CHANGELOG.md

Rama main · réplica de lectura del repositorio original.

# Changelog

## [Unreleased]

### Features

* **backend:** 任务幂等去重——同镜头已存在活跃任务（pending/processing）时重复提交返回既有任务，前端重复点击/重放不再产生重复推理与重复资产
* **backend:** 外部依赖容错——vllm-omni 端点/超时/重试次数参数化（MMH3_VLLM_OMNI_*），传输层失败有限重试 + 指数退避 + 抖动（业务层失败不重试，避免二次昂贵推理），推理前存活探测快速失败并给可操作指引；队列重试退避替代固定 sleep(1)
* **observability:** 请求级追踪——request_id 中间件（响应头 X-Request-ID + 访问日志，消息内嵌 request_id 与既有 task_id 风格一致），文件日志改 JSON 结构化（time/level/logger/message + request_id/task_id），控制台保持人读格式
* **health:** /api/health 增加依赖存活探测（dependency 字段，对激活引擎短超时主动探测，探测失败不影响应用自身健康）与孤儿推理线程计数（orphan_inference_count）
* **backend:** 超时孤儿线程治理——推理超时孤儿计入运行时计数，新任务 fail-fast 拒绝启动并提示重启回收（startup resume 兜底），替代静默 GPU 争用

### Bug Fixes

* **uploads:** 上传路由改同步执行 + 流式分块落盘——消除事件循环内 ffprobe/整文件读写的阻塞（此前单次上传最多阻塞事件循环 15s 且 200MB 级文件双份内存）
* **generations:** aspect/resolution 参数 API 白名单校验（422 拒绝非法比例/档位，兼容 768P/2K 旧别名）——替代原先静默兜底 16:9/默认档的假成功
* **config:** ComfyUI HTTP 超时/输入输出目录、checkpoint 目录与频率全部并入 Settings 与 .env.example，删除模块内 env 直读

### AI/ML 工程（第二轮评估 2026-10-11）

* **backend:** 结果资产配额清理（cleanup.enforce_result_quota）——启动时按 created_at 保留最近 N 个 result 资产，超出裁剪最旧（解除引用 + 删文件含缩略图 + 删 DB 行）；仅作用 result 不动用户上传参考素材；`MAX_RESULT_ASSETS=200`（MMH3_MAX_RESULT_ASSETS 可覆盖）
* **backend:** seed 兜底确定性化——payload 无 seed 时由任务 ID 哈希派生 uint32（_deterministic_seed），同任务断点续跑/重放复用同一 seed，替代原 time-based 漂移（显式 seed 仍优先）
* **backend:** 参数契约版本化——h3.spec 新增 `SPEC_VERSION="1.0.0"` 与变更规则/修订记录，与 database.SCHEMA_VERSION 互补（前者管参数契约、后者管存储结构）
* **backend:** 契约/部署事实源对齐——spec.MODELS 注释文档化多变体容错（clip awq 契约名 vs abliterated 部署变体），model/README.md 新增《契约对照》表
* **docs:** 新增 EVAL.md（质量评估集/主观留档规范）与 PROMPT_GOVERNANCE.md（提示词引导治理）
* **ci:** gpu-smoke.yml 真实推理冒烟后新增 golden compare 结构基线门禁（时长/帧率/分辨率/采样帧哈希，退出码 0/1/2 语义）
* **docs:** model/README.md 新增《权重完整性校验》段——verify_model_hashes.py 用法与状态记录（工具已入库、真实基线待权重就位 --generate）

## [2.6.0](https://github.com/ReSerendipity/MiniMax-H3-lite/compare/v2.5.1...v2.6.0) (2026-10-05)


### Features

* **desktop:** 新增 Tauri v2 桌面壳（MMH3Workbench）——壳以子进程拉起 FastAPI 后端（空闲端口注入 + /api/health 轮询 + 就绪导航），watchdog 自动重启，退出回收进程树；解释器解析链对齐 start.bat/clean_launch（runtime → MMH3_DESKTOP_PYTHON → .venv → WinPython → 兄弟项目 → 系统 CUDA Python）；模型缺失非阻断引导（MODEL_SETUP_GUIDE.md）
* **desktop:** 桌面发版打包链——staging 扁平布局组装（git archive + comfy_kernel 磁盘复制）、7z -v1900M 数据分卷 + SHA256SUMS、NSIS 向导安装器（currentUser 免管、安装前告知、卸载保留数据分支）；安装包不含模型，用户按指引从魔搭下载官方权重
* **ui:** 状态栏新增可见版本位（v{{app_version}}，与 package.json 单一事实源同源注入），补齐发版阶段 1 的「页面版本号=目标版本」断言依据


