docs: sync develop content and private architecture boundary

Apply current local develop content through the protected-branch PR workflow. Preserve common-sense documentation, README badge, and private enterprise architecture asset boundary. Local validation: make test.

.gitignore

@@ -96,10 +96,4 @@ backups/gz/
 .github/wiki/
 
 # Local-only enterprise architecture evidence kit
-docs/references/modern-enterprise-architecture-kit/
-docs/references/modern-enterprise-architecture-controls.json
-docs/references/modern-enterprise-architecture-version.json
-scripts/check-modern-architecture-kit.py
-scripts/check-modern-architecture-audit-export.py
-scripts/export-modern-architecture-audit.py
-scripts/check-repository-remote-protection.py
+assets/templates/modern-enterprise-architecture-private/

README.md

@@ -42,6 +42,7 @@
 	  <a href="./docs/concepts/language-layers.md"><img src="https://img.shields.io/badge/📊_语言层要素-12层框架-gold?style=for-the-badge" alt="语言层要素"></a>
   <a href="./skills/README.md#当前保留"><img src="https://img.shields.io/badge/⚡_Skills-技能大全-forestgreen?style=for-the-badge" alt="skills技能大全"></a>
   <a href="./prompts/README.md#在线提示词库"><img src="https://img.shields.io/badge/📋_提示词-在线表格-blue?style=for-the-badge" alt="提示词在线表格"></a>
+  <a href="./docs/references/common-sense.md"><img src="https://img.shields.io/badge/💡_常识-提示词入门-orange?style=for-the-badge" alt="常识"></a>
   <a href="https://github.com/tukuaiai/vibe-coding-cn/wiki"><img src="https://img.shields.io/badge/📚_Wiki-导航入口-slateblue?style=for-the-badge" alt="Wiki 导航入口"></a>
 	  <a href="./assets/README.md#外部资源在线表格唯一真相源"><img src="https://img.shields.io/badge/📡_资源-聚合-teal?style=for-the-badge" alt="资源聚合"></a>
 </p>
@@ -170,7 +171,7 @@
 
 ## 🎲 前言
 
-**这是一个不断生长和自我否定的项目，当下的一切经验和能力都可能因 AI 能力的变化而失去意义，所以请时刻保持以 AI 为主的思维，重视这次宇宙级的变革，所有的经验都可能失效，辩证的看🙏🙏🙏**，**Vibe Coding** 是一个与 AI 结对编程的终极工作流程，旨在帮助开发者丝滑地将想法变为现实。本指南详细介绍了从项目构思、技术选型、实施规划到具体开发、调试和扩展的全过程，强调以**规划驱动**和**模块化**，**索引构建**为核心（受限于模型上下文窗口而生成的解决策略），避免让 AI 失控导致项目混乱，Vibe Coding（氛围编程）是一种以自然语言驱动、让LLM生成大部分代码的开发方式，主张“先沉浸式做出能跑的东西”，以极低门槛快速产出原型但也伴随可控性与可靠性风险，由计算机科学家 [Andrej Karpathy](https://x.com/karpathy) 首次提出。
+**这是一个不断生长和自我否定的项目，当下的一切经验和能力都可能因 AI 能力的变化而失去意义，所以请时刻保持以 AI 为主的思维，重视这次宇宙级的变革，很多的经验都可能失效，辩证的看🙏🙏🙏**，**Vibe Coding** 是一个与 AI 结对编程的终极工作流程，旨在帮助开发者丝滑地将想法变为现实。本指南详细介绍了从项目构思、技术选型、实施规划到具体开发、调试和扩展的全过程，强调以**规划驱动**和**模块化**，**索引构建**为核心（受限于模型上下文窗口而生成的解决策略），避免让 AI 失控导致项目混乱，Vibe Coding（氛围编程）是一种以自然语言驱动、让LLM生成大部分代码的开发方式，主张“先沉浸式做出能跑的东西”，以极低门槛快速产出原型但也伴随可控性与可靠性风险，由计算机科学家 [Andrej Karpathy](https://x.com/karpathy) 首次提出。
 
 > **注意**：以下经验分享并非普遍适用，请在具体实践中结合场景，辩证采纳（点击标题可以展开收起内容）
 

assets/ai-citation/llms-full.txt

@@ -68,6 +68,7 @@ GEOFlow 的关键启发是：GEO 不是关键词堆砌，而是内容工程链
 - docs/references/python-project-skeleton.md：Python 应用、服务、脚本工具和库项目的通用骨架。
 - docs/references/enterprise-architecture-template.md：中大型工程组织、平台工程和多产品线参考模型。
 - docs/references/modern-enterprise-architecture-template.md：面向领域产品网络、微服务容器 GitOps 边界、AI 原生能力、微调治理、AI 事件响应、内部平台、数据产品、供应链安全、FinOps 成本治理、版本治理、版本控制面、基线版本策略、发布通道、兼容性与冻结控制总账、基线生产变更、发布编排、变更冲突与失败恢复总账、基线事故、问题、纠正行动与复发防止总账、基线数据产品质量、契约违约、运行血缘与可观测性总账、基线工程质量、测试证据、缺陷与发布验证总账、基线人员能力、培训、职责履职与职责分离总账、基线业务结果、价值实现与组合收益总账、基线价值流、关键旅程与端到端流程总账、基线架构视图、运行拓扑与依赖影响总账、基线质量属性、架构驱动与权衡决策总账、基线架构原则、约束、反模式与例外执行总账、基线安全配置、加固姿态与配置漂移修复总账、基线漏洞、暴露面与修复验证总账、基线威胁建模、攻击面与安全风险总账、基线容量、性能、弹性伸缩与成本效率总账、基线服务可靠性、SLO、错误预算与可观测性总账、基线备份、恢复、灾备与可恢复性验证总账、基线密码材料、密钥、证书与秘密生命周期总账、基线资产关键性、数据分类与风险分级总账、基线身份权限、特权访问与工作负载身份总账、基线处理活动、个人数据清单与 RoPA 覆盖总账、基线隐私权利请求、同意偏好与合法基础执行总账、基线记录留存、法律保全与可防御删除总账、基线监管与合规义务可追溯总账、外部标准版本锁定、可执行标准、执行控制面、门禁决策、RACI 决策权、可靠性分级、仓库拓扑、迁移弃用、审计证据、联邦治理和行业对标矩阵的完整说明文档。
+- docs/references/common-sense.md：AI 编程和工程交付前的最低判断线。
 - docs/references/dataset-first-data-service.md：以 dataset、contract、registry、runtime 为核心的数据服务模板。
 - docs/references/code-organization.md：模块化、命名、注释、格式化、文档和工具。
 - docs/references/development-experience.md：变量名、文件结构、编码规范、架构原则和常见基础设施经验。

assets/templates/AGENTS.md

@@ -7,3 +7,4 @@
 - 模板必须可复制、可填写、可复用，避免一次性任务内容。
 - 模板变更影响使用方式时，需要同步更新引用它的 README 或 docs。
 - 不在模板中写入真实密钥、真实个人信息或生产配置。
+- `modern-enterprise-architecture-private/` 是本地私有架构证据包，默认被 `.gitignore` 忽略，不得强行加入 Git。

