wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 3 Packages Projects Releases Wiki Activity

feat(iwooos): 新增 SSH network 事故回讀 gate
All checks were successful
Code Review / ai-code-review (push) Successful in 14s
Details
CD Pipeline / tests (push) Successful in 1m36s
Details
CD Pipeline / build-and-deploy (push) Successful in 3m54s
Details
CD Pipeline / post-deploy-checks (push) Successful in 1m45s
Details

Browse Source
This commit is contained in:
Your Name
2026-06-15 19:26:24 +08:00
parent 3d0c3cc8e2
commit 09aeebb767
16 changed files with 4205 additions and 30 deletions
Download Patch File Download Diff File Expand all files Collapse all files

278
scripts/security/security-mirror-progress-guard.py
View File

@@ -163,6 +163,9 @@ def validate(root: Path) -> None:
port_firewall_change_evidence_acceptance = load_json(
security_dir / "port-firewall-change-evidence-acceptance.snapshot.json"
)
ssh_network_post_incident_readback_plan = load_json(
security_dir / "ssh-network-post-incident-readback-plan.snapshot.json"
)
backup_restore_escrow_inventory = load_json(security_dir / "backup-restore-escrow-inventory.snapshot.json")
backup_restore_owner_request_draft = load_json(
security_dir / "backup-restore-owner-request-draft.snapshot.json"
@@ -3205,12 +3208,12 @@ def validate(root: Path) -> None:
assert_equal(
"high_value_config_coverage.coverage_categories.ssh_network.coverage_percent",
ssh_network_category["coverage_percent"],
62,
64,
)
assert_equal(
"high_value_config_coverage.coverage_categories.ssh_network.coverage_status",
ssh_network_category["coverage_status"],
"incident_change_evidence_acceptance_ready_needs_network_owner_evidence",
"post_incident_readback_plan_ready_needs_network_owner_evidence",
)
for evidence_ref in [
"docs/security/SSH-NETWORK-ACCESS-INVENTORY.md",
@@ -3219,6 +3222,8 @@ def validate(root: Path) -> None:
"docs/security/ssh-network-owner-response-acceptance.snapshot.json",
"docs/security/PORT-FIREWALL-CHANGE-EVIDENCE-ACCEPTANCE.md",
"docs/security/port-firewall-change-evidence-acceptance.snapshot.json",
"docs/security/SSH-NETWORK-POST-INCIDENT-READBACK-PLAN.md",
"docs/security/ssh-network-post-incident-readback-plan.snapshot.json",
]:
assert_contains(
"high_value_config_coverage.coverage_categories.ssh_network.evidence_refs",
@@ -4611,6 +4616,220 @@ def validate(root: Path) -> None:
f"port_firewall_change_evidence_acceptance.{item['change_evidence_candidate_id']}.{false_key}",
item[false_key],
)
assert_equal(
"ssh_network_post_incident_readback_plan.schema",
ssh_network_post_incident_readback_plan["schema_version"],
"ssh_network_post_incident_readback_plan_v1",
)
assert_equal(
"ssh_network_post_incident_readback_plan.status",
ssh_network_post_incident_readback_plan["status"],
"post_incident_readback_plan_ready_no_runtime_action",
)
assert_equal(
"ssh_network_post_incident_readback_plan.source_schema_version",
ssh_network_post_incident_readback_plan["source_schema_version"],
"port_firewall_change_evidence_acceptance_v1",
)
assert_equal(
"ssh_network_post_incident_readback_plan.source_status",
ssh_network_post_incident_readback_plan["source_status"],
"change_evidence_acceptance_ready_no_runtime_action",
)
expected_ssh_network_post_incident_readback_summary = {
"readback_candidate_count": 14,
"write_capable_readback_candidate_count": 6,
"policy_or_exposure_readback_candidate_count": 5,
"health_impact_review_required_candidate_count": 14,
"cross_project_sync_required_candidate_count": 14,
"recurrence_guard_required_candidate_count": 14,
"readback_field_count": 30,
"required_readback_field_count": 24,
"reviewer_check_count": 24,
"outcome_lane_count": 10,
"blocked_action_count": 34,
"post_incident_readback_received_count": 0,
"post_incident_readback_accepted_count": 0,
"actor_attribution_accepted_count": 0,
"before_after_state_accepted_count": 0,
"service_dependency_accepted_count": 0,
"public_route_impact_accepted_count": 0,
