{
  "schema_version": "agent_bounty_iwooos_onboarding_handoff_v1",
  "status": "draft_waiting_owner_review",
  "date": "2026-06-11",
  "mode": "product_scope_handoff_only",
  "source_evidence_refs": [
    "docs/security/iwooos-posture-projection.snapshot.json",
    "docs/workplans/2026-06-04-iwooos-security-governance-p0.md",
    "apps/web/src/app/[locale]/iwooos/page.tsx",
    "apps/web/messages/zh-TW.json",
    "/Users/ogt/Documents/agent-bounty-protocol/README.md",
    "/Users/ogt/Documents/agent-bounty-protocol/package.json",
    "/Users/ogt/Documents/agent-bounty-protocol/apps/web/package.json",
    "/Users/ogt/Documents/agent-bounty-protocol/packages/mcp-server/package.json",
    "/Users/ogt/Documents/agent-bounty-protocol/packages/contracts/package.json",
    "/Users/ogt/Documents/agent-bounty-protocol/docker-compose.yml"
  ],
  "summary": {
    "product_name": "agent-bounty-protocol",
    "onboarding_handoff_package_ready": true,
    "onboarding_handoff_completion_percent": 100,
    "product_boundary_merged_into_awoooi": false,
    "owner_response_received": false,
    "owner_response_accepted": false,
    "repo_refs_truth_accepted": false,
    "data_classification_accepted": false,
    "deployment_boundary_accepted": false,
    "external_agent_boundary_accepted": false,
    "runtime_gate_open": false,
    "runtime_execution_authorized": false,
    "production_deploy_authorized": false,
    "repo_creation_authorized": false,
    "refs_sync_authorized": false,
    "workflow_modification_authorized": false,
    "secret_value_collection_authorized": false,
    "auto_claim_submit_authorized": false,
    "bounty_payout_authorized": false,
    "external_agent_autonomy_authorized": false,
    "shared_database_authorized": false,
    "shared_session_authorized": false,
    "shared_rbac_authorized": false,
    "action_buttons_allowed": false
  },
  "product_identity": {
    "product_type": "M2M 交易閘道器、Agent Bounty / MCP / A2A 實驗產品",
    "current_focus": "公開任務、agent 互動、MCP tool gateway、A2A negotiation、外部流量監控、scout、webhook、admin / treasury 與 cron automation 的只讀資安納管。",
    "technical_stack": [
      "Next.js 16 App Router",
      "React 19",
      "TypeScript",
      "Prisma",
      "PostgreSQL",
      "Redis",
      "Docker Compose",
      "MCP SDK",
      "A2A / Nostr / Waku / XMTP 類外部 agent 連線",
      "Stripe / Ethers / webhook 類整合候選",
      "Telegram / Discord / GitHub 通知或 webhook 候選"
    ],
    "language_policy": "納入 IwoooS 與 AWOOOI 文件、前端內容、LOGBOOK 與 handoff 時一律使用繁體中文；程式符號、API、套件名稱、route 與 env-key 名稱可保留英文。"
  },
  "repo_scope": {
    "active_workspace": {
      "path": "/Users/ogt/Documents/agent-bounty-protocol",
      "status_summary": "read_only_observed_dirty_workspace_on_main_with_51_modified_or_untracked_items; .env-like files exist but were not read",
      "canonical_for_iwooos": false,
      "forbidden_actions": [
        "commit",
        "rebase",
        "push",
        "delete_files",
        "sync_refs",
        "read_env_file",
        "run_deploy_script",
        "run_security_scan",
        "start_cron_or_daemon"
      ]
    },
    "reference_worktree": {
      "path": "/Users/ogt/Documents/agent-bounty-protocol",
      "head_sha": "a1856d08bc2778f9b41076cd6175ff2389b2e5ca",
      "origin_main_sha": "a1856d08bc2778f9b41076cd6175ff2389b2e5ca",
      "main_sha": "a1856d08bc2778f9b41076cd6175ff2389b2e5ca",
      "remote": "http://192.168.0.110:3001/wooo/agent-bounty-protocol.git",
      "refs_truth_status": "waiting_owner_decision_due_dirty_workspace_and_internal_remote"
    },
    "required_owner_answers": [
      "canonical repo path / remote",
      "dirty workspace WIP vs release candidate disposition",
      "GitHub target metadata if needed",
      "workflow / runner / webhook / secret name parity owner",
      "production host / compose directory / domain / TLS owner",
      "A2A / MCP / external agent autonomy boundary owner",
      "treasury / payout / staking / Stripe / settlement data owner",
      "traffic monitoring / Telegram / Discord / GitHub webhook notification owner"
    ]
  },
  "product_surfaces": [
    {
      "surface_id": "public-and-task-surface",
      "routes": [
        "/",
        "/tasks/[id]",
        "/tasks/create",
        "/showcase",
        "/showcase/[id]",
        "/leaderboard",
        "/explorer",
        "/traffic",
        "/ico"
      ],
      "boundary": "public and marketplace-facing surface only; no bounty payout or external claim/submit authorization in this handoff"
    },
    {
      "surface_id": "well-known-agent-metadata",
      "routes": [
        "/.well-known/agent-card.json",
        "/.well-known/ai-plugin.json",
        "/.well-known/mcp.json",
        "/.well-known/openapi.yaml"
      ],
      "boundary": "metadata can be indexed as route evidence; it does not authorize agent execution or credential exposure"
    },
