feat(web): add IwoooS review candidate packets

apps/web/messages/en.json

@@ -2443,6 +2443,59 @@
           "next": "active runtime gates=0; action buttons=false"
         }
       }
+    },
+    "hostOwnerDecisionRecordHumanRecordOwnerReviewCandidatePackets": {
+      "title": "Host Owner Decision Record Human Record Owner Review Candidate Packets",
+      "subtitle": "Human record owner review candidate packets only organize metadata a future human record owner may need to inspect. They do not start handoff, mark review ready, collect owner decisions, create decision records, create approval records, or open runtime gates.",
+      "packetLabel": "Review candidate packet",
+      "guardLabel": "Guardrail",
+      "items": {
+        "reviewCandidateIdentity": {
+          "title": "Review candidate identity packet",
+          "body": "Organizes candidate id, source readiness outcome, version, trace pointer, and source queue review link so a future human record owner can understand provenance.",
+          "guard": "review started=0; decision record created=false"
+        },
+        "reviewOwnerBoundary": {
+          "title": "Review owner boundary packet",
+          "body": "Organizes human record owner, backup owner, contact channel, and responsibility boundary without treating owner contact as accepted work or a decision.",
+          "guard": "owner decision received=0; handoff started=0"
+        },
+        "reviewDecisionSummary": {
+          "title": "Review decision summary packet",
+          "body": "Organizes candidate decision summary, risk acceptance boundary, and no-execution statement so the review candidate is not mistaken for a formal record.",
+          "guard": "review ready=0; record accepted=0"
+        },
+        "reviewScopeExpiry": {
+          "title": "Review scope and expiry packet",
+          "body": "Organizes host, network, service, exclusion, observation intent, and expiry so the review candidate scope remains readable.",
+          "guard": "scope review only; runtime gate opened=false"
+        },
+        "reviewScanLimits": {
+          "title": "Review scan limits packet",
+          "body": "Organizes observe-only, future active scan, and credentialed scan limits while keeping active scan behind separate approval.",
+          "guard": "scan authorized=false; action buttons=false"
+        },
+        "reviewCredentialBoundary": {
+          "title": "Review credential boundary packet",
+          "body": "Organizes credential owner, retention, masking, and forbidden collection as metadata only; plaintext, token value, and raw secret are not collected.",
+          "guard": "secret collection=false; raw payload=false"
+        },
+        "reviewMaintenanceRollback": {
+          "title": "Review maintenance and rollback packet",
+          "body": "Organizes maintenance window, constraints, rollback owner, recovery path, and human contact without authorizing host change.",
+          "guard": "host change=false; Kali update=false"
+        },
+        "reviewValidationRuntimeGate": {
+          "title": "Review validation and runtime gate packet",
+          "body": "Organizes validation evidence pointer, post-check metrics, and separate runtime gate requirement without opening a gate from the candidate packet.",
+          "guard": "runtime gate opened=false; runtime execution=false"
+        },
+        "reviewNoExecutionAttestation": {
+          "title": "Review no-execution attestation packet",
+          "body": "Fixes not authorization, no execution, no approval, and no runtime gate statements so the review candidate is not mistaken for approval.",
+          "guard": "not_authorization=true; approval record=false"
+        }
+      }
     }
   },
   "tickets": {