docs/README.md

@@ -63,6 +63,7 @@
 - [通用 Python 项目骨架](./references/python-project-skeleton.md) - Python 应用、服务、脚本工具和库项目的通用骨架。
 - [企业级架构模板](./references/enterprise-architecture-template.md) - 中大型工程组织、平台工程和多产品线参考模型。
 - [现代企业数字化平台架构](./references/modern-enterprise-architecture-template.md) - 面向领域产品网络、微服务容器 GitOps 边界、AI 原生能力、微调治理、AI 事件响应、内部平台、数据产品、供应链安全、FinOps 成本治理、版本治理、版本控制面、基线版本策略、发布通道、兼容性与冻结控制总账、基线生产变更、发布编排、变更冲突与失败恢复总账、基线事故、问题、纠正行动与复发防止总账、基线数据产品质量、契约违约、运行血缘与可观测性总账、基线工程质量、测试证据、缺陷与发布验证总账、基线人员能力、培训、职责履职与职责分离总账、基线业务结果、价值实现与组合收益总账、基线价值流、关键旅程与端到端流程总账、基线架构视图、运行拓扑与依赖影响总账、基线质量属性、架构驱动与权衡决策总账、基线架构原则、约束、反模式与例外执行总账、基线安全配置、加固姿态与配置漂移修复总账、基线漏洞、暴露面与修复验证总账、基线威胁建模、攻击面与安全风险总账、基线容量、性能、弹性伸缩与成本效率总账、基线服务可靠性、SLO、错误预算与可观测性总账、基线备份、恢复、灾备与可恢复性验证总账、基线密码材料、密钥、证书与秘密生命周期总账、基线资产关键性、数据分类与风险分级总账、基线身份权限、特权访问与工作负载身份总账、基线处理活动、个人数据清单与 RoPA 覆盖总账、基线隐私权利请求、同意偏好与合法基础执行总账、基线记录留存、法律保全与可防御删除总账、基线监管与合规义务可追溯总账、基线运营韧性与重要业务服务影响容忍总账、基线第三方与关键供应商风险总账、基线数据驻留与跨境处理总账、基线共享责任与继承控制总账、基线独立控制保证抽样总账、基线连续控制监测总账、基线运行时准入决策总账、基线运行时准入回执、基线长期验签回执、基线证据不可变归档回执、干净环境基线重建回执、私有制品托管交接清单、审计导出排除清单、本地私有制品边界、基线迁移执行回执、基线迁移工作单、基线消费锁定文件、基线准入执行策略、基线撤销与隔离记录、基线发布事务回执、基线门禁执行报告、基线证据追踪图、基线会审裁决记录、基线 EOL 退役证书、基线状态对账报告、基线生命周期状态机、基线就绪评分卡、基线例外总账、基线回滚验证记录、基线通知确认总账、基线验证环境锁定、基线制品清单、基线发布证据、基线兼容性总账、基线采纳总账、基线支持矩阵、基线发布列车、基线符合性声明、外部标准版本锁定、可执行标准、执行控制面、门禁决策、RACI 决策权、可靠性分级、仓库拓扑、迁移弃用、审计证据、联邦治理和行业对标矩阵的完整说明文档。
+- [常识](./references/common-sense.md) - AI 编程和工程交付前的最低判断线。
 - [Dataset First 数据服务](./references/dataset-first-data-service.md) - 数据服务模板。
 - [代码组织](./references/code-organization.md) - 模块化、命名、注释、格式化、文档和工具。
 - [开发经验](./references/development-experience.md) - 编码规范、架构原则和常见基础设施经验。

docs/references/AGENTS.md

@@ -20,6 +20,7 @@ references/
 ├── python-project-skeleton.md
 ├── enterprise-architecture-template.md
 ├── modern-enterprise-architecture-template.md  # 现代企业数字化平台、版本治理、版本控制面、基线版本策略、发布通道、兼容性与冻结控制总账、基线生产变更、发布编排、变更冲突与失败恢复总账、基线事故、问题、纠正行动与复发防止总账、基线数据产品质量、契约违约、运行血缘与可观测性总账、基线工程质量、测试证据、缺陷与发布验证总账、基线人员能力、培训、职责履职与职责分离总账、基线业务结果、价值实现与组合收益总账、基线价值流、关键旅程与端到端流程总账、基线架构视图、运行拓扑与依赖影响总账、基线质量属性、架构驱动与权衡决策总账、基线架构原则、约束、反模式与例外执行总账、基线安全配置、加固姿态与配置漂移修复总账、基线漏洞、暴露面与修复验证总账、基线威胁建模、攻击面与安全风险总账、基线容量、性能、弹性伸缩与成本效率总账、基线服务可靠性、SLO、错误预算与可观测性总账、基线备份、恢复、灾备与可恢复性验证总账、基线密码材料、密钥、证书与秘密生命周期总账、基线资产关键性、数据分类与风险分级总账、基线身份权限、特权访问与工作负载身份总账、基线处理活动、个人数据清单与 RoPA 覆盖总账、基线隐私权利请求、同意偏好与合法基础执行总账、基线记录留存、法律保全与可防御删除总账、基线监管与合规义务可追溯总账、外部标准版本锁定、可执行标准、执行控制面、门禁决策、RACI、可靠性分级、仓库拓扑、迁移弃用、审计证据、微服务容器 GitOps、AI 原生能力、供应链安全和联邦治理蓝图
+├── common-sense.md  # AI 编程和工程交付前的最低判断线
 ├── dataset-first-data-service.md
 ├── code-organization.md
 ├── development-experience.md