    {
      "surface_id": "mcp-and-open-task-api",
      "routes": [
        "/api/mcp/[tool]",
        "/api/mcp/agent_card",
        "/api/mcp/create_human_task",
        "/api/mcp/submit_bid",
        "/api/open-tasks"
      ],
      "boundary": "MCP tool gateway requires owner response, auth boundary and abuse controls before any runtime use; this handoff is read-only"
    },
    {
      "surface_id": "a2a-agent-protocol",
      "routes": [
        "/api/a2a/arbitrate",
        "/api/a2a/directory/sync",
        "/api/a2a/dispute",
        "/api/a2a/launchpad/create",
        "/api/a2a/launchpad/projects",
        "/api/a2a/mcp/discover",
        "/api/a2a/negotiate",
        "/api/a2a/reputation/verify",
        "/api/a2a/rpc",
        "/api/a2a/settle",
        "/api/a2a/staking/deposit",
        "/api/a2a/staking/withdraw"
      ],
      "boundary": "external agent, settlement, staking and dispute routes stay locked until owner approval and follow-up runtime gate"
    },
    {
      "surface_id": "automation-and-cron",
      "routes": [
        "/api/cron/a2a-discovery",
        "/api/cron/a2a-dispatcher",
        "/api/cron/a2a-inviter",
        "/api/cron/a2a-swarm",
        "/api/cron/bidding-evaluator",
        "/api/cron/judge-agent",
        "/api/cron/lead-gen",
        "/api/cron/reaper",
        "/api/cron/self-replicate",
        "/api/cron/sentience-check",
        "/api/cron/treasury-alert"
      ],
      "boundary": "cron and daemon behavior is observe-only in IwoooS; no schedule enable, external send, claim, submit, payout or self-replication is authorized"
    },
    {
      "surface_id": "admin-and-treasury",
      "routes": [
        "/admin",
        "/admin/traffic",
        "/admin/treasury",
        "/api/admin/health",
        "/api/admin/simulate",
        "/api/admin/treasury/stats",
        "/api/admin/withdraw",
        "/login"
      ],
      "boundary": "admin, treasury and withdraw surfaces require RBAC / auth / financial owner response; IwoooS only lists them as scope"
    },
    {
      "surface_id": "webhooks-and-traffic",
      "routes": [
        "/api/traffic",
        "/api/webhooks/github",
        "/api/webhooks/stripe",
        "/api/scout/draft",
        "/api/scout/issue-exists",
        "/api/intents/stream",
        "/api/v1/health"
      ],
      "boundary": "traffic, scout and webhook evidence must be redacted metadata only; no webhook secret or payload body collection"
    }
  ],
  "owner_response_handoff": {
    "status": "ready_not_dispatched",
    "request_dispatch_authorized": false,
    "required_response_fields": [
      "product_owner_role_or_team",
      "security_owner_role_or_team",
      "source_control_owner_role_or_team",
      "deployment_owner_role_or_team",
      "data_classification_owner_role_or_team",
      "external_agent_boundary_owner_role_or_team",
      "settlement_or_treasury_owner_role_or_team",
      "notification_owner_role_or_team",
      "surface_scope",
      "decision",
      "decision_reason",
      "redacted_evidence_refs",
      "followup_owner"
    ],
    "allowed_decisions": [
      "confirm_observe_only",
      "defer",
      "reject",
      "request_more_evidence"
    ],
    "forbidden_inputs": [
      ".env content",
      "database URL value",
      "API key value",
      "MCP API key value",
      "E2B API key value",
      "Telegram bot token value",
      "Telegram chat id value",
      "Discord webhook value",
      "GitHub token value",
      "Stripe secret value",
      "wallet private key",
      "seed phrase",
      "cookie",
      "session",
      "auth header",
      "raw webhook payload",
      "raw traffic payload",
      "raw agent prompt or transcript",
      "claim or submit execution request",
      "payout or withdraw execution request",
      "deploy command request",
      "compose restart request",
      "DB migration request",
      "repo push request",
      "refs sync request"
    ],
    "response_received": false,
    "response_accepted": false
  },
  "independent_product_boundary": {
    "must_remain_independent": true,
    "forbidden_couplings": [
      "share_awoooi_database",
      "share_awoooi_session",
      "bind_agent_bounty_rbac_to_awoooi_rbac_without_owner_review",
      "depend_on_awoooi_runtime_for_agent_bounty_core_flow",
      "treat_awooop_approval_as_agent_bounty_security_approval",
      "direct_cross_database_join",
      "auto_bridge_awooop_work_item_to_agent_claim_submit",
      "auto_trigger_payout_or_withdrawal"
    ],
    "allowed_future_integrations": [
      "versioned API",
      "Webhook event with redacted metadata",
      "outbox pattern",
      "import / export adapter",
      "SSO / OAuth with product RBAC preserved",
      "Anti-Corruption Layer",
      "read-only AwoooP evidence mirror"
    ]
  },
  "data_classification_intake": [
    {
