Cheng Zhou
74feca4467
- replace plaintext login and unlock requests with RSA-OAEP/AES-GCM encrypted payloads - add login challenge replay protection, production RSA key validation, and auth tests - wire compose to environment-driven dev/prod settings without committing local secrets - update setup-config smoke scripts and Postman docs for encrypted login - add visit schedule migrations/tests and update study/subject setup workflows
Docs Index
CTMS 文档按用途分为三类：当前操作手册、审计与治理记录、历史实现计划。
当前常用
guides/release-checklist.md: 发布前检查项与回归门禁guides/branch-environment-installation.md:dev、main、release分支环境安装配置guides/setup-config-api.md: 立项配置接口、联调与冒烟说明setup-config-curl-smoke.sh: 立项配置 curl 冒烟脚本postman/setup-config.postman_collection.json: Postman 联调集合postman/local.postman_environment.example.json: Postman 本地环境模板
审计与治理
audits/auth-session-acceptance.md: 鉴权会话验收清单audits/enterprise-ui-acceptance-checklist.md: Enterprise UI 验收结果audits/setup-config-code-audit.md: 立项配置代码审计记录audits/storage-persistence-audit.md: 存储落库扫描快照audits/storage-persistence-governance.md: 存储落库治理基线与流程
历史计划
plans/: 设计稿、实施计划与历史交付记录
约定：
guides/放当前仍会被执行、查阅或复制命令的操作文档audits/放验收、治理、审计、扫描结果plans/只作为历史记录，不作为当前操作入口