"ai_provider_impact_accepted_count": 0,
"monitoring_alert_impact_accepted_count": 0,
"operator_notification_accepted_count": 0,
"cross_project_sync_accepted_count": 0,
"restoration_evidence_accepted_count": 0,
"postcheck_readback_accepted_count": 0,
"recurrence_guard_accepted_count": 0,
"no_false_green_accepted_count": 0,
"runtime_gate_count": 0,
"action_button_count": 0,
"coverage_percent_after_readback_plan": 64,
}
for key, expected in expected_ssh_network_post_incident_readback_summary.items():
assert_equal(
f"ssh_network_post_incident_readback_plan.summary.{key}",
ssh_network_post_incident_readback_plan["summary"][key],
expected,
)
for key, value in ssh_network_post_incident_readback_plan["boundaries"].items():
if key == "not_authorization":
assert_true(f"ssh_network_post_incident_readback_plan.boundaries.{key}", value)
else:
assert_false(f"ssh_network_post_incident_readback_plan.boundaries.{key}", value)
assert_equal(
"ssh_network_post_incident_readback_plan.readback_candidates.count",
len(ssh_network_post_incident_readback_plan["readback_candidates"]),
14,
)
ssh_network_post_incident_readback_ids = [
item["readback_candidate_id"]
for item in ssh_network_post_incident_readback_plan["readback_candidates"]
]
for readback_candidate_id in [
"ssh_network_post_incident_readback:gitea_cd_deploy_ssh",
"ssh_network_post_incident_readback:deploy_alerts_ssh_path",
"ssh_network_post_incident_readback:argocd_metrics_nodeport",
"ssh_network_post_incident_readback:velero_metrics_nodeport",
"ssh_network_post_incident_readback:wireguard_mesh_runbook",
"ssh_network_post_incident_readback:alert_rules_ssh_actions",
]:
assert_contains(
"ssh_network_post_incident_readback_plan.readback_candidates",
ssh_network_post_incident_readback_ids,
readback_candidate_id,
)
assert_equal(
"ssh_network_post_incident_readback_plan.reviewer_checks.count",
len(ssh_network_post_incident_readback_plan["reviewer_checks"]),
24,
)
assert_equal(
"ssh_network_post_incident_readback_plan.outcome_lanes.count",
len(ssh_network_post_incident_readback_plan["outcome_lanes"]),
10,
)
assert_equal(
"ssh_network_post_incident_readback_plan.blocked_actions.count",
len(ssh_network_post_incident_readback_plan["blocked_actions"]),
34,
)
for item in ssh_network_post_incident_readback_plan["readback_candidates"]:
assert_equal(
f"ssh_network_post_incident_readback_plan.{item['readback_candidate_id']}.readback_fields",
len(item["readback_fields"]),
30,
)
assert_equal(
f"ssh_network_post_incident_readback_plan.{item['readback_candidate_id']}.required_readback_fields",
len(item["required_readback_fields"]),
24,
)
assert_equal(
f"ssh_network_post_incident_readback_plan.{item['readback_candidate_id']}.reviewer_checks",
len(item["reviewer_checks"]),
24,
)
assert_equal(
f"ssh_network_post_incident_readback_plan.{item['readback_candidate_id']}.outcome_lanes",
len(item["outcome_lanes"]),
10,
)
assert_equal(
f"ssh_network_post_incident_readback_plan.{item['readback_candidate_id']}.blocked_actions",
len(item["blocked_actions"]),
34,
)
for required_field in [
"actor_attribution_ref",
"before_state_ref",
"after_state_ref",
"public_route_impact_ref",
"ai_provider_impact_ref",
"monitoring_alert_impact_ref",
"cross_project_sync_ref",
"restoration_evidence_ref",
"recurrence_guard_ref",
"no_false_green_attestation",
]:
assert_contains(
f"ssh_network_post_incident_readback_plan.{item['readback_candidate_id']}.required_readback_fields",
item["required_readback_fields"],
required_field,
)
for reviewer_check in [
"actor_not_anonymous",
"before_after_state_present",
"ai_provider_impact_present",
"monitoring_alert_impact_present",
"cross_project_sync_present",
"recurrence_guard_present",
"no_false_green_route_200",
"runtime_stays_zero",
]:
assert_contains(
f"ssh_network_post_incident_readback_plan.{item['readback_candidate_id']}.reviewer_checks",
item["reviewer_checks"],
reviewer_check,
)
for blocked_action in [
"live_firewall_read",
"firewall_change",
