wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 3 Packages Projects Releases Wiki Activity

feat(web): add IwoooS candidate review checklist

Browse Source
This commit is contained in:
Your Name
2026-05-20 11:37:03 +08:00
parent 1fab4f7bd9
commit 3461d4eaff
11 changed files with 774 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
docs/security/IWOOOS-POSTURE-PROJECTION.md
View File

@@ -69,6 +69,7 @@ IwoooS 首版只讀取或對齊以下已提交 evidence：
37. 8 個 host owner decision record human handoff readiness review checklist items，顯示 readiness packets 進人工 record owner 前仍需只讀核對的條件，但不標記 review passed、不開始 handoff、不建立 decision record、不開 runtime gate。
38. 9 個 host owner decision record human handoff readiness review outcome lanes，顯示 readiness review 後的只讀結果分流與下一步，但不標記 review passed、不開始 handoff、不標記 handoff ready、不 enqueue、不建立 decision record、不開 runtime gate。
39. 9 個 host owner decision record human record owner review candidate packets，顯示未來人工 record owner review candidate 需要看的 metadata，但不開始 review、不標記 ready、不收 owner decision、不建立 decision record、不開 runtime gate。
40. 9 個 host owner decision record human record owner review candidate checklist items，顯示 candidate packets 進人工 record owner review 前仍需只讀核對的條件，但不標記 checklist passed、不開始 review、不標記 ready、不收 owner decision、不建立 decision record、不開 runtime gate。
## 3.1 既有前端資安頁面整合
@@ -642,6 +643,26 @@ S2.41 將 ready for human record owner review candidate 後的 metadata 拆成
這個 candidate packet board 不代表 human record owner review 已開始、review 已 ready、handoff 已開始、handoff 已 ready、owner decision 已收到或接受、decision record 已建立、資安批准已完成或 runtime gate 已開啟。它只讓 IwoooS 把未來人工 record owner 可能需要看的 metadata 顯示清楚。
## 3.33 Host Owner Decision Record Human Record Owner Review Candidate Checklist
S2.42 將 human record owner review candidate packets 後的核對條件拆成九個只讀 checklist items。這一層只回答「candidate packets 是否可供未來人工 record owner review」，不標記 checklist passed、不開始 review、不標記 review ready、不開始 handoff、不收 owner decision、不建立 decision record、不建立 approval record、不開 runtime gate。
| 順序 | Review candidate check | 來源 packet | 保護邊界 |
|------|------------------------|-------------|----------|
| 1 | Candidate identity traceable | Review candidate identity packet | check passed=0；review started=0 |
| 2 | Candidate owner boundary readable | Review owner boundary packet | owner decision received=0；review ready=0 |
| 3 | Candidate decision summary readable | Review decision summary packet | decision record created=false |
| 4 | Candidate scope and expiry current | Review scope and expiry packet | runtime gate opened=false |
| 5 | Candidate scan limits not authorization | Review scan limits packet | scan authorized=false |
| 6 | Candidate credential boundary metadata-only | Review credential boundary packet | secret collection=false |
| 7 | Candidate maintenance and rollback traceable | Review maintenance and rollback packet | host change=false |
| 8 | Candidate validation and runtime gate separate | Review validation and runtime gate packet | active runtime gates=0；action buttons=false |
| 9 | Candidate no-execution attestation present | Review no-execution attestation packet | not authorization=true |
每個 review candidate checklist item 都固定 `display_mode=owner_decision_record_human_record_owner_review_candidate_checklist_only`、`human_record_owner_review_check_passed_count=0`、`human_record_owner_review_started_count=0`、`human_record_owner_review_ready_count=0`、`human_record_owner_handoff_review_passed_count=0`、`human_record_owner_handoff_started_count=0`、`human_record_owner_handoff_ready_count=0`、`formal_record_queue_review_passed_count=0`、`formal_record_queue_enqueued_count=0`、`decision_record_created=false`、`owner_decision_received_count=0`、`owner_decision_accepted_count=0`、`owner_approval_record_created=false`、`runtime_gate_opened=false`、`raw_payload_allowed=false`、`secret_value_collection_allowed=false`、`runtime_execution_authorized=false`、`action_buttons_allowed=false`、`not_authorization=true`。
這個 checklist 不代表 human record owner review checklist 已通過、review 已開始、review 已 ready、handoff 已開始、owner decision 已收到或接受、decision record 已建立、資安批准已完成或 runtime gate 已開啟。它只讓 IwoooS 把 candidate packets 進人工 record owner review 前的核對條件顯示清楚。
## 4. 仍禁止
IwoooS 不得提供下列輸出：
@@ -680,7 +701,8 @@ IwoooS 不得提供下列輸出：
32. 把 owner decision record handoff readiness review 當成 approval、標記 handoff readiness review passed、開始 human record owner handoff、標記 handoff ready、由 readiness review 建立 decision record，或從 readiness review 開 runtime gate。
33. 把 owner decision record handoff readiness review outcome 當成 approval、標記 handoff readiness review outcome passed、開始 human record owner handoff、標記 handoff ready、由 readiness review outcome 建立 decision record，或從 readiness review outcome 開 runtime gate。
34. 把 owner decision record human record owner review candidate packet 當成 approval、開始 human record owner review、標記 review ready、收 owner decision、由 candidate packet 建立 decision record，或從 candidate packet 開 runtime gate。
35. 把 58% progress、contract count、mirror readiness 或前端可見狀態當成授權。
35. 把 owner decision record human record owner review candidate checklist 當成 approval、標記 checklist passed、開始 human record owner review、標記 review ready、收 owner decision、由 candidate checklist 建立 decision record，或從 candidate checklist 開 runtime gate。
36. 把 58% progress、contract count、mirror readiness 或前端可見狀態當成授權。
## 5. 驗證