[[PROJECT]] [[TITLE_SUFFIX]]

📅 [[DATE]] 🔍 [[AUDIT_MODE]] 🛠 [[REVIEWER]]
📊 评分面板
Security
8.0 A
No auth on WS, hardcoded secret in config
Stability
6.0 B
3 unwrap on hot path, no retry on DB
Performance
10.0 S
No issues found
Testing
4.0 C
9 integration tests real, but unit is weak
Maintainability
7.0 A
3 files over 800 lines, SRP violated in 2 modules
Design
5.0 B
DRY violated 5x, fail-fast missing at API boundary
Release
6.0 B
No CI on Windows, no rollback plan
Overall
6.6 B

📝 总体评估

📋 总体评估

项目概况： [[PROJECT_DESC]]

主要风险： [[TOP_RISKS_SUMMARY]]

亮点： [[STRENGTHS]]

优先修复： [[PRIORITIES]]

总评： [[OVERALL_GRADE_CONTEXT]]

🧭 [[COVERAGE_TITLE]]

[[DIMENSION_COL]][[COVERAGE_COL]][[EVIDENCE_COL]][[LIMITS_COL]]
SecurityHigh[[COVERAGE_EVIDENCE]][[COVERAGE_LIMITS]]
StabilityMedium[[COVERAGE_EVIDENCE]][[COVERAGE_LIMITS]]
6
总发现
2
Medium
3
Low
1
Info

⚠️ [[TOP_RISKS_TITLE]]

#[[FINDING_COL]][[SEVERITY_COL]][[CATEGORY_COL]]
1[[FINDING_TITLE_1]][[SEVERITY_1]][[CATEGORY_1]]
2[[FINDING_TITLE_2]][[SEVERITY_2]][[CATEGORY_2]]
3[[FINDING_TITLE_3]][[SEVERITY_3]][[CATEGORY_3]]

🔍 [[DETAILED_FINDINGS_TITLE]]

[[FINDING_NUM]]. [[FINDING_TITLE]]

[[SEVERITY]] [[CONFIRMED_LABEL]]
📁 [[CATEGORY]] 📍 [[FILE_LOCATION]] 🎯 [[FUNCTION_MODULE]]
[[PROBLEM_LABEL]]：[[PROBLEM_DESC]]
[[EVIDENCE_CODE]]
[[MIN_FIX_LABEL]]
[[MIN_FIX_CODE]]
⏱ [[EFFORT_LABEL]]： [[EFFORT]]  ·  [[REGRESSION_LABEL]]： [[REGRESSION_DESC]]
🧭 [COVERAGE HEADER]

Coverage: High / Medium / Low / Not assessed

Inspected evidence: [files, commands, patterns, runtime surfaces]

Exclusions / limits: [what was not inspected and why]

已确认 · N 个发现
发现严重程度状态
[title]MediumConfirmed
✅ [VERIFIED HEADER]
✓ [practice]
If a dimension has zero findings, just show the verified card. If a dimension is not applicable (e.g., Frontend-State for a pure backend project), skip it entirely. -->

🔒 Security

已确认 · 2 个发现
发现严重程度状态
TOTP 时钟偏差窗口已文档化但未实现MediumConfirmed
SMTP AUTH PLAIN 密码通过 format! 构建LowConfirmed
✅ 已验证安全
✓ Argon2id token 哈希（OWASP 2023 参数）
✓ 常量时间比较（subtle::ConstantTimeEq）
✓ CSPRNG token 生成（getrandom）

⚡ Stability

已确认 · 1 个发现
发现严重程度状态
生产代码 .unwrap() 在 web_assets.rsMediumConfirmed
✅ 已验证稳健
✓ 优雅关闭（CancellationToken + drain + 5s 超时）
✓ Mutex 中毒处理（prune + clear_poison）

🚀 Performance

✅ 无发现
✓ 三层视图缓存（overview/nodes/metrics）
✓ 有界队列（history writer + audit writer）

📋 [[PRINCIPLES_TITLE]]

[[VIOLATIONS_HEADER]]
[[PRINCIPLE_COL]][[COUNT_COL]][[SEVERITY_COL]][[AREA_COL]]
[[PRINCIPLE_NAME]][[VIOLATION_COUNT]][[SEVERITY]][[AREA]]
✅ [[FOLLOWED_HEADER]]
✓ [[PRINCIPLE_NAME]] — [[DESC]]

🎯 [[FIX_ORDER_TITLE]]

⚡ [[IMMEDIATE_LABEL]] [[URGENCY]]
#[[FIX_COL]][[EFFORT_COL]][[RISK_COL]]
1[[FIX_DESC]][[EFFORT]][[RISK_DESC]]
📅 [[SCHEDULE_LABEL]] [[URGENCY]]
#[[FIX_COL]][[EFFORT_COL]]
[[NUM]][[FIX_DESC]][[EFFORT]]

⚡ [[QUICK_WINS_TITLE]]

[[WIN_TITLE]]
[[WIN_META]]
[[WIN_TITLE]]
[[WIN_META]]
[[WIN_TITLE]]
[[WIN_META]]
[[FOOTER_TEXT]]