Merge branch 'main' into agent/enable-dependabot-automation

Author: Pigbibi

.env.example

@@ -3,5 +3,3 @@ STRATEGY_PROFILE=cn_industry_etf_rotation
 ACCOUNT_PREFIX=QMT
 ACCOUNT_REGION=CN
 QMT_MARKET_HISTORY_PATH=data/fixtures/market_history.sample.csv
-QMT_FEATURE_SNAPSHOT_PATH=data/fixtures/dividend_quality/cn_dividend_quality_snapshot_factor_snapshot_latest.csv
-QMT_FEATURE_SNAPSHOT_MANIFEST_PATH=data/fixtures/dividend_quality/cn_dividend_quality_snapshot_factor_snapshot_latest.csv.manifest.json

.github/workflows/ci.yml

@@ -20,39 +20,14 @@ jobs:
         id: quant-platform-kit-ref
         run: |
           set -euo pipefail
-          ref="main"
-          for candidate in "${GITHUB_HEAD_REF:-}" "${GITHUB_BASE_REF:-}"; do
-            if [ -n "$candidate" ] && git ls-remote --exit-code --heads https://github.com/QuantStrategyLab/QuantPlatformKit.git "$candidate" >/dev/null 2>&1; then
-              ref="$candidate"
-              break
-            fi
-          done
+          ref="$(grep -Eo 'QuantPlatformKit\.git@[0-9a-f]+' pyproject.toml | head -n1 | sed 's/.*@//')"
           echo "ref=${ref}" >> "$GITHUB_OUTPUT"
 
       - name: Resolve CnEquityStrategies ref
         id: cn-equity-strategies-ref
         run: |
           set -euo pipefail
-          ref="main"
-          for candidate in "${GITHUB_HEAD_REF:-}" "${GITHUB_BASE_REF:-}"; do
-            if [ -n "$candidate" ] && git ls-remote --exit-code --heads https://github.com/QuantStrategyLab/CnEquityStrategies.git "$candidate" >/dev/null 2>&1; then
-              ref="$candidate"
-              break
-            fi
-          done
-          echo "ref=${ref}" >> "$GITHUB_OUTPUT"
-
-      - name: Resolve CnEquitySnapshotPipelines ref
-        id: cn-equity-snapshot-pipelines-ref
-        run: |
-          set -euo pipefail
-          ref="main"
-          for candidate in "${GITHUB_HEAD_REF:-}" "${GITHUB_BASE_REF:-}"; do
-            if [ -n "$candidate" ] && git ls-remote --exit-code --heads https://github.com/QuantStrategyLab/CnEquitySnapshotPipelines.git "$candidate" >/dev/null 2>&1; then
-              ref="$candidate"
-              break
-            fi
-          done
+          ref="$(grep -Eo 'CnEquityStrategies\.git@[0-9a-f]+' pyproject.toml | head -n1 | sed 's/.*@//')"
           echo "ref=${ref}" >> "$GITHUB_OUTPUT"
 
       - name: Checkout QuantPlatformKit
@@ -69,13 +44,6 @@ jobs:
           ref: ${{ steps.cn-equity-strategies-ref.outputs.ref }}
           path: external/CnEquityStrategies
 
-      - name: Checkout CnEquitySnapshotPipelines
-        uses: actions/checkout@v6
-        with:
-          repository: QuantStrategyLab/CnEquitySnapshotPipelines
-          ref: ${{ steps.cn-equity-snapshot-pipelines-ref.outputs.ref }}
-          path: external/CnEquitySnapshotPipelines
-
       - name: Setup Python
         uses: actions/setup-python@v6
         with:
@@ -86,7 +54,7 @@ jobs:
           set -euo pipefail
           python -m pip install --upgrade pip
           python -m pip install -e '.[test]' ruff
-          python -m pip install --no-deps -e external/QuantPlatformKit -e external/CnEquityStrategies -e external/CnEquitySnapshotPipelines
+          python -m pip install --no-deps -e external/QuantPlatformKit -e external/CnEquityStrategies
 