apps/web/messages/zh-TW.json

@@ -2444,6 +2444,59 @@
           "next": "active runtime gates=0；action buttons=false"
         }
       }
+    },
+    "hostOwnerDecisionRecordHumanRecordOwnerReviewCandidatePackets": {
+      "title": "主機 Owner Decision Record Human Record Owner Review Candidate Packets",
+      "subtitle": "Human record owner review candidate packets 只整理未來人工 record owner 可能需要看的 metadata。它不開始 handoff、不標記 review ready、不收 owner decision、不建立 decision record、不建立 approval record、不開 runtime gate。",
+      "packetLabel": "Review candidate packet",
+      "guardLabel": "保護邊界",
+      "items": {
+        "reviewCandidateIdentity": {
+          "title": "Review candidate identity packet",
+          "body": "整理 candidate id、來源 readiness outcome、版本、trace pointer 與來源 queue review 連結，讓人工 record owner 未來能看懂來源。",
+          "guard": "review started=0；decision record created=false"
+        },
+        "reviewOwnerBoundary": {
+          "title": "Review owner boundary packet",
+          "body": "整理 human record owner、backup owner、聯絡窗口與責任邊界，但不把 owner contact 視為已接案或已決策。",
+          "guard": "owner decision received=0；handoff started=0"
+        },
+        "reviewDecisionSummary": {
+          "title": "Review decision summary packet",
+          "body": "整理候選決策摘要、風險接受邊界與 no-execution statement，避免人工 review 候選被誤讀成正式紀錄。",
+          "guard": "review ready=0；record accepted=0"
+        },
+        "reviewScopeExpiry": {
+          "title": "Review scope and expiry packet",
+          "body": "整理 host、network、service、exclusion、observation intent 與 expiry，讓 review candidate 的範圍維持可讀。",
+          "guard": "scope review only；runtime gate opened=false"
+        },
+        "reviewScanLimits": {
+          "title": "Review scan limits packet",
+          "body": "整理 observe-only、future active scan 與 credentialed scan limits，明確保留 active scan 仍需獨立批准。",
+          "guard": "scan authorized=false；action buttons=false"
+        },
+        "reviewCredentialBoundary": {
+          "title": "Review credential boundary packet",
+          "body": "整理 credential owner、retention、masking 與 forbidden collection，只允許 metadata，不收 plaintext、token value 或 raw secret。",
+          "guard": "secret collection=false；raw payload=false"
+        },
+        "reviewMaintenanceRollback": {
+          "title": "Review maintenance and rollback packet",
+          "body": "整理 maintenance window、constraints、rollback owner、recovery path 與人工聯絡點，但不代表可以變更主機。",
+          "guard": "host change=false；Kali update=false"
+        },
+        "reviewValidationRuntimeGate": {
+          "title": "Review validation and runtime gate packet",
+          "body": "整理 validation evidence pointer、post-check metrics 與獨立 runtime gate requirement，仍不能由 candidate packet 開 gate。",
+          "guard": "runtime gate opened=false；runtime execution=false"
+        },
+        "reviewNoExecutionAttestation": {
+          "title": "Review no-execution attestation packet",
+          "body": "固定 not authorization、no execution、no approval、no runtime gate statement，避免人工 review candidate 被誤解成批准。",
+          "guard": "not_authorization=true；approval record=false"
+        }
+      }
     }
   },
   "tickets": {

apps/web/src/app/[locale]/iwooos/page.tsx

@@ -264,6 +264,13 @@ type HostOwnerDecisionRecordHumanHandoffReadinessReviewOutcomeLane = {
   tone: 'steady' | 'warn' | 'locked'
 }
 
+type HostOwnerDecisionRecordHumanRecordOwnerReviewCandidatePacket = {
+  key: string
+  packet: string
+  icon: typeof ShieldCheck
+  tone: 'steady' | 'warn' | 'locked'
+}
+
 const postureMetrics: PostureMetric[] = [
   { key: 'overall', value: '58%', tone: 'warn' },
   { key: 'framework', value: '80-85%', tone: 'steady' },
@@ -633,6 +640,18 @@ const hostOwnerDecisionRecordHumanHandoffReadinessReviewOutcomeLanes: HostOwnerD
   { key: 'runtimeGateStillRequired', lane: 'FHV9', icon: ShieldCheck, tone: 'locked' },
 ]
 
