feat(governance): 新增 release authorization readback gate
This commit is contained in:
Your Name
@@ -12,25 +12,25 @@
|
||||
| Nemotron 實際整合應用 | 30% | 完整回放前仍被關卡擋下 | `blocked_needs_evidence`，下一關是 `refresh_source_evidence_then_5_record_smoke_only` |
|
||||
| 工具 / 服務 / 套件 AI 自動化 | 92% | P0 已完成；P1 服務 / runtime / 監控 / provider / service health / 備份 / DR / 套件與供應鏈只讀基線已完成；P1-007 失敗限定通知合約與前端 redaction 合約已完成；下一主線是 P2-004 依賴 / 供應鏈漂移監控 | 狀態分類、盤點 schema、權限矩陣、靜態盤點種子、只讀 API、UI 骨架、驗證、自動化待辦 schema / 快照 / API / 分組 UI、Backup / DR 目標盤點、準備度矩陣、備份通知政策、Backup / DR 證據 UI、復原演練批准包模板、異地 / escrow 準備度狀態、任務批准邊界、確定性進度彙總、Python 套件 / 供應鏈只讀基線、JS pnpm/npm 只讀基線、Docker build surface 只讀基線、CVE / license / drift 嚴重度政策、定期依賴漂移與外部資料來源檢查設計、依賴升級批准包模板、runtime_surface_inventory_v1 schema / snapshot / API / UI、gitea_workflow_runner_health_v1 schema / snapshot / API / UI、observability_contract_matrix_v1 schema / snapshot / API / UI、ai_provider_route_matrix_v1 schema / snapshot / API / UI、service_health_gap_matrix_v1 schema / snapshot / API / UI、service health evidence cards UI、service_health_failure_notification_policy_v1 schema / snapshot / API / UI 已完成 |
|
||||
| OpenClaw / Hermes / NemoTron 佈建布局 | 45% | P1-401 / P1-402 已完成；仍是只讀 layout 與治理頁顯示，不是 runtime deploy | `ai_agent_deployment_layout_v1` schema、`ai_agent_deployment_layout_2026-06-11.json`、`GET /api/v1/agents/agent-deployment-layout`、治理頁自動化盤點 UI、`AI_AGENT_DEPLOYMENT_LAYOUT_2026-06-11.md` |
|
||||
| OpenClaw / Hermes / NemoTron 主動溝通、學習與成長證據 | 100% | P2-401A 到 P2-134 已完成只讀證據面、runtime / report / result-capture gates、no-write readback、promotion review、writer implementation review、writer dry-run fixture、writer dry-run readback、owner promotion execution gate、owner-approved execution rehearsal、owner acceptance / maintenance window gate、owner acceptance readback / preflight hold、owner-approved preflight release package、owner-approved release readiness readback、owner release approval gate、post-release verifier / rollback gate、final release candidate readback 與 release authorization hold；P2-134 已正式驗證，固定 5 個 release authorization hold、5 個 rollback authorization hold、5 個 release window hold、5 個 live-apply authorization hold、6 個 blocked authorization transition 與 5 個 operator action。runtime worker、DB migration、production Redis consumer group、canonical runtime readback、live query、runtime score、result capture write、Telegram 實發、delivery receipt E2E、live report delivery、reviewer queue write、Gateway queue write、AI analysis runtime、中低風險 auto worker、KM / LOGBOOK / audit DB / timeline / PlayBook trust 寫入、SDK / 付費服務仍未開 gate | `ai_agent_result_capture_release_authorization_hold_v1`、`GET /api/v1/agents/agent-result-capture-release-authorization-hold`、P2-134 本地 pytest `14 passed`、Web typecheck / build / guard 通過、正式站 deploy marker `18b867c3`、正式 API readback、正式站 `/zh-TW/governance?tab=automation-inventory&_v=18b867c3-p2-134-prod-desktop` desktop / mobile smoke、禁用內部協作片語 `0`、水平溢位 `0`、危險控制 `0`、console error `0`、`ai_agent_result_capture_final_release_candidate_readback_v1`、`GET /api/v1/agents/agent-result-capture-final-release-candidate-readback`、正式站 deploy marker `8be5ddab`、`ai_agent_result_capture_post_release_verifier_rollback_gate_v1`、`GET /api/v1/agents/agent-result-capture-post-release-verifier-rollback-gate`、正式站 