Golden HCM 标准客户案例golden-hcm-tenant

HCMF-275 · Consultant permission matrix and sensitive audit review

权限矩阵与敏感审计审查

消费 HCMF-274 permission-audit-config draft/gap read model，集中呈现权限矩阵、数据范围、字段能力、敏感访问、导出策略、动作状态、审计 taxonomy、sourceTrace、releaseProvenance、rollback、review decision 与 downstream boundary facts。

只读顾问审查体验：不执行运行时权限、不过滤生产数据、不写生产审计事件、不变更 roles/grants/IAM、不发布/部署、不迁移 Yunxiao 状态、不派发 Dragonfly。This page does not implement HCMF-276 runtime evidence or HCMF-278 smoke archive; Dragonfly/Regina renderer consumption remains paused.

Readiness

StateblockedBlocked by contract gaps
Draft

permission-audit-config-draft:hcmf-274:golden-hcm

Source

HCMF-274/be028a21cc7acbfdd553c03e04

Upstream

contract:hcmf-273:permission-data-scope-audit:missing-draft-source

Review sections

blocked0 refs
Role/persona coverage

No refs supplied; section is blocked.

  • missing-role-persona-coverage
blocked0 refs
Permission matrix

No refs supplied; section is blocked.

  • missing-permission-matrix-rule
blocked0 refs
Data-scope

No refs supplied; section is blocked.

  • missing-data-scope-rule
blocked0 refs
Field capability

No refs supplied; section is blocked.

  • missing-field-capability
blocked0 refs
Sensitive access

No refs supplied; section is blocked.

  • missing-sensitive-access-policy
blocked0 refs
Export policy

No refs supplied; section is blocked.

  • missing-export-policy
blocked0 refs
Action affordance

No refs supplied; section is blocked.

  • missing-action-affordance
blocked0 refs
Audit taxonomy

No refs supplied; section is blocked.

  • missing-audit-event-taxonomy
blocked0 refs
Source trace

No refs supplied; section is blocked.

  • missing-source-trace
blocked0 refs
Release provenance

No refs supplied; section is blocked.

  • missing-release-provenance
blocked0 refs
Rollback

No refs supplied; section is blocked.

  • missing-rollback-ref
blocked0 refs
Review decision

No refs supplied; section is blocked.

  • missing-review-decision-ref

Gap explanations / unavailable-state refs

missing-role-persona-coverage: Provide configurable coverage refs for HR admin, HRBP, department manager, employee self-service, consultant, and system admin personas. (unavailable:permission-audit-config:missing-role-persona-coverage)
missing-permission-matrix-rule: Provide permission matrix refs from the reviewed HCMF-273 contract-shaped facts. (unavailable:permission-audit-config:missing-permission-matrix-rule)
missing-data-scope-rule: Provide data-scope refs before any downstream runtime or delivery claim. (unavailable:permission-audit-config:missing-data-scope-rule)
missing-field-capability: Provide field capability refs for visible/masked/hidden and editable/search/filter/export states. (unavailable:permission-audit-config:missing-field-capability)
missing-sensitive-access-policy: Provide sensitive access policy refs, including masking/reason/review/audit policy context. (unavailable:permission-audit-config:missing-sensitive-access-policy)
missing-export-policy: Provide export policy refs before any export or delivery-document claim. (unavailable:permission-audit-config:missing-export-policy)
missing-action-affordance: Provide action affordance refs for display-only enabled/disabled/hidden/blocked states. (unavailable:permission-audit-config:missing-action-affordance)
missing-audit-event-taxonomy: Provide audit taxonomy refs for permission decision, sensitive access/export, release, rollback, and evidence events. (unavailable:permission-audit-config:missing-audit-event-taxonomy)
missing-source-trace: Provide sourceTrace refs; do not infer readiness from hidden UI fields, role labels, or demo state. (unavailable:permission-audit-config:missing-source-trace)
missing-release-provenance: Provide release provenance refs before downstream runtime evidence or delivery documentation consumption. (unavailable:permission-audit-config:missing-release-provenance)
missing-rollback-ref: Provide rollback refs for later release/rollback traceability. (unavailable:permission-audit-config:missing-rollback-ref)
missing-review-decision-ref: Provide PM/Codex review-decision refs before handoff claims. (unavailable:permission-audit-config:missing-review-decision-ref)
missing-downstream-boundary: Provide explicit downstream consumer refs and boundaries for HCMF-275/HCMF-276/HCMF-278; do not dispatch Dragonfly from this slice. (unavailable:permission-audit-config:missing-downstream-boundary)
  • unavailable:permission-audit-config:missing-role-persona-coverage
  • unavailable:permission-audit-config:missing-permission-matrix-rule
  • unavailable:permission-audit-config:missing-data-scope-rule
  • unavailable:permission-audit-config:missing-field-capability
  • unavailable:permission-audit-config:missing-sensitive-access-policy
  • unavailable:permission-audit-config:missing-export-policy
  • unavailable:permission-audit-config:missing-action-affordance
  • unavailable:permission-audit-config:missing-audit-event-taxonomy
  • unavailable:permission-audit-config:missing-source-trace
  • unavailable:permission-audit-config:missing-release-provenance
  • unavailable:permission-audit-config:missing-rollback-ref
  • unavailable:permission-audit-config:missing-review-decision-ref
  • unavailable:permission-audit-config:missing-downstream-boundary