docs/references/README.md

@@ -15,6 +15,7 @@
 | <a id="reference-engineering-practice-通用-python-项目骨架"></a>[通用 Python 项目骨架](python-project-skeleton.md) | Python 应用、服务、脚本工具和库项目的通用骨架。 |
 | <a id="reference-engineering-practice-enterprise-monorepo-multi-repo-reference-architecture-template"></a>[企业级 Monorepo / Multi-repo 架构模板](enterprise-architecture-template.md) | 中大型工程组织、平台工程和多产品线参考模型。 |
 | <a id="reference-modern-enterprise-architecture-template"></a>[现代企业数字化平台架构](modern-enterprise-architecture-template.md) | 面向领域产品网络、微服务容器 GitOps 边界、AI 原生能力、微调治理、AI 事件响应、内部平台、数据产品、供应链安全、FinOps 成本治理、版本治理、版本控制面、基线版本策略、发布通道、兼容性与冻结控制总账、基线生产变更、发布编排、变更冲突与失败恢复总账、基线事故、问题、纠正行动与复发防止总账、基线数据产品质量、契约违约、运行血缘与可观测性总账、基线工程质量、测试证据、缺陷与发布验证总账、基线人员能力、培训、职责履职与职责分离总账、基线业务结果、价值实现与组合收益总账、基线价值流、关键旅程与端到端流程总账、基线架构视图、运行拓扑与依赖影响总账、基线质量属性、架构驱动与权衡决策总账、基线架构原则、约束、反模式与例外执行总账、基线安全配置、加固姿态与配置漂移修复总账、基线漏洞、暴露面与修复验证总账、基线威胁建模、攻击面与安全风险总账、基线容量、性能、弹性伸缩与成本效率总账、基线服务可靠性、SLO、错误预算与可观测性总账、基线备份、恢复、灾备与可恢复性验证总账、基线密码材料、密钥、证书与秘密生命周期总账、基线资产关键性、数据分类与风险分级总账、基线身份权限、特权访问与工作负载身份总账、基线处理活动、个人数据清单与 RoPA 覆盖总账、基线隐私权利请求、同意偏好与合法基础执行总账、基线记录留存、法律保全与可防御删除总账、基线监管与合规义务可追溯总账、基线运营韧性与重要业务服务影响容忍总账、基线第三方与关键供应商风险总账、基线数据驻留与跨境处理总账、基线共享责任与继承控制总账、基线独立控制保证抽样总账、基线连续控制监测总账、基线运行时准入决策总账、基线运行时准入回执、基线长期验签回执、基线证据不可变归档回执、干净环境基线重建回执、私有制品托管交接清单、审计导出排除清单、本地私有制品边界、基线迁移执行回执、基线迁移工作单、基线消费锁定文件、基线准入执行策略、基线撤销与隔离记录、基线发布事务回执、基线门禁执行报告、基线证据追踪图、基线会审裁决记录、基线 EOL 退役证书、基线状态对账报告、基线生命周期状态机、基线就绪评分卡、基线例外总账、基线回滚验证记录、基线通知确认总账、基线验证环境锁定、基线制品清单、基线发布证据、基线兼容性总账、基线采纳总账、基线支持矩阵、基线发布列车、基线符合性声明、外部标准版本锁定、可执行标准、执行控制面、门禁决策、RACI 决策权、可靠性分级、仓库拓扑、迁移弃用、审计证据、联邦治理和行业对标矩阵的完整说明文档。 |
+| <a id="reference-common-sense"></a>[常识](common-sense.md) | AI 编程和工程交付前的最低判断线。 |
 | <a id="reference-engineering-practice-7-dataset-first-数据服务结构"></a>[Dataset First 数据服务结构](dataset-first-data-service.md) | 以 dataset、contract、registry、runtime 为核心的数据服务模板。 |
 | <a id="reference-engineering-practice-2-代码组织"></a>[代码组织](code-organization.md) | 模块化、命名、注释、格式化、文档和工具。 |
 | <a id="reference-engineering-practice-3-开发经验"></a>[开发经验](development-experience.md) | 变量名、文件结构、编码规范、架构原则和常见基础设施经验。 |
@@ -34,6 +35,7 @@
 - [通用 Python 项目骨架](python-project-skeleton.md) - Python 应用、服务、脚本工具和库项目的通用骨架。
 - [企业级 Monorepo / Multi-repo 架构模板](enterprise-architecture-template.md) - 中大型工程组织、平台工程和多产品线参考模型。
 - [现代企业数字化平台架构](modern-enterprise-architecture-template.md) - 面向领域产品网络、微服务容器 GitOps 边界、AI 原生能力、微调治理、AI 事件响应、内部平台、数据产品、供应链安全、FinOps 成本治理、版本治理、版本控制面、基线版本策略、发布通道、兼容性与冻结控制总账、基线生产变更、发布编排、变更冲突与失败恢复总账、基线事故、问题、纠正行动与复发防止总账、基线数据产品质量、契约违约、运行血缘与可观测性总账、基线工程质量、测试证据、缺陷与发布验证总账、基线人员能力、培训、职责履职与职责分离总账、基线业务结果、价值实现与组合收益总账、基线价值流、关键旅程与端到端流程总账、基线架构视图、运行拓扑与依赖影响总账、基线质量属性、架构驱动与权衡决策总账、基线安全配置、加固姿态与配置漂移修复总账、基线漏洞、暴露面与修复验证总账、基线威胁建模、攻击面与安全风险总账、基线容量、性能、弹性伸缩与成本效率总账、基线服务可靠性、SLO、错误预算与可观测性总账、基线备份、恢复、灾备与可恢复性验证总账、基线密码材料、密钥、证书与秘密生命周期总账、基线资产关键性、数据分类与风险分级总账、基线身份权限、特权访问与工作负载身份总账、基线处理活动、个人数据清单与 RoPA 覆盖总账、基线隐私权利请求、同意偏好与合法基础执行总账、基线记录留存、法律保全与可防御删除总账、基线监管与合规义务可追溯总账、基线运营韧性与重要业务服务影响容忍总账、基线第三方与关键供应商风险总账、基线数据驻留与跨境处理总账、基线共享责任与继承控制总账、基线独立控制保证抽样总账、基线连续控制监测总账、基线运行时准入决策总账、基线运行时准入回执、基线长期验签回执、基线证据不可变归档回执、干净环境基线重建回执、私有制品托管交接清单、审计导出排除清单、本地私有制品边界、基线迁移执行回执、基线迁移工作单、基线消费锁定文件、基线准入执行策略、基线撤销与隔离记录、基线发布事务回执、基线门禁执行报告、基线证据追踪图、基线会审裁决记录、基线 EOL 退役证书、基线状态对账报告、基线生命周期状态机、基线就绪评分卡、基线例外总账、基线回滚验证记录、基线通知确认总账、基线验证环境锁定、基线制品清单、基线发布证据、基线兼容性总账、基线采纳总账、基线支持矩阵、基线发布列车、基线符合性声明、外部标准版本锁定、可执行标准、执行控制面、门禁决策、RACI 决策权、可靠性分级、仓库拓扑、迁移弃用、审计证据、联邦治理和行业对标矩阵的完整说明文档。
+- [常识](common-sense.md) - AI 编程和工程交付前的最低判断线。
 - [Dataset First 数据服务结构](dataset-first-data-service.md) - 以 dataset、contract、registry、runtime 为核心的数据服务模板。
 - [代码组织](code-organization.md) - 模块化、命名、注释、格式化、文档和工具。
 - [开发经验](development-experience.md) - 变量名、文件结构、编码规范、架构原则和常见基础设施经验。

docs/references/common-sense.md

@@ -0,0 +1,7 @@
+<a id="reference-common-sense"></a>
+# 常识
+
+<a id="reference-common-sense-core-summary"></a>
+### 核心常识
+
+如果你不会写提示词，不要先纠结格式。直接用自然语言描述你的意图，能写多详细就写多详细；把目标、背景、约束、输入、输出、例子和不想要的结果都说出来，然后让 AI 根据这段描述帮你生成一版可直接使用的提示词。