deploy marker `934af770`、正式站 `/zh-TW/governance?tab=automation-inventory` desktop / mobile smoke、`ai_agent_result_capture_owner_release_approval_gate_v1`、`GET /api/v1/agents/agent-result-capture-owner-release-approval-gate`、正式站 deploy marker `03617db7`、`ai_agent_result_capture_owner_approved_release_readiness_readback_v1`、`GET /api/v1/agents/agent-result-capture-owner-approved-release-readiness-readback`、正式站 deploy marker `6fcf7241`、`ai_agent_result_capture_owner_approved_preflight_release_package_v1`、`GET /api/v1/agents/agent-result-capture-owner-approved-preflight-release-package`、`ai_agent_result_capture_owner_acceptance_readback_preflight_hold_v1`、`GET /api/v1/agents/agent-result-capture-owner-acceptance-readback-preflight-hold`、`ai_agent_result_capture_owner_acceptance_maintenance_gate_v1`、`GET /api/v1/agents/agent-result-capture-owner-acceptance-maintenance-gate`、`ai_agent_result_capture_owner_approved_execution_rehearsal_v1`、`GET /api/v1/agents/agent-result-capture-owner-approved-execution-rehearsal`、`ai_agent_result_capture_owner_promotion_review_v1`、`ai_agent_result_capture_writer_dry_run_readback_v1`、`ai_agent_result_capture_writer_dry_run_fixture_v1`、`ai_agent_result_capture_writer_implementation_review_v1`、`ai_agent_result_capture_write_gate_review_v1`、`ai_agent_interaction_learning_proof_v1`、MASTER §3.2.1b / §3.2.1d / §3.4.3 |
|
||||
| OpenClaw / Hermes / NemoTron 主動溝通、學習與成長證據 | 100% | P2-401A 到 P2-135 已完成只讀證據面、runtime / report / result-capture gates、no-write readback、promotion review、writer implementation review、writer dry-run fixture、writer dry-run readback、owner promotion execution gate、owner-approved execution rehearsal、owner acceptance / maintenance window gate、owner acceptance readback / preflight hold、owner-approved preflight release package、owner-approved release readiness readback、owner release approval gate、post-release verifier / rollback gate、final release candidate readback、release authorization hold 與 release authorization readback gate；P2-135 已本地完成，固定 5 個 release authorization readback、5 個 rollback release readback、5 個 maintenance window readback hold、5 個 live-apply release readback hold、6 個 blocked release readback transition 與 5 個 operator action。runtime worker、DB migration、production Redis consumer group、canonical runtime readback、live query、runtime score、result capture write、Telegram 實發、delivery receipt E2E、live report delivery、reviewer queue write、Gateway queue write、AI analysis runtime、中低風險 auto worker、KM / LOGBOOK / audit DB / timeline / PlayBook trust 寫入、SDK / 付費服務仍未開 gate | `ai_agent_result_capture_release_authorization_readback_gate_v1`、`GET /api/v1/agents/agent-result-capture-release-authorization-readback-gate`、P2-135 + P2-134 本地 pytest `14 passed`、JSON parse、Python compile、Web typecheck 通過、正式部署與 production smoke 待推進、`ai_agent_result_capture_release_authorization_hold_v1`、`GET /api/v1/agents/agent-result-capture-release-authorization-hold`、正式站 deploy marker `18b867c3`、正式 API readback、正式站 `/zh-TW/governance?tab=automation-inventory&_v=18b867c3-p2-134-prod-desktop` desktop / mobile smoke、禁用內部協作片語 `0`、水平溢位 `0`、危險控制 `0`、console error `0`、`ai_agent_result_capture_final_release_candidate_readback_v1`、`GET /api/v1/agents/agent-result-capture-final-release-candidate-readback`、正式站 