From 2a8dfd6918dba2b9c3a54d50c436f308d6073ca4 Mon Sep 17 00:00:00 2001
From: cfdaily <cfdaily@gitee.com>
Date: Tue, 19 May 2026 14:10:18 +0800
Subject: [PATCH] auto-sync: 2026-05-19 14:10:18

---
 src/blackboard/operations.py | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/blackboard/operations.py b/src/blackboard/operations.py
index 7c1b8c0..d52c013 100644
--- a/src/blackboard/operations.py
+++ b/src/blackboard/operations.py
@@ -782,6 +782,11 @@ class Blackboard:
                 return {"error": "Task not found"}
 
             task_status = task_row["status"]
+            # BUG-32: 安全校验 — task 必须处于 waiting_human 才能推进
+            if task_status != "waiting_human":
+                conn.commit()
+                return {"error": f"Task is {task_status}, expected waiting_human"}
+
             if action == "approve":
                 if cp_type == "verify":
                     new_task_status = "done"