"port_close",
"route_smoke",
"host_restart",
"treat_route_200_as_all_green",
"close_management_port_without_owner",
"open_runtime_gate",
]:
assert_contains(
f"ssh_network_post_incident_readback_plan.{item['readback_candidate_id']}.blocked_actions",
item["blocked_actions"],
blocked_action,
)
assert_true(
f"ssh_network_post_incident_readback_plan.{item['readback_candidate_id']}.not_approval",
item["not_approval"],
)
for false_key in [
"post_incident_readback_received",
"post_incident_readback_accepted",
"actor_attribution_accepted",
"before_after_state_accepted",
"service_dependency_accepted",
"public_route_impact_accepted",
"ai_provider_impact_accepted",
"monitoring_alert_impact_accepted",
"operator_notification_accepted",
"cross_project_sync_accepted",
"restoration_evidence_accepted",
"postcheck_readback_accepted",
"recurrence_guard_accepted",
"no_false_green_accepted",
"ssh_read_authorized",
"ssh_write_authorized",
"live_firewall_read_authorized",
"firewall_change_authorized",
"port_change_authorized",
"port_close_authorized",
"port_open_authorized",
"network_policy_apply_authorized",
"nodeport_change_authorized",
"wireguard_change_authorized",
"route_smoke_authorized",
"host_restart_authorized",
"secret_value_collection_allowed",
"runtime_gate",
"production_write_authorized",
"active_scan_authorized",
"provider_switch_authorized",
"prompt_send_authorized",
"action_buttons_allowed",
]:
assert_false(
f"ssh_network_post_incident_readback_plan.{item['readback_candidate_id']}.{false_key}",
item[false_key],
)
assert_equal(
"backup_restore_escrow_inventory.schema",
backup_restore_escrow_inventory["schema_version"],
@@ -6761,6 +6980,8 @@ def validate(root: Path) -> None:
"docs/security/SSH-NETWORK-ACCESS-INVENTORY.md",
"docs/security/port-firewall-change-evidence-acceptance.snapshot.json",
"docs/security/PORT-FIREWALL-CHANGE-EVIDENCE-ACCEPTANCE.md",
"docs/security/ssh-network-post-incident-readback-plan.snapshot.json",
"docs/security/SSH-NETWORK-POST-INCIDENT-READBACK-PLAN.md",
"docs/schemas/ssh_network_access_inventory_v1.schema.json",
"docs/security/backup-restore-escrow-inventory.snapshot.json",
"docs/security/BACKUP-RESTORE-ESCROW-INVENTORY.md",
@@ -6955,6 +7176,35 @@ def validate(root: Path) -> None:
"port_firewall_change_evidence_acceptance_runtime_gate_count": 0,
"port_firewall_change_evidence_acceptance_action_button_count": 0,
"port_firewall_change_evidence_acceptance_coverage_percent_after_acceptance": 62,
"ssh_network_post_incident_readback_plan_first_layer": True,
"ssh_network_post_incident_readback_plan_candidate_count": 14,
"ssh_network_post_incident_readback_plan_write_capable_candidate_count": 6,
"ssh_network_post_incident_readback_plan_policy_or_exposure_candidate_count": 5,
"ssh_network_post_incident_readback_plan_health_impact_review_required_candidate_count": 14,
"ssh_network_post_incident_readback_plan_cross_project_sync_required_candidate_count": 14,
"ssh_network_post_incident_readback_plan_recurrence_guard_required_candidate_count": 14,
"ssh_network_post_incident_readback_plan_readback_field_count": 30,
"ssh_network_post_incident_readback_plan_required_readback_field_count": 24,
"ssh_network_post_incident_readback_plan_reviewer_check_count": 24,
"ssh_network_post_incident_readback_plan_outcome_lane_count": 10,
"ssh_network_post_incident_readback_plan_blocked_action_count": 34,
"ssh_network_post_incident_readback_plan_post_incident_readback_received_count": 0,
"ssh_network_post_incident_readback_plan_post_incident_readback_accepted_count": 0,
"ssh_network_post_incident_readback_plan_actor_attribution_accepted_count": 0,
"ssh_network_post_incident_readback_plan_before_after_state_accepted_count": 0,
"ssh_network_post_incident_readback_plan_service_dependency_accepted_count": 0,
"ssh_network_post_incident_readback_plan_public_route_impact_accepted_count": 0,
"ssh_network_post_incident_readback_plan_ai_provider_impact_accepted_count": 0,
