feat(web): add IwoooS handoff review outcomes

apps/web/messages/en.json

@@ -2390,6 +2390,59 @@
           "guard": "active runtime gates=0; action buttons=false"
         }
       }
+    },
+    "hostOwnerDecisionRecordHumanHandoffReadinessReviewOutcomes": {
+      "title": "Host Owner Decision Record Human Handoff Readiness Review Outcome Lanes",
+      "subtitle": "Human handoff readiness review outcome lanes only show next-step routing after checklist review. They do not mark review passed, start handoff, mark handoff ready, create decision records, accept owner decisions, create approval records, or open runtime gates.",
+      "laneLabel": "Handoff review outcome",
+      "nextLabel": "Next step",
+      "items": {
+        "readyForHumanRecordOwnerReviewCandidate": {
+          "title": "Ready for human record owner review candidate",
+          "body": "When all readiness review conditions are readable, this can only display a future candidate state for human record owner review.",
+          "next": "display review candidate; review passed=0, handoff started=0"
+        },
+        "identityTraceNeedsRefresh": {
+          "title": "Identity trace needs refresh",
+          "body": "When candidate record id, version, source outcome lane, source queue review, or trace pointer is unclear, route back to the identity packet.",
+          "next": "refresh identity trace; handoff ready=0"
+        },
+        "ownerBoundaryNeedsClarification": {
+          "title": "Owner boundary needs clarification",
+          "body": "When record owner, backup owner, contact point, or responsibility boundary is unreadable, route back to the owner boundary packet.",
+          "next": "clarify owner boundary; decision received=0"
+        },
+        "decisionSummaryNeedsClarification": {
+          "title": "Decision summary needs clarification",
+          "body": "When decision summary, candidate conclusion, or no-execution statement is unreadable, route back to the decision summary packet.",
+          "next": "clarify decision summary; record created=false"
+        },
+        "scopeExpiryNeedsRefresh": {
+          "title": "Scope and expiry need refresh",
+          "body": "When host, network, service, exclusion, observation intent, or expiry is stale or out of scope, route back to the scope packet.",
+          "next": "refresh scope / expiry; review passed=0"
+        },
+        "scanLimitsRemainAmbiguous": {
+          "title": "Scan limits remain ambiguous",
+          "body": "If observe-only, future active scan, or credentialed scan limits can still be mistaken for authorization, route back to the scan limits packet.",
+          "next": "clarify scan limits; scan authorized=false"
+        },
+        "credentialBoundaryFailed": {
+          "title": "Credential boundary failed",
+          "body": "If credential boundary is not metadata-only or plaintext, token value, and raw secret boundaries are unclear, quarantine and request evidence refresh.",
+          "next": "refresh credential boundary; secret collection=false"
+        },
+        "maintenanceRollbackIncomplete": {
+          "title": "Maintenance and rollback incomplete",
+          "body": "If maintenance window, constraints, rollback owner, recovery path, or human contact is missing, it cannot enter human record owner review semantics.",
+          "next": "refresh maintenance / rollback; host change=false"
+        },
+        "runtimeGateStillRequired": {
+          "title": "Runtime gate still required",
+          "body": "Validation evidence or follow-up runtime gate pointer still requires a separate gate and cannot open from readiness review outcome.",
+          "next": "active runtime gates=0; action buttons=false"
+        }
+      }
     }
   },
   "tickets": {

