䁅恕蝵𤑳颲寧
kustomization.yaml
policies/
image-verification/ # 𨅯蝑曉BOMrovenance
pod-security/ # Pod 摰匧箇瑪
network/ # 黎蝵𤑳蝑𣇉裦
gitops/
environments/
dev/customer/customer-profile-service/
kustomization.yaml # 撘𤑳㴓憓 overlay嚗虾雿輻鍂賢𪂹 tag
staging/customer/customer-profile-service/
kustomization.yaml # 憸 overlay嚗峕𦻖餈𤑳
prod/customer/customer-profile-service/
kustomization.yaml # 煺漣 overlay嚗憿餃 digest
rollout.yaml # 蝏踵皜鞱撘誩
release-evidence.yaml # 旿蝝W𡝗
```
GitOps
1. `base/` 芣𦆮璅⊥踎嚗䔶鈭找撅鮋𦶢滨征摰寥
2. `dev/` 臭誑瘣鳴銝滚蝏閗𨅯抅蝖蝑𣇉裦
3. `staging/` 摨𥪜偷𤩺𦻖餈𤑳鈭改冽䔉撉諹皛𡁜
4. `prod/` 敹◆雿輻鍂銝滚虾 digest嚗𣬚甇W蘨典虾 tag 雿靝蛹煺漣靘脲旿
5. GitOps 霈啣摰鮋餈鞱眏 Kubernetesrgo CDlux 瘚讠頂蝏靘䜘
6. owner 撖 replicas皞鞾憸腈㗇𥋘摨衣蝒堒藁韐蠘提嚗峕 owner 撖寥滚𦛚銵䔶蛹韐蠘提
餈坔璆𡁜嚗峕∪𣪧笔虾隞仿憸烐鈭斗撟喳蝱 SRE 臭誑蝔喳瘝餌恣霈∩犖睃虾隞亥蕭皞胼𨅯𪑛銝 commit 遣鈭𪑛銝
𨅯𪑛銝 digest 鋡恍蝵脣芯葵𪑛甈 GitOps 峕郊𠰴煺漣
### 2.1.17 Catalogervice.yaml domain.yaml
catalog 潭糓𤑳緵𣬚揣撘𤏪銝齿糓䭾鰵撌亙蝱韐艾蝔喟𡁏航悟 `domain.yaml`service.yaml`itOps 蝥行
𣂷蛹摮埈挾毺㮾皞琜catalog 峕郊𨅯憿颱犖撌亦輕 catalog嚗䔶◆霈啣 sourceRef lastSynced嚗
撟嗥眏 CI 璉 catalog 銝擧憟𤑳漲臬炏瞍
| 摮埈挾 | 銝餌 | catalog 銝剔閫坿𠧧 | 瞍宏憭 |
| ---- | -------- | ---------------- | -------- |
| 憸颲寧 owner | `domains/{domain}/domain.yaml` | 撅閧內憸啣㦛𣪧 | catalog 銝滚嚗𥕦𧒄餅鱏僎 |
| 滚𦛚 owner賢𪂹銵𣬚 | `service.yaml` | 撅閧內滚𦛚 scorecard | catalog 瘣曄 |
| 皞鞟雿滨蔭 | 摰鮋 Git 頝臬 / `sourceRoot` | 𣂷頝唾蓮亙藁 | 頝臬銝滚虾颲暹𧒄餅鱏 catalog 璉 |
| API / Event 憟𤑳漲 | `contracts/` 憟𤑳漲 | 𣂷 API 韐寡揣撘 | 憟𤑳漲蝻箏仃𣇉澆捆園獈 |
| GitOps 頝臬 | `infra/gitops/` | 𣂷亙藁𠶖 | catalog 銝滨輕 replicas digest |
| SLOunbookn-call | `service.yaml` + `governance/slo/` | 𡁜∟祕△ | 蝻 owner撩 runbook 𣇉撩 SLO scorecard |
| 煺漣餈鞱 | Kubernetes / Argo CD / Observability | 撅閧內芾粉 | 餈鞱𧼮 catalog 毺㮾 |
甇交䲮銝页
```text
domain.yaml + service.yaml + contracts/* + infra/gitops/*
-> catalog/components/*
-> Developer Portal / Scorecard / 摰∟恣撖澆枂
```
齿䲮烐凒啣蘨賜鍂鈭舘 PR嚗䔶質悟 portal 銵典湔𦻖惩恣亙𧑐憟𤑳漲 GitOps 𡝗祥瑕虾隞仿
𦦵韏瑟䔉厩頂蝏罸劐縑摰鮋銝𦠜銝芰頂蝏罸蝏湔擪銝隞賭摰嫰憭望綉
### 2.1.18 蝥扯秩隞嗅 AI 颲寧
隞枏頞𦠜䔉頞𠰴曹犖蝐颯I唳㦤其犖 AI agent 蝏湔擪𤌍敶閧霈拐犖銋蠘霈抵䌊撌亙仿
賣㺿𪑛賣㺿㺿摰諹頝睲銝芯蝥抒𤌍敶閗秐撠烐 `README.md`嚗屸 AI 𤥁䌊桃𤌍敶訫
`AGENTS.md` 𣇉隞瑞輕方秩汿
| 辣 | 霂餉 | 摨磰秩𡒊捆 | 銝滚 |
| ---- | ---- | ------------ | -------------- |
| `README.md` | 鈭箇掩撘𤏸恣霈∩犖 | 𢛵虜閫蝔卝銵峕䲮撘譌 | 銝滢銝箸㦤蝥血𣈲銝 |
| `AGENTS.md` | AI agent𡁏𧋦蝏湔擪 | 舀㺿甇V憿嫘𦶢隞扎𤌍敶閗器虜閫 | 銝滢摮䀝摰𧼮煺漣 |
| `*.schema.json` | CI𣂼膥恣霈∪紡 | 摮埈挾蝏𤘪憛恍★撅閗器 | 銝滩圾𠹺 |
| `*.example.yaml` | 賢𧑐霂訫允 | 撠誩虾摮埈挾辣銝抒內靘 | 銝齿𤜯隞摰鮋★ |
蝥扯秩隞嗉摨磰砲𡃏擧䔉𡏭銝芰𤌍敶蓥蛹隞韐蠘提隞嗆𦒘㺿摰諹秄蝳
憭滚銝餅沲﹝霂湔嚗𣬚𤌍敶閗秩隞嗥漲銝綽schema checker 韐蠘提箏膥撉諹
### 2.1.19 銝滚芋隡唳楛摨
蝏𤘪臭誑𧫴畾菔氜銝滩銝箔𦦵韏瑟䔉摰峕㟲甈⊥折唍皛⊥厩𤌍敶𨰻璅∠摨娪峕楛摨佗
| 嗆挾 | 鍂蝏 | 敹 | 臭誑 |
| ---- | -------- | -------- | -------- |
| S0 韏瑟郊 | 撠煾𤩺 | `domains/`contracts/apis/`catalog/components/`infra/gitops/`governance/decisions/` | 摰峕㟲撟喳蝱游恣霈∪紡 scorecard |
| S1 鈭批 | 憭𡁻滚𦛚憪见像 | `platform/golden-paths`service.yaml`PI/Event 憟𤑳漲itOps ODEOWNERS | 憭齿 FinOps OSCAL |
| S2 閫 | 憭帋∠瑪 | Developer Portal桐漣𤌍敶𨰻I 鈭批摨娪曎霂/POA&Mcorecard | 撠烐㺭雿𡡞嗵頂蝏笔虾 catalog |
| S3 | 𤏸𨰜錇隡桀抅蝖霈暹鴌 | 摰∟恣撖澆枂隡啜蝑整格鰵斢𨅯漲 | 见極靘见銵亙 |
嗆挾頞𦠜𡟺嚗諹滨𤌍敶閗摨血嗆挾頞𦠜頞𡃏鈭见憭抵扇敶𨰻 UI犖撌亥”銝芯犖蝏誯笔漲𣂼
銝齿糓嚗諹峕糓喲睸鈭见臭誑鋡急㦤冽嵗撉䎚◤ portal 𤑳緵◤摰∟恣撖澆枂◤餈鞱蝟餌
### 2.1.20 䀹凒霂恣皜
𣳇膄蝑𥪯誑銝钅䔮憸矋銵䕘
1. 餈嗘葵臬炏 owner嚗𥕦𨀣瓷 owner嚗䔶摨娍鰵憓𠺶
2. 餈嗘葵臬炏輯蝸毺㮾皞琜芣糓游末銝滚
3. 餈嗘葵韐寞䲮嚗𥕦𨀣瓷 CIortalitOps摰∟恣瘨摨𥪜
4. 餈嗘葵臬炏隡𡁜撌脫蝏湔擪摮埈挾嚗𥕦憿餃銋劐蜓毺㮾皞𣂼瘣曄
5. 餈嗘葵臬炏 CODEOWNERS旿嚗𥕦𣈯峕郊銵仿秄蝳
6. 餈嗘葵臬炏敶勗滚𦛚蝥艾itOps 硋恣霈∪紡敶勗憿餉‘餈宏霈∪皛朞楝敺
7. 餈嗘葵臬炏霈斤䰻韐蠘蝸嚗𥕦𨅯蘨隞嗅蝥批摰⊥鸌甇仿炊嚗𧼮撟喳蝱鈭批𤥁挽霈~
䀹凒摨𥪜蘨𦥑𨀣隞嗥宏扯楝敺宏霂湔嚗峕鰵頝臬 owner 諹秩隞塚憟𤑳漲
catalogitOps芸𢆡𡝗仿賣𪄳唳鰵雿滨蔭嚗僎銝娍瓷鈭见冽鰵扯楝敺
### 2.1.21 蝏𤘪蝐颱
蝥抒𤌍敶閧掩嚗諹峕糓摨㮖葉銵刻噢銝厩掩鈭见嚗𡁏摰𠺶摰𧼮鈭见餈嗘蝐颱摰墧毽韏瘀
舐𤌍敶閗銋梁
| 鈭见蝐餃 | 摰帋 | 雿滨蔭 | 䀹凒 | |
| -------- | ---- | -------- | -------- | -------- |
| 鈭见 | 𣂷葵摮埈挾𤥁銝箇毺㮾皞 | `domains/`contracts/`infra/gitops/`governance/` | PRwner 摰⊥鸌屸秄蝳 | schemaontract testolicy checkODEOWNERS |
| 瘣曄鈭见 | 隞擧摰䂿峕郊箸䔉揣撘𨰻瑕㨃 | `catalog/`eveloper Portal恣霈∪紡 | 芸𢆡 | 瞍宏璉瘚卝ourceRefastSynced |
| 閫鈭见 | 餈鞱蝟餌摰鮋 | Kubernetesrgo CDluxbservabilityIEM | 銵𣬚頂蝏煺漣銝齿 Git | SLO霅艾銵峕䔝恣霈⊥𠯫敹 |
䭾迨嚗䈣catalog/components/customer-profile-service.yaml` 臭誑撅閧內煺漣敶枏銝箇鈭批祆㺭 digest
𤥁皞鞾憸萘嚗𢱌docs/` 臭誑閫霈曇恣嚗䔶銝滩蹂誨 `domain.yaml`penAPIsyncAPI 𡝗㺭桐漣蝥佗撟喳蝱
臭誑𣂷靽格㺿亙藁嚗䔶摨𠉛 PR嚗𣬚眏撖孵摰峕摰⊥䰻撟嗚蝵脣摰∟恣
斗鱏𣂷葵摮埈挾摨磰砲曉銁隡睃雿輻鍂隞乩
1. 隡𡁶凒交㺿銝箇摮埈挾嚗峕𦆮憸 AI 鈭批蝥虫葉
2. 隡𡁶凒交㺿鈭扯銵𣬚𠶖摮埈挾嚗峕𦆮 `infra/gitops/` 𣇉㴓憓 IaC 銝准
3. 隡𡁏㺿䁅楊澆捆摮埈挾嚗峕𦆮 `contracts/` 蝑劐遠憟𤑳漲銝准
4. 隡𡁏㺿靘见畾蛛 `governance/` 銝准
5. 芰鍂鈭𤾸蝝W𡁜撅閧內畾蛛 `catalog/`
6. 芰鍂鈭舘圾𡃏挽霈∪霂湔摰對 `docs/` `README.md`
### 2.1.22 銝舘䌊曇楝
𤌍敶閧憿餉鋡怠極琿曎瘨芣糓𦦵韏瑟䔉嚗峕瘜訫耦𣂼像
```text
service.yaml / domain.yaml / contracts/*
-> CI 憟𤑳漲
-> catalog 峕郊
-> Developer Portal 撅閧內
-> scorecard 霂
-> release gate
-> audit export 霂旿撖澆枂
Dockerfile / SBOM / provenance / signature
-> CI
-> registry
-> 𨅯蝑曉
-> GitOps 撘閧鍂 digest
-> Kubernetes
infra/gitops/environments/*
-> Argo CD / Flux 峕郊
-> runtime
-> SLO
-> 鈭𧢲皛朞
governance/* / / evidence/*
-> policy check
-> risk register / POA&M
-> audit package
-> 蝞∠憭硋憭齿瓲
```
瘥譍葵銝蝥抒𤌍敶閖摨磰秐撠烐𦻖蝘滩䌊
| | 雿舘䌊 | 芣𦻖交𧒄 |
| ---- | ---------------- | -------------- |
| `apps/` | CI頂蝏麄蝡舐 | 雿㯄䀹凒 APILO皛朞 |
| `ai/` | EvalsLM GatewayI observability | Promptgent 𣂼撌仿蝵殷摰∟恣 |
| `domains/` | 憟𤑳漲瘚贝撱箝atalog 峕郊 | 憸颲寧𦦵滚𦛚 owner 摰寞宏 |
| `platform/` | 𡁏ortalcorecard | 撟喳蝱芣糓銝袇鋆穿銝滩霈斤䰻韐蠘蝸 |
| `contracts/` | 澆捆 | 頝典𣪧雿靝韏硋藁憭渡漲摰𡄯breaking change 曆誑𦠜𧒄𤑳緵 |
| `catalog/` | Developer Portal韏硋㦛恣霈∪紡 | 滚𦛚皞𣂼 owner 鋡怎𤑳緵 |
| `governance/` | 𡁏𧋦恣霈∪紡拙極雿𨀣 | 憭𡝗瘜閖𡡒摰∟恣銵交 |
| `infra/` | GitOpsubernetes撟喳蝱交綉 | 煺漣韏碶犖撌交雿頣諹蕭韐𤌴 |
西銝𡁶漣停敹◆摰帋𡏭晶摰韐寞䲮𤌍敶訫銝箏摰鮋嚗䔶摨𥪜蝥找蛹銝蝥扳𤌍敶𨰻
### 2.1.23 韏笔𦶢𣬚𤌍敶訫
滚𦛚PI隞嗚桐漣I 鈭批gent𥕦瘝餌憿寥摨娍笔𦶢摮埈挾賢𪂹嚗𣬚𤌍敶訫停隡
銝齿鱏萄偶韏
| | | 捂銵䔶蛹 | 敹‵霂旿 |
| ---- | ---- | -------- | -------- |
| `proposed` | 撌脫鈭找 | 摰~虾霂閧嚗䔶敺𡑒◤煺漣瘨撩靘肽 | owner𤌍箸辺隞 |
| `active` | 甇餈鞱撟嗅虾鋡急韐寡 | 虾餈𥕦 scorecard | SLOunbook蝥艾itOpsn-call |
| `deprecated` | 撌脣恐撣隞漤澆捆 | 銝齿鰵憓墧韐寡霈詨其耨憭滚 | 蹂誨蝘餌韐寡𨰻𠯫 |
| `retired` | 撌脤敶對銝滚輯蝸煺漣諹提 | 銝滚霈貉◤函蔡 | 銝讠瑪霂NS/API/topic 皜霈啣 |
| `exception` | 銝湔𧒄讐氖 | 𠯫滚蒂銵亙餈鞱 | 憌𡡞埯 owner𠯫踵綉OA&M |
鈭找葉蝏煺靽萘隞乩摮埈挾頝函𤌍敶閧穿
```yaml
name: customer-profile-service
lifecycle: active
owner: team-customer
domain: customer
tier: tier-2
sourceRoot: domains/customer/services/customer-profile-service
contractRefs:
- contracts/apis/customer-profile.openapi.yaml
gitopsRefs:
- infra/gitops/environments/prod/customer/customer-profile-service
sloRef: governance/slo/tier-2.yaml
runbookRef: governance/playbooks/customer-profile-service.md
riskRefs:
- governance/risk-register/risk-customer-profile.yaml
evidenceRefs:
- governance/evidence/releases/customer-profile-service-2026-06.yaml
```
摮埈挾滚虾隞交㟲嚗䔶霂凋◆蝔喳嗆糓 `owner`lifecycle`sourceRoot`contractRefs`gitopsRefs`
`sloRef`runbookRef` `evidenceRefs`嚗𣂷蛹 catalogcorecard恣霈∪紡 AI agent 望𦻖
### 2.1.24 𤌍敶閗”颲
銝滩羓㴓憓榆撘毽餈𥟇”颲撾𨀣⊥糓隞銵刻噢𨅯銝芰㴓憓雿閗銵𢞖鈭穃
蝞∠㴓憓餈蹱辺颲寧
銵刻噢
```text
infra/gitops/environments/
dev/
customer/customer-profile-service/
staging/
customer/customer-profile-service/
prod/
region-cn-north/customer/customer-profile-service/
region-us-east/customer/customer-profile-service/
regulated/
finance/customer/customer-profile-service/
```
摨𠉛恣誑銝衤摰痹
| 蝏游漲 | 摨娍𦆮 | 銝滚 |
| ---- | ------------ | -------------- |
| 摰寥 | replicasPA皞鞾憸腈PU | 銝滚鈭批捆 |
| 蝵𤑳 | namespacengressatewayetworkPolicy | 煺漣𣬚蝏𨀣𦆮𡁶 |
| 摰匧 | ServiceAccount蝑整ecret 撘閧鍂 | 𤨎𣬚㴓憓 |
| | digest摨衣皛𡁶蝏𤘪 | 煺漣𧋦㗇𥋘 |
| | 唳旿撽餌恣霈⊥𠯫敹𨰜隞賭 | 𤑳恣銝枏靘见 |
鍂憭帋 GitOps嚗䔶摨𥪯芣糓 `infra/gitops/` 隞瓐 `service.yaml.gitopsRefs`
catalog 隞栞楝敺銝滩霈拇閙䲮摰𡁶鈭折蝵脖摰𠺶
### 2.1.25 蝏𤘪虜閫璅∪䔶耨憭
| 齿芋撘 | 銵函緵 | | 靽桀 |
| ------ | ---- | ---- | -------- |
| `shared/` 銝𡁜𦛚銝剖蝱 | 𢠃𡁶鍂銝𡁜𦛚憛噼曹澈摨 | 憸颲寧仃嚗蝥抒肟銝穃𢆡刻澈 | 銝𡁜𦛚霂凋撌亙嚗𥕢𥡝 |
| `platform/` 亦恣銝𡁜𦛚函蔡 | 撟喳蝱𣬚輕銝芯煺漣滨蔭 | 撟喳蝱𣂷蛹嚗峕 owner 憭梯提 | 撟喳蝱靘𥟇芋嚗𤤿㴓憓𤤿𠶖𦆮 `infra/gitops/` |
| `catalog/` 见極鈭见 | catalog owner楝敺igestLO | portal 贝絲摰鮋/GitOps 瞍宏 | catalog 瘣曄嚗𡱰I sourceRef 瞍宏璉 |
| `docs/` 蹂誨憟𤑳漲 | README API隞嗅唳旿嚗䔶䭾㦤 | 瘨瘜閗䌊 breaking change | 撱 OpenAPIsyncAPIchema data contract |
| `infra/` 瘛瑕銝𡁜𦛚閫 | Helm values Kustomize overlay | 餈鞱鋡怨翰圾銝𡁜𦛚嚗皛𡁻 | 銝𡁜𦛚閫𧼮滚𦛚滨蔭芰恣餈鞱撌桀 |
| `ai/` 蝏閗颲寧 | Agent 湔𦻖霂颱𣇉凒交㺿 | AI 撅銝粹敶Z蝥抒鍂摰∟恣批仃 | Agent API隞嗚桐漣埈綉撌亙霈輸䔮 |
| `governance/` ﹝瘝⊥ | 摰峕㟲嚗䔶 CI摰∟恣銝齿 | 閫嚗䔶憭𡝗瘜訫 | 銝箸綉園★銵 schemaheckervidence owner |
瘝餌蹱糓嚗朞隞𡒊毽銋梧銝滩惩畺霈剛圾質◤箏膥摰痹銝滩牐犖撌亙摨𤏪賜眏撟喳蝱暺䁅恕頝臬
銝滩霈拇銝芸𣪧
### 2.1.26 2.1
恣 2.1 蝏𤘪摨娍嚗諹𦦵𤌍敶閙糓
1. 隞餅銝芣 catalog 亙藁賢炏餈賢皞鞟蝥艾itOpsLOunbookwner
2. 隞餅銝芰 Pod嚗諹𤏸蕭皞臬𨅯 digestBOMrovenance commit 䔶誨 owner
3. 隞餅 API breaking change嚗諹西䌊韐寡摰寞折秄蝳撟嗉蝘餅靘见
4. 隞餅銝芣㺭桐漣賢炏霂霂凋II蝻塩 AI 雿輻鍂颲寧
5. 隞餅 AI Agent嚗諹西 Prompt 𧋦AG 唳旿皞僐隡啁犖撌亦&霈斤摨磰楝敺
6. 隞餅銝芣祥園★嚗諹西蕭chema內靘卝heckerOA&M 恣霈∪紡
7. 隞餅銝芰𤌍敶訫賢炏霂湔 owner韐寞䲮毺㮾皞僐秄蝳蝘餅䲮撘誩
餈嗘臭誑鋡怨䌊撌亙憭折蝏𤘪撠望糓隡蝥批像唳沲牐犖撘隡朞圾𠺪蝏𤘪隞滨芣糓匧㦛
---
## 2.2 敺格∪捆
瘥譍葵敺格∪虾隞亥◤𣂷銝芣憭帋葵摰孵膥𨅯嚗䔶摰孵膥銝滚鋡急𦆮餈𥕦蝏煺蝞∠迤蝖桀瘜閙糓𨀣蝵脫𤤿𠶖銵𣬚𠶖𤌍敶訫
| | 毺㮾皞𣂷 |
| ---- | ---------- |
| 滚𦛚隞曉𪑛 | 暺䁅恕 `domains/{domain}/services/{service}/`嚗𥡝𥅾鍂 `services/*`apps/*`olyrepo 𣇉𡠺蝡𧢲憿餃銁 `service.yaml` / catalog 銝剖ㄟ楝敺 |
| Dockerfile / Containerfile 典𪑛 | `domains/{domain}/services/{service}/Dockerfile` |
| 𨅯典𪑛 | Container Registry / Artifact Registry嚗䔶餈𥕦 Git 隞枏 |
| 芯葵𨅯𧋦函蔡 prod | `infra/gitops/environments/prod/...` |
| Kubernetes Deployment / Service / HPA 典𪑛 | `infra/kubernetes/` `infra/gitops/` |
| 滚𦛚撅硺芯葵憸 | `domains/{domain}/domain.yaml` `catalog/components/` |
| API / Event 憟𤑳漲典𪑛 | `contracts/` `domains/*/apis`domains/*/events` |
| CI/CD 璅⊥踎典𪑛 | `platform/ci-cd/` |
| 滚𦛚𡁏嗅銁 | `platform/scaffolds/` |
| 餈鞱典𪑛 | `governance/standards/` |
| 敶枏餈鞱 | Kubernetes / Argo CD / Flux / Observability嚗䔶 Git ﹝ |
颲寧
```text
滚𦛚皞鞟銝𡡞𤩺撱箏銋㚁domains/*/services/* catalog/sourceRoot 摨栞楝敺
𨅯嚗䬙ontainer registry
函蔡infra/gitops/* infra/kubernetes/*
摰鮋餈鞱漲嚗鐗ubernetes
滚𦛚 owner 喟頂嚗䬙atalog/*
撟喳蝱嚗䮝latform/*
瘝餌嚗餙overnance/*
```
喲睸
1. 滚𦛚憭湛銝齿糓函蔡毺㮾皞僐
2. 𨅯雿輻鍂 tag 靘蹂鈭箇掩霂嚗𣬚鈭批質蕭皞臬 digest
3. GitOps 憯唳銝滩扇敶閗銵峕𧒄摰鮋
4. catalog 韐蠘提𤑳緵wner韏硋摨佗銝齿𤜯隞 deployment manifest
5. platform 韐蠘提璅⊥踎瘞渡瑪𤏸撉䕘銝齿𦻖蝞∩蝵脩
## 3. 霈曇恣
### 3.1 銝𡁜𦛚蝏𤘪蝡臬蝡航
銝𡁜𦛚瘚𣪧芣糓𣂼枂峕糓撖孵恥撉䎚∠迅摰𡁏賒隡睃韐蠘提臬𣪧滚蘨航◤其漱隞㗛★峕糓銝𦒘乩漣
### 3.2 憸鈭批
𨰻𣈲隞塩悼蝥艾𨯫蝑㕑𥕢摨𥪜蘨雿靝蛹餈鞱𨯫煺漣銝芷煺漣摨𥪜颲寧PI隞嗚桐漣LO
### 3.3 撟喳蝱芸𨭌
撟喳蝱銝齿𤜯銝𡁜𦛚嚗諹峕糓𣂷芸𨭌虾瘝餌極蝔贝𨥈雿蹂∪𣪧笔虾隞亙翰撱箸𤚗霂瑞㴓憓𦻖蝵格𣂼鞉𧋦
### 3.4 唳旿雿靝蛹鈭批
唳旿銝滚芣糓銝剖亢唳旿蝏煺撌亦蝏𤘪嚗諹峕糓圾銝𡁜𦛚笔𣪧𠰴瘝餌桐漣憿餃虾𤑳緵虾靽∩遙虾憭滨鍂虾餈質提
### 3.5 瘝餌芸𢆡
瘝餌銝滚銝餉靘肽鈭箏極摰⊥鸌嚗諹撟喳蝱暺䁅恕I/CD 韐券olicy as Code蝥艾冽醌瘚𧢲扯䌊銵䎚
### 3.6 銝擧啗器
蝟餌銋钅𡢿 API隞嗚蝥血滚𦛚讛悅餈𥡝甇Z楊毺凒亥挪格㺭嚗𣬚甇Y蠘器
### 3.7 瞍磰撘𤩺沲
銝滩蕭瘙甈⊥批之撱箄挽嚗諹孵像𥕦唳旿鈭批鞉郊瞍磰嚗屸齿𡝗芋撘𤩺揢銝芸摮烾
### 3.8 AI 楝憸颲寧
AI 摨𠉛鍂gent 諹䌊◆撱箇 API隞嗚桐漣埈綉撌亙銋衤I 撅虾隞亦𨳍𣂼芸𢆡雿𡡞拙𢆡雿頣賜凒蠘器諹粉蹱㺭嚗䔶銝滩 Prompt讐揣撘閙 Agent 霈啣銝𡁜𦛚毺㮾皞僐
### 3.9 靘𥕦曉虾霂
頧臭辣鈭支銝滚乩誨瞍𤩺嚗諹◆霂鈭抒隞擧撱箝韏硔函蔡湧曎頝胯鈭批憿餉憭笔蝑䈑餈嗘葵鈭抒抅鈭𤾸𪑛鈭𥕢韏硔𣂷 SBOM provenance蝑曉蝑𣇉裦
### 3.10 霈斤䰻韐蠘蝸舐恣
撟喳蝱撌亦𤌍撌亙嚗諹峕糓銝𡁜𦛚雿𨅯 Golden Path唬漣瘝餌交糓雿𤾸𣪧蠘恕頧踝撟喳蝱憓𧼮蝵柴憭齿摨佗撠勗憿餃唬漣齿鰵霈曇恣
---
## 4. 霂湔
## 4.1 滚蝱雿㯄
### 4.1.1 摰帋
滚蝱雿㯄仿𢒰𤑳鍂雿𨀣䲮撌亙餈鞱𨯫鈭箏嚗峕糓隡𤥁𤤿憭㚚銵函緵
### 4.1.2 銝餉
𡠺雿𣂷
1. Web 蝵𤑳
2. 蝘餃𢆡 App
3. 撠讐摨譌
4. Open API
5. 餈鞱𨯫𤾸蝱
6. 寥秄
7. 摰X撌乩
8. 睃極撌乩
9. 亙藁
### 4.1.3 霈曇恣閬
滚蝱雿㯄單釣雿㯄銝𡁜𦛚頧砍枏虾隞亙鈭怠𨥈摨𠉛凒摨訫滚𦛚𦻖
### 4.1.4 韐遙颲寧
滚蝱韐蠘提嚗
1. 摰X霈曇恣
2. 憿菟𢒰銝𦒘漱鈭雴撉䎚
3. 皜𣳇頧砍
4. 滨垢雿㯄
5. 滨垢銝𡒊鍂銝箏
6. 銝𦒘撉𣬚𦻖雿栶
---
## 4.2 雿㯄蝻𡝗
### 4.2.1 摰帋
雿㯄蝻𡝗鈭𤾸銋钅𡢿嚗諹憭帋葵憸銝粹箸艶撉峕𦻖
### 4.2.2 銝餉
1. BFF嚗朖 Backend for Frontend
2. API Gateway
3. GraphQL 蝵穃
4. 銝𡁜𦛚瘚蝻𡝗
5. 鈭衤辣霈a銝𡡞𡁶䰻
6. 𡁜亥砭滚𦛚
7. 雿𦒘誨蝔钅蝵柴
8. 箸艶 API
### 4.2.3 霈曇恣閬
雿㯄蝻𡝗瘝㗇銝𡁜𦛚閫瓲敹敶鍦鈭𡡞𥕢漣撉𣬚銝餉皜𣳇𦻖蝔讠𣂷銝𧢲霈株蓮雿㯄隡睃
### 4.2.4 蝳迫鈭钅★
1. 蝳迫撠瓲敹䠷鵭蝘臬銁 BFF 銝准
2. 蝳迫蝏閗 API 湔𦻖霈輸䔮憸唳旿摨瓐
3. 蝳蝻𡝗鞉鰵銝剖曹澈撅
4. 蝳迫撠韏硋甇亥
---
## 4.3 AI
### 4.3.1 摰帋
AI 鈭𦒘撉𣬚𥕢漣唳旿鈭批蝵𤑳銋钅𡢿嚗諹憭扳芋gentAG鸌敺𤩺蝝W埈綉撌亙銝箏虾餈鞱𨯫虾霂虾摰∟恣 AI 鈭批
AI 撅銝芣鰵 API 銝𡁜𦛚嚗屸鈭衤辣毺䰻銝𡁜𦛚唳旿鈭批𣬚鸌敺繮敺堒虾閫銝𠹺埈祥鞱䌊隞餃𦛚
### 4.3.2
AI 穿
1. AI 摨𠉛鍂嚗𡁏惣賢恥亙𨭌穃𨭌桀𨭌䰻霂䔮蝑𥪜芸𢆡𤥁
2. Agent Runtime嚗朞 Agent 扇敹霂𨰻犖撌亦&霈文𠉛氖
3. LLM Gateway嚗𡁶璅∪贝楝蝥扼恣霈~祆綉颲枏枂蝑𣇉裦
4. RAG 蝞⊿嚗𡁏mbedding揣撘𨰻𡢢𠺶銝𠹺
5. 摮睃嚗𡁶鍂鈭𡒊䰻霂蝝U㮾隡澆漲𦦵揣璅⊥蝝W霂凋蝻枏
6. PromptOps嚗䥪rompt 璅⊥踎渲扇敶𨰻瘚𧢲甅靘卝摨血
7. Model Registry嚗𡁏芋mbedding 璅∪埝芋𠶖箸艶蝥扼