docs/references/modern-enterprise-architecture-template.md

@@ -556,7 +556,7 @@ V2.98 起点包括：
 28. 证据新鲜度：新增 `evidence-freshness-policy.yaml`，把证据最大年龄、按类型过期策略、CI 执行和过期阻断纳入审计生命周期。
 29. 控制证据映射：新增 `control-evidence-map.yaml`，把控制项 ID、证据路径、状态、新鲜度、必需性和阻断属性纳入审计总账。
 30. 审计导出清单：新增 `audit-export-manifest.yaml`，把导出包范围、内容、验证结果、签名要求和留存策略纳入可交付证据。
-31. 审计导出自动化：新增 `internal-command://architecture/export-modern-architecture-audit`，生成 `build/modern-enterprise-architecture-audit/audit-export.json`、`audit-export.md`、`oscal-summary.json`、`audit-export-integrity.json`、`audit-export-provenance.json` 和 `audit-export-signing-policy.json`。
+31. 审计导出自动化：新增 `internal-command://architecture/export-modern-architecture-audit`，生成 `assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json`、`audit-export.md`、`oscal-summary.json`、`audit-export-integrity.json`、`audit-export-provenance.json` 和 `audit-export-signing-policy.json`。
 32. 控制评估报告：新增 `control-assessment-report.yaml`，把评估范围、评估人、控制结果、发现项、整改、剩余风险和签署状态纳入审计闭环。
 33. 架构基线变更记录：新增 `baseline-change-record.yaml`，把基线版本、前序版本、影响分析、审批、验证命令和回滚计划纳入变更控制。
 34. OSCAL 交换映射：新增 `oscal-export-profile.yaml`，把内部控制、证据、评估和整改映射到 OSCAL 交换视图，并生成 `oscal-summary.json`。
@@ -5016,7 +5016,7 @@ baselineReleaseEvidence:
       - make sync-doc-toc
       - make test
       - git diff --check
-      - git ls-tree -r --name-only origin/develop -- docs/references/modern-enterprise-architecture-kit
+      - git ls-tree -r --name-only origin/develop -- assets/templates/modern-enterprise-architecture-private/kit
     result: pass
 ```
 
@@ -5646,9 +5646,9 @@ baselineArtifactInventory:
     excludePatterns:
       - build/**
       - .git/**
-      - docs/references/modern-enterprise-architecture-kit/**
-      - docs/references/modern-enterprise-architecture-controls.json
-      - docs/references/modern-enterprise-architecture-version.json
+      - assets/templates/modern-enterprise-architecture-private/kit/**
+      - assets/templates/modern-enterprise-architecture-private/controls.json
+      - assets/templates/modern-enterprise-architecture-private/version.json
     localPrivateArtifactBoundary: governance/evidence/baselines/baseline-local-artifact-boundary.yaml
     auditExportExclusionManifest: governance/evidence/audit-export/audit-export-exclusion-manifest.yaml
     privateArtifactEscrowManifest: governance/evidence/baselines/private-artifact-escrow-manifest.yaml
@@ -5693,7 +5693,7 @@ baselineArtifactInventory:
       digest: sha256:<document-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.md
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.md
     - path: governance/evidence/baselines/baseline-local-artifact-boundary.yaml
       type: evidence-template
       required: true
@@ -5701,7 +5701,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-local-artifact-boundary-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/audit-export/audit-export-exclusion-manifest.yaml
       type: evidence-template
       required: true
@@ -5709,7 +5709,7 @@ baselineArtifactInventory:
       digest: sha256:<audit-export-exclusion-manifest-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/private-artifact-escrow-manifest.yaml
       type: evidence-template
       required: true
@@ -5717,7 +5717,7 @@ baselineArtifactInventory:
       digest: sha256:<private-artifact-escrow-manifest-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-clean-room-reconstruction-receipt.yaml
       type: evidence-template
       required: true
@@ -5725,7 +5725,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-clean-room-reconstruction-receipt-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-evidence-archive-receipt.yaml
       type: evidence-template
       required: true
@@ -5733,7 +5733,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-evidence-archive-receipt-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-signature-ltv-receipt.yaml
       type: evidence-template
       required: true
@@ -5741,7 +5741,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-signature-ltv-receipt-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-runtime-admission-receipt.yaml
       type: evidence-template
       required: true
@@ -5749,7 +5749,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-runtime-admission-receipt-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-runtime-admission-decision-ledger.yaml
       type: evidence-template
       required: true
@@ -5757,7 +5757,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-runtime-admission-decision-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-continuous-control-monitoring-ledger.yaml
       type: evidence-template
       required: true
@@ -5765,7 +5765,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-continuous-control-monitoring-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-control-assurance-sampling-ledger.yaml
       type: evidence-template
       required: true
@@ -5773,7 +5773,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-control-assurance-sampling-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-control-inheritance-ledger.yaml
       type: evidence-template
       required: true
@@ -5781,7 +5781,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-control-inheritance-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-data-residency-transfer-ledger.yaml
       type: evidence-template
       required: true
@@ -5789,7 +5789,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-data-residency-transfer-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-third-party-risk-ledger.yaml
       type: evidence-template
       required: true
@@ -5797,7 +5797,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-third-party-risk-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-operational-resilience-ledger.yaml
       type: evidence-template
       required: true
@@ -5805,7 +5805,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-operational-resilience-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-threat-model-attack-surface-risk-ledger.yaml
       type: evidence-template
       required: true
@@ -5813,7 +5813,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-threat-model-attack-surface-risk-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-vulnerability-exposure-remediation-ledger.yaml
       type: evidence-template
       required: true
@@ -5821,7 +5821,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-vulnerability-exposure-remediation-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-secure-configuration-posture-drift-ledger.yaml
       type: evidence-template
       required: true
@@ -5829,7 +5829,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-secure-configuration-posture-drift-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-production-change-release-ledger.yaml
       type: evidence-template
       required: true
@@ -5837,7 +5837,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-production-change-release-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-incident-problem-corrective-action-ledger.yaml
       type: evidence-template
       required: true
@@ -5845,7 +5845,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-incident-problem-corrective-action-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-data-product-quality-contract-observability-ledger.yaml
       type: evidence-template
       required: true
@@ -5853,7 +5853,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-data-product-quality-contract-observability-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-engineering-quality-test-release-verification-ledger.yaml
       type: evidence-template
       required: true
@@ -5861,7 +5861,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-engineering-quality-test-release-verification-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-workforce-competency-training-duty-segregation-ledger.yaml
       type: evidence-template
       required: true
@@ -5869,7 +5869,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-workforce-competency-training-duty-segregation-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-business-outcome-value-realization-portfolio-ledger.yaml
       type: evidence-template
       required: true
@@ -5877,7 +5877,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-business-outcome-value-realization-portfolio-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-value-stream-journey-process-ledger.yaml
       type: evidence-template
       required: true
@@ -5885,7 +5885,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-value-stream-journey-process-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-architecture-view-runtime-topology-dependency-ledger.yaml
       type: evidence-template
       required: true
@@ -5893,7 +5893,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-architecture-view-runtime-topology-dependency-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-quality-attribute-architecture-driver-tradeoff-ledger.yaml
       type: evidence-template
       required: true
@@ -5901,7 +5901,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-quality-attribute-architecture-driver-tradeoff-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-architecture-principle-constraint-exception-ledger.yaml
       type: evidence-template
       required: true
@@ -5909,7 +5909,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-architecture-principle-constraint-exception-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-version-policy-release-control-ledger.yaml
       type: evidence-template
       required: true
@@ -5917,7 +5917,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-version-policy-release-control-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-capacity-performance-cost-efficiency-ledger.yaml
       type: evidence-template
       required: true
@@ -5925,7 +5925,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-capacity-performance-cost-efficiency-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-service-reliability-slo-error-budget-observability-ledger.yaml
       type: evidence-template
       required: true
@@ -5933,7 +5933,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-service-reliability-slo-error-budget-observability-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-backup-restore-disaster-recovery-ledger.yaml
       type: evidence-template
       required: true
@@ -5941,7 +5941,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-backup-restore-disaster-recovery-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-regulatory-obligation-ledger.yaml
       type: evidence-template
       required: true
@@ -5949,7 +5949,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-regulatory-obligation-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-cryptographic-secrets-key-certificate-ledger.yaml
       type: evidence-template
       required: true
@@ -5957,7 +5957,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-cryptographic-secrets-key-certificate-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-asset-criticality-classification-ledger.yaml
       type: evidence-template
       required: true
@@ -5965,7 +5965,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-asset-criticality-classification-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-identity-entitlement-access-ledger.yaml
       type: evidence-template
       required: true
@@ -5973,7 +5973,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-identity-entitlement-access-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-processing-activity-inventory-ledger.yaml
       type: evidence-template
       required: true
@@ -5981,7 +5981,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-processing-activity-inventory-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-privacy-rights-consent-ledger.yaml
