wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

feat(web): add IwoooS candidate review checklist

Browse Source
This commit is contained in:
Your Name
2026-05-20 11:37:03 +08:00
parent 1fab4f7bd9
commit 3461d4eaff
11 changed files with 774 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

159
scripts/security/security-mirror-progress-guard.py
View File

@@ -193,6 +193,7 @@ def validate(root: Path) -> None:
"s2_39_iwooos_host_owner_decision_record_human_handoff_readiness_review_checklist",
"s2_40_iwooos_host_owner_decision_record_human_handoff_readiness_review_outcome_lanes",
"s2_41_iwooos_host_owner_decision_record_human_record_owner_review_candidate_packets",
"s2_42_iwooos_host_owner_decision_record_human_record_owner_review_candidate_checklist",
]
assert_equal(
"progress_delta_ledger.delta_ids",
@@ -618,6 +619,17 @@ def validate(root: Path) -> None:
"host_decision_record_human_record_owner_review_candidate_validation_runtime_gate_packet",
"host_decision_record_human_record_owner_review_candidate_no_execution_attestation_packet",
]
expected_iwooos_host_owner_decision_record_human_record_owner_review_candidate_checklist_item_ids = [
"host_decision_record_human_record_owner_review_candidate_identity_traceable_check",
"host_decision_record_human_record_owner_review_candidate_owner_boundary_readable_check",
"host_decision_record_human_record_owner_review_candidate_decision_summary_readable_check",
"host_decision_record_human_record_owner_review_candidate_scope_expiry_current_check",
"host_decision_record_human_record_owner_review_candidate_scan_limits_not_authorization_check",
"host_decision_record_human_record_owner_review_candidate_credential_boundary_metadata_only_check",
"host_decision_record_human_record_owner_review_candidate_maintenance_rollback_traceable_check",
"host_decision_record_human_record_owner_review_candidate_validation_runtime_gate_separate_check",
"host_decision_record_human_record_owner_review_candidate_no_execution_attestation_present_check",
]
assert_equal(
"iwooos_projection.summary.frontend_surface_coverage_group_count",
iwooos_projection["summary"]["frontend_surface_coverage_group_count"],
@@ -778,6 +790,13 @@ def validate(root: Path) -> None:
iwooos_projection["summary"]["host_owner_decision_record_human_record_owner_review_candidate_packet_count"],
len(expected_iwooos_host_owner_decision_record_human_record_owner_review_candidate_packet_ids),
)
assert_equal(
"iwooos_projection.summary.host_owner_decision_record_human_record_owner_review_candidate_checklist_item_count",
iwooos_projection["summary"][
"host_owner_decision_record_human_record_owner_review_candidate_checklist_item_count"
],
len(expected_iwooos_host_owner_decision_record_human_record_owner_review_candidate_checklist_item_ids),
)
iwooos_progress = iwooos_projection["progress"]
assert_equal("iwooos_projection.progress.overall_percent", iwooos_progress["overall_percent"], progress["overall_percent"])
assert_equal(
@@ -3171,6 +3190,138 @@ def validate(root: Path) -> None:
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_candidate_packets.{item['packet_id']}.not_authorization",
item["not_authorization"],
)
iwooos_host_owner_decision_record_human_record_owner_review_candidate_checklist_items = iwooos_projection[
"host_owner_decision_record_human_record_owner_review_candidate_checklist_items"
]
assert_equal(
"iwooos_projection.host_owner_decision_record_human_record_owner_review_candidate_checklist_items.ids",
[
item["item_id"]
for item in iwooos_host_owner_decision_record_human_record_owner_review_candidate_checklist_items
],
expected_iwooos_host_owner_decision_record_human_record_owner_review_candidate_checklist_item_ids,
)
assert_equal(
"iwooos_projection.host_owner_decision_record_human_record_owner_review_candidate_checklist_items.display_order",
[
item["display_order"]
for item in iwooos_host_owner_decision_record_human_record_owner_review_candidate_checklist_items
],
list(
range(
1,
len(expected_iwooos_host_owner_decision_record_human_record_owner_review_candidate_checklist_item_ids)
+ 1,
)
),
)
expected_iwooos_host_owner_decision_record_human_record_owner_review_candidate_review_conditions = [
"candidate_identity_traceable",
"candidate_owner_boundary_readable",
"candidate_decision_summary_readable",
"candidate_scope_expiry_current",
"candidate_scan_limits_not_authorization",
"candidate_credential_boundary_metadata_only",
"candidate_maintenance_rollback_traceable",
"candidate_validation_runtime_gate_separate",
"candidate_no_execution_attestation_present",
]
assert_equal(
"iwooos_projection.host_owner_decision_record_human_record_owner_review_candidate_checklist_items.review_conditions",
[
item["review_condition"]
for item in iwooos_host_owner_decision_record_human_record_owner_review_candidate_checklist_items
],
expected_iwooos_host_owner_decision_record_human_record_owner_review_candidate_review_conditions,
)
for item in iwooos_host_owner_decision_record_human_record_owner_review_candidate_checklist_items:
