固化七月迭代审计治理进展以隔离线上热修

Constraint: 切换 main 前必须保存当前七月分支全部项目进展，套餐生效提案仅属于 Iteration/7-11。

Rejected: 将七月套餐修复直接移植到 main | 两个分支的可靠投递架构不同。

Confidence: medium

Scope-risk: broad

Directive: 不得将本提交整体 cherry-pick 到 main；main 套餐热修必须基于其纯 Asynq 代码独立实施。

Tested: git diff --check；openspec validate fix-package-activation-starvation --strict。

Not-tested: 按用户要求未运行自动化测试；go build ./... 因当前审计改造中的 Enterprise 模型字面量和 role.recordFailure 参数类型错误未通过。

internal/task/device_batch_allocation.go

@@ -13,6 +13,7 @@ import (
 	"github.com/break/junhong_cmp_fiber/internal/model"
 	"github.com/break/junhong_cmp_fiber/internal/model/dto"
 	"github.com/break/junhong_cmp_fiber/internal/store/postgres"
+	"github.com/break/junhong_cmp_fiber/pkg/auditcontext"
 	"github.com/break/junhong_cmp_fiber/pkg/constants"
 	"github.com/break/junhong_cmp_fiber/pkg/errors"
 	"github.com/break/junhong_cmp_fiber/pkg/middleware"
@@ -42,6 +43,11 @@ func (h *DeviceImportHandler) handleDeviceBatchAllocation(ctx context.Context, t
 		UserID: task.Creator, UserType: task.OperatorType, Username: task.CreatorName,
 		ShopID: valueOrZero(task.OperatorShopID), SubordinateShopIDs: shopScope,
 	})
+	workerCtx = auditcontext.With(workerCtx, auditcontext.Context{
+		ActorKind: constants.AuditActorSystemTask, ActorID: constants.TaskTypeDeviceImport,
+		ActorName: "设备CSV批量操作任务", Source: constants.AuditSourceWorker,
+		CorrelationID: task.TaskNo,
+	})
 	result, err := h.executeDeviceBatchAllocation(workerCtx, task, rows)
 	if err != nil {
 		_ = h.importTaskStore.UpdateStatus(ctx, task.ID, model.ImportTaskStatusFailed, err.Error())

internal/task/polling_integration_log.go

@@ -5,6 +5,8 @@ import (
 	"strconv"
 	"time"
 
+	"github.com/google/uuid"
+
 	"github.com/break/junhong_cmp_fiber/internal/infrastructure/integrationlog"
 	"github.com/break/junhong_cmp_fiber/internal/model"
 	"github.com/break/junhong_cmp_fiber/pkg/constants"
@@ -17,12 +19,15 @@ func startGatewayAttempt(ctx context.Context, repository *integrationlog.Reposit
 		return nil, errors.New(errors.CodeInternalError, "Gateway Integration Log 未配置")
 	}
 	resourceID := strconv.FormatUint(uint64(cardID), 10)
+	integrationID := uuid.NewString()
 	triggerSource := constants.CardObservationSourcePolling
 	triggerScene := scene
 	return repository.Start(ctx, integrationlog.Attempt{
-		Provider: constants.IntegrationProviderGateway, Direction: constants.IntegrationDirectionOutbound,
+		IntegrationID: integrationID,
+		Provider:      constants.IntegrationProviderGateway, Direction: constants.IntegrationDirectionOutbound,
 		Operation: operation, ResourceType: constants.AssetTypeIotCard, ResourceID: &resourceID,
-		TriggerSource: &triggerSource, TriggerScene: &triggerScene,
+		TriggerSource: &triggerSource, TriggerScene: &triggerScene, TriggerSeries: &integrationID,
+		CorrelationID:  &integrationID,
 		RequestSummary: map[string]any{"card_id": cardID}, Metadata: map[string]any{"scene": scene},
 		InitialResult: constants.IntegrationResultPending,
 	})