Spring AI Business Copilot v2.4.1

Spring AI Business Copilot 2.4.1

2.4.1 strengthens the five existing business Copilots with recoverable execution, governed evaluation, clearer evidence, optional enterprise identity, and dependency security updates. It keeps the Data, Knowledge, Support, Report, and Resume/HR modules as the product scope.

2.4.1 加固现有五个业务 Copilot：任务可恢复、评测与 Prompt 可治理、证据口径更清晰，并提供可选企业身份接入及依赖安全更新。产品范围仍为 Data、Knowledge、Support、Report、Resume/HR。

Highlights / 主要改进

• Added an owner-aware task runtime with conditional state transitions, budget reservation, interruption recovery, and user-visible timelines. Report and Knowledge use it in production paths.
• Added a versioned evaluation harness and first-40-scenario gate. Empty or unverified results, failed assertions, model-call budget violations, and cleanup failures block evaluation.
• Added an administrator acceptance evidence view that separates runtime readiness, model quality, vendor acceptance, and release gates. Evidence records are version-scoped and append-only.
• Added optional OIDC identity with issuer/subject actor mapping, application roles, and session expiry handling.
• Kept Data-to-Report metric snapshots and period definitions explicit; comparisons require compatible metric versions and periods.
• Made Chinese the default for nine business Prompt templates and added explicit English variants, while retaining the actual template identity in governance and audit metadata.
• Tightened query cancellation ownership and cumulative AI usage accounting; protected Report publication and Data handoff consumption from replaced workers.
• Updated Bouncy Castle, Netty, Tomcat, and Vitest for dependency security.

Verification / 验证

• PR #23: all six CI jobs passed, including Maven/PostgreSQL, five real-application business flows, MySQL 5.7 and 8.4, dependency review, and container security.
• The same merged commit passed the GitHub main CI run 36205137733.
• Local release-candidate verification: 662 Maven tests, 62 desktop/mobile browser scenarios, 22 real-application browser scenarios, and 67 fixed evaluation cases passed.
• Five-module real-model release smoke passed on an isolated application and PostgreSQL stack; its containers, image, network, and data volume were removed afterward.

Deployment boundary / 部署边界

A production installation still needs its own identity, secrets, network policy, retention settings, model-quality evaluation, and vendor sandbox acceptance. This software release does not certify a particular production deployment.

生产部署仍需由部署方完成身份、密钥、网络策略、数据保留、真实模型质量评测及供应商沙箱验收；软件版本发布不代表任何具体生产环境已验收。

See CHANGELOG.md for the detailed changes.

Spring AI Business Copilot v2.4.0

Spring AI Business Copilot 2.4.0

2.4.0 is the formal enterprise-readiness release for the five existing closed-loop business modules. It adds a controlled check → remediation → rerun → evidence workflow without introducing a sixth Copilot or a generic workflow platform.

2.4.0 是五个既有业务闭环的企业运行就绪正式版本。本版本增加受控的“检查 → 整改 → 复查 → 留证”流程，不增加第六个 Copilot，也不建设通用工作流平台。

Highlights / 主要改进

• Added model/module configuration prerequisites and operational readiness checks. Missing models or disabled modules return NOT_CONFIGURED instead of a false READY status.
• Added Admin-only remediation routes, server-side reruns, and schema-v2 application evidence snapshots with purpose, actor, validity, retention, bounded history, and an integrity hash.
• Kept readiness evidence content-safe and append-only during retention. The hash is an application integrity check, not a digital signature, compliance WORM, or production acceptance certificate.
• Made Knowledge text, keyword, and vector retrieval fail closed for expired or conflicted documents; propagated managed-source visibility when content is unchanged.
• Enforced one active Knowledge synchronization run per source and added confirmed, conditional recovery for stale runs without allowing late workers to overwrite replacement results.
• Persisted Report and HR review deadlines and onboarding-item due dates, with configurable review SLAs.
• Added Flyway V33 for readiness status/index fixes, synchronization uniqueness and reconciliation, and persisted due-date fields.

Release gates / 发布门禁

• Verified release commit: 3ac747af
• Main CI: run 32982095808
• Repository/container security scans, non-root container verification, Vue checks, desktop/mobile Playwright workflows, fixed evaluation gates, Maven/PostgreSQL integration tests, MySQL 5.7/8.4 query-target tests, and CycloneDX SBOM generation passed.
• Internal planning, audit, and local-validation documents are intentionally excluded from the public repository.

