修复: CR-01审查待修项①类7项(CSS补testing/blocked徽章+CAS防回收站推进+DRY+注释+测试改名+advancing接文案)+新增待审查.md审查队列(职责分离:主会话写/审查agent读)+todo销账

crates/df-storage/src/crud.rs

@@ -325,6 +325,10 @@ pub fn allowed_columns_for(table: &str) -> Option<&'static [&'static str]> {
         "tasks" => &[
             // id/created_at 不列入:主键与创建时间不可通过通用 update_field 改写
             // (防篡改主键/伪造创建时间/跨项目移动)。
+            // review_rounds 不列入:它仅 advance_status_atomic 退回转换
+            // (in_review→in_progress / testing→in_review)时原子 +1(收口:仅该专用路径可改,
+            // update_task/update_field 白名单均不含)。后人勿把 review_rounds 补进白名单,
+            // 否则破坏「review_rounds 唯一写入路径」收口、引入旁路写导致计数错乱。
             "project_id", "title", "description", "status", "priority", "branch_name",
             "assignee", "workflow_def_id", "base_branch", "updated_at",
             // TODO(B-260616-16): project_id 跨表存在性校验待 commands/task.rs 层补。
@@ -846,12 +850,14 @@ impl TaskRepo {
         tokio::task::spawn_blocking(move || {
             let guard = conn.blocking_lock();
             // CAS:WHERE id AND status=expected 锁定当前态;affected==0 即并发已改动。
+            // deleted_at IS NULL:回收站任务(soft_delete 设了 deleted_at)CAS 必败→affected=0,
+            // 返回 None,杜绝回收站任务被推进(D-02 软删语义收口,一处关闭)。
             let sql = if bump_rounds {
                 "UPDATE tasks SET status = ?1, review_rounds = review_rounds + 1, updated_at = ?2 \
-                 WHERE id = ?3 AND status = ?4"
+                 WHERE id = ?3 AND status = ?4 AND deleted_at IS NULL"
             } else {
                 "UPDATE tasks SET status = ?1, updated_at = ?2 \
-                 WHERE id = ?3 AND status = ?4"
+                 WHERE id = ?3 AND status = ?4 AND deleted_at IS NULL"
             };
             let affected = guard
                 .execute(sql, params![new_status, now, id, expected])