8. Evaluation Pipeline嚗𡁶氖蝥輯瘚卝銁蝥輯瘚卝敶㘾埈甅犖撌交瘜典韐券
9. Guardrails嚗朞箸嵗撉䎚II 餈笔𢆡雿𦦵&霈扎摰孵蝑𣇉裦
10. AI Observability嚗関oken辣餈麄霂胯劂閫厩典𦶢銝剔
11. Tool Registry嚗鋫I 典極蝑㕑恣霈∪梢埯蝑厩漣
12. Agent-to-Agent 讛悅嚗𡁶鍂鈭𤾸 Agent ∩漱𤑳緵嚗䔶堒像亦漲
### 4.3.3 AI Mesh 銝𡡞蝏𨅯
AI Mesh AI 蝵𤑳嚗䔶銝剖 AI 憭扯銝𡁜虾隞交瘥譍葵憸銝剖虾憭滨鍂 AI AI 鈭批嚗諹悟摰蝏煺蝵穃蝥血瘝餌蝑𣇉裦鈭垍㮾
```text
AI 摨𠉛鍂 / Agent
鍂憸 API嚗𡁏銵峕䰻霂U撱箝銝𡁜𦛚
霈a鈭衤辣嚗𡁏亥恥𣈲隞条𨅯撅亦漲
唳旿鈭批嚗朞繮摰墧㺭蝑整犖蝢文銝𡁜𦛚
鈭批嚗朞繮𤥁悌蝏摰墧𧒄/蝳餌瑪
蝝W讐揣撘𤏪函䰻霂錇蝑硔靘见蟮霈啣
摰∟恣鈭衤辣嚗朞扇敶 Prompt銝𧢲鈭箏極蝖株恕
```
AI Mesh
1. 瘥譍葵 AI 鈭批 owner∠𤌍蝥扼隡圈箸㦤
2. Agent 鍂瘜典撌亙憿餃ㄟ Schema蝑㗇摰∟恣摮埈挾
3. AI 撅敺㛖凒亥粉嚗峕∪𢆡雿𨅯憿餌 API 批極雿𨀣
4. RAG 蝝W銝滚蹂誨唳旿鈭批毺䰻霂嚗𣬚揣撘訫憿餃虾餈賣滲蝑𣇉裦
5. 擃㗛拙𢆡雿𨅯憿餅鈭箇掩蝖株恕鈭箏銝滩韏𡝗芋贝䌊穃ế
6. AI 鈭批啣漲/B皛𠾼蝥批 AI 瘚䔶犖撌交𦻖蝞~
### 4.3.4 LLM Gateway 憟𤑳漲
LLM Gateway 舀芋𧢲𦻖瘝餌亙藁嚗屸滨蔭璅∪摰∟恣蝑𣇉裦
LLM Gateway 敹𣂷
1. 璅∪頝舐眏嚗𡁏箸艶辣餈麄㗇𥋘璅∪
2. 𠉛氖嚗𡁜湔𦻖璅∪靘𥕦
3. 銝𡡞蝞梹匧𣪧㴓憓璅∪霈曄蔭
4. 摰∟恣霈啣嚗朞扇敶閗窈瘙唳旿rompt 𧋦oken蝑𣇉裦蝏𤘪
5. 滨漣蝑𣇉裦嚗𡁏芋舐鍂齿鞉𧋦撘X芋憬撠譍銝𧢲𤥁乩犖撌交蝔卝
6. 捆蝑𣇉裦嚗朞皛扎煺縑蝷箸㜃梢埯餅鱏
7. 瘚𧢲蝏煺湧蠧撱嗉霂胯oken蝏萘霂閧諹捶
### 4.3.5 RAG 銝𤾸讐揣撘閙
RAG 蝞⊿𪙛𨅯虾嘥遣蝡见銁𨅯虾餈賣滲銝𨳍
RAG 𡠺嚗
1. 皞𣂼憿餌蒈霈 owner𣂼唳旿
2. ◆靽萘皞鞾曎𧒄蝑曉銝𡁜𦛚
3. Embedding 璅∪䀹凒敹◆閫血蝝W滚遣霂摯嚗屸滚𡢢噼捶𤩺憯唬
4. 璉蝝W憿餅𣈲皛歹銝滩𦠜銝𠹺
5. 蝏𤘪箏蒂撘閧鍂𤥁格䔉皞琜喲睸銝𡁜𦛚蝑娍皞臬皞鞉
6. 𣂼撘閧鍂賭葉憿餌熙隡圈
7. RAG 蝝W𣳇膄撱箝嚗䔶銝粹扳㺭
### 4.3.6 Prompt隡啣
Prompt Agent 撌乩鈭𡒊鈭扯鈭改譍誨瑞恣
AI 𡠺嚗
1. Prompt 𧋦蝝a蝵桀虾餈賣滲
2. 蝳餌瑪霂𡝗瓲敹⊿䔮憸塩屸䔮憸塩䔮憸塩劂閫㕑秧撖澆鞉𧋦颲寧
3. 函瑪霂犖撌交𡂝璉典𦶢銝剔
4. 擃㗛拙㦤憿餅鈭箇掩蝖株恕曉恣霈∪娍鱏蝑𣇉裦
5. 瘥𤩺活璅∪rompt RAG 滨蔭䀹凒敹敶坿瘚卝
6. 雿舘捶撣豢撘閧鍂瑕仃韐亙憿餉圻霅艾
### 4.3.7 AI 鈭批
AI 鈭批◆隞交㦤典虾霂餃蝥西摨瓐atalog 峕祥蝔卝
```text
ai/applications/customer-service-agent/
ai-product.yaml
prompts/
system.prompt.md
policy.prompt.md
agents/
customer-service-agent.yaml
tools/
tool-permissions.yaml
rag/
sources.yaml
chunking.yaml
retrieval.yaml
evals/
regression.yaml
adversarial.yaml
cost.yaml
guardrails/
policy.rego
observability/
dashboard.yaml
docs/
README.md
runbook.md
```
`ai-product.yaml` 蝷箔
```yaml
name: customer-service-agent
owner: team-customer-experience
lifecycle: production
riskTier: high
users:
- customer-service-operators
businessGoal:
- reduce-average-handle-time
- improve-first-contact-resolution
modelGateway:
route: support-safe-default
maxInputTokens: 16000
maxOutputTokens: 2000
monthlyBudgetUsd: 3000
tools:
allowed:
- tool:domain:order:get-order-status
- tool:domain:customer:create-support-ticket
requiresHumanApproval:
- tool:domain:payment:refund
rag:
sources: rag/sources.yaml
retrieval: rag/retrieval.yaml
evals:
regression: evals/regression.yaml
adversarial: evals/adversarial.yaml
guardrails:
piiPolicy: guardrails/policy.rego
observability:
dashboard: observability/dashboard.yaml
slo:
taskCompletionRate: ">= 85%"
groundedAnswerRate: ">= 95%"
toolErrorRate: "<= 2%"
p95LatencyMs: 6000
```
### 4.3.8 Agent 讛悅銝𤾸極瑁器
Agent 讛悅撅𨅯極雿閙𠂔銝𧢲隡𣳇gent 憒鈭埝雿𣈯䔮憸矋賣𤜯隞恣霈∪銝𡁜𦛚颲寧
撱箄悅
| 讛悅撅 | 閫 | 霈曇恣颲寧 |
| ------ | -------- | -------- |
| Tool / Context Protocol | 霈拇芋𧢲 Agent 𤑳緵撌亙皞僐rompt 銝𧢲 | 銝齿餈啣虾靚 |
| Agent-to-Agent Protocol | 霈拐 Agent 餈𥡝隞餃𦛚𤑳緵𠶖甇亙蝏𤘪 | 銝滚霈貊恣霈∪憌𡡞埯蝑厩漣 |
| Domain API / Workflow | 迤銝𡁜𦛚 | 敹笔𣪧𥅾撟嗅 SLO 蝥行 |
Agent 讛悅瘝餌
1. 匧極 Tool Registry嚗 owner Schema蝑㗇𣂼蝥扼
2. Agent 靚鍂撌亙◆蝏讛 LLM Gateway Agent Runtime 蝏煺摰∟恣
3. Agent 銋钅𡢿銝滩湔𦻖隡𣳇◆靽萘唳旿𣂼𠉛漲
4. 憭 Agent 劐遙蝞𦯀𣂼鈭箏極亦恣
5. 讛悅典蘨蝻𡝗嚗䔶輯蝸憸銝𡁜𦛚閫
### 4.3.9 敺株瘝餌撌乩
敺株銝齿糓暺䁅恕厰★ PromptAG蝝a璅∪頝舐眏蝔喳皛∟雲撟嗡銝𡁜𦛚頞喃誑閬霈剔隡啜蝏湔擪鞉𧋦臬𢆡敺株
敺株箸艶敹閧𡠺瘝餌銝箏隡𡁏霈剔唳旿𧢲摯蝏𤘪煺漣韏
撌乩
1. 箸艶霈箄嚗朞秩𦒘蛹隞 Prompt / RAG / 撌亙蝻𡝗銝滩雲隞亥圾喲䔮憸塩
2. 唳旿嚗𡁜ㄟ舘悌蝏格䔉皞僐wner蝥扼II𣂼臬炏敺株
3. 唳旿嚗朞扇敶閙瘣𨰜蝑曇捶霈剔/撉諹/瘚贝
4. 摰鮋餈質葵嚗朞扇敶訫抅蝖璅∪悌蝏蝵柴銵𣬚㴓憓鞉𧋦
5. 霂嚗帋蝙函𡠺蝡贝隡圈撉諹韐券劂閫剹鞉𧋦
6. 璅∪餉扇嚗𡁜凝靚憿餉 Model Registry嚗峕𥅾厩𡠺蝡讠蝥扼皛𡁶
7. 摰⊥䰻嚗𡁻憌𡡞埯𡝗桀凝靚憿餌韐蠘提鈭箇&霈扎
8. 啣漲嚗𡁜凝靚餈𥕦撠𤩺𤩺 shadow 霂摯嚗踵揢煺漣璅∪
9. 烐綉嚗𡁶扳芋𧢲蝘颯撣詨
10. 敶寞㦤璅∪𤥁捶齿𧒄敹皛𡁜𣳇膄
`fine-tuning-run.yaml` 蝷箔
```yaml
name: support-answer-style-tuning
owner: team-customer-experience
baseModel: vendor:model-name:2026-05
riskTier: R3
reason: prompt-and-rag-failed-to-meet-tone-consistency
trainingData:
sourceDataProducts:
- data-product:support:resolved-ticket-dialogs
classification: confidential
piiRemoved: true
allowedUse:
- supervised-fine-tuning
disallowedUse:
- foundation-model-training
experimentTracking:
tracker: mlflow
experimentId: support-answer-style-tuning-2026-06
codeVersion: git:abc123
dataVersion: dataset:v18
evals:
quality: evals/support-quality.yaml
safety: evals/support-safety.yaml
regression: evals/support-regression.yaml
approval:
dataOwner: team-support-data
securityReviewer: team-security
modelReviewer: team-ai-platform
deployment:
shadowTrafficPercent: 5
rollbackModel: vendor:model-name:2026-05
```
---
## 4.4 憸鈭批
### 4.4.1 摰帋
鈭批糓隡硋像輯蝸隡喲睸銝𡁜𦛚僎隞仿煺漣餈鞱𨯫
### 4.4.2
舀覔撣貉𡠺嚗
| 憸 | 銝餉 |
| ---- | ------------------- |
| | 瘜典蒈敶𨰻澈隞賬瑞𤫇 |
| | 銝𧢲沲 |
| 霈W | 韐剔頧艾𨰻閧𠶖訫悼蝥血 |
| | 嗆狡甈整笆韐艾𣈲隞䀹𤘪𦻖 |
| 撅亦漲 | 摨枏 |
| 憌擧綉 | 鈭斗憌擧綉甈箄 |
| 仿 | 隡䀹𨳍圻颲 |
| | 煺漣蝑整 |
| 摰X | 撌亙霂腈∟扇敶𨰻霂匧 |
| | 韐艾 |
### 4.4.3 瘥譍葵憸鈭批
瘥譍葵憸鈭批摨磰秐撠穃
1. 憸踵艶∠𤌍
2. 憸颲寧銝𧢲
3. 銝𡁜𦛚 API
4. 憸鈭衤辣
5. 憸璅∪
6. 滚𦛚颲寧
7. 唳旿鈭批
8. SLO 銵峕
9. 璅∪
10. 䀹凒蝑𣇉裦
11. 𧋦蝞∠蝑𣇉裦
12. 憸遙鈭箝
### 4.4.4 憸滚𦛚鈭支
銋钅𡢿隡睃鍂隞乩
1. 峕郊 API嚗𡁶鍂鈭𤾸撩銝嗆䰻霂X𡒊&霂瑟
2. 憸鈭衤辣嚗𡁶鍂鈭𡒊𠶖𡁶䰻甇亥圾批㦤
3. 唳旿鈭批嚗𡁶鍂鈭𤾸𥁒銵具I鸌敺頝典瘣𧼮箸艶
4. 撌乩𡜐頝券罸鵭瘚諹‘踵㦤
### 4.4.5 憸颲寧
1. 銝銝芷𥅾㕑䌊撌梁璅∪
2. 銝銝芷𥅾㕑䌊撌梁唳旿
3. 銝滩湔𦻖霂餃霂仿
4. 頝券雿𣈯 API隞嗆唳旿鈭批摰峕
5. 憸撖嫣𦻖迅摰𡁏餈鞱韐券韐蠘提
### 4.4.6 憸鈭批
瘥譍葵憸鈭批摨娍蝔喳嚗𣬚&靽嗪蠘器銵諹提隞餃亙藁憟𤑳漲航蕭頦芥
```text
domains/order/
domain.yaml
apis/
public.openapi.yaml
internal.openapi.yaml
events/
order-status-changed.asyncapi.yaml
services/
order-command-service/
order-query-service/
order-workflow-worker/
workflows/
order-lifecycle.bpmn
data-products/
order-facts/
order-status-snapshot/
policies/
access.rego
retention.yaml
scorecards/
domain-readiness.yaml
docs/
README.md
domain-model.md
runbook.md
decision-log.md
```
`domain.yaml` 蝷箔
```yaml
name: order
displayName: 霈W
owner: team-order
lifecycle: production
businessCapability:
- order-capture
- order-lifecycle
- order-query
boundedContext:
upstream:
- customer
- product
- payment
downstream:
- fulfillment
- risk
interfaces:
providesApis:
- domain:order:orders-public-api
- domain:order:orders-internal-api
publishesEvents:
- domain:order:order-created
- domain:order:order-status-changed
ownsDataProducts:
- data-product:order:order-facts
- data-product:order:order-status-snapshot
slo:
availability: 99.95
commandLatencyP95Ms: 300
queryLatencyP95Ms: 200
governance:
dataClassification: confidential
pii: true
architectureGate: tier-1-domain
```
### 4.4.7 憸滚𦛚餈鞱憟𤑳漲
滚𦛚敹臬虾隞亦𡠺蝡见鍳甇U霂𨰻蝵脯蝻拙捆皛𡁶餈鞱颲寧
```text
domains/order/services/order-command-service/
src/
tests/
deploy/
configs/
service.yaml
catalog-info.yaml
Dockerfile # Containerfile
README.md
AGENTS.md
```
`service.yaml` 蝷箔
```yaml
name: order-command-service
domain: order
owner: team-order
lifecycle: production
runtime: service
entrypoints:
http:
port: 8080
events:
consumes:
- domain:payment:payment-authorized
publishes:
- domain:order:order-created
dependencies:
resources:
- resource:order-primary-db
- resource:order-event-topic
apis:
- domain:customer:customer-internal-api
dataAccess:
owns:
- order_primary_db
reads:
- customer_profile_view
container:
dockerfile: Dockerfile
imageRepository: registry.company.com/order/order-command-service
tagPolicy: git-sha
digestRequired: true
sbomRequired: true
provenanceRequired: true
signatureRequired: true
resources:
requests:
cpu: "500m"
memory: "512Mi"
limits:
cpu: "2"
memory: "2Gi"
slo:
availability: 99.95
latencyP95Ms: 300
operations:
health: /health
readiness: /ready
runbook: docs/runbook.md
rollback: deploy/rollback.md
```
### 4.4.8 滚𦛚摰孵膥𤥁器
滚𦛚摮覀𨅯雿閙撱箏餈鞱餈嗘葵滚𦛚皞𣂼仍靽⊥嚗䔶靽嘥𨅯嚗䔶銝滢摮䀹銝芰㴓憓函蔡
滚𦛚韐蠘提嚗
1. 滚𦛚隞霂訫臬𢆡亙藁
2. Dockerfile / Containerfile
3. `service.yaml` 銝剔蝡臬藁摨瑟韏硔皞鞱𨅯隞枏憯唳
4. 滚𦛚蝥 runbookollback 霂湔峕𧋦霂閙䲮撘譌
5. 滚𦛚 API隞嗅唳旿霈輸䔮颲寧
銝滚曉銁滚𦛚銝剔捆嚗
1. 煺漣𨅯
2. devtagingrod Deployment 舀𧋦𨅯 digest
3. Secret
4. 黎蝥批
5. Argo CD / Flux 㴓憓甇亦𠶖
---
## 4.5 唳旿鈭批蝵𤑳
### 4.5.1 摰帋
唳旿鈭批蝵𤑳煺漣唳旿頧砍銝箏虾靽~𤑳緵虾憭滨鍂桐漣銝箇拇綉I 摨𠉛鍂鸌敺𤩺蝝W蝞∠𣂷
### 4.5.2 唳旿鈭批蝐餃
| 蝐餃 | 霂湔 | 蝷箔 |
| ----------------------------- | ----------------------- | ----------------- |
| Source-aligned Data Product | 皞𣂼笆朣鞉㺭桐漣笔𣪧笔抅鈭𤾸憪衤⊥㺭 | 霈W𡒊唳旿鈭批𣈲隞䀹瘞湔㺭桐漣 |
| Aggregate Data Product | 𡁜唳旿鈭批笆憭帋葵皞鞉㺭桐漣銵峕 | 鈭斗 |
| Consumer-aligned Data Product | 箸艶桐漣 | 蝏讛𨯫撽暸弦抒鸌敺𨯫鈭箇黎 |
### 4.5.3 唳旿鈭批箸𧋦閬
銝芸唳旿鈭批摨𥪜
1. 唳旿鈭批滨妍
2. 銝𡁜𦛚摰帋
3. 唳旿
4. 唳旿雿輻鍂
5. 唳旿銵蝻塩
6. 唳旿摮埈挾霂湔
7. 霂湔
8. 湔鰵憸𤑳
9. 唳旿韐券
10. 銝𤾸蝥扼
11. SLA SLO
12. 雿輻鍂蝷箔
13. 䀹凒𡁶䰻
14. 銝𧢲虜靘肽
15. AI 瘨晶憯唳嚗𡁏糓霈貊鍂鈭舘悌蝏mbeddingAG鸌敺隡唳函瑪
16. 霈剔-臬炏氖蝥輻鸌敺銁蝥輻鸌敺摰墧𧒄蝡舐峕郊
### 4.5.4 唳旿
唳旿鈭批蝵𤑳穿
1. 唳旿
2. 桃恣
3. 唳旿銵蝻塩
4. 唳旿韐券瘚卝
5. 撟喳蝱
6. 霂凋
7. 撟喳蝱
8. 函瑪摮睃
9. 蝝W蝝X
10. 亥”撟喳蝱
11. 摰墧𧒄唳旿滚𦛚
12. AI 唳旿滚𦛚
13. 唳旿蝞∠
14. 唳旿銝𤾸恣霈~
### 4.5.5 唳旿瘝餌
1. 靚瓲敹⊥㺭𦠜㺭桀鉄銋剹
2. 靚桐漣株捶
3.
4. 唳旿敹蝻塩䀹凒𡁶䰻
5. 𤩺唳旿敹摰∟恣
6. 唳旿瘨晶敹航蕭頦芥烐綉株提
### 4.5.6 唳旿鈭批
唳旿鈭批摨娍銝𡁜𦛚霂凋 Schema蝻塩曉銁銝韏瑯
```text
domains/order/data-products/order-facts/
data-product.yaml
schema/
order-facts.schema.yaml
quality/
rules.yaml
lineage/
lineage.yaml
access/
policy.rego
examples/
sample.json
docs/
README.md
semantics.md
```
`data-product.yaml` 蝷箔
```yaml
name: order-facts
domain: order
owner: team-order
type: source-aligned-data-product
lifecycle: production
description: 霈W鈭斗鈭见唳旿鈭批
schema: schema/order-facts.schema.yaml
semantics:
grain: one row per order state transition
primaryTime: order_event_time
quality:
freshness: 5m
completeness: ">= 99.9%"
validityRules:
- quality/rules.yaml
lineage:
sources:
- resource:order-event-log
outputs:
- dataset:analytics:revenue-mart
access:
classification: confidential
pii: true
policy: access/policy.rego
consumers:
- team-finance-analytics
- team-risk-modeling
- ai-product:customer-service-agent
aiUsage:
allowed:
- rag
- feature-engineering
- offline-evaluation
disallowed:
- foundation-model-training
featureServing:
offlineStore: dataset:features:order-facts-offline
onlineStore: feature:order:latest-order-risk
vectorIndex:
enabled: false
slo:
freshnessMinutes: 5
availability: 99.9
```
### 4.5.7 唳旿撟喳蝱銝𡡞笔𣪧蠘器
唳旿撟喳蝱銝齿𥅾⊥㺭靘𥡝悟憸韐寞㺭桐漣芸𨭌
```text
嚗𡁏𥅾㗇㺭株祗銋剹𤩺㗁霂箝桐漣賢𪂹𠾼
唳旿撟喳蝱嚗𡁏𥅾㗇㺭桃𤌍敶𨰻chema Registry蝻塩𤩺瘚卝𣂼霈∠撟喳蝱
瘝餌嚗𡁏𥅾蝥批蝐颯II藁敺頝典韐券
```
### 4.5.8 唳旿鈭批 AI 冽㦤
唳旿鈭批蝵𤑳滚𦛚 AI 臬蘨 AI 敶𤘪𡁏𥁒銵冽韐寡
𥪜𢆡曇楝嚗
```text
鈭衤辣 / 憸唳旿摨枏
Source-aligned Data Product
諹祗銋匧嚗𡁻𢒰𤑳𣂼鈭批餈鞱𨯫
蝳餌瑪嚗𡁻𢒰烐芋贝悌蝏蝳餌瑪霂
函瑪嚗𡁻𢒰嗆綫𣂼銝芣
蝝W嚗𡁻𢒰 RAG祗銋㗇蝝U璅⊥蝝W訾撮獢
唳旿 PromptAGgent 峕芋敶埝
```
𡒊&
1. 撟喳蝱敹峕𧒄蝞∠ offline store online store嚗䔶悌蝏雿輻鍂銝𡁜𦛚摰帋
2. 摰墧𧒄蝡舐霂餃蝏讛銁蝥輻鸌敺 API 銝𧢲嚗䔶賜凒交𣄽交㺭亥砭
3. 蝝W◆憯唳唳旿鈭批mbedding 璅∪揣撘閧皛方滚遣蝑𣇉裦
4. AI 霂亥䌊蝔喳唳旿鈭批𣬚摰硺⊥甅嚗䔶賡鵭韏碶犖撌乩葩嗆甅靘卝
5. 唳旿鈭批䀹凒敹𡁶䰻銝𧢲虜 AI 鈭批僎閫血揣撘訫澆捆
6. 唳旿鈭批 ownerI 鈭批 owner 峕芋 owner 敹蝑曄蔡擃㗛 AI 箸艶蝥輸秄蝳
### 4.5.9 Lakehouse 唳㺭桐漣蝏𦦵腹頝臬
撟嗡銝𡁻賜凒湔㺭桐漣蝏栶笆撌脫唳旿隞枏 Lakehouse 銝𡄯鍂瞍磰撘讛楝蝥選
| 嗆挾 | 敶枏敶X | 喲睸 | 蝳迫霂臬躹 |
| ---- | -------- | -------- | -------- |
| L0 | 唳旿隞枏𡝗㺭袇撱箄挽 | 銵具wner 皜豢 | 嚗䔶寡提隞餉器 |
| L1 | 撱箇 Lakehouse 蝏煺摮睃諹” | 撘訫chema蝻塩 | Lakehouse 敶𤘪銝剖亢唳旿 |
| L2 | 霂擃䀝遠 | 霈拚笔𣪧笔ㄟ𦒘∟祗銋剹藁敺韐券 | 撟喳蝱蠘圾𠹺∪鉄銋 |
| L3 | 擐𡝗鸌 Source-aligned Data Product | 撱箇唳旿鈭批憟𤑳漲LO𡁶䰻韐寞甅靘 | 銝滚 |
| L4 | 撱箇 Aggregate / Consumer-aligned Data Product | 銝𡁜𦛚箸艶蝏鸌敺犖蝢文亥” | 霈抵瘙⊥皞鞉㺭 |
| L5 | 敶X唳旿鈭批蝵𤑳 | 𡃏捶蝻塩 AI 瘨芸𢆡𡝗祥 | 齿鰵葉摰⊥鸌㗇㺭 |
Lakehouse 澆銁鈭擧靘𤤿摮睃曇”鸌瘚霈∠瘝餌嚗𥟇㺭桐漣蝏𦦵隞瑕澆銁鈭擧蝖桅蠘提隞颯祗銋匧蝥血晶雿㯄舀𤜯隞蝟鳴頝臬蝔喳摨訫漣嚗鞉郊𢠃隞瑕潭㺭鈭批
---
## 4.6 芸𨭌撘誩像啣極蝔见
### 4.6.1 摰帋
芸𨭌撘誩像啣極蝔见銝箔∪𣪧笔𣪧唳旿𣂷蝏煺穃像撌亦憭齿摨佗鈭支峕祥
### 4.6.2 撟喳蝱
撟喳蝱撌亦穿
1. Developer Portal
2. 滚𦛚璅⊥踎𧢲沲
3. Golden Path
4. CI/CD 瘚偌蝥踴
5. IaC 霈暹鴌喃誨
6. GitOps
7. Kubernetes Serverless 餈鞱
8. 滚𦛚蝵烐聢
9. API 蝞∠
10. 滨蔭蝞∠
11. 撖𤨎蝞∠
12. 曎頝航蕭頦芥
13. 𡃏郎蝞∠
14. 蝞∠
15. 鞉𧋦蝞∠
16. 摰匧
17. 靘肽瞍𤩺瘚卝
18. 唾窈銝𤾸恣寡䌊
19.
