feat(governance): 新增 post-release verifier rollback gate

docs/evaluations/ai_agent_result_capture_post_release_verifier_rollback_gate_2026-06-14.json

@@ -0,0 +1,470 @@
+{
+  "schema_version": "ai_agent_result_capture_post_release_verifier_rollback_gate_v1",
+  "generated_at": "2026-06-14T05:18:00+08:00",
+  "program_status": {
+    "overall_completion_percent": 100,
+    "current_priority": "P2",
+    "current_task_id": "P2-132",
+    "next_task_id": "P2-133",
+    "read_only_mode": true,
+    "runtime_authority": "result_capture_post_release_verifier_rollback_gate_only_no_live_write",
+    "status_note": "P2-132 只把 P2-131 owner release approval gate 轉成 post-release verifier / rollback gate；不得視為 owner release approved，不得批准 maintenance window，不得確認 rollback owner，不得釋放 live apply、套用 writer、寫 receipt、寫 result capture、寫 learning、寫 queue、送 Telegram 或寫入 production。"
+  },
+  "source_refs": [
+    "docs/evaluations/ai_agent_result_capture_owner_release_approval_gate_2026-06-14.json",
+    "docs/evaluations/ai_agent_result_capture_owner_approved_release_readiness_readback_2026-06-14.json",
+    "docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md#52-建立-owner-release-approval-gate"
+  ],
+  "prior_owner_release_approval_gate": {
+    "schema_version": "ai_agent_result_capture_owner_release_approval_gate_v1",
+    "owner_release_approval_packet_count": 5,
+    "maintenance_window_approval_gate_count": 5,
+    "live_apply_release_approval_gate_count": 5,
+    "rollback_owner_approval_check_count": 5,
+    "blocked_approval_transition_count": 6,
+    "operator_action_count": 5,
+    "approval_required_total": 8,
+    "blocked_total": 9,
+    "owner_release_approved_count": 0,
+    "maintenance_window_approved_count": 0,
+    "rollback_owner_confirmed_count": 0,
+    "post_release_verifier_ready_count": 0,
+    "release_approval_pass_count": 0,
+    "live_apply_release_pass_count": 0,
+    "writer_apply_count": 0,
+    "execution_apply_count": 0,
+    "receipt_write_count": 0,
+    "result_capture_write_count": 0,
+    "learning_write_count": 0,
+    "playbook_trust_write_count": 0,
+    "reviewer_queue_write_count": 0,
+    "gateway_queue_write_count": 0,
+    "telegram_send_count": 0,
+    "bot_api_call_count": 0,
+    "report_receipt_write_count": 0,
+    "readiness_note": "P2-131 已把 owner release approval packet、maintenance window approval gate、live-apply approval gate、rollback owner approval check 與 blocked approval transition 固定為只讀 approval gate；P2-132 只建立 post-release verifier / rollback gate，不視為正式批准。"
+  },
+  "post_release_verifier_truth": {
+    "p2_131_approval_gate_loaded": true,
+    "post_release_verifier_gate_ready": true,
+    "rollback_release_gate_ready": true,
+    "release_verification_hold_active": true,
+    "live_apply_post_release_hold_active": true,
+    "owner_release_review_still_required": true,
+    "maintenance_window_review_still_required": true,
+    "rollback_owner_review_required": true,
+    "redaction_review_required": true,
+    "post_release_verifier_gate_only": true,
+    "owner_release_approved": false,
+    "maintenance_window_approved": false,
+    "rollback_owner_confirmed": false,
+    "post_release_verifier_ready": false,
+    "release_verification_passed": false,
+    "rollback_release_passed": false,
+    "live_apply_release_passed": false,
+    "writer_apply_enabled": false,
+    "execution_apply_enabled": false,
+    "receipt_write_enabled": false,
+    "reviewer_queue_write_enabled": false,
+    "gateway_queue_write_enabled": false,
+    "telegram_send_enabled": false,
+    "bot_api_call_enabled": false,
+    "report_receipt_write_enabled": false,
+    "result_capture_write_enabled": false,
+    "learning_write_enabled": false,
+    "playbook_trust_write_enabled": false,
+    "production_write_enabled": false,
+    "secret_read_enabled": false,
+    "destructive_operation_enabled": false,
+    "owner_release_approved_count": 0,
+    "maintenance_window_approved_count": 0,
+    "rollback_owner_confirmed_count": 0,
+    "post_release_verifier_ready_count": 0,
+    "release_verification_pass_count": 0,
+    "rollback_release_pass_count": 0,
+    "live_apply_release_pass_count": 0,
+    "writer_apply_count": 0,
+    "execution_apply_count": 0,
+    "receipt_write_count": 0,