## [2.5.1](https://github.com/ReSerendipity/MiniMax-H3-lite/compare/v2.5.0...v2.5.1) (2026-09-26)


### CI/CD

* **ci:** SAST 的 upload-sarif 补 `security-events: write`——缺它时该步长期以 `##[error]Resource not accessible by integration` 失败却被 `continue-on-error` 咽掉；摘兜底后按日志（非步骤色）证实 main 上真跑通 ([#72](https://github.com/ReSerendipity/MiniMax-H3-lite/issues/72)) ([689dc8c](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/689dc8c6c514bc34bca5c658c4bb185bc8c5aeb1))
* **ci:** 必经路径 job 钉 `ubuntu-24.04`（2026-10-19 起 `ubuntu-latest` 改指 Ubuntu 26）；`python-test` 拆 os/label 并显式声明 `name:` 冻结 check 名，防必需 context 漂移 ([#73](https://github.com/ReSerendipity/MiniMax-H3-lite/issues/73)) ([bbdc39f](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/bbdc39f66b9d9792830a16ea1644d7311655e45d))
* **ci:** 补上 bbe6996 承诺却从未存在的 `release.yml`——人工 tag 驱动、`workflow_dispatch` 恒 dry-run、产 tar.gz/zip/SHA256SUMS/SHA256SUMS.scripts 四件套终结零资产 Release 形状；同 PR 统一 gpg 尾巴「无资产即跳过」降级口径，并把 docker 发布门禁内部 600 秒硬超时提到 1800 秒 ([#74](https://github.com/ReSerendipity/MiniMax-H3-lite/issues/74)) ([e862bdc](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/e862bdcc9bf5326c89756738c2889e6ea60b97c9))


## [2.5.0](https://github.com/ReSerendipity/MiniMax-H3-lite/compare/v2.4.1...v2.5.0) (2026-09-15)


### Features

* **ci:** docker 发布门禁五步实测（Docker 引擎本机受阻的替代执行域） ([385104e](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/385104ea0bb05279fe2efa414989d65282d39c21))
* **integrity:** R10 代码完整性防线 + 水印失败三档策略 + 发布门禁 ([75df382](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/75df38282120e25022002c6674d7de9c54b2cc3e))
* **integrity:** R10 代码完整性防线——核心模块清单 + Ed25519 签名 + 启动自检 enforce ([75a4b42](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/75a4b420cf6b0fd2c7bcee3d8039caccc7e3b861))
* **scripts:** 完整性工具链——密钥生成/清单生成/签名/诊断/发布门禁 ([642ccf8](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/642ccf85ff658d2df087ba3fde6f1bc17e442b28))
* **security+guard:** vendored 内核漂移基线、compose 挂载门禁与家族根目录守卫 ([646a788](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/646a788bfc5cc97f79fcc50ef14100e62f649f49))
* **security+guard:** vendored 内核漂移基线、compose 挂载门禁与家族根目录守卫 ([02f4d87](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/02f4d87c357486272f38bf028935b6d6926481fb))
* **watermark:** 签名启用时水印失败三档策略（重试→侧车→block），无 fail-open ([f2e5e0e](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/f2e5e0ed5e33fda08dfdfaadb2ae8783378a53b9))


### Bug Fixes

* **deps:** requirements-lock 的 pydantic-core 对齐 2.46.5（pydantic 2.13.5 精确依赖该版本；[#25](https://github.com/ReSerendipity/MiniMax-H3-lite/issues/25) 分组升级将 core 抬到 2.49.0 造成锁内不一致，pip 解析 ResolutionImpossible） ([#32](https://github.com/ReSerendipity/MiniMax-H3-lite/issues/32)) ([e6f6789](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/e6f6789f75ec086740162f1f011577d03f23b241))
* **test:** D8 回归测试跨平台编码修复 —— 显式 UTF-8 解码子进程输出 ([fb2be37](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/fb2be3754c5c8671a1340e41750cee77d6d406a9))


