{
  "current_direct_bot_api_calls": [],
  "execution_boundaries": {
    "action_buttons_allowed": false,
    "api_sender_refactor_authorized": false,
    "bot_api_call_authorized": false,
    "bot_token_change_authorized": false,
    "chat_route_change_authorized": false,
    "not_authorization": true,
    "partial_token_collection_allowed": false,
    "production_write_authorized": false,
    "raw_payload_storage_allowed": false,
    "runtime_execution_authorized": false,
    "script_modification_authorized": false,
    "secret_hash_collection_allowed": false,
    "secret_value_collection_allowed": false,
    "telegram_send_authorized": false,
    "workflow_modification_authorized": false
  },
  "generated_at": "2026-07-02T19:29:33+08:00",
  "git_commit": "ca95b95bb",
  "guarded_bot_methods": [
    "sendMessage",
    "sendDocument",
    "sendPhoto",
    "sendMediaGroup",
    "editMessageText",
    "sendAnimation",
    "sendVideo",
    "sendAudio",
    "sendVoice"
  ],
  "guarded_roots": [
    ".gitea/workflows",
    "scripts/ops",
    "scripts/ci",
    "apps/api/src"
  ],
  "mode": "repo_source_scan_no_secret_value_no_telegram_send",
  "new_bypass_findings": [],
  "operator_interpretation": [
    "new_bypass_count 維持 0 才代表沒有新增未登記 Telegram Bot API 直送旁路。",
    "committed inventory 目前有 0 個 direct Bot API call site；若數值大於 0 仍是待 controlled migration 的基線，不代表已批准保留。",
    "sendDocument / sendPhoto / sendMediaGroup 等附件型出口若出現在 repo source，會被視為新增旁路並阻擋。",
    "本 guard 只讀 repo source 與 committed snapshot，不送 Telegram、不讀 Bot token、不修改 workflow / script / API sender。"
  ],
  "removed_baseline_signatures": [],
  "schema_version": "telegram_notification_egress_no_new_bypass_guard_v1",
  "source_snapshot": "docs/security/telegram-notification-egress-inventory.snapshot.json",
  "status": "pass_no_new_bypass",
  "summary": {
    "action_button_count": 0,
    "baseline_signature_count": 0,
    "current_direct_bot_api_call_count": 0,
    "current_direct_bot_api_file_count": 0,
    "editMessageText_call_count": 0,
    "guarded_method_count": 9,
    "new_bypass_count": 0,
    "new_bypass_file_count": 0,
    "other_guarded_method_call_count": 0,
    "removed_baseline_call_count": 0,
    "runtime_gate_count": 0,
    "sendDocument_call_count": 0,
    "sendMediaGroup_call_count": 0,
    "sendMessage_call_count": 0,
    "sendPhoto_call_count": 0,
    "source_direct_bot_api_call_count": 0,
    "source_direct_bot_api_file_count": 0
  }
}
