diff --git a/apps/web/messages/en.json b/apps/web/messages/en.json index 4d6613a06..624a10cee 100644 --- a/apps/web/messages/en.json +++ b/apps/web/messages/en.json @@ -1586,6 +1586,49 @@ "verify": "active runtime gates=0; action buttons=false" } } + }, + "hostEvidenceReviewerOutcomes": { + "title": "Host Evidence Reviewer Outcome Lanes", + "subtitle": "After reviewer checklist, cases can only enter these read-only outcome lanes. This shows next interpretation and does not mark passed, accepted, approval, or runtime gates.", + "laneLabel": "Reviewer outcome", + "nextLabel": "Next step", + "items": { + "readyForOwnerDecision": { + "title": "Ready for owner decision", + "body": "When scope, owner, redaction, rollback, validation, and runtime separation are readable, the case can only become an owner-decision candidate.", + "next": "display candidate; received=0, accepted=0" + }, + "scopeMismatch": { + "title": "Scope mismatch", + "body": "When handoff scope does not match host coverage, network, service, or exclusions, the case returns to the scope lane.", + "next": "collect scope pointer; no scan starts" + }, + "ownerExpired": { + "title": "Owner decision expired", + "body": "When owner decision lacks scope, constraints, or is expired, the case returns to the owner decision lane.", + "next": "collect decision record; no approval created" + }, + "credentialMetadataFailed": { + "title": "Credential metadata failed", + "body": "When credential handling is not metadata-only or accountability boundary is unreadable, the reviewer outcome is quarantined.", + "next": "request metadata-only statement; no sensitive material collected" + }, + "redactionFailed": { + "title": "Redaction failed", + "body": "When redaction attestation cannot prove raw logs, host dumps, unredacted screenshots, or sensitive payloads are excluded, the case is rejected.", + "next": "request redaction again; raw payload not stored" + }, + "rollbackMissing": { + "title": "Rollback missing", + "body": "When maintenance window, rollback owner, or recovery validation metrics are missing, the case cannot move to later decision.", + "next": "collect rollback pointer; no change execution" + }, + "runtimeGateRequired": { + "title": "Runtime gate required", + "body": "Any possible later host action must route to a separate runtime gate and cannot run from reviewer outcome.", + "next": "active runtime gates=0; action buttons=false" + } + } } }, "tickets": { diff --git a/apps/web/messages/zh-TW.json b/apps/web/messages/zh-TW.json index 7d423bc72..a97aa9b78 100644 --- a/apps/web/messages/zh-TW.json +++ b/apps/web/messages/zh-TW.json @@ -1587,6 +1587,49 @@ "verify": "active runtime gates=0；action buttons=false" } } + }, + "hostEvidenceReviewerOutcomes": { + "title": "主機 Evidence Reviewer Outcome Lanes", + "subtitle": "Reviewer checklist 後只能進入這些只讀結果分流。