"ssh_network_post_incident_readback_plan_monitoring_alert_impact_accepted_count": 0,
"ssh_network_post_incident_readback_plan_operator_notification_accepted_count": 0,
"ssh_network_post_incident_readback_plan_cross_project_sync_accepted_count": 0,
"ssh_network_post_incident_readback_plan_restoration_evidence_accepted_count": 0,
"ssh_network_post_incident_readback_plan_postcheck_readback_accepted_count": 0,
"ssh_network_post_incident_readback_plan_recurrence_guard_accepted_count": 0,
"ssh_network_post_incident_readback_plan_no_false_green_accepted_count": 0,
"ssh_network_post_incident_readback_plan_runtime_gate_count": 0,
"ssh_network_post_incident_readback_plan_action_button_count": 0,
"ssh_network_post_incident_readback_plan_coverage_percent_after_readback_plan": 64,
"k8s_argocd_change_evidence_acceptance_first_layer": True,
"k8s_argocd_change_evidence_acceptance_candidate_count": 4,
"k8s_argocd_change_evidence_acceptance_c0_candidate_count": 3,
@@ -16763,7 +17013,7 @@ def validate(root: Path) -> None:
assert_text_contains(
"iwooos_page.high_value_config_control_coverage_ssh_network_percent",
iwooos_projection_page,
"{ key: 'sshNetwork', rank: 'P1-2', value: '62%'",
"{ key: 'sshNetwork', rank: 'P1-2', value: '64%'",
)
assert_text_contains(
"iwooos_page.high_value_config_control_coverage_ai_provider_percent",
@@ -16937,6 +17187,24 @@ def validate(root: Path) -> None:
"port_firewall_change_evidence_acceptance_cross_project_sync_accepted_count=0",
"port_firewall_change_evidence_acceptance_postcheck_evidence_accepted_count=0",
"port_firewall_change_evidence_acceptance_runtime_gate_count=0",
"ssh_network_post_incident_readback_plan_candidate_count=14",
"ssh_network_post_incident_readback_plan_write_capable_candidate_count=6",
"ssh_network_post_incident_readback_plan_policy_or_exposure_candidate_count=5",
"ssh_network_post_incident_readback_plan_required_readback_field_count=24",
"ssh_network_post_incident_readback_plan_reviewer_check_count=24",
"ssh_network_post_incident_readback_plan_outcome_lane_count=10",
"ssh_network_post_incident_readback_plan_blocked_action_count=34",
"ssh_network_post_incident_readback_plan_post_incident_readback_received_count=0",
"ssh_network_post_incident_readback_plan_post_incident_readback_accepted_count=0",
"ssh_network_post_incident_readback_plan_actor_attribution_accepted_count=0",
"ssh_network_post_incident_readback_plan_before_after_state_accepted_count=0",
"ssh_network_post_incident_readback_plan_public_route_impact_accepted_count=0",
"ssh_network_post_incident_readback_plan_ai_provider_impact_accepted_count=0",
"ssh_network_post_incident_readback_plan_monitoring_alert_impact_accepted_count=0",
"ssh_network_post_incident_readback_plan_cross_project_sync_accepted_count=0",
"ssh_network_post_incident_readback_plan_recurrence_guard_accepted_count=0",
"ssh_network_post_incident_readback_plan_no_false_green_accepted_count=0",
"ssh_network_post_incident_readback_plan_runtime_gate_count=0",
"backup_restore_escrow_inventory_surface_count=38",
"backup_restore_escrow_inventory_write_capable_surface_count=27",
"backup_restore_escrow_inventory_runtime_gate_count=0",
@@ -17420,12 +17688,12 @@ def validate(root: Path) -> None:
assert_text_contains(
"web_messages.zh-TW.iwooos.highValueConfigControlCoverage.items.sshNetwork.body",
web_messages_zh["iwooos"]["highValueConfigControlCoverage"]["items"]["sshNetwork"]["body"],
"16 個 SSH / network access surface",
"14 個事故回讀候選、24 個 reviewer checks、10 條 outcome lanes、34 類 blocked action",
)
assert_text_contains(
"web_messages.en.iwooos.highValueConfigControlCoverage.items.sshNetwork.body",
web_messages_en["iwooos"]["highValueConfigControlCoverage"]["items"]["sshNetwork"]["body"],
"16 個 SSH / network access surface",
"14 個事故回讀候選、24 個 reviewer checks、10 條 outcome lanes、34 類 blocked action",
)
assert_text_contains(
"web_messages.zh-TW.iwooos.highValueConfigControlCoverage.items.backupRestore.body",