feat(harness): add readonly mysql tool

2026-07-21 21:24:42 +08:00
parent 3e602781d6
commit 85029d96a7
31 changed files with 1896 additions and 53 deletions
@@ -0,0 +1,26 @@
+# Acceptance: single-react-mysql-readonly-tool
+
+## Commit preflight
+
+- OpenSpec strict validation: passed.
+- Scope: fail-closed SQL validator, exact allowlist, JDBC read-only executor, bounded MySQL projection, ToolBoundary adapter and query-script safety cleanup.
+- Non-goals: public Agent/Chat cutover, metadata discovery, Agent persistence database access, dynamic/tenant authorization and live production datasource provisioning.
+- Security prerequisite: script write branch/default external connection values are explicitly included in this change.
+
+## Apply acceptance
+
+- Implemented and verified.
+- Static, Maven and script evidence is recorded in `evidence.md`.
+- No browser/manual verification applies; this stage adds no UI or public protocol change.
+- Residual risk is limited to later live datasource provisioning/driver behavior and stage 4 integration.
+
+## Archive acceptance
+
+- All OpenSpec tasks are complete.
+- `.archive-ready` marker is created after focused verification.
+- OpenSpec is ready to move to the dated archive directory.
+- Archive completed at `openspec/changes/archive/2026-07-21-single-react-mysql-readonly-tool`.
+
+## Remaining work
+
+- Stage 4 Diagnosis Agent integration and later live datasource/driver E2E remain outside this archive.