20. 𥪜摨阡
21. SBOMrovenance撉𣬚倌
22. AI Platform嚗𡁏芋AG 撟喳蝱隡唳瘞渡瑪rompt 蝞∠ Agent 餈鞱
23. 霈斤䰻韐蠘蝸摨阡啁鍂蝛嗚
24. 摰孵膥鈭支嚗𡁻𤩺撱箝𤩺醌ag / digest 蝑𣇉裦elm / Kustomize 璅⊥踎 GitOps
### 4.6.3 撟喳蝱霈曇恣
撟喳蝱𤌍銝剜𦻖蝞∩𡢅峕糓霈拐∪𣪧笔虾隞亥䌊極蝔见𢆡雿頣
1. 芸𨭌𥕦遣滚𦛚
2. 芸𨭌唾窈
3. 芸𨭌滨蔭唳旿摨瓐摮塩𨰜
4. 芸𨭌摨𠉛鍂
5. 芸𨭌𡃏郎
6. 芸𨭌唾窈
7. 芸𨭌鞉𧋦
8. 芸𨭌摰匧
9. 芸𨭌𥕦遣 AI 摨𠉛鍂AG 蝞⊿ Agent 撌乩
10. 芸𨭌 SBOM provenance讐倌撉𣬚倌
11. 芸𨭌 Dockerfileubernetes base manifest 𣬚㴓憓漣 GitOps overlay
### 4.6.4 Golden Path
Golden Path 臬像啣𣪧煺蛹撣貉箸艶𣂷鞱楝敺
1. 𥕦遣銝銝芣滚𦛚
2. 𥕦遣銝銝芸蝡臬
3. 𥕦遣銝銝芣㺭桐漣
4. API
5. 蝏煺霈方
6. 瘚𧢲
7. 函蔡霂閧㴓憓
8. 函蔡鈭抒㴓憓
9. 滨蔭撘寞找撓蝻押
10. 滨蔭𡃏郎閫
11. 𥕦遣銝銝芸瘝餌 AI 摨𠉛鍂
12. 𥕦遣銝 RAG 蝝W隡圈
13. LLM GatewayromptOps AI Observability
14. SBOM誩僎煺漣
15. 𥕦遣銝銝芸捆敺格∪僎 dev / staging / prod GitOps overlay
Golden Path 摨𥪜偷蝵格雿喳頝蛛雿踹𣪧霈方粥迅摰𡁜擃䀹楝敺
### 4.6.5 撟喳蝱鈭批憟𤑳漲
撟喳蝱譍漣臬蘨𣂷撌亙亙藁
```yaml
name: domain-service-golden-path
type: platform-product
owner: team-platform
users:
- stream-aligned-teams
- domain-product-teams
solves:
- create-service
- register-service
- configure-ci
- provision-runtime
- attach-observability
- enforce-security-baseline
interfaces:
portal: platform/portal/create-domain-service
cli: platformctl service create
template: platform/golden-paths/domain-service
slo:
templateSuccessRate: ">= 99%"
provisioningP95Minutes: 10
metrics:
adoptionRate: weekly
timeToFirstDeploy: daily
failedOnboardingCount: daily
feedback:
channel: "#platform-feedback"
reviewCadence: biweekly
```
撟喳蝱鈭批
1. 蝖桀函鍂
2. 㕑䌊芸𢆡𡝗𦻖
3. onboarding path
4. SLO roadmap
5. escape hatch嚗䔶臬恣霈~
### 4.6.6 摰孵膥鈭支 Golden Path
撟喳蝱摨娍靘𥕦捆其漱隞 Golden Path嚗䔶銝滨凒蝞⊥銝芯函蔡
摰孵膥鈭支 Golden Path 𡠺嚗
1. 滚𦛚𡁏 `src/`霂𨰻ockerfileservice.yaml` catalog descriptor
2. 𨅯遣嚗𡁶𨅯 root 嗆挾撠讛銵峕𧒄虾憭滨緵
3. CI嚗𡁏霂𨰻int𤩺撱箝BOMrovenance瘣墧醌蝑曉
4. Kubernetes base嚗鋽eploymentervicePAodDisruptionBudgeterviceAccount NetworkPolicy
5. overlay嚗飱evtagingrod 雿輻鍂銝滚 namespaceeplicas皞鞾憸腈ngress digest
6. GitOps嚗𡁻 Argo CDlux 𣇉隞瑁𥕦甇亦㴓憓𤤿𠶖
7. 嚗𡁏𨅯 digestit commit GitOps revision
8. 瘚𧢲暺䁅恕raceLO霅血餈鞱X踎
### 4.6.7 撟喳蝱鈭批蝏讐銝舘恕頧賣祥
撟喳蝱撌亦蝖桃撟喳蝱鈭批蝏讐𣇉隞瑁韐蠘提𠰴像𥕦𣂼其漣撟喳蝱𡁏撌亙
Platform PM 韐蠘提嚗
1.撟喳蝱蝔见擃㗛𤤿
2. 摰帋 Golden Path 仃韐交
3. 蝏湔擪撟喳蝱鈭批頝舐瑪撟喳蝱撌亙
4. 摰𡁏摨阡銝𡁜𦛚霈斤䰻韐蠘蝸嚗 onboarding 曉漲蝵桀𨅯銝𧢲鞉𧋦
5. 典𢆡撟喳蝱暺䁅恕蔭摰匧虾閫I 瘝餌摨娪曎
霈斤䰻韐蠘蝸摨阡撱箄悅嚗
| | 霂湔 | |
| ---- | ---- | ------------ |
| Time to First Deploy | 啣𣪧毺洵銝甈⊥蝵脫園𡢿 | 撟喳蝱鈭衤辣 CI/CD |
| Self-service Success Rate | 芸𨭌瘚銝滢韏碶犖撌交𣈲𣂼 | Developer Portal 鈭衤辣 |
| Support Ticket Rate | 瘥譍葵 Golden Path 鈭抒𣈲閙㺭 | 撌亙蝟餌蝐餅 |
| Context Switch Count | 摰峕隞餃𦛚蝟餌 | 霈輯銝箏 |
| Onboarding Completion Time | ∪像啣抅雿𨀣園𡢿 | 寡悌霈啣 |
| Perceived Cognitive Load | 銝餉憭齿摨西 | 摰𡁏䁅挪靚 |
---
## 4.7 霈暹鴌銝𦒘
### 4.7.1 摰帋
霈暹鴌銝𦒘蛹銝𠰴銝𡁜𦛚蝟餌桀像撌亦撟喳蝱𣂷蝔喳瘚讠餈鞱摨訫漣
### 4.7.2 銝餉
1. 鈭㻫𡝗毽
2. Kubernetes
3. Serverless 撟喳蝱
4. 蝵𤑳銝舘頧賢銵~
5. 摮睃滚𦛚
6. 唳旿摨𤘪
7.
8. 蝻枏滚𦛚
9. 𦦵揣撘閙
10. 撖寡情摮睃
11. 摰孵膥𨅯隞枏
12. 滚𦛚𤑳緵
13. 銝𤾸隞賬
14. 鈭穃
15. 鞉𧋦霈⊿銝舘皞鞾憸腈
16. GPU璅∪滚𦛚韏瘙𨬭
17. 唳旿摨瓐鸌敺銁蝥踹擃䀹蝝X
18. 頧臭辣靘𥕦典抅蝖霈暹鴌嚗𡁜齿𤾸蝑𣇉裦
### 4.7.3 霈暹鴌
1. 𤥁皞鞉芋
2. 𠉛氖
3. 撠𤩺
4. 撘寞找撓蝻押
5. 𠉛氖
6. 憭𡁜虾典躹函蔡
7. 芸𢆡隞賬
8. 瘚卝虾摰∟恣虾餈賣滲
9. 鞉𧋦𤩺
10. 霈暹鴌喃誨
11. AI 蝳颯憸腈滨漣蝑𣇉裦
12. 煺漣蝑曉撉𣬚倌BOM 亥砭 provenance 餈賣滲
### 4.7.4 Kubernetes 銝 GitOps 毺㮾皞
Kubernetes 蝞∠摰鮋餈鞱GitOps 蝞∠函蔡摨𥪜滚𦛚皞鞟瘛瑕銁銝韏瑯
蝏𤘪
```text
infra/
kubernetes/
base/
services/
customer-profile-service/
deployment.yaml
service.yaml
hpa.yaml
pdb.yaml
network-policy.yaml
kustomization.yaml
policies/
gitops/
environments/
dev/customer/customer-profile-service/kustomization.yaml
staging/customer/customer-profile-service/kustomization.yaml
prod/customer/customer-profile-service/kustomization.yaml
```
GitOps overlay 韐蠘提嚗
1. 雿輻鍂芯葵𨅯 digest
2. 函蔡啣𪑛銝 namespace
3. replicasPU / memory requests limits
4. HPADBngress / Gateway ServiceAccount
5. ConfigMap / Secret 撘閧鍂
6. Pod 摰匧蝏𦦵㗇𥋘摰孵摨艾
7. 蝏踴摨行寞活蝑𣇉裦
煺漣芰鍂 tag 雿靝蛹函蔡靘脲旿ag 臭誑航粉摰鮋皛𡁜摰∟恣敹雿滚銝滚虾 digestit commit provenance
---
## 5. 瘝餌撟喲𢒰
## 5.1 瘝餌摰帋
瘝餌銝齿糓銝剖亢摰⊥鸌峕糓銝𡁜摰𡁜撟園撟喳蝱芸𢆡
瘝餌
1. 靽肽摰匧
2. 靽肽蝟餌蝔喳
3. 靽肽唳旿臭縑
4. 靽肽亙藁銝
5. 靽肽鞉𧋦舀綉
6. 靽肽餈䜘
7. 撱箄挽撘𨬭
8. 靽肽 AI 摨𠉛鍂隡啜虾餈賣滲虾摰∟恣滨漣
9. 靽肽頧臭辣靘𥕦曆漣拙虾霂虾撉𣬚倌虾餈質提
## 5.2 瘝餌
瘝餌撟喲𢒰韐舐忽㗇沲穿
1. 頨思遢銝擧鞉祥
2. API 瘝餌
3. 鈭衤辣瘝餌
4. 唳旿憟𤑳漲瘝餌
5. 唳旿摰匧瘝餌
6. 銝芯犖𤩺靽⊥瘝餌
7. 瘝餌
8. SLO 瘝餌
9. 鞉𧋦瘝餌
10. 韐券
11.
12. 摰∟恣
13. Policy as Code
14. 芸𢆡𡝗瘚卝
15. AI 璅∪romptAGgent 冽祥
16. 靘𥕦BOMrovenance撉𣬚倌瘝餌
## 5.3 瘝餌璅∪
瘝餌𨅯 + 憸芣祥 + 芸𢆡𡝗擪謿璅∪
| 瘝餌撖寡情 | | 憸芣祥 |
| ---- | ----------------- | ------ |
| API | 霂舐 | 亙藁霈曇恣 |
| 鈭衤辣 | Schema𦶢摰寧 | 鈭衤辣 |
| 唳旿 | 蝻塩 | 憸唳旿摰帋 |
| 摰匧 | 頨思遢霈方撠𤩺瘣墧醌 | 銝𡁜𦛚璅∪ |
| AI | 璅∪rompt 𧋦隡圈秄蝳 | 箸艶霈曇恣隡唳甅 |
| 靘𥕦 | SBOMrovenance蝑整韏㚚 | 蝏蝥扯 |
| 鞉𧋦 | 蝞𨰜霅艾 | 韏雿輻鍂蝑𣇉裦 |
| 蝔喳 | SLO霅艾 | 憸滚𦛚輯笑 |
## 5.4 芸𢆡𡝗祥
瘝餌摨𥪜偷誩𤐄隞乩
1.𣂷漱嗆挾嚗𡁻韏𡝗瘣墧醌瘚卝
2. 嗆挾嚗𡁻𤩺醌霂𨰻誯秄蝳
3. 嗆挾嚗𡁜游恣摨血
4. 餈鞱嗆挾嚗锭LO 烐綉撣豢瘚卝霅艾
5. 唳旿嗆挾嚗𡁏㺭蝥行嵗撉䎚蹱嵗撉䎚
6. API 嗆挾嚗𡁏𦻖嵗撉䎚摰寞瘚卝
7. 鈭衤辣嗆挾嚗锭chema 摰寞瘚卝
8. AI 嗆挾嚗䥪rompt 𧋦隡圈AG 蝞堒鈭箏極蝖株恕蝑𣇉裦
9. 嗆挾嚗锭BOM rovenance 讐倌蝑曉 SLSA 蝑厩漣
10. 摰∟恣嗆挾嚗朞挪格𠯫敹𨰜湔𠯫敹𨰜鞉𠯫敹𨰜桐蝙冽𠯫敹𨰜I 靚摨娪曎霂
## 5.5 瘝餌
瘝餌蝑硔憭硔憭滨瘝㗇銝粹鵭鈭扼
```text
governance/
standards/
api-standard.md
event-standard.md
data-product-standard.md
security-standard.md
reliability-standard.md
cost-standard.md
decisions/
adr-0001-template.md
ownership/
teams.yaml
raci.yaml
escalation-policy.md
slo/
tiering-policy.md
error-budget-policy.md
security/
threat-model-template.md
data-classification.md
supply-chain/
slsa-policy.md
sbom-policy.md
signing-and-verification.md
ai-governance/
ai-product-review.md
fine-tuning-review.md
model-risk-policy.md
prompt-release-gate.md
agent-tool-policy.md
data-governance/
data-product-review.md
pii-policy.md
retention-policy.md
architecture-gates/
production-readiness.yaml
domain-readiness.yaml
data-product-readiness.yaml
migration/
strangler-migration-policy.md
deprecation-policy.md
compatibility-policy.md
evidence/
releases/
supply-chain/
exceptions/
compatibility/
drift/
audit-evidence-index.md
drill-evidence-template.md
risk-register/
postmortems/
playbooks/
ai-incident-playbook.md
```
## 5.6 瘝餌靘见
靘见銝齿糓仍鞊憿餅 owner𨬭園𡢿
```yaml
exceptionId: EX-2026-001
owner: team-order
violatedRule: data-product-freshness-standard
reason: upstream provider does not support near-real-time delivery
risk: finance report may lag up to 60 minutes
expiry: 2026-09-01
mitigation:
- show freshness timestamp in consumer dashboard
- alert when freshness exceeds 60 minutes
reviewer: architecture-group
```
## 5.7 AI 瘝餌
AI 瘝餌𦠜芋rompt蝝U鈭箏極蝖株恕雿靝蛹銝銝芣㟲雿枏恣
AI 鈭批餈𥕦煺漣憿餅說頞喉
1. 𡒊&憌𡡞埯蝑厩漣wner∠𤌍箸㦤
2. 璅∪romptAG 滨蔭虾餈賣滲
3. 擃㗛拙極典ㄟ蝑剹恣霈~皛𡁜鈭箏極蝖株恕蝑𣇉裦
4. RAG 唳旿皞𣂼𣂼蝥批蝐颯刻蕭皞臬
5. 蝳餌瑪霂銁蝥輻摨行圈秄瑽䜘
6. 鞉𧋦憸蝥批鈭箏極亦恣蝑𣇉裦撌脤蝵柴
7. 餈鞱颲枏銝𧢲𨅯
AI 瘝餌銝滚餅迫雿輻鍂璅∪嚗諹𦠜芋衤蝙𣂼虾撉諹極蝔贝蝔卝
### 5.7.1 AI 憌𡡞埯箇瑪
AI 鈭批蝥改摰朞隡啜恣霈∪鈭箏極蝖株恕撘箏漲蝥找臭蛹鈭獈甇W峕糓銝箔𠰴券䔮蝑𢛵甈整縑韐瑕恣撱箄悅曉銁憟烾秄蝳
| 憌𡡞埯蝑厩漣 | 箸艶 | 雿擧綉 |
| -------- | -------- | ------------ |
| R1 雿𡡞 | 蝝U𤏸 | Prompt 𧋦抅蝖憸腈𠯫敹堒恣霈 |
| R2 銝剝 | 摰X𨭌亙遣霈柴桃瑪蝝X㟲 | RAG 刻蕭皞胯犖撌交𡂝璉摨血 |
| R3 擃㗛 | 芸𢆡甈整蝵柴批遣霈柴 | 鈭箏極蝖株恕霂𨰻曉恣霈~/Prompt/RAG 𧼮 |
| R4 銝交聢埈綉 | 靽∟晰摰⊥鸌堒遣霈柴ế摰 | 瘜訫𦛚/隡啜撩鈭箏極憭齿瓲𡠺蝡见恣霈∪箸㦤 |
| R5 蝳𡝗 | 株䌊蝑硔𤩺唳旿霈剔 | 銝滚餈𥕦煺漣嚗屸膄𧼮𣂷拇𦻖𤑳恣霂摯 |
憌𡡞埯蝑厩漣敹 `ai-product.yaml`僎撽勗𢆡 CI/CDeveloper PortalLM Gatewaygent Runtime 恣霈∠頂蝏毺暺䁅恕蝑𣇉裦
### 5.7.2 AI 韏漣霂
AI 韏漣敹𡁜敶鉝摰∟恣
瘥譍葵煺漣 AI 鈭批靽萘
1. 璅∪旿嚗𡁏芋蝘啜摨𥪜𠶖箸艶蹂誨璅∪
2. Prompt 霂旿嚗𡁏芋渲扇敶𨰻隡啁摨西扇敶訫
3. 唳旿霂旿嚗鑹AG 桐漣鸌敺隡唳㺭
4. 撌亙旿嚗𡁜極 Schema蝑剹霂𨰻犖撌亦&霈文摰∟恣摮埈挾
5. 餈鞱旿嚗朞窈瘙唳旿蝝Y畾萸亙ế犖撌亦&霈文
6. 憌𡡞埯霂旿嚗𡁻蝥扼仿憌𡡞埯霈啣
撱箄悅蝏湔擪 `ai-evidence.yaml`
```yaml
aiProduct: customer-service-agent
riskTier: R3
model:
gatewayRoute: support-safe-default
approvedModels:
- model: vendor:model-name
version: "2026-05"
approval: approved-for-support-assist
prompts:
systemPrompt: prompts/system.prompt.md
version: "2026.06.01"
rag:
sources: rag/sources.yaml
vectorIndex: vector:customer-support-policy:v12
embeddingModel: embedding:model:v3
evals:
regression: evals/regression.yaml
redTeam: evals/adversarial.yaml
tools:
registry: tools/tool-permissions.yaml
audit:
traceRetentionDays: 180
replayEnabled: true
governance:
approval: governance/ai-governance/reviews/customer-service-agent.md
expiry: 2026-12-01
```
### 5.7.3 敺株瘝餌
敺株璅∪銝滩蝏扳㗁璅∪霈箝遙雿訫凝靚隡𡁏㺿䀹芋銝箄器䭾迨敹◆敶X摰⊥䰻霈啣
敺株餈𥕦煺漣憿餅說頞喉
1. 唳旿嚗朞悌蝏霈貊鍂鈭擧摰𡁜凝靚𤌍銝𠉛甇Y鍂𥪜蝥艾
2. 唳旿瘝餌嚗𡁜II畾萄靽萘
3. 摰鮋餈質葵嚗𡁏甈∟悌蝏虾餈賣滲啣抅蝖璅∪㴓憓鞉𧋦
4. 摯嚗朞隡圈銝滚銝舘悌蝏瘛瑞鍂嚗憿餉𤥁捶劂閫剹
5. 璅∪餉扇嚗𡁜凝靚憿餅 Model Cardwner蝥扼箸艶皛𡁏芋
6. 嚗𡁻憌𡡞埯敺株璅∪ shadow 𣇉摨佗鞉郊
7. 嚗𡁜唳旿唳情𤘪㺭格𧒄嚗憿餉摰帋堒蔣齿芋见僎閫血霈准
## 5.8 靘𥕦券秄蝳
靘𥕦憿餉𡝗韏硔撱箝霂𨰻蝵脣餈鞱
煺漣雿舘
1. 靘肽𧋦嚗僎餈𥕦瞍𤩺諹捂
2. 瘥譍葵 SBOM嚗諹秐撠𤏸𣇉凒韏硔韏硔摨𥪜諹捂靽⊥
3. 遣蝟餌 provenance嚗諹扇敶閙撱箏膥撱箏韏硋
4. 摰孵膥𨅯蝵脣餈𥕦◆蝑曉
5. 煺漣撉𣬚倌BOM 蝑𣇉裦瘣鮋蝑𣇉裦
6. 擃㗛拍頂蝏笔鞉郊颲曉 SLSA Build Level 2嚗峕瓲敹頂蝏笔颲曉 SLSA Build Level 3
7. 靘𥕦憭硋憿餅 owner𧒄𤏸恣憌𡡞埯霈啣
## 5.9 Policy as Code 蝑𣇉裦霂剛
瘝餌◆蝏煺蝑𣇉裦霂剛瘥譍葵憟𦯀蝑𣇉裦
蝑𣇉裦嚗
| 蝑𣇉裦凒 | 撘閙 | 霂湔 |
| -------- | -------- | ---- |
| 頝典像唳祥I 株挪 | OPA / Rego | 𡁶鍂 Policy as Code霂訫 |
| Kubernetes 韏蝑𣇉裦 | OPA Gatekeeper Kyverno | 蝑整𦶢滨征𣂼 |
| 摨𠉛鍂蝎鍦漲 | Cedar 𣇉隞瑟亥祗閮 | 𠰴鞉芋銝𡁜𦛚隞銝剖竉蝳 |
| 鈭穃 | IAM Policy | 芰鍂鈭𦒘嚗䔶蹂誨隡蝥扳祥 |
1.蝥折霈斤亥祗閮◆撠𤏸𣬚迅摰𡄯銝滩 RegoedarAML ∩辣諹䌊 DSL 㰘器峕毽
2. 憿餅 owner霂閧鍂靘卝內靘贝內靘贝頝臬
3. 煺漣蝑𣇉裦䀹凒敹◆餈𥕦 CI嚗諹秐撠烐銵諹祗瘜閙霂𨰻株楝敺鍂靘见瘚卝
4. 蝑𣇉裦靘见臬恣霈∴撟嗆園𡢿
5.鍂憭𡁶𠬍𡒊&颲寧嚗朞韐蠘提韐蠘提韐蠘提唳旿霈輸䔮韐蠘提鈭𤏸皞僐
---
## 6. 摰匧
## 6.1 摰匧
摰匧𤌍糓撱箇頨思遢蝏栶摨娪曎銵𣬚㴓憓蝥菜楛脣鴃雿梶頂
## 6.2 頨思遢銝舘挪格綉
1. 蝏煺頨思遢霈方
2.
3. 憭𡁜蝝㰘恕霂
4. 撠𤩺𣂼
5. 閫坿𠧧格綉
6. 撅墧霈輸䔮
7. 滚𦛚∟恕霂
8. 銝湔𧒄亥蔭
9. 唾窈摰∟恣
## 6.3 摨𠉛鍂摰匧
1. 摰匧蝻𣇉
2. 靘肽瞍𤩺
3. 𨅯瞍𤩺
4. API
5. 颲枏
6. 𤩺靽⊥靽脲擪
7. 俈蝭⊥㺿俈頞𦠜
8. Web 摨𠉛鍂脫擪
9. 啣漲皛𠾼
10. 摰匧瘚贝芸𢆡
### 6.3.1 摰匧𤏸
摰匧摨𥪜蘨蝥踹甈∴韐舐忽挽霈~撱箝霂𨰻
瘥譍葵 Tier-1 滚𦛚靽萘
1. 摰匧撱箸芋霈啣
2. 摰匧霈曇恣霂恣霈啣
3.
4. 靘肽𨅯蝏𤘪
5. 摰匧瘚贝芋蝟𦠜霂閙喲睸頝臬皛亦鍂
6. 瞍𤩺蔭 SLA憭硋恣銵交霈∪
7. 煺漣鈭衤辣䁅扇敶𨰻
撟喳蝱摨娍餈嗘芸𢆡𦻖 catalog 航悟典恣霈⊥𧒄銝湔𧒄銵交
## 6.4 唳旿摰匧
1. 唳旿
2. 𤩺唳旿霂
3. 唳旿
4. 唳旿
5. 唳旿霈輸䔮
6. 唳旿雿輻鍂摰∟恣
7. 唳旿烐綉
8. 唳旿笔𦶢蝞∠
9.遢銝擧憭溻
10.
