Repository navigation
Spring AI Business Copilot v2.4.0
Spring AI Business Copilot 2.4.0
2.4.0 is the formal enterprise-readiness release for the five existing closed-loop business modules. It adds a controlled check → remediation → rerun → evidence workflow without introducing a sixth Copilot or a generic workflow platform.
2.4.0 是五个既有业务闭环的企业运行就绪正式版本。本版本增加受控的“检查 → 整改 → 复查 → 留证”流程,不增加第六个 Copilot,也不建设通用工作流平台。
Highlights / 主要改进
- Added model/module configuration prerequisites and operational readiness checks. Missing models or disabled modules return
NOT_CONFIGUREDinstead of a falseREADYstatus. - Added Admin-only remediation routes, server-side reruns, and schema-v2 application evidence snapshots with purpose, actor, validity, retention, bounded history, and an integrity hash.
- Kept readiness evidence content-safe and append-only during retention. The hash is an application integrity check, not a digital signature, compliance WORM, or production acceptance certificate.
- Made Knowledge text, keyword, and vector retrieval fail closed for expired or conflicted documents; propagated managed-source visibility when content is unchanged.
- Enforced one active Knowledge synchronization run per source and added confirmed, conditional recovery for stale runs without allowing late workers to overwrite replacement results.
- Persisted Report and HR review deadlines and onboarding-item due dates, with configurable review SLAs.
- Added Flyway V33 for readiness status/index fixes, synchronization uniqueness and reconciliation, and persisted due-date fields.
Release gates / 发布门禁
- Verified release commit:
3ac747af - Main CI: run 32982095808
- Repository/container security scans, non-root container verification, Vue checks, desktop/mobile Playwright workflows, fixed evaluation gates, Maven/PostgreSQL integration tests, MySQL 5.7/8.4 query-target tests, and CycloneDX SBOM generation passed.
- Internal planning, audit, and local-validation documents are intentionally excluded from the public repository.
Deployment boundary / 部署责任边界
Real chat/embedding providers, vendor tenants, enterprise identity, secret custody, production networking, capacity, backup/restore, legal retention, and vendor acceptance remain deployment-owned gates. A project release is not production or vendor certification.
Full changes: v2.3.1...v2.4.0