       - name: Run ruff
         run: python -m ruff check . --extend-exclude external

.github/workflows/codex_pr_review.yml

@@ -0,0 +1,31 @@
+name: Codex PR Review
+
+on:
+  pull_request_target:
+    types: [opened, synchronize, reopened]
+
+permissions:
+  contents: read
+  id-token: write
+  issues: write
+  pull-requests: write
+
+concurrency:
+  group: codex-pr-review-${{ github.event.pull_request.number }}
+  cancel-in-progress: true
+
+jobs:
+  review:
+    uses: QuantStrategyLab/AIAuditBridge/.github/workflows/codex_pr_review.yml@main
+    with:
+      caller_concurrency_key: pr-${{ github.event.pull_request.number || github.run_id }}
+      allow_unconfigured_backend: false
+      api_fallback_enabled: "false"
+      direct_api_primary_enabled: "false"
+    secrets:
+      CODEX_AUDIT_SERVICE_URL: ${{ secrets.CODEX_AUDIT_SERVICE_URL }}
+    permissions:
+      contents: read
+      id-token: write
+      issues: write
+      pull-requests: write

.github/workflows/codex_review_gate.yml

@@ -23,7 +23,7 @@ permissions:
   pull-requests: read
 
 concurrency:
-  group: codex-review-gate-${{ github.event.pull_request.number }}
+  group: codex-review-gate-${{ github.event.pull_request.number }}-${{ github.event_name }}
   cancel-in-progress: true
 
 jobs:

README.md

@@ -1,17 +1,26 @@
 # QmtPlatform
 
+
+## QSL architecture role
+
+- **Layer**: `runtime-platform`.
+- **Responsibility**: QMT / miniQMT A-share execution runtime.
+- **Owns**: QMT runtime controls and A-share platform integration.
+- **Consumes**: CnEquityStrategies, QuantPlatformKit, QuantRuntimeSettings, market-history inputs.
+- **Must not**: own strategy research logic or publish snapshot artifacts.
+
 A-share quant platform layer for **miniQMT / QMT**, built on `QuantPlatformKit` and `CnEquityStrategies`.
 
 Current scope is **dry-run first**: evaluate strategy targets and preview orders without submitting to the broker.
 
-## Supported profiles (P0)
+## Supported dry-run profiles
 
 | Profile | Input mode |
 |---|---|
 | `cn_industry_etf_rotation` | `market_history` (**主轨，runtime_enabled**) |
-| `cn_industry_etf_rotation_aggressive` | `market_history` (**optional target，vol25%**) |
-| `cn_dividend_quality_snapshot` | `feature_snapshot` (requires snapshot path) |
-| `cn_index_etf_tactical_rotation` | `market_history` (legacy / research_backtest_only) |
+| `cn_industry_etf_rotation_aggressive` | `market_history` (**optional target，live_candidate**) |
+
+Research-only profiles such as `cn_dividend_quality_snapshot` and `cn_index_etf_tactical_rotation` are intentionally rejected by QMT runtime settings until they are promoted in `CnEquityStrategies`.
 
 ## Quick start
 
@@ -25,6 +34,7 @@ export STRATEGY_PROFILE=cn_industry_etf_rotation
 export QMT_DRY_RUN_ONLY=true
 export QMT_MARKET_HISTORY_PATH=data/fixtures/market_history.sample.csv
 
+python3 scripts/preflight_qmt_runtime.py
 python3 main.py
 curl http://127.0.0.1:8080/probe
 curl http://127.0.0.1:8080/dry-run
@@ -43,35 +53,9 @@ curl http://127.0.0.1:8080/dry-run
 
 Runtime target example: `QuantRuntimeSettings/examples/targets/qmt/industry_etf_aggressive_dry_run.example.json`
 