deploy marker `8be5ddab`、`ai_agent_result_capture_post_release_verifier_rollback_gate_v1`、`GET /api/v1/agents/agent-result-capture-post-release-verifier-rollback-gate`、正式站 deploy marker `934af770`、正式站 `/zh-TW/governance?tab=automation-inventory` desktop / mobile smoke、`ai_agent_result_capture_owner_release_approval_gate_v1`、`GET /api/v1/agents/agent-result-capture-owner-release-approval-gate`、正式站 deploy marker `03617db7`、`ai_agent_result_capture_owner_approved_release_readiness_readback_v1`、`GET /api/v1/agents/agent-result-capture-owner-approved-release-readiness-readback`、正式站 deploy marker `6fcf7241`、`ai_agent_result_capture_owner_approved_preflight_release_package_v1`、`GET /api/v1/agents/agent-result-capture-owner-approved-preflight-release-package`、`ai_agent_result_capture_owner_acceptance_readback_preflight_hold_v1`、`GET /api/v1/agents/agent-result-capture-owner-acceptance-readback-preflight-hold`、`ai_agent_result_capture_owner_acceptance_maintenance_gate_v1`、`GET /api/v1/agents/agent-result-capture-owner-acceptance-maintenance-gate`、`ai_agent_result_capture_owner_approved_execution_rehearsal_v1`、`GET /api/v1/agents/agent-result-capture-owner-approved-execution-rehearsal`、`ai_agent_result_capture_owner_promotion_review_v1`、`ai_agent_result_capture_writer_dry_run_readback_v1`、`ai_agent_result_capture_writer_dry_run_fixture_v1`、`ai_agent_result_capture_writer_implementation_review_v1`、`ai_agent_result_capture_write_gate_review_v1`、`ai_agent_interaction_learning_proof_v1`、MASTER §3.2.1b / §3.2.1d / §3.4.3 |
|
||||
| AI Agent 主動營運委派與版本生命週期 | 100% | P2-402A / P2-402B / P2-402C / P2-402D / P2-402E / P2-402F / P2-402G 已完成；已建立 repo-only 版本新鮮度快照、工具採用批准包、Telegram action-required digest policy、Gitea PR 草案 lane、host / K3s / stateful 版本只讀盤點、API 與 governance UI。定期排程、外部版本查詢、工具安裝、CI 變更、套件升級、主機更新、container pull、實際 PR creation、auto merge、Telegram 實發、SSH、kubectl、重啟仍未開 gate | `ai_agent_proactive_operations_contract_v1`、`ai_agent_version_freshness_snapshot_v1`、`ai_agent_tool_adoption_approval_package_v1`、`ai_agent_telegram_action_required_digest_policy_v1`、`ai_agent_gitea_pr_draft_lane_v1`、`ai_agent_host_stateful_version_inventory_v1`、`GET /api/v1/agents/agent-proactive-operations-contract`、`GET /api/v1/agents/agent-version-freshness-snapshot`、`GET /api/v1/agents/agent-tool-adoption-approval-package`、`GET /api/v1/agents/agent-telegram-action-required-digest-policy`、`GET /api/v1/agents/agent-gitea-pr-draft-lane`、`GET /api/v1/agents/agent-host-stateful-version-inventory`、`/zh-TW/governance?tab=automation-inventory`、MASTER §3.2.1c |
|
||||
| 本工作清單與分析報告 | 100% | 已完成 | 本 MD 文件 |
|
||||
|
||||
### 2026-06-14 08:36 狀態同步
|
||||
### 2026-06-14 08:44 狀態同步
|
||||
|
||||
- `P2-134` release authorization hold 已完成並正式驗證：新增 `ai_agent_result_capture_release_authorization_hold_v1`、`GET /api/v1/agents/agent-result-capture-release-authorization-hold`、治理頁 P2-134 區塊與繁中 UI 文案。
|
||||
- 本地證據：P2-134 + P2-133 API/service regression `14 passed`、JSON parse、Python compile、Web typecheck、`NEXT_PUBLIC_API_URL=https://awoooi.wooo.work pnpm --filter @awoooi/web build` 均通過；governance First Load JS `435 kB`。
|
||||