      "data_type": "task / bounty / solution metadata",
      "status": "waiting_owner_classification",
      "collection_rule": "metadata and field type only; no private task content, raw solution or unpublished code"
    },
    {
      "data_type": "agent identity / reputation / negotiation state",
      "status": "waiting_owner_classification",
      "collection_rule": "agent id category and state transition summary only; no raw prompt, transcript, private key or token"
    },
    {
      "data_type": "MCP tool calls / A2A protocol events",
      "status": "waiting_owner_classification",
      "collection_rule": "route, tool name and decision metadata only; no request body, credential, payload or generated secret"
    },
    {
      "data_type": "webhook / traffic / scout evidence",
      "status": "waiting_owner_classification",
      "collection_rule": "source type, timestamp and redacted status only; no webhook secret, auth header or raw payload body"
    },
    {
      "data_type": "settlement / staking / treasury / Stripe",
      "status": "waiting_owner_classification",
      "collection_rule": "capability and owner metadata only; no wallet private key, seed phrase, Stripe secret or payout instruction"
    },
    {
      "data_type": "admin / login / traffic dashboard",
      "status": "waiting_owner_classification",
      "collection_rule": "role boundary and audit event type only; no account password, session, cookie or private user data"
    },
    {
      "data_type": "cron / daemon / ecosystem hunter",
      "status": "waiting_owner_classification",
      "collection_rule": "schedule name, disabled/enabled intent and redacted endpoint refs only; no daemon start, claim, submit or external send"
    }
  ],
  "deployment_boundary": {
    "public_host": "https://agent.wooo.work",
    "production_mode": "Docker Compose candidate with owner confirmation required",
    "compose_host_status": "README mentions 110; scripts and prior local deploy helpers mention 188; owner must confirm canonical host before any production claim",
    "compose_directory_status": "waiting_owner_confirmation; no SSH, rsync, compose restart or deploy script was executed in this AWOOOI stage",
    "internal_web_status": "docker-compose exposes web host port 3004 and agent host port 3001 in local evidence; do not publish internal URL in frontend",
    "database_boundary": "Compose PostgreSQL and Redis services; .env-like files exist but were not read; no DB URL value collection",
    "production_verification_in_this_awoooi_stage": false,
    "deployment_authorized": false
  },
  "external_agent_boundary": {
    "autonomy_authorized": false,
    "claim_submit_authorized": false,
    "payout_authorized": false,
    "allowed_now": [
      "display_read_only_scope",
      "display_redacted_route_inventory",
      "display_required_owner_response_fields",
      "display_forbidden_actions",
      "prepare_followup_review_candidate"
    ],
    "blocked_until_owner_review": [
      "AUTO_CLAIM",
      "AUTO_SUBMIT",
      "RUN_DAEMON",
      "external MCP claim / submit",
      "Nostr listener daemon",
      "A2A dispatcher",
      "self-replicate cron",
      "treasury alert send",
      "Stripe webhook secret validation change",
      "payout / withdraw / staking action",
      "GitHub issue comment or token use",
      "Telegram / Discord notification send"
    ]
  },
  "acceptance_rules": [
    "本 handoff 完成不代表 agent-bounty-protocol owner response 已收到或 accepted。",
    "agent-bounty-protocol 納入 IwoooS 只代表全產品資安視野可見，不代表掃描、部署、修復、claim、submit、payout、withdraw、cron 或 runtime execution。",
    "canonical repo、refs truth、workflow / secret name、GitHub target、compose host 與 production URL 仍需 owner response。",
    "正式 URL、Docker Compose、health endpoint、MCP metadata 或 A2A routes 可見，不等於本段已做 production verification。",
    "任何 .env、secret、DB URL、token、private key、seed phrase、cookie、session、auth header、webhook secret 都必須拒收或隔離。",
    "未來若要改 agent-bounty-protocol production、deploy、compose、DB migration、cron、daemon、domain、TLS、MCP tool behavior 或 A2A automation，必須另開 owner approval 與 rollback / post-check。"
  ],
  "forbidden_actions": [
    "modify_agent_bounty_repo",
    "commit_agent_bounty_changes",
    "push_agent_bounty_refs",
    "sync_refs",
    "create_github_repo",
    "change_workflow",
    "collect_secret_value",
    "read_env_file",
    "deploy_production",
    "restart_compose",
    "run_db_migration",
    "run_active_scan",
    "run_credentialed_scan",
    "start_daemon",
    "enable_cron",
    "auto_claim",
    "auto_submit",
    "send_external_agent_message",
    "send_telegram_notification",
    "send_discord_notification",
    "post_github_comment",
    "execute_payout",
    "execute_withdrawal",
    "share_database",
    "share_session",
    "bind_rbac",
    "enable_runtime_gate",
    "add_awooop_action_button"
  ]
}