-### Legacy index ETF tactical rotation (research only)
-
-```bash
-export STRATEGY_PROFILE=cn_index_etf_tactical_rotation
-export QMT_MARKET_HISTORY_PATH=data/fixtures/market_history.sample.csv
-python3 main.py
-```
-
-### Dividend quality snapshot (feature snapshot)
-
-```bash
-python3 -m pip install --no-deps -e ../CnEquitySnapshotPipelines
-
-# Regenerate fixtures (uses sample factor CSV; sets as_of to today)
-python3 scripts/build_fixtures.py
-
-export STRATEGY_PROFILE=cn_dividend_quality_snapshot
-export QMT_DRY_RUN_ONLY=true
-export QMT_FEATURE_SNAPSHOT_PATH=data/fixtures/dividend_quality/cn_dividend_quality_snapshot_factor_snapshot_latest.csv
-export QMT_FEATURE_SNAPSHOT_MANIFEST_PATH=data/fixtures/dividend_quality/cn_dividend_quality_snapshot_factor_snapshot_latest.csv.manifest.json
-
-python3 main.py
-curl http://127.0.0.1:8080/dry-run
-```
-
 End-to-end smoke (stage/build/run):
 
 ```bash
-python3 scripts/smoke_cn_dividend_quality_dry_run_e2e.py
 python3 scripts/smoke_cn_industry_etf_rotation_dry_run_e2e.py
 python3 scripts/smoke_cn_industry_etf_rotation_aggressive_dry_run_e2e.py
 ```
@@ -81,13 +65,11 @@ python3 scripts/smoke_cn_industry_etf_rotation_aggressive_dry_run_e2e.py
 | Variable | Default | Description |
 |---|---|---|
 | `QMT_DRY_RUN_ONLY` | `true` | When true, never submit live orders |
-| `STRATEGY_PROFILE` | required | Strategy profile id |
+| `STRATEGY_PROFILE` | required | QMT-enabled strategy profile id |
 | `QMT_MARKET_HISTORY_PATH` | — | CSV with `date,symbol,close` for direct strategies |
-| `QMT_FEATURE_SNAPSHOT_PATH` | — | Snapshot CSV for feature-snapshot strategies |
-| `QMT_FEATURE_SNAPSHOT_MANIFEST_PATH` | — | Snapshot manifest JSON (required for dividend quality) |
 | `RUNTIME_TARGET_JSON` | — | Optional runtime target override from QuantRuntimeSettings |
 
-See `.env.example` and `CnEquityStrategies/docs/platform_integration.md`.
+Use `.env.example` as the dry-run configuration template. Run `python3 scripts/preflight_qmt_runtime.py` before starting the service; it validates the selected profile and required input paths without touching any live account credentials.
 
 ## HTTP endpoints
 

README.zh-CN.md

@@ -1,28 +1,41 @@
 # QmtPlatform
 
+
+## QSL 架构角色
+
+- **层级**：`执行平台`。
+- **职责**：QMT / miniQMT A 股执行运行时。
+- **事实源/归属**：QMT runtime 控制和 A 股平台集成。
+- **消费对象**：CnEquityStrategies、QuantPlatformKit、QuantRuntimeSettings、market-history 输入。
+- **禁止事项**：承载策略研究逻辑或发布 snapshot artifacts。
+
 A 股量化平台层，基于 `QuantPlatformKit` 和 `CnEquityStrategies` 构建，对接 **miniQMT / QMT**。
 
 当前范围为**仅干跑**：评估策略目标并预览订单，不向券商提交实盘。
 
-## 支持策略
+## 支持 dry-run 策略
 
 | Profile | 输入模式 |
 |---|---|
 | `cn_industry_etf_rotation` | `market_history`（主轨，runtime_enabled） |
-| `cn_industry_etf_rotation_aggressive` | `market_history`（可选目标，vol25%） |
-| `cn_dividend_quality_snapshot` | `feature_snapshot`（需快照路径） |
-| `cn_index_etf_tactical_rotation` | `market_history`（旧版/research_backtest_only） |
+| `cn_industry_etf_rotation_aggressive` | `market_history`（可选目标，live_candidate） |
+
+`cn_dividend_quality_snapshot`、`cn_index_etf_tactical_rotation` 等 research-only profile 不会进入 QMT runtime 配置；只有在 `CnEquityStrategies` 中完成提级后才允许启用。
 
 ## 快速开始
 
 ```bash
 python3 -m pip install -e '.[test]'
 export STRATEGY_PROFILE=cn_industry_etf_rotation
 export QMT_DRY_RUN_ONLY=true
+export QMT_MARKET_HISTORY_PATH=data/fixtures/market_history.sample.csv
+python3 scripts/preflight_qmt_runtime.py
 python3 main.py
 curl http://127.0.0.1:8080/probe
 ```
 
+`.env.example` 是当前 dry-run 配置模板；preflight 只校验 profile 与输入文件路径，不读取或写入账号、密码、token。
+
 详见 [README.md](README.md)（英文）。
 