+    "reviewer_queue_write_count": 0,
+    "gateway_queue_write_count": 0,
+    "telegram_send_count": 0,
+    "bot_api_call_count": 0,
+    "report_receipt_write_count": 0,
+    "result_capture_write_count": 0,
+    "learning_write_count": 0,
+    "playbook_trust_write_count": 0,
+    "production_write_count": 0,
+    "secret_read_count": 0,
+    "destructive_operation_count": 0,
+    "truth_note": "P2-132 只建立 post-release verifier / rollback gate；verifier gate 可見不代表 post-release verifier ready、rollback owner confirmed、release verification passed 或 live apply 可執行。"
+  },
+  "post_release_verifier_gates": [
+    {
+      "gate_id": "post_release_verifier_result_capture",
+      "display_name": "Result capture post-release verifier gate",
+      "owner_agent": "openclaw",
+      "source_approval_gate": "approval_gate_result_capture_writer",
+      "status": "ready_for_owner_review",
+      "gate_mode": "post_release_verifier_gate",
+      "post_release_verifier_ready": false,
+      "release_verification_passed": false,
+      "verifier_summary": "建立 result capture post-release verifier gate；未取得 owner approval、maintenance window 與 rollback owner 前不得寫 receipt 或 result capture。",
+      "evidence_hash": "sha256:d111111111111111111111111111111111111111111111111111111111111111"
+    },
+    {
+      "gate_id": "post_release_verifier_learning",
+      "display_name": "Learning post-release verifier gate",
+      "owner_agent": "hermes",
+      "source_approval_gate": "approval_gate_learning_writer",
+      "status": "approval_required",
+      "gate_mode": "post_release_verifier_gate",
+      "post_release_verifier_ready": false,
+      "release_verification_passed": false,
+      "verifier_summary": "建立 learning verifier gate；不寫 KM、不寫 learning metadata、不更新 PlayBook trust。",
+      "evidence_hash": "sha256:d222222222222222222222222222222222222222222222222222222222222222"
+    },
+    {
+      "gate_id": "post_release_verifier_playbook_trust",
+      "display_name": "PlayBook trust post-release verifier gate",
+      "owner_agent": "nemotron",
+      "source_approval_gate": "approval_gate_playbook_trust_writer",
+      "status": "blocked_by_policy",
+      "gate_mode": "post_release_verifier_gate",
+      "post_release_verifier_ready": false,
+      "release_verification_passed": false,
+      "verifier_summary": "PlayBook trust 仍需 OpenClaw 仲裁與負向強化 reviewer；未完成前不得 release verification pass。",
+      "evidence_hash": "sha256:d333333333333333333333333333333333333333333333333333333333333333"
+    },
+    {
+      "gate_id": "post_release_verifier_reviewer_queue",
+      "display_name": "Reviewer queue post-release verifier gate",
+      "owner_agent": "openclaw",
+      "source_approval_gate": "approval_gate_reviewer_queue_writer",
+      "status": "approval_required",
+      "gate_mode": "post_release_verifier_gate",
+      "post_release_verifier_ready": false,
+      "release_verification_passed": false,
+      "verifier_summary": "建立 reviewer queue verifier gate；不寫 reviewer queue、不建立 live queue item。",
+      "evidence_hash": "sha256:d444444444444444444444444444444444444444444444444444444444444444"
+    },
+    {
+      "gate_id": "post_release_verifier_gateway_queue",
+      "display_name": "Gateway queue post-release verifier gate",
+      "owner_agent": "nemotron",
+      "source_approval_gate": "approval_gate_gateway_queue_writer",
+      "status": "ready_for_owner_review",
+      "gate_mode": "post_release_verifier_gate",
+      "post_release_verifier_ready": false,
+      "release_verification_passed": false,
+      "verifier_summary": "建立 Gateway queue verifier gate；不寫 Gateway queue、不送 Telegram、不呼叫 Bot API。",
+      "evidence_hash": "sha256:d555555555555555555555555555555555555555555555555555555555555555"
+    }
+  ],
+  "rollback_release_gates": [
+    {
+      "gate_id": "rollback_release_result_capture",
+      "display_name": "Result capture rollback release gate",
+      "owner_agent": "openclaw",
+      "status": "ready_for_owner_review",
+      "gate_mode": "rollback_release_gate",
+      "rollback_owner_required": true,
+      "rollback_owner_confirmed": false,
+      "rollback_release_enabled": false,
+      "rollback_scope": "撤回 result capture verifier gate、receipt preview 與 release candidate handoff。"
+    },
+    {