### Documentation

* **adr:** 标注 check_comfy_kernel.py 自 38e0177 起退役，守卫职责移交基线脚本 ([48cb612](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/48cb6128deedd45a47304156536bdebc9be76e2e))
* **compliance:** GPL 合规说明随主线进 main（自 cloud-native-remediation 41dd4f4 带入） ([359e03c](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/359e03cebe3b382d4616c1126c7cd244440f3ce2))
* **security:** SECURITY.md 新增 R10 防线与三档策略指针；CI 完整性断言；镜像排除基线 ([aa8ece1](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/aa8ece17b221ba5b69c468cbb5d4ddcb5cd39a28))


### CI/CD

* add auto-merge workflow (Dependabot non-major + automerge label) ([#22](https://github.com/ReSerendipity/MiniMax-H3-lite/issues/22)) ([907c642](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/907c64273606f64c94777f44834c51329460b14e))
* add codeql analysis ([f864865](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/f864865fb14a655aa3222b37d0089cdafe40dbce))
* **automerge:** fetch-metadata 跳过 commit 签名校验（本地变基分支无法携带 dependabot 签名，PR 作者已在 if 门禁校验） ([#24](https://github.com/ReSerendipity/MiniMax-H3-lite/issues/24)) ([9903a07](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/9903a07aea3cbbc7ef2d10b14ac0b2845e110004))
* fix self-purify wiring (continue-on-error must live in reusable job) ([405744b](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/405744ba65e5b772de2a8fed0f48c060c659b770))
* **test:** 新增依赖锁一致性门禁（防 Dependabot 分组升级破坏 lock） ([#33](https://github.com/ReSerendipity/MiniMax-H3-lite/issues/33)) ([ac773eb](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/ac773ebc2af5a41b7043bc75da44dda071f8f5c6))
* 收敛 Dependabot 的 PR 数量与 Actions 算力开销 ([#23](https://github.com/ReSerendipity/MiniMax-H3-lite/issues/23)) ([21dcdd1](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/21dcdd171813d7f245b3a6722289d1ba52ee4850))

## [2.4.1](https://github.com/ReSerendipity/MiniMax-H3-lite/compare/v2.4.0...v2.4.1) (2026-09-08)


### CI/CD

* **trivy:** 移除 GHA 层缓存，安全门禁改冷构建 ([#4](https://github.com/ReSerendipity/MiniMax-H3-lite/issues/4)) ([8607c10](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/8607c104de2d5394bc37214aaf802c9beaa465bc))


## [2.4.0](https://github.com/ReSerendipity/MiniMax-H3-lite/compare/v2.3.1...v2.4.0) (2026-09-06)


### Features

* **B1:** vllm-omni 引擎注册 + 推理分发 (默认仍 comfy, 待 5070Ti recipe 验证) ([0817248](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/08172481727fc9422008616d463ec4beab0629c6))
* **bench:** 性能基准留档 —— 全局 autosave + 每周基准 workflow（P2-⑥） ([f7687a5](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/f7687a54befe45eca512675aff1998959fe261c7))
* **db:** SQLite schema 版本管理（PRAGMA user_version）+ 修测试 DB 隔离缺陷 ([f904302](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/f9043023c4ccd452b585a425a10d39a7e4bbd1b8))
* **dx:** smoke_real.py --env-only 环境快照入口（DX 报告 P2） ([7123230](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/7123230333976678b8e8700be59cc254116f9814))
* **e2e:** Playwright E2E 配置落地 + 业务前端脚本纳入 eslint ([b64643e](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/b64643e5d84026d983f87ed520509c39586a316e))
* **inference:** seed 血缘机制——提交侧生成/校验落库 + 推理侧回写（MLOps P1 可复现性） ([e962e54](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/e962e54c164b76bf44d65cbe69b386ec8e3ed09b))
* **ops:** Docker 构建/钉版/扫描 (trivy+docker-scan) + gpu-smoke CI + 清理脚本容器化 ([94df7d5](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/94df7d52622097b1e2d401d8d1b6131969fd4980))
* **ops:** 数据备份脚本落地 + 忽略规则（运维稳定性 T4） ([afc5a17](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/afc5a17555fa05bf5544ce5907880dc7addf2a1f))
* **ops:** 日志落盘 + 健康探针补模型就绪/队列深度（运维稳定性 T1/T2） ([69063ae](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/69063ae86a2c6eabe7dd35565350e2dbd4583825))
* **security:** 许可合规最小自检——启动横幅 + 部署前强制确认 ([d542bac](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/d542bac824e921e10da7950e5e18c09215d4fe31))
* **version:** 版本口径收敛到 release-please manifest 单一事实来源 ([1363cf4](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/1363cf48fc6933fec95929f01a11136213a077fc))