 ## 许可证

data/fixtures/dividend_quality/cn_dividend_quality_snapshot_factor_snapshot_latest.csv.manifest.json

@@ -7,7 +7,7 @@
   "manifest_type": "feature_snapshot",
   "row_count": 4,
   "snapshot_as_of": "2026-06-27",
-  "snapshot_path": "/Users/lisiyi/Projects/QmtPlatform/data/fixtures/dividend_quality/cn_dividend_quality_snapshot_factor_snapshot_latest.csv",
+  "snapshot_path": "data/fixtures/dividend_quality/cn_dividend_quality_snapshot_factor_snapshot_latest.csv",
   "snapshot_sha256": "ba00a43b18ca204a53f6f657774b2964bc196a6727f329d0f9dd242f36d1cedd",
   "source_project": "CnEquitySnapshotPipelines",
   "strategy_profile": "cn_dividend_quality_snapshot"

data/fixtures/dividend_quality/release_status_summary.json

@@ -32,13 +32,13 @@
   },
   "display_name": "CN Dividend Quality Snapshot",
   "generated_at": "2026-06-27T16:20:38.124005+00:00",
-  "manifest_path": "/Users/lisiyi/Projects/QmtPlatform/data/fixtures/dividend_quality/cn_dividend_quality_snapshot_factor_snapshot_latest.csv.manifest.json",
-  "ranking_path": "/Users/lisiyi/Projects/QmtPlatform/data/fixtures/dividend_quality/cn_dividend_quality_snapshot_ranking_latest.csv",
+  "manifest_path": "data/fixtures/dividend_quality/cn_dividend_quality_snapshot_factor_snapshot_latest.csv.manifest.json",
+  "ranking_path": "data/fixtures/dividend_quality/cn_dividend_quality_snapshot_ranking_latest.csv",
   "release_status": "ready",
   "row_count": 4,
   "signal_description": "cn dividend quality regime=risk_on breadth=100.0% target_stock=100.0% selected=3 top=601088(0.44), 600519(0.11), 000001(-0.55)",
   "snapshot_as_of": "2026-06-27",
-  "snapshot_path": "/Users/lisiyi/Projects/QmtPlatform/data/fixtures/dividend_quality/cn_dividend_quality_snapshot_factor_snapshot_latest.csv",
+  "snapshot_path": "data/fixtures/dividend_quality/cn_dividend_quality_snapshot_factor_snapshot_latest.csv",
   "source_project": "CnEquitySnapshotPipelines",
   "status_description": "regime=risk_on | breadth=100.0% | target_stock=100.0%",
   "strategy_profile": "cn_dividend_quality_snapshot"

pyproject.toml

@@ -13,8 +13,8 @@ authors = [{ name = "QuantStrategyLab" }]
 dependencies = [
   "flask>=3.0",
   "pandas>=2.0",
-  "quant-platform-kit @ git+https://github.com/QuantStrategyLab/QuantPlatformKit.git@e86554b",
-  "cn-equity-strategies @ git+https://github.com/QuantStrategyLab/CnEquityStrategies.git@357dba7e8896a7f488a484d4a3eea33894708ab9",
+  "quant-platform-kit @ git+https://github.com/QuantStrategyLab/QuantPlatformKit.git@69a0256934d081b5ef309a885384b9eb9f62cf90",
+  "cn-equity-strategies @ git+https://github.com/QuantStrategyLab/CnEquityStrategies.git@12c0cd4801060fcb2f9452ffd9a7f48df446ddd0",
 ]
 
 [project.optional-dependencies]
@@ -23,6 +23,7 @@ test = ["pytest>=8"]
 [tool.setuptools]
 py-modules = [
   "main",
+  "runtime_preflight",
   "runtime_config_support",
   "strategy_loader",
   "strategy_registry",

qsl.toml

@@ -0,0 +1,13 @@
+[qsl]
+repo = "QmtPlatform"
+tier = "runtime"
+upgrade_ring = "ring_d"
+allow_legacy = false
+enforce_bundle = true
+
+[qsl.requires]
+quant_platform_kit = "69a0256934d081b5ef309a885384b9eb9f62cf90"
+cn_equity_strategies = "12c0cd4801060fcb2f9452ffd9a7f48df446ddd0"
+
+[qsl.compat]
+bundle = "2026.07.3"