docs(ptt): land Baseline Candidate v0.9.3 — capability-based desktop PTT

Applies the gen2 desktop-PTT review summary (`gen2/chanora-desktop-ptt-review-summary-v0.9.2.md`) to our doc set with the owner rulings PTT-OPEN-001 through PTT-OPEN-006 resolved as accepted decisions DEC-023 through DEC-028: * DEC-023 Windows Global PTT P0 / MVP * DEC-024 macOS Global PTT P0 / MVP with permission UX * DEC-025 Linux officially-tested env: GNOME on Wayland only * DEC-026 Mouse side buttons supported (Win + macOS; Linux portal) * DEC-027 PTT diagnostics: capability + availability only, no raw key codes ever * DEC-028 Missed-key-up watchdog: P0 Requirements (SysRS / SRS) and architecture (SysDes / SAD / SDD) gain the desktop-PTT ID set the gen2 summary describes: SysRS-296..302 -> SysDes-142..148 -> SRS-195..203 -> SAD-071..079 -> SDD-081..092 ID totals advance from 295 / 141 / 194 / 70 / 80 to 302 / 148 / 203 / 79 / 92. The strict layered sourcing rule (`SRS -> SysDes` only, `SAD -> SRS` only, `SDD -> SAD` only) is preserved; the `tools/validate_docs.py` validator reports zero undefined refs and zero direct-layer-rule violations. New document: * `docs/architecture/desktop-ptt-architecture.md` — capability ladder (L0Focused, L1GlobalShortcut, L2GlobalHoldToTalk, L3GlobalWithMouseButtons, L4DeviceAware reserved), Windows / macOS / Linux strategies, privacy rule, audio-gate rule, missed-key-up watchdog, release-readiness evidence requirement, traceability summary. Doc addenda (Baseline Candidate 0.9.3): * `privacy/privacy-policy.md` — no raw key history, capability- dependent Global PTT, UI reflects actual runtime capability * `security/threat-model.md` — THREAT-PTT-001..006 * `security/diagnostic-redaction-audit-report.md` — REDACT-PTT-001..006 banned field list enforced by `PttSanitizer` * `release/platform-release-policy.md` — per-platform evidence fields, no over-claim on untested Linux compositors * `release/release-readiness-go-nogo-record.md` — RR-PTT-001..008 release-readiness items * `verification/swe4-unit-verification-plan.md` — SWE4-UV-035..039 * `verification/swe5-software-integration-verification-plan.md` — SWE5-IV-015 * `verification/swe6-software-verification-plan.md` — SWE6-SV-017 * `verification/sys4-system-integration-verification-plan.md` — SYS4-SIV-016 * `governance/traceability-matrix.md` — full PTT trace rows + verification map * `governance/decision-impact-assessment.md` — DEC-023..028 impact matrix * `governance/product-decision-register.md` v0.9.9 entry recording DEC-023..028 in the decision table and the status table at §7 * `governance/document-index.md` — adds `desktop-ptt-architecture.md` to the controlled set * `architecture/proof-of-concept-plan.md` — PoC-PTT-001..005 platform items * `references/external-references.md` — Windows Raw Input, macOS event-tap, Linux GlobalShortcuts portal references * Both validation reports (`baseline-candidate-validation-report.md`, `repo-format-validation-report.md`) bumped to v0.9.3 with the new ID totals (302 / 148 / 203 / 79 / 92). README §"Desktop Push-to-Talk" added between Architecture Overview and Repository Layout: capability levels, per-platform strategy, privacy posture, missed-key-up watchdog. Tooling: * `tools/validate_docs.py` copied from the gen2 zip into the repo tree (was previously available only inside the zip). Reports zero undefined refs, zero direct-layer-rule violations, English-only CJK check passes. The 35 "old package-style filename" hits are pre-existing and identical to the gen2 baseline (they live in `path-migration-map.md` and config-ID headers of governance docs and are intentional per the path migration policy). * `.gitignore` adds `/gen2/` so the externally-provided review package does not enter the repo. No code changes in this commit; B (the implementation split into `transmit_active` / `capture_active`, `PttCapabilityLevel` reporting, `PttSanitizer` diagnostics rule, and the UI capability badge) follows in a separate commit.
2026-05-15 14:51:22 +08:00
parent b932dc1405
commit 02ffadfa52
26 changed files with 991 additions and 20 deletions
@@ -188,3 +188,43 @@ This build-SDK gate is separate from the iOS runtime deployment target.
 | Version | Date | Description |
 |---|---|---|
 | 0.9.2 | 2026-05-14 | Corrected Apple App Store Connect upload gate to 2026-04-28 and checked full-package naming, references, and coverage. |
+
+
+## Desktop Push-to-Talk Traceability Addendum (Baseline Candidate 0.9.3)
+
+Strict layered sourcing for the desktop PTT chain:
+
+```text
+SysRS-296..302
+  -> SysDes-142..148
+  -> SRS-195..203
+  -> SAD-071..079
+  -> SDD-081..092
+```
+
+| SysRS | SysDes | SRS | SAD | SDD |
+|---|---|---|---|---|
+| SysRS-296 (Focused PTT mandatory) | SysDes-142, SysDes-144 | SRS-201 | SAD-075 | SDD-089 |
+| SysRS-297 (Global PTT capability-dependent) | SysDes-142 | SRS-195 | SAD-071 | SDD-081 |
+| SysRS-298 (Capability exposed) | SysDes-143, SysDes-147, SysDes-148 | SRS-196 | SAD-076, SAD-078 | SDD-082, SDD-088, SDD-091 |
+| SysRS-299 (Windows ladder) | SysDes-145 | SRS-197 | SAD-072 | SDD-083, SDD-084 |
+| SysRS-300 (macOS permission-aware) | SysDes-145 | SRS-198 | SAD-073 | SDD-085 |
+| SysRS-301 (Linux GNOME-Wayland) | SysDes-145 | SRS-199 | SAD-074 | SDD-086 |
+| SysRS-302 (No raw key history) | SysDes-146 | SRS-202 | SAD-077 | SDD-090 |
+| (DEC-026 mouse buttons) | SysDes-142, SysDes-145 | SRS-200 | SAD-072..074 | SDD-082..086 |
+| (DEC-028 missed-key-up watchdog) | SysDes-142, SysDes-144 | SRS-203 | SAD-079 | SDD-092 |
+
+Verification coverage:
+
+```text
+SDD-081..092 -> SWE4-UV-035..039
+SAD-071..079 + SDD-081..092 -> SWE5-IV-015
+SRS-195..203 -> SWE6-SV-017
+SysDes-142..148 -> SYS4-SIV-016
+```
+
+No forbidden direct links introduced: SRS continues to source from SysDes only, SAD from SRS only, SDD from SAD only.
+
+| Version | Date | Description |
+|---|---|---|
+| 0.9.3 | 2026-05-15 | Added desktop PTT traceability rows covering SysRS-296..302 -> SysDes-142..148 -> SRS-195..203 -> SAD-071..079 -> SDD-081..092 and the verification coverage onto SWE.4 / SWE.5 / SWE.6 / SYS.4. |