{ "metadata": { "generated_at": "2026-05-22T17:11:38.092107+08:00", "source_reports": { "apply_prep_md": "/root/.openclaw/workspace/talent-review-system/docs/roadmap/ASSESSMENT_TEMPLATE_PERMISSION_IMPACT_REGISTRY_APPLY_PREP.md", "apply_prep_json": "/root/.openclaw/workspace/talent-review-system/docs/roadmap/assessment_template_permission_impact_registry_apply_prep.json", "impact_preview_md": "/root/.openclaw/workspace/talent-review-system/docs/roadmap/ASSESSMENT_TEMPLATE_PERMISSION_IMPACT_PREVIEW.md", "impact_preview_json": "/root/.openclaw/workspace/talent-review-system/docs/roadmap/assessment_template_permission_impact_preview.json", "schema_registry": "/var/www/talent-review/outputs/assessment_template_schema_registry_v1.json", "permission_policy_registry": "/var/www/talent-review/outputs/assessment_template_permission_policy_registry_v1.json", "hardcoded_rules_registry": "/var/www/talent-review/outputs/assessment_template_hardcoded_rules_registry_v1.json", "assessment_config_summary": "/var/www/talent-review/outputs/assessment_template_config_center_summary_v1.json" }, "stage": "P0_IMPACT_PREVIEW_REGISTRY", "purpose": "沉淀测评模板配置变更、权限变更、字段敏感级别变更、风险规则变更、结果映射变更、硬编码治理变更的影响预览模型。", "warning": "只读 registry，不接入真实权限引擎，不触发任何业务生效。", "writes_database": false, "modifies_permissions": false, "expands_permissions": false, "modifies_active_template": false, "modifies_results": false, "modifies_cadre_validation": false, "modifies_org_capability_score": false, "modifies_org_canvas_constraints": false, "modifies_people_action_constraints": false, "modifies_external_mapping": false, "sends_real_assignment": false, "feishu_writeback_required": false, "permission_apply_required": false }, "registry_summary": { "impact_change_object_type_count": 8, "impact_dimension_count": 9, "risk_level_count": 4, "gate_rule_count": 6, "linked_schema_registry": "/outputs/assessment_template_schema_registry_v1.json", "linked_permission_policy_registry": "/outputs/assessment_template_permission_policy_registry_v1.json", "linked_hardcoded_rules_registry": "/outputs/assessment_template_hardcoded_rules_registry_v1.json" }, "change_object_types": [ { "change_type_id": "template_change", "change_type_name": "测评模板变更", "description": "template_type、template_version、applicable_scope、lifecycle state、effective period 变化。", "related_schema_objects": [ "assessment_template", "assessment_applicable_scope", "assessment_lifecycle" ], "related_permission_policy_modules": [ "page_access_policy", "data_scope_policy", "lifecycle_permission_policy" ], "related_hardcoded_registry_sections": [ "hardcoded_template_type" ], "typical_risks": [ "适用范围扩大", "生命周期误生效", "active 结果解释变化" ], "required_impact_dimensions": [ "user_impact", "organization_impact", "assessment_task_impact", "permission_impact" ], "default_gate_rule": "hr_review_required", "direct_apply_allowed": false }, { "change_type_id": "question_dimension_weight_change", "change_type_name": "题库 / 维度 / 权重变更", "description": "question、dimension、weight_rule、evaluator_weight、scoring_method 变化。", "related_schema_objects": [ "assessment_question", "assessment_dimension", "assessment_weight_rule" ], "related_permission_policy_modules": [ "field_permission_policy", "config_permission_policy" ], "related_hardcoded_registry_sections": [ "hardcoded_weight", "hardcoded_threshold" ], "typical_risks": [ "评分变化", "九宫格变化", "算法标签变化" ], "required_impact_dimensions": [ "result_algorithm_impact", "profile_cadre_impact", "org_capability_impact" ], "default_gate_rule": "hr_review_required", "direct_apply_allowed": false }, { "change_type_id": "evaluator_relationship_change", "change_type_name": "评价关系变更", "description": "self、manager、peer、subordinate、HR、HRBP、Boss、external reviewer 和 reviewer_scope_rule 变化。", "related_schema_objects": [ "assessment_evaluator_relationship" ], "related_permission_policy_modules": [ "data_scope_policy", "action_permission_policy" ], "related_hardcoded_registry_sections": [ "hardcoded_evaluator_relationship" ], "typical_risks": [ "评价人越权", "reviewer scope 变化", "匿名性或最小评价人数变化" ], "required_impact_dimensions": [ "user_impact", "organization_impact", "permission_impact" ], "default_gate_rule": "permission_admin_review_required", "direct_apply_allowed": false }, { "change_type_id": "result_mapping_change", "change_type_name": "结果映射变更", "description": "结果进入算法、画像、干部 validation、组织能力、人事动作、权限信号、外部系统的映射变化。", "related_schema_objects": [ "assessment_result_mapping" ], "related_permission_policy_modules": [ "field_permission_policy", "approval_policy" ], "related_hardcoded_registry_sections": [ "hardcoded_result_mapping", "hardcoded_org_capability_mapping", "hardcoded_people_action_constraint" ], "typical_risks": [ "算法输入变化", "干部 validation 边界变化", "组织能力评分变化", "人事动作限制变化" ], "required_impact_dimensions": [ "result_algorithm_impact", "profile_cadre_impact", "org_capability_impact", "org_canvas_people_action_impact", "external_system_impact" ], "default_gate_rule": "boss_approval_required", "direct_apply_allowed": false }, { "change_type_id": "risk_rule_change", "change_type_name": "风险规则变更", "description": "one_vote_veto、risk_threshold、values_risk、low_score_dimension、inconsistent_rating、expired_result、abnormal_pattern、recommended_action 变化。", "related_schema_objects": [ "assessment_risk_rule" ], "related_permission_policy_modules": [ "approval_policy", "high_risk_template_policy" ], "related_hardcoded_registry_sections": [ "hardcoded_one_vote_veto", "hardcoded_risk_tag", "hardcoded_threshold" ], "typical_risks": [ "一票否决变化", "风险标签变化", "推荐动作变化" ], "required_impact_dimensions": [ "result_algorithm_impact", "profile_cadre_impact", "org_canvas_people_action_impact" ], "default_gate_rule": "boss_approval_required", "direct_apply_allowed": false }, { "change_type_id": "permission_policy_change", "change_type_name": "权限策略变更", "description": "page access、data scope、field visibility、action permission、approval policy、config permission、lifecycle permission 变化。", "related_schema_objects": [ "assessment_permission_policy" ], "related_permission_policy_modules": [ "page_access_policy", "data_scope_policy", "field_permission_policy", "action_permission_policy", "approval_policy", "config_permission_policy", "lifecycle_permission_policy" ], "related_hardcoded_registry_sections": [ "hardcoded_permission_signal" ], "typical_risks": [ "权限扩大", "critical 字段暴露", "审批绕过" ], "required_impact_dimensions": [ "permission_impact", "user_impact", "organization_impact" ], "default_gate_rule": "permission_admin_review_required", "direct_apply_allowed": false }, { "change_type_id": "field_sensitivity_change", "change_type_name": "字段敏感级别变更", "description": "Public / low、Internal / medium、Sensitive / high、Restricted / critical 字段等级变化。", "related_schema_objects": [ "assessment_permission_policy" ], "related_permission_policy_modules": [ "field_permission_policy", "audit_version_policy" ], "related_hardcoded_registry_sections": [ "hardcoded_permission_signal" ], "typical_risks": [ "字段降级", "导出风险", "审计缺口" ], "required_impact_dimensions": [ "permission_impact", "profile_cadre_impact" ], "default_gate_rule": "security_audit_required", "direct_apply_allowed": false }, { "change_type_id": "hardcoded_rule_governance_change", "change_type_name": "硬编码规则治理变更", "description": "registry extraction、shadow validation、controlled refactor、target schema mapping 变化。", "related_schema_objects": [ "assessment_risk_rule", "assessment_result_mapping", "assessment_weight_rule", "assessment_permission_policy" ], "related_permission_policy_modules": [ "approval_policy", "audit_version_policy" ], "related_hardcoded_registry_sections": [ "hardcoded_type_taxonomy", "p0_priority_rules", "target_schema_mapping" ], "typical_risks": [ "误替换逻辑", "未做 shadow validation", "不可回滚" ], "required_impact_dimensions": [ "result_algorithm_impact", "profile_cadre_impact", "org_capability_impact", "org_canvas_people_action_impact", "permission_impact" ], "default_gate_rule": "separate_apply_gate_required", "direct_apply_allowed": false } ], "impact_dimensions": [ { "dimension_id": "user_impact", "dimension_name": "用户影响", "description": "预览 用户影响 的影响范围、风险指标和输出字段。", "affected_entities": [ "affected_users", "affected_roles", "affected_reviewers", "newly_visible_users", "newly_hidden_users" ], "risk_indicators": [ "newly_visible_users", "affected_reviewers" ], "required_checks": [ "scope_diff_required", "permission_expansion_check", "business_effective_risk_check" ], "output_fields": [ "affected_users", "affected_roles", "affected_reviewers", "newly_visible_users", "newly_hidden_users" ] }, { "dimension_id": "organization_impact", "dimension_name": "组织影响", "description": "预览 组织影响 的影响范围、风险指标和输出字段。", "affected_entities": [ "affected_departments", "affected_positions", "affected_grades", "affected_org_units", "affected_hrbp_scopes" ], "risk_indicators": [ "affected_hrbp_scopes", "expanded_org_scope" ], "required_checks": [ "scope_diff_required", "permission_expansion_check", "business_effective_risk_check" ], "output_fields": [ "affected_departments", "affected_positions", "affected_grades", "affected_org_units", "affected_hrbp_scopes" ] }, { "dimension_id": "assessment_task_impact", "dimension_name": "测评任务影响", "description": "预览 测评任务影响 的影响范围、风险指标和输出字段。", "affected_entities": [ "affected_templates", "affected_assignments", "affected_pending_tasks", "affected_completed_tasks", "affected_expired_tasks", "retake_required" ], "risk_indicators": [ "affected_assignments", "retake_required" ], "required_checks": [ "scope_diff_required", "permission_expansion_check", "business_effective_risk_check" ], "output_fields": [ "affected_templates", "affected_assignments", "affected_pending_tasks", "affected_completed_tasks", "affected_expired_tasks", "retake_required" ] }, { "dimension_id": "result_algorithm_impact", "dimension_name": "结果与算法影响", "description": "预览 结果与算法影响 的影响范围、风险指标和输出字段。", "affected_entities": [ "affected_results", "affected_algorithm_inputs", "affected_scores", "affected_labels", "affected_nine_box", "affected_one_vote_veto", "affected_risk_tags" ], "risk_indicators": [ "affected_one_vote_veto", "affected_nine_box", "affected_algorithm_inputs" ], "required_checks": [ "scope_diff_required", "permission_expansion_check", "business_effective_risk_check" ], "output_fields": [ "affected_results", "affected_algorithm_inputs", "affected_scores", "affected_labels", "affected_nine_box", "affected_one_vote_veto", "affected_risk_tags" ] }, { "dimension_id": "profile_cadre_impact", "dimension_name": "员工画像 / 干部档案影响", "description": "预览 员工画像 / 干部档案影响 的影响范围、风险指标和输出字段。", "affected_entities": [ "affected_profile_fields", "affected_cadre_validation_fields", "affected_cadre_conclusion_boundary", "business_effective_risk" ], "risk_indicators": [ "affected_cadre_conclusion_boundary", "business_effective_risk" ], "required_checks": [ "scope_diff_required", "permission_expansion_check", "business_effective_risk_check" ], "output_fields": [ "affected_profile_fields", "affected_cadre_validation_fields", "affected_cadre_conclusion_boundary", "business_effective_risk" ] }, { "dimension_id": "org_capability_impact", "dimension_name": "组织能力影响", "description": "预览 组织能力影响 的影响范围、风险指标和输出字段。", "affected_entities": [ "affected_org_capability_score", "affected_org_health_score", "affected_org_risk_tags", "affected_management_effectiveness", "affected_culture_health" ], "risk_indicators": [ "affected_org_capability_score", "affected_org_health_score" ], "required_checks": [ "scope_diff_required", "permission_expansion_check", "business_effective_risk_check" ], "output_fields": [ "affected_org_capability_score", "affected_org_health_score", "affected_org_risk_tags", "affected_management_effectiveness", "affected_culture_health" ] }, { "dimension_id": "org_canvas_people_action_impact", "dimension_name": "组织画布 / 人事动作影响", "description": "预览 组织画布 / 人事动作影响 的影响范围、风险指标和输出字段。", "affected_entities": [ "affected_org_canvas_constraints", "affected_people_action_constraints", "affected_promotion_rules", "affected_transfer_rules", "affected_probation_rules", "affected_elimination_rules" ], "risk_indicators": [ "affected_people_action_constraints", "affected_promotion_rules", "affected_elimination_rules" ], "required_checks": [ "scope_diff_required", "permission_expansion_check", "business_effective_risk_check" ], "output_fields": [ "affected_org_canvas_constraints", "affected_people_action_constraints", "affected_promotion_rules", "affected_transfer_rules", "affected_probation_rules", "affected_elimination_rules" ] }, { "dimension_id": "permission_impact", "dimension_name": "权限影响", "description": "预览 权限影响 的影响范围、风险指标和输出字段。", "affected_entities": [ "newly_granted_actions", "revoked_actions", "newly_visible_fields", "newly_hidden_fields", "expanded_data_scope", "reduced_data_scope", "critical_field_exposure" ], "risk_indicators": [ "newly_granted_actions", "expanded_data_scope", "critical_field_exposure" ], "required_checks": [ "scope_diff_required", "permission_expansion_check", "business_effective_risk_check" ], "output_fields": [ "newly_granted_actions", "revoked_actions", "newly_visible_fields", "newly_hidden_fields", "expanded_data_scope", "reduced_data_scope", "critical_field_exposure" ] }, { "dimension_id": "external_system_impact", "dimension_name": "外部系统影响", "description": "预览 外部系统影响 的影响范围、风险指标和输出字段。", "affected_entities": [ "affected_feishu_fields", "affected_training_mapping", "affected_performance_mapping", "affected_compensation_mapping", "affected_external_writeback_mapping" ], "risk_indicators": [ "affected_feishu_fields", "affected_external_writeback_mapping" ], "required_checks": [ "scope_diff_required", "permission_expansion_check", "business_effective_risk_check" ], "output_fields": [ "affected_feishu_fields", "affected_training_mapping", "affected_performance_mapping", "affected_compensation_mapping", "affected_external_writeback_mapping" ] } ], "risk_level_model": [ { "risk_level": "low", "definition": "只读展示或文案级变更; 不影响 active; 不写库; 不改变权限; 不改变结果解释", "trigger_conditions": [ "只读展示或文案级变更", "不影响 active", "不写库", "不改变权限", "不改变结果解释" ], "required_gate": "no_gate_required", "approval_requirement": "none", "audit_requirement": false, "rollback_requirement": false }, { "risk_level": "medium", "definition": "影响 HR 运营理解或配置草案; 不直接生效; 需要 HR 复核但不涉及 critical 字段", "trigger_conditions": [ "影响 HR 运营理解或配置草案", "不直接生效", "需要 HR 复核但不涉及 critical 字段" ], "required_gate": "hr_review_required", "approval_requirement": "HR review", "audit_requirement": false, "rollback_requirement": false }, { "risk_level": "high", "definition": "影响结果映射、权重、评价关系、组织能力评分、干部 validation 边界或高风险模板", "trigger_conditions": [ "影响结果映射、权重、评价关系、组织能力评分、干部 validation 边界或高风险模板" ], "required_gate": "boss_approval_required", "approval_requirement": "HR Owner + Boss/Executive or Permission/Admin review", "audit_requirement": true, "rollback_requirement": true }, { "risk_level": "critical", "definition": "影响一票否决; 影响干部盘点; 影响晋升 / 调岗 / 转正 / 淘汰限制; 影响权限可见性扩大; 影响 Restricted / critical 字段; 影响组织画布动作约束; 影响飞书 / 外部系统反写; 影响 business-effective 结论; 改变 active 结果解释", "trigger_conditions": [ "影响一票否决", "影响干部盘点", "影响晋升 / 调岗 / 转正 / 淘汰限制", "影响权限可见性扩大", "影响 Restricted / critical 字段", "影响组织画布动作约束", "影响飞书 / 外部系统反写", "影响 