## 6.5 鈭穃
1. 黎霈輸䔮
2. 蝛粹𡢿𠉛氖
3. 蝵𤑳蝑𣇉裦
4. 𨅯蝑曉
5. 餈鞱
6. Secret 蝞∠
7. Pod 摰匧蝑𣇉裦
8. 靘𥕦
9. 霈暹鴌䀹凒摰∟恣
10.虜銵䔶蛹璉瘚卝
## 6.6 靘𥕦
靘𥕦冽糓煺漣抅蝥輯𨥈銝齿糓撘粹★
◆撱箇隞乩
1. SLSA 嚗𡁏芦∠頂蝏蠘秐撠烐說頞喳虾摰∟恣 provenance嚗𥟇瓲敹頂蝏罸鞉郊颲曉𠉛氖舐砥寞𠯫敹堒撘箄澈隞賣撱箏膥
2. SBOM嚗𡁏銝芰鈭批 SPDX CycloneDX 蝑㗇聢撘 SBOM嚗僎餈𥕦摨枏摰∟恣蝟餌
3. 𨅯蝑曉銝𡡞蝑橘遣摰峕𡒊倌函蔡滨眏蝑整
4. Provenance嚗朞扇敶閙摨瓐ommit撱箏膥撱箏韏𡝗鈭抒
5. 靘肽嚗𡁶鈭扳撱箏憿颱蝙𤐄摰𡁶韏𤥁圾
6. 瞍𤩺蝑𣇉裦嚗𡁏 CVSS拍鍂𠂔脤𢒰蝥扯挽蝵桅獈
7. 霈詨虾霂撩隡䭾霈詨虾霂芰䰻霈詨虾霂鈭批
8. 銝滚虾煺漣衣倌銝滚霈貉
9. 嚗𡁻蝵脣蝑曉BOMrovenance瘣鮋抅蝖𨅯𣬚蝑整
10. 靘见剔㴓嚗𡁏憭硋憿餅園𡢿諹‘𤏸恣
## 6.7 AI 摰匧
AI 摰匧璅∪颲枏銝𧢲扇敹讐揣撘訫靘𥕦𦻖
◆撱箇隞乩
1. Prompt 瘜典脫擪嚗𡁜笆颲枏蝝Y畾萄撌亙餈𥪜捆餈𥡝隞日蝳颯
2. 頞𦠜霈輸䔮脫擪嚗鑹AG 璉蝝U API 靚鍂敹◆蝏扳㗁
3. 唳旿瘜脫擪嚗朞 PII𤩺唳旿璉瘚卝
4. 撌亙皛亦鍂脫擪嚗𡁻憌𡡞埯撌亙◆憯唳梢埯蝑厩漣蝑㗇犖撌亦&霈文摰∟恣
5.漲隞脫擪嚗鋫gent 霈∪霂𨰻鞉𧋦敹
6. 璅∪靘𥕦蝳鳴𤨎𠯫敹𦯀唳旿雿輻鍂蝑𣇉裦敹舀綉
7.摯銝𡒊滯 AI 鈭批劂閫剹蝷箸釣霂臬鞉𧋦瘨霂𨰻
8. 颲枏枂韐遙嚗𡁜憿餃虾閫虾撘閧鍂硋虾墧𦆮嚗䔶賢蘨靽萘
---
## 7. 瘚𧢲餈鞱瘝餌
## 7.1 瘚𧢲抒𤌍
撟喳蝱摨𥪜𠯫敹𨰜曎頝航蕭頦芥隞嗅𡃏郎嚗峕𣈲∪𣪧笔翰圈䔮憸塩雿漤䔮憸睃滚𦛚
## 7.2 瘚𧢲
1. 摨𠉛鍂
2. 銝𡁜𦛚
3. 蝟餌
4. 銝𡁜𦛚
5. 曇楝餈質葵
6. API 靚
7. 唳旿韐券
8. 蝘臬
9. 唳旿摨𤘪
10. 雿㯄
11. 鞉𧋦
12. 摰匧鈭衤辣
13. AI 靚嚗関oken辣餈麄霂胯典𦶢銝准劂閫匧鞉𧋦
14. 靘𥕦SBOM 閬𣇉蝑曉仃韐亦瘣鮋獈 provenance 閬
## 7.3 SLO 雿梶頂
瘥譍葵喲睸憸鈭批摰帋 SLO虜閫穿
| | 霂湔 |
| ----- | ------------ |
| 舐鍂 | 滚𦛚舀迤撣豢靘𥡝𤤿瘥𥪯 |
| 撱嗉 | 霂瑟園𡢿 |
| 躰秤 | 憭梯揖霂瑟 |
| 𧼮 | 園𡢿憭 |
| 唳旿 | 唳旿湔鰵臬炏𦠜𧒄 |
| 唳旿 | 唳旿臬炏蝚血韐券 |
| 園𡢿 | 憭齿園𡢿 |
| 䀹凒憭梯揖 | 撘訫 |
| AI 隞餃𦛚摰峕 | AI 鈭批摰峕隞餃𦛚 |
| AI grounded rate | AI 颲枏枂質◤撘閧鍂摰墧䔉皞鞉𣈲𤑳瘥𥪯 |
| 靘𥕦𣇉 | 煺漣 SBOM provenance |
## 7.4 鈭衤辣
摨𥪜遣蝡𧢲隞嗅摨娍蝔页
1.𤑳緵
2. 𡃏郎閫血
3. 敶勗斗鱏
4. 韐蠘提鈭箇&霈扎
5. 摨娍
6. 銝湔𧒄
7.
8. 憭滨
9.𥕢耨甇
10. 摨𤘪
## 7.5 AI 瘚𧢲
AI 鈭批峕𧒄閫撌亦韐券∟捶璅∪韐券
喲睸𡠺嚗
1. 霂瑟oken 见辣餈笔躰秤
2. 璅∪頝舐眏霂𨰻蝥批
3. Prompt 𧋦蝝a蝵桀撌亙𧋦
4. RAG 鍦𦶢銝剔𣇉撘閧鍂颲枏枂瘥𥪯
5. Agent 撌亙𣂼犖撌亦&霈斤臭葉
6. 犖撌交𡂝璉韐券劂閫匧隞餃𦛚摰峕
7. 閙活隞餃𦛚鞉𧋦𣪧蝞埈𨰜撣豢砍陸霂凋蝻枏賭葉
AI 瘚𧢲憿餅𣈲唳旿蝝Y畾萸rompt 𧋦亙ế
## 7.6 AI 鈭衤辣
AI 鈭批厩𡠺蝡衤隞嗅 playbook𡁶鍂鈭衤辣臭誑憭滚𦛚摰閙㦤辣餈頞喃誑憭撟餉瑕仃摨𥪜銝剜鱏AG 蝝W瘙⊥凝靚
AI 鈭衤辣蝐餃
| 鈭衤辣蝐餃 | 銵函緵 | 擐𤥁 |
| -------- | -------- | -------- |
| 撟餉 | grounded rate 銝钅 | 滨漣 Prompt / 璅∪ / 璉蝝a |
| Prompt 瘜典𣂼 | 璅∪蠧蝑𣇉裦亦頂蝏隞斗頞𦠜 | 餅鱏颲枏璅∪ Prompt嚗𣳇蝳餃誘 |
| 撌亙鍂憭望綉 | Agent 敺芰㴓靚憭漤甈整憭滚遣 | 喲𡡒擃㗛拙極舐鍂鈭箏極蝖株恕𣂼 |
| RAG 蝝W瘙⊥ | 璉蝝W𤩺 | 蝝W皛𡁜讐揣撘閧穿滚遣唳旿 |
| 璅∪靘𥕦 | 撱嗉霂舐 | 揢璅∪頝舐眏嚗𣬚憬撠譍銝𧢲嚗屸蝥批鈭箏極瘚 |
| 敺株璅∪ | 隞餃𦛚韐券銝钅隡啣仃韐 | 銝讠瑪敺株璅∪璅∪銝芸凝靚 |
| 鞉𧋦憭望綉 | TokenPU𤩺蝝X撌亙鍂撘虜憓𧼮 | 雿擧芋蝥扼蝞㛖 |
| 𤩺靽⊥蠧 | 颲枏枂 PII唳旿 | 喲𡡒唳旿皞琜臬𢆡摰匧鈭衤辣瘚恣霈 |
AI 鈭衤辣甇仿炊嚗
1. 掩嚗𡁜ế剜糓璅∪romptAG摨𥪜𣂷隞嗚
2. 甇Z嚗𡁜X芋贝楝 Prompt蝏枏極剔揣撘𨰻餈𥕦鈭箏極亦恣
3. 𤥁嚗帋 tracerompt 𧋦蝝Y畾萸交𠯫敹堒
4. 敶勗摯嚗朞敶勗∪𢆡雿栶桐漣園𡢿蝒堒藁
5. 靽桀嚗帋耨甇 Prompt蝝a蝵柴揣撘閙䔉皞鞉璅∪𧋦
6. 𧼮嚗朞 AI 𧼮毺鍂靘卝鞟鍂靘见鞉𧋦
7. 憭滨嚗𡁏凒隡圈uardrailsLOunbook拍蒈霈啣瘝餌
`governance/playbooks/ai-incident-playbook.md` 摨磰秐撠穃
1. 鈭衤辣
2. 韐蠘提鈭箏漣頝臬
3. 掩鈭衤辣迫銵
4. 𤥁摮埈挾皜
5. 蝥抒畆
6. 𣬚蝞⊥𡁏芋
7. 憭滨璅⊥踎屸秄蝳耨甇
## 7.7 蝥找
賢蘨𣈯舐鍂銝芰鈭扳桐漣I 鈭批桀像◆憯唳蝥改撟嗆蝑厩漣 SLOTOPO霂舫蝞𨰜n-call瞍𠉛
暺䁅恕漣嚗
| 蝑厩漣 | 鍂撖寡情 | 舐鍂抒𤌍 | RTO | RPO | | 瞍𠉛 |
| ---- | -------- | ---------- | --- | --- | -------- | -------- |
| `Tier-1` | 𣈲隞塩悼蝥艾喲睸摰X頝臬 | 99.9% - 99.99% | <= 1 撠𤩺𧒄 | <= 15 | 7x24 on-call嚗峕蝖桀蝥扯楝敺 | 瘥誩迤摨西秐撠睲 |
| `Tier-2` | 餈鞱𨯫冽瓲敹蝔卝格㺭桐漣銝剝 AI 鈭批 | 99.5% - 99.9% | <= 4 撠𤩺𧒄 | <= 4 撠𤩺𧒄 | 撌乩園𡢿霅血虾漣 | 瘥誩撟渲秐撠睲 |
| `Tier-3` | 𨭌撌亙憌𡡞埯𤾸蝱撉峕𥕦𧼮格𥁒銵 | 99.0% best effort | <= 1 銝芸極雿𨀣𠯫 | <= 24 撠𤩺𧒄 | 撌乩園𡢿 | 瘥誩僑甈⊥ |
漣閫
1. 蝑厩漣敹 `domain.yaml`service.yaml`data-product.yaml`ai-product.yaml` catalog entry
2. 滚𦛚銝滩憯唳擃䀝喲睸銝𧢲虜靘肽蝥改蝻枏蝥扼甇亥‘蹂誨頝臬
3. `Tier-1` runbookollback霅艾𤩺偌雿溻韏㚚蝥扼隞賣憭滚鈭𧢲憭滨
4. 唳旿鈭批 RPO 撖孵唳旿銝W仃蝒堒藁嚗靕reshness 撖孵唳旿摨佗鈭諹賣毽
5. AI 鈭批 RTO 敹鉄璅∪靘𥕦rompt AG 蝝W蝏枏鈭箏極亦恣園𡢿
6. RTO/RPO 敹瞍𠉛憭齿霂閙鈭𧢲憭滨撉諹嚗䔶賢蘨坔銁
躰秤憸箇瑪嚗
| | 閫血∩辣 | 敹 |
| ---- | -------- | -------- |
| 甇虜 | 躰秤憸𦯀 50% | 㗇迤撣詨憟𤩺綫餈 |
| 單釣 | 躰秤憸𡑒噢 50% - 75% | 憭齿䰻䀹凒憸𤑳霅血臁憯啜韏𣇉迅摰𡁏摰寥瘞港 |
| 𣂼 | 躰秤憸𡑒噢 75% - 100% | 𧼮隡睃找耨憭滚滨漣瞍𠉛 |
| | 躰秤憸堒偷𤥁蝏剝憭找 | 憿餃𣂼耨憭滚瘝餌湔鰵 |
`governance/slo/tiering-policy.md` 摨磰秐撠穃
1. Tier 摰帋鍂撖寡情
2. 舐鍂辣餈麄霂舐TOPO 峕㺭 freshness
3. on-call蝥扯楝敺銝𡁜𦛚 owner
4. ∩辣霂舫蝞㛖
5.憭溻旿靽嘥
6. 靘见摰⊥鸌摰⊥㦤
---
## 8. 蝏銝𤾸𣪧
## 8.1 蝐餃
唬誨硋像啣遣霈桅其誑銝见𣪧
| 蝐餃 | 諹提 |
| -------------------------- | -------------------------- |
| Stream-aligned Team | 銝𡁜𦛚瘚蝡臬蝡臭漱隞睃恥瑚遠 |
| Domain Product Team | 韐蠘提憸鈭批PI隞嗅唳旿鈭批 |
| Platform Team | 撱箄挽穃像銝𡁜𦛚憭齿 |
| Data Platform Team | 𣂷唳旿撟喳蝱桃𤌍敶𨰻𤩺瘚卝祗銋匧𣬚鸌敺 |
| AI Product Team | 韐蠘提 AI 鈭批gentAG隡圈峕芋𧢲𦻖交祥 |
| Enabling Team | 韏贝嚗峕I |
| Complicated Subsystem Team | 韐蠘提擃睃銝𡁶頂蝏蝝U扳芋𤘪僼 |
| Governance Team | 典𢆡瘝餌芸𢆡 |
| Security Team | 韐蠘提摰匧蝑𣇉裦恣霈~拍恣摰匧撟喳蝱 |
## 8.2 韐
### 8.2.1 滚蝱銝𡁜𦛚
韐蠘提嚗
1. 雿㯄
2. 銝𡁜𦛚瘚
3. 銝𡁜𦛚
4. 皜𣳇餈鞱𨯫
5.
6. 摰X剔㴓
### 8.2.2 憸
韐蠘提嚗
1.
2.璅∪霈曇恣
3. API 隞嗅
4. 唳旿鈭批
5. 滚𦛚蝔喳
6.銝𡁜𦛚
7.瞍磰
### 8.2.3 撟喳蝱
韐蠘提嚗
1. 穃像
2. Golden Path
3. CI/CD
4. 銝舘皞鞟恣
5. 瘚𧢲批像
6. 撟喳蝱摰匧
7. 鞉𧋦
8. 撌亦𣂼
9. 靘𥕦
10. AI 撟喳蝱
11. 撟喳蝱𠉛弦諹恕頧賡雿汿
### 8.2.4 唳旿
韐蠘提嚗
1. 唳旿撟喳蝱
2. 唳旿
3. 唳旿韐券
4. 雿梶頂
5. 霂凋
6. 撟喳蝱
7. 唳旿瘝餌撌亙
8. 唳旿瘨晶雿㯄
### 8.2.5 AI 鈭批
韐蠘提嚗
1. AI 鈭批憌𡡞埯蝑厩漣摰帋
2. Agent 撌乩𣂼鈭箏極蝖株恕蝑𣇉裦
3. Prompt 𧋦隡圈敶鉝
4. RAG 唳旿皞僐揣撘𨰻
5. 璅∪贝楝韐券
6. AI 瘚𧢲剔㴓
7. 銝𡡞笔𣪧桀𣪧摰匧摰峕擃㗛 AI 箸艶銝羓瑪
### 8.2.6 Platform PM
韐蠘提嚗
1. 摰帋撟喳蝱鈭批条裦楝蝥踹㦛函鍂瑞𤫇
2. 蝞∠ Golden Path 誩漲仃韐亙𨬭
3.撟喳蝱霈輯𤏸撉諹𥪜霈斤䰻韐蠘蝸霂
4. 撟喳蝱撌亦I 峕祥隡睃蝥扼
5. 脫迫撟喳蝱碶蛹撌亙踵𦻖
### 8.2.7 瘝餌
韐蠘提嚗
1.
2.
3. 瘝餌
4.
5.芸𢆡
6.
7. 瘝餌摨阡
## 8.3 RACI
RACI 𡒊&𡏭韐蠘提𠾼 RACI 銝𡁏沲𡝗隡朞悅撽勗𢆡嚗𡁏劐犖瓷鈭箏笆蝏𤘪韐蠘提
摰帋
1. `R` Responsible嚗𡁶凒鈭批枂鈭支
2. `A` Accountable嚗𡁜笆𡏭閫坿𠧧嚗瘥誯★銝芣 accountable owner
3. `C` Consulted嚗𡁜憿餃倮霂W僎蝥喳𣪧
4. `I` Informed嚗𡁻𡁶䰻雿𣪧
蝥折 RACI嚗
| 鈭钅★ | A | R | C | I | 敹旿 |
| -------- | - | - | - | - | -------- |
| 隡箇瑪𧋦 | 犖 | 瘝餌 | 撟喳蝱I煺誨銵 | 蝞∠𣪧 | 𧋦霈啣摰∟扇敶𨰻秄蝳 |
| 𡝗瓲敹 | 犖 | 憸 | 銝𡁜𦛚 owner桀𣪧啣𣪧典𣪧 | 堒蔣滚𣪧 | ADR韏硋蔣 |
| 啣遣煺漣滚𦛚 | 憸韐蠘提鈭 | 憸 | 撟喳蝱典𣪧RE | 瘝餌韐寡 | `service.yaml`atalog entry鈭批停蝏芷秄蝳 |
| API breaking change | API owner | 憸 | 瘨啣𣪧𣪧 | 㕑恥䲮 | 澆捆扳𥁒𨳍蝘餉恣冽𠯫 |
| 鈭衤辣 Schema breaking change | 鈭衤辣 owner | 憸 | 瘨桀𣪧啣𣪧 | 瘝餌 | 瘨chema 餈宏霈∪ |
| 唳旿鈭批 | 唳旿鈭批 owner | 憸 | 唳旿撟喳蝱典𣪧皜豢韐寡 | 瘝餌 | 唳旿憟𤑳漲𤩺𥁒𨳍 |
| 擃㗛 AI 鈭批銝羓瑪 | 銝𡁜𦛚 owner | AI 鈭批 | 摰匧/桀𣪧笔𣪧 | 撟喳蝱𣪧 | 憌𡡞埯隡唳𥁒𨳍犖撌亦&霈斤 |
| 撟喳蝱 Golden Path 䀹凒 | Platform PM | 撟喳蝱 | 憸典𣪧REI | 匧像啁鍂 | 餈宏霂湔瑕蔣皛朞楝敺 |
| 靘𥕦 | 摰匧韐蠘提鈭 | 摰匧 | 撟喳蝱𣪧煺誨銵 | owner | 蝑𣇉裦瘚贝憭𡝗𨰻 |
| GitOps 煺漣蝑𣇉裦䀹凒 | SRE / owner | 撟喳蝱 SRE | 摰匧笔𣪧𣪧 | 堒蔣齿 owner | GitOps diff皛朞恣 |
| SLO 蝑厩漣 RTO/RPO 靚㟲 | 銝𡁜𦛚 owner | 憸硋像 owner | SRE𣪧/AI owner | 蝞∠ | tiering policy拇𦻖𨰜 |
| 瘝餌靘见摰⊥鸌 | 瘝餌韐蠘提鈭 | 唾窈 | 摰匧I SRE | 堒蔣滚𣪧 | 靘见𧒄 |
1. 瘥譍葵煺漣蝟餌桐漣I 鈭批𥕦憿餅 accountable owner
2. `A` 臭誑嚗䔶銝滩𦠜提隞餉蓮蝘餌撟喳蝱𣪧靘𥕦
3. 擃㗛 AI靘𥕦游虾隞交憭帋葵敹摰⊥鸌嚗䔶隞滚憿餅摰𡁜銝𡁜𦛚𡝗 accountable owner
4. RACI 䀹凒祈澈敹◆餈𥕦霈啣𡝗祥渲扇敶𨰻
5. `governance/ownership/raci.yaml` 舀㦤典虾霂 RACI 毺㮾皞琜﹝銵冽聢銝箄秩汿
---
## 9. 喲睸銝𡁜𦛚瘚蝷箔
## 9.1 撱箸
1. Developer Portal 㗇𥋘滚𦛚璅⊥踎
2. 撟喳蝱芸𢆡𥕦遣隞隞枏
3. 撟喳蝱芸𢆡I/CD 瘚偌蝥踹函蔡滨蔭
4. 憛怠滚𦛚撅鮋
5. 撟喳蝱芸𢆡曎頝航蕭頦芸𡃏郎
6. 撟喳蝱芸𢆡摰匧韏𡝗
7. 滚𦛚函蔡霂閧㴓憓
8. 鈭抒㴓憓
9. 滚𦛚∠𤌍敶蓥葉
10. 𡒊賒餈鞱韐券蝥喳 SLO 烐綉
## 9.2 API
1.霈曇恣 API
2. API 蝥行鈭文 API 蝞∠撟喳蝱
3. 撟喳蝱芸𢆡璉亙𦶢躰秤
4. 摰匧蝑𣇉裦芸𢆡
5. API
6.唾窈雿輻鍂
7.霂舐辣餈蠘䌊
8. 𧋦䀹凒芸𢆡𡁶䰻銝𧢲虜瘨
## 9.3 唳㺭桐漣
1.摰帋唳旿鈭批
2. 憛怠銝𡁜𦛚畾萄鉄銋剹峕凒
3. 滨蔭唳旿韐券
4. 滨蔭唳旿霈輸䔮
5. 撟喳蝱芸𢆡璉瘚贝蝻睃韐券
6. 唳旿鈭批餈𥕦唳旿
7.寧𤚗霂瑁挪
8. 唳旿雿輻鍂銵䔶蛹鋡怨扇敶訫摰∟恣
9. 唳旿韐券䔶蝙蝏剔
## 9.4 頝券
隞乒𦦵鍂𨰝苷蛹靘页
1. 滚蝱雿㯄鈭支閗窈瘙
2. 雿㯄蝻𡝗𤘪嵗撉銝𠹺
3. 霈W撱箄恥𨰻
4. 嵗撉𠶖
5. 摨枏摰𡁜摮塩
6. 韏瑟𣈲隞塩
7. 憌擧綉銵䔶漱隡啜
8. 撅亦漲𦻖嗉恥訫悼蝥虫隞嗚
9. 仿隡䀹
10. 唳旿鈭批蝵𤑳瘝㗇霈W𣈲隞塩悼蝥血仿唳旿
11. 蝏讛𨯫鞉芋憌擧綉璅∪唳旿鈭批
## 9.5 AI 鈭批
1. AI 鈭批摰帋銝𡁜𦛚蝥批箸㦤
2.蝖株恕 API隞嗚銝𡁜𦛚颲寧
3. 唳旿蝖株恕韐寞㺭桐漣鸌敺讐揣撘訫瑟𧋦
4. AI 𣂷漱 Promptgent 撌乩AG 滨蔭𣂼
5. 撟喳蝱芸𢆡 Prompt 𧼮AG 鞉嵗撉鞉𧋦憸
6. 摰匧鞟內瘜典擃㗛拙𢆡雿𨀣霂𨰻
7. 鈭批餈𥕦啣漲嚗峕蝏剛撖煺遙rounded rate犖撌亦&霈斤鞉𧋦
8. 颲曉鈭改銝滩噢𧒄 Prompt蝝X鈭箏極瘚
9. 㗇芋隡啁𨅯鈭箏極蝖株恕霈啣餈𥕦摰∟恣
## 9.6 啣凝靚
1. AI 鈭批𣂷漱敺株扯秩𠬍 PromptAG璅∪頝舐眏銝滩雲隞交說頞喟𤌍
2. 唳旿 owner 蝖株恕霈剔唳旿蝥扼𣂼𢛵
3. AI 餉扇摰鮋嚗諹扇敶訫抅蝖璅∪悌蝏蝵桀鞉𧋦
4. 撟喳蝱唳旿韐券II霈剔/霂蝳餅
5. 璅∪函鍂靘卝毺鍂靘见銝𡁜𦛚撉峕𤣰
6. 璅∪餈𥕦 Model Registry嚗𣬚 Model Card蝥扼皛𡁏芋
7. 璅∪餈𥕦 shadow 𣇉摨血韐券
8. 颲曉鈭改銝滩噢𧒄璅∪凝靚
9. 敺株唳旿格情𤘪璅∪𡝗𧒄嚗諹圻𤑳霈剜敶寞蝔卝
## 9.7 靘𥕦
1.𤏸鈭支誨僎閫血 CI
2. CI 瘚贝韏𡝗醌𤨎
3. 遣蝟餌雿輻鍂埈綉𣂼
4. 遣蝟餌 SBOM provenance
5. 餈𥕦𨅯隞枏𤾸鞟倌
6. 交綉嗅膥撉𣬚倌BOM 蝑𣇉裦瘣鮋蝑𣇉裦
7. GitOps 頂蝏笔蘨函蔡
8. 餈鞱蝏剔扳鰵瞍𤩺撣貉銝箏靘𥕦蝘颯
---
## 10.
## 10.1 API
1. API 敹蝖桐∟祗銋剹
2. API 敹祉恣
3. API 敹霈方
4. API 敹霂舐
5. API 敹娍鱏蝑𣇉裦
6. API 敹蝷箔
7. API 䀹凒敹◆霂澆捆
8. 摨笔 API 敹𣂼𡁶䰻瘨
## 10.2 鈭衤辣
1. 鈭衤辣◆雿梶緵憸∪鉄銋剹
2. 鈭衤辣敹 Schema
3. 鈭衤辣敹
4. 鈭衤辣敹鈭扯扇敶𨰻
5. 鈭衤辣敹
6. 鈭衤辣䀹凒敹澆捆撌脫
7. 喲睸鈭衤辣敹◆蝥喳烐綉恣霈~
## 10.3 唳旿
1. 唳旿敹銋剹
2.