- P2-134 固定 5 個 release authorization hold、5 個 rollback authorization hold、5 個 release window hold、5 個 live-apply authorization hold、6 個 blocked authorization transition、5 個 operator action、需批准 `8`、阻擋 `9`、正式寫入 / 發送 `0`。
|
||||
- 邊界仍維持：owner release authorized、maintenance window approved、rollback owner confirmed、release authorization granted / passed、live apply release passed、writer apply、execution apply、receipt write、result capture write、learning write、PlayBook trust write、reviewer queue write、Gateway queue write、Telegram send、Bot API、production write、secret read、destructive operation 全部 `0 / false`。
|
||||
- 正式部署與 readback：feature commit `e0a6d339`、deploy marker `18b867c3`；正式 API 回 current `P2-134`、next `P2-135`、completion `100`、runtime authority `result_capture_release_authorization_hold_only_no_live_write`；desktop / mobile Browser smoke 均確認 P2-134 區塊可見、必要文案全命中、禁用內部協作片語 `0`、水平溢位 `0`、危險控制 `0`、console error `0`。下一步可交給 `P2-135`。
|
||||
- `P2-135` release authorization readback gate 已本地完成：新增 `ai_agent_result_capture_release_authorization_readback_gate_v1`、`GET /api/v1/agents/agent-result-capture-release-authorization-readback-gate`、治理頁 P2-135 區塊與繁中 UI 文案。
|
||||
- 本地證據：P2-135 + P2-134 API/service regression `14 passed`、JSON parse、Python compile、Web typecheck 均通過；Web production build、正式部署與 production smoke 待推進。
|
||||
- P2-135 固定 5 個 release authorization readback、5 個 rollback release readback、5 個 maintenance window readback hold、5 個 live-apply release readback hold、6 個 blocked release readback transition、5 個 operator action、需批准 `8`、阻擋 `9`、正式寫入 / 發送 `0`。
|
||||
- 邊界仍維持：owner release authorized、maintenance window approved、rollback owner confirmed、release authorization granted / passed、rollback release passed、live apply release passed、writer apply、execution apply、receipt write、result capture write、learning write、PlayBook trust write、reviewer queue write、Gateway queue write、Telegram send、Bot API、production write、secret read、destructive operation 全部 `0 / false`。
|
||||
- P2-134 正式部署與 readback 已完成：feature commit `e0a6d339`、deploy marker `18b867c3`；正式 API 回 current `P2-134`、next `P2-135`、completion `100`、runtime authority `result_capture_release_authorization_hold_only_no_live_write`；desktop / mobile Browser smoke 均確認 P2-134 區塊可見。P2-135 正式驗證後才可交給 `P2-136`。
|
||||
|
||||
AI Agent 自動化工作包目前完成度：**99.8%**。本工作清單文件本身完成度：**100%**。
|
||||
|
||||
三 Agent 佈建布局目前完成度：**45%**。第一波已完成只讀 schema / snapshot / API / 測試 / 報告，第二波已接入治理頁自動化盤點 UI；正式 runtime 佈署、Telegram E2E 發送與 AgentSession 工作流仍需逐項 gate。
|
||||
|
||||
三 Agent 主動溝通、學習與成長證據目前完成度：**100%**。P2-403A 到 P2-134 已把互動證據、報表治理、runtime readback、reviewer / result capture / writer gates、no-write readback、promotion review、writer implementation review、writer dry-run fixture、writer dry-run readback、owner promotion execution gate、owner-approved execution rehearsal、owner acceptance / maintenance window gate、owner acceptance readback / preflight hold、owner-approved preflight release package、owner-approved release readiness readback、owner release approval gate、post-release verifier / rollback gate、final release candidate readback 與 release authorization hold 全部固定成可驗證證據。P2-134 已正式驗證，deploy marker `18b867c3`；正式 API 回 `schema_version=ai_agent_result_capture_release_authorization_hold_v1`、current `P2-134`、next `P2-135`、completion `100`、runtime authority `result_capture_release_authorization_hold_only_no_live_write`；desktop / mobile smoke 均確認 P2-134 區塊可見、必要文案全命中、禁用內部協作片語 `0`、水平溢位 `0`、危險控制 `0`、console error `0`。