       type: evidence-template
       required: true
@@ -5989,7 +5989,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-privacy-rights-consent-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-records-retention-legal-hold-ledger.yaml
       type: evidence-template
       required: true
@@ -5997,7 +5997,7 @@ baselineArtifactInventory:
       digest: sha256:<baseline-records-retention-legal-hold-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/control-plane/version-governance.yaml
       type: control
       required: true
@@ -6005,7 +6005,7 @@ baselineArtifactInventory:
       digest: sha256:<version-governance-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-lifecycle-state-machine.yaml
       type: evidence-template
       required: true
@@ -6013,7 +6013,7 @@ baselineArtifactInventory:
       digest: sha256:<lifecycle-state-machine-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-state-reconciliation-report.yaml
       type: evidence-template
       required: true
@@ -6021,7 +6021,7 @@ baselineArtifactInventory:
       digest: sha256:<state-reconciliation-report-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/verification/baseline-verification-lock.yaml
       type: control
       required: true
@@ -6029,7 +6029,7 @@ baselineArtifactInventory:
       digest: sha256:<verification-lock-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/rollback/baseline-rollback-verification.yaml
       type: evidence-template
       required: true
@@ -6037,7 +6037,7 @@ baselineArtifactInventory:
       digest: sha256:<rollback-verification-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/baselines/baseline-readiness-scorecard.yaml
       type: evidence-template
       required: true
@@ -6045,7 +6045,7 @@ baselineArtifactInventory:
       digest: sha256:<readiness-scorecard-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/exceptions/baseline-exception-ledger.yaml
       type: evidence-template
       required: true
@@ -6053,7 +6053,7 @@ baselineArtifactInventory:
       digest: sha256:<exception-ledger-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/conformance/baseline-conformance-claim.yaml
       type: evidence-template
       required: true
@@ -6061,7 +6061,7 @@ baselineArtifactInventory:
       digest: sha256:<conformance-claim-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/migrations/baseline-migration-work-order.yaml
       type: evidence-template
       required: true
@@ -6069,7 +6069,7 @@ baselineArtifactInventory:
       digest: sha256:<migration-work-order-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
     - path: governance/evidence/migrations/baseline-migration-execution-receipt.yaml
       type: evidence-template
       required: true
@@ -6077,9 +6077,9 @@ baselineArtifactInventory:
       digest: sha256:<migration-execution-receipt-digest>
       signed: true
       exportedTo:
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
   generatedOutputs:
-    - path: build/modern-enterprise-architecture-audit/audit-export.json
+    - path: assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
       digest: sha256:<audit-export-json-digest>
       generatedBy: internal-command://architecture/export-modern-architecture-audit
       sourceArtifacts:
@@ -6254,11 +6254,11 @@ baselineVerificationLock:
       required: true
       expectedResult: pass
     - name: forbidden-assets
-      command: git ls-tree -r --name-only origin/develop -- docs/references/modern-enterprise-architecture-kit
+      command: git ls-tree -r --name-only origin/develop -- assets/templates/modern-enterprise-architecture-private/kit
       required: true
       expectedResult: empty
     - name: local-private-artifact-boundary
-      command: git status --short --ignored -- docs/references/modern-enterprise-architecture-kit docs/references/modern-enterprise-architecture-controls.json docs/references/modern-enterprise-architecture-version.json scripts/check-modern-architecture-kit.py scripts/check-modern-architecture-audit-export.py scripts/export-modern-architecture-audit.py scripts/check-repository-remote-protection.py
+      command: git status --short --ignored -- assets/templates/modern-enterprise-architecture-private/kit assets/templates/modern-enterprise-architecture-private/controls.json assets/templates/modern-enterprise-architecture-private/version.json assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-kit.py assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-audit-export.py assets/templates/modern-enterprise-architecture-private/scripts/export-modern-architecture-audit.py assets/templates/modern-enterprise-architecture-private/scripts/check-repository-remote-protection.py
       required: true
       expectedResult: ignored-only
     - name: audit-export-exclusion-manifest
@@ -6327,12 +6327,12 @@ baselineVerificationLock:
     controlCoverage: governance/control-plane/control-coverage.yaml
   outputs:
     auditExport:
-      path: build/modern-enterprise-architecture-audit/audit-export.json
+      path: assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
       generatedBy: internal-command://architecture/export-modern-architecture-audit
     integrity:
-      path: build/modern-enterprise-architecture-audit/audit-export-integrity.json
+      path: assets/templates/modern-enterprise-architecture-private/build/audit/audit-export-integrity.json
     provenance:
-      path: build/modern-enterprise-architecture-audit/audit-export-provenance.json
+      path: assets/templates/modern-enterprise-architecture-private/build/audit/audit-export-provenance.json
   gates:
     runnerImagePinnedByDigest: true
     noUnpinnedToolDownload: true
@@ -6811,7 +6811,7 @@ baselineReadinessScorecard:
         - governance/evidence/baselines/baseline-evidence-archive-receipt.yaml
         - governance/evidence/baselines/baseline-signature-ltv-receipt.yaml
         - governance/evidence/baselines/baseline-runtime-admission-receipt.yaml
-        - build/modern-enterprise-architecture-audit/audit-export-integrity.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export-integrity.json
     - id: verification-reproducibility
       weight: 10
       score: 95
@@ -12770,7 +12770,7 @@ baselineLocalArtifactBoundary:
     signaturePolicy: exclude-from-public-release-payload
     exportPolicy: exclude-raw-assets-include-boundary-evidence
   localPrivateArtifacts:
-    - path: docs/references/modern-enterprise-architecture-kit/
+    - path: assets/templates/modern-enterprise-architecture-private/kit/
       type: internal-starter-kit
       reason: 本地私有 starter kit 包含可执行 schema/example 和组织定制模板，只在本地或私有制品库验证。
       storage: local-workspace-or-private-artifact-registry
@@ -12780,7 +12780,7 @@ baselineLocalArtifactBoundary:
         - private-ci
         - evidence-generation
       remoteExclusionRequired: true
-    - path: docs/references/modern-enterprise-architecture-controls.json
+    - path: assets/templates/modern-enterprise-architecture-private/controls.json
       type: generated-control-catalog
       reason: 由本地私有控制项覆盖清单生成，远端只保留边界证据和摘要，不提交生成物本体。
       storage: local-workspace-or-private-artifact-registry
@@ -12789,7 +12789,7 @@ baselineLocalArtifactBoundary:
         - local-validation
         - audit-export-generation
       remoteExclusionRequired: true
-    - path: docs/references/modern-enterprise-architecture-version.json
+    - path: assets/templates/modern-enterprise-architecture-private/version.json
       type: generated-version-manifest
       reason: 由版本控制面生成，远端只保留文档和边界摘要，避免生成物漂移被误当源制品。
       storage: local-workspace-or-private-artifact-registry
@@ -12798,7 +12798,7 @@ baselineLocalArtifactBoundary:
         - local-validation
         - audit-export-generation
       remoteExclusionRequired: true
-    - path: scripts/check-modern-architecture-kit.py
+    - path: assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-kit.py
       type: local-validation-script
       reason: 本地 starter gate 脚本不作为公开基线源制品发布。
       storage: local-workspace
@@ -12806,7 +12806,7 @@ baselineLocalArtifactBoundary:
       allowedUse:
         - local-validation
       remoteExclusionRequired: true
-    - path: scripts/check-modern-architecture-audit-export.py
+    - path: assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-audit-export.py
       type: local-validation-script
       reason: 本地审计导出门禁脚本不作为公开基线源制品发布。
       storage: local-workspace
@@ -12814,7 +12814,7 @@ baselineLocalArtifactBoundary:
       allowedUse:
         - local-validation
       remoteExclusionRequired: true
-    - path: scripts/export-modern-architecture-audit.py
+    - path: assets/templates/modern-enterprise-architecture-private/scripts/export-modern-architecture-audit.py
       type: local-generation-script
       reason: 本地审计导出生成脚本只用于私有证据包生成，不进入公开远端。
       storage: local-workspace
@@ -12822,7 +12822,7 @@ baselineLocalArtifactBoundary:
       allowedUse:
         - audit-export-generation
       remoteExclusionRequired: true
-    - path: scripts/check-repository-remote-protection.py
+    - path: assets/templates/modern-enterprise-architecture-private/scripts/check-repository-remote-protection.py
       type: local-validation-script
       reason: 本地远端保护验证脚本只用于发布前检查，不进入公开远端。
       storage: local-workspace
@@ -12831,13 +12831,13 @@ baselineLocalArtifactBoundary:
         - remote-protection-validation
       remoteExclusionRequired: true
   requiredChecks:
-    - command: git status --short --ignored -- docs/references/modern-enterprise-architecture-kit docs/references/modern-enterprise-architecture-controls.json docs/references/modern-enterprise-architecture-version.json scripts/check-modern-architecture-kit.py scripts/check-modern-architecture-audit-export.py scripts/export-modern-architecture-audit.py scripts/check-repository-remote-protection.py
+    - command: git status --short --ignored -- assets/templates/modern-enterprise-architecture-private/kit assets/templates/modern-enterprise-architecture-private/controls.json assets/templates/modern-enterprise-architecture-private/version.json assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-kit.py assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-audit-export.py assets/templates/modern-enterprise-architecture-private/scripts/export-modern-architecture-audit.py assets/templates/modern-enterprise-architecture-private/scripts/check-repository-remote-protection.py
       expected: ignored-only
-    - command: git ls-files -- docs/references/modern-enterprise-architecture-kit docs/references/modern-enterprise-architecture-controls.json docs/references/modern-enterprise-architecture-version.json scripts/check-modern-architecture-kit.py scripts/check-modern-architecture-audit-export.py scripts/export-modern-architecture-audit.py scripts/check-repository-remote-protection.py
+    - command: git ls-files -- assets/templates/modern-enterprise-architecture-private/kit assets/templates/modern-enterprise-architecture-private/controls.json assets/templates/modern-enterprise-architecture-private/version.json assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-kit.py assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-audit-export.py assets/templates/modern-enterprise-architecture-private/scripts/export-modern-architecture-audit.py assets/templates/modern-enterprise-architecture-private/scripts/check-repository-remote-protection.py
       expected: empty
-    - command: git ls-tree -r --name-only HEAD -- docs/references/modern-enterprise-architecture-kit docs/references/modern-enterprise-architecture-controls.json docs/references/modern-enterprise-architecture-version.json scripts/check-modern-architecture-kit.py scripts/check-modern-architecture-audit-export.py scripts/export-modern-architecture-audit.py scripts/check-repository-remote-protection.py