3. 唳旿鈭批
4. 唳旿鈭批㕑捶
5. 𤩺摮埈挾敹
6. 唳旿霈輸䔮敹
7. 唳旿雿輻鍂敹臬恣霈~
8. 唳旿䀹凒敹𡁶䰻銝𧢲虜
### 10.3.1 唳旿憟𤑳漲雿𤾸
唳旿鈭批箏膥航粉唳旿憟𤑳漲嚗䔶賢蘨靘肽銵刻秩汿
雿𤾸畾萄穿
1. owneromainonsumerifecycle
2. schema畾萇掩ullable銝整園𡢿摮埈挾
3. semantic grain藁敺銋匧𣂼
4. freshnessompletenessalidityniqueness accuracy 閫
5. classificationIIetentionccess policy 恣霈∟
6. lineagepstreamownstream breaking change 𡁶䰻蝑𣇉裦
7. AI usage policy嚗𡁏糓霈貉悌蝏mbeddingAG鸌敺隡啣函瑪
8. cost ownerLO 韐寧內靘卝
唳旿憟𤑳漲敹◆餈𥕦 CI嚗諹秐撠烐嵗撉 schema 澆捆銝𧢲虜敶勗
## 10.4 撌亦
1.韐券
2. 靘肽瞍𤩺
3. 𨅯摰匧
4. ◆蝏讛芸𢆡𡝗瘞渡瑪
5. 滨蔭憿餃蝳颯
6. 煺漣䀹凒敹航蕭頦芥
7. 喲睸蝟餌啣漲皛𠾼
8. 滚𦛚敹瘚𧢲批像
## 10.5 箏膥航粉憟𤑳漲
㕑楊楊蝟餌楊憸𦻖摨磰 `contracts/`嚗屸滚蘨惩藁憭渡漲摰𠾼瘜券
```text
contracts/
apis/
public/
internal/
partner/
events/
topics/
schemas/
schemas/
json/
proto/
avro/
datasets/
products/
quality-rules/
semantic-layer/
ai/
tools/
prompts/
rag/
evals/
fine-tuning/
guardrails/
resources/
terraform-modules/
kubernetes-crds/
cloud-resources/
policies/
iam/
opa/
data-access/
```
憟𤑳漲䀹凒閫
1. API breaking change 敹韐寡
2. 鈭衤辣 Schema 暺䁅恕霈詨𤾸摰寞餈䜘
3. 唳旿鈭批 Schema 敹摮埈挾霂凋蝥批韐券
4. AI 撌亙憟𤑳漲敹chema蝑剹恣霈∪鈭箏極蝖株恕蝑𣇉裦
5. 敺株憟𤑳漲敹霈剔唳旿撉諹蕭頦芥隡圈𠉛氖讠蒈霈啣頝臬
6. Policy 敹◆憯唳蝑𣇉裦撘閙瘚贝霂剜霂訫喲睸頝臬箸艶瘚贝
7. 憟𤑳漲䀹凒敹◆餈𥕦 CI嚗䔶賢蘨𦦵
## 10.6 頧臭辣峕㺭鈭抒𤌍敶
`catalog/` 霈拍頂蝏麄PI皞僐桐漣wner 𣬚賢𪂹笔虾𤑳緵
```text
catalog/
systems/
components/
resources/
apis/
data-products/
ai-products/
models/
agents/
domains/
scorecards/
```
餉扇蝷箔
```yaml
name: order-command-service
kind: component
type: service
domain: order
system: order-system
owner: team-order
lifecycle: production
tier: tier-1
providesApis:
- domain:order:orders-internal-api
publishesEvents:
- domain:order:order-created
dependsOn:
- resource:order-primary-db
- api:customer-internal-api
- topic:payment-authorized
runtime:
platform: kubernetes
namespace: order-prod
deployment: order-command-service
imageRepository: registry.company.com/order/order-command-service
gitopsPath: infra/gitops/environments/prod/order/order-command-service
scorecards:
productionReadiness: pass
security: pass
reliability: warn
```
1. 瘝⊥ catalog entry 鈭抒隞嗡
2. 瘝⊥ owner 頂蝏煺鈭扼
3. 瘝⊥ lifecycle 鈭找質◤瘨韏硔
4.航蕭皞臬 owner頂蝏麄㴓憓鞉𧋦銝剖
5. catalog 餈鞱撖寡情 GitOps 頝臬嚗䔶銝粹蝵脩
## 10.7 AI
1. AI 鈭批 `ai-product.yaml`wner蝥扼LO runbook
2. PromptAG 隡圈𧋦
3. Agent 撌亙鍂敹◆憯唳chema蝑剹霂𨰻恣霈∪鈭箏極蝖株恕蝑𣇉裦
4. RAG 蝝W◆憯唳mbedding 璅∪揣撘閧滚遣蝑𣇉裦
5. 擃㗛 AI 颲枏枂敹撘閧鍂犖撌亦&霈斗鈭箏極亦恣
6. AI 蝳餌瑪霂銁蝥輻摨艾蝞堒摰匧
7. AI 靚鍂敹蝏煺瘚𧢲摰∟恣
8. 璅∪靘𥕦𠯫敹𦯀桐蝙頝典隡㰘蝑𣇉裦敹𡒊&
## 10.8 靘𥕦
1. 煺漣遣敹航蕭皞臬皞鞟 commit撱箏膥韏硋
2. 煺漣 SBOM
3. 煺漣◆蝑曉嚗屸蝵脣◆撉𣬚倌
4. 靘肽𧋦嚗蝥批憿餌瘣𧼮霈詨虾霂
5. 𨅯亥䌊僎摰𡁏湔鰵
6. 擃㗛瘣硺敺烾煺漣嚗𥕢憭硋憿餅 owner𧒄銵交霈∪
7. 喲睸蝟餌鞉郊颲曉 SLSA 遣蝑厩漣
8. 靘𥕦憿餃虾鋡怠恣霈∠頂蝏䰻霂W靽萘
## 10.9 摰孵膥銝 GitOps
1. 瘥譍葵煺漣敺格憿餅滚𦛚ockerfile / Containerfileservice.yaml` catalog entry
2. 𨅯埈綉 container registry嚗䔶餈𥕦 Git 隞枏
3. 𨅯 tag 臭誑雿輻鍂 git sha祗銋厩鈭折蝵脣憿餃虾餈賣滲 digest
4. Kubernetes manifest 敹◆憯唳 requestsimitsealth checkeadinesserviceAccount 撠𤩺
5. devtagingrod 榆撘憿駁 GitOps overlay 銵刻噢嚗䔶賢銁滚𦛚隞𣬚′蝻𣇉撌桀
6. 煺漣函蔡敹◆蝏讛 SBOMrovenance蝑整瘣鮋蝑𣇉裦
7. `infra/gitops/` 𣇉 GitOps 隞枏蝞∠銵𣬚𠶖眏 Kubernetes GitOps controller 蝞∠
8. catalog 霈啣 owneromainuntimeamespaceeployment GitOps 頝臬嚗䔶銝滨凒交㗁頧 Deployment manifest
9. 撟喳蝱蝏湔擪璅⊥踎瘞渡瑪滚𦛚蝏湔擪滚𦛚隞蝥佗 owner 蝏湔擪 overlay
## 10.10 銵䔶銝𡁏
𠰴頧祆銵峕蝚砌寡氜啣藁敺𤌍銝𡁻銝芰𤌍敶閖嚗諹峕糓𡒊&摮埈挾輸爸蝘餅瘚贝隞賜㮾隡潔鈭垍㮾 YAML
### 10.10.1 摮埈挾拚猐
銝芸畾萄蘨銝芣隞碶蝵桀虾隞亙摮䀹撅閧內嚗䔶銝滩摮埈挾
| 撖寡情 | 摮埈挾蝐餃 | 毺㮾皞 | 舀晷 | 蝳迫鈭钅★ |
| ---- | -------- | ---------- | -------- | -------- |
| 憸 | domain idwner皜詻皜詻𥕦𧑐 | `domains/{domain}/domain.yaml` | `catalog/domains/`eveloper Portal | catalog 銝剝銋厰蠘器 |
| 滚𦛚 | 滚𦛚撅鮋wner摨瑟韏硔皞鞱LOunbook | `domains/{domain}/services/{service}/service.yaml` | `catalog/components/`I圈秄鈭批停蝏芷秄蝳 | GitOps overlay catalog 銝剜㺿滚𦛚 owner |
| API | endpointperationchema摰寧 | `contracts/apis/` `domains/*/apis/` | API PortalDK 摰寞 | 芸銁 README 碶誨𢠃蝏湔擪亙藁憟𤑳漲 |
| 鈭衤辣 | topicchema鈭扯韐寡蝑厰睸摰寧 | `contracts/events/` `domains/*/events/` | Schema Registry隞嗥𤌍敶𨰻韐寡 | 芸ㄟ韐寡 breaking change |
| 唳旿鈭批 | 鈭批頨思遢wner祗銋厩摨艾蝥批蝐颯蝻塩reshnessI 雿輻鍂蝑𣇉裦 | `domains/{domain}/data-products/{data-product}/data-product.yaml` | 唳旿I 唳旿 | 霈拇㺭桃𤌍敶閙𤜯隞桐漣 |
| 唳旿憟𤑳漲 | schema畾菔祗銋剹摰寧𤩺鱏閮 | `contracts/datasets/` | 唳旿撟喳蝱chema Registry𤩺 | 芸銁亥”硋藁憭游藁敺蝏湔擪唳旿霂凋 |
| AI 鈭批 | 憌𡡞埯蝑厩漣贝楝rompt 撘閧鍂AG 撘閧鍂隡圈犖撌亦&霈 | `ai/applications/{ai-product}/ai-product.yaml` | AI catalogLM Gatewaygent Runtime恣霈∠頂蝏 | 霈 Agent 湔𦻖蝏閗 API 硋極瑟釣諹” |
| AI 憟𤑳漲 | 撌亙颲枏颲枏枂rompt 𧋦AG 隡圈凝靚 | `contracts/ai/` | AI LM Gatewayool Registry恣霈∠頂蝏 | Prompt 硋極𣂼蘨誩銁摨𠉛鍂隞 |
| catalog | 撅閧內賢𪂹wner 撘閧鍂蝟餃㦛untime corecard 蝏𤘪 | `catalog/`銝剖畾萎皞鞟 | Developer Portal恣霈⊥𥁒銵具蝝W𤑳緵 | catalog 敶 Deployment𧢲唳旿憟𤑳漲毺㮾皞 |
| GitOps | amespace digesteplicas overlay摨衣 | `infra/gitops/environments/{env}/...` 𣇉𡠺蝡 GitOps 隞 | Argo CD / Flux恣霈~皛朞扇敶 | ∠𤌍敶蓥葉蝖祉㴓憓榆撘 |
| Kubernetes runtime | podeploymenterviceive status隞嗚餈鞱 | Kubernetes API 虾閫批像 | 餈鞱𧢲踎LO隞嗅 | 𡃏銵峕𧒄摰鮋 Git 銝剔 |
| 瘝餌 | 秄蝳憭硔DR拇𦻖𨰜園𡢿 | `governance/` | CIolicy as Code恣霈∠頂蝏麄 | 仍鞊𡝗偶銋 |
摮埈挾瘚蓮閫
1. `domain.yaml`service.yaml`data-product.yaml` `ai-product.yaml` 臭漣𣪧毺輕皞𣂼仍憟𤑳漲
2. `contracts/` 蝏湔擪箏膥舀嵗撉𣬚亙藁隞嗚I 撌亙romptAG 𣬚蝥艾
3. catalog 隡睃憭游蝥血 `contracts/` 𡝗嵗撉䕘鈭箏極蝏湔擪摮埈挾撅閧內蝟餉‘笔𦶢霂湔
4. GitOps 芸ㄟ𡒊㴓憓𤤿𠶖銝齿𥅾∟澈隞賬蠘器PI 霂凋峕㺭株祗銋剹
5. Kubernetes 虾閫批像啣蘨隞”摰鮋餈鞱銝滚 GitOps
6. 瘝餌質◤ CIolicy as Code圈秄摰∟恣蝟餌晶嚗坔蘨航秩
### 10.10.2 Starter Kit 撠𤩺芋
臬𢆡霂閧摨𥪜𥕦遣摰峕㟲𡢅撱箄鋡怠像atalogitOps 峕祥秄蝳撠𤩺芋
```text
domains/{domain}/domain.yaml
domains/{domain}/services/{service}/service.yaml
domains/{domain}/data-products/{data-product}/data-product.yaml
ai/applications/{ai-product}/ai-product.yaml
contracts/apis/{api}.openapi.yaml
contracts/events/{event}.asyncapi.yaml
contracts/ai/tools/{tool}.yaml
catalog/components/{service}.yaml
catalog/data-products/{data-product}.yaml
catalog/ai-products/{ai-product}.yaml
governance/architecture-gates/production-readiness.yaml
governance/ownership/raci.yaml
governance/slo/tiering-policy.md
governance/migration/deprecation-policy.md
governance/evidence/releases/{service-release}.yaml
governance/evidence/supply-chain/{service-attestation}.yaml
governance/evidence/exceptions/{policy-exception}.yaml
governance/evidence/compatibility/{api-or-event-report}.yaml
governance/evidence/drift/{service-drift-report}.yaml
governance/control-plane/conformance-profile.yaml
governance/control-plane/control-plane.yaml
governance/control-plane/release-gate-decision.yaml
infra/gitops/environments/dev/{domain}/{service}/kustomization.yaml
infra/gitops/environments/prod/{domain}/{service}/kustomization.yaml
```
`domain.yaml` 雿𤾸畾蛛
```yaml
domain: order
name: Order Domain
owner: team-order
lifecycle: production
boundedContext: docs/domain-model.md
capabilities:
- order-command
- order-query
upstream:
- customer
downstream:
- payment
- fulfillment
sloTier: tier-1
dataClassification: internal
architectureDecision:
- governance/decisions/adr-0001-order-boundary.md
```
`service.yaml` 雿𤾸畾蛛
```yaml
service: order-command-service
domain: order
owner: team-order
lifecycle: production
tier: tier-1
runtime:
type: kubernetes
imageRepository: registry.company.com/order/order-command-service
ports:
http: 8080
health:
liveness: /healthz
readiness: /readyz
resources:
requests:
cpu: 200m
memory: 256Mi
limits:
cpu: "1"
memory: 1Gi
dependencies:
apis:
- customer-profile-api
events:
publishes:
- order-created
subscribes:
- payment-authorized
slo:
availability: 99.9
latencyP95Ms: 300
reliability:
rto: 1h
rpo: 15m
onCall: governance/ownership/escalation-policy.md
errorBudgetPolicy: governance/slo/error-budget-policy.md
drillEvidence: governance/evidence/drills/order-command-service-2026-q2.md
runbook: docs/runbook.md
rollback: docs/rollback.md
```
`data-product.yaml` 雿𤾸畾蛛
```yaml
dataProduct: order-facts
domain: order
owner: team-order
lifecycle: production
tier: tier-2
consumers:
- revenue-dashboard
- customer-service-agent
schema: schema/order-facts.schema.yaml
semanticGrain: one row per order state transition
freshness: 15m
quality:
completeness: ">= 99.5%"
validity: ">= 99.0%"
uniqueness: order_event_id
accuracy: reconciled with payment settlement daily
classification:
level: confidential
pii:
- customer_id
retention: 2y
accessPolicy:
policy: governance/data-governance/order-facts-access.rego
approvalRequired: true
audit:
enabled: true
logRetention: 2y
lineage:
upstream:
- order-command-service
downstream:
- revenue-dashboard
- customer-service-agent
aiUsage:
allowed:
- rag
- evaluation
disallowed:
- foundation-model-training
cost:
owner: team-order
allocationTag: cost.domain.order
slo:
freshness: 15m
availability: 99.5
```
`ai-product.yaml` 雿𤾸畾蛛
```yaml
aiProduct: customer-service-agent
owner: team-support-ai
lifecycle: beta
riskTier: R3
businessGoal: assist support agents with grounded answers
model:
gatewayRoute: support-safe-default
approvedModel: vendor-support-model
modelVersion: "2026-05"
prompts:
system: prompts/system.prompt.md
rag:
sources: rag/sources.yaml
vectorIndex: vector:customer-support-policy:v12
tools:
- tool: refund-preview
riskLevel: high
requiresHumanApproval: true
evals:
regression: evals/regression.yaml
redTeam: evals/red-team.yaml
guardrails:
policy: guardrails/policy.rego
observability:
traceRetentionDays: 180
replayEnabled: true
slo:
taskCompletionRate: ">= 85%"
groundedAnswerRate: ">= 95%"
toolErrorRate: "<= 2%"
p95LatencyMs: 6000
budget:
monthlyUsd: 3000
costPerSuccessfulTaskUsd: 0.12
owner: team-support-ai
fallback:
degradedMode: human-support-queue
humanHandoff: support-workbench
rollbackPrompt: prompts/system.previous.prompt.md
providerPolicy:
logRetention: 30d
dataTrainingOptOut: true
crossBorderReview: governance/security/cross-border-ai-review.md
dataUsePolicy:
allowed:
- rag
- evaluation
disallowed:
- foundation-model-training
runbook:
incident: governance/playbooks/ai-incident-playbook.md
rollback: docs/rollback.md
```
V2.28 starter kit 餈䀹靘𥕢誑銝见虾憟𤑳漲璅⊥踎嚗
1. `api-contract.yaml`嚗鋫PI produceronsumeruth澆捆蝑𣇉裦
2. `event-contract.yaml`嚗帋 topicchema蝑厰睸坿祗銋匧
3. `ai-tool-contract.yaml`嚗鋫I 撌亙颲枏颲枏枂蝥扼犖撌亦&霈扎恣霈∪餈鞱𣂼
4. `rag-index-contract.yaml`嚗鑹AG mbedding格綉𣳇膄蝑𣇉裦
5. `fine-tuning-contract.yaml`嚗𡁜凝靚撉諹蕭頦芥隡啜秄蝳
6. `fine-tuning-run.yaml`嚗𡁜甈∪凝靚銵𣬚唳旿 run隡啜讠蒈霈啜摨血敶寡
7. `repository-change-control.yaml` `repository-protection-runbook.md`嚗鋴ODEOWNERS靽脲擪𣈲R 摰⊥䰻齿鈭扎甇Y凒 tag 靽脲擪蝡臭斤𠶖reak-glassOA&M 拍蒈霈啜
8. `gitops-deployment.yaml`嚗𡁶㴓憓amespace digest皞僐erviceAccountod 摰匧蝏𦦵PADB蝵桀靘𥕦
9. `catalog-data-product.yaml`catalog-ai-product.yaml`嚗䬙atalog wner賢𪂹餈鞱蝝W
10. `scorecard.yaml`嚗𡁶鈭批停蝏芥摨娪曎銵諹憭滚恣
11. `release-evidence.yaml`嚗𡁜ommititOps revision digestatalog ipeline run霂訫
12. `supply-chain-attestation.yaml`嚗𡁏撱箸䔉皞僐ource controlLSA 蝑厩漣uilder identityBOMrovenance銋艾𤩺瘣墧醌penSSF Scorecard 蝑曉𦶢隞扎
13. `policy-exception.yaml`嚗𡁏祥憭硔踵綉𠯫𠯫𤏸恣芸𢆡餅鱏閬
14. `api-compatibility-report.yaml`嚗鋫PI 𧋦澆捆韐寡reaking change 𡒊滨𠶖
15. `event-compatibility-report.yaml`嚗帋 Schema 澆捆韐寡滨𠶖
16. `gitops-drift-report.yaml`嚗鎭itOps 銵諹瘚讠𠶖/config/policy 瞍蝑硔
17. `extension-policy.yaml`嚗帋艇 schema 銝讠埈綉寡扇敶𨰻霈斗蝏嘥芰䰻摮埈挾銵䔶蛹
18. `feature-flag-control.yaml`嚗鎄eature Flag隡唬銝𧢲摨衣ill SwitchLO 隞嗚
19. `ai-threat-model.yaml`嚗鐾WASP LLM / Agentic AICP 撌亙颲寧rompt Injection 瘚贝𨅯畾衤憌𡡞埯
20. `lineage-event.yaml`嚗𡁏㺭桐漣銵諹蝻䀝隞嗚roducer jobun state箸㺭chema 諹捶
21. `platform-product-metrics.yaml`嚗䥪latform PMolden Path𤏸誩漲頧賬 SLO
22. `privacy-impact-assessment.yaml`嚗𡁻隡啜𤌍瘜訫抅蝖蜓雿𤘪 AI 雿輻鍂𣂼
23. `tenant-boundary.yaml`嚗𡁶amespaceerviceAccountecret esourceQuotaetworkPolicy
24. `recovery-drill-evidence.yaml`嚗𡁏憭齿TO/RPO 憭滨隞賬憭齿𠯫敹堒憭滨
25. `policy-test-report.yaml`嚗𡁶汿霂閙餅㺭仃韐交㺭蝑硋賭誘霂
26. `genai-observability-contract.yaml`嚗鐾penTelemetry GenAI贝楝okenAG span𠯫敹𡑒
27. `ai-incident-playbook.yaml`嚗鋫I 鈭衤辣 playbook劂閫厩瑕儐AG 蝝W瘙⊥摨𥪜銝剜鱏撣詻瘚卝蝥扼皛𠾼 Kill Switch
28. `cost-allocation-evidence.yaml`嚗𡁏砍𪂹wnerllocation tag蝑曇𣇉𧊋鞉𧋦祆䔉皞𣂼隡睃𢆡
29. `identity-access-review.yaml`嚗朞澈隞賣澈隞賬reak-glassFA 諹挪
30. `secrets-rotation-evidence.yaml`嚗锭ecret providerMSW𪂹𨅯
31. `vulnerability-remediation-evidence.yaml`嚗𡁏 ID滚漲EV 耨憭 SLA雿䠷
32. `incident-postmortem.yaml`嚗帋/園𡢿𨬭unbook 湔鰵秄蝳喲𡡒摰⊥鸌
33. `evidence-freshness-policy.yaml`嚗朞憭批僑樴蝐餃蝑𣇉裦I 罸獈
34. `control-evidence-map.yaml`嚗𡁏綉園★ ID株楝敺𠶖鰵斢𨅯漲餅鱏撅墧
35. `audit-export-manifest.yaml`嚗𡁜恣霈∪紡摰寞𨰻憭滚恣
36. `control-assessment-report.yaml`嚗𡁏綉隡啗隡唬犖圈★雿䠷蝑曄蔡
37. `baseline-change-record.yaml`嚗𡁏沲抅蝥踹摨讐蝑𤥁扇敶𨰻𦶢隞扎皛朞恣憭滚恣
38. `architecture-decision-record.yaml`嚗鋫DR 銝𠹺㗇䲮獢蝑硔娍綉園★OA&M摰∪
39. `oscal-export-profile.yaml`嚗鐾SCAL catalogomponent-definitionSPssessment-results POA&M 鈭斗揢
40. `audit-export-gate.yaml`嚗𡁜恣霈∪紡箏𦶢隞扎𧋦啗捶誯秄蝳SCAL 憭滚恣
41. `audit-export-integrity.yaml`嚗𡁜恣霈∪紡HA-256 屸俈蝭⊥㺿
42. `audit-export-provenance.yaml`嚗𡁜恣霈∪紡 subject撱箏銋剹箏𦶢隞扎鈭文皞鞱韏𤥁蕭皞胯
43. `audit-export-signing-policy.yaml`嚗𡁜恣霈∪紡 provenance payload osign 蝑曉鈭斗𦻖蝑曉𦶢隞文砍𧑐颲寧
44. `audit-export-signature-receipt.yaml`嚗𡁜恣霈∪紡函倌𣂼 payload undle 銋西澈隞賬𤩺蝑曄
45. `poam-record.yaml`嚗䥪OA&M 𤑳緵憿嫘提隞颱犖蝔讠倌蝵脣憭滚恣
