20260902 完成公开树清理与热点拆分

scripts/ci/check_public_tree.sh

@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+REPO_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
+cd "$REPO_ROOT"
+
+readonly PATTERN='git\.nasp\.fit|specs/develop|dev_1\.0\.0_yuyr|private[[:space:]]+(staging|repository)|remote[- ]?(231|211)|Feature #[0-9]{3}|#[0-9]{3}[[:space:]]+M[0-9]+'
+
+readonly -a PUBLIC_TEXT_PATHS=(
+  README.md
+  CONTRIBUTING.md
+  SECURITY.md
+  docs
+  docker
+  deploy
+  scripts
+  tests/compat
+  fixtures
+  crates/panda-rpki-validator/src
+  crates/panda-rpki-validator/tests/fixtures/ta_constraints
+)
+
+if matches="$(rg -n -I -g '!scripts/ci/check_public_tree.sh' -e "$PATTERN" "${PUBLIC_TEXT_PATHS[@]}")"; then
+  echo "public-tree check found internal-history wording:" >&2
+  echo "$matches" >&2
+  exit 1
+fi
+
+echo "public-tree check passed"