wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

feat(web): add IwoooS review candidate packets

Browse Source
This commit is contained in:
Your Name
2026-05-20 11:17:45 +08:00
parent 1372fb0472
commit 1fab4f7bd9
11 changed files with 749 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
docs/security/IWOOOS-POSTURE-PROJECTION.md
View File

@@ -68,6 +68,7 @@ IwoooS 首版只讀取或對齊以下已提交 evidence：
36. 8 個 host owner decision record human handoff readiness packets，顯示未來交給人工 record owner 前要準備的 metadata，但不開始 handoff、不標記 ready、不建立 decision record、不開 runtime gate。
37. 8 個 host owner decision record human handoff readiness review checklist items，顯示 readiness packets 進人工 record owner 前仍需只讀核對的條件，但不標記 review passed、不開始 handoff、不建立 decision record、不開 runtime gate。
38. 9 個 host owner decision record human handoff readiness review outcome lanes，顯示 readiness review 後的只讀結果分流與下一步，但不標記 review passed、不開始 handoff、不標記 handoff ready、不 enqueue、不建立 decision record、不開 runtime gate。
39. 9 個 host owner decision record human record owner review candidate packets，顯示未來人工 record owner review candidate 需要看的 metadata，但不開始 review、不標記 ready、不收 owner decision、不建立 decision record、不開 runtime gate。
## 3.1 既有前端資安頁面整合
@@ -621,6 +622,26 @@ S2.40 將 handoff readiness review checklist 後的結果拆成九個只讀 outc
這個 outcome board 不代表 handoff readiness review 已通過、handoff 已開始、handoff 已 ready、formal record queue review 已通過、正式紀錄已 enqueue、decision record 已建立、owner decision 已接受、資安批准已完成或 runtime gate 已開啟。它只讓 IwoooS 把 readiness review 後的補件、review candidate 與 runtime gate 分離狀態顯示清楚。
## 3.32 Host Owner Decision Record Human Record Owner Review Candidate Packets
S2.41 將 ready for human record owner review candidate 後的 metadata 拆成九個只讀 candidate packets。這一層只回答「未來人工 record owner review 候選畫面需要哪些資料包」，不開始 review、不標記 review ready、不開始 handoff、不收 owner decision、不建立 decision record、不建立 approval record、不開 runtime gate。
| 順序 | Review candidate packet | 來源 outcome | 候選欄位 |
|------|-------------------------|--------------|----------|
| 1 | Review candidate identity packet | ready for human record owner review candidate | candidate id、source outcome、version、trace pointer、source queue review |
| 2 | Review owner boundary packet | ready for human record owner review candidate | human record owner、backup owner、contact boundary、responsibility boundary |
| 3 | Review decision summary packet | ready for human record owner review candidate | candidate decision summary、risk acceptance boundary、no-execution statement |
| 4 | Review scope and expiry packet | ready for human record owner review candidate | host、network、service、exclusion、observation intent、expiry |
| 5 | Review scan limits packet | ready for human record owner review candidate | observe-only、future active scan、credentialed scan limits |
| 6 | Review credential boundary packet | ready for human record owner review candidate | metadata-only credential owner、retention、masking、forbidden collection |
| 7 | Review maintenance and rollback packet | ready for human record owner review candidate | maintenance window、constraints、rollback owner、recovery path、human contact |
| 8 | Review validation and runtime gate packet | ready for human record owner review candidate | validation evidence pointer、post-check metrics、separate runtime gate requirement |
| 9 | Review no-execution attestation packet | ready for human record owner review candidate | not authorization、no execution、no approval、no runtime gate statement |
每個 review candidate packet 都固定 `display_mode=owner_decision_record_human_record_owner_review_candidate_packet_only`、`human_record_owner_review_started_count=0`、`human_record_owner_review_ready_count=0`、`human_record_owner_handoff_review_passed_count=0`、`human_record_owner_handoff_started_count=0`、`human_record_owner_handoff_ready_count=0`、`formal_record_queue_review_passed_count=0`、`formal_record_queue_enqueued_count=0`、`decision_record_created=false`、`owner_decision_received_count=0`、`owner_decision_accepted_count=0`、`owner_approval_record_created=false`、`runtime_gate_opened=false`、`raw_payload_allowed=false`、`secret_value_collection_allowed=false`、`runtime_execution_authorized=false`、`action_buttons_allowed=false`、`not_authorization=true`。
這個 candidate packet board 不代表 human record owner review 已開始、review 已 ready、handoff 已開始、handoff 已 ready、owner decision 已收到或接受、decision record 已建立、資安批准已完成或 runtime gate 已開啟。它只讓 IwoooS 把未來人工 record owner 可能需要看的 metadata 顯示清楚。
## 4. 仍禁止
IwoooS 不得提供下列輸出：
@@ -658,7 +679,8 @@ IwoooS 不得提供下列輸出：
31. 把 owner decision record handoff readiness 當成 approval、開始 human record owner handoff、標記 handoff ready、由 readiness packet 建立 decision record，或從 handoff readiness 開 runtime gate。
32. 把 owner decision record handoff readiness review 當成 approval、標記 handoff readiness review passed、開始 human record owner handoff、標記 handoff ready、由 readiness review 建立 decision record，或從 readiness review 開 runtime gate。
33. 把 owner decision record handoff readiness review outcome 當成 approval、標記 handoff readiness review outcome passed、開始 human record owner handoff、標記 handoff ready、由 readiness review outcome 建立 decision record，或從 readiness review outcome 開 runtime gate。
34. 把 58% progress、contract count、mirror readiness 或前端可見狀態當成授權。
34. 把 owner decision record human record owner review candidate packet 當成 approval、開始 human record owner review、標記 review ready、收 owner decision、由 candidate packet 建立 decision record，或從 candidate packet 開 runtime gate。
35. 把 58% progress、contract count、mirror readiness 或前端可見狀態當成授權。
## 5. 驗證