46. `risk-register.yaml`嚗帋銝𡁏沲娍綉園★ POA&M雿䠷憭滚恣
47. `ai-evidence.yaml`嚗鋫I 鈭批旿韐行𧋦romptAG隡啜瘚卝隞嗅摨𢛵桐蝙摮睃憭滚恣
48. `conformance-profile.yaml`嚗朞鈭批蝥扼拍𤫇笔漲I 憌𡡞埯蝞∪撩摨艾憿駁秄蝳颲寧
49. `control-plane.yaml`嚗帋銝𡁏銵峕綉園𢒰餉揭園★wner剔漣詨𪂹
50. `release-gate-decision.yaml`嚗𡁻秄蝳蝑硔辺隞嗆𦆮銵䎚憭硔reak-glass皛朞憭齿瓲霂
### 10.10.3 芸𢆡㚚秄蝳
◆撠賡滨宏鈭扎撱箝餈鞱嗆挾犖撌亥摰∪蘨憭颲寧鈭㕑悅拇𦻖憭齿
| 嗆挾 | 芸𢆡㚚秄蝳 | 颲枏 | 餅鱏∩辣 |
| ---- | ---------- | ---- | -------- |
| 𣂷漱 | MarkdownAMLchemaolicy 霂剜 | 蝥艾 | 霂剜躰秤暹𦻖撩憭勗憛怠 |
| Pull Request | API / Event / Data / AI 憟𤑳漲澆捆 | `contracts/`domains/`ai/`摰寞扳𥁒 | breaking change 韐寡 |
| 遣 | 瘚贝韏㚚摰𠾼瘣𠺶交醌 | 皞鞟ockerfile | 擃睃暒瞍𤩺𧊋亥捂 |
| | SBOMrovenance讐倌抅蝖𨅯蝑𣇉裦 | 𨅯撱箸𠯫敹𨰜摨娪曎霂 | SBOM蝑曉䔉皞𣂷 |
| 瞍𤩺靽桀 | CVE / KEV耨憭 SLA雿䠷 | `vulnerability-remediation-evidence.yaml`誩膥 | 擃睃暒瞍𤩺芯耨憭溻LA 頞雿䠷摰⊥鸌 |
| | GitOps diff皞鞾憸腈LO runbook | GitOps overlayatalogervice.yaml | owner runbook digest皞鞉𧊋憯唳 |
| 霈輸䔮憭齿瓲 | 頨思遢皞僐reak-glassFA豢𥁒 | `identity-access-review.yaml`AMubernetes RBAC | 煺漣reak-glass MFA摰∟恣 |
| 撖𤨎瘝餌 | Secret providerMSW𪂹脫醌 | `secrets-rotation-evidence.yaml`亦頂蝏麄誩膥 | 撖𤨎芾蔭 |
| 皜鞱撘誩 | Feature Flagill Switch隞嗚LO | `feature-flag-control.yaml`itOpsbservability | 暺䁅恕𣂼∩辣 |
| AI | 霂AG 犖撌亦&霈斤 | `ai-product.yaml`contracts/ai/` | 擃㗛拙極鈭箏極蝖株恕隡唳𧊋颲暹 |
| AI 霂旿韐行𧋦 | 璅∪romptAG隡啜瘚卝隞嗅摨𢛵桐蝙憭滚恣 | `ai-evidence.yaml`ai-product.yaml`ai-tool-contract.yaml`rag-index-contract.yaml`genai-observability-contract.yaml` | AI 霂𣂼鈭衤辣劐漣 |
| AI 摰匧 | Prompt Injection枂蝡䠷雿䠷拇𦻖 | `ai-threat-model.yaml`ai-tool-contract.yaml`隡啗 | 擃㗛拙極笔仃韐乓拇𦻖𡑒 |
| AI 鈭衤辣 | 撟餉瑕儐AG 瘙⊥摨𥪜銝剜鱏撣詻瘚卝蝥扼皛𡁜憭滨 | `ai-incident-playbook.yaml`ai-product.yaml`ai-threat-model.yaml`genai-observability-contract.yaml` | 擃㗛 AI playbook穃膥銝滚瘜蓥犖撌交𦻖蝞⊥ |
| 撌亦 | DPIA瘜訫抅蝖蜓雿𤘪I 雿輻鍂𣂼 | `privacy-impact-assessment.yaml`桐漣AG 𣳇膄霂旿 | PII 雿 DPIA瘜蓥蝝W悌蝏箸𧊋憯唳 |
| 蝘𠉛氖 | namespaceerviceAccountecret esourceQuotaetworkPolicy 暺䁅恕 | `tenant-boundary.yaml`itOpsubernetes policy | 煺漣 namespace 𣳇憸腈霈斗𦆮𡁶蝏栶∟揭 |
| 唳旿 | schema蝻塩reshness | `data-product.yaml` | 㰘捶銝𧢲虜𡁶䰻 |
| 唳旿餈鞱 | 餈鞱蝻塩roducer jobnput/output dataset | `lineage-event.yaml`摨衣頂蝏麄株捶𤩺𥁒 | 銵䔶隞嗚蝻䀹鱏鋆箸㺭桐漣 |
| 瞍𠉛 | RTO/RPO隞賬憭齿𠯫敹𨰜桐腺憭望嵗撉䎚 | `recovery-drill-evidence.yaml`隞賜頂蝏麄RE 憭滨 | 芸ㄟ𡒊𤌍瞍𠉛憭滩埈𧒄頞桐腺憭望𧊋撉諹 |
| 蝑𣇉裦瘚贝 | OPA / Cedar / Kyverno 蝑𣇉裦瘚贝仃韐交㺭 | `policy-test-report.yaml`olicy as Code 瘚贝蝏𤘪 | 蝑𣇉裦霂𨰻仃韐亦鍂靘𧢲𧊋餅鱏旿銝滢 |
| GenAI 閫 | TokenAG spanrace 撅墧𠯫敹𡑒 | `genai-observability-contract.yaml`penTelemetryI gateway | Token 鞉𧋦航蕭頦芥rompt |
| 撟喳蝱餈鞱𨯫 | Golden Path 𤏸誩漲頧賬 SLO | `platform-product-metrics.yaml`圈秄撌亙唳旿 | 霈斤䰻韐蠘蝸餈 SLO 銝滩噢㺿餈𥡝 owner |
| FinOps | 鞉𧋦倌閬𧊋鞉𧋦/AI/唳旿鞉𧋦𤥁 | `cost-allocation-evidence.yaml`penCost / FOCUS / 鈭𤏸揭 | 鞉𧋦 owner蝑曇頞喋𧊋鞉𧋦賒摮睃銁 |
| 鈭𧢲憭滨 | 敶勗𨬭/園𡢿秄蝳 | `incident-postmortem.yaml`RE 憭滨霅衣頂蝏 | 鈭𧢲unbook 芣凒秄蝳𧊋滚唍 |
| 霂笔𦶢 | 霂憭批僑樴蝐餃蝑𣇉裦I 罸獈 | `evidence-freshness-policy.yaml`恣霈∠揣撘𨰻I | 餈旿蝏抒賒 |
| | ID株楝敺𠶖鰵斢𨅯漲 | `control-evidence-map.yaml`嗥𤌍敶𨰻I | 憿寞餅鱏鋡怨秤 |
| | 蝑厩漣園★wner剔漣詨𪂹 | `conformance-profile.yaml`control-plane.yaml`release-gate-decision.yaml`嗥𤌍敶𨰻I | 銝滚峕𦆮銵藁敺辺隞嗆𦆮銵峕憭𤥁蝏抒賒 |
| 摰∟恣撖澆枂 | 𧋦嗆㺭tarter kit 摰嫘 | `audit-export-manifest.yaml`恣霈∪滨頂蝏 | 撖澆枂汿喲睸𧊋撉諹𧊋蝑曉 |
| 摰∟恣撖澆枂芸𢆡 | 賭誘SON arkdown SCAL 𨰻rovenance statement撉𣬚倌憟𤑳漲 | `摰∟恣撖澆枂賭誘`uild 颲枏枂 | 摰∟恣撌交𣄽𧊋嵗撉䎚鞉䔉皞僐撉𣬚倌 |
| | 霂隡唬犖圈★雿䠷倌蝵 | `control-assessment-report.yaml`嗥𤌍敶𨰻恣霈∪紡 | 霈箝圈★牐犖韐蠘提𧊋蝑曄蔡隞滚ㄟ蝘圈 |
| 箇瑪䀹凒 | 𧋦摨讐渡漣皛𠾼 | `baseline-change-record.yaml`𨰻嗥𤌍敶𨰻I | 箇瑪惩恣𦶢隞斤撩憭晞瘜訫皛𡁜銝𠹺箇瑪 |
| 霈啣 | ADR銝𧢲㗇䲮獢園★OA&M摰∪ | `architecture-decision-record.yaml`baseline-change-record.yaml`嗥𤌍敶𨰻拍蒈霈啜OA&M 霈啣 | 滚之䀹凒 ADRDR 娍綉園★摰∟ |
2026-06-02 02:30:20 +08:00
| OSCAL 鈭斗揢 | catalogomponent-definitionSPssessment-resultsOA&M | `oscal-export-profile.yaml`oscal-summary.json`恣霈∪紡 | 賢笆 GRC蝞⊥憭㚚摰∟恣撌亙 |
| POA&M 湔㺿霈∪ | 𤑳緵憿嫘園★滚漲提隞颱犖蝔讠倌蝵脣憭滚恣 | `poam-record.yaml`oscal-summary.json`隡唳𥁒 | 𤑳緵憿孵蘨冽𥁒𦠜迤𣬚蝣㻫SCAL POA&M 閫删𡠺蝡𧢲䔉皞 |
| 隡憌𡡞埯餉扇 | 憌𡡞埯滚漲wner娍綉園★ POA&M雿䠷憭滚恣 | `risk-register.yaml`oscal-summary.json`嗥𤌍敶𨰻OA&M 霈啣 | 憌𡡞埯芸銁隡朞悅蝥芾 owner憿寞雿䠷鈭箸𦻖 |
| 摰∟恣撖澆枂 | 砍𧑐韐券箏𦶢隞扎air 嗆㺭SCAL | `audit-export-gate.yaml`摰∟恣撖澆枂賭誘`make test` | 匧紡仿秄蝳箸㺭𧋦銝滢SCAL |
| 摰∟恣撖澆枂摰峕㟲 | SHA-256𨰻俈蝭⊥㺿 | `audit-export-integrity.yaml`audit-export-integrity.json`恣霈∪紡粹秄蝳 | 摰∟恣芾◤蝭⊥㺿蝻箏仃剝曎 |
| 摰∟恣撖澆枂 provenance | in-toto statementLSA provenanceubject digest撱箏銋剹鈭文皞鞱 | `audit-export-provenance.yaml`audit-export-provenance.json`恣霈∪紡粹秄蝳 | 摰∟恣撣䔶銝滨䰻𤘪䔉皞僐𣂷銝𧢲銝滚虾霂瘜閧摰𡁶倌 payload |
| 摰∟恣撖澆枂蝑曉蝑𣇉裦 | provenance payload 齿䲮撘譌蝑曉𦶢隞扎undle 頝臬𤩺 | `audit-export-signing-policy.yaml`audit-export-signing-policy.json`恣霈∪紡粹秄蝳 | 憯啁妍瘝⊥ payload 蝑曇楝敺憭㚚蝑曉鈭斗𦻖 |
| 摰∟恣撖澆枂蝑曉撉𣬚倌 | 蝑曉蝑𣇉裦蝏穃ayload undle 銋西澈隞賬IDC issuer𤩺蝑曄 | `audit-export-signature-receipt.yaml`滨頂蝏麄蝑暹𠯫敹 | 憭㚚蝑曉摰峕擧瓷匧虾摰∟恣銋西澈隞賢𤩺銝滚虾餈賣滲 |
| 餈鞱 | SLO蝘颯撣貉摨娪曎蝑𣇉裦瞍宏 | runtimebservabilityudit蝘餅𥁒 | 躰秤憸堒偷 |
### 10.10.4 瞍宏璉瘚贝
銵峕憿餉𤑳緵𨀣銵䔶
◆璉瘚讠宏嚗
1. `service.yaml` owneromain韏硋 catalog entry 銝滢
2. catalog GitOps 頝臬銝滚 GitOps 頝臬⊥瓷 catalog entry
3. GitOps 雿輻鍂 tag digest
4. 煺漣 Deployment digest 銝 GitOps
5. 煺漣 Deployment ConfigMap / Secret hasherviceAccountetworkPolicyod 摰匧蝑𣇉裦 GitOps
6. Kubernetes runtime 摮睃銁芰蒈霈啣 catalog 極雿𡏭頧賬
7. 唳旿鈭批 schema 銝𤾸”蝏𤘪𡝗㺭蝥虫
8. AI 鈭批餈鞱銝剔 PromptAG 蝝W硋極 `ai-product.yaml` 銝滢
9. 蝑𣇉裦靘见園𡢿隞滚銁煺漣銝剔
宏憭
1. 𤑳緵瞍𤾸斗鱏毺㮾皞琜摰帋耨甇 Gitataloguntime 餈䀹糓瘝餌靘见
2. 餈鞱嗥揮乩耨憭滚憿餃銁鈭见𧼮 GitOps 硋耦 incident / postmortem嚗䔶賡鵭撌亦𠶖
3. catalog 瞍宏隡睃齿鰵唳嵗撉䔶耨憭㵪銝滚见極閬皞𣂼仍憟𤑳漲
4. 瘨匧煺漣摰匧I 擃㗛拙極𣂼靘𥕦𡒊宏敹餅鱏
### 10.10.5 憿寡𡝗
銵䔶銝𡁏賢蘨霂𨅯畾萄餈䁅喲睸憿寧&摰噼◤ schemaxample checker 閬
V2.6 韏瘀憿寡𡝗閧眏隞乩辣蝏湔擪嚗𢦓2.7 韏瘀銝交聢 schema 憿寡嚗𢦓2.8 韏瘀蝑𣇉裦I 憡璅∪銵諹蝻睃撟喳蝱鈭批銋蠘嚗𢦓2.9 韏瘀敶勗蝳颯憭齿霂𨰻enAI 閫𡃏餈𥕦嚗𢦓2.10 韏瘀霈輸䔮憭齿瓲亥蔭瘣硺耨憭溻摨虫餈𥕦嚗𢦓2.11 韏瘀恣霈∪紡餈𥕦嚗𢦓2.12 韏瘀摰∟恣撖澆枂芸𢆡硋𦶢隞支餈𥕦嚗𢦓2.13 韏瘀銋蠘嚗𢦓2.14 韏瘀箇瑪䀹凒霈啣銋蠘嚗𢦓2.15 韏瘀OSCAL 鈭斗揢銋蠘嚗𢦓2.16 韏瘀摰∟恣撖澆枂銋蠘嚗𢦓2.17 韏瘀摰∟恣撖澆枂摰峕㟲餈𥕦嚗𢦓2.18 韏瘀摰∟恣撖澆枂 provenance statement 銋蠘嚗𢦓2.19 韏瘀摰∟恣撖澆枂蝑曉蝑𣇉裦銋蠘嚗𢦓2.20 韏瘀摰∟恣撖澆枂蝑曉撉𣬚倌銋蠘嚗𢦓2.21 韏瘀POA&M 湔㺿霈∪銋蠘嚗𢦓2.22 韏瘀憌𡡞埯餉扇銋蠘嚗𢦓2.23 韏瘀霈啣銋蠘嚗𢦓2.24 韏瘀AI 鈭衤辣 playbook 銋蠘嚗𢦓2.25 韏瘀AI 霂旿韐行𧋦銋蠘嚗𢦓2.26 韏瘀敺株餈鞱旿銋蠘嚗𢦓2.27 韏瘀隞枏䀹凒蝡臭蝘餅㟲餈𥕦嚗𢦓2.28 韏瘀蝑厩漣銵峕綉園𢒰屸秄蝳蝑碶餈𥕦
```text
憿寡𡝗
```
霂交刻蝠𤩺綉嗥𤌍敶閧銝齿𤜯隞 OSCAL 摰墧鴌霈啣
1. ID蝐颯憸睃憯唳
2. 憿孵笆朣鞟䔉皞琜靘见 NIST OSCALLSAIST SSDF
3.◆摮睃銁chemaxample 𤥁
4.箇緵 schema `required` `properties` 銝剔摮埈挾
5.箇緵 YAML example 銝剔摮埈挾
6.箇緵 checker 銝剔芸𢆡𤥁
憿寡𡝗閧鍂鈭𤾸蝑䈑
| | 霂 |
| ---- | -------- |
| ﹝霂渡鈭扳憿餅 RTO/RPO嚗峕㦤冽糓西 | 憿寡 `service.schema.json` `service.example.yaml` `reliability.rto`reliability.rpo` |
| ﹝霂湔沲抅蝥蹂摨枏憿餃靽脲擪嚗峕㦤冽糓西 | 憿寡 `repository-change-control.schema.json`內靘见 runbook 鉄 CODEOWNERS靽脲擪𣈲齿鈭扎甇Y凒蝡舫蝘餅㟲OA&M 拍蒈霈 |
| ﹝霂湔㺭桐漣憿餅霈輸䔮摰∟恣嚗峕㦤冽糓西 | 憿寡 `data-product.schema.json` 𣬚內靘见 `accessPolicy`audit`retention` |
| ﹝霂 AI 鈭批蝥批穿箏膥臬炏 | 憿寡 `ai-product.schema.json` 𣬚內靘见 `budget`fallback`providerPolicy` |
| ﹝霂 AI 鈭批旿敹航蕭頦迎箏膥臬炏 | 憿寡 `ai-evidence.schema.json` 𣬚內靘见急芋romptAG隡啜瘚卝隞嗅摨𢛵桐蝙憭滚恣 |
| ﹝霂港銝帋蝥批憿颱蝙屸秄蝳箏膥臬炏 | 憿寡 `conformance-profile.schema.json`control-plane.schema.json` `release-gate-decision.schema.json` 蝏穃蝑厩漣剔漣憭硋憭齿瓲 |
| ﹝霂 AI 鈭衤辣 playbook嚗峕㦤冽糓西 | 憿寡 `ai-incident-playbook.schema.json` 𣬚內靘见怨圻穃膥瘚卝蝥扼皛𠾼AG Kill Switch |
| ﹝霂 GitOps 敹箏膥臬炏 | 憿寡 `gitops-deployment.schema.json` 𣬚內靘见 `serviceAccount`security`scaling` |
| ﹝霂港摨娪曎敹瘣𧼮 Scorecard 霂旿嚗峕㦤冽糓西 | 憿寡 `supply-chain-attestation.schema.json` 𣬚內靘见 `vulnerability`scorecard` |
| ﹝霂 starter kit 敹芰䰻摮埈挾嚗峕㦤冽糓西 | 憿寡 checker 鉄 `additionalProperties must be false` `unexpected field` 霂旿 |
| ﹝霂港艇 schema 敹撅訫枂箏膥臬炏 | 憿寡 `extension-policy.schema.json` 𣬚內靘见暺䁅恕蝑𣇉裦 |
| ﹝霂渡鈭抒摨血憿餃虾喲𡡒嚗峕㦤冽糓西 | 憿寡 `feature-flag-control.schema.json` 𣬚內靘见 `killSwitch`rollbackOnSloBurn` |
| ﹝霂 AI 鈭批𡁜遣璅∴箏膥臬炏 | 憿寡 `ai-threat-model.schema.json` 𣬚內靘见 OWASPCP畾衤憌𡡞埯 |
| ﹝霂湔㺭桐漣憿餅餈鞱蝻矋箏膥臬炏 | 憿寡 `lineage-event.schema.json` 𣬚內靘见 jobunnputsutputschema 諹捶 |
| ﹝霂游像啣極蝔见憿颱銝箔漣箏膥臬炏 | 憿寡 `platform-product-metrics.schema.json` 𣬚內靘见 Platform PMolden Path誩漲頧賢𢆡 |
| ﹝霂游鉄 PII 桐漣憿餃敶勗摯嚗峕㦤冽糓西 | 憿寡 `privacy-impact-assessment.schema.json` 𣬚內靘见 DPIA蜓雿𤘪 AI 雿輻鍂𣂼 |
| ﹝霂渡鈭抒憿餅𠉛氖憸嘅箏膥臬炏 | 憿寡 `tenant-boundary.schema.json` 𣬚內靘见 ResourceQuotaetworkPolicy 暺䁅恕 |
| ﹝霂 RTO/RPO 敹◆鋡急𠬍箏膥臬炏 | 憿寡 `recovery-drill-evidence.schema.json` 𣬚內靘见怎𤌍憭滨隞賬憭齿𠯫敹堒憭滨 |
| ﹝霂渡憿餃虾瘚贝嚗峕㦤冽糓西 | 憿寡 `policy-test-report.schema.json` 𣬚內靘见汿霂閙㺭仃韐交㺭𦶢隞 |
| ﹝霂 GenAI 敹瘚页箏膥臬炏 | 憿寡 `genai-observability-contract.schema.json` 𣬚內靘见 TokenAG span 峕𠯫敹𡑒 |
| ﹝霂湔憿餃虾嚗峕㦤冽糓西 | 憿寡 `cost-allocation-evidence.schema.json` 𣬚內靘见蝑曇𣇉𧊋鞉𧋦隡睃𢆡 |
| ﹝霂渡鈭扯挪憿餃箏膥臬炏 | 憿寡 `identity-access-review.schema.json` 𣬚內靘见怨澈隞賣reak-glassFA |
| ﹝霂渡鈭批憿餉蔭箏膥臬炏 | 憿寡 `secrets-rotation-evidence.schema.json` 𣬚內靘见 KMS𨅯 |
| ﹝霂湧瘣𧼮憿颱耨憭㵪箏膥臬炏 | 憿寡 `vulnerability-remediation-evidence.schema.json` 𣬚內靘见 SLA耨憭齿𠯫雿䠷 |
| ﹝霂渡鈭找憿餃箏膥臬炏 | 憿寡 `incident-postmortem.schema.json` 𣬚內靘见急覔𨬭券★unbook 湔鰵屸秄蝳 |
| ﹝霂渲毺誧蝏剖箏膥臬炏 | 憿寡 `evidence-freshness-policy.schema.json` 𣬚內靘见憭批僑樴罸獈 CI |
| ﹝霂湔銝芣綉園★憿餅航蕭頦芾箏膥臬炏 | 憿寡 `control-evidence-map.schema.json` 𣬚內靘贝冽綉園★ ID株楝敺𠶖 |
| ﹝霂游恣霈∪臬紡憭齿瓲嚗峕㦤冽糓西 | 憿寡 `audit-export-manifest.schema.json` 𣬚內靘见摰嫘 |
| ﹝霂游恣霈∪賜眏隞枏嚗峕㦤冽糓西 | 憿寡 摰∟恣撖澆枂𡁏𧋦akefile 亙藁 checker 芸𢆡𡝗 |
| ﹝霂湔綉憿餉◤霂𣬚倌蝵莎箏膥臬炏 | 憿寡 `control-assessment-report.schema.json` 𣬚內靘见急綉圈★雿䠷蝑曄蔡 |
| ﹝霂游抅蝥踹憿餃箏膥臬炏 | 憿寡 `baseline-change-record.schema.json` 𣬚內靘见怠蔣𦶢隞文霈∪ |
| ﹝霂湧憭扳沲憿餅 ADR嚗峕㦤冽糓西 | 憿寡 `architecture-decision-record.schema.json` 𣬚內靘见銝𧢲㗇䲮獢園★OA&M |
2026-06-02 02:30:20 +08:00
| ﹝霂游恣霈∟憿餃虾鈭斗揢嚗峕㦤冽糓西 | 憿寡 `oscal-export-profile.schema.json`內靘见撖澆枂𡁏𧋦閬 OSCAL 鈭𠉛掩閫㦛 |
| ﹝霂游圈★敹◆餈𥕦 POA&M 湔㺿霈∪嚗峕㦤冽糓西 | 憿寡 `poam-record.schema.json`內靘见撖澆枂𡁏𧋦閬𤑳緵憿嫘蝔讠 OSCAL POA&M 颲枏枂 |
| ﹝霂湔沲憿餌蒈霈啣憭滚恣嚗峕㦤冽糓西 | 憿寡 `risk-register.schema.json`內靘见撖澆枂𡁏𧋦閬憌𡡞埯園★OA&M雿䠷憭滚恣 |
| ﹝霂游恣霈∪紡憿餉亥捶誯秄蝳箏膥臬炏 | 憿寡 `audit-export-gate.schema.json`恣霈∪紡粹秄蝳 `make test`颲枏枂銝滚 |
| ﹝霂游恣霈∪鈭斗𦻖𤾸憿餃虾脩砥箏膥臬炏 | 憿寡 `audit-export-integrity.schema.json` SHA-256 |
| ﹝霂游恣霈∪𡒊鞉䔉皞琜箏膥臬炏 | 憿寡 `audit-export-provenance.schema.json` subject digest撱箏銋剹鈭文皞鞱 |
`starter kit 賭誘`芾澈嚗銝剖ㄟ𡒊 schema 摮埈挾xample 摮埈挾 checker 霂旿蝖桀摮睃銁
### 10.10.6 隡
嚗峕糓𪙛𡏭銝芣斗鱏斗鱏銝齿𤜯隞雿枏極峕糓摰帋匧極憿餃笆朣鞟讛悅
Y眏銝厩掩辣蝏
```text
governance/control-plane/conformance-profile.yaml
governance/control-plane/control-plane.yaml
governance/control-plane/release-gate-decision.yaml
```
`conformance-profile.yaml` 摰帋撩摨佗
```yaml
profile: regulated-ai-prod
appliesTo:
assetTypes:
- service
- data-product
- ai-product
environments:
- prod
risk:
businessCriticality: tier-1
dataSensitivity: confidential
aiRiskTier: R3
internetFacing: true
requiredGateLevel: L4
requiredEvidence:
- owner
- service-contract
- api-compatibility
- data-contract
- ai-evaluation
- sbom
- provenance
- signature-verification
- gitops-diff
- slo
- runbook
- rollback
- incident-playbook
- audit-export
allowedExceptions:
maxActiveDays: 30
requiresRiskAcceptance: true
requiresCompensatingControl: true
review:
cadence: quarterly
owner: architecture-governance-board
```
`control-plane.yaml`餅綉園★剔漣芸𢆡𣇉𠶖
```yaml
controlPlane:
version: V2.28
owner: architecture-governance-board
defaultProfile: standard-prod
controls:
- id: EA-REL-001
title: Production service has owner, SLO and runbook
appliesTo:
- service
gateLevel: L2
blocking: true
evidence:
- domains/{domain}/services/{service}/service.yaml
- catalog/components/{service}.yaml
- governance/evidence/releases/{release}.yaml
automation:
status: enforced
command: service-contract-check
freshness:
maxAgeDays: 90
exception:
allowed: false
- id: EA-AI-004
title: High-risk AI product has evaluation, threat model and incident playbook
appliesTo:
- ai-product
gateLevel: L4
blocking: true
evidence:
- ai/applications/{ai-product}/ai-product.yaml
- contracts/ai/threat-models/{ai-product}.yaml
- governance/playbooks/{ai-product}-incident-playbook.yaml
- governance/evidence/ai/{ai-product}-evidence.yaml
automation:
status: measured
command: ai-release-gate
freshness:
maxAgeDays: 30
exception:
allowed: true
maxActiveDays: 14
requiresHumanApproval: true
```
`release-gate-decision.yaml` 霈啣瘥𤩺活蝏𤘪
```yaml
decision:
id: gate-2026-06-02-order-command-service
asset: order-command-service
profile: regulated-ai-prod
environment: prod
result: conditional-pass
decidedAt: 2026-06-02T07:30:00+08:00
decidedBy: release-captain
checks:
passed:
- sbom
- provenance
- signature-verification
- gitops-diff
failed:
- recovery-drill-freshness
exceptions:
- id: ex-2026-q2-recovery-drill
expiresAt: 2026-06-16T23:59:59+08:00
riskAcceptedBy: sre-lead
compensatingControl: on-call manual recovery drill scheduled
requiredActions:
- owner: team-order
due: 2026-06-10
action: complete recovery drill and attach evidence
rollback:
required: true
plan: docs/rollback.md
```
蝑厩漣鍂鈭𠉛漣嚗
| 蝑厩漣 | | 鍂撖寡情 | 雿舘 |
| ---- | ---- | -------- | -------- |
| `L0` | 霈啣 | 摰鮋煺漣甈⊥ | owner賢𪂹箸𠯫 |
| `L1` | 憟𤑳漲蝥 | 雿𡡞冽㺭 | 箏膥航粉憟𤑳漲atalog抅蝖瘚贝 |
| `L2` | | 𡁶鈭扳唳旿鈭批 | CILOunbookitOps |
| `L3` | 霂 | Tier-1 滚𦛚㦤撖冽𦻖 | SBOMrovenance蝑整憭齿 |
| `L4` | 埈綉蝥 | 擃㗛 AI𤑳恣瘚煾曎頝 | 摰⊥鸌恣霈∪紡OA&M拇𦻖漲憭齿瓲 |
蝏𤘪雿輻鍂隞乩鈭𠉛掩嚗
| 蝏𤘪 | | 臬炏 | 敹蒂 |
| ---- | ---- | ------------ | -------- |
| `pass` | 厰獈剝★ | | 芸𢆡𤥁摰∟恣蝝W |
| `conditional-pass` | 鮋獈剝★蝻箏仃𤥁桐葩餈𤏸 | | 𢆡wner踵綉 |
| `fail` | 餅鱏憿孵仃韐 | | 憭梯揖憿嫘耨憭滚遣霈柴𦶢隞 |
| `exception` | 蝏𤩺憌𡡞埯 | 閫蝥扯 | 園𡢿踵綉OA&M |