### Bug Fixes

* **ci:** comfy_kernel 棘轮断言按内核存在性分级执行（修 Test & Quality 红） ([70a2964](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/70a296400be29005cf905973bc648b09ce91689c))
* **ci:** DCO check via self-contained bash (dcoapp/dco is a GitHub App, not an Action) ([649adea](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/649adea71fff04f462fb209d1e6a623835115618))
* **ci:** frontend-smoke 轻量依赖补 python-multipart ([dbd1e73](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/dbd1e73f3214aac0f01380414919af0d429f716b))
* **ci:** HEALTHCHECK 旗标 --start_period → --start-period；sast_gate 修 check_id 取值层级 ([b91760a](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/b91760abfac15ff7355483298809da1f6d36c21b))
* **ci:** trivy 扫描超时放宽 5m → 20m ([ce13cae](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/ce13caef7ffaf9965b73f020f00c02b099839047))
* **ci:** trivy-action 升级 v0.36.0，绕开上游 setup-trivy@v0.2.1 标签消失 ([300e46f](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/300e46f057e0fac1443e922a95f5c5f56e886156))
* **ci:** trivy-action 引用补 v 前缀（0.28.0 → v0.28.0） ([5910dfc](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/5910dfc80a679a3d4e91fe0619c8fad634bf10a0))
* **docker:** apt-get upgrade 清偿基础镜像 OS 包 CVE（libpcre2-8-0 10.42-1 未打补丁 5 项） ([ddadea1](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/ddadea187b478ab8fc36909504c00fe51352794e))
* **docker:** LABEL 移入 FROM 之后的 stage，修 "no build stage in current context" ([dbb60c2](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/dbb60c2b2aaa9b97b62a7f60652deb41a5f4ad63))
* **docker:** setuptools/msgpack 安全升级移至 requirements 之后（修 Trivy gate 复拦） ([b98ca79](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/b98ca7921f745c44afb4a15ced00b1e8bd06409d))
* **docker:** whiteout 清除下层幽灵 dist-info 后重装 setuptools/msgpack ([5a47246](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/5a47246127e4cb6b666ed1cb96bbb8138b83b3df))
* **docker:** 升级 pip 修 CVE-2026-8643（Trivy gate 首拦的唯一 HIGH） ([1977b00](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/1977b00013dca8ada70c22941b09662bf3752d6d))
* **docker:** 升级 setuptools/msgpack 修剩余两项 HIGH（Trivy gate 迭代二轮） ([7fea4d2](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/7fea4d2add183e59f50790a56ab1312756cf22eb))
* **ops:** 默认推理路径超时强制 + 删除 TASK_TIMEOUT 死配置（运维稳定性 T6） ([f9196b3](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/f9196b3fa1b70e14276d7b1f7cf5a914742f73e0))
* **sast:** database.py PRAGMA 定向 nosemgrep（gate 修正后打出真实 rule ID） ([1d21c87](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/1d21c87afe384065a12d266ec4eef7243cb51f47))
* **sast:** 清偿 gate 首拦的 3 项 ERROR，回归基线口径（1 = shots.py 存量已接受） ([839d1f9](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/839d1f976262f84498667a8893c9da3fc3c60edd))
* **security:** 幽灵门禁扩面至全部 Settings 字段，修 env 提取器三盲区 ([bcfde3e](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/bcfde3e8254d4da684ac03fe5fc297d51b089979))
* **test:** seed 血缘测试注入 fake torch，消除对真实 torch 的隐性依赖 ([c521c5d](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/c521c5dddfc9f8e18fa6b56d068926bdf66b8afd))
* **trivy:** skip pip vendor SBOM——门禁幽灵旧版真凶实锤 ([8584da8](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/8584da87c02bda891fd9d1e8cf876db814a1505c))
* 修复默认项目名不一致与 UI 改版遗留的失配缺陷 ([f28d095](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/f28d095cd5c4c1c377fd2d44cf210a7ad00f141f))
* 清理 42 处 flake8 违规（F401/F841/E/W）+ 补 eslint flat 最小配置使本地门禁可运行 ([ead4e63](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/ead4e638790611762cf18fe4bfc4f7f20f632213))
* 清理 42 处 flake8 违规（F401/F841/E/W）+ 补 eslint flat 最小配置使本地门禁可运行 ([c6a90fa](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/c6a90fa23d610cd2d8462a3c43e4e3ff9de0b378))