Source trace / provenance / review / rollback

sourceTraceRefs

Missing sourceTraceRefs

releaseProvenanceRefs

Missing releaseProvenanceRefs

reviewDecisionRefs

Missing reviewDecisionRefs

rollbackRefs

Missing rollbackRefs

Downstream boundaries

Guardrails / non-claims

canMutateRolesGrantsIamdisabled
canEnforceRuntimePermissionsdisabled
canWriteProductionAuditEventsdisabled
canPublishOrDeploydisabled
canTransitionYunxiaoStatusdisabled
canDispatchDragonflydisabled
  • Consultant permission sensitive audit review does not mutate roles/grants/IAM.
  • Consultant permission sensitive audit review does not enforce runtime permissions or data-scope filtering.
  • Consultant permission sensitive audit review does not write production audit events.
  • Consultant permission sensitive audit review does not publish, deploy, execute rollback, or transition Yunxiao status.
  • Consultant permission sensitive audit review does not dispatch Dragonfly; Dragonfly/Regina renderer consumption remains paused.
  • Consultant permission sensitive audit review does not implement HCMF-276 runtime evidence or delivery docs integration.
  • Consultant permission sensitive audit review does not implement HCMF-278 smoke/evidence archive.
  • Hidden UI fields and renderer state are not backend permission enforcement.

Consultant messages / downstream hints

  • Permission audit configuration draft is blocked by structured gaps: missing-role-persona-coverage, missing-permission-matrix-rule, missing-data-scope-rule, missing-field-capability, missing-sensitive-access-policy, missing-export-policy, missing-action-affordance, missing-audit-event-taxonomy, missing-source-trace, missing-release-provenance, missing-rollback-ref, missing-review-decision-ref, missing-downstream-boundary.
  • Resolve missing role/persona, permission matrix, data scope, field capability, sensitive access, export policy, action affordance, audit taxonomy, sourceTrace, provenance, rollback, review decision, and downstream boundary refs before handoff.
  • Do not implement consultant review UI, runtime enforcement/evidence integration, smoke archive, Dragonfly renderer work, publish/deploy, production audit writes, or Yunxiao Completed transition from blocked draft facts.
  • HCMF-275 should show/resolve blocked facts only in a separate reviewed UI task; this slice returns read-model gaps only.
  • HCMF-276 must wait for sourceTrace/provenance/review/rollback gaps before runtime evidence or delivery docs integration.
  • HCMF-278 smoke/evidence archive remains a later task after implementation evidence exists; this slice does not publish, deploy, run public smoke, or mark Yunxiao Completed.
  • Dragonfly/Regina renderer consumption remains paused and out of scope for this main-owned HCMF-274 slice.