+      "gate_id": "rollback_release_learning",
+      "display_name": "Learning rollback release gate",
+      "owner_agent": "hermes",
+      "status": "approval_required",
+      "gate_mode": "rollback_release_gate",
+      "rollback_owner_required": true,
+      "rollback_owner_confirmed": false,
+      "rollback_release_enabled": false,
+      "rollback_scope": "撤回 learning verifier gate、KM write scope 與 stale guard handoff。"
+    },
+    {
+      "gate_id": "rollback_release_playbook_trust",
+      "display_name": "PlayBook trust rollback release gate",
+      "owner_agent": "nemotron",
+      "status": "blocked_by_policy",
+      "gate_mode": "rollback_release_gate",
+      "rollback_owner_required": true,
+      "rollback_owner_confirmed": false,
+      "rollback_release_enabled": false,
+      "rollback_scope": "撤回 PlayBook trust verifier gate、trust delta 與 reviewer handoff。"
+    },
+    {
+      "gate_id": "rollback_release_reviewer_queue",
+      "display_name": "Reviewer queue rollback release gate",
+      "owner_agent": "openclaw",
+      "status": "approval_required",
+      "gate_mode": "rollback_release_gate",
+      "rollback_owner_required": true,
+      "rollback_owner_confirmed": false,
+      "rollback_release_enabled": false,
+      "rollback_scope": "撤回 reviewer queue verifier gate、dedupe key 與 SLA handoff。"
+    },
+    {
+      "gate_id": "rollback_release_gateway_queue",
+      "display_name": "Gateway queue rollback release gate",
+      "owner_agent": "nemotron",
+      "status": "ready_for_owner_review",
+      "gate_mode": "rollback_release_gate",
+      "rollback_owner_required": true,
+      "rollback_owner_confirmed": false,
+      "rollback_release_enabled": false,
+      "rollback_scope": "撤回 Gateway queue verifier gate、route lock 與 Telegram receipt draft。"
+    }
+  ],
+  "release_verification_holds": [
+    {
+      "hold_id": "verification_hold_result_capture",
+      "display_name": "Result capture verification hold",
+      "owner_agent": "openclaw",
+      "status": "ready_for_owner_review",
+      "hold_mode": "release_verification_hold",
+      "owner_release_approved": false,
+      "maintenance_window_approved": false,
+      "release_verification_passed": false,
+      "hold_reason": "owner release approved、maintenance window approved、rollback owner confirmed 與 post-release verifier ready 尚未成立。"
+    },
+    {
+      "hold_id": "verification_hold_learning",
+      "display_name": "Learning verification hold",
+      "owner_agent": "hermes",
+      "status": "approval_required",
+      "hold_mode": "release_verification_hold",
+      "owner_release_approved": false,
+      "maintenance_window_approved": false,
+      "release_verification_passed": false,
+      "hold_reason": "learning write scope、KM owner、rollback owner 與 maintenance window 尚未 approved。"
+    },
+    {
+      "hold_id": "verification_hold_playbook_trust",
+      "display_name": "PlayBook trust verification hold",
+      "owner_agent": "nemotron",
+      "status": "blocked_by_policy",
+      "hold_mode": "release_verification_hold",
+      "owner_release_approved": false,
+      "maintenance_window_approved": false,
+      "release_verification_passed": false,
+      "hold_reason": "OpenClaw 仲裁、trust reviewer 與負向強化審查尚未完成。"
+    },
+    {
+      "hold_id": "verification_hold_reviewer_queue",
+      "display_name": "Reviewer queue verification hold",
+      "owner_agent": "openclaw",
+      "status": "approval_required",
+      "hold_mode": "release_verification_hold",
+      "owner_release_approved": false,
+      "maintenance_window_approved": false,
+      "release_verification_passed": false,
+      "hold_reason": "reviewer queue owner、rollback owner 與 maintenance window 尚未 approved。"
+    },
+    {
+      "hold_id": "verification_hold_gateway_queue",
+      "display_name": "Gateway queue verification hold",
+      "owner_agent": "nemotron",
+      "status": "ready_for_owner_review",
+      "hold_mode": "release_verification_hold",
+      "owner_release_approved": false,
+      "maintenance_window_approved": false,
+      "release_verification_passed": false,
+      "hold_reason": "Telegram receipt owner、SRE route lock 與 maintenance window 尚未 approved。"
+    }
+  ],
+  "live_apply_post_release_gates": [
+    {