Deployment boundary / 部署责任边界

Real chat/embedding providers, vendor tenants, enterprise identity, secret custody, production networking, capacity, backup/restore, legal retention, and vendor acceptance remain deployment-owned gates. A project release is not production or vendor certification.

Full changes: v2.3.1...v2.4.0

Spring AI Business Copilot v2.3.1

Spring AI Business Copilot 2.3.1

2.3.1 is the formal enterprise maintenance release for the five closed-loop
business modules. It strengthens complete Notion ingestion, vendor connector contracts,
HR reviewer boundaries, and continuous dependency/container security without adding a
new module or database migration.

2.3.1 是五大企业业务闭环的正式维护版本。本版本不增加第六个模块或数据库迁移，
重点补强 Notion 完整遍历、外部厂商连接契约、HR 复核权限边界以及持续依赖与容器安全。

Highlights / 主要改进

• Updated Notion to API version 2026-03-11, paginated search and block children,
  recursively retrieved nested content, and failed closed on missing/repeated cursors or
  page, item, depth, response-size, and timeout budget violations.
• Preserved headings, lists, tasks, quotes, code, equations, dividers, child pages,
  child databases, and table rows when normalizing bounded Notion Markdown.
• Added executable HTTP contracts for Notion, SharePoint, Confluence, Jira Service
  Management, Zendesk, ServiceNow, Feishu, and WeCom.
• Prevented HR reviewers from loading unrelated confirmed-job data during candidate
  review, including desktop and mobile regression coverage.
• Added weekly Dependabot maintenance for Maven, npm, GitHub Actions, and Docker, plus
  scheduled/manual Trivy repository and release-container scans.
• Upgraded the enforced nanoid dependency to 3.3.18, resolving
  CVE-2026-67213.

Release gates / 发布门禁

• Pull request: #13
• Verified main commit: ef325ecc
• PR CI: run 31894045859
• Main CI: run 31894245295
• Vue TypeScript, ESLint, unit tests, production build, and 42/42 desktop/mobile
  Playwright workflows passed.
• Maven verify -Psbom passed across all 13 Reactor modules; all 67 fixed evaluation
  samples, PostgreSQL/Flyway V1-V31, and MySQL 5.7/8.4 gates passed.
• Dependency review, source/container Trivy, non-root container, Compose runtime,
  authentication/CSRF smoke, and CycloneDX SBOM gates passed.

Upgrade / 升级

Read docs/upgrade-2.3.0-to-2.3.1.md
before upgrading. This is an in-place maintenance upgrade with no Flyway migration delta.

Deployment boundary / 部署责任边界

Real model providers and enterprise Notion, SharePoint, Confluence, Jira, Zendesk,
ServiceNow, Feishu, WeCom, identity, secret custody, production capacity, backup/restore,
and legal-retention acceptance remain deployment-owned gates.

Full changes: v2.3.0...v2.3.1

Spring AI Business Copilot v2.3.0

Spring AI Business Copilot 2.3.0

2.3.0 is the formal enterprise-workflow release. It closes the existing Data,
Knowledge, Support, Report, and HR business loops with governed state, human review,
audit evidence, recoverable failure paths, and reproducible delivery gates.

2.3.0 是正式企业闭环版本。本版本不增加第六个模块，而是把 Data、Knowledge、
Support、Report、HR 五个现有模块收口为具备治理状态、人工复核、审计证据、失败恢复和
可复现交付门禁的业务样板。

Highlights / 主要能力

• Replaced the legacy workbench with a bilingual Vue 3 + TypeScript SPA for all five
  business domains, login, and administration, with role-aware callable actions.
• Data adds immutable governance versions, four-eyes approval, bounded read-only
  execution, retained result snapshots, and atomic handoff to Report.
• Knowledge adds fail-closed ACL/source access and structured evidence, answer,
  remediation, and disposition quality review.
• Support adds idempotent external import, token-bound human review, expired-session
  renewal, separately confirmed external writeback, and evidence-based recovery from
  unknown external outcomes. Internal confirmation never sends a customer message.
• Report adds repeatable-source validation, Data handoff consumption, schedule leases,
  stale-run recovery, run history, and reviewable drafts that are never auto-published.
• HR adds purpose-bound consent, assessment review queues, interview membership and
  feedback, onboarding instances/tasks, and a read-only ATS boundary without scoring,
  ranking, or automated hiring decisions.
• Flyway V29-V31, fail-closed external HTTP policy, structured errors, auto-configuration
  contracts, CycloneDX SBOM, and a non-root runtime image complete the delivery surface.

