供应链事件响应与撤销公告治理（advisory-广播-回滚）最佳实践

实现示例type Advisory = { id: string; pkg: string; version: string; severity: 'block' | 'warn'; reason: string; until: number }

class Bus {

subs: Map<string, (a: Advisory) => void> = new Map()

sub(name: string, fn: (a: Advisory) => void) { this.subs.set(name, fn) }

pub(a: Advisory) { for (const fn of this.subs.values()) fn(a) }

}

function valid(a: Advisory): boolean { return !!a.id && !!a.pkg && !!a.version && !!a.reason && a.until > Date.now() }

function decide(a: Advisory): 'block' | 'warn' | 'pass' { if (!valid(a)) return 'block'; if (a.until <= Date.now()) return 'pass'; return a.severity }

function rollback(targets: string[], frozen: Set<string>): string[] { return targets.filter(t => !frozen.has(t)) }

审计与运行治理审计包含公告、范围、到期与决策；产线默认阻断 `block` 项。广播后触发冻结与回滚，并输出受影响清单与处理结果。