wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 3 Packages Projects Releases Wiki Activity

feat(mcp): add immutable external artifact mirror lane

Browse Source
This commit is contained in:
ogt
2026-07-15 09:42:46 +08:00
parent 618e499471
commit 4dbd5875af
8 changed files with 3292 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
docs/operations/external-mcp-artifacts/playwright-mcp-0.0.78-check.snapshot.json Normal file
View File

@@ -0,0 +1 @@
{"bundle_manifest_sha256":"54b1d7ff24fc6f8ca89d4d36adcdb43e1cf79ed6018a4cd4f0d630c857bffb2c","canary_allowed":false,"candidate_id":"external.playwright-verifier","cyclonedx_sbom_sha256":"092500242530e40f361f52cc662edda9e6c83f76edf81dfe9574235546c22be7","internal_mirror_ref":null,"mode":"check","observed_at":"2026-07-15T01:42:22.303666+00:00","package_count":3,"packages":[{"archive_file_count":7,"archive_safety_verified":true,"attestation_sha256":"4830a73d5f551fefc969e297b042cbd956f88c954fe0f02c11101a995b03ede1","license_decision":"passed","metadata_sha256":"8e6bbce53663e1c9488e02a748e2b20e8898fb58cd4ec745e09339bc546599b3","name":"@playwright/mcp","npm_registry_signature_verified":true,"slsa_subject_verified":true,"tarball_sha1":"305c96c4ac0179bd37622fe4ed4162493513b33e","tarball_sha512_hex":"5cb4d4780ea610df6c43e849e1d7c6f042240dbc52d0add3adcd91064509b9fd364e013615044d4ccb6afda25f87244c20db1197f61b738b317162ed167e3f4d","unpacked_bytes":84517,"version":"0.0.78","vulnerability_decision":"passed_no_known_osv_records","vulnerability_ids":[]},{"archive_file_count":62,"archive_safety_verified":true,"attestation_sha256":"f9188fc1fc80c15cb8cc0c962f13c56cf38ebba5e5cf5092565c258b464d7df3","license_decision":"passed","metadata_sha256":"032e79d40dd69d8f573b6b2a6b7bb48dbf331e8dc642db625d33598dd5c478d4","name":"playwright","npm_registry_signature_verified":true,"slsa_subject_verified":true,"tarball_sha1":"d04815de36073de29cc0b02c69bfd657231ec0c1","tarball_sha512_hex":"e8a57d8783cfde1aaee0d686771c5c8a359f621f4b25c148fd1dac3f84d30b8239705a37a116b0374113956e4c904ddc40480a861a23d0a50dcf8b1fa424f44e","unpacked_bytes":5062430,"version":"1.62.0-alpha-1783623505000","vulnerability_decision":"passed_no_known_osv_records","vulnerability_ids":[]},{"archive_file_count":104,"archive_safety_verified":true,"attestation_sha256":"99df3734d80709dc8b7826c661e4bc05a57bf3fbe61c4c838921d5c04df9e02b","license_decision":"passed","metadata_sha256":"1477249209c785ce155309e4e4d210aaa1e74ec6ef172115da310763b8024505","name":"playwright-core","npm_registry_signature_verified":true,"slsa_subject_verified":true,"tarball_sha1":"3984745e615ad065b24a89edeeec1a653addc807","tarball_sha512_hex":"08f25976c03f2864f641095e92257a5adf90950ad91d5499ea888db4e23f6d860e2152ccf237ca1964cce33422c9de1437ee340aae1c03a9719991d96ed3ef25","unpacked_bytes":12815408,"version":"1.62.0-alpha-1783623505000","vulnerability_decision":"passed_no_known_osv_records","vulnerability_ids":[]}],"policy_checksum":"sha256:44c9f79c2af59f1d2703cbd2181b43f4c4dd4ee9f70164f606bdda70d823e78b","promotion_allowed":false,"replay_allowed":false,"risk_level":"high","run_id":"26aa5be0-b71c-40fd-8244-ac74c53fdd86","runtime_mirror_ref":null,"schema_version":"awoooi_external_mcp_artifact_receipt_v1","shadow_allowed":false,"stage_receipts":{"bounded_execution":{"external_runtime_mutation_performed":false,"internal_registry_write_performed":false,"production_route_changed":false,"status":"not_executed"},"check_mode":{"browser_started":false,"mcp_process_started":false,"production_write_performed":false,"status":"passed"},"decision":{"candidate_action":"run_independent_check_verifier_then_mirror_exact_bundle","runtime_promotion_allowed":false},"independent_post_verifier":{"bundle_manifest_sha256":"54b1d7ff24fc6f8ca89d4d36adcdb43e1cf79ed6018a4cd4f0d630c857bffb2c","controller_registry_digest_check":false,"cyclonedx_sbom_sha256":"092500242530e40f361f52cc662edda9e6c83f76edf81dfe9574235546c22be7","internal_digest_ref_verified":false,"package_digest_count":3,"status":"pending_external_verifier"},"learning_writeback":{"km_write_performed":false,"rag_write_performed":false,"status":"receipt_ready_for_committed_writeback"},"normalized_asset_identity":{"candidate_id":"external.playwright-verifier","exact_root_version":"0.0.78","package_count":3},"risk_policy":{"exact_versions":true,"immutable_upstream_digests":true,"license_decision":"passed","npm_registry_signatures_verified":true,"risk_level":"high","slsa_subjects_verified":true,"vulnerability_decision":"passed_no_known_osv_records"},"rollback_or_no_write_terminal":{"external_artifact_delete_allowed":false,"production_route_change_allowed":false,"rollback_action":"disable_candidate_and_retain_immutable_bundle","status":"no_write_pending_external_verifier"},"sensor_source_receipt":{"osv":"api.osv.dev","redirects_followed":0,"registry":"registry.npmjs.org","runtime_request_or_response_body_stored":false,"upstream_supply_chain_attestation_bundled":true},"source_of_truth_diff":{"change_state":"baseline_created","policy_checksum":"sha256:44c9f79c2af59f1d2703cbd2181b43f4c4dd4ee9f70164f606bdda70d823e78b"}},"status":"completed_check_mode_pending_independent_verifier","trace_id":"mcp-artifact-26aa5be0-b71c-40fd-8244-ac74c53fdd86","work_item_id":"MCP-ARTIFACT-PLAYWRIGHT-001"}

