feat(web): add IwoooS candidate outcome lanes

apps/web/messages/en.json

@@ -2549,6 +2549,59 @@
           "guard": "not_authorization=true; approval record=false"
         }
       }
+    },
+    "hostOwnerDecisionRecordHumanRecordOwnerReviewCandidateOutcomes": {
+      "title": "Host Owner Decision Record Human Record Owner Review Candidate Outcome Lanes",
+      "subtitle": "Human record owner review candidate outcome lanes only display next-step routing after candidate checklist. They do not mark checklist passed, start review, mark review ready, collect owner decisions, create decision records, create approval records, or open runtime gates.",
+      "laneLabel": "Review candidate outcome",
+      "nextLabel": "Next step",
+      "items": {
+        "readyForHumanRecordOwnerReviewPreparation": {
+          "title": "Ready for human record owner review preparation candidate",
+          "body": "All candidate checklist read-only conditions can be prepared for a future human record owner review surface, but this remains a preparation candidate.",
+          "next": "display only; review started=0"
+        },
+        "identityTraceNeedsRefresh": {
+          "title": "Identity trace needs refresh",
+          "body": "Candidate identity, source outcome, version, trace pointer, or queue review link needs refresh before the next layer.",
+          "next": "refresh identity trace; check passed=0"
+        },
+        "ownerBoundaryNeedsClarification": {
+          "title": "Owner boundary needs clarification",
+          "body": "Human record owner, backup owner, contact channel, or responsibility boundary still needs clarification and cannot count as owner engagement.",
+          "next": "clarify owner boundary; decision received=0"
+        },
+        "decisionSummaryNeedsClarification": {
+          "title": "Decision summary needs clarification",
+          "body": "Candidate decision summary, risk acceptance boundary, or no-execution statement is still unclear and cannot create a formal record.",
+          "next": "clarify summary; record created=false"
+        },
+        "scopeExpiryNeedsRefresh": {
+          "title": "Scope and expiry need refresh",
+          "body": "Host, network, service, exclusion, observation intent, or expiry needs refresh before moving into the next human preparation layer.",
+          "next": "refresh scope; review ready=0"
+        },
+        "scanLimitsRemainAmbiguous": {
+          "title": "Scan limits remain ambiguous",
+          "body": "Observe-only, future active scan, or credentialed scan limits may still be mistaken for authorization and must remain routed to clarification.",
+          "next": "clarify limits; scan authorized=false"
+        },
+        "credentialBoundaryFailed": {
+          "title": "Credential boundary failed",
+          "body": "Credential owner, retention, masking, or forbidden collection failed the metadata-only boundary and must be quarantined.",
+          "next": "quarantine credential boundary; secret collection=false"
+        },
+        "maintenanceRollbackIncomplete": {
+          "title": "Maintenance and rollback incomplete",
+          "body": "Maintenance window, constraints, rollback owner, recovery path, or human contact is incomplete and cannot lead to host change.",
+          "next": "complete maintenance data; host change=false"
+        },
+        "runtimeGateStillRequired": {
+          "title": "Runtime gate still required",
+          "body": "Validation evidence, post-check metrics, or follow-up runtime gate pointer still requires an independent gate and cannot open from candidate outcome.",
+          "next": "active runtime gates=0; action buttons=false"
+        }
+      }
     }
   },
   "tickets": {

apps/web/messages/zh-TW.json

@@ -2550,6 +2550,59 @@
           "guard": "not_authorization=true；approval record=false"
         }
       }
+    },
+    "hostOwnerDecisionRecordHumanRecordOwnerReviewCandidateOutcomes": {
+      "title": "主機 Owner Decision Record Human Record Owner Review Candidate Outcome Lanes",
+      "subtitle": "Human record owner review candidate outcome lanes 只顯示 candidate checklist 後下一步分流。不代表 checklist passed、不開始 review、不標記 review ready、不收 owner decision、不建立 decision record、不建立 approval record、不開 runtime gate。",
+      "laneLabel": "Review candidate outcome",
+      "nextLabel": "下一步",
+      "items": {
+        "readyForHumanRecordOwnerReviewPreparation": {
+          "title": "Ready for human record owner review preparation candidate",
+          "body": "所有 candidate checklist 只讀條件都可被準備成未來人工 record owner review 畫面，但目前仍只是 preparation candidate。",
+          "next": "display only；review started=0"
+        },
+        "identityTraceNeedsRefresh": {
+          "title": "Identity trace needs refresh",
+          "body": "candidate identity、source outcome、version、trace pointer 或 queue review link 需要補齊或刷新。",
+          "next": "refresh identity trace；check passed=0"
+        },
+        "ownerBoundaryNeedsClarification": {
+          "title": "Owner boundary needs clarification",
+          "body": "human record owner、backup owner、contact channel 或責任邊界仍需釐清，不能視為 owner 已接案。",
+          "next": "clarify owner boundary；decision received=0"
+        },
+        "decisionSummaryNeedsClarification": {
+          "title": "Decision summary needs clarification",
+          "body": "候選決策摘要、風險接受邊界或 no-execution statement 仍不夠清楚，不能建立正式紀錄。",
+          "next": "clarify summary；record created=false"
+        },
+        "scopeExpiryNeedsRefresh": {
+          "title": "Scope and expiry need refresh",
+          "body": "host、network、service、exclusion、observation intent 或 expiry 需要刷新後才能進下一層人工準備。",
+          "next": "refresh scope；review ready=0"
+        },
+        "scanLimitsRemainAmbiguous": {
+          "title": "Scan limits remain ambiguous",
+          "body": "observe-only、future active scan 或 credentialed scan limits 仍可能被誤讀成授權，需要保留為阻擋分流。",
+          "next": "clarify limits；scan authorized=false"
+        },
+        "credentialBoundaryFailed": {
+          "title": "Credential boundary failed",
+          "body": "credential owner、retention、masking 或 forbidden collection 沒有維持 metadata-only 時必須隔離。",
+          "next": "quarantine credential boundary；secret collection=false"
+        },
+        "maintenanceRollbackIncomplete": {
+          "title": "Maintenance and rollback incomplete",
+          "body": "maintenance window、constraints、rollback owner、recovery path 或人工聯絡點仍缺漏，不能導向主機變更。",
+          "next": "complete maintenance data；host change=false"
+        },
+        "runtimeGateStillRequired": {
+          "title": "Runtime gate still required",
+          "body": "validation evidence、post-check metrics 或 follow-up runtime gate pointer 仍需獨立 gate，不可由 candidate outcome 開啟。",
+          "next": "active runtime gates=0；action buttons=false"
+        }
+      }
     }
   },
   "tickets": {

apps/web/src/app/[locale]/iwooos/page.tsx

@@ -278,6 +278,13 @@ type HostOwnerDecisionRecordHumanRecordOwnerReviewCandidateChecklistItem = {
   tone: 'steady' | 'warn' | 'locked'
 }
 
+type HostOwnerDecisionRecordHumanRecordOwnerReviewCandidateOutcomeLane = {
+  key: string
+  lane: string
+  icon: typeof ShieldCheck
+  tone: 'steady' | 'warn' | 'locked'
+}
+
 const postureMetrics: PostureMetric[] = [
   { key: 'overall', value: '58%', tone: 'warn' },
   { key: 'framework', value: '80-85%', tone: 'steady' },
@@ -671,6 +678,18 @@ const hostOwnerDecisionRecordHumanRecordOwnerReviewCandidateChecklistItems: Host
   { key: 'candidateNoExecutionAttestationPresent', check: 'FRC9', icon: ListChecks, tone: 'locked' },
 ]
 
