feat(iwooos): 強化主機服務事故回補 gate

docs/security/high-value-config-control-coverage.snapshot.json

@@ -367,9 +367,9 @@
       "action_buttons_allowed": false,
       "category_id": "docker_compose_systemd_host_config",
       "control_tier": "C1",
-      "coverage_percent": 54,
-      "coverage_status": "owner_response_acceptance_ledger_ready_needs_live_owner_evidence",
-      "current_gap": "已固定 9 份 Docker / systemd / host service owner response acceptance candidate；仍缺 owner response、110 / 188 live hash、maintenance / restart window、rollback owner、post-check plan、disable switch 與 no-secret-value evidence。",
+      "coverage_percent": 58,
+      "coverage_status": "incident_recovery_backfill_ready_needs_live_owner_evidence",
+      "current_gap": "已固定 9 份 Docker / systemd / host service owner response acceptance candidate，並加入事故恢復、依賴圖、port binding、cold-start sequence、source-of-truth 與 daemon / runner 競爭回補欄位；仍缺 owner response、110 / 188 live hash、maintenance / restart window、rollback owner、post-check plan、disable switch 與 no-secret-value evidence。",
       "evidence_refs": [
         "docs/security/IWOOOS-CONFIG-CONTROL-INVENTORY.md",
         "docs/security/HOST-SERVICE-CONFIG-INVENTORY.md",
@@ -381,7 +381,7 @@
         "docs/security/DEV-HOSTS-112-111-168-OBSERVE-ONLY-MAPPING.md"
       ],
       "label": "Docker Compose / systemd / host service config",
-      "next_owner_action": "補 owner-provided live hash / disposition、compose / systemd owner、maintenance / restart window、rollback owner、post-check plan 與 disable switch。",
+      "next_owner_action": "補 owner-provided live hash / disposition、compose / systemd owner、maintenance / restart window、rollback owner、post-check plan、disable switch、source-of-truth、服務依賴圖、port binding、cold-start sequence、incident recovery evidence 與 daemon / runner contention review。",
       "owner_response_accepted": false,
       "owner_response_received": false,
       "owner_response_required": true,
@@ -634,15 +634,15 @@
     "websocket_route_change_authorized": false,
     "workflow_modification_authorized": false
   },
-  "generated_at": "2026-06-15T14:12:00+08:00",
-  "git_commit": "ed8c1905",
+  "generated_at": "2026-06-15T14:46:00+08:00",
+  "git_commit": "a77317fe",
   "lowest_coverage_categories": [
     {
       "category_id": "docker_compose_systemd_host_config",
-      "coverage_percent": 54,
-      "current_gap": "已固定 9 份 Docker / systemd / host service owner response acceptance candidate；仍缺 owner response、110 / 188 live hash、maintenance / restart window、rollback owner、post-check plan、disable switch 與 no-secret-value evidence。",
+      "coverage_percent": 58,
+      "current_gap": "已固定 9 份 Docker / systemd / host service owner response acceptance candidate，並加入事故恢復、依賴圖、port binding、cold-start sequence、source-of-truth 與 daemon / runner 競爭回補欄位；仍缺 owner response、110 / 188 live hash、maintenance / restart window、rollback owner、post-check plan、disable switch 與 no-secret-value evidence。",
       "label": "Docker Compose / systemd / host service config",
-      "next_owner_action": "補 owner-provided live hash / disposition、compose / systemd owner、maintenance / restart window、rollback owner、post-check plan 與 disable switch。"
+      "next_owner_action": "補 owner-provided live hash / disposition、compose / systemd owner、maintenance / restart window、rollback owner、post-check plan、disable switch、source-of-truth、服務依賴圖、port binding、cold-start sequence、incident recovery evidence 與 daemon / runner contention review。"
     },
     {
       "category_id": "ai_provider_model_routing",
@@ -697,7 +697,7 @@
     "c3_category_count": 1,
     "category_count": 14,
     "lowest_coverage_category_count": 4,
-    "needs_live_evidence_count": 9,
+    "needs_live_evidence_count": 10,
     "owner_response_accepted_count": 0,
     "owner_response_received_count": 0,
     "owner_response_required_count": 14,