```

refactor(Dockerfile): 使用requirements.txt替代硬编码依赖

将Dockerfile中的硬编码pip包列表替换为通过requirements.txt文件安装，
提高依赖管理的灵活性和可维护性。

feat(scheduling): 移除内置APScheduler，采用独立调度系统

移除app/core/background/scheduler.py中原来的APScheduler实现，
改为使用新的应用级调度系统app.application.scheduling。

refactor(task_queue): 调整任务队列模块结构和导入路径

将任务队列相关常量从app.core.background.task_queue.constants迁移至
app.tasks.constants，并更新所有相关导入路径和引用。

refactor(events): 将事件服务重构为独立的应用层组件

将事件分发逻辑从核心层迁移到应用层，使用app.application.events.EventDispatchService
替代原有的app.modules.events.services.EventService。

feat(ai_memory): 增强AI记忆自动写入的安全策略

新增ai_memory_blocked_content_terms配置项用于阻止敏感内容，
添加TTL过期机制控制自动写入条目的生命周期。

fix(security): 强化生产环境安全验证机制

增加model_validator确保生产环境中数据库连接、API密钥、CORS设置等
关键安全配置符合要求。

feat(risks): 优化风险事件操作动作的外键约束

为RiskEventAction模型的风险事件ID字段添加外键约束，
防止孤立记录并增强数据完整性。

refactor(audit): 优化审计服务方法命名和事务处理

将AuditService的log方法重命名为record以反映其阶段行为，
并调整事务提交时机以提高性能。

feat(events): 增强领域事件并发处理和响应模型

添加事件锁定机制防止重复处理，更新API响应模型以提供
更准确的数据类型定义。
```

app/modules/ai_memory/service.py

@@ -1,3 +1,4 @@
+from datetime import datetime, timedelta
 from typing import Any
 from uuid import uuid4
 
@@ -99,9 +100,8 @@ class AIMemoryService:
         items = items[:limit_value]
         for item in items:
             item.last_used_at = now
-        self.db.commit()
         result = [serialize_model(item) for item in items]
-        self.audit.log(
+        self.audit.record(
             AuditLogCreate(
                 actor=actor,
                 source=AuditSource.AI_MEMORY,
@@ -117,6 +117,7 @@ class AIMemoryService:
                 response_payload={AIMemoryPayloadKey.COUNT: len(result)},
             )
         )
+        self.db.commit()
         return result
 
     def auto_write(
@@ -152,8 +153,24 @@ class AIMemoryService:
                 importance=0,
                 status_value=AIMemoryStatus.REJECTED,
                 actor=actor,
+                expires_at=utc_now()
+                + timedelta(days=settings.ai_memory_auto_write_ttl_days),
             )
             return record
+        if _contains_blocked_content(content, settings.ai_memory_blocked_content_terms):
+            return self._create_entry(
+                scope=scope,
+                subject=subject,
+                content=str(AIMemoryText.REJECTED_SENSITIVE_FACT),
+                summary=str(AIMemoryText.REJECTED_SENSITIVE_FACT),
+                tags=[str(AIMemoryText.AUTO_TAG)],
+                source=AIMemorySource.AUTO,
+                importance=0,
+                status_value=AIMemoryStatus.REJECTED,
+                actor=actor,
+                expires_at=utc_now()
+                + timedelta(days=settings.ai_memory_auto_write_ttl_days),
+            )
         summary = _truncate(answer, AI_MEMORY_MAX_SUMMARY_LENGTH)
         record = self._create_entry(
             scope=scope,
@@ -165,6 +182,7 @@ class AIMemoryService:
             importance=1,
             status_value=AIMemoryStatus.ACTIVE,
             actor=actor,
+            expires_at=utc_now() + timedelta(days=settings.ai_memory_auto_write_ttl_days),
         )
         return record
 
@@ -275,9 +293,7 @@ class AIMemoryService:
             record.tags = ["user-rule", *tags]
         if enabled is not None:
             record.status = AIMemoryStatus.ACTIVE if enabled else AIMemoryStatus.ARCHIVED
-        self.db.commit()
-        self.db.refresh(record)
-        self.audit.log(
+        self.audit.record(
             AuditLogCreate(
                 actor=actor,
                 source=AuditSource.AI_MEMORY,
@@ -292,6 +308,8 @@ class AIMemoryService:
                 },
             )
         )
+        self.db.commit()
+        self.db.refresh(record)
         return serialize_model(record)
 
     def _validate_rule(self, content: str, priority: int) -> None:
@@ -324,6 +342,7 @@ class AIMemoryService:
         status_value: str,
         actor: str,
         audit_action: str = AuditAction.AI_MEMORY_WRITE,
+        expires_at: datetime | None = None,
     ) -> AIMemoryEntry:
         record = AIMemoryEntry(
             code=(
@@ -339,11 +358,11 @@ class AIMemoryService:
             importance=importance,
             status=status_value,
             actor=actor,
+            expires_at=expires_at,
         )
         self.db.add(record)
-        self.db.commit()
-        self.db.refresh(record)
-        self.audit.log(
+        self.db.flush()
+        self.audit.record(
             AuditLogCreate(
                 actor=actor,
                 source=AuditSource.AI_MEMORY,
@@ -360,7 +379,7 @@ class AIMemoryService:
                 response_payload={AIMemoryPayloadKey.CODE: record.code},
             )
         )
-        EventService(self.db).emit(
+        EventService(self.db).enqueue(
             event_type=EventType.AI_MEMORY_WRITTEN,
             source=EventSource.AI_MEMORY,
             aggregate_type=EventAggregateType.AI_MEMORY_ENTRY,
@@ -373,8 +392,9 @@ class AIMemoryService:
                 AIMemoryPayloadKey.STATUS: status_value,
             },
             idempotency_key=f"ai-memory:{record.code}",
-            dispatch=True,
         )
+        self.db.commit()
+        self.db.refresh(record)
         return record
 
 
@@ -402,6 +422,11 @@ def _contains_forbidden_value(value: Any, forbidden_keys: list[str]) -> bool:
     return False
 
 
+def _contains_blocked_content(value: str, blocked_terms: list[str]) -> bool:
+    lowered = value.lower()
+    return any(term.lower() in lowered for term in blocked_terms if term.strip())
+
+
 def _matches_query(entry: AIMemoryEntry, query: str) -> bool:
     query_text = query.lower().strip()
     if not query_text: