软件加固项目中研发、安全、发布团队和供应商怎样分工

import json
import sys
from pathlib import Path

if len(sys.argv) != 2:
    raise SystemExit('usage: validate_raci.py raci.json')
input_path = Path(sys.argv[1])
if not input_path.is_file():
    raise SystemExit('RACI file is missing')
data = json.loads(input_path.read_text(encoding='utf-8'))
activities = data.get('activities')
if not isinstance(activities, list) or not activities:
    raise SystemExit('activities array is missing')
seen = set()
accountable = {}
for index, item in enumerate(activities):
    name = str(item.get('activity', '')).strip()
    if not name or name in seen:
        raise SystemExit(f'invalid activity at index {index}')
    seen.add(name)
    assignments = {}
    for code in ('R', 'A', 'C', 'I'):
        values = item.get(code, [])
        if not isinstance(values, list) or any(not isinstance(value, str) or not value.strip() for value in values):
            raise SystemExit(f'{name}: invalid {code} assignments')
        assignments[code] = set(values)
    if not assignments['R']:
        raise SystemExit(f'{name}: no responsible role')
    if len(assignments['A']) != 1:
        raise SystemExit(f'{name}: accountable role must be unique')
    if assignments['A'] & (assignments['C'] | assignments['I']):
        raise SystemExit(f'{name}: accountable role is duplicated in C or I')
    accountable[name] = next(iter(assignments['A']))
    if name == 'production-signing' and 'vendor' in (assignments['R'] | assignments['A']):
        raise SystemExit('production signing is assigned to vendor')
required = {'input-build', 'hardening-policy', 'production-signing', 'device-acceptance', 'risk-exception', 'production-release', 'incident-response'}
missing = sorted(required - seen)
if missing:
    raise SystemExit('missing critical activities: ' + ','.join(missing))
if accountable['production-signing'] == accountable['production-release'] and not data.get('approved_exception'):
    raise SystemExit('signing and release share one accountable role without exception')
print(json.dumps({'activities': len(activities), 'critical_complete': True, 'status': 'pass'}, ensure_ascii=False))