### Documentation

* **adr:** 索引登记 ADR-0004 发布版本治理（manifest 单一版本源） ([3f68712](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/3f6871272b4c4500de18e05cb167e958c97eb81c))
* **agents:** 家族规范审计 Phase A+B — 测试目录校正、协议 v1.7、CI 一致性 ([a35af1f](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/a35af1ff0d29f6581eced535752753e906c283b4))
* **agents:** 家族规范审计 Phase A+B — 测试目录校正、协议 v1.7、CI 一致性 ([89308b2](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/89308b298a830cb307a6c483413229c1ec783c04))
* CONTRIBUTING 脱敏后入库(对外协作指南) ([c189cd7](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/c189cd796c06873271b3389e7b659b7b87496a14))
* CONTRIBUTING 脱敏后入库(对外协作指南) ([a504489](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/a504489e8014482fdee4aa219044733954571004))
* **governance:** 家族规范治理 Phase C/D/E 落地 — 一致性、补齐与账本 ([e862664](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/e862664edfd263bc8ad25ca801d0af19a4460544))
* **governance:** 家族规范治理 Phase C/D/E 落地 — 一致性、补齐与账本 ([ec4e387](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/ec4e387327f267394eeb4d60ec1e926a686a5fe7))
* **README:** 标注真实推理已跑通 + 补充 .venv，新增六大项目文档整理核对 ([04eb03a](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/04eb03a972c544d086c71df3aaa2bb02efd02666))
* **README:** 标注真实推理已跑通 + 补充 .venv，新增六大项目文档整理核对 ([2c14a08](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/2c14a0899aec94bf9e2b8f94af8d83e41f615c60))
* **README:** 结构树补充 comfy_kernel 与 model 目录 ([8581106](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/8581106a71acd6c7bc98ee4c32641b3aaaeafb8a))
* **README:** 结构树补充 comfy_kernel 与 model 目录 ([a03042e](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/a03042e065223c7853a66fe7cf3803d598cf72d4))
* **security:** SECURITY.md 需求矩阵 + 审计文档状态同步 + 整改账本 S-01~S-06 ([33694b8](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/33694b82c99112c16622a09fefe40fbcae4bd953))
* 新增 MiniMax 竞品库 / ADR-0003 / 合规复核（T2+T3+T6） ([b10b0a7](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/b10b0a776ed0a0f4a2e66f46f0976e7414cb5428))
* 新增 PRIVACY_POLICY(本地优先,不收集数据) ([a5b4b01](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/a5b4b0198d2d9b003144aa98df3228978fa30e1f))
* 新增 PRIVACY_POLICY(本地优先,不收集数据) ([bd1cde2](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/bd1cde2feea233bc3668b4d21141246ed6e34232))
* 新增远程同步铁律，防止 AI 直写远程后本地分叉 ([8922cf4](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/8922cf4727c9e22903545d60706ebb0a5ef5078c))
* 新增远程同步铁律，防止 AI 直写远程后本地分叉 ([99cf92e](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/99cf92e70c6a33cc7a6cfc2403bb7404c664bcf7))


