供应链事件响应与撤销公告治理（advisory-广播-回滚）最佳实践

实现示例type Advisory = { id: string; pkg: string; version: string; severity: 'block' | 'warn'; reason: string; until: number } class Bus { subs: Map<string, (a: Advisory) => void> = new Map() sub(name: string, fn: (a: Advisory) => void) { this.subs.set(name, fn) } pub(a: Advisory) { for (const fn of this.subs.values()) fn(a) } } function valid(a: Advisory): boolean { return !!a.id && !!a.pkg && !!a.version && !!a.reason && a.until > Date.now() } function decide(a: Advisory): 'block' | 'warn' | 'pass' { if (!valid(a)) return 'block'; if (a.until <= Date.now()) return 'pass'; return a.severity } function rollback(targets: string[], frozen: Set<string>): string[] { return targets.filter(t => !frozen.has(t)) } 审计与运行治理审计包含公告、范围、到期与决策；产线默认阻断 `block` 项。广播后触发冻结与回滚，并输出受影响清单与处理结果。