fix(router): check system permissions against target project

backend/tests/test_api_permissions.py

@@ -413,6 +413,17 @@ def test_training_authorization_list_can_filter_by_site_name():
     assert "TrainingAuthorization.site_name == site_name" in crud_source
 
 
+def test_site_creation_initializes_all_startup_baseline_records():
+    """创建中心时应生成启动模块默认记录，但后续手动删除不应依赖列表页重建。"""
+    route_path = Path(__file__).resolve().parents[1] / "app" / "api" / "v1" / "sites.py"
+    source = route_path.read_text()
+
+    assert "StartupFeasibilityCreate(site_id=site.id)" in source
+    assert "StartupEthicsCreate(site_id=site.id)" in source
+    assert "KickoffMeetingCreate(site_id=site.id)" in source
+    assert "await startup_crud.create_kickoff(" in source
+
+
 def test_visit_list_permission_matches_wired_visit_endpoints():
     """访视当前没有详情查询接口，列表接口应只使用 visits:list。"""
     visits_path = Path(__file__).resolve().parents[1] / "app" / "api" / "v1" / "visits.py"