+      "gate_id": "live_apply_post_release_result_capture",
+      "display_name": "Result capture live apply post-release gate",
+      "owner_agent": "openclaw",
+      "status": "ready_for_owner_review",
+      "gate_mode": "live_apply_post_release_gate",
+      "post_release_verifier_ready": false,
+      "live_apply_release_enabled": false,
+      "release_condition": "P2-133 只能先建立 final release candidate readback，不得直接 writer apply。"
+    },
+    {
+      "gate_id": "live_apply_post_release_learning",
+      "display_name": "Learning live apply post-release gate",
+      "owner_agent": "hermes",
+      "status": "approval_required",
+      "gate_mode": "live_apply_post_release_gate",
+      "post_release_verifier_ready": false,
+      "live_apply_release_enabled": false,
+      "release_condition": "需要 owner release approval gate、maintenance window gate、rollback gate 與 verifier gate 同時通過。"
+    },
+    {
+      "gate_id": "live_apply_post_release_playbook_trust",
+      "display_name": "PlayBook trust live apply post-release gate",
+      "owner_agent": "nemotron",
+      "status": "blocked_by_policy",
+      "gate_mode": "live_apply_post_release_gate",
+      "post_release_verifier_ready": false,
+      "live_apply_release_enabled": false,
+      "release_condition": "不得因 verifier gate 可見而自動更新 PlayBook trust。"
+    },
+    {
+      "gate_id": "live_apply_post_release_reviewer_queue",
+      "display_name": "Reviewer queue live apply post-release gate",
+      "owner_agent": "openclaw",
+      "status": "approval_required",
+      "gate_mode": "live_apply_post_release_gate",
+      "post_release_verifier_ready": false,
+      "live_apply_release_enabled": false,
+      "release_condition": "不得寫 reviewer queue，僅保留 final candidate readback。"
+    },
+    {
+      "gate_id": "live_apply_post_release_gateway_queue",
+      "display_name": "Gateway queue live apply post-release gate",
+      "owner_agent": "nemotron",
+      "status": "ready_for_owner_review",
+      "gate_mode": "live_apply_post_release_gate",
+      "post_release_verifier_ready": false,
+      "live_apply_release_enabled": false,
+      "release_condition": "不得寫 Gateway queue、不得送 Telegram、不得呼叫 Bot API。"
+    }
+  ],
+  "blocked_post_release_transitions": [
+    {
+      "blocker_id": "blocked_writer_apply_post_release",
+      "display_name": "Writer apply post-release blocked",
+      "severity": "critical",
+      "status": "blocked_by_policy",
+      "blocked_action": "writer_apply_after_post_release_verifier_gate",
+      "blocked_until": "owner release approved + maintenance window approved + post-release verifier ready + rollback owner confirmed",
+      "evidence_hash": "sha256:e1e1e1e1e1e1e1e1e1e1e1e1e1e1e1e1e1e1e1e1e1e1e1e1e1e1e1e1e1e1e1e1"
+    },
+    {
+      "blocker_id": "blocked_execution_apply_post_release",
+      "display_name": "Execution apply post-release blocked",
+      "severity": "critical",
+      "status": "blocked_by_policy",
+      "blocked_action": "execution_apply_after_post_release_verifier_gate",
+      "blocked_until": "maintenance window approved + rollback release gate passed",
+      "evidence_hash": "sha256:e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2e2"
+    },
+    {
+      "blocker_id": "blocked_receipt_write_post_release",
+      "display_name": "Receipt write post-release blocked",
+      "severity": "critical",
+      "status": "approval_required",
+      "blocked_action": "receipt_write_after_post_release_verifier_gate",
+      "blocked_until": "post-release verifier ready + release verification passed",
+      "evidence_hash": "sha256:e3e3e3e3e3e3e3e3e3e3e3e3e3e3e3e3e3e3e3e3e3e3e3e3e3e3e3e3e3e3e3e3"
+    },
+    {
+      "blocker_id": "blocked_result_capture_write_post_release",
+      "display_name": "Result capture write post-release blocked",
+      "severity": "critical",
+      "status": "blocked_by_policy",
+      "blocked_action": "result_capture_write_after_post_release_verifier_gate",
+      "blocked_until": "owner release approved + result capture verifier ready + rollback owner confirmed",
+      "evidence_hash": "sha256:e4e4e4e4e4e4e4e4e4e4e4e4e4e4e4e4e4e4e4e4e4e4e4e4e4e4e4e4e4e4e4e4"
+    },
+    {
+      "blocker_id": "blocked_gateway_queue_write_post_release",
+      "display_name": "Gateway queue write post-release blocked",
