Abstract: Against the background of digital civilization and open-source development, this article points out the risks of continuity, compliance, security and governance deficiency caused by the high concentration of global open-source data assets in a few platforms. The Institute of Software Chinese Academy of Sciences (ISCAS) has successively built the SourceMap open-source software infrastructure and the Ruyi RISC-V native community. As a strategic backup and governance platform for global open-source assets, SourceMap constructs a secure base for open-source digital civilization through full-volume data backup, intelligent compliance and security governance, and efficient asset reuse. Ruyi focuses on the construction of RISC-V native basic software stack, promotes RISC-V to become an international standard of instruction set architecture, and solves the problem of software ecosystem fragmentation. The article further analyzes the challenges brought by the artificial intelligence era to the two platforms, such as the expansion of asset types and the escalation of security risks, as well as the opportunities for evolving to AI full-element governance and AI-enabled RISC-V ecosystem. It clarifies the significance of the collaboration between open-source infrastructure and open instruction set for the inheritance of digital civilization and the continuous innovation of software.