+    - command: git ls-tree -r --name-only HEAD -- assets/templates/modern-enterprise-architecture-private/kit assets/templates/modern-enterprise-architecture-private/controls.json assets/templates/modern-enterprise-architecture-private/version.json assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-kit.py assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-audit-export.py assets/templates/modern-enterprise-architecture-private/scripts/export-modern-architecture-audit.py assets/templates/modern-enterprise-architecture-private/scripts/check-repository-remote-protection.py
       expected: empty
-    - command: git ls-tree -r --name-only origin/develop -- docs/references/modern-enterprise-architecture-kit docs/references/modern-enterprise-architecture-controls.json docs/references/modern-enterprise-architecture-version.json scripts/check-modern-architecture-kit.py scripts/check-modern-architecture-audit-export.py scripts/export-modern-architecture-audit.py scripts/check-repository-remote-protection.py
+    - command: git ls-tree -r --name-only origin/develop -- assets/templates/modern-enterprise-architecture-private/kit assets/templates/modern-enterprise-architecture-private/controls.json assets/templates/modern-enterprise-architecture-private/version.json assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-kit.py assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-audit-export.py assets/templates/modern-enterprise-architecture-private/scripts/export-modern-architecture-audit.py assets/templates/modern-enterprise-architecture-private/scripts/check-repository-remote-protection.py
       expected: empty
   integrations:
     artifactInventory: governance/evidence/baselines/baseline-artifact-inventory.yaml
@@ -12920,67 +12920,67 @@ auditExportExclusionManifest:
       reason: public-source-document
       digest: sha256:<document-digest>
       includedIn:
-        - build/modern-enterprise-architecture-audit/audit-export.md
-        - build/modern-enterprise-architecture-audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.md
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
   digestOnly:
-    - path: docs/references/modern-enterprise-architecture-kit/
-      boundaryRef: docs/references/modern-enterprise-architecture-kit/
+    - path: assets/templates/modern-enterprise-architecture-private/kit/
+      boundaryRef: assets/templates/modern-enterprise-architecture-private/kit/
       digestStrategy: recursive-sha256-manifest
       digest: sha256:<modern-enterprise-architecture-kit-digest>
       rawExportAllowed: false
       signaturePayloadRawAllowed: false
-    - path: docs/references/modern-enterprise-architecture-controls.json
-      boundaryRef: docs/references/modern-enterprise-architecture-controls.json
+    - path: assets/templates/modern-enterprise-architecture-private/controls.json
+      boundaryRef: assets/templates/modern-enterprise-architecture-private/controls.json
       digestStrategy: file-sha256
       digest: sha256:<controls-json-digest>
       rawExportAllowed: false
       signaturePayloadRawAllowed: false
-    - path: docs/references/modern-enterprise-architecture-version.json
-      boundaryRef: docs/references/modern-enterprise-architecture-version.json
+    - path: assets/templates/modern-enterprise-architecture-private/version.json
+      boundaryRef: assets/templates/modern-enterprise-architecture-private/version.json
       digestStrategy: file-sha256
       digest: sha256:<version-json-digest>
       rawExportAllowed: false
       signaturePayloadRawAllowed: false
-    - path: scripts/check-modern-architecture-kit.py
-      boundaryRef: scripts/check-modern-architecture-kit.py
+    - path: assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-kit.py
+      boundaryRef: assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-kit.py
       digestStrategy: file-sha256
       digest: sha256:<check-modern-architecture-kit-digest>
       rawExportAllowed: false
       signaturePayloadRawAllowed: false
-    - path: scripts/check-modern-architecture-audit-export.py
-      boundaryRef: scripts/check-modern-architecture-audit-export.py
+    - path: assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-audit-export.py
+      boundaryRef: assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-audit-export.py
       digestStrategy: file-sha256
       digest: sha256:<check-modern-architecture-audit-export-digest>
       rawExportAllowed: false
       signaturePayloadRawAllowed: false
-    - path: scripts/export-modern-architecture-audit.py
-      boundaryRef: scripts/export-modern-architecture-audit.py
+    - path: assets/templates/modern-enterprise-architecture-private/scripts/export-modern-architecture-audit.py
+      boundaryRef: assets/templates/modern-enterprise-architecture-private/scripts/export-modern-architecture-audit.py
       digestStrategy: file-sha256
       digest: sha256:<export-modern-architecture-audit-digest>
       rawExportAllowed: false
       signaturePayloadRawAllowed: false
-    - path: scripts/check-repository-remote-protection.py
-      boundaryRef: scripts/check-repository-remote-protection.py
+    - path: assets/templates/modern-enterprise-architecture-private/scripts/check-repository-remote-protection.py
+      boundaryRef: assets/templates/modern-enterprise-architecture-private/scripts/check-repository-remote-protection.py
       digestStrategy: file-sha256
       digest: sha256:<check-repository-remote-protection-digest>
       rawExportAllowed: false
       signaturePayloadRawAllowed: false
   forcedExclusions:
-    - docs/references/modern-enterprise-architecture-kit/**
-    - docs/references/modern-enterprise-architecture-controls.json
-    - docs/references/modern-enterprise-architecture-version.json
-    - scripts/check-modern-architecture-kit.py
-    - scripts/check-modern-architecture-audit-export.py
-    - scripts/export-modern-architecture-audit.py
-    - scripts/check-repository-remote-protection.py
+    - assets/templates/modern-enterprise-architecture-private/kit/**
+    - assets/templates/modern-enterprise-architecture-private/controls.json
+    - assets/templates/modern-enterprise-architecture-private/version.json
+    - assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-kit.py
+    - assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-audit-export.py
+    - assets/templates/modern-enterprise-architecture-private/scripts/export-modern-architecture-audit.py
+    - assets/templates/modern-enterprise-architecture-private/scripts/check-repository-remote-protection.py
   signaturePayloadExclusions:
-    - docs/references/modern-enterprise-architecture-kit/**
-    - docs/references/modern-enterprise-architecture-controls.json
-    - docs/references/modern-enterprise-architecture-version.json
-    - scripts/check-modern-architecture-kit.py
-    - scripts/check-modern-architecture-audit-export.py
-    - scripts/export-modern-architecture-audit.py
-    - scripts/check-repository-remote-protection.py
+    - assets/templates/modern-enterprise-architecture-private/kit/**
+    - assets/templates/modern-enterprise-architecture-private/controls.json
+    - assets/templates/modern-enterprise-architecture-private/version.json
+    - assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-kit.py
+    - assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-audit-export.py
+    - assets/templates/modern-enterprise-architecture-private/scripts/export-modern-architecture-audit.py
+    - assets/templates/modern-enterprise-architecture-private/scripts/check-repository-remote-protection.py
   postExportVerification:
     - command: internal-command://architecture/check-modern-architecture-audit-export --assert-no-raw-private-artifacts
       expected: pass
@@ -13058,7 +13058,7 @@ privateArtifactEscrowManifest:
     retentionMinimumDays: 2555
     accessReviewCadence: quarterly
   escrowedArtifacts:
-    - path: docs/references/modern-enterprise-architecture-kit/
+    - path: assets/templates/modern-enterprise-architecture-private/kit/
       type: internal-starter-kit
       storageRef: oci://registry.company.internal/architecture/modern-enterprise-architecture-kit@sha256:<kit-digest>
       digestStrategy: recursive-sha256-manifest
@@ -13072,11 +13072,11 @@ privateArtifactEscrowManifest:
         retainUntil: 2033-06-02
       retrieval:
         command: internal-command://architecture/fetch-private-artifact --artifact modern-enterprise-architecture-kit --digest sha256:<kit-digest>
-        expectedRestorePath: docs/references/modern-enterprise-architecture-kit/
+        expectedRestorePath: assets/templates/modern-enterprise-architecture-private/kit/
       restoreVerification:
-        command: internal-command://architecture/check-modern-architecture-kit --verify-restored-private-artifact docs/references/modern-enterprise-architecture-kit/
+        command: internal-command://architecture/check-modern-architecture-kit --verify-restored-private-artifact assets/templates/modern-enterprise-architecture-private/kit/
         result: pass
-    - path: docs/references/modern-enterprise-architecture-controls.json
+    - path: assets/templates/modern-enterprise-architecture-private/controls.json
       type: generated-control-catalog
       storageRef: artifact://evidence.company.internal/architecture/controls/modern-enterprise-architecture-controls.json@sha256:<controls-json-digest>
       digestStrategy: file-sha256
@@ -13089,11 +13089,11 @@ privateArtifactEscrowManifest:
         retainUntil: 2033-06-02
       retrieval:
         command: internal-command://architecture/fetch-private-artifact --artifact modern-enterprise-architecture-controls.json --digest sha256:<controls-json-digest>
-        expectedRestorePath: docs/references/modern-enterprise-architecture-controls.json
+        expectedRestorePath: assets/templates/modern-enterprise-architecture-private/controls.json
       restoreVerification:
         command: internal-command://architecture/check-modern-architecture-audit-export --verify-control-catalog-digest sha256:<controls-json-digest>
         result: pass
-    - path: docs/references/modern-enterprise-architecture-version.json
+    - path: assets/templates/modern-enterprise-architecture-private/version.json
       type: generated-version-manifest
       storageRef: artifact://evidence.company.internal/architecture/version/modern-enterprise-architecture-version.json@sha256:<version-json-digest>
       digestStrategy: file-sha256
@@ -13106,13 +13106,13 @@ privateArtifactEscrowManifest:
         retainUntil: 2033-06-02
       retrieval:
         command: internal-command://architecture/fetch-private-artifact --artifact modern-enterprise-architecture-version.json --digest sha256:<version-json-digest>
-        expectedRestorePath: docs/references/modern-enterprise-architecture-version.json
+        expectedRestorePath: assets/templates/modern-enterprise-architecture-private/version.json
       restoreVerification:
         command: internal-command://architecture/check-modern-architecture-audit-export --verify-version-manifest-digest sha256:<version-json-digest>
         result: pass
-    - path: scripts/check-modern-architecture-kit.py
+    - path: assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-kit.py
       type: local-validation-script
-      storageRef: artifact://evidence.company.internal/architecture/scripts/check-modern-architecture-kit.py@sha256:<check-modern-architecture-kit-digest>
+      storageRef: artifact://evidence.company.internal/architecture/assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-kit.py@sha256:<check-modern-architecture-kit-digest>
       digestStrategy: file-sha256
       sourceDigest: sha256:<check-modern-architecture-kit-digest>
