Skip to content

Spring AI Business Copilot v2.4.0

Choose a tag to compare

@qcodingdev qcodingdev released this 26 Aug 14:48
· 13 commits to main since this release

Spring AI Business Copilot 2.4.0

2.4.0 is the formal enterprise-readiness release for the five existing closed-loop business modules. It adds a controlled check → remediation → rerun → evidence workflow without introducing a sixth Copilot or a generic workflow platform.

2.4.0 是五个既有业务闭环的企业运行就绪正式版本。本版本增加受控的“检查 → 整改 → 复查 → 留证”流程,不增加第六个 Copilot,也不建设通用工作流平台。

Highlights / 主要改进

  • Added model/module configuration prerequisites and operational readiness checks. Missing models or disabled modules return NOT_CONFIGURED instead of a false READY status.
  • Added Admin-only remediation routes, server-side reruns, and schema-v2 application evidence snapshots with purpose, actor, validity, retention, bounded history, and an integrity hash.
  • Kept readiness evidence content-safe and append-only during retention. The hash is an application integrity check, not a digital signature, compliance WORM, or production acceptance certificate.
  • Made Knowledge text, keyword, and vector retrieval fail closed for expired or conflicted documents; propagated managed-source visibility when content is unchanged.
  • Enforced one active Knowledge synchronization run per source and added confirmed, conditional recovery for stale runs without allowing late workers to overwrite replacement results.
  • Persisted Report and HR review deadlines and onboarding-item due dates, with configurable review SLAs.
  • Added Flyway V33 for readiness status/index fixes, synchronization uniqueness and reconciliation, and persisted due-date fields.

Release gates / 发布门禁

  • Verified release commit: 3ac747af
  • Main CI: run 32982095808
  • Repository/container security scans, non-root container verification, Vue checks, desktop/mobile Playwright workflows, fixed evaluation gates, Maven/PostgreSQL integration tests, MySQL 5.7/8.4 query-target tests, and CycloneDX SBOM generation passed.
  • Internal planning, audit, and local-validation documents are intentionally excluded from the public repository.

Deployment boundary / 部署责任边界

Real chat/embedding providers, vendor tenants, enterprise identity, secret custody, production networking, capacity, backup/restore, legal retention, and vendor acceptance remain deployment-owned gates. A project release is not production or vendor certification.

Full changes: v2.3.1...v2.4.0