Function _append_audit

scripts/kanban_update.py:137–158

追加一条审计记录到 data/audit_log.json（原子操作）。

(task_id, agent, action, old_val=None, new_val=None, reason="")

MAX_AUDIT_LOG = 5000  # 审计日志最大条数

def _append_audit(task_id, agent, action, old_val=None, new_val=None, reason=""):
    """追加一条审计记录到 data/audit_log.json（原子操作）。"""
    entry = {
        "ts": now_iso(),
        "task": task_id or "",
        "agent": agent or "",
        "action": action,
        "from": old_val,
        "to": new_val,
        "reason": reason,
    }
    try:
        def modifier(logs):
            if logs is None:
                logs = []
            logs.append(entry)
            if len(logs) > MAX_AUDIT_LOG:
                logs = logs[-MAX_AUDIT_LOG:]
            return logs
        atomic_json_update(AUDIT_FILE, modifier, [])
    except Exception as e:
        log.warning(f"审计日志写入失败: {e}")


# ── 越权检测（Agent 权限策略）──