       accessRoles:
@@ -13123,13 +13123,13 @@ privateArtifactEscrowManifest:
         retainUntil: 2033-06-02
       retrieval:
         command: internal-command://architecture/fetch-private-artifact --artifact check-modern-architecture-kit.py --digest sha256:<check-modern-architecture-kit-digest>
-        expectedRestorePath: scripts/check-modern-architecture-kit.py
+        expectedRestorePath: assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-kit.py
       restoreVerification:
-        command: python3 scripts/check-modern-architecture-kit.py --version
+        command: python3 assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-kit.py --version
         result: pass
-    - path: scripts/check-modern-architecture-audit-export.py
+    - path: assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-audit-export.py
       type: local-validation-script
-      storageRef: artifact://evidence.company.internal/architecture/scripts/check-modern-architecture-audit-export.py@sha256:<check-modern-architecture-audit-export-digest>
+      storageRef: artifact://evidence.company.internal/architecture/assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-audit-export.py@sha256:<check-modern-architecture-audit-export-digest>
       digestStrategy: file-sha256
       sourceDigest: sha256:<check-modern-architecture-audit-export-digest>
       accessRoles:
@@ -13140,13 +13140,13 @@ privateArtifactEscrowManifest:
         retainUntil: 2033-06-02
       retrieval:
         command: internal-command://architecture/fetch-private-artifact --artifact check-modern-architecture-audit-export.py --digest sha256:<check-modern-architecture-audit-export-digest>
-        expectedRestorePath: scripts/check-modern-architecture-audit-export.py
+        expectedRestorePath: assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-audit-export.py
       restoreVerification:
-        command: python3 scripts/check-modern-architecture-audit-export.py --version
+        command: python3 assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-audit-export.py --version
         result: pass
-    - path: scripts/export-modern-architecture-audit.py
+    - path: assets/templates/modern-enterprise-architecture-private/scripts/export-modern-architecture-audit.py
       type: local-generation-script
-      storageRef: artifact://evidence.company.internal/architecture/scripts/export-modern-architecture-audit.py@sha256:<export-modern-architecture-audit-digest>
+      storageRef: artifact://evidence.company.internal/architecture/assets/templates/modern-enterprise-architecture-private/scripts/export-modern-architecture-audit.py@sha256:<export-modern-architecture-audit-digest>
       digestStrategy: file-sha256
       sourceDigest: sha256:<export-modern-architecture-audit-digest>
       accessRoles:
@@ -13157,13 +13157,13 @@ privateArtifactEscrowManifest:
         retainUntil: 2033-06-02
       retrieval:
         command: internal-command://architecture/fetch-private-artifact --artifact export-modern-architecture-audit.py --digest sha256:<export-modern-architecture-audit-digest>
-        expectedRestorePath: scripts/export-modern-architecture-audit.py
+        expectedRestorePath: assets/templates/modern-enterprise-architecture-private/scripts/export-modern-architecture-audit.py
       restoreVerification:
-        command: python3 scripts/export-modern-architecture-audit.py --version
+        command: python3 assets/templates/modern-enterprise-architecture-private/scripts/export-modern-architecture-audit.py --version
         result: pass
-    - path: scripts/check-repository-remote-protection.py
+    - path: assets/templates/modern-enterprise-architecture-private/scripts/check-repository-remote-protection.py
       type: local-validation-script
-      storageRef: artifact://evidence.company.internal/architecture/scripts/check-repository-remote-protection.py@sha256:<check-repository-remote-protection-digest>
+      storageRef: artifact://evidence.company.internal/architecture/assets/templates/modern-enterprise-architecture-private/scripts/check-repository-remote-protection.py@sha256:<check-repository-remote-protection-digest>
       digestStrategy: file-sha256
       sourceDigest: sha256:<check-repository-remote-protection-digest>
       accessRoles:
@@ -13174,9 +13174,9 @@ privateArtifactEscrowManifest:
         retainUntil: 2033-06-02
       retrieval:
         command: internal-command://architecture/fetch-private-artifact --artifact check-repository-remote-protection.py --digest sha256:<check-repository-remote-protection-digest>
-        expectedRestorePath: scripts/check-repository-remote-protection.py
+        expectedRestorePath: assets/templates/modern-enterprise-architecture-private/scripts/check-repository-remote-protection.py
       restoreVerification:
-        command: python3 scripts/check-repository-remote-protection.py --version
+        command: python3 assets/templates/modern-enterprise-architecture-private/scripts/check-repository-remote-protection.py --version
         result: pass
   summary:
     escrowedArtifacts: 7
@@ -13261,7 +13261,7 @@ baselineCleanRoomReconstructionReceipt:
       result: pass
       outputDigest: sha256:<checkout-tree-digest>
     - id: verify-forbidden-assets-absent-before-restore
-      command: git ls-files -- docs/references/modern-enterprise-architecture-kit docs/references/modern-enterprise-architecture-controls.json docs/references/modern-enterprise-architecture-version.json scripts/check-modern-architecture-kit.py scripts/check-modern-architecture-audit-export.py scripts/export-modern-architecture-audit.py scripts/check-repository-remote-protection.py
+      command: git ls-files -- assets/templates/modern-enterprise-architecture-private/kit assets/templates/modern-enterprise-architecture-private/controls.json assets/templates/modern-enterprise-architecture-private/version.json assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-kit.py assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-audit-export.py assets/templates/modern-enterprise-architecture-private/scripts/export-modern-architecture-audit.py assets/templates/modern-enterprise-architecture-private/scripts/check-repository-remote-protection.py
       expectedResult: empty
       result: pass
     - id: restore-private-artifacts
@@ -13275,17 +13275,17 @@ baselineCleanRoomReconstructionReceipt:
     - id: rebuild-audit-export
       command: internal-command://architecture/export-modern-architecture-audit
       expectedOutputs:
-        - build/modern-enterprise-architecture-audit/audit-export.json
-        - build/modern-enterprise-architecture-audit/audit-export.md
-        - build/modern-enterprise-architecture-audit/oscal-summary.json
-        - build/modern-enterprise-architecture-audit/audit-export-integrity.json
-        - build/modern-enterprise-architecture-audit/audit-export-provenance.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.md
+        - assets/templates/modern-enterprise-architecture-private/build/audit/oscal-summary.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export-integrity.json
+        - assets/templates/modern-enterprise-architecture-private/build/audit/audit-export-provenance.json
       result: pass
     - id: replay-release-gate
       command: internal-command://architecture/check-modern-architecture-kit --replay governance/evidence/baselines/baseline-gate-execution-report.yaml
       result: pass
     - id: verify-private-assets-still-not-publishable
-      command: git status --short --ignored -- docs/references/modern-enterprise-architecture-kit docs/references/modern-enterprise-architecture-controls.json docs/references/modern-enterprise-architecture-version.json scripts/check-modern-architecture-kit.py scripts/check-modern-architecture-audit-export.py scripts/export-modern-architecture-audit.py scripts/check-repository-remote-protection.py
+      command: git status --short --ignored -- assets/templates/modern-enterprise-architecture-private/kit assets/templates/modern-enterprise-architecture-private/controls.json assets/templates/modern-enterprise-architecture-private/version.json assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-kit.py assets/templates/modern-enterprise-architecture-private/scripts/check-modern-architecture-audit-export.py assets/templates/modern-enterprise-architecture-private/scripts/export-modern-architecture-audit.py assets/templates/modern-enterprise-architecture-private/scripts/check-repository-remote-protection.py
       expectedResult: ignored-only
       result: pass
   rebuiltDigests:
@@ -13408,7 +13408,7 @@ baselineEvidenceArchiveReceipt:
         - legal-lead
   archivedObjects:
     - id: audit-export-json
-      sourcePath: build/modern-enterprise-architecture-audit/audit-export.json
+      sourcePath: assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
       archiveRef: worm://architecture-baseline-evidence/mea-v2.60/audit-export.json@sha256:<audit-export-digest>
       sourceDigest: sha256:<audit-export-digest>
       archiveDigest: sha256:<audit-export-digest>
@@ -13416,7 +13416,7 @@ baselineEvidenceArchiveReceipt:
       legalHold: true
       retainedUntil: 2033-06-02
     - id: audit-export-integrity
-      sourcePath: build/modern-enterprise-architecture-audit/audit-export-integrity.json
+      sourcePath: assets/templates/modern-enterprise-architecture-private/build/audit/audit-export-integrity.json
       archiveRef: worm://architecture-baseline-evidence/mea-v2.60/audit-export-integrity.json@sha256:<audit-export-integrity-digest>
       sourceDigest: sha256:<audit-export-integrity-digest>
       archiveDigest: sha256:<audit-export-integrity-digest>
@@ -13424,7 +13424,7 @@ baselineEvidenceArchiveReceipt:
       legalHold: true
       retainedUntil: 2033-06-02
     - id: audit-export-provenance
-      sourcePath: build/modern-enterprise-architecture-audit/audit-export-provenance.intoto.jsonl
+      sourcePath: assets/templates/modern-enterprise-architecture-private/build/audit/audit-export-provenance.intoto.jsonl
       archiveRef: worm://architecture-baseline-evidence/mea-v2.60/audit-export-provenance.intoto.jsonl@sha256:<audit-export-provenance-digest>
       sourceDigest: sha256:<audit-export-provenance-digest>
       archiveDigest: sha256:<audit-export-provenance-digest>
@@ -13582,7 +13582,7 @@ baselineSignatureLtvReceipt:
     - id: audit-export-provenance
       subjectPath: governance/evidence/audit-export/audit-export-provenance.intoto.jsonl
       subjectDigest: sha256:<audit-export-provenance-digest>
-      signatureBundle: build/modern-enterprise-architecture-audit/audit-export-provenance.sigstore.bundle
+      signatureBundle: assets/templates/modern-enterprise-architecture-private/build/audit/audit-export-provenance.sigstore.bundle
       bundleDigest: sha256:<sigstore-bundle-digest>
       certificate:
         identity: architecture-release-bot@company.com
@@ -13606,7 +13606,7 @@ baselineSignatureLtvReceipt:
         ocspStatus: good
         crlDigest: sha256:<crl-snapshot-digest>
       verification:
-        command: cosign verify-blob --bundle build/modern-enterprise-architecture-audit/audit-export-provenance.sigstore.bundle governance/evidence/audit-export/audit-export-provenance.intoto.jsonl
+        command: cosign verify-blob --bundle assets/templates/modern-enterprise-architecture-private/build/audit/audit-export-provenance.sigstore.bundle governance/evidence/audit-export/audit-export-provenance.intoto.jsonl
         toolchainRef: governance/evidence/verification/baseline-verification-lock.yaml
         result: pass
   archivedValidationMaterials:
@@ -20241,11 +20241,11 @@ internal-command://architecture/export-modern-architecture-audit
 默认输出：
 