目前 live AgentSession、Agent message、handoff、canonical runtime readback、live query、runtime score、result capture write、learning write、Telegram receipt、Gateway queue write、reviewer queue write、runtime verifier execution、live report delivery、AI analysis runtime、中低風險 auto worker、Telegram 實發、shadow worker live、delivery receipt E2E、KM / LOGBOOK / audit DB / timeline / PlayBook trust runtime 寫入仍全部為 `0`。真正下一步是 `P2-135`。
|
||||
三 Agent 主動溝通、學習與成長證據目前完成度：**100%**。P2-403A 到 P2-135 已把互動證據、報表治理、runtime readback、reviewer / result capture / writer gates、no-write readback、promotion review、writer implementation review、writer dry-run fixture、writer dry-run readback、owner promotion execution gate、owner-approved execution rehearsal、owner acceptance / maintenance window gate、owner acceptance readback / preflight hold、owner-approved preflight release package、owner-approved release readiness readback、owner release approval gate、post-release verifier / rollback gate、final release candidate readback、release authorization hold 與 release authorization readback gate 全部固定成可驗證證據。P2-135 已本地完成；本地 API 回 `schema_version=ai_agent_result_capture_release_authorization_readback_gate_v1`、current `P2-135`、next `P2-136`、completion `100`、runtime authority `result_capture_release_authorization_readback_gate_only_no_live_write`；正式部署與 production smoke 待推進。P2-134 已正式驗證，deploy marker `18b867c3`；desktop / mobile smoke 均確認 P2-134 區塊可見。目前 live AgentSession、Agent message、handoff、canonical runtime readback、live query、runtime score、result capture write、learning write、Telegram receipt、Gateway queue write、reviewer queue write、runtime verifier execution、live report delivery、AI analysis runtime、中低風險 auto worker、Telegram 實發、shadow worker live、delivery receipt E2E、KM / LOGBOOK / audit DB / timeline / PlayBook trust runtime 寫入仍全部為 `0`。真正下一步是 P2-135 正式驗證後的 `P2-136`。
|
||||
|
||||
AI Agent 主動營運委派與版本生命週期目前完成度：**100%**。已完成 12 類版本 domain、24 類可委派能力、5 種 cadence、8 類 MCP、4 類 RAG memory、只讀 API、`P2-402B` repo-only daily version freshness snapshot、`P2-402C` Renovate / OSV-Scanner / Trivy / Syft / Grype 工具採用批准包、`P2-402D` Telegram action-required digest policy、`P2-402E` Gitea PR 草案 lane、`P2-402F` host OS / K3s / stateful services 版本只讀盤點，以及 `P2-402G` governance UI 顯示可委派能力；`P2-403A` 到 `P2-134` 已補互動、學習證據面、live read model gate、Redis dry-run gate、learning writeback approval package、Telegram receipt approval package、owner-approved learning dry-run preview、runtime write gate review、post-write verifier package、runtime verifier evidence review、報表真相、TG 戰情室收斂、日週月報、Agent 工作量、圖表化報告、風險自動化政策、報表 runtime 啟動前閘門、no-write dry-run 證據包、fixture/readback/verifier dry-run 證據包、shadow/no-write execution gate、操作類別權限模型、13 類候選操作 dry-run 證據、任務結果稽核軌跡、matched PlayBook 學習缺口、critic / reviewer result capture、owner-approved result capture dry-run / readback、result capture writer dry-run fixture、writer dry-run readback、owner promotion execution gate、owner-approved execution rehearsal、owner acceptance / maintenance window gate、owner acceptance readback / preflight hold、owner-approved preflight release package、owner-approved release readiness readback、owner release approval gate、post-release verifier / rollback gate、final release candidate readback 與 release authorization hold。下一步是 `P2-135`；外部 registry / package source / host probe / SSH / kubectl / 工具安裝 / CI 變更 / 實際 PR creation / Telegram 實發與 learning write 仍需 gate。
