wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

feat(web): add IwoooS preparation checklist

Browse Source
This commit is contained in:
Your Name
2026-05-20 12:36:48 +08:00
parent 0a7ea52c65
commit 2530327d5f
11 changed files with 822 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

191
scripts/security/security-mirror-progress-guard.py
View File

@@ -196,6 +196,7 @@ def validate(root: Path) -> None:
"s2_42_iwooos_host_owner_decision_record_human_record_owner_review_candidate_checklist",
"s2_43_iwooos_host_owner_decision_record_human_record_owner_review_candidate_outcome_lanes",
"s2_44_iwooos_host_owner_decision_record_human_record_owner_review_preparation_packets",
"s2_45_iwooos_host_owner_decision_record_human_record_owner_review_preparation_checklist",
]
assert_equal(
"progress_delta_ledger.delta_ids",
@@ -654,6 +655,17 @@ def validate(root: Path) -> None:
"host_decision_record_human_record_owner_review_preparation_validation_runtime_gate_packet",
"host_decision_record_human_record_owner_review_preparation_no_execution_attestation_packet",
]
expected_iwooos_host_owner_decision_record_human_record_owner_review_preparation_checklist_item_ids = [
"host_decision_record_human_record_owner_review_preparation_identity_trace_readable_check",
"host_decision_record_human_record_owner_review_preparation_owner_boundary_readable_check",
"host_decision_record_human_record_owner_review_preparation_decision_summary_readable_check",
"host_decision_record_human_record_owner_review_preparation_scope_expiry_current_check",
"host_decision_record_human_record_owner_review_preparation_scan_limits_not_authorization_check",
"host_decision_record_human_record_owner_review_preparation_credential_boundary_metadata_only_check",
"host_decision_record_human_record_owner_review_preparation_maintenance_rollback_traceable_check",
"host_decision_record_human_record_owner_review_preparation_validation_runtime_gate_separate_check",
"host_decision_record_human_record_owner_review_preparation_no_execution_attestation_present_check",
]
assert_equal(
"iwooos_projection.summary.frontend_surface_coverage_group_count",
iwooos_projection["summary"]["frontend_surface_coverage_group_count"],
@@ -833,6 +845,13 @@ def validate(root: Path) -> None:
iwooos_projection["summary"]["host_owner_decision_record_human_record_owner_review_preparation_packet_count"],
len(expected_iwooos_host_owner_decision_record_human_record_owner_review_preparation_packet_ids),
)
assert_equal(
"iwooos_projection.summary.host_owner_decision_record_human_record_owner_review_preparation_checklist_item_count",
iwooos_projection["summary"][
"host_owner_decision_record_human_record_owner_review_preparation_checklist_item_count"
],
len(expected_iwooos_host_owner_decision_record_human_record_owner_review_preparation_checklist_item_ids),
)
iwooos_progress = iwooos_projection["progress"]
assert_equal("iwooos_projection.progress.overall_percent", iwooos_progress["overall_percent"], progress["overall_percent"])
assert_equal(
@@ -3631,6 +3650,169 @@ def validate(root: Path) -> None:
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_preparation_packets.{item['packet_id']}.not_authorization",
item["not_authorization"],
)
iwooos_host_owner_decision_record_human_record_owner_review_preparation_checklist_items = iwooos_projection[
"host_owner_decision_record_human_record_owner_review_preparation_checklist_items"
]
assert_equal(
"iwooos_projection.host_owner_decision_record_human_record_owner_review_preparation_checklist_items.ids",
[
item["item_id"]
for item in iwooos_host_owner_decision_record_human_record_owner_review_preparation_checklist_items
],
expected_iwooos_host_owner_decision_record_human_record_owner_review_preparation_checklist_item_ids,
)
assert_equal(
"iwooos_projection.host_owner_decision_record_human_record_owner_review_preparation_checklist_items.display_order",
[
item["display_order"]
for item in iwooos_host_owner_decision_record_human_record_owner_review_preparation_checklist_items
],
list(
range(
1,
len(expected_iwooos_host_owner_decision_record_human_record_owner_review_preparation_checklist_item_ids) + 1,
)
),
)
expected_iwooos_host_owner_decision_record_human_record_owner_review_preparation_review_conditions = [
"preparation_identity_trace_readable",
"preparation_owner_boundary_readable",
"preparation_decision_summary_readable",
"preparation_scope_expiry_current",
"preparation_scan_limits_not_authorization",
"preparation_credential_boundary_metadata_only",
"preparation_maintenance_rollback_traceable",
"preparation_validation_runtime_gate_separate",
"preparation_no_execution_attestation_present",
]
assert_equal(
"iwooos_projection.host_owner_decision_record_human_record_owner_review_preparation_checklist_items.review_conditions",
[
item["review_condition"]
for item in iwooos_host_owner_decision_record_human_record_owner_review_preparation_checklist_items
],
expected_iwooos_host_owner_decision_record_human_record_owner_review_preparation_review_conditions,
)
expected_iwooos_host_owner_decision_record_human_record_owner_review_preparation_failure_routes = [
"refresh_preparation_identity_trace",
"clarify_preparation_owner_boundary",
"clarify_preparation_decision_summary",
"refresh_preparation_scope_expiry",
"clarify_preparation_scan_limits",
"quarantine_preparation_credential_boundary",
"complete_preparation_maintenance_rollback",
"keep_runtime_gate_separate",
"keep_no_execution_attestation_visible",
]
assert_equal(
"iwooos_projection.host_owner_decision_record_human_record_owner_review_preparation_checklist_items.failure_routes",
[
item["failure_route"]
for item in iwooos_host_owner_decision_record_human_record_owner_review_preparation_checklist_items
],
expected_iwooos_host_owner_decision_record_human_record_owner_review_preparation_failure_routes,
)
assert_equal(