### CI/CD

* **bench:** 回归比较启用 —— cache 滚动基线 + latency 子集棘轮（P2-⑥ 收尾） ([f41eeee](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/f41eeee557974855c083887cf6e8f142f615a0e7))
* E2E 门禁收紧，新增覆盖率门槛（SeedVR2 50%/Image 60%）与并发控制 ([4b62dba](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/4b62dba195d74739ddbc2ee8afb74af7a1153139))
* E2E 门禁收紧，新增覆盖率门槛（SeedVR2 50%/Image 60%）与并发控制 ([fa3cafc](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/fa3cafc03babbf5aed28999a6982440036184845))
* fix gate infra - SARIF upload perms / cross-platform pytest ([3173375](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/31733753923d540a5aabe3707b51e179a9d2fdb1))
* **gate:** comfy_kernel 暴露面棘轮 + 调用面断言（安全合规 P1 收尾） ([78bed6c](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/78bed6cf0e8bf97cfd0daab42e693f56a0ffffe6))
* **gate:** 安全棘轮门禁接入 + frontend-smoke 补 Python 环境 + E2E 接入 CI ([c3b92ff](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/c3b92ff862716d57aeaa8dad2775a5fafdf7ead0))
* make quality gates strict - remove fake-green || true / continue-on-error ([d17720e](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/d17720eddda633224ffe26a3a892dae63187146e))
* **release:** 恢复发布与测试门禁阻断，消除吞错与弱化残留 ([fc50882](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/fc50882df16cf46f98d2db02c9c494a2cb7029e4))
* **trivy:** rootfs 诊断步搜 SBOM 文件 + 关闭跨 run 分析缓存 ([5243061](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/524306133778724329999601a3bcc075a5d30259))
* **trivy:** 包位置清单诊断步 + appver 引号语法修复 ([4e50655](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/4e50655f40ae50e7596511ca567e1f57ee2732fa))
* **trivy:** 改扫 docker export 合并视图 rootfs——绕过幽灵层旧 dist-info ([54ff050](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/54ff050c1d28b044ec5cf36bce1f3ac10f7f68a7))
* **trivy:** 追加 JSON 包路径诊断步——定位幽灵旧版的 PkgPath/Layer ([2425e96](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/2425e967c0dba83e4382b8e3730fea077696d708))
* **typecheck:** 内联 ratchet 门禁改为调用组织级 reusable workflow（试点） ([bd7742b](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/bd7742b69e61f4d117ed3e25991f0ba641cd7679))
* **typecheck:** 新增 mypy ratchet 类型门禁，对齐家族底线 ([f13e1fc](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/f13e1fc274f294901a5842e6baee5069132aa6e7))
* 收紧 lint 门禁为严格失败，trivy-action 固定 SHA，补权限最小化与超时，清理 master 触发 ([ad19761](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/ad19761988e47dcc3111220d99174dd9d197eac7))
* 收紧 lint 门禁为严格失败，trivy-action 固定 SHA，补权限最小化与超时，清理 master 触发 ([b6f8d34](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/b6f8d34192a6c9eaa7fc9e4300592f524641b0ae))


### Refactor

* **governance:** 收敛社区健康文件至组织级默认仓库 ([3100655](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/3100655a835de9073607b0abc1c6d71697719f0a))
* **templates:** 提取三页共享参数段为 partials，渲染输出逐字节零差异 ([9729806](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/9729806149ce3d8228df82dfd4d2a75c907c9a82))


### Security

* add read-only security audit doc (MiniMax-H3-lite) ([3107ac1](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/3107ac1baf3b8cf20ae92f1d57c00cab37846f82))
* add read-only security audit doc (MiniMax-H3-lite) ([8474715](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/8474715649ce02687d6ebb57610fab17664a02cd))
* fix phantom-control HOST + add config-vs-code consistency gate (M1) ([9eef4d4](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/9eef4d400a637c6319afb72c8d9460dfc77aa762))
* fix phantom-control HOST + add config-vs-code consistency gate (M1) ([f97fd73](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/f97fd73d664813db8531787c14d8fe1dc5e5b798))


### Tests

* **inference:** 失败路径与主执行路径补测，覆盖率 39%→83%（P2-④） ([f5df2ff](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/f5df2ff2cfbbdfd89eb2c9221afe135b9b4c5089))
* **isolation:** 上传/资产目录测试隔离——修 no_orphan 间歇性失败 ([eeea179](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/eeea179c3a0374eb15c6608f925057807fe64294))
* **ops:** 运维稳定性落地回归测试（T1/T2/T4/T6） ([036d300](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/036d300d84da96ddd33f1268d13252a251ce3ff4))
* **queue:** mock_inference 覆盖 queue_manager 调用点 + 队列排空守卫 ([9132621](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/9132621cbe0fed53057eb2a5c80f2464ea54efc6))
* **vllm:** vllm-omni 适配器补测，覆盖率 0%→100%（P3-⑦） ([1336dae](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/1336daeb604bb3bb249e7507123a3efa75745380))

## [2.3.1](https://github.com/ReSerendipity/MiniMax-H3-lite/compare/v2.3.0...v2.3.1) (2026-08-22)


### Documentation

* README 顶部补齐 CI 徽章 ([a1758ca](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/a1758caedaf5c80a52bede9e482c62b7ee3462d5))