20
docs/operations/mcp-control-plane-catalog.snapshot.json
View File

@@ -294,22 +294,26 @@
"title": "Playwright UI verifier MCP",
"source_type": "external",
"catalog_source": "mcp-so",
"catalog_url": "https://mcp.so/server/playwright-mcp/microsoft",
"catalog_url": "https://mcp.so/servers/playwright-mcp",
"decision": "internalize_then_canary",
"risk_tier": "high",
"scope": "allowlisted_origins_only",
"data_boundary": "public_and_test_surfaces",
"deployment_allowed": false,
"version_state": "unresolved",
"digest_state": "missing",
"sbom_state": "missing",
"signature_state": "missing",
"version_state": "exact_0.0.78_check_verified",
"digest_state": "upstream_sha512_pinned_internal_mirror_pending",
"sbom_state": "cyclonedx_1.5_check_verified_internal_mirror_pending",
"signature_state": "npm_registry_ecdsa_and_slsa_subject_verified",
"rag_policy": "screenshots_and_accessibility_receipts_only",
"blockers": [
"floating_install_examples_rejected",
"origin_allowlist_and_session_redaction_verifier_missing"
"internal_mirror_and_independent_digest_readback_pending",
"registered_public_origin_replay_adapter_missing",
"shadow_canary_verifier_and_rollback_execution_pending"
],
"evidence_refs": []
"evidence_refs": [
"config/mcp/playwright-mcp-artifact-policy.json",
"docs/operations/external-mcp-artifacts/playwright-mcp-0.0.78-check.snapshot.json"
]
},
{
"capability_id": "external.google-search-console-readonly",