{
  "projectId": "almanak",
  "title": "Almanak 的策略构建与部署工作台",
  "summary": "公开业务包把策略构建、部署、资金与账户流程分为独立路由，前端入口可以还原，策略运行服务仍在范围外。",
  "scope": "实际公开网页发布的选定业务 JavaScript 包；REA 解析 1 个 JS 文件，静态分析。",
  "status": "partial",
  "analyzedAt": "2026-10-13T10:37:02.568707+00:00",
  "tool": {
    "name": "REA",
    "version": "6.4.0"
  },
  "findings": [
    {
      "title": "构建与部署是两层页面",
      "detail": "发行包的路由表区分 build/strategies、build/public-strategies、build/chat 与 deployments，另有 vaults、buy-credits、GitHub 认证回调等入口。",
      "evidenceType": "observed",
      "evidenceIds": [
        "ev_80ecbc75d7f47928a44b06f65438dc45d1f5d1a0e9a206071bbdc3832d02b96d"
      ],
      "sourceUrls": [
        "https://app.almanak.co/assets/immutable/v2/app-Cg4tKgFF.js"
      ]
    },
    {
      "title": "资金界面通过单独模块加载",
      "detail": "主包引用 deposit-address、wallet-connect、funding、deployCapitalSummary、DepositWithdraw 等动态模块。模块名和导入关系仅说明界面分层，未取得每一模块的完整执行路径。",
      "evidenceType": "code_inference",
      "evidenceIds": [
        "ev_80ecbc75d7f47928a44b06f65438dc45d1f5d1a0e9a206071bbdc3832d02b96d"
      ],
      "sourceUrls": [
        "https://app.almanak.co/assets/immutable/v2/app-Cg4tKgFF.js"
      ]
    }
  ],
  "limitations": [
    "仅分析实际 app 主包，未恢复所有按需加载的资金和策略模块。",
    "没有部署策略、入金或使用 GitHub 账户授权。",
    "静态代码不证明运行行为、完整风控、成交或收益；未审计服务端。",
    "没有登录、读取账户、连接钱包、签名、交易或执行目标代码。"
  ],
  "artifacts": [
    {
      "label": "app-Cg4tKgFF.js",
      "url": "https://app.almanak.co/assets/immutable/v2/app-Cg4tKgFF.js",
      "sha256": "1d831ac647432e06e1baaf9ed5a46ec167d020d42df4573b2f960b0347c6896b"
    }
  ],
  "evidenceIds": [
    "ev_80ecbc75d7f47928a44b06f65438dc45d1f5d1a0e9a206071bbdc3832d02b96d"
  ],
  "reportUrl": "/research/rea/almanak.json",
  "coverage": {
    "parsedFiles": 1,
    "parseFailures": 0,
    "semanticCoverage": "partial",
    "rootArtifactSha256": "c3e268aa3ceb2a86f0f0833aa197712866aa8fcd11adc9eb07e1855e774ece9f",
    "inputFileCount": 1,
    "inputBytes": 369440,
    "analysisResult": "completed"
  }
}