apps/web/messages/zh-TW.json

@@ -2391,6 +2391,59 @@
           "guard": "active runtime gates=0；action buttons=false"
         }
       }
+    },
+    "hostOwnerDecisionRecordHumanHandoffReadinessReviewOutcomes": {
+      "title": "主機 Owner Decision Record Human Handoff Readiness Review Outcome Lanes",
+      "subtitle": "Human handoff readiness review outcome lanes 只顯示 checklist 後的下一步分流。不代表 review passed、不開始 handoff、不標記 handoff ready、不建立 decision record、不接受 owner decision、不建立 approval record、不開 runtime gate。",
+      "laneLabel": "Handoff review outcome",
+      "nextLabel": "下一步",
+      "items": {
+        "readyForHumanRecordOwnerReviewCandidate": {
+          "title": "Ready for human record owner review candidate",
+          "body": "所有 readiness review 條件都可讀時，只能顯示未來交給人工 record owner 看看的候選狀態。",
+          "next": "顯示 review candidate；review passed=0、handoff started=0"
+        },
+        "identityTraceNeedsRefresh": {
+          "title": "Identity trace needs refresh",
+          "body": "candidate record id、版本、來源 outcome lane、source queue review 或 trace pointer 不清楚時，回到 identity packet 補證。",
+          "next": "補 identity trace；handoff ready=0"
+        },
+        "ownerBoundaryNeedsClarification": {
+          "title": "Owner boundary needs clarification",
+          "body": "record owner、backup owner、聯絡窗口或責任邊界不可讀時，回到 owner boundary packet 補文字。",
+          "next": "補 owner boundary；decision received=0"
+        },
+        "decisionSummaryNeedsClarification": {
+          "title": "Decision summary needs clarification",
+          "body": "decision summary、候選結論或 no-execution statement 不可讀時，回到 decision summary packet。",
+          "next": "補 decision summary；record created=false"
+        },
+        "scopeExpiryNeedsRefresh": {
+          "title": "Scope and expiry need refresh",
+          "body": "host、network、service、exclusion、觀察目的或 expiry 過期或越界時，回到 scope packet。",
+          "next": "補 scope / expiry；review passed=0"
+        },
+        "scanLimitsRemainAmbiguous": {
+          "title": "Scan limits remain ambiguous",
+          "body": "observe-only、future active scan 或 credentialed scan limits 仍可能被誤讀成授權時，回到 scan limits packet。",
+          "next": "補 scan limits；scan authorized=false"
+        },
+        "credentialBoundaryFailed": {
+          "title": "Credential boundary failed",
+          "body": "credential boundary 若不是 metadata-only，或 plaintext、token value、raw secret 邊界不清楚，必須隔離補證。",
+          "next": "補 credential boundary；secret collection=false"
+        },
+        "maintenanceRollbackIncomplete": {
+          "title": "Maintenance and rollback incomplete",
+          "body": "維護窗口、限制條件、rollback owner、復原路徑或人工聯絡點缺漏時，不能進入人工 record owner review 語義。",
+          "next": "補 maintenance / rollback；host change=false"
+        },
+        "runtimeGateStillRequired": {
+          "title": "Runtime gate still required",
+          "body": "validation evidence 或 follow-up runtime gate pointer 仍需要獨立 gate，不能由 readiness review outcome 開 gate。",
+          "next": "active runtime gates=0；action buttons=false"
+        }
+      }
     }
   },
   "tickets": {

apps/web/src/app/[locale]/iwooos/page.tsx

@@ -257,6 +257,13 @@ type HostOwnerDecisionRecordHumanHandoffReadinessReviewItem = {
   tone: 'steady' | 'warn' | 'locked'
 }
 
+type HostOwnerDecisionRecordHumanHandoffReadinessReviewOutcomeLane = {
+  key: string
+  lane: string
+  icon: typeof ShieldCheck
+  tone: 'steady' | 'warn' | 'locked'
+}
+
 const postureMetrics: PostureMetric[] = [
   { key: 'overall', value: '58%', tone: 'warn' },
   { key: 'framework', value: '80-85%', tone: 'steady' },
@@ -614,6 +621,18 @@ const hostOwnerDecisionRecordHumanHandoffReadinessReviewItems: HostOwnerDecision
   { key: 'runtimeGateSeparate', check: 'FHC8', icon: ShieldCheck, tone: 'locked' },
 ]
 
