固化七月迭代审计治理进展以隔离线上热修

Constraint: 切换 main 前必须保存当前七月分支全部项目进展，套餐生效提案仅属于 Iteration/7-11。

Rejected: 将七月套餐修复直接移植到 main | 两个分支的可靠投递架构不同。

Confidence: medium

Scope-risk: broad

Directive: 不得将本提交整体 cherry-pick 到 main；main 套餐热修必须基于其纯 Asynq 代码独立实施。

Tested: git diff --check；openspec validate fix-package-activation-starvation --strict。

Not-tested: 按用户要求未运行自动化测试；go build ./... 因当前审计改造中的 Enterprise 模型字面量和 role.recordFailure 参数类型错误未通过。

internal/infrastructure/messaging/outbox/relay.go

@@ -14,6 +14,7 @@ import (
 	"gorm.io/gorm/clause"
 
 	"github.com/break/junhong_cmp_fiber/internal/model"
+	"github.com/break/junhong_cmp_fiber/pkg/auditcontext"
 	"github.com/break/junhong_cmp_fiber/pkg/constants"
 )
 
@@ -29,6 +30,7 @@ type DeliveryEnvelope struct {
 	BusinessKey    string                 `json:"business_key,omitempty"`
 	RequestID      string                 `json:"request_id,omitempty"`
 	CorrelationID  string                 `json:"correlation_id,omitempty"`
+	ParentEventID  string                 `json:"parent_event_id,omitempty"`
 	Payload        sonic.NoCopyRawMessage `json:"payload"`
 }
 
@@ -253,7 +255,7 @@ func deliveryEnvelope(event model.OutboxEvent) DeliveryEnvelope {
 		EventID: event.EventID, EventType: event.EventType, PayloadVersion: event.PayloadVersion,
 		AggregateType: event.AggregateType, AggregateID: event.AggregateID,
 		ResourceType: event.ResourceType, ResourceID: event.ResourceID, BusinessKey: event.BusinessKey,
-		RequestID: event.RequestID, CorrelationID: event.CorrelationID,
+		RequestID: event.RequestID, CorrelationID: event.CorrelationID, ParentEventID: event.ParentEventID,
 		Payload: sonic.NoCopyRawMessage(event.Payload),
 	}
 }
@@ -326,5 +328,10 @@ func (h *Handler) Handle(ctx context.Context, task *asynq.Task) error {
 	if envelope.EventID == "" || envelope.EventType == "" || envelope.PayloadVersion <= 0 {
 		return stderrors.New("Outbox 事件信封不完整")
 	}
+	ctx = auditcontext.With(ctx, auditcontext.Context{
+		ActorKind: constants.AuditActorSystemTask, ActorID: envelope.EventType,
+		ActorName: "Outbox 消费任务", Source: constants.AuditSourceWorker,
+		RequestID: envelope.RequestID, CorrelationID: envelope.CorrelationID, ParentEventID: envelope.ParentEventID,
+	})
 	return h.consumer.Consume(ctx, envelope)
 }

internal/infrastructure/messaging/outbox/repository.go

@@ -15,6 +15,7 @@ import (
 
 	"github.com/break/junhong_cmp_fiber/internal/model"
 	"github.com/break/junhong_cmp_fiber/pkg/asynctask"
+	"github.com/break/junhong_cmp_fiber/pkg/auditcontext"
 	"github.com/break/junhong_cmp_fiber/pkg/constants"
 )
 
@@ -30,6 +31,7 @@ type Envelope struct {
 	BusinessKey    string `json:"business_key,omitempty"`
 	RequestID      string `json:"request_id,omitempty"`
 	CorrelationID  string `json:"correlation_id,omitempty"`
+	ParentEventID  string `json:"parent_event_id,omitempty"`
 	Payload        any    `json:"payload"`
 }
 
@@ -73,13 +75,24 @@ func (r *Repository) append(ctx context.Context, tx *gorm.DB, envelope Envelope,
 	if envelope.PayloadVersion <= 0 {
 		envelope.PayloadVersion = 1
 	}
+	linkage := auditcontext.From(ctx)
+	if envelope.RequestID == "" {
+		envelope.RequestID = linkage.RequestID
+	}
+	if envelope.CorrelationID == "" {
+		envelope.CorrelationID = linkage.CorrelationID
+	}
+	if envelope.ParentEventID == "" {
+		envelope.ParentEventID = linkage.ParentEventID
+	}
 	now := time.Now().UTC()
 	event := &model.OutboxEvent{
 		EventID: envelope.EventID, EventType: envelope.EventType, PayloadVersion: envelope.PayloadVersion,
 		AggregateType: envelope.AggregateType, AggregateID: envelope.AggregateID,
 		ResourceType: envelope.ResourceType, ResourceID: envelope.ResourceID, BusinessKey: envelope.BusinessKey,
-		RequestID: envelope.RequestID, CorrelationID: envelope.CorrelationID, Payload: datatypes.JSON(payload),
-		Status: constants.OutboxStatusPending, MaxRetries: constants.OutboxDefaultMaxRetries, NextAttemptAt: now,
+		RequestID: envelope.RequestID, CorrelationID: envelope.CorrelationID, ParentEventID: envelope.ParentEventID,
+		Payload: datatypes.JSON(payload),
+		Status:  constants.OutboxStatusPending, MaxRetries: constants.OutboxDefaultMaxRetries, NextAttemptAt: now,
 	}
 	create := tx.WithContext(ctx)
 	if idempotent {