這裡顯示下一步判讀，不會標示 passed、accepted、approval 或 runtime gate。", + "laneLabel": "Reviewer 結果", + "nextLabel": "下一步", + "items": { + "readyForOwnerDecision": { + "title": "Ready for owner decision", + "body": "scope、owner、redaction、rollback、validation 與 runtime separation 都可讀時，只能標示為 owner decision 候選。", + "next": "顯示候選；received=0、accepted=0" + }, + "scopeMismatch": { + "title": "Scope mismatch", + "body": "handoff scope 與主機覆蓋、網段、服務或排除範圍不一致時，回到補 scope lane。", + "next": "補 scope pointer；不啟動 scan" + }, + "ownerExpired": { + "title": "Owner decision expired", + "body": "owner decision 缺 scope、限制條件或已過期時，回到 owner decision lane。", + "next": "補 decision record；不建立 approval" + }, + "credentialMetadataFailed": { + "title": "Credential metadata failed", + "body": "credential handling 不是 metadata-only 或責任邊界不可讀時，先隔離 reviewer outcome。", + "next": "只要求 metadata-only 說明；不收敏感素材" + }, + "redactionFailed": { + "title": "Redaction failed", + "body": "redaction attestation 無法證明 raw logs、host dump、未脫敏截圖或 sensitive payload 已排除時，拒收。", + "next": "要求重新脫敏；不保存 raw payload" + }, + "rollbackMissing": { + "title": "Rollback missing", + "body": "maintenance window、rollback owner 或復原驗證指標缺漏時，不能進入後續決策。", + "next": "補 rollback pointer；不執行 change" + }, + "runtimeGateRequired": { + "title": "Runtime gate required", + "body": "任何可能的後續主機行動都必須導回獨立 runtime gate，不能由 reviewer outcome 執行。", + "next": "active runtime gates=0；action buttons=false" + } + } } }, "tickets": { diff --git a/apps/web/src/app/[locale]/iwooos/page.tsx b/apps/web/src/app/[locale]/iwooos/page.tsx index 7d3c10d7b..3059dee0c 100644 --- a/apps/web/src/app/[locale]/iwooos/page.tsx +++ b/apps/web/src/app/[locale]/iwooos/page.tsx @@ -130,6 +130,13 @@ type HostEvidenceReviewerChecklistItem = { tone: 'steady' | 'warn' | 'locked' } +type HostEvidenceReviewerOutcomeLane = { + key: string + lane: string + icon: typeof ShieldCheck + tone: 'steady' | 'warn' | 'locked' +} + const postureMetrics: PostureMetric[] = [ { key: 'overall', value: '58%', tone: 'warn' }, { key: 'framework', value: '80-85%', tone: 'steady' }, @@ -301,6 +308,16 @@ const hostEvidenceReviewerChecklistItems: HostEvidenceReviewerChecklistItem[] = { key: 'runtimeGateSeparated', check: 'C7', icon: FileWarning, tone: 'locked' }, ] +const hostEvidenceReviewerOutcomeLanes: HostEvidenceReviewerOutcomeLane[] = [ + { key: 'readyForOwnerDecision', lane: 'O1', icon: CheckCircle2, tone: 'steady' }, + { key: 'scopeMismatch', lane: 'O2', icon: Radar, tone: 'warn' }, + { key: 'ownerExpired', lane: 'O3', icon: ClipboardCheck, tone: 'warn' }, + { key: 'credentialMetadataFailed', lane: 'O4', icon: Lock, tone: 'locked' }, + { key: 'redactionFailed', lane: 'O5', icon: ShieldCheck, tone: 'locked' }, + { key: 'rollbackMissing', lane: 'O6', icon: Clock3, tone: 'warn' }, + { key: 'runtimeGateRequired', lane: 'O7', icon: FileWarning, tone: 'locked' }, +] + const evidenceItems = [ 'iwooos-posture-projection.snapshot.json', 'security-rollout-policy.snapshot.json', @@ -771,6 +788,34 @@ function HostEvidenceReviewerChecklistCard({ item }: { item: HostEvidenceReviewe ) } +function HostEvidenceReviewerOutcomeCard({ item }: { item: HostEvidenceReviewerOutcomeLane }) { + const t = useTranslations('iwooos.hostEvidenceReviewerOutcomes') + const Icon = item.icon + return ( +
+
+
+ + {t('laneLabel')} +
+ {item.lane} +
+