+const hostOwnerDecisionRecordHumanRecordOwnerReviewCandidatePackets: HostOwnerDecisionRecordHumanRecordOwnerReviewCandidatePacket[] = [
+  { key: 'reviewCandidateIdentity', packet: 'FHR1', icon: FileText, tone: 'warn' },
+  { key: 'reviewOwnerBoundary', packet: 'FHR2', icon: Bell, tone: 'warn' },
+  { key: 'reviewDecisionSummary', packet: 'FHR3', icon: ClipboardCheck, tone: 'warn' },
+  { key: 'reviewScopeExpiry', packet: 'FHR4', icon: Radar, tone: 'warn' },
+  { key: 'reviewScanLimits', packet: 'FHR5', icon: Activity, tone: 'locked' },
+  { key: 'reviewCredentialBoundary', packet: 'FHR6', icon: Lock, tone: 'locked' },
+  { key: 'reviewMaintenanceRollback', packet: 'FHR7', icon: Clock3, tone: 'warn' },
+  { key: 'reviewValidationRuntimeGate', packet: 'FHR8', icon: ShieldCheck, tone: 'locked' },
+  { key: 'reviewNoExecutionAttestation', packet: 'FHR9', icon: ListChecks, tone: 'locked' },
+]
+
 const evidenceItems = [
   'iwooos-posture-projection.snapshot.json',
   'security-rollout-policy.snapshot.json',
@@ -1679,6 +1698,38 @@ function HostOwnerDecisionRecordHumanHandoffReadinessReviewOutcomeCard({
   )
 }
 
+function HostOwnerDecisionRecordHumanRecordOwnerReviewCandidatePacketCard({
+  item,
+}: {
+  item: HostOwnerDecisionRecordHumanRecordOwnerReviewCandidatePacket
+}) {
+  const t = useTranslations('iwooos.hostOwnerDecisionRecordHumanRecordOwnerReviewCandidatePackets')
+  const Icon = item.icon
+  return (
+    <div style={{ ...band, minHeight: 190, padding: 16 }}>
+      <div style={{ display: 'flex', alignItems: 'center', justifyContent: 'space-between', gap: 12 }}>
+        <div style={{ display: 'flex', alignItems: 'center', gap: 9 }}>
+          <Icon size={18} color={toneColors[item.tone]} />
+          <span style={{ fontSize: 11, color: '#87867f' }}>{t('packetLabel')}</span>
+        </div>
+        <span style={{ fontSize: 11, color: '#9b978b' }}>{item.packet}</span>
+      </div>
+      <h2 style={{ fontSize: 14, margin: '12px 0 6px', color: '#141413' }}>
+        {t(`items.${item.key}.title` as never)}
+      </h2>
+      <p style={{ fontSize: 12, lineHeight: 1.55, color: '#6f6d66', margin: 0 }}>
+        {t(`items.${item.key}.body` as never)}
+      </p>
+      <div style={{ marginTop: 10, display: 'grid', gap: 5 }}>
+        <div style={{ fontSize: 11, color: '#87867f' }}>{t('guardLabel')}</div>
+        <div style={{ fontSize: 11, color: toneColors[item.tone], lineHeight: 1.45 }}>
+          {t(`items.${item.key}.guard` as never)}
+        </div>
+      </div>
+    </div>
+  )
+}
+
 export default function IwoooSPage({ params }: { params: { locale: string } }) {
   const t = useTranslations('iwooos')
 
@@ -2293,6 +2344,28 @@ export default function IwoooSPage({ params }: { params: { locale: string } }) {
           </div>
         </section>
 
+        <section style={{ marginBottom: 14 }}>
+          <div style={{ marginBottom: 14 }}>
+            <h2 style={{ fontSize: 16, margin: 0 }}>
+              {t('hostOwnerDecisionRecordHumanRecordOwnerReviewCandidatePackets.title')}
+            </h2>
+            <p style={{ fontSize: 12, color: '#6f6d66', margin: '6px 0 0', lineHeight: 1.55 }}>
+              {t('hostOwnerDecisionRecordHumanRecordOwnerReviewCandidatePackets.subtitle')}
+            </p>
+          </div>
+          <div
+            style={{
+              display: 'grid',
+              gridTemplateColumns: 'repeat(auto-fit, minmax(210px, 1fr))',
+              gap: 12,
+            }}
+          >
+            {hostOwnerDecisionRecordHumanRecordOwnerReviewCandidatePackets.map(item => (
+              <HostOwnerDecisionRecordHumanRecordOwnerReviewCandidatePacketCard key={item.key} item={item} />
+            ))}
+          </div>
+        </section>
+
         <section
           style={{
             display: 'grid',