| `break-glass` | 煺漣蝝扳 | 銝湔𧒄捂 | 鈭𧢲蝻硋噡𤾸噼‘霂旿 |
1. `L3` `L4`漣銝滚鐯鈭箏極霂憿餅箏膥霂𣬚倌蝵脰扇敶𨰻
2. `conditional-pass` 銝滩餈䂿賒箇緵銝斗活嚗𤤿洵鈭峕活敹◆頧砌蛹 `fail` 𡝗迤撘譍憭硔
3. `exception`𧒄拇𦻖𦯀犖踵綉喲𡡒∩辣
4. `break-glass` 煺漣鈭𧢲𣇉蝞⊥𧒄 24 72 撠𤩺𧒄‘朣𣂼
5.旿餈蛹霂旿蝻箏仃嚗𥕦憿駁獈蝑厩漣韏
6. 瘥誩迤摨血憿餅𡂝 `L3` / `L4`漣嚗𡏭 `control-assessment-report.yaml`
7. X𧋦頨怎䀹凒敹◆韏 ADRODEOWNERS靽脲擪𣈲抅蝥踹渲扇敶𨰻
銵屸
1. 隞餅煺漣韏芸楛 `conformance-profile`
2. 隞餅餅鱏 `control-plane` 餈賣滲株楝敺 owner
3. 隞餅 `release-gate-decision`質圾𠹺蛹隞靘见
4. 隞餅靘见園𡢿踵綉拇𦻖𦯀犖
5. 隞餅摰∟恣撖澆枂秄蝳蝑𡝗憭硋 POA&M
## 10.11 隞枏𤘪㚚𢒰
蝏𤘪臭誑銝朞璅~𣪧蠘䌊瘝餌摨血嚗䔶毺㮾皞鞱器摨𤘪𤑳㗇𥋘摨𥪜 ownership蝳颯憟誩摰∟恣閬嚗諹誩末 Git 蝞∠
㚚𢒰嚗
| 𤘪 | 箸艶 | 隡条 | 憌𡡞埯 | 敹◆靽萘 |
| ---- | -------- | ---- | ---- | -------------- |
| monorepo | 憸𤤿𣪧雿𨅯 | 䀹凒齿摰寞 | 隞枏蝳駁𠗕I 鞉𧋦擃 | ownerODEOWNERS楝敺atalog |
| 憭帋 polyrepo | 芣祥撘箝賢𪂹笔榆撘蝳餉 | 𡠺蝡卝摨栞蝠 | 憟𤑳漲瞍砍笆朣鞾𠗕楊隞枏 | contracts registryatalog 𡁜楊隞枏摰寞 |
| 撟喳蝱 | 撟喳蝱餈鞱𨯫 Golden Path撌亙 | 撟喳蝱鈭批𡝗璅⊥踎 | 撟喳蝱銝𦒘 | 撟喳蝱璅⊥踎𧋦蝘餉秩汿冽䲮敶勗 |
| GitOps | 煺漣銝交聢㴓憓 owner 摰⊥瓲 | 虾摰∟恣嚗峕蝳餃撩 | 摨𠉛鍂隞蝵脣峕郊 | 𨅯 digestitOps revision蝥血 catalog |
| 唳旿鈭批 | 唳旿撟喳蝱蝥血韐券瞍磰 | 唳旿瘝餌蝻䀹 | 憸 owner 韐遙鋡怎 | 唳旿鈭批 owner蝥血𡁶䰻 |
| AI 鈭批 | AI 鈭批餈凋誨敹怒隡圈 Prompt 𡠺蝡讠賢𪂹 | Prompt/RAG/霂祆祥 | AI 楝憸颲寧 | 撌亙瘜典蝥批摰∟恣曇楝 |
㗇𥋘閫
1. 煺漣 GitOps 颲寧嚗𥟇糓衣𡠺蝡衤鈭𤾸恣霈∪ owner 閬
2. 憟𤑳漲臭誑葉隞梶恣銋笔虾隞仿隞梶恣憿餉 catalog 摰寞扳嵗撉䎚
3. 撟喳蝱璅⊥踎敹穿銝𡁜𦛚隞枏憿餉憯唳芸楛雿輻鍂
4. 憭帋璅∪㕑楊隞枏霈殷𡠺 API隞嗚桐漣I 撌亙 GitOps 䀹凒
5. 銝滚霈貊鍂隞枏颲寧颲寧銝齿嚗𥕢摨𤘪賣𤜯隞 DDD owner 霈曇恣
`governance/migration/repository-topology-policy.md` 摨磰秐撠穃
1. 隞枏𤘪㗇𥋘
2. CODEOWNERS 閫
3. 頝其憟𤑳漲
4. GitOps 隞𤘪𣂼摰∟恣閬
5. 撟喳蝱璅⊥踎𧋦蝘餌
## 10.12 餈摰嫣鍂蝑𣇉裦
唬誨𡝗沲銝帋甈⊥函頂蝏麄蝘餌憿駁霈斗𣈲餈𥕦踵揢蹱嵗撉䎚韐寡蝘餃
### 10.12.1 抒頂蝏毺
蝏墧霈斗蝔页
1.抒頂蝏蠘𥡝器冽𦻖
2. catalog 銝剔蒈霈唳唂蝟餌 owner韏硔蝥批
3. 雿輻鍂 API GatewayFF隞嗆‘唳旿峕郊𦠜鰵颲寧
4. 撖寡粉頝臬遣蝡𧢲䰻霂X芋摮䀹唳旿鈭批嚗屸滨凒亥楊摨栞粉抒頂蝏麄
5. 撖孵頝臬遣蝡见蝑厰睸隞嗉‘笆韐血
6. 隞亙㦤瑞黎𤘪銝箏雿漤鞉郊
7. 瘥𤩺活靽萘頝臬銝𡁜𦛚撉峕𤣰
8. 摰峕亙藁唂隞餃𦛚唳旿峕郊憭𡝗
迫鈭钅★嚗
1. 銝滚霈豢鰵滚𦛚湔𦻖曹澈抒頂蝏雿靝蛹
2. 銝滚霈豢瓷匧笆韐血銵亙鈭批株楝敺
3. 銝滚霈詨蘨餈宏隞宏 ownerLOunbookatalog 峕㺭蝥艾
4. 銝滚霈豢唂蝟餌敶孵靽萘 owner 蔣摮𣂷遙甇亥霈輸䔮
### 10.12.2 API隞嗅唳旿鈭批
鍂銝齿糓𣳇膄𡁶䰻嚗諹峕糓埈綉餈宏餈
| 撖寡情 | 撘 | 𡁶䰻撖寡情 | | 𣳇膄漤秄蝳 |
| ---- | ---------- | -------- | ---------- | ---------- |
| API | 蝥艾摰寡秩汿蝘餌內靘卝韐寡 | API 瘨圈秄DK owner | 銝芸𪂹 | 鈭扳韐寡憌𡡞埯霈啣 |
| 鈭衤辣 | Schema韐寡 | 鈭衤辣瘨桀像 owner | 銝支葵瘨 | 瘨蝘餃甇颱縑𣬚妖𧢲 |
| 唳旿鈭批 | 唳㺭桐漣摮埈挾誩笆瘥𢛵蝻睃蔣 | 銝𧢲虜亥”I 鈭批韐寡 | 銝芣㺭蝞堒𪂹 | 銝𧢲虜韐券藁敺 |
| AI 璅∪ / Prompt | 隡啜曉笆瘥𢛵皛𡁏芋 | AI 鈭批 owner owner典𣪧 | 啣漲 | 霂嚗峕唂𧋦鈭扳 |
| 撟喳蝱 Golden Path | 唳芋蝘餉摰寧 | 劐蝙典𣪧 | 銝芸迤摨 | 餈宏摰峕憭硋 |
`governance/migration/deprecation-policy.md` 摨磰秐撠穃
1.鍂撖寡情wner 峕𤜯隞䲮獢
2. 敶勗韐寡𨰻
3. 𡁶䰻皜𣳇蝘餅⏛甇X𠯫
4. 澆捆蝑𣇉裦皛朞楝敺憌𡡞埯霈啣
5. 𣳇膄摰∟恣
### 10.12.3 唳旿I
敶寞蝔见憿餃摰∟恣撠暸
1. 唳旿鈭批敶孵憿餌&霈支蝵柴皜貉蝻睃 AI 雿輻鍂
2. AI 鈭批敶孵憿餃蝏𤘪芋贝楝romptAG 蝝W𣂼摰∟恣靽萘蝑𣇉裦
3. 撟喳蝱敶孵憿餅靘𥟇𤜯隞 Golden Path蝘餌𡁏𧋦憭𡝗𨰻
4. 霈暹鴌敶孵憿餌&霈 DNS銋艾蝏𦦵隞賬蝑曉烐綉𡃏郎
## 10.13 撉諹摰∟恣霂旿皜
銵䔶銝𡁏憿餉鋡恍嚗峕沲𢛶𨅯銝滩𨅯
### 10.13.1 撠誯
瘥譍葵霂閧𣂷隞乩撉諹
摨𤘪靘𤤿洵銝孵虾 starter kit嚗
```text
starter kit
```
霂亦𤌍敶閧 schema 𣬚內靘讠眏隞乩賭誘
```bash
starter kit 賭誘
```
霂亙𦶢隞斗糓隞枏妟靘肽 starter gate嚗𣬚鍂鈭擧嵗撉𣬚𨰻園★閬61 蝏內靘讠 JSON Schema 摮鞾AML 蝷箔憟堒憛怠畾萸聢撘讐漲 schema 璅∪銝𡁏銵峕綉園𢒰蝥扼秄蝳蝑硔摨枏湔綉蝡臭蝘餅㟲亥蔭瘣硺耨憭溻格鰵斢𨅯漲I 霂旿韐行𧋦凝靚銵諹I 鈭衤辣 playbook恣霈∪紡𨰻恣霈∪紡箄䌊賭誘隡唳𥁒𨳍抅蝥踹渲扇敶𨰻蝑𤥁扇敶𨰻SCAL 鈭斗揢OA&M 湔㺿霈∪銝𡁏沲拍蒈霈啜恣霈∪紡粹秄蝳恣霈∪紡𨰻恣霈∪紡 provenance statement恣霈∪紡箇倌恣霈∪紡箇倌蝑曉𧊋畾菟獈桅曎摮埈挾𣬚內靘钅𡢿銝銝𡁶鈭扯氜唳𧒄摨𥪯𦻖嵗撉膥嚗䔶 JSON Schema draft 2020-12 validatorAML parserpenAPI / AsyncAPI checkerPA / Cedar / Kyverno policy testLSA / Sigstore verifierpenTelemetry collectorpenCost / FOCUS 撌亙AM / Secret 蝞∠蝟餌瘣䂿恣頂蝏麄SCAL 撌亙 GitOps diff 撌亙嚗𥟇𧋦隞枏𡁏𧋦 starter kit 撠誩虾
摰∟恣撖澆枂眏隞乩賭誘
```bash
摰∟恣撖澆枂賭誘
```
暺䁅恕颲枏枂嚗
```text
build/modern-enterprise-architecture-audit/audit-export.json
build/modern-enterprise-architecture-audit/audit-export.md
2026-06-02 02:30:20 +08:00
build/modern-enterprise-architecture-audit/oscal-summary.json
build/modern-enterprise-architecture-audit/audit-export-integrity.json
build/modern-enterprise-architecture-audit/audit-export-provenance.json
```
2026-06-02 02:49:44 +08:00
撖澆枂颲枏枂銝滚讐眏隞乩賭誘僎撌脩餈𥕦 `make test`
```bash
摰∟恣撖澆枂賭誘
2026-06-02 02:49:44 +08:00
```
```text
governance/evidence/releases/{service-release}.yaml
governance/evidence/supply-chain/{service-attestation}.yaml
governance/evidence/exceptions/{policy-exception}.yaml
governance/evidence/compatibility/{api-or-event-report}.yaml
governance/evidence/drift/{service-drift-report}.yaml
governance/evidence/lineage/{data-product-run}.yaml
governance/evidence/platform/{platform-product-period}.yaml
governance/evidence/privacy/{privacy-assessment}.yaml
governance/evidence/recovery/{recovery-drill}.yaml
governance/evidence/policy-tests/{policy-test-report}.yaml
governance/evidence/cost/{cost-allocation-period}.yaml
governance/evidence/access/{access-review}.yaml
governance/evidence/secrets/{secrets-rotation}.yaml
governance/evidence/vulnerabilities/{vulnerability-remediation}.yaml
governance/postmortems/{incident-postmortem}.md
governance/evidence/freshness/{freshness-report}.json
governance/evidence/control-map/{control-evidence-map}.yaml
governance/control-plane/{conformance-profile}.yaml
governance/control-plane/{control-plane}.yaml
governance/control-plane/{release-gate-decision}.yaml
governance/evidence/audit-export/{audit-export-manifest}.yaml
governance/evidence/control-assessments/{control-assessment-report}.yaml
governance/evidence/baseline-changes/{baseline-change-record}.yaml
governance/evidence/architecture-decisions/{architecture-decision-record}.yaml
2026-06-02 02:30:20 +08:00
governance/evidence/oscal/{oscal-export-profile}.yaml
governance/evidence/audit-export/{audit-export-signing-policy}.yaml
governance/evidence/audit-evidence-index.md
governance/evidence/drill-evidence-template.md
catalog/components/{service}.yaml
catalog/data-products/{data-product}.yaml
catalog/ai-products/{ai-product}.yaml
contracts/apis/{api}.openapi.yaml
contracts/events/{event}.asyncapi.yaml
contracts/datasets/{data-product}.yaml
contracts/ai/tools/{tool}.yaml
contracts/release/feature-flags/{flag}.yaml
contracts/ai/threat-models/{ai-product}.yaml
contracts/ai/observability/{ai-product}.yaml
contracts/data/lineage/{data-product-run}.yaml
contracts/privacy/{data-product}.yaml
infra/gitops/environments/prod/{domain}/{service}/kustomization.yaml
infra/kubernetes/tenancy/{tenant-boundary}.yaml
infra/kubernetes/rbac/{identity-access-review}.yaml
```
撉諹賭誘摨磰秐撠𤏸
```bash
make lint
make check-links
make check-doc-structure
make check-metadata
make check-ai-citation
starter kit 賭誘
摰∟恣撖澆枂賭誘
摰∟恣撖澆枂賭誘
```
賢𧑐摨磰‘
1. OpenAPI / AsyncAPI 澆捆
2. JSON Schema / Proto / Avro 澆捆
3. 唳旿憟𤑳漲韐券
4. AI 霂撌亙
5. SBOMrovenance撉𣬚倌璉
6. GitOps diffolicy as Code Kubernetes
7. catalog 畾菜宏璉瘚卝
8. RTO/RPO 瞍𠉛旿璉
9. 敶勗蜓雿枏蝝W𣳇膄霂旿璉
10.𠉛氖esourceQuotaetworkPolicy 暺䁅恕
11. GenAI traceoken RAG span 閬
12. 鞉𧋦倌閬𧊋鞉𧋦雿齿𦠜
13. 霈輸䔮憭齿瓲reak-glass MFA 摰∟恣璉
14. Secret 脫醌 KMS 霂旿璉
15. 擃睃暒瞍𤩺EV耨憭 SLA雿䠷餅鱏璉
16. 鈭𧢲憭滨unbook 湔鰵屸秄蝳
17. 摰∟恣霂憭批僑樴笔𢆡雿𨅯 CI 餅鱏璉
18. 憿孵旿頝臬𠶖鰵斢𨅯漲屸獈
19. 蝑厩漣銵峕綉園𢒰秄蝳蝑硔憭𡝗𦆮銵䎚reak-glass 迤摨血
20. 摰∟恣撖澆枂摰嫘憭滚恣璉
21. 摰∟恣撖澆枂 JSON / Markdown 撖澆枂賭誘璉
22. 圈★寞𧒄雿䠷蝑曄蔡
23. 箇瑪䀹凒敶勗𦶢隞扎皛朞恣憭滚恣璉
24. OSCAL catalogomponent-definitionSPssessment-resultsOA&M `oscal-summary.json` 颲枏枂璉
25. POA&M 𤑳緵憿嫘蝔讠倌蝵脣 OSCAL POA&M 颲枏枂銝
26.憌𡡞埯餉扇娍綉園★ POA&M雿䠷摰∪摰∟恣撖澆枂憌𡡞埯閫㦛銝
27. 摰∟恣撖澆枂 JSONarkdownSCAL air 嗆㺭隡啁𠶖
28. 摰∟恣撖澆枂 SHA-256 閖俈蝭⊥㺿璉
29. 摰∟恣撖澆枂 provenance subject digest撱箏銋剹鈭文皞鞱韏𡝗
30. 摰∟恣撖澆枂蝑曉蝑𣇉裦ayload 蝑曉𦶢隞扎undle 頝臬函倌滢漱
31. 摰∟恣撖澆枂蝑曉撉𣬚倌undle 銋西澈隞賬IDC issuer𤩺蝑曄𨀣
### 10.13.2 摰∟恣霂旿蝝W
摰∟恣霂旿銝滚典恣霈∪銝湔𧒄勗像偌蝥踵蝏剔
| 霂旿蝐餃 | | 煺漣 | 靽萘 |
| -------- | ---- | ------ | -------- |
| 𧋦霂旿 | 祈扇敶𨰻DR摰∟扇敶 | 瘝餌 | 靽萘銝餌 |
| 滚𦛚旿 | CIitOpsatalog | 滚𦛚啣𣪧 | 閬瘥𤩺活煺漣 |
| 靘𥕦 | SBOMrovenance蝑暹𠯫敹 | 撟喳蝱典𣪧 | 𪂹 |
| 唳旿鈭批旿 | 唳旿憟𤑳漲𤩺𥁒𨳍蝻塩桀恣霈 | 憸峕㺭桀像啣𣪧 | 閬瘥𤩺活唳旿鈭批 |
| AI 鈭批旿 | 憌𡡞埯隡圈rompt 𧋦AG trace | AI 鈭批 | 蝥找 |
| | SLO霂舫蝞𨰜扇敶𨰻 | 滚𦛚 owner SRE | 閬瘥譍葵 Tier-1 / Tier-2 韏漣 |
| 鞉𧋦霂旿 | 鞉𧋦蝞𨰜撣詨霅艾雿齿 | 撟喳蝱 FinOps owner | 閬瘥譍葵鞉𧋦 |
| 霈輸䔮霂旿 | IAM / RBAC𣂼reak-glassFA 摰∟恣 | 摰匧RE owner | 閬瘥譍葵霈輸䔮憭齿瓲 |
| 撖𤨎霂旿 | Secret providerMSZ扇敶𨰻脫醌 | 撟喳蝱典𣪧 | 閬瘥譍葵頧格揢 |
| 瞍𤩺旿 | 蝏𤘪EV耨憭 SLA雿䠷 | 摰匧 owner | 閬瘥譍葵擃睃暒𤑳緵 |
| 鈭𧢲旿 | 鈭𧢲園𡢿蝥踴𨬭券★unbook 屸秄蝳 | SRE owner | 鈭𧢲喲𡡒𡒊誧蝏凋銝芸恣霈∪𪂹 |
| 旿 | 株楝敺𠶖鰵斢𨅯漲屸獈 | 瘝餌啣𣪧 | 閬瘥譍葵箇瑪𧋦 |
| 摰∟恣撖澆枂霂旿 | 撖澆枂摰寞𨰻憭滚恣 | 瘝餌典𣪧 | 閬瘥𤩺活甇摰∟恣撖澆枂 |
| 摰∟恣撖澆枂芸𢆡𤥁 | 撖澆枂賭誘SON arkdown SCAL OA&M 湔㺿閫拍蒈霈啗𨰻rovenance statement蝑曉蝥血蝏𤘪 | 瘝餌啣𣪧 | 閬瘥𤩺活甇摰∟恣撖澆枂 |
2026-06-02 02:49:44 +08:00
| 摰∟恣撖澆枂旿 | 砍𧑐韐券SCAL `make test` 蝥喳 | 瘝餌啣𣪧 | 閬瘥𤩺活甇摰∟恣撖澆枂 |
| 摰∟恣撖澆枂摰峕㟲 | SHA-256脩砥寞嵗撉𣬚 | 瘝餌啣𣪧 | 閬瘥𤩺活甇摰∟恣撖澆枂 |
| 摰∟恣撖澆枂 provenance 霂旿 | in-toto statementLSA provenanceubject digest撱箏銋剹鈭文皞鞱 | 瘝餌啣𣪧 | 閬瘥𤩺活甇摰∟恣撖澆枂 |
| 摰∟恣撖澆枂蝑曉蝑𣇉裦霂旿 | provenance payload 齿䲮撘譌蝑曉𦶢隞扎undle 頝臬𤩺 | 瘝餌典𣪧撟喳蝱 | 閬瘥𤩺活甇摰∟恣撖澆枂 |
| 摰∟恣撖澆枂蝑曉撉𣬚倌旿 | 蝑曉蝑𣇉裦蝏穃ayload undle 銋西澈隞賬IDC issuer𤩺蝑曄 | 瘝餌典𣪧撟喳蝱 | 閬瘥𤩺活甇摰∟恣撖澆枂 |
| 摯霂旿 | 蝏𤘪圈★雿䠷倌蝵脣銝𧢲活霂 | 瘝餌𣬚𡠺蝡贝隡唬犖 | 閬瘥譍葵箇瑪𧋦峕迤撘誩恣霈∪𪂹 |
| 箇瑪䀹凒霂旿 | 𧋦摨讐𦶢隞扎皛𡁜憭滚恣 | 瘝餌峕沲 | 閬瘥𤩺活箇瑪漣 |
| OSCAL 鈭斗揢霂旿 | OSCAL 璅∪嗥𤌍敶𨰻隡啁OA&M 憌𡡞埯餉扇 | 瘝餌典𣪧 | 閬瘥𤩺活甇摰∟恣撖澆枂 |
| POA&M 湔㺿霈∪旿 | 𤑳緵憿嫘園★提隞颱犖蝔讠倌蝵脣憭滚恣 | 瘝餌典𣪧 owner | 閬瘥譍葵𤑳緵憿孵摰∟恣 |
| 隡憌𡡞埯餉扇霂旿 | 憌𡡞埯滚漲wner娍綉園★ POA&M雿䠷憭滚恣 | 瘝餌典𣪧憌𡡞埯 owner | 閬瘥譍葵憌𡡞埯峕迤撘誩恣霈∪𪂹 |
| 靘见旿 | 靘见唾窈拇𦻖𨰜摰~剛扇敶 | 瘝餌 | 靘见喲𡡒𡒊誧蝏凋銝芸恣霈∪𪂹 |
`governance/evidence/audit-evidence-index.md` 摨磰秐撠𤏸扇敶𤏪
1.滨妍桃掩
2. 撖孵蝟餌桐漣I 鈭批硋像
3. owner鞉𧒄𣂼摮睃雿滨蔭
4. 𧋦ommititOps revision digest 𡝗芋
5. 摰∟恣憭𣇉𠶖銝衤甈∪摰⊥𠯫
---
## 11.
## 11.1 霈啣
◆敶X ADR嚗朖 Architecture Decision Record ADR 摨𥪜
1. 峕艶
2.
3.㗇䲮獢
4. 蝏𤘪
5. 敶勗
6. 憌𡡞埯
7. 𡒊賒銵𢆡
8.
9. 鈭箝
## 11.2
銝齿糓犖撌交沲摰~遣霈桐撖嫣誑銝衤憿寡銵諹摰∴
1.
2. 頝典銝芷滚之瘚䀹凒
3. 唳旿璅∪䀹凒
4. 擃㗛
5. 憭扯璅∪抅蝖霈暹鴌䀹凒
6. 敶勗憭帋葵 API 隞嗅
7. 滚之
8. 擃䀹皞鞉
9. 擃㗛 AI 鈭批gent 撌亙𡝗芋摨𥪜
10. 靘𥕦券秄蝳撱箏膥𣇉倌
## 11.3 芸𢆡
⊥糓臭誑芸𢆡𡝗瘚讠嚗䔶摨娪鵭韏碶犖撌亥摰~摰∪𡁶鈭𤾸銵~霈桀滚之憌𡡞埯嚗諹舀聢撘𤩺摰⊥鸌
---
## 12. 鞉𧋦瘝餌
## 12.1 鞉𧋦瘝餌
鞉𧋦瘝餌銝齿糓閧滲讠憬韏嚗諹峕糓霈抵皞𣂷蝙銝𡁜𦛚隞瑕𤩺撖孵
## 12.2 鞉𧋦瘝餌
1. 皞𣂼憿餅鞉𧋦
2. 鞉𧋦敹㴓憓摨𠉛鍂敶㘾
3. 擃䀹皞𣂼憿餅霅艾
4. 脩蔭韏芸𢆡霂
5. 瘚贝摨娍𣈲𦠜𦆮
6. 喲睸銝𡁜𦛚摨𥪜遣蝡𧢲銝𡁜𦛚𢛵
7. 撟喳蝱摨娍靘𥟇
8. 鞉𧋦撘虜敹𡁶䰻韐蠘提鈭箝
9. AI 鞉𧋦敹劐漣𣪧oken𤩺蝝U皞𣂼敶㘾
10. GPU𤩺㺭銁蝥輻鸌敺擃㗛蝡舐◆霈曄蔭憸憸嘥脩蔭璉瘚卝
## 12.3 FinOps 餈鞱
鞉𧋦瘝餌◆隞𢛶𨀣韐血蝥找蛹𨀣沲挽霈~霈文餈鞱隡睃
鍂 FinOps 蝐餃𢆡雿頣
1. Inform嚗𡁏鞉𧋦匧𣪧㴓憓桐漣 AI 鈭批𤩺敶㘾
2. Optimize嚗帋㚚𤦭蝵株皞僐摨阡蝵柴憭齿芋賭葉蝻枏讐揣撘訫雿𤾸⏚ GPU
3. Operate嚗𡁏撣詻憸腈雿齿銝𡁜𦛚蝥喳賒餈鞱𨯫
AI 箸艶憭𤥁頦迎
1. cost per AI task
2. cost per successful task
3. token cost per product
4. vector retrieval cost
5. feature serving cost
6. GPU utilization
7. cache hit rate
8. fallback to human cost
鞉𧋦唳旿撱箄悅撖寥畾菔靽肽 providerccounterviceesourceagsageosturrencyeriod owner 航◤蝏煺亥砭
---
## 13. 摨阡雿梶頂
## 13.1 銝𡁜𦛚
1. 憓鮋鵭
2. 頧砍
3. 瘣餉摨艾
4. 摰W隞瑯
5. 霈W
6. 𣂼
7. 撅亦漲
8. 摰X皛⊥摨艾
## 13.2
1. 滚𦛚舐鍂
2. 撱嗉
3. 躰秤
4. 䀹凒憸𤑳
5. 䀹凒憭梯揖
6. 撟喳園𡢿
7. 函蔡𣂼
8.拍鍂
## 13.3 唳旿
1. 唳旿
2. 唳旿摰峕㟲
3. 唳旿𦠜𧒄
4. 唳旿銝
5. 唳旿韐券
6. 唳旿鈭批雿輻鍂
7. 唳旿霈輸䔮摰∟恣閬
8.
## 13.4 撟喳蝱
1. 芸𨭌滚𦛚雿輻鍂
2. 滚𦛚𥕦遣埈𧒄
3. 唾窈埈𧒄
4. 偌蝥踵
5. 撟喳蝱舐鍂
6. 撟喳蝱皛⊥摨艾
7. 撌亙
8. Golden Path 閬
9. Time to First Deploy
10. 芸𨭌瘚𣂼
11. 霈斤䰻韐蠘蝸霂
## 13.5 AI
1. AI 鈭批
2. 隞餃𦛚摰峕
3. grounded answer rate
4. 撘閧鍂賭葉
5. 撟餉
6. Prompt / RAG / Agent 𧼮
7. 撌亙𣂼
8. 鈭箏極蝖株恕
9. Token 鞉𧋦
10. 蓥遙
11. 璅∪頝舐眏滨漣
12. 擃㗛交㜃
13. 憌𡡞埯蝑厩漣
14. 鈭箏極憭齿瓲
15. 蝥a
16. 暸曎頝航𣇉
17. 敺株璅∪蝥蹂甈⊥㺭
18. AI 鈭衤辣撟喳園𡢿
19. 擃㗛拙極剜活
## 13.6 靘𥕦
1. SBOM 閬
2. provenance 閬
3. 蝑曉
4. 函蔡撉𣬚倌
5. 瞍𤩺餅鱏甈⊥㺭
6. 擃睃暒瞍𤩺靽桀園鵭
7. 靘肽
8. 芣鸌抅蝖𨅯雿輻鍂甈⊥㺭
9. 靘𥕦憭𤥁
## 13.7 鞉𧋦銝 FinOps
1. cloud cost per domain
2. cloud cost per product
3. AI cost per successful task
4. GPU utilization
5. idle resource cost
6. untagged resource rate
7. budget variance
8. cost anomaly count
9. unit cost per business transaction
10. forecast accuracy
## 13.8 芋璉
唬誨隡硋像憿餅銝箸祥笆鞊∴蝥踹滩‘
### 13.8.1 憭齿摨虫
◆璉
1. API 臬炏憭霂瑟曇楝
2. 頝券冽糓血耦𣂷葡銵屸鵭
3. 霂餉楝敺䰻霂X芋摮䀹
4. 躰楝敺隞園店
5. 唳旿鈭批臬炏摮睃銁憭滩恣蝞埈
6. AI 箸艶臬炏摮睃銁璅∪ token 鞉𧋦舀綉銝𠹺
### 13.8.2 I/O
隞乩扇銝粹
1. N+1 API 靚
2. N+1 唳旿摨𤘪䰻霂U
3. 峕郊靚
4. 颲寧
5. 蝑劐
6.
7. 唳旿蝞⊿
8. 摮睃仃
### 13.8.3 唳旿銝𤾸
◆璉
1. 瘥譍葵憸滚𦛚臬炏亥器
2. 亥砭臬炏厩揣撘𨰻憿萄摮埈挾鋆
3. 憭扳㺭虫蝙 streaminghunking 讛恣蝞𨰜
4. 唳旿鈭批臬炏憯唳 freshnessuality cost owner
5. 擃䀝遠航蕭皞臬藁敺蝻塩
6. RAG 蝝W臬炏摮睃銁𡝗瘜訫
7. 函瑪臬炏摮睃銁霈剔-𤩺辣餈笔仃𣳇蝥扯楝敺
### 13.8.4 撉諹
霈箏隞乩撉諹
1. p95 / p99 latency
2. throughput
3. error rate
4. saturation
5. queue lag
6. cache hit rate
7. data freshness
8. pipeline cost
9. model token cost
10. cloud cost per domain / product / environment
11. AI task cost
12. vector search latency
13. feature serving latency
14. SBOM and provenance coverage
---
## 14. 賢𧑐頝舐瑪
## 14.1 蝚砌嗆挾嚗𡁶緵隡唬嘥㦛
滨頂蝏麄𣪧撟喳蝱摰䂿𠶖
銝餉撌乩
1. 銝𡁜𦛚蝟餌
2. 銝𡁜𦛚瘚
3.颲寧
4. 唳旿韏
5. 撟喳蝱
6.摯鈭支
7.摯摰匧峕祥
8. 敶X嘥㦛
颲枏枂
1. 啁𠶖
2. 蝟餌靘肽
3.𨰻
4. 唳旿韏漣皜
5. 撟喳蝱摨西隡啜
6. 嘥㦛
7. 隡睃蝥扯楝蝥踹㦛
## 14.2 蝚砌嗆挾嚗𡁻㗇𥋘霂閧
㗇𥋘銝銝芷隞瑕𣬚㮾撖寞韏硋虾餈𥡝霂閧
撱箄悅隡睃㗇𥋘嚗
1. 霈W
2. 隡𡁜
3.
4.
5. 仿
霂閧凒銝滚之嚗𡁶鈭𦒘銝芸虾撉諹⊿𡡒
颲枏枂
1.璅∪
2. API 憟𤑳漲
3. 鈭衤辣憟𤑳漲
4. 唳旿鈭批摰帋
5. SLO
6. 遙颲寧
7. 霂閧憭滨
## 14.3 蝚砌嗆挾嚗𡁜遣霈曉穃像
航悟臭誑芸𨭌摰峕撌亦
隡睃撱箄挽
1. Developer Portal
2. 滚𦛚璅⊥踎
3. CI/CD
4. 蝞∠
5. 𣬚
6. 𡃏郎
7. 唾窈
8. 摰匧
9. 鞉𧋦𧢲踎
10. SBOM蝑曉靘𥕦汿
11. LLM GatewayAG 撟喳蝱 AI 霂摯瘚偌蝥踴
12. 摰孵膥鈭支 Golden Path GitOps 璅⊥踎
颲枏枂
1. 撟喳蝱
2. Golden Path
3. 滚𦛚
4. 偌蝥踴
5. 瘚𧢲
6. 撟喳蝱雿輻鍂
7. 撟喳蝱餈鞱𨯫
8. 靘𥕦券秄蝳
9. AI 撟喳蝱撠誩虾
10. Kubernetes base 𣬚㴓憓漣 GitOps overlay
## 14.4 蝚砍嗆挾嚗𡁏㺭桐漣
喲睸憸唳旿頧砍銝箏虾靽⊥㺭桐漣
銝餉撌乩
1. 撱箇唳旿
2. 摰帋唳旿鈭批璅⊥踎
3. 撱箇唳旿韐券
4. 撱箇蝞∠
5. 撱箇唳旿銵蝻塩
6. 撱箇唳旿蝞∠
7. 擐𡝗鸌唳旿鈭批
8. 撱箇蝳餌瑪銁蝥輻鸌敺蝝W楝敺
9. 摰帋唳旿鈭批 AI 瘨䀹凒𡁶䰻
颲枏枂
1. 唳旿鈭批
2. 摮堒
3. 唳旿韐券𧢲踎
4. 唳旿銵蝻睃㦛
5. 摰⊥鸌瘚
6. 唳旿瘨
7. 鈭批璅⊥踎
8. 蝝W璅⊥踎
9. AI 霂唳旿
## 14.5 蝚砌嗆挾嚗𡁏祥
瘝餌啣像撌亙曆葉
銝餉撌乩
1. API 閫芸𢆡
2. 鈭衤辣 Schema 芸𢆡
3. 唳旿憟𤑳漲芸𢆡
4. 摰匧芸𢆡
5.
