K8: record blocked owner review and release evidence

docs/task-history.md

@@ -49,6 +49,21 @@
 
 | `K7-RECOVERY-01` | 固定 tick checkpoint/replay 与 workspace recovery 已接入；checkpoint 携带 context、cursor、snapshot/state hash 和 operation ledger；损坏 checkpoint、未知 schema、缺号/重复事件、未确认操作、abort 和恢复边界均 fail-closed；恢复终点与连续运行状态 hash 一致；native `sim_event_import` 与 Worker 对照通过，官方 recovery oracle 继续显式 blocked | `coverage/workspace-recovery.report.json`, `web/worker/replay.mjs`, `web/worker/sim-session.mjs`, `web/workspace/recovery.mjs`, `wasm-core/src/sim_event.c` |
 | `K8-REG-01` | 统一配置图确定性枚举 264 个运动学入口和 233 个 sim INI 入口；逐项资源/INI/注册表启动预检、缺失与未解析引用保留；图谱孤儿和未拥有模板为零；native/WASM kinematics/motion/feedback/home/IO 与 Worker replay/recovery 重复摘要稳定；官方 kinematics/recovery oracle 继续显式 blocked | `coverage/configuration-regression.report.json`, `scripts/generate_configuration_regression.py`, `scripts/test_configuration_regression.py`, `coverage/manifest.jsonl`, `context-lock.json` |
+| `K8-REL-01` | 兼容性、来源/许可证和发布闭合审计完成；ABI/protocol/schema/context lock 哈希一致；1,804 个已影响 manifest 条目在 evidence index 中保留 owner、输入、输出、测试、差异和 oracle 状态；6,249 个未分配种子、资源缺失、官方 oracle、浏览器矩阵、逐项许可证和迁移/回滚继续显式 blocked，不升级为发布候选 | `coverage/release-closure.report.json`, `coverage/compatibility-matrix.report.json`, `coverage/license-closure.report.json`, `coverage/release-evidence-index.json`, `docs/linuxcnc-web-wasm-release-closure.md`, `scripts/generate_release_closure.py`, `scripts/test_release_closure.py` |
+| `K8-REL-02` | workspace-package v1↔v2 封套迁移双向 hash 闭合；旧 event/snapshot/checkpoint/journal schema 保持不变且损坏、版本、上下文不兼容均 fail-closed；回滚包只生成新目标包，失败注入后恢复到最近已提交 seq=1；离线资源完整缓存 ready、缺件阻断、联网降级显式；迁移项在 release evidence index 标记 verified，K8-REL-01 的官方 oracle/资源/浏览器/许可证阻塞保留 | `coverage/workspace-migration.report.json`, `coverage/workspace-rollback.package.json`, `coverage/offline-cache.package.json`, `web/workspace/migration.mjs`, `web/workspace/test_migration.mjs`, `coverage/release-evidence-index.json`, `coverage/compatibility-matrix.report.json` |
+| `K8-REL-03` | 生成 8,053 条确定性 license/source index；全部来源 hash、审计责任人和证据状态完整；7,996 条 LinuxCNC 条目按最具体 Debian copyright scope 映射 SPDX，57 条 wasm-core/web 条目明确保持 `blocked_unassigned`；实现许可证决策写入独立文档，release 仍保留实现许可证阻塞，不升级为发布候选 | `coverage/license-source-index.jsonl`, `coverage/license-closure.report.json`, `docs/linuxcnc-web-wasm-license-decision.md`, `coverage/release-evidence-index.json`, `scripts/test_license_source_closure.py` |
+| `K8-REL-04` | 最终 release-candidate gate 独立汇总 closure 报告、context lock、schema contracts、license/source index、恢复和迁移证据；context/recovery hash、ABI/protocol/schema、license index、migration/rollback/offline checks verified；6 个硬阻塞保留，明确 `candidate_eligible=false`、`release_action=STOP_RELEASE`，不升级为发布候选 | `coverage/release-candidate-gate.report.json`, `coverage/release-closure.report.json`, `scripts/generate_release_closure.py`, `scripts/test_release_candidate_gate.py` |
+| `K8-REL-05` | post-release audit 逐项比较 gate 的 11 个输入哈希、closure 交叉引用和 context/schema/recovery/migration 检查；审计检查全部 verified，6 个 blocker 均有 owner、review owner、证据路径和 remediation；整体仍明确 `blocked`/`STOP_RELEASE`，未清除或重分类阻塞 | `coverage/post-release-audit.report.json`, `scripts/generate_post_release_audit.py`, `scripts/test_post_release_audit.py` |
+| `K8-REL-06` | K8 milestone closeout 冻结 post-release audit、release gate、closure、evidence index 和 context lock；输入哈希、审计自校验、context/schema、六项 blocker 保留和 `STOP_RELEASE` 均 verified；里程碑以 `closed_with_release_blockers` 结束，不升级为发布候选 | `coverage/k8-milestone-closeout.report.json`, `scripts/generate_k8_milestone_closeout.py`, `scripts/test_k8_milestone_closeout.py`, `coverage/post-release-audit.report.json` |