Release gates / 发布门禁

• Pull request: #12
• Verified main commit: fe60bd4c
• Main CI: run 31715748768
• Vue TypeScript, ESLint, 5 files / 9 unit tests, and production build passed.
• Desktop 21/21 and mobile 21/21 Playwright workflows passed (42/42 total).
• Maven verify -Psbom passed across 13 Reactor modules; PostgreSQL migrations and
  integration tests, MySQL 5.7/8.4 query targets, and all 67 fixed evaluation samples passed.
• Dependency review, repository Trivy, release-container Trivy, non-root 10001:10001,
  Compose runtime, authentication/CSRF smoke, and CycloneDX SBOM gates passed.

Upgrade / 升级

Read docs/upgrade-2.2.1-to-2.3.0.md
before upgrading. Back up the database before Flyway V29-V31; rollback uses the previous
application together with a database backup rather than deleting applied migrations.

Deployment boundary / 部署责任边界

Real model providers, Jira/Notion/ServiceNow/ATS tenants, enterprise identity sources,
secret custody, production networking, backup/restore drills, capacity testing, and legal
retention policy remain deployment-owned acceptance items. The project provides closed,
auditable, human-confirmed paths but does not claim simulated vendor tests as production proof.

Full changes: v2.2.1...v2.3.0

Spring AI Business Copilot v2.2.1

[2.2.1] - 2026-07-29

Changed

• Refreshed the bilingual README and runnable-application visuals for the 2.2.1 release.
• Removed internal planning, audit, architecture-decision, release-process, and local visual-generation files from the public repository.

Security

• Upgraded Bouncy Castle to 1.84 to remediate CVE-2026-0636 while retaining the earlier CVE-2025-14813 fix.

Spring AI Business Copilot v2.2.0

[2.2.0] - 2026-07-29

Added

• Completed the 2.2.0 enterprise quality loop with stable Knowledge answer IDs, owner-bound idempotent helpful/not-helpful feedback, and an Admin/Reviewer quality review queue.
• Added Flyway V22 for constrained Knowledge answer feedback and workbench controls that keep users in the current answer flow with an explicit reviewer next step.
• Added Flyway V23, concurrency-safe Knowledge quality dispositions, automatic re-queue after newer feedback, and low-cardinality quality metrics.
• Added Flyway V24-V28 and enterprise APIs for Data governance/export/Report handoff, Knowledge source sync, Support ticket/SLA/writeback integration, Report schedules/office exports, and HR consent/interview/ATS/onboarding collaboration.
• Added bounded XLSX/HTML extraction, mounted-drive and S3/MinIO sources, and REST adapters for SharePoint, Confluence, Notion, Jira Service Management, Zendesk, ServiceNow, Feishu, WeCom, and common ATS providers.
• Added environment-reference-only external credentials, configurable Data query-plan row budgets, active JDBC cancellation, and private Admin enterprise status counts.
• Added fixed low-cardinality AI call metrics, call IDs, operation tags, and Chinese request-to-model chain logs across all five Copilots.
• Added bounded AI concurrency, separate Chat/Embedding circuit breakers, explicit provider timeouts, and restricted transient-failure retries.
• Expanded the five fixed evaluation datasets to 67 cases and added a CI dataset-size gate, including end-to-end Data SQL safety cases.
• Added authenticated capacity smoke testing, non-overwriting PostgreSQL backups, and disposable-container restore drills.

Fixed

• Extended Resume protected-attribute detection to reject Chinese gender and marital-status requirements and common English age or gender restrictions.
• Masked external Support ticket messages before persistence and made Data query-cost previews fail closed when database estimates cannot be recognized.
• Kept Support knowledge retrieval inside the authenticated ACL boundary while falling back across document categories when a category-specific lookup has no evidence.
• Made HR job drafts preserve recruiter-provided required and preferred qualifications deterministically and reject model-added qualifications.
• Corrected immutable AI property binding and made Admin diagnostics distinguish provider-omitted token usage from zero usage.

