feat(pchome): automate authorized sales acquisition

governance/pchome_growth_program_review.json

@@ -1,6 +1,6 @@
 {
   "version": "pchome_growth_program_review_v1",
-  "generated_at": "2026-07-10T21:54:36+08:00",
+  "generated_at": "2026-07-11T12:00:00+08:00",
   "supersedes_status_only_completion": true,
   "goal": "以新鮮 PChome 業績、可信跨平台同款資料與可歸因動作持續提升業績",
   "production_baseline": {
@@ -73,12 +73,17 @@
       "objective": "Automatically acquire and import the latest PChome sales report",
       "completed": [
         "Google Drive polling and import",
+        "authorized HTTPS, IMAP and controlled local-drop provider implementation",
+        "SHA-256 source idempotency",
+        "atomic two-table replace with rollback",
+        "same-run source, policy, execution and freshness receipt",
         "post-import table verification",
-        "staleness detection"
+        "staleness detection",
+        "compact source-readiness cockpit"
       ],
       "remaining": [
-        "authorized PChome backend, scheduled export, or mailbox-to-Drive acquisition connector",
-        "same-run source receipt and freshness verifier"
+        "configure at least one production authorized upstream export provider",
+        "receive and import a report dated within one day in production"
       ],
       "production_acceptance": "latest sales age <= 1 day and decision_ready=true"
     },
@@ -197,10 +202,14 @@
                 "removed fake sales sparkline",
                 "desktop and 390px mobile visual verification without horizontal overflow",
                 "repaired the circular accent-token fallback that made primary buttons unreadable",
-                "production V10.775 static asset readback"
+                "production V10.775 static asset readback",
+                "sales automation first-viewport cockpit",
+                "four-source readiness and runtime-closure readback",
+                "manual upload removed from the primary workflow",
+                "six-column verified-run history"
             ],
             "remaining": [
-                "production visible readback",
+                "production V10.776 visible readback",
                 "per-product cross-platform offer drawer and experiment outcome view"
             ],
       "production_acceptance": "first viewport shows freshness, revenue trend, coverage, risk and one executable next action without overflow"
@@ -239,11 +248,13 @@
       "completed": [
         "source and runtime review artifacts",
         "read-only visual evidence boundary",
-        "production DB lifecycle red lines"
+        "production DB lifecycle red lines",
+        "OpenTelemetry-compatible trace_id and span_id plus run_id and work_item_id envelope for sales acquisition",
+        "medium-risk controlled apply without legacy HITL terminal",
+        "durable acquisition receipt and atomic rollback verifier"
       ],
       "remaining": [
         "replace preview-only gate chains with executable work items",
-        "shared trace_id, run_id and work_item_id envelope",
         "SBOM and dependency policy enforcement",
         "automated drift work item creation",
         "security control coverage and production closure metrics"