6. 鞉𧋦
7. SLO 烐綉
8. 摰∟恣芸𢆡
9. AI 芸𢆡
10. SBOMrovenance撉𣬚倌芸𢆡
颲枏枂
1. Policy as Code 閫摨瓐
2. 芸𢆡𤥁捶誯秄蝳
3. 摰匧𧢲踎
4. 鞉𧋦瘝餌𧢲踎
5. 瘝餌
6. 摰∟恣璅⊥踎
7. AI 瘝餌
8. 靘𥕦
## 14.6 蝚砍嗆挾嚗鋫I 霂閧
臬銁銝銝芯唬葉蝑厰拙㦤臭葉撉諹 AI 憪𧢲 AI 蝔卝
撱箄悅隡睃㗇𥋘嚗
1. 摰X𨭌
2. 餈鞱𨯫
3. 𥪜
4. 憌擧綉𨭌
5. 桃瑪蝝X㟲
銝餉撌乩
1. 摰帋 AI 鈭批蝥批箸㦤
2. LLM GatewayromptOpsAG隡唳瘞渡瑪 AI Observability
3.桐漣鸌敺讐揣撘訫撌亙蝥喳蝏煺憟𤑳漲
4. 撱箇鞟內瘜典劂閫剹霂臬鞉𧋦瘨霂𨰻
5. 啣漲銝羓瑪撟嗆蝏剛撖煺遙rounded rate犖撌亦&霈斤
6. 憭滨 AI 鈭批韐券霈斤䰻韐蠘蝸
颲枏枂
1. 擐碶葵 AI 鈭批
2. Prompt 銝舘隡圈隞枏
3. RAG 唳旿皞𣂼蝝W
4. Agent 撌亙
5. AI 瘚𧢲
6. AI 憭滨
## 14.7 蝚砌嗆挾嚗朞璅∪典嘀
霂閧蝏誯典嘀唳凒憭帋𣪧
銝餉撌乩
1. 憭滚鈭批璅∪
2. 撟喳蝱
3. 唳旿鈭批蝵𤑳
4. AI
5. 撱箇撟喳蝱餈鞱𨯫
6. 撱箇寡悌
7. 撱箇
颲枏枂
1.蝥折笔𧑐
2.鈭批
3. 唳旿鈭批蝵𤑳
4. 撟喳蝱啣㦛
5. 璅∪
6. 摨西隡唳𥁒𨳍
7. AI 鈭批峕祥𥁒𨳍
## 14.8 撠讛氜
圈★摨𥪯憪𧢲厩𤌍敶訫皛~隞舘憭笔遣蝡 ownerontractatalogate runtime baseline 撠𤩺隞嗅憪卝
```text
governance/standards/engineering-standard.md
governance/ownership/teams.yaml
governance/ownership/raci.yaml
governance/slo/tiering-policy.md
governance/architecture-gates/production-readiness.yaml
governance/control-plane/conformance-profile.yaml
governance/control-plane/control-plane.yaml
governance/control-plane/release-gate-decision.yaml
governance/migration/deprecation-policy.md
governance/evidence/releases/README.md
governance/evidence/supply-chain/README.md
governance/evidence/exceptions/README.md
governance/evidence/compatibility/README.md
governance/evidence/drift/README.md
contracts/apis/README.md
contracts/events/README.md
contracts/datasets/README.md
contracts/ai/README.md
catalog/systems/README.md
catalog/components/README.md
catalog/ai-products/README.md
domains/example/domain.yaml
domains/example/services/example-service/service.yaml
domains/example/services/example-service/Dockerfile
ai/applications/example-ai-product/ai-product.yaml
platform/golden-paths/README.md
platform/supply-chain/README.md
infra/kubernetes/base/services/example-service/kustomization.yaml
infra/gitops/environments/dev/example/example-service/kustomization.yaml
infra/gitops/environments/prod/example/example-service/kustomization.yaml
```
撠讛氜啁𤌍
1. 鈭扳 owner
2. 㕑楊𦻖憟𤑳漲
3. 鈭抒隞嗉 catalog
4. SLO runbook
5. 鈭批頝臬
6. 㗇㺭桐漣銝𡁜𦛚霂凋霈輸䔮蝑𣇉裦
7. AI 鈭批隡圈AG 虾閫
8. 鈭批 SBOM航蕭皞舀撱箄
9. 匧捆滚𦛚𤩺撱箏銋剹itOps catalog runtime
10. Tier-1 / Tier-2 韏 RTOPO霂舫蝞𨰜n-call 𣬚
11. 憭批蝑𡝗 RACI owner 摰∟
12. API隞嗚桐漣I 鈭批𥟇敶寡
13. 鈭批航蕭皞舐撉諹摰∟恣霂旿蝝W
14. 鈭扯鈭扳蝑厩漣園𢒰霈啣屸秄蝳蝑𤥁
---
## 15. 憌𡡞埯銝𤾸撖寧
| 憌𡡞埯 | 銵函緵 | 摨𥪜笆蝑𣇉裦 |
| -------- | -------------- | ------------------ |
| 撟喳蝱 | 撟喳蝱齿鰵乩葉敹 | 𡒊&撟喳蝱芸𨭌嚗䔶亦恣銝𡁜𦛚 |
| 憸颲寧銝齿 | 滚𦛚𤥁 | 撱箸芋蝔见鞉郊 |
| 唳旿鈭批牐犖韐蠘提 | 唳旿嚗䔶韐券牐犖蝞 | 撠桐漣提隞餌熙仿笔𣪧 |
| 瘝餌 | 摰⊥鸌瘚𡝗鈭支 | 隡睃芸𢆡𡝗祥鈭箏極摰⊥鸌 |
| 撟喳蝱銝滚末 | 蝏閗撟喳蝱芸楛剖極 | 撠銝箔漣 |
| 敶W | SLO 𡁜 | 撠亙𣪧 |
| | 芸遣霈曉極銝齿㺿䁅提隞餅芋撘 | 蝔见摨阡峕郊 |
| 餈鞉𧋦餈 | 頂蝏笔曆誑銝甈⊥ | 鍂皜鞱撘讛蝘餃蝏墧芋撘 |
| AI 暺𤑳 | Prompt撌亙鍂銝滚虾餈賣滲 | 撱箇 AI 鈭批憟𤑳漲隡圈恣霈∪墧𦆮 |
| AI 楝憸颲寧 | Agent 湔𦻖霈輸䔮唳旿摨𤘪摰䂿緵 | 霈貉冽釣 API 批極雿𨀣 |
| 霈剔-𤩺 | 蝳餌瑪霈剔銁蝥踵綫藁敺 | 撱箇蝳餌瑪/函瑪蝏煺摰帋蝘餌 |
| 靘𥕦桃撩憭 | | 撘箏 SBOMrovenance撉𣬚倌 |
| 撟喳蝱霈斤䰻韐蠘蝸餈 | 撟喳蝱憭帋銝滢 | Platform PM 餈鞱𨯫 Golden Path |
| 摰孵膥毺㮾皞鞉毽銋 | 滚𦛚蝵脩𤌍敶𨰻atalog 銵𣬚𠶖 | itOpsubernetesataloglatform 蝞∠ |
| 宏 | 銝滚撖孵憌𡡞埯雿輻鍂銝滚嚗䔶憭㚚鵭 | 蝥扼園𢒰餉揭屸秄蝳蝑𤥁扇敶閧 passailxception break-glass |
---
## 16. 摨行芋
| 蝑厩漣 | |
| ------- | ------------------------ |
| L1 | 蝟餌笔𤎖鈭支靘肽鈭箏極嚗峕㺭瘝餌惩恣 |
| L2 閫 | 撱箇嚗屸頂蝏憪讠𣬚 |
| L3 撟喳蝱蝥 | 撱箇穃像撣貉撌亦臭誑芸𨭌摰峕嚗䔶摨娪曎霂抅蝖憪贝䌊 |
| L4 鈭批 | 憸𥕦擐𡝗鸌 AI 鈭批鈭抒蝥折獈 |
| L5 | 撟喳蝱I摨娪曎𣬚蝏剜餈𥟇㦤憭硔OA&M 迤摨血詨虾剔㴓 |
---
## 17.
祆沲𥕦耦𣂷誑銝讠𠶖
1. 銝𡁜𦛚敹恍鈭支摰X隞瑕
2.臭誑鋡怠銝芯∪㦤舐迅摰𡁜
3. 唳旿鈭批臭縑𤑳緵虾瘨
4. 撟喳蝱芸𨭌撌亙䔶犖撌乩韏硔
5. 瘝餌芸𢆡𡝗銵䕘雿𦒘遠澆恣
6. 蝟餌餈鞱𤩺嚗屸䔮憸睃虾敹恍雿滚
7. 鞉𧋦臬漲
8. 臭誑賒瞍磰嚗諹韏碶甈⊥批之齿
9. AI 鈭批隡啜虾摰∟恣墧𦆮滨漣嚗颲寧蝥行
10. 煺漣 SBOMrovenance 虾撉諹
11. 隞餅煺漣餈賣滲蝥扼園★秄蝳蝑硔憭𣇉𠶖摰∟恣霂
---
## 18.
唬誨隡硋像銝芸蝟餌嚗䔶銝齿糓銝銝芸楊憭批鈭急∠頂蝏峕糓銝憟㛖眏憸I 桐漣典像霈暹鴌摨娪曎摰匧行祥蝥扯𥕢蝟颯
頧砍𡠺嚗
1. 隞𡡞★桐漱隞䁅蓮睲漣
2. 隞𡡞銝剖曹澈滚𦛚頧砍鈭批蝵𤑳
3. 隞𦒘犖撌亥蝏渲蓮穃像啗䌊
4. 隞𦒘葉憭格㺭撌亥蓮烐㺭桐漣
5. 隞𦒘犖撌亙恣寞祥𤏸䌊
6. 隞擧
7. 隞𤾸迨蝡 AI 霂閖頧砍埈祥 AI 鈭批蝵𤑳
8. 隞𦒘縑隞餅撱箄蝔贝蓮撱箄
𤌍糓霈拐銝𡁜銁銝𡁜𦛚敹恍頂蝏蠘璅⊥憭扼漲銝𠰴撘箇銝页隞滨靽脲擃䀹鈭支迅摰朞銵䎚虾靽⊥㺭蝏剜餈䜘
---
## 19. 瘛勗漲靚撖寞蝏栞捏
𡃏銝朞躰蓮鞉沲蝑吔坔蘨雿靝蛹暹𦻖
## 19.1 撖寞拚猐
| 撖寞 | 喲睸蝏栞捏 | |
| -------- | -------- | ---------- |
| DORA 2025 | AI 颲𨭌鈭支◆銝𡒊𥕦臬漲譍漱隞䁅捶韏瑟祥 | 銵仿 AI latform PM頧賢 AI |
| CNCF Platform Engineering Maturity Model | 撟喳蝱撌亦摨行瓲敹芸𨭌臬漲 | 靽萘 Developer Portalolden Path唬漣蝥血撟喳蝱 |
| Team Topologies | 霈斤䰻韐蠘蝸臬像啣𣪧眏銋衤 | 憓𧼮霈斤䰻韐蠘蝸摨阡latform PM 啁鍂 |
| Data Mesh | 唳旿摨𠉛眏憸韐蠘提嚗鈭批啗䌊瘝餌 | 靽萘唳旿鈭批蝥艾行祥唳旿撟喳蝱颲寧 |
| Lakehouse / Open Table Format | 隡𡁜虜迅摰𡁜蝻睃摨訫漣嚗餈𥕦摰峕㟲唳旿鈭批蝵𤑳 | 憓𧼮 Lakehouse 唳㺭桐漣蝏𦦵腹頝臬 |
| Feature Store | 霈剔峕綫摰帋嚗峕糓蝥蹂璅∪誩榆格㦤 | 憓𧼮蝳餌瑪銁蝥輻鸌敺嗆綫霈剔-𤩺 |
| OWASP LLM Top 10 | Prompt 瘜典煺縑摨虫誨/Embedding 憌𡡞埯埈糓 LLM 摨𠉛鍂憌𡡞埯 | 憓𧼮 AI 摰匧uardrailsAG 祆祥 |
| OWASP Agentic AI | Agent 憌𡡞埯典極瑁秤摨行𤌍蝘颯銝𧢲瘙⊥舀綉芸𢆡 | 憓𧼮 AI 憡璅∪犖撌亦&霈扎枂蝡䠷蝥a旿 |
| NIST AI RMF / GenAI Profile | AI 憌𡡞埯蝞∠𡝗祥蝞∠剔㴓 | 憓𧼮 AI 憌𡡞埯蝑厩漣隡圈恣霈~鈭箏極亦恣 |
| ISO/IEC 42001 | AI 蝞∠雿梶頂閬 AI 憌𡡞埯提隞颯蝔见蝥喳蝞∠蝟餌 | 憓𧼮 AI 憌𡡞埯鈭扯桅曎峕祥 |
| EU AI Act | 擃㗛 AI 箸艶凒撘箇唳旿瘝餌𤩺摨艾犖撌亦霈啣靽嘥 | 憓𧼮 R4/R5 憌𡡞埯蝑厩漣犖撌亙箸艶 |
| OpenTelemetry GenAI | AI 璅∪oken頂蝏麄雿𨅯鞉𧋦 | 憓𧼮 `genai-observability-contract.yaml`I Observability 銝 GenAI |
| MCP / A2A | Agent 刻粥穃極銝𧢲 Agent 讛悅 | 憓𧼮 Agent 讛悅銝𤾸極瑁器讛悅蝏閗瘝餌 |
| OpenFeature | Feature Flag 摯銝𠹺霈文ookracking provider 颲寧 | 憓𧼮ill Switch隞嗚摨衣 SLO |
| OpenLineage | 唳旿餈鞱蝻㗛誑 Jobunataset鈭衤辣銝箸瓲敹 | 憓𧼮 `lineage-event.yaml` 峕㺭桐漣銵諹蝻㗛秄蝳 |
| CNCF Platforms White Paper | 撟喳蝱摨𥪯銝箔漣∪𣪧霈斤䰻韐蠘蝸撟嗆擃䁅䌊拐漱隞䁅 | 憓𧼮 Platform PMolden Path𤏸誩漲頧賢撟喳蝱鈭批 |
| NIST Privacy Framework | 憌𡡞埯凒蝏閙㺭𤌍蜓雿𤘪𡁜靽脲擪敶X蝞∠剔㴓 | 憓𧼮 `privacy-impact-assessment.yaml`PIA AI 雿輻鍂𣂼 |
| Kubernetes Multi-tenancy / ResourceQuota | 憭𡁜𣪧憭𡁶 Kubernetes namespace憸腈蝏𣈯蝳餃蝑𣇉裦 | 憓𧼮 `tenant-boundary.yaml`esourceQuotaetworkPolicy 暺䁅恕 |
| NIST Cybersecurity Framework 2.0 | 隡摰匧餈鞱𨯫瘚卝摨𥪜餈墧𦻖桅𡡒 | 憓𧼮霈輸䔮憭齿瓲亥蔭瘣硺耨憭溻摨行綉園★ |
| NIST SP 800-61 | 鈭衤辣瘚见憭滚鈭见瘣餃𢆡剔㴓 | 憓𧼮 `incident-postmortem.yaml`unbook 湔鰵屸秄蝳 |
2026-06-02 02:30:20 +08:00
| NIST OSCAL / NIST SP 800-128 | 摰匧撠賡雿輻鍂箏膥航粉賜𠶖隡啁蝵桀湔綉 | 憓𧼮 `control-evidence-map.yaml`audit-export-manifest.yaml`control-assessment-report.yaml`baseline-change-record.yaml`oscal-export-profile.yaml` 恣霈∪紡 |
| Kubernetes Secrets | Kubernetes Secret 格綉憭㚚𤨎蝟餌 | 憓𧼮 `secrets-rotation-evidence.yaml`MS旿 |
| CISA KEV Catalog | 撌脩䰻鋡怠⏚瘣鮋虾霂 | 憓𧼮 `vulnerability-remediation-evidence.yaml`EV 耨憭 SLA 雿䠷 |
| SLSA / SBOM / Sigstore | 唬誨靘𥕦憿餉撱箸䔉皞僐韏硔蝑曉撉𣬚倌曇楝 | 憓𧼮 SBOMrovenance蝑曉 |
| NIST SSDF / CISA Secure by Design | 摰匧摨𥪜蝘餃挽霈~撱箝霂𨰻券曎頝 | 憓𧼮摰匧𤏸遣璅∪摰匧 |
| FinOps Framework / FOCUS / OpenCost | 鞉𧋦瘝餌鞉𧋦霂凋𨳍賒餈鞱𨯫 | 憓𧼮 `cost-allocation-evidence.yaml`inOps 餈鞱𡃏 AI 蓥遙 |
| Open Data Contract | 唳旿鈭批典虾霂餃蝥行䔉蝥行 Schema祗銋剹𣂼䀹凒 | 憓𧼮唳旿憟𤑳漲雿𤾸畾萄 CI |
| MLflow / Model Cards | 敺株璅∪撉諹蕭頦芥讠蒈霈啜隡啁𨅯璅∪霂湔 | 憓𧼮敺株瘝餌撌乩凝靚蝔见璅∪ |
| Google SAIF / AI Incident Response | AI 蝟餌𢒰烐芋rompt靘𥕦銝㯄秄 | 憓𧼮 AI 鈭衤辣 playbook 璅⊥踎 |
| OPA / Cedar / Kyverno | Policy as Code 蝖桃亥祗閮銵諹器 | 憓𧼮蝑𣇉裦霂剛蝏煺𣬚𤾸 |
| Kubernetes / OpenGitOps | 摰孵膥餈鞱函蔡氖嚗屸蝵脣ㄟ𡡞虾摰∟恣 | 憓𧼮敺格∪捆ubernetes base GitOps overlay |
| OCI Image Spec / Container Registry | 𨅯摨娍𦆮 registry 銝哨煺漣函蔡虾餈賣滲 digest | 憓𧼮𨅯 tag / digestegistry 摨娪曎霂旿閬 |
| Backstage Catalog | 滚𦛚𤑳緵wner韏硋餈鞱嚗䔶摨娍 deployment manifest 毺㮾皞 | 憓𧼮 catalog runtime 蝵脩颲寧 |
## 19.2 𠉛弦𡒊斗鱏
1. AI Mesh 舀𧋦蝥喉銝齿糓唳𧒄摨𥪯蝙冽凒霈桀撟喳蝱輯蝸摰靘见 Tool RegistryCP2ALM Gatewaygent Runtime 𣬚摰∟恣
2. 唳旿鈭批蝵𤑳 AI 銝滩氖撱箄挽㗇㺭桐漣鸌敺讐揣撘訫唳旿AI 鈭批隡𡁻碶蛹 Prompt 撌亦航蕭皞航撉䎚
3. 撟喳蝱撌亦銝齿糓撌亙撟喳蝱敹霈斤䰻韐蠘蝸嚗𠰴摨娪曎虾閫 AI 瘝餌雿靝蛹暺䁅恕頝臬
4. Lakehouse 銝齿糓 Data Mesh akehouse 摨訫漣嚗㷉ata Mesh 韐寞芋摨𥪜蝔喳唳旿摨訫漣嚗𢠃隞瑕潭㺭鞉郊鈭批
5. 靘𥕦摨𥪜坔銁瞍𤩺2026 撟港銝𡁶漣箇瑪摨磰秐撠𤏸 SBOMrovenance蝑曉蝑𣇉裦
6. AI 瘝餌銝滚芯漱蝏坔𣪧◆餈𥕦隡啜摨艾銵䎚憭滨蹱芋𥡝撘綽蝟餌銝滚虾折𢒰頞𠰴之
7. AI 憌𡡞埯漣敹◆敶勗撌亦暺䁅恕憌𡡞埯箸艶撘箄嚗屸憌𡡞埯箸艶撘箄鈭箏極𤑳边扇敶蓥摮塩𡠺蝡贝摰∪箸㦤
8. 鞉𧋦撌脩𣂷蛹撅墧PU𤩺㺭銁蝥輻鸌敺摯瘚偌蝥踹憿餃撱嗉摰匧瑁◤霈曇恣
9. 唳旿憟𤑳漲舀㺭桐漣蝏𦦵撌亦𤘪㗇㦤典虾霂餃蝥佗Data Mesh 隡𡁻碶蛹藁憭渲祗銋剹
10. 摰匧𤏸芸𢆡 catalog犖撌亥‘摰∟恣霂湔撟喳蝱瘝餌餈䀹瓷
11. 敺株瘝餌鈭𤾸抅蝖璅∪瘝餌凝靚璅∪銵䔶蛹嚗憿駁唳旿撉諹蕭頦芥隡啜蒈霈啣
12. AI 鈭衤辣 playbookI 蝏誩虜銝齿糓滚𦛚摰閙㦤嚗諹峕糓韐券瑕仃蝝X情摨𥪜𡝗砍仃
13. Policy as Code 澆銁鈭𡒊霂𤏪銝滚銁鈭擧銝芸𣪧蠘䌊㗇𥋘蝑𣇉裦霂剛
14. 敺格∪捆銝芰𤌍敶閖笆鞊∴峕糓銝楊皞鞟itOpsubernetesatalog 峕祥航蕭皞舫曎頝胯
15. 煺漣函蔡敹◆隞𢛶靝蝙典𪑛銝 tag蝥找蛹靝蝙典𪑛銝 digest眏靚撱箝汿芯葵 GitOps revision
## 19.3 敶枏﹝隞漤銝𡁜㦤
靘𤤿𤌍賢𧑐箇瑪嚗䔶銝滚隞滚劐誑銝见蝝㰘
1. 銵䔶撘箏漲嚗𡁻𨰜頝典銝𡁜𦛚凒擃 AI 摰∟恣桀枂憓靘𥕦
2. 唳旿摨佗敶枏唳旿隞枏粥 Lakehouse 峕㺭桐漣銝滚湔𦻖 Data Mesh
3. AI 憌𡡞埯蝑厩漣嚗𡁜函䰻霂䔮蝑𢛵甈整縑韐瑕恣撱箄悅蝥批
4. 嚗𡁜像 AI 銝齿𧒄嚗隡睃 Golden Path 凒霂閧
5. 鞉𧋦颲寧嚗鎭PU𤩺蝝U銁蝥輻鸌敺摯瘚偌蝥踹憿餅憸腈
---
## 20.
- AWS Prescriptive Guidance: Internal Developer Platform
<https://docs.aws.amazon.com/prescriptive-guidance/latest/internal-developer-platform/introduction.html>
- CNCF TAG App Delivery: Platform Engineering Maturity Model
<https://tag-app-delivery.cncf.io/whitepapers/platform-eng-maturity-model/>
- Thoughtworks Technology Radar: Platform Engineering Product Teams
<https://www.thoughtworks.com/en-us/radar/techniques/platform-engineering-product-teams>
- Martin Fowler: Data Mesh Principles and Logical Architecture
<https://martinfowler.com/articles/data-mesh-principles.html>
- Team Topologies: Key Concepts
<https://teamtopologies.com/key-concepts>
- Backstage Docs: Software Catalog System Model
<https://backstage.io/docs/features/software-catalog/system-model/>
- Backstage Docs: Kubernetes Plugin
<https://backstage.io/docs/features/kubernetes/>
- Kubernetes Documentation: Workloads
<https://kubernetes.io/docs/concepts/workloads/>
- Kubernetes Documentation: Images
<https://kubernetes.io/docs/concepts/containers/images/>
- OpenGitOps Principles
<https://opengitops.dev/>
- Argo CD Documentation
<https://argo-cd.readthedocs.io/>
- Flux Documentation
<https://fluxcd.io/flux/>
- Open Container Initiative Image Specification
<https://github.com/opencontainers/image-spec>
- OpenAPI Specification
<https://spec.openapis.org/oas/latest.html>
- AsyncAPI Specification
<https://www.asyncapi.com/docs/reference/specification/latest>
- OpenTelemetry Documentation
<https://opentelemetry.io/docs/>
- OpenTelemetry Semantic Conventions for Generative AI Systems
<https://opentelemetry.io/docs/specs/semconv/gen-ai/>
- DORA Research: 2025 DORA Report
<https://dora.dev/research/2025/dora-report/>
- SLSA Specification v1.2
<https://slsa.dev/spec/v1.2/>
- CISA: Software Bill of Materials
<https://www.cisa.gov/sbom>
- SPDX
<https://spdx.dev/>
- CycloneDX
<https://cyclonedx.org/>
- Sigstore Cosign
<https://docs.sigstore.dev/cosign/>
- Sigstore Policy Controller
<https://docs.sigstore.dev/policy-controller/overview/>
- OpenSSF Scorecard
<https://github.com/ossf/scorecard>
- NIST AI Risk Management Framework
<https://www.nist.gov/itl/ai-risk-management-framework>
- NIST AI 600-1: Artificial Intelligence Risk Management Framework: Generative Artificial Intelligence Profile
<https://doi.org/10.6028/NIST.AI.600-1>
- NIST SP 800-218: Secure Software Development Framework
<https://csrc.nist.gov/pubs/sp/800/218/final>
- NIST Privacy Framework
<https://www.nist.gov/privacy-framework>
- NIST Cybersecurity Framework 2.0
<https://www.nist.gov/cyberframework>
- NIST SP 800-61 Rev. 2: Computer Security Incident Handling Guide
<https://csrc.nist.gov/pubs/sp/800/61/r2/final>
- NIST OSCAL
<https://pages.nist.gov/OSCAL/>
- CISA: Secure by Design
<https://www.cisa.gov/securebydesign>
- CISA: Known Exploited Vulnerabilities Catalog
<https://www.cisa.gov/known-exploited-vulnerabilities-catalog>
- ISO/IEC 42001 Artificial Intelligence Management System
<https://www.iso.org/standard/81230.html>
- European Commission: AI Act
<https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai>
- OWASP Top 10 for Large Language Model Applications
<https://owasp.org/www-project-top-10-for-large-language-model-applications/>
- OWASP Generative AI Security
<https://genai.owasp.org/>
- Model Context Protocol Specification
<https://modelcontextprotocol.io/specification/2025-06-18>
- Agent2Agent Protocol
<https://github.com/a2aproject/A2A>
- OpenFeature Specification
<https://openfeature.dev/specification/>
- OpenLineage Documentation
<https://openlineage.io/docs/>
- CNCF TAG App Delivery: Platforms White Paper
<https://tag-app-delivery.cncf.io/whitepapers/platforms/>
- Kubernetes Documentation: Multi-tenancy
<https://kubernetes.io/docs/concepts/security/multi-tenancy/>
- Kubernetes Documentation: Resource Quotas
<https://kubernetes.io/docs/concepts/policy/resource-quotas/>
- Kubernetes Documentation: Secrets
<https://kubernetes.io/docs/concepts/configuration/secret/>
- MLflow: AI Engineering Platform for LLMs and Agents
<https://mlflow.org/docs/latest/genai/>
- MLflow Tracking
<https://mlflow.org/docs/latest/ml/tracking/>
- Hugging Face Model Cards
<https://huggingface.co/docs/hub/model-cards>
- Google Secure AI Framework
<https://saif.google/>
- Open Policy Agent
<https://github.com/open-policy-agent/opa>
- Cedar Policy Language
<https://docs.cedarpolicy.com/>
- Kyverno
<https://kyverno.io/docs/>
- Feast: Open Source Feature Store
<https://docs.feast.dev/>
- Apache Iceberg
<https://iceberg.apache.org/>
- Milvus GitHub Repository
<https://github.com/milvus-io/milvus>
- FinOps Framework
<https://www.finops.org/framework/>
- FOCUS: FinOps Open Cost and Usage Specification
<https://focus.finops.org/>
- OpenCost Documentation
<https://opencost.io/docs/>
- Open Data Contract Standard
<https://bitol-io.github.io/open-data-contract-standard/latest/>
- Google SRE Workbook: Implementing SLOs
<https://sre.google/workbook/implementing-slos/>