+const hostOwnerDecisionRecordHumanHandoffReadinessReviewOutcomeLanes: HostOwnerDecisionRecordHumanHandoffReadinessReviewOutcomeLane[] = [
+  { key: 'readyForHumanRecordOwnerReviewCandidate', lane: 'FHV1', icon: CheckCircle2, tone: 'steady' },
+  { key: 'identityTraceNeedsRefresh', lane: 'FHV2', icon: FileText, tone: 'warn' },
+  { key: 'ownerBoundaryNeedsClarification', lane: 'FHV3', icon: Bell, tone: 'warn' },
+  { key: 'decisionSummaryNeedsClarification', lane: 'FHV4', icon: ClipboardCheck, tone: 'warn' },
+  { key: 'scopeExpiryNeedsRefresh', lane: 'FHV5', icon: Radar, tone: 'warn' },
+  { key: 'scanLimitsRemainAmbiguous', lane: 'FHV6', icon: Activity, tone: 'locked' },
+  { key: 'credentialBoundaryFailed', lane: 'FHV7', icon: Lock, tone: 'locked' },
+  { key: 'maintenanceRollbackIncomplete', lane: 'FHV8', icon: Clock3, tone: 'warn' },
+  { key: 'runtimeGateStillRequired', lane: 'FHV9', icon: ShieldCheck, tone: 'locked' },
+]
+
 const evidenceItems = [
   'iwooos-posture-projection.snapshot.json',
   'security-rollout-policy.snapshot.json',
@@ -1628,6 +1647,38 @@ function HostOwnerDecisionRecordHumanHandoffReadinessReviewCard({
   )
 }
 
+function HostOwnerDecisionRecordHumanHandoffReadinessReviewOutcomeCard({
+  item,
+}: {
+  item: HostOwnerDecisionRecordHumanHandoffReadinessReviewOutcomeLane
+}) {
+  const t = useTranslations('iwooos.hostOwnerDecisionRecordHumanHandoffReadinessReviewOutcomes')
+  const Icon = item.icon
+  return (
+    <div style={{ ...band, minHeight: 190, padding: 16 }}>
+      <div style={{ display: 'flex', alignItems: 'center', justifyContent: 'space-between', gap: 12 }}>
+        <div style={{ display: 'flex', alignItems: 'center', gap: 9 }}>
+          <Icon size={18} color={toneColors[item.tone]} />
+          <span style={{ fontSize: 11, color: '#87867f' }}>{t('laneLabel')}</span>
+        </div>
+        <span style={{ fontSize: 11, color: '#9b978b' }}>{item.lane}</span>
+      </div>
+      <h2 style={{ fontSize: 14, margin: '12px 0 6px', color: '#141413' }}>
+        {t(`items.${item.key}.title` as never)}
+      </h2>
+      <p style={{ fontSize: 12, lineHeight: 1.55, color: '#6f6d66', margin: 0 }}>
+        {t(`items.${item.key}.body` as never)}
+      </p>
+      <div style={{ marginTop: 10, display: 'grid', gap: 5 }}>
+        <div style={{ fontSize: 11, color: '#87867f' }}>{t('nextLabel')}</div>
+        <div style={{ fontSize: 11, color: toneColors[item.tone], lineHeight: 1.45 }}>
+          {t(`items.${item.key}.next` as never)}
+        </div>
+      </div>
+    </div>
+  )
+}
+
 export default function IwoooSPage({ params }: { params: { locale: string } }) {
   const t = useTranslations('iwooos')
 
@@ -2220,6 +2271,28 @@ export default function IwoooSPage({ params }: { params: { locale: string } }) {
           </div>
         </section>
 
+        <section style={{ marginBottom: 14 }}>
+          <div style={{ marginBottom: 14 }}>
+            <h2 style={{ fontSize: 16, margin: 0 }}>
+              {t('hostOwnerDecisionRecordHumanHandoffReadinessReviewOutcomes.title')}
+            </h2>
+            <p style={{ fontSize: 12, color: '#6f6d66', margin: '6px 0 0', lineHeight: 1.55 }}>
+              {t('hostOwnerDecisionRecordHumanHandoffReadinessReviewOutcomes.subtitle')}
+            </p>
+          </div>
+          <div
+            style={{
+              display: 'grid',
+              gridTemplateColumns: 'repeat(auto-fit, minmax(210px, 1fr))',
+              gap: 12,
+            }}
+          >
+            {hostOwnerDecisionRecordHumanHandoffReadinessReviewOutcomeLanes.map(item => (
+              <HostOwnerDecisionRecordHumanHandoffReadinessReviewOutcomeCard key={item.key} item={item} />
+            ))}
+          </div>
+        </section>
+
         <section
           style={{
             display: 'grid',