assert_equal(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_candidate_checklist_items.{item['item_id']}.display_mode",
item["display_mode"],
"owner_decision_record_human_record_owner_review_candidate_checklist_only",
)
assert_equal(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_candidate_checklist_items.{item['item_id']}.human_record_owner_review_check_passed_count",
item["human_record_owner_review_check_passed_count"],
0,
)
assert_equal(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_candidate_checklist_items.{item['item_id']}.human_record_owner_review_started_count",
item["human_record_owner_review_started_count"],
0,
)
assert_equal(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_candidate_checklist_items.{item['item_id']}.human_record_owner_review_ready_count",
item["human_record_owner_review_ready_count"],
0,
)
assert_equal(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_candidate_checklist_items.{item['item_id']}.human_record_owner_handoff_review_passed_count",
item["human_record_owner_handoff_review_passed_count"],
0,
)
assert_equal(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_candidate_checklist_items.{item['item_id']}.human_record_owner_handoff_started_count",
item["human_record_owner_handoff_started_count"],
0,
)
assert_equal(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_candidate_checklist_items.{item['item_id']}.human_record_owner_handoff_ready_count",
item["human_record_owner_handoff_ready_count"],
0,
)
assert_equal(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_candidate_checklist_items.{item['item_id']}.formal_record_queue_review_passed_count",
item["formal_record_queue_review_passed_count"],
0,
)
assert_equal(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_candidate_checklist_items.{item['item_id']}.formal_record_queue_enqueued_count",
item["formal_record_queue_enqueued_count"],
0,
)
assert_false(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_candidate_checklist_items.{item['item_id']}.decision_record_created",
item["decision_record_created"],
)
assert_equal(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_candidate_checklist_items.{item['item_id']}.owner_decision_received_count",
item["owner_decision_received_count"],
0,
)
assert_equal(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_candidate_checklist_items.{item['item_id']}.owner_decision_accepted_count",
item["owner_decision_accepted_count"],
0,
)
assert_false(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_candidate_checklist_items.{item['item_id']}.owner_approval_record_created",
item["owner_approval_record_created"],
)
assert_false(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_candidate_checklist_items.{item['item_id']}.runtime_gate_opened",
item["runtime_gate_opened"],
)
assert_false(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_candidate_checklist_items.{item['item_id']}.raw_payload_allowed",
item["raw_payload_allowed"],
)
assert_false(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_candidate_checklist_items.{item['item_id']}.secret_value_collection_allowed",
item["secret_value_collection_allowed"],
)
assert_false(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_candidate_checklist_items.{item['item_id']}.runtime_execution_authorized",
item["runtime_execution_authorized"],
)
assert_false(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_candidate_checklist_items.{item['item_id']}.action_buttons_allowed",
item["action_buttons_allowed"],
)
assert_true(
f"iwooos_projection.host_owner_decision_record_human_record_owner_review_candidate_checklist_items.{item['item_id']}.not_authorization",
item["not_authorization"],
)
assert_equal(
"iwooos_projection.non_blocking_lane_ids",
iwooos_projection["non_blocking_lane_ids"],
@@ -3221,6 +3372,7 @@ def validate(root: Path) -> None:
"display_host_owner_decision_record_human_handoff_readiness_review_checklist",
"display_host_owner_decision_record_human_handoff_readiness_review_outcome_lanes",
"display_host_owner_decision_record_human_record_owner_review_candidate_packets",
"display_host_owner_decision_record_human_record_owner_review_candidate_checklist",
"display_evidence_refs",
"display_forbidden_actions",
]:
@@ -3347,6 +3499,13 @@ def validate(root: Path) -> None:
"collect_owner_decision_from_human_record_owner_review_candidate_packet",
"create_host_owner_decision_record_from_human_record_owner_review_candidate_packet",
"open_runtime_gate_from_human_record_owner_review_candidate_packet",
"treat_host_owner_decision_record_human_record_owner_review_candidate_checklist_as_approval",
"mark_human_record_owner_review_candidate_checklist_passed",
"start_human_record_owner_review_from_candidate_checklist",
"mark_human_record_owner_review_ready_from_candidate_checklist",
"collect_owner_decision_from_human_record_owner_review_candidate_checklist",
"create_host_owner_decision_record_from_human_record_owner_review_candidate_checklist",
"open_runtime_gate_from_human_record_owner_review_candidate_checklist",
"apply_runtime_blocking_control",
"switch_github_primary",
"production_deploy",