+      "severity": "critical",
+      "status": "approval_required",
+      "blocked_action": "gateway_queue_write_after_post_release_verifier_gate",
+      "blocked_until": "SRE route lock + Telegram receipt owner approved + post-release verifier ready",
+      "evidence_hash": "sha256:e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5"
+    },
+    {
+      "blocker_id": "blocked_telegram_send_post_release",
+      "display_name": "Telegram send post-release blocked",
+      "severity": "high",
+      "status": "approval_required",
+      "blocked_action": "telegram_send_after_post_release_verifier_gate",
+      "blocked_until": "Gateway queue release approved + Telegram receipt E2E approved + rollback release gate passed",
+      "evidence_hash": "sha256:e6e6e6e6e6e6e6e6e6e6e6e6e6e6e6e6e6e6e6e6e6e6e6e6e6e6e6e6e6e6e6e6"
+    }
+  ],
+  "operator_actions": [
+    {
+      "action_id": "review_post_release_verifier_gates",
+      "owner_agent": "openclaw",
+      "status": "ready_for_operator_review",
+      "operator_instruction": "審核 5 個 post-release verifier gate 是否仍符合 P2-131 approval gate 邊界；不要把 verifier gate 視為正式批准。",
+      "runtime_write_allowed": false
+    },
+    {
+      "action_id": "verify_rollback_release_gate",
+      "owner_agent": "hermes",
+      "status": "ready_for_operator_review",
+      "operator_instruction": "確認 rollback release gate 仍全部未 confirmed，且 rollback_release_enabled 仍為 false。",
+      "runtime_write_allowed": false
+    },
+    {
+      "action_id": "verify_release_verification_hold",
+      "owner_agent": "nemotron",
+      "status": "ready_for_operator_review",
+      "operator_instruction": "確認 release verification hold 已讀回但仍 hold；不可套用 writer 或執行正式寫入。",
+      "runtime_write_allowed": false
+    },
+    {
+      "action_id": "verify_live_apply_post_release_hold",
+      "owner_agent": "openclaw",
+      "status": "approval_required",
+      "operator_instruction": "確認 live apply post-release gate 仍未 enabled，且 post_release_verifier_ready 仍為 false。",
+      "runtime_write_allowed": false
+    },
+    {
+      "action_id": "prepare_p2_133_final_release_candidate_readback",
+      "owner_agent": "hermes",
+      "status": "ready_for_operator_review",
+      "operator_instruction": "下一關只可建立 P2-133 final release candidate readback，不可放行 writer 或正式寫入。",
+      "runtime_write_allowed": false
+    }
+  ],
+  "display_redaction_contract": {
+    "redaction_required": true,
+    "raw_prompt_display_allowed": false,
+    "private_reasoning_display_allowed": false,
+    "secret_value_display_allowed": false,
+    "raw_runtime_payload_display_allowed": false,
+    "internal_collaboration_content_display_allowed": false,
+    "frontend_display_policy": "前端只能顯示 post-release verifier / rollback gate 摘要、狀態、數量、紅acted hash 與 0 / false 邊界；不得顯示內部協作環境對話、原始提示詞、私有推理、secret、授權標頭或原始 runtime payload。"
+  },
+  "rollups": {
+    "post_release_verifier_gate_count": 5,
+    "rollback_release_gate_count": 5,
+    "release_verification_hold_count": 5,
+    "live_apply_post_release_gate_count": 5,
+    "blocked_post_release_transition_count": 6,
+    "operator_action_count": 5,
+    "approval_required_verifier_count": 2,
+    "blocked_verifier_count": 1,
+    "approval_required_rollback_count": 2,
+    "blocked_rollback_count": 1,
+    "approval_required_verification_hold_count": 2,
+    "blocked_verification_hold_count": 1,
+    "approval_required_live_apply_count": 2,
+    "blocked_live_apply_count": 1,
+    "critical_blocker_count": 5,
+    "owner_release_approved_count": 0,
+    "maintenance_window_approved_count": 0,
+    "rollback_owner_confirmed_count": 0,
+    "post_release_verifier_ready_count": 0,
+    "release_verification_pass_count": 0,
+    "rollback_release_pass_count": 0,
+    "live_apply_release_pass_count": 0,
+    "writer_apply_count": 0,
+    "execution_apply_count": 0,
+    "receipt_write_count": 0,
+    "reviewer_queue_write_count": 0,
+    "gateway_queue_write_count": 0,
+    "telegram_send_count": 0,
+    "bot_api_call_count": 0,
+    "report_receipt_write_count": 0,
+    "result_capture_write_count": 0,
+    "learning_write_count": 0,
+    "playbook_trust_write_count": 0,
+    "production_write_count": 0,
+    "secret_read_count": 0,
+    "destructive_operation_count": 0
+  }
+}