[haofeng0705]

Summary

Gitee channel repair rejects the published v1.0.64 and v1.0.65 releases because its exact asset allowlist omits dws-openharmony-arm64.tar.gz. Both immutable releases contain nine assets, and downstream artifact verification and Gitee reconciliation already require that OpenHarmony archive.

Add the missing archive to the existing repair authority allowlist. Keep exact-set validation, immutable release checks, annotated tag checks, and delivery provenance requirements unchanged.

Risk tier

• High-risk: release workflow authority validation.

Verification

• Added TestGiteeRepairAuthorityRequiresCompleteReleaseAssetSet, executing the actual inline workflow authority script with mocked GitHub reads. Covers complete stable 64/65 assets and rejection of missing OpenHarmony, missing checksums, duplicate assets, and unknown assets.
• gofmt completed for the new test file.
• Static diff inspection confirms the workflow changes by exactly one allowlist entry.
• Local tests and policy were not run; no release repair workflow has been dispatched yet. Automatic PR CI is the validation path.
• Release fragment: .changes/gitee-repair-openharmony-assets.md.
• Command surface, generated artifacts, package-manager publication, and local full suite: not changed/not run.

Notes

AI-assisted implementation submitted for maintainer review. This PR changes the shared channel-repair asset authority check but does not enable or run OSS publication, rebuild public artifacts, or move existing tags. Gitee repair for v1.0.64 and v1.0.65 must run from the protected default branch after this fix is reviewed and merged.

[typefield]

审查结论：Approve（基于最新提交 9ec65d2）

• .github/workflows/release.yml 的 Gitee repair-channel 权威资产清单已补齐 dws-openharmony-arm64.tar.gz，与 v1.0.64/v1.0.65 的九件制品一致。
• 九件制品的 exact-set 校验仍同时保持数量、允许集合、重复项拒绝逻辑；缺失 OpenHarmony、缺失 checksums、重复制品和未知制品均会在输出 authority 结果前拒绝。
• 撤回标签拒绝、annotated tag/单一 commit 校验、默认分支包含关系、公开 immutable release 校验、prerelease 元数据校验以及 OSS-Mirror 封印校验均未被削弱。
• 新增回归用例覆盖 v1.0.64/v1.0.65 完整集合，并覆盖上述异常集合拒绝及成功路径的 sealed authority 输出。
• 最新提交的 AI Behavior、Test、Coverage、Policy、Interface Integrity、Lint、跨平台编译、Windows/macOS、race 等必需检查均通过。

未发现阻塞问题。合入后可按计划从受保护默认分支执行 v1.0.64/v1.0.65 的 Gitee 补同步。