Changed

• Updated both README files, the six-frame workbench GIF, the social preview, and the 2.2 enterprise diagnostics screenshot from a running local application.
• Added five-module enterprise scenario tests plus real PostgreSQL constraint coverage for Data, Knowledge, Support, Report, and HR boundaries.

Security

• Bound Knowledge feedback to the authenticated creator of the persisted answer audit and restricted the cross-user quality queue to Admin/Reviewer roles.
• Masked phone numbers, email addresses, ID cards, and credential assignments in feedback comments and reviewer notes before persistence.
• Restricted Actuator metrics to Admin and Reviewer roles and kept user input, Prompt text, and file names out of metric labels and AI operation logs.
• Upgraded the MinIO Java client to 8.6.0 for CVE-2025-59952, pinned Bouncy Castle 1.81.1 for CVE-2025-14813, and selected OkHttp JVM 5.1.0 explicitly for Maven runtime compatibility.

Spring AI Business Copilot 2.0

Spring AI Business Copilot 2.0 turns five runnable demos into trusted, diagnosable business workflows.

What you can run

• Data Copilot: read-only Text-to-SQL with schema/table/column allowlists, bounded queries, confirmation, and audit.
• Knowledge Copilot: versioned document ingestion, durable indexing, hybrid retrieval, and exact citations.
• Support Copilot: ticket classification, knowledge-backed suggestions, editable drafts, and human handoff for high-risk cases.
• Report Copilot: immutable source snapshots, grounded report drafts, and deterministic Markdown/HTML export.
• Resume Copilot: versioned JD criteria, sanitized document review, evidence gaps, Chinese interview questions, and deletion controls.

Trust boundaries

Typed model output, deterministic guardrails, actor-bound confirmation, lifecycle state, evidence IDs, audit metadata, a dedicated read-only business datasource, and fictional sample data.

Run it

git clone https://github.com/qcodingdev/spring-ai-business-copilot.git
cd spring-ai-business-copilot/examples
cp .env.example .env
docker compose up --build

Open http://localhost:8080 and use admin / admin-change-me. Add chat and embedding settings in examples/.env to run AI workflows.

See the English README or 中文说明 for screenshots, architecture, security boundaries, and module guides.

Spring AI Business Copilot v1.0.0

Spring AI Business Copilot v1.0.0

The first stable open-source release of Spring AI Business Copilot: five ready-to-run Java AI business applications built with Java 21, Spring Boot 4.1, and Spring AI 2.0.

Included Copilots

• Data Copilot: confirmed, read-only Text to SQL queries with masking and audit logs.
• Knowledge Copilot: document ingestion, vector retrieval, mandatory citations, and no-evidence refusal.
• Support Copilot: ticket classification, evidence-grounded reply drafts, and human confirmation.
• Report Copilot: source-grounded weekly reports, review states, and Markdown export.
• Resume Copilot: privacy-first resume evidence review without scoring, ranking, or hiring decisions.

Engineering Highlights

• PostgreSQL 16, pgvector, Flyway, MyBatis-Plus, and JDBC.
• Centralized prompt templates and typed Spring AI outputs.
• Deterministic SQL, citation, support, report, privacy, evidence, and hiring guardrails.
• Single-use confirmation tokens and explicit human review for risky actions.
• Docker Compose quick start, fictional sample data, and one unified web workbench.
• English and Simplified Chinese project and module documentation.

Quick Start

cd examples
cp .env.example .env
docker compose up --build

Open http://localhost:8080. Chat and embedding models are disabled by default; configure the corresponding endpoints, model names, and API keys in .env to enable AI workflows.

Verification

• Full Maven reactor build passed.
• 227 automated tests passed.
• Executable Spring Boot 4.1 JAR verified.
• Docker Compose configuration and desktop/mobile workbench layouts verified.

Notes

This repository is a reference application for learning, evaluation, and adaptation. Production deployments still need organization-specific authentication, authorization, secret management, rate limiting, monitoring, retention, and compliance controls.

• Changelog
• Gitee mirror