 ```text
-build/modern-enterprise-architecture-audit/audit-export.json
-build/modern-enterprise-architecture-audit/audit-export.md
-build/modern-enterprise-architecture-audit/oscal-summary.json
-build/modern-enterprise-architecture-audit/audit-export-integrity.json
-build/modern-enterprise-architecture-audit/audit-export-provenance.json
+assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.json
+assets/templates/modern-enterprise-architecture-private/build/audit/audit-export.md
+assets/templates/modern-enterprise-architecture-private/build/audit/oscal-summary.json
+assets/templates/modern-enterprise-architecture-private/build/audit/audit-export-integrity.json
+assets/templates/modern-enterprise-architecture-private/build/audit/audit-export-provenance.json
 ```
 
 导出输出不变量由以下命令校验，并已经进入 `make test`：

metadata/taxonomy.yml

@@ -142,6 +142,9 @@ documents:
     - path: docs/references/modern-enterprise-architecture-template.md
       title: 现代企业数字化平台架构
       role: 面向领域产品网络、微服务容器 GitOps 边界、AI 原生能力、微调治理、AI 事件响应、内部平台、数据产品、供应链安全、FinOps 成本治理、版本治理、版本控制面、基线版本策略、发布通道、兼容性与冻结控制总账、基线生产变更、发布编排、变更冲突与失败恢复总账、基线事故、问题、纠正行动与复发防止总账、基线数据产品质量、契约违约、运行血缘与可观测性总账、基线工程质量、测试证据、缺陷与发布验证总账、基线人员能力、培训、职责履职与职责分离总账、基线业务结果、价值实现与组合收益总账、基线价值流、关键旅程与端到端流程总账、基线架构视图、运行拓扑与依赖影响总账、基线质量属性、架构驱动与权衡决策总账、基线架构原则、约束、反模式与例外执行总账、基线安全配置、加固姿态与配置漂移修复总账、基线漏洞、暴露面与修复验证总账、基线威胁建模、攻击面与安全风险总账、基线容量、性能、弹性伸缩与成本效率总账、基线服务可靠性、SLO、错误预算与可观测性总账、基线备份、恢复、灾备与可恢复性验证总账、基线密码材料、密钥、证书与秘密生命周期总账、基线资产关键性、数据分类与风险分级总账、基线身份权限、特权访问与工作负载身份总账、基线处理活动、个人数据清单与 RoPA 覆盖总账、基线隐私权利请求、同意偏好与合法基础执行总账、基线记录留存、法律保全与可防御删除总账、基线监管与合规义务可追溯总账、外部标准版本锁定、可执行标准、执行控制面、门禁决策、RACI 决策权、可靠性分级、仓库拓扑、迁移弃用、审计证据、联邦治理和行业对标矩阵的完整说明文档
+    - path: docs/references/common-sense.md
+      title: 常识
+      role: AI 编程和工程交付前的最低判断线
 
     - path: docs/references/dataset-first-data-service.md
       title: Dataset First 数据服务结构