### CI/CD

* release-please 加 continue-on-error，避免发布异常显示红叉 ([b1a26ec](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/b1a26ec955fd6e181616b55a85ee89fa697a1ffe))
* 开启 actions 创建/审批 PR 权限，重跑 release-please ([0897c30](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/0897c30ae952ce47572afdb20a18dc4f3ddff266))
* 降低质量门禁严格程度，避免频繁失败 ([597bf2f](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/597bf2fbcd07cd522d1103f510e94cd2b9f941b8))

## [2.3.0](https://github.com/ReSerendipity/MiniMax-H3-lite/compare/v2.2.0...v2.3.0) (2026-08-21)


### Features

* add invisible content-provenance module (DCT frame embedding, debug-only logs) + verify tool ([2e9c28a](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/2e9c28afc285e1fae2c69bfc2602558b044209be))
* add smoke testing script and update docs for diffusers-only inference ([e8a413c](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/e8a413c9cc23e9d30e89ddc8acce8c738bad2fc1))
* **backend:** 新增 comfy 进程内引擎 + 各路由/template 更新 ([6245bfe](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/6245bfeadcf1bb55ecb9a025436cb52260d63887))
* **ci:** 添加 GitHub Actions CI/CD 流水线 + 前端静态资源归档 ([509e6c6](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/509e6c60f62215d7926544e987c4c631388c3905))
* comfy 引擎配套脚本/测试/workflow API 固化 + prompt 文档 ([6f04bbe](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/6f04bbeeee1e68ac4260f05f61d3ac67c729eaf7))
* enhance backend with new routers and engine registry ([5bef47a](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/5bef47a421333f2cb20a55146618fb6967327a2b))
* **test:** 完善测试体系基础设施 - conftest + pytest-cov + pre-commit hooks ([56828c8](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/56828c8eeb3d68d923217eb7cc6ce8f07e8f7d96))
* 路线图落地 — API 集成测试、checkpoint 断点、Comfy PoC；fix: 测试 DB 隔离 ([7368d7d](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/7368d7d9ac685da058ce73dd6c5d64f9b627ffd9))


### Bug Fixes

* **tests:** fix hardcoded paths, stale E2E assertions, add negative tests, split God Tests ([5618ba1](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/5618ba196ad317843018cc9110b0bba7ea23e85a))
* 补齐 h3.spec 符号与 jinja2 依赖，修复 flake8 与 README 断链 ([05ef997](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/05ef9976f3306e54bcfa55e626bc1761b2ebf37e))


### Documentation

* add AGENTS.md (self-evolution protocol) ([74d769e](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/74d769e2bc15a9aa3b5d2e39793e51289eecdbdf))
* add Apache-2.0 LICENSE for repo code and NOTICE with MiniMax H3 license attribution ([2ef2c29](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/2ef2c2985876bd1e3d91fd1f409b922df7b3396c))
* add SECURITY.md and license separation statement ([366cf4d](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/366cf4d53d9449fe92eccd2863b0954eed5bd73e))
* IMPLEMENTATION_GAPS.md 差距指南 + 静态资源文件（favicon/图标） ([cdad5c0](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/cdad5c0df1390864ffa94f58af431e5ff45703b4))


### CI/CD

* release-please 使用 GH_PAT 建 PR（GITHUB_TOKEN 被禁并在 org 无法创建 PR） ([1ff6428](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/1ff64280c52c6eff9ee21d3b56e08c5d8d594e9e))
* security assertions (no 0.0.0.0 binding, entry checks) ([45b1605](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/45b160596eef235310cc05bf73c458774a9109bd))
* 为 MiniMax 接入 release-please 自动发版 ([6476fe0](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/6476fe0c3d00d4260d4050eef5e4a627502b839a))


### Refactor

* **stageG:** 统一代码风格与结构（接 G1-G5 重构） ([3e036ad](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/3e036ada90a6f0fecf5fe6ef61e7fd68b2a9af7b))


### Tests

* **backend:** add unit tests for watermark/database/comfy_engine core modules ([9ae34ab](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/9ae34ab292fc81bb18ea9c263894e4570cbe6007))
* **config:** add settings_store/engine_registry tests, fix CI Python version/lint/playwright ([7fcfd31](https://github.com/ReSerendipity/MiniMax-H3-lite/commit/7fcfd315a14c8d0c00594ec34721e72d240e24a6))