"iwooos_projection.host_owner_decision_record_human_record_owner_review_preparation_checklist_items.source_preparation_packet_ids",
[
item["source_preparation_packet_id"]
for item in iwooos_host_owner_decision_record_human_record_owner_review_preparation_checklist_items
],
expected_iwooos_host_owner_decision_record_human_record_owner_review_preparation_packet_ids,
)
for item in iwooos_host_owner_decision_record_human_record_owner_review_preparation_checklist_items:
assert_equal(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_preparation_checklist_items.{item['item_id']}.display_mode",
item["display_mode"],
"owner_decision_record_human_record_owner_review_preparation_checklist_only",
)
assert_equal(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_preparation_checklist_items.{item['item_id']}.human_record_owner_review_prepared_count",
item["human_record_owner_review_prepared_count"],
0,
)
assert_equal(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_preparation_checklist_items.{item['item_id']}.human_record_owner_review_check_passed_count",
item["human_record_owner_review_check_passed_count"],
0,
)
assert_equal(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_preparation_checklist_items.{item['item_id']}.human_record_owner_review_started_count",
item["human_record_owner_review_started_count"],
0,
)
assert_equal(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_preparation_checklist_items.{item['item_id']}.human_record_owner_review_ready_count",
item["human_record_owner_review_ready_count"],
0,
)
assert_equal(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_preparation_checklist_items.{item['item_id']}.human_record_owner_handoff_review_passed_count",
item["human_record_owner_handoff_review_passed_count"],
0,
)
assert_equal(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_preparation_checklist_items.{item['item_id']}.human_record_owner_handoff_started_count",
item["human_record_owner_handoff_started_count"],
0,
)
assert_equal(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_preparation_checklist_items.{item['item_id']}.human_record_owner_handoff_ready_count",
item["human_record_owner_handoff_ready_count"],
0,
)
assert_equal(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_preparation_checklist_items.{item['item_id']}.formal_record_queue_review_passed_count",
item["formal_record_queue_review_passed_count"],
0,
)
assert_equal(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_preparation_checklist_items.{item['item_id']}.formal_record_queue_enqueued_count",
item["formal_record_queue_enqueued_count"],
0,
)
assert_false(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_preparation_checklist_items.{item['item_id']}.decision_record_created",
item["decision_record_created"],
)
assert_equal(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_preparation_checklist_items.{item['item_id']}.owner_decision_received_count",
item["owner_decision_received_count"],
0,
)
assert_equal(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_preparation_checklist_items.{item['item_id']}.owner_decision_accepted_count",
item["owner_decision_accepted_count"],
0,
)
assert_false(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_preparation_checklist_items.{item['item_id']}.owner_approval_record_created",
item["owner_approval_record_created"],
)
assert_false(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_preparation_checklist_items.{item['item_id']}.runtime_gate_opened",
item["runtime_gate_opened"],
)
assert_false(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_preparation_checklist_items.{item['item_id']}.raw_payload_allowed",
item["raw_payload_allowed"],
)
assert_false(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_preparation_checklist_items.{item['item_id']}.secret_value_collection_allowed",
item["secret_value_collection_allowed"],
)
assert_false(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_preparation_checklist_items.{item['item_id']}.runtime_execution_authorized",
item["runtime_execution_authorized"],
)
assert_false(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_preparation_checklist_items.{item['item_id']}.action_buttons_allowed",
item["action_buttons_allowed"],
)
assert_true(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_preparation_checklist_items.{item['item_id']}.not_authorization",
item["not_authorization"],
)
assert_equal(
"iwooos_projection.non_blocking_lane_ids",
iwooos_projection["non_blocking_lane_ids"],
@@ -3684,6 +3866,7 @@ def validate(root: Path) -> None:
"display_host_owner_decision_record_human_record_owner_review_candidate_checklist",
"display_host_owner_decision_record_human_record_owner_review_candidate_outcome_lanes",
"display_host_owner_decision_record_human_record_owner_review_preparation_packets",
"display_host_owner_decision_record_human_record_owner_review_preparation_checklist",
"display_evidence_refs",
"display_forbidden_actions",
]:
@@ -3831,6 +4014,14 @@ def validate(root: Path) -> None:
"collect_owner_decision_from_human_record_owner_review_preparation_packet",
"create_host_owner_decision_record_from_human_record_owner_review_preparation_packet",
"open_runtime_gate_from_human_record_owner_review_preparation_packet",
"treat_host_owner_decision_record_human_record_owner_review_preparation_checklist_as_approval",
"mark_human_record_owner_review_preparation_checklist_passed",
"mark_human_record_owner_review_prepared_from_preparation_checklist",
"start_human_record_owner_review_from_preparation_checklist",
"mark_human_record_owner_review_ready_from_preparation_checklist",
"collect_owner_decision_from_human_record_owner_review_preparation_checklist",
"create_host_owner_decision_record_from_human_record_owner_review_preparation_checklist",
"open_runtime_gate_from_human_record_owner_review_preparation_checklist",
"apply_runtime_blocking_control",
"switch_github_primary",
"production_deploy",