|
||||
AI Agent 主動營運委派與版本生命週期目前完成度：**100%**。已完成 12 類版本 domain、24 類可委派能力、5 種 cadence、8 類 MCP、4 類 RAG memory、只讀 API、`P2-402B` repo-only daily version freshness snapshot、`P2-402C` Renovate / OSV-Scanner / Trivy / Syft / Grype 工具採用批准包、`P2-402D` Telegram action-required digest policy、`P2-402E` Gitea PR 草案 lane、`P2-402F` host OS / K3s / stateful services 版本只讀盤點，以及 `P2-402G` governance UI 顯示可委派能力；`P2-403A` 到 `P2-135` 已補互動、學習證據面、live read model gate、Redis dry-run gate、learning writeback approval package、Telegram receipt approval package、owner-approved learning dry-run preview、runtime write gate review、post-write verifier package、runtime verifier evidence review、報表真相、TG 戰情室收斂、日週月報、Agent 工作量、圖表化報告、風險自動化政策、報表 runtime 啟動前閘門、no-write dry-run 證據包、fixture/readback/verifier dry-run 證據包、shadow/no-write execution gate、操作類別權限模型、13 類候選操作 dry-run 證據、任務結果稽核軌跡、matched PlayBook 學習缺口、critic / reviewer result capture、owner-approved result capture dry-run / readback、result capture writer dry-run fixture、writer dry-run readback、owner promotion execution gate、owner-approved execution rehearsal、owner acceptance / maintenance window gate、owner acceptance readback / preflight hold、owner-approved preflight release package、owner-approved release readiness readback、owner release approval gate、post-release verifier / rollback gate、final release candidate readback、release authorization hold 與 release authorization readback gate。下一步是 P2-135 正式驗證後的 `P2-136`；外部 registry / package source / host probe / SSH / kubectl / 工具安裝 / CI 變更 / 實際 PR creation / Telegram 實發與 learning write 仍需 gate。
|
||||
|
||||
完成度計算模型：
|
||||
|
||||
@@ -1015,7 +1015,8 @@ UI：
|
||||
| P2-132 | 完成 | 100 | OpenClaw + Hermes + NemoTron | post-release verifier / rollback gate | `ai_agent_result_capture_post_release_verifier_rollback_gate_v1` / schema / snapshot / 只讀 API / governance UI；正式站 deploy marker `934af770` 已驗證；5 個 post-release verifier gate、5 個 rollback release gate、5 個 release verification hold、5 個 live-apply post-release gate、6 個 blocked post-release transition、5 個 operator action；runtime authority 固定 `result_capture_post_release_verifier_rollback_gate_only_no_live_write`；post-release verifier ready / rollback release passed / release verification passed / live apply release passed / writer apply / execution apply / receipt write / result capture / learning / PlayBook trust / reviewer queue / Gateway / Telegram / Bot API / report receipt / production write 全為 `0` | 已由 P2-133 承接；不把 verifier gate 視為 release 通過、不釋放 live apply、不套用 writer、不寫 receipt、不寫 result capture、不寫 learning、不送 Telegram、不寫 production |
|
||||
