sub2api/openspec/changes/add-openai-compatible-prompt-audit/implementation-evidence.md

Prompt Audit implementation evidence

This file records reproducible implementation-time evidence. It contains no prompt bodies, Guard credentials, Authorization values, or Redis payloads.

2026-07-16 — source freeze and target baseline

Frozen source restore

• Base commit: 7a50378851a80650cb0c086260b23abeb3469e6b
• Freeze manifest: source-freeze/MANIFEST.md
• Manifest SHA-256: badab312bf6af4d2c77857a9400381f4da4fbf45722d9f4a6df23bc7005273b6
• Restore result: tracked patch and untracked archive restored into a detached worktree; git diff --check passed.
• go test ./internal/service/promptaudit -count=1: passed.
• go test ./internal/router ./internal/relay ./internal/gatewayadapter/transport -run 'PromptGuard|PromptAudit|ConcurrencyOrder' -count=1: passed.

Target pre-change baseline

• cd backend && go test ./internal/service -run ContentModeration -count=1: passed (1.138s).
• pnpm --dir frontend exec vitest run src/views/admin/__tests__/RiskControlView.spec.ts src/router/__tests__/feature-access.spec.ts: passed (2 files, 9 tests).

Review slices

Implementation is partitioned into independently reviewable slices without changing the final scope:

1. Data and core contracts.
2. Async audit engine.
3. Admin API and console.
4. Coordinator and synchronous guard.
5. Observability, verification, rollout, and deployment evidence.

The feature remains default-off throughout implementation. Production blocking remains prohibited until the signed rollout gates in verification.md are satisfied.