+ {t(`items.${item.key}.title` as never)} +

+

+ {t(`items.${item.key}.body` as never)} +

+
+
{t('nextLabel')}
+
+ {t(`items.${item.key}.next` as never)} +
+
+
+ ) +} + export default function IwoooSPage({ params }: { params: { locale: string } }) { const t = useTranslations('iwooos') @@ -1003,6 +1048,26 @@ export default function IwoooSPage({ params }: { params: { locale: string } }) { +
+
+

{t('hostEvidenceReviewerOutcomes.title')}

+

+ {t('hostEvidenceReviewerOutcomes.subtitle')} +

+
+
+ {hostEvidenceReviewerOutcomeLanes.map(item => ( + + ))} +
+
+
None: "s2_19_iwooos_host_evidence_review_outcome_lanes", "s2_20_iwooos_host_evidence_review_handoff_packets", "s2_21_iwooos_host_evidence_reviewer_checklist", + "s2_22_iwooos_host_evidence_reviewer_outcome_lanes", ] assert_equal( "progress_delta_ledger.delta_ids", @@ -408,6 +409,15 @@ def validate(root: Path) -> None: "host_validation_metrics_linked_check", "host_runtime_gate_separated_check", ] + expected_iwooos_host_evidence_reviewer_outcome_lane_ids = [ + "host_ready_for_owner_decision_outcome_lane", + "host_scope_mismatch_outcome_lane", + "host_owner_decision_expired_outcome_lane", + "host_credential_metadata_failed_outcome_lane", + "host_redaction_failed_outcome_lane", + "host_rollback_missing_outcome_lane", + "host_runtime_gate_required_outcome_lane", + ] assert_equal( "iwooos_projection.summary.frontend_surface_coverage_group_count", iwooos_projection["summary"]["frontend_surface_coverage_group_count"], @@ -468,6 +478,11 @@ def validate(root: Path) -> None: iwooos_projection["summary"]["host_evidence_reviewer_checklist_item_count"], len(expected_iwooos_host_evidence_reviewer_checklist_item_ids), ) + assert_equal( + "iwooos_projection.summary.host_evidence_reviewer_outcome_lane_count", + iwooos_projection["summary"]["host_evidence_reviewer_outcome_lane_count"], + len(expected_iwooos_host_evidence_reviewer_outcome_lane_ids), + ) iwooos_progress = iwooos_projection["progress"] assert_equal("iwooos_projection.progress.overall_percent", iwooos_progress["overall_percent"], progress["overall_percent"]) assert_equal( @@ -1126,6 +1141,80 @@ def validate(root: Path) -> None: f"iwooos_projection.host_evidence_reviewer_checklist_items.{item['check_id']}.not_authorization", item["not_authorization"], ) + iwooos_host_evidence_reviewer_outcome_lanes = iwooos_projection["host_evidence_reviewer_outcome_lanes"] + assert_equal( + "iwooos_projection.host_evidence_reviewer_outcome_lanes.ids", + [item["lane_id"] for item in iwooos_host_evidence_reviewer_outcome_lanes], + expected_iwooos_host_evidence_reviewer_outcome_lane_ids, + ) + assert_equal( + "iwooos_projection.host_evidence_reviewer_outcome_lanes.display_order", + [item["display_order"] for item in iwooos_host_evidence_reviewer_outcome_lanes], + list(range(1, len(expected_iwooos_host_evidence_reviewer_outcome_lane_ids) + 1)), + ) + expected_iwooos_host_evidence_reviewer_outcome_states = [ + "candidate_only_not_accepted", + "needs_scope_rework", + "needs_owner_decision_refresh", + "quarantine_credential_metadata_gap", + "rejected_redaction_failed", + "needs_rollback_evidence", + "waiting_separate_runtime_gate", + ] + assert_equal( + "iwooos_projection.host_evidence_reviewer_outcome_lanes.outcome_states", + [item["outcome_state"] for item in iwooos_host_evidence_reviewer_outcome_lanes], + expected_iwooos_host_evidence_reviewer_outcome_states, + ) + for item in iwooos_host_evidence_reviewer_outcome_lanes: + assert_equal( + f"iwooos_projection.host_evidence_reviewer_outcome_lanes.{item['lane_id']}.display_mode", + item["display_mode"], + "reviewer_outcome_only", + ) + assert_equal( + f"iwooos_projection.host_evidence_reviewer_outcome_lanes.{item['lane_id']}.checklist_passed_count", + item["checklist_passed_count"], + 0, + ) + assert_equal( + f"iwooos_projection.host_evidence_reviewer_outcome_lanes.{item['lane_id']}.received_count", + item["received_count"], + 0, + ) + assert_equal( + f"iwooos_projection.host_evidence_reviewer_outcome_lanes.{item['lane_id']}.accepted_count", + item["accepted_count"], + 0, + ) + assert_false( + f"iwooos_projection.host_evidence_reviewer_outcome_lanes.{item['lane_id']}.approval_record_created", + item["approval_record_created"], + ) + assert_false( + f"iwooos_projection.host_evidence_reviewer_outcome_lanes.{item['lane_id']}.runtime_gate_opened", + item["runtime_gate_opened"], + ) + assert_false( + f"iwooos_projection.host_evidence_reviewer_outcome_lanes.{item['lane_id']}.raw_payload_allowed", + item["raw_payload_allowed"], + ) + assert_false( + f"iwooos_projection.host_evidence_reviewer_outcome_lanes.{item['lane_id']}.secret_value_collection_allowed", + item["secret_value_collection_allowed"], + ) + assert_false( + f"iwooos_projection.host_evidence_reviewer_outcome_lanes.{item['lane_id']}.runtime_execution_authorized", + item["runtime_execution_authorized"], + ) + assert_false( + f"iwooos_projection.host_evidence_reviewer_outcome_lanes.{item['lane_id']}.action_buttons_allowed", + item["action_buttons_allowed"], + ) + assert_true( + f"iwooos_projection.host_evidence_reviewer_outcome_lanes.{item['lane_id']}.not_authorization", + item["not_authorization"], + ) assert_equal( "iwooos_projection.non_blocking_lane_ids", iwooos_projection["non_blocking_lane_ids"], @@ -1156,6 +1245,7 @@ def validate(root: Path) -> None: "display_host_evidence_review_outcome_lanes", "display_host_evidence_review_handoff_packets", "display_host_evidence_reviewer_checklist", + "display_host_evidence_reviewer_outcome_lanes", "display_evidence_refs", "display_forbidden_actions", ]: @@ -1194,6 +1284,9 @@ def validate(root: Path) -> None: "treat_host_reviewer_check_as_approval", "mark_host_reviewer_check_passed_from_frontend", "open_runtime_gate_from_reviewer_check", + "treat_host_reviewer_outcome_as_approval", + "mark_host_reviewer_outcome_passed", + "open_runtime_gate_from_reviewer_outcome", "apply_runtime_blocking_control", "switch_github_primary", "production_deploy",