[LIghtJUNction]

公开主体读取路径原先在检查 OperationSpec.effect 前探测托管或解析主体；公钥、成就和消息别名还缺少显式读取效果检查。现在由纯路径选择器统一选择操作，入口在任何业务查询前拒绝 transaction/external，执行复用相同选择；保留外层真实运行时新鲜度检查、公开历史别名及已有授权规则。

回归先行：测试提交 067ae850 在云端 36631798397 得到 4 个预期失败、28 个通过，GET/HEAD 的 /@root/orders 在效果拒绝前触发托管探测而返回500。JUnit与source.json绑定 tree ff8ebe60、Python3.15.0rc2，artifact11062394801 SHA256 f14ff2cca135da13e4158290af8168de35b4ab6ee8372cc484bfc82e89622b0f 已下载核验。

修复提交 2d5047aa 扩展独立公开URL清单为61种主体路径，加上组织资源、原授权/缓存/托管正向控制。完整严格质量、核心/一致性分片、协议专题与可安装部署包验收正在运行；全部通过后补准确结果。

Refs #64, #78, #81, #83, #85。没有生产变更。

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
🔒 Security Review	✅ Completed 2026-09-29T21:28:17.685423Z	2d5047a	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[LIghtJUNction]

最终头 2d5047aa79d3e6bc20b216ef8dd20e05ef174dac 已核验。测试 merge e6c535ce43a8475644d3c97ff7551ecd2e783715 tree e1d65b624266527bef5f66d2843fa1a40c4ddc5f 与本地 head tree 完全相同。

完整 Rewrite contracts 36632579472 success；八份 ZIP 已下载逐一比对 GitHub SHA256，manifest/JUnit 真实 node-ID 完整互斥并集为 2541 core + 8 conformance，零失败/错误/跳过。严格质量 36632578929 的 ZIP 摘要已核验，Ruff JSON 零诊断、stderr 为空、format/compile通过。

Deployment rehearsal 36632578807 success，已下载核验 SHA256 9fe23017895000c9102120960d1e90db80ecf9fb4c626ab9ec79a32b926d8f6f。安装包真实启动/重启、四传输零业务状态变化、doctor、禁外发worker、真实OpenSSH/Git撤权和42项正式隔离selftest均通过。wheel SHA256 6e6efbbde8a1b2e4363a721192188526477b280e1d0a17773a24919f8dc8a788，sdist 197961240e17cf9b406542d2c89763b1c76e3e2e33371ebd9dcb6ed3af5b1a03，与核心构建产物逐字节一致。

所有适用工作流已有success。Integration/Subject的PR运行被同分支push取消，但对应同head push运行36632676024/36632676523通过；取消不算通过。已读取全部diff和review threads（空）；Copilot配额不足不是外部批准。生产及总体issue条款仍单独验收。