+const hostOwnerDecisionRecordHumanRecordOwnerReviewCandidateOutcomeLanes: HostOwnerDecisionRecordHumanRecordOwnerReviewCandidateOutcomeLane[] = [
+  { key: 'readyForHumanRecordOwnerReviewPreparation', lane: 'FRV1', icon: CheckCircle2, tone: 'steady' },
+  { key: 'identityTraceNeedsRefresh', lane: 'FRV2', icon: FileText, tone: 'warn' },
+  { key: 'ownerBoundaryNeedsClarification', lane: 'FRV3', icon: Bell, tone: 'warn' },
+  { key: 'decisionSummaryNeedsClarification', lane: 'FRV4', icon: ClipboardCheck, tone: 'warn' },
+  { key: 'scopeExpiryNeedsRefresh', lane: 'FRV5', icon: Radar, tone: 'warn' },
+  { key: 'scanLimitsRemainAmbiguous', lane: 'FRV6', icon: Activity, tone: 'locked' },
+  { key: 'credentialBoundaryFailed', lane: 'FRV7', icon: Lock, tone: 'locked' },
+  { key: 'maintenanceRollbackIncomplete', lane: 'FRV8', icon: Clock3, tone: 'warn' },
+  { key: 'runtimeGateStillRequired', lane: 'FRV9', icon: ShieldCheck, tone: 'locked' },
+]
+
 const evidenceItems = [
   'iwooos-posture-projection.snapshot.json',
   'security-rollout-policy.snapshot.json',
@@ -1781,6 +1800,38 @@ function HostOwnerDecisionRecordHumanRecordOwnerReviewCandidateChecklistCard({
   )
 }
 
+function HostOwnerDecisionRecordHumanRecordOwnerReviewCandidateOutcomeCard({
+  item,
+}: {
+  item: HostOwnerDecisionRecordHumanRecordOwnerReviewCandidateOutcomeLane
+}) {
+  const t = useTranslations('iwooos.hostOwnerDecisionRecordHumanRecordOwnerReviewCandidateOutcomes')
+  const Icon = item.icon
+  return (
+    <div style={{ ...band, minHeight: 190, padding: 16 }}>
+      <div style={{ display: 'flex', alignItems: 'center', justifyContent: 'space-between', gap: 12 }}>
+        <div style={{ display: 'flex', alignItems: 'center', gap: 9 }}>
+          <Icon size={18} color={toneColors[item.tone]} />
+          <span style={{ fontSize: 11, color: '#87867f' }}>{t('laneLabel')}</span>
+        </div>
+        <span style={{ fontSize: 11, color: '#9b978b' }}>{item.lane}</span>
+      </div>
+      <h2 style={{ fontSize: 14, margin: '12px 0 6px', color: '#141413' }}>
+        {t(`items.${item.key}.title` as never)}
+      </h2>
+      <p style={{ fontSize: 12, lineHeight: 1.55, color: '#6f6d66', margin: 0 }}>
+        {t(`items.${item.key}.body` as never)}
+      </p>
+      <div style={{ marginTop: 10, display: 'grid', gap: 5 }}>
+        <div style={{ fontSize: 11, color: '#87867f' }}>{t('nextLabel')}</div>
+        <div style={{ fontSize: 11, color: toneColors[item.tone], lineHeight: 1.45 }}>
+          {t(`items.${item.key}.next` as never)}
+        </div>
+      </div>
+    </div>
+  )
+}
+
 export default function IwoooSPage({ params }: { params: { locale: string } }) {
   const t = useTranslations('iwooos')
 
@@ -2439,6 +2490,28 @@ export default function IwoooSPage({ params }: { params: { locale: string } }) {
           </div>
         </section>
 
+        <section style={{ marginBottom: 14 }}>
+          <div style={{ marginBottom: 14 }}>
+            <h2 style={{ fontSize: 16, margin: 0 }}>
+              {t('hostOwnerDecisionRecordHumanRecordOwnerReviewCandidateOutcomes.title')}
+            </h2>
+            <p style={{ fontSize: 12, color: '#6f6d66', margin: '6px 0 0', lineHeight: 1.55 }}>
+              {t('hostOwnerDecisionRecordHumanRecordOwnerReviewCandidateOutcomes.subtitle')}
+            </p>
+          </div>
+          <div
+            style={{
+              display: 'grid',
+              gridTemplateColumns: 'repeat(auto-fit, minmax(210px, 1fr))',
+              gap: 12,
+            }}
+          >
+            {hostOwnerDecisionRecordHumanRecordOwnerReviewCandidateOutcomeLanes.map(item => (
+              <HostOwnerDecisionRecordHumanRecordOwnerReviewCandidateOutcomeCard key={item.key} item={item} />
+            ))}
+          </div>
+        </section>
+
         <section
           style={{
             display: 'grid',