| P2-133 | 完成 | 100 | OpenClaw + Hermes + NemoTron | final release candidate readback | `ai_agent_result_capture_final_release_candidate_readback_v1` / schema / snapshot / 只讀 API / governance UI；正式站 deploy marker `8be5ddab` 已驗證；5 個 final release candidate readback、5 個 rollback candidate readback、5 個 candidate acceptance hold、5 個 live-apply candidate hold、6 個 blocked final candidate transition、5 個 operator action；runtime authority 固定 `result_capture_final_release_candidate_readback_only_no_live_write`；owner release approved / maintenance window approved / rollback owner confirmed / final candidate passed / live apply release passed / writer apply / execution apply / receipt write / result capture / learning / PlayBook trust / reviewer queue / Gateway / Telegram / Bot API / report receipt / production write 全為 `0`；desktop / mobile smoke 禁用內部協作片語 `0`、水平溢位 `0`、P2-133 高風險控制 `0`、console error `0` | 已由 P2-134 承接；不把 candidate readback 視為 owner release approved、不釋放 live apply、不套用 writer、不寫 receipt、不寫 result capture、不寫 learning、不送 Telegram、不寫 production |
|
||||
| P2-134 | 完成 | 100 | OpenClaw + Hermes + NemoTron | release authorization hold | `ai_agent_result_capture_release_authorization_hold_v1` / schema / snapshot / 只讀 API / governance UI；正式站 deploy marker `18b867c3` 已驗證；5 個 release authorization hold、5 個 rollback authorization hold、5 個 release window hold、5 個 live-apply authorization hold、6 個 blocked authorization transition、5 個 operator action；runtime authority 固定 `result_capture_release_authorization_hold_only_no_live_write`；owner release authorized / maintenance window approved / rollback owner confirmed / release authorization granted / release authorization passed / live apply release passed / writer apply / execution apply / receipt write / result capture / learning / PlayBook trust / reviewer queue / Gateway / Telegram / Bot API / report receipt / production write / secret read / destructive operation 全為 `0`；desktop / mobile smoke 禁用內部協作片語 `0`、水平溢位 `0`、P2-134 區塊危險操作入口 `0`、console error `0`、critical network issue `0` | 已由 P2-135 承接；不把 authorization hold 視為正式授權、不釋放 live apply、不套用 writer、不寫 receipt、不寫 result capture、不寫 learning、不送 Telegram、不寫 production |
|
||||
| P2-135 | 待辦 | 0 | OpenClaw + Hermes + NemoTron | release authorization readback / no-write release gate | 待建立 P2-134 release authorization hold 的 readback、rollback hold readback、release window readback、live-apply hold readback 與 blocked release transition 證據；必須維持只讀 API / governance UI / redaction | 不讀 canonical runtime target、不做 live query、不寫 reviewer queue、不寫 Gateway queue、不送 Telegram、不呼叫 Bot API、不寫 receipt、不寫 result capture、不寫 learning、不更新 PlayBook trust、不寫 production |
|
||||
| P2-135 | 進行中 | 100 | OpenClaw + Hermes + NemoTron | release authorization readback gate | `ai_agent_result_capture_release_authorization_readback_gate_v1` / schema / snapshot / 只讀 API / governance UI；本地 pytest `14 passed`、JSON parse、Python compile、Web typecheck 通過；5 個 release authorization readback、5 個 rollback release readback、5 個 maintenance window readback hold、5 個 live-apply release readback hold、6 個 blocked release readback transition、5 個 operator action；runtime authority 固定 `result_capture_release_authorization_readback_gate_only_no_live_write`；owner release authorized、release authorization granted / passed、rollback release、live apply release、writer apply、execution apply、receipt write、result capture、learning、PlayBook trust、Gateway、Telegram、production write 全為 `0` | 正式部署與 production smoke 待推進；完成後才可由 P2-136 承接，不核發 release authorization、不釋放 live apply、不套用 writer |
|
||||
|
||||
|
||||
### P3 - 候選 Agent 擴展
|
||||
|
||||
|
||||
Reference in New Issue
Block a user