+| `K8-REL-07` | remediation intake 校验 closeout、audit、gate、closure、evidence index 和 context lock 的输入哈希与 context；六个 blocker identity、owner/evidence/review trigger 和 `STOP_RELEASE` 均 verified；生成 `K8-REL-08..13` 有序后续工作项，但全部保持 blocked，不升级为发布候选 | `coverage/release-remediation-intake.report.json`, `scripts/generate_release_remediation_intake.py`, `scripts/test_release_remediation_intake.py`, `docs/linuxcnc-web-wasm-release-remediation-intake.md` |
+| `K8-REL-08` | 为全部 6,249 个 `needs_owner` manifest seed 生成确定性 WS-0/WS-1/WS-2/WS-6 workstream owner 和 review owner；源哈希、唯一覆盖、context 与 `STOP_RELEASE` 均 verified；assignment 保持 `proposed_blocked_review`，不修改 manifest/context lock、不升级 accepted，下一步处理 acceptance evidence | `coverage/manifest-ownership-remediation.report.json`, `scripts/generate_manifest_ownership_remediation.py`, `scripts/test_manifest_ownership_remediation.py`, `docs/linuxcnc-web-wasm-manifest-ownership-remediation.md` |
+| `K8-REL-09` | acceptance readiness 审计覆盖全部 1,804 affected entry；owner/inputs/outputs/test 字段虽可追踪，但 oracle/context 阻塞导致 eligible=0，manifest accepted=0；6 项检查与 `STOP_RELEASE` verified，不 promotion 或重分类，下一步处理 official oracle | `coverage/release-acceptance-remediation.report.json`, `scripts/generate_release_acceptance_remediation.py`, `scripts/test_release_acceptance_remediation.py`, `docs/linuxcnc-web-wasm-release-acceptance-remediation.md` |
+| `K8-REL-10` | 锁定 source commit 与 context 匹配；`linuxcnc/unit_tests/kinematics`、recovery roots 缺失，6 个 matrixkins 文件明确非官方，11 个 kinematics samples/recovery scenarios 保持 blocked；未新增官方输入或 golden，`STOP_RELEASE` verified，下一步处理 configuration resources | `coverage/official-oracle-remediation.report.json`, `scripts/generate_official_oracle_remediation.py`, `scripts/test_official_oracle_remediation.py`, `docs/linuxcnc-web-wasm-official-oracle-remediation.md` |
+| `K8-REL-11` | 配置资源 remediation 保留 16,093 rows：997 missing、91 unresolved、59 unindexed、3 unregistered startup；956 basename candidates 仅作只读审查，实际 resolve=0，资源图 orphan=0，`STOP_RELEASE` verified，下一步处理 browser matrix | `coverage/configuration-resource-remediation.report.json`, `scripts/generate_configuration_resource_remediation.py`, `scripts/test_configuration_resource_remediation.py`, `docs/linuxcnc-web-wasm-configuration-resource-remediation.md` |
+| `K8-REL-12` | browser matrix remediation 读取锁定 TBD minimums；Chromium 151/Firefox 154 headless smoke passed，Safari 在 Linux 环境 unavailable，时间戳输出归一化且所有结果显式；`STOP_RELEASE` verified，不就地修改 context lock，下一步处理 implementation license | `coverage/browser-matrix-remediation.report.json`, `scripts/generate_browser_matrix_remediation.py`, `scripts/test_browser_matrix_remediation.py`, `docs/linuxcnc-web-wasm-browser-matrix-remediation.md` |
+| `K8-REL-13` | implementation license remediation 覆盖 57/57 wasm-core/web entries；源哈希与 audit evidence verified，blocked_unassigned=57、approved_spdx=0、未批准声明=0，上游 license 不继承，`STOP_RELEASE` verified，下一步汇总 remediation evidence | `coverage/implementation-license-remediation.report.json`, `scripts/generate_implementation_license_remediation.py`, `scripts/test_implementation_license_remediation.py`, `docs/linuxcnc-web-wasm-implementation-license-remediation.md` |
+| `K8-REL-14` | remediation evidence roundup 汇总 K8-REL-08..13；6 份报告 self-hash/context、六个 blocker identity、无 promotion/fabrication 和 gate/audit/closeout/intake 的 `STOP_RELEASE` 均 verified；状态为 `blocked_pending_owner_actions`，下一步 owner review 与新 context/gate refresh | `coverage/remediation-evidence-roundup.report.json`, `scripts/generate_remediation_evidence_roundup.py`, `scripts/test_remediation_evidence_roundup.py`, `docs/linuxcnc-web-wasm-remediation-evidence-roundup.md` |
+| `K8-REL-15` | owner-review gate refresh 定位六项 owner decision，但 workspace 没有批准输入或新 context；owner_inputs=0、gate_refresh=blocked，`STOP_RELEASE` verified，任务保持 blocked，后续仅在 owner 决策后创建新 context 并刷新 gate | `coverage/owner-review-gate-refresh.report.json`, `scripts/generate_owner_review_gate_refresh.py`, `scripts/test_owner_review_gate_refresh.py`, `docs/linuxcnc-web-wasm-owner-review-gate-refresh.md` |
 
 ## 追溯规则