business-effective 结论", "改变 active 结果解释" ], "required_gate": "separate_apply_gate_required", "approval_requirement": "HR Owner + Boss/Executive or Permission/Admin review", "audit_requirement": true, "rollback_requirement": true } ], "critical_triggers": [ "one_vote_veto_change", "cadre_review_change", "people_action_constraint_change", "permission_expansion", "critical_field_exposure", "org_canvas_constraint_change", "external_writeback_mapping_change", "business_effective_conclusion_change", "active_result_interpretation_change" ], "gate_decision_rules": [ { "gate_id": "no_gate_required", "gate_name": "no_gate_required", "trigger_conditions": [ "只读", "低风险", "无业务生效", "不写库", "不改 active", "不扩大权限" ], "required_roles": [], "allowed_next_actions": [ "continue_preview", "create_readonly_registry", "manual_review" ], "forbidden_actions": [ "write_database", "modify_permissions", "expand_permissions", "modify_active_template", "send_real_assignment", "feishu_writeback" ], "audit_required": false, "rollback_required": false }, { "gate_id": "hr_review_required", "gate_name": "hr_review_required", "trigger_conditions": [ "影响 HR 运营范围", "影响模板适用说明", "影响任务运营解释" ], "required_roles": [ "HR Owner" ], "allowed_next_actions": [ "continue_preview", "create_readonly_registry", "manual_review" ], "forbidden_actions": [ "write_database", "modify_permissions", "expand_permissions", "modify_active_template", "send_real_assignment", "feishu_writeback" ], "audit_required": false, "rollback_required": false }, { "gate_id": "boss_approval_required", "gate_name": "boss_approval_required", "trigger_conditions": [ "影响干部", "影响晋升", "影响一票否决", "影响组织能力", "高风险模板" ], "required_roles": [ "HR Owner", "Boss / Executive" ], "allowed_next_actions": [ "continue_preview", "create_readonly_registry", "manual_review" ], "forbidden_actions": [ "write_database", "modify_permissions", "expand_permissions", "modify_active_template", "send_real_assignment", "feishu_writeback" ], "audit_required": true, "rollback_required": true }, { "gate_id": "permission_admin_review_required", "gate_name": "permission_admin_review_required", "trigger_conditions": [ "影响权限范围", "影响字段可见性", "影响动作权限", "影响配置权限" ], "required_roles": [ "Permission Admin", "Auditor" ], "allowed_next_actions": [ "continue_preview", "create_readonly_registry", "manual_review" ], "forbidden_actions": [ "write_database", "modify_permissions", "expand_permissions", "modify_active_template", "send_real_assignment", "feishu_writeback" ], "audit_required": true, "rollback_required": true }, { "gate_id": "security_audit_required", "gate_name": "security_audit_required", "trigger_conditions": [ "影响 critical 字段", "影响外部系统映射", "影响飞书反写", "影响导出或审计覆盖" ], "required_roles": [ "Security / Audit", "System Admin", "Business Approver" ], "allowed_next_actions": [ "continue_preview", "create_readonly_registry", "manual_review" ], "forbidden_actions": [ "write_database", "modify_permissions", "expand_permissions", "modify_active_template", "send_real_assignment", "feishu_writeback" ], "audit_required": true, "rollback_required": true }, { "gate_id": "separate_apply_gate_required", "gate_name": "separate_apply_gate_required", "trigger_conditions": [ "任何会写库", "改 active", "改权限", "发任务", "生成 business-effective 结论", "反写飞书" ], "required_roles": [ "HR Owner", "Boss / Executive", "Permission Admin", "Auditor" ], "allowed_next_actions": [ "open_separate_apply_gate" ], "forbidden_actions": [ "write_database", "modify_permissions", "expand_permissions", "modify_active_template", "send_real_assignment", "feishu_writeback" ], "audit_required": true, "rollback_required": true } ], "impact_preview_schema": { "impact_preview_id": "string", "source_change_type": "template_change | question_dimension_weight_change | evaluator_relationship_change | result_mapping_change | risk_rule_change | permission_policy_change | field_sensitivity_change | hardcoded_rule_governance_change", "source_registry": "schema_registry | permission_policy_registry | hardcoded_rules_registry | mixed", "source_object_id": "string", "proposed_change_summary": "string", "affected_scope": { "affected_users": [], "affected_roles": [], "affected_departments": [], "affected_positions": [], "affected_templates": [], "affected_assignments": [] }, "impact_dimensions": { "user_impact": [ "affected_users", "affected_roles", "affected_reviewers", "newly_visible_users", "newly_hidden_users" ], "organization_impact": [ "affected_departments", "affected_positions", "affected_grades", "affected_org_units", "affected_hrbp_scopes" ], "assessment_task_impact": [ "affected_templates", "affected_assignments", "affected_pending_tasks", "affected_completed_tasks", "affected_expired_tasks", "retake_required" ], "result_algorithm_impact": [ "affected_results", "affected_algorithm_inputs", "affected_scores", "affected_labels", "affected_nine_box", "affected_one_vote_veto", "affected_risk_tags" ], "profile_cadre_impact": [ "affected_profile_fields", "affected_cadre_validation_fields", "affected_cadre_conclusion_boundary", "business_effective_risk" ], "org_capability_impact": [ "affected_org_capability_score", "affected_org_health_score", "affected_org_risk_tags", "affected_management_effectiveness", "affected_culture_health" ], "org_canvas_people_action_impact": [ "affected_org_canvas_constraints", "affected_people_action_constraints", "affected_promotion_rules", "affected_transfer_rules", "affected_probation_rules", "affected_elimination_rules" ], "permission_impact": [ "newly_granted_actions", "revoked_actions", "newly_visible_fields", "newly_hidden_fields", "expanded_data_scope", "reduced_data_scope", "critical_field_exposure" ], "external_system_impact": [ "affected_feishu_fields", "affected_training_mapping", "affected_performance_mapping", "affected_compensation_mapping", "affected_external_writeback_mapping" ] }, "risk_level": "low | medium | high | critical", "gate_required": [], "required_review_roles": [], "required_approval_roles": [], "permission_expansion_detected": false, "critical_field_exposure_detected": false, "business_effective_risk": false, "feishu_writeback_risk": false, "rollback_required": true, "audit_required": true, "recommendation": "no_apply | manual_review | shadow_validation | separate_apply_gate", "blocking_reasons": [], "preview_generated_at": "datetime", "generated_by": "system_or_operator", "validation_status": "draft | validated | blocked" }, "registry_relationships": { "schema_registry_usage": [ "判断变更对象属于哪个 schema 对象", "判断对象依赖关系", "判断迁移阶段", "判断是否触及 12 个 schema 对象或 10 类模板类型" ], "permission_policy_registry_usage": [ "判断谁能看、谁能改、谁能审批", "判断字段敏感级别", "判断动作权限", "判断高风险模板策略", "判断是否产生权限扩大或 critical 字段暴露" ], "hardcoded_rules_registry_usage": [ "判断是否涉及高风险硬编码", "判断是否需要 shadow validation", "判断是否允许 refactor", "判断是否影响算法、干部、组织能力、人事动作、权限" ] }, "p0_vs_saas_boundary": { "p0_static_impact_model_items": [ "只读 JSON registry", "静态影响预览模型", "人工读取影响结果用于决策", "不接真实 permission apply", "不写数据库", "不改变 active" ], "saas_online_impact_simulator_items": [ "在线权限模拟器", "配置变更自动影响计算", "租户级影响预览", "可视化 diff", "审批流自动路由", "自动生成 rollback plan", "API / Webhook 影响预览" ] }, "validation_rules": [ "registry_is_readonly", "json_load_required", "change_object_type_count_must_be_8", "impact_dimension_count_must_be_9", "risk_level_count_must_be_4", "gate_rule_count_must_be_6", "no_database_write", "no_permission_change", "no_permission_expansion", "no_active_template_change", "no_result_change", "no_cadre_validation_change", "no_org_capability_change", "no_org_canvas_constraint_change", "no_people_action_constraint_change", "no_external_writeback" ] }