From 69a536516e94ff74b8121a3b0feeea4c1e8f669d Mon Sep 17 00:00:00 2001 From: Your Name Date: Sat, 13 Jun 2026 20:56:49 +0800 Subject: [PATCH] =?UTF-8?q?feat(governance):=20=E6=96=B0=E5=A2=9E=20result?= =?UTF-8?q?=20capture=20no-write=20readback?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- apps/api/src/api/v1/agents.py | 33 ++ ..._agent_result_capture_no_write_readback.py | 361 ++++++++++++++++++ ..._agent_result_capture_no_write_readback.py | 112 ++++++ ...nt_result_capture_no_write_readback_api.py | 45 +++ apps/web/messages/en.json | 32 ++ apps/web/messages/zh-TW.json | 32 ++ .../tabs/automation-inventory-tab.tsx | 170 ++++++++- apps/web/src/lib/api-client.ts | 155 ++++++++ ..._capture_no_write_readback_2026-06-13.json | 356 +++++++++++++++++ ...t_capture_no_write_readback_v1.schema.json | 347 +++++++++++++++++ 10 files changed, 1642 insertions(+), 1 deletion(-) create mode 100644 apps/api/src/services/ai_agent_result_capture_no_write_readback.py create mode 100644 apps/api/tests/test_ai_agent_result_capture_no_write_readback.py create mode 100644 apps/api/tests/test_ai_agent_result_capture_no_write_readback_api.py create mode 100644 docs/evaluations/ai_agent_result_capture_no_write_readback_2026-06-13.json create mode 100644 docs/schemas/ai_agent_result_capture_no_write_readback_v1.schema.json diff --git a/apps/api/src/api/v1/agents.py b/apps/api/src/api/v1/agents.py index cd6f9f158..39d2e0918 100644 --- a/apps/api/src/api/v1/agents.py +++ b/apps/api/src/api/v1/agents.py @@ -115,6 +115,9 @@ from src.services.ai_agent_redis_dry_run_gate import ( from src.services.ai_agent_reviewer_queue_no_write_readback import ( load_latest_ai_agent_reviewer_queue_no_write_readback, ) +from src.services.ai_agent_result_capture_no_write_readback import ( + load_latest_ai_agent_result_capture_no_write_readback, +) from src.services.ai_agent_runtime_readback_approval_package import ( load_latest_ai_agent_runtime_readback_approval_package, ) @@ -1590,6 +1593,36 @@ async def get_agent_reviewer_queue_no_write_readback() -> dict[str, Any]: ) from exc +@router.get( + "/agent-result-capture-no-write-readback", + response_model=dict[str, Any], + summary="取得 AI Agent result capture no-write readback", + description=( + "讀取最新已提交的 P2-118 result capture no-write readback；" + "此端點只回傳 result capture preview fixture、capture field mapping、no-write verifier、" + "blocked result capture write 與 operator handoff，不寫 result capture、learning、" + "PlayBook trust、Gateway queue，不送 Telegram、不呼叫 Bot API、不讀 canonical runtime target、" + "不讀 secret。" + ), +) +async def get_agent_result_capture_no_write_readback() -> dict[str, Any]: + """Return the latest read-only result capture no-write readback package.""" + try: + payload = await asyncio.to_thread(load_latest_ai_agent_result_capture_no_write_readback) + return redact_public_lan_topology(payload) + except FileNotFoundError as exc: + raise HTTPException( + status_code=status.HTTP_404_NOT_FOUND, + detail=str(exc), + ) from exc + except (json.JSONDecodeError, ValueError) as exc: + logger.error("ai_agent_result_capture_no_write_readback_invalid", error=str(exc)) + raise HTTPException( + status_code=status.HTTP_500_INTERNAL_SERVER_ERROR, + detail="AI Agent result capture no-write readback 無效", + ) from exc + + @router.get( "/agent-owner-approved-fixture-dry-run", response_model=dict[str, Any], diff --git a/apps/api/src/services/ai_agent_result_capture_no_write_readback.py b/apps/api/src/services/ai_agent_result_capture_no_write_readback.py new file mode 100644 index 000000000..c8797006f --- /dev/null +++ b/apps/api/src/services/ai_agent_result_capture_no_write_readback.py @@ -0,0 +1,361 @@ +""" +AI Agent result capture no-write readback snapshot. + +Loads the latest committed P2-118 result capture no-write readback package. This +module validates committed evidence only; it never writes result captures, +writes learning records, updates PlayBook trust, writes Gateway queues, sends +Telegram messages, reads canonical runtime targets, reads secrets, or performs +destructive operations. +""" + +from __future__ import annotations + +import json +from pathlib import Path +from typing import Any + +from src.services.snapshot_paths import default_evaluations_dir + +_DEFAULT_EVALUATIONS_DIR = default_evaluations_dir(Path(__file__)) +_SNAPSHOT_PATTERN = "ai_agent_result_capture_no_write_readback_*.json" +_SCHEMA_VERSION = "ai_agent_result_capture_no_write_readback_v1" +_RUNTIME_AUTHORITY = "result_capture_no_write_readback_only_no_capture_or_learning_write" +_TARGET_CAPTURE = "result_capture_preview" + + +def load_latest_ai_agent_result_capture_no_write_readback( + evaluations_dir: Path | None = None, +) -> dict[str, Any]: + """Load the newest committed result capture no-write readback package.""" + directory = evaluations_dir or _DEFAULT_EVALUATIONS_DIR + candidates = sorted(directory.glob(_SNAPSHOT_PATTERN)) + if not candidates: + raise FileNotFoundError(f"no AI Agent result capture no-write readback snapshots found in {directory}") + + latest = candidates[-1] + with latest.open(encoding="utf-8") as handle: + payload = json.load(handle) + + if not isinstance(payload, dict): + raise ValueError(f"{latest}: expected JSON object") + + label = str(latest) + _require_schema(payload, label) + _require_prior(payload, label) + _require_truth(payload, label) + _require_result_capture_fixtures(payload, label) + _require_capture_mappings(payload, label) + _require_verifier_checks(payload, label) + _require_blockers(payload, label) + _require_actions(payload, label) + _require_display_redaction(payload, label) + _require_no_forbidden_display_terms(payload, label) + _require_rollup_consistency(payload, label) + return payload + + +def _require_schema(payload: dict[str, Any], label: str) -> None: + if payload.get("schema_version") != _SCHEMA_VERSION: + raise ValueError(f"{label}: expected schema_version={_SCHEMA_VERSION}") + status = payload.get("program_status") or {} + expected = { + "current_priority": "P2", + "current_task_id": "P2-118", + "next_task_id": "P2-119", + "read_only_mode": True, + "runtime_authority": _RUNTIME_AUTHORITY, + "overall_completion_percent": 100, + } + mismatches = _mismatches(status, expected) + if mismatches: + raise ValueError(f"{label}: program_status mismatch: {mismatches}") + if not status.get("status_note"): + raise ValueError(f"{label}: program_status.status_note is required") + + +def _require_prior(payload: dict[str, Any], label: str) -> None: + prior = payload.get("prior_reviewer_queue_readback") or {} + expected = { + "schema_version": "ai_agent_reviewer_queue_no_write_readback_v1", + "reviewer_queue_readback_fixture_count": 5, + "queue_item_mapping_count": 5, + "readback_verifier_check_count": 5, + "blocked_queue_write_count": 5, + "operator_action_count": 5, + "reviewer_queue_write_count": 0, + "gateway_queue_write_count": 0, + "telegram_send_count": 0, + "bot_api_call_count": 0, + "report_receipt_write_count": 0, + "result_capture_write_count": 0, + } + mismatches = _mismatches(prior, expected) + if mismatches: + raise ValueError(f"{label}: prior_reviewer_queue_readback mismatch: {mismatches}") + if not prior.get("readiness_note"): + raise ValueError(f"{label}: prior_reviewer_queue_readback.readiness_note is required") + + +def _require_truth(payload: dict[str, Any], label: str) -> None: + truth = payload.get("readback_truth") or {} + required_true = { + "p2_117_reviewer_queue_readback_loaded", + "result_capture_readback_package_ready", + "result_capture_fixture_ready", + "capture_field_mapping_ready", + "no_write_verifier_ready", + "operator_handoff_ready", + "learning_preview_ready", + } + missing = sorted(field for field in required_true if truth.get(field) is not True) + if missing: + raise ValueError(f"{label}: readback ready flags must remain true: {missing}") + if truth.get("owner_approval_received") is not False: + raise ValueError(f"{label}: owner approval must remain false before result capture write") + + required_false = { + "canonical_runtime_target_read_enabled", + "live_query_enabled", + "reviewer_queue_write_enabled", + "gateway_queue_write_enabled", + "telegram_send_enabled", + "bot_api_call_enabled", + "report_receipt_write_enabled", + "result_capture_write_enabled", + "learning_write_enabled", + "playbook_trust_write_enabled", + "production_write_enabled", + "secret_read_enabled", + "destructive_operation_enabled", + } + unsafe = sorted(field for field in required_false if truth.get(field) is not False) + if unsafe: + raise ValueError(f"{label}: live read/send/write flags must remain false: {unsafe}") + + zero_counts = { + "owner_approval_received_count", + "canonical_runtime_target_read_count", + "live_query_count", + "reviewer_queue_write_count", + "gateway_queue_write_count", + "telegram_send_count", + "bot_api_call_count", + "report_receipt_write_count", + "result_capture_write_count", + "learning_write_count", + "playbook_trust_write_count", + "production_write_count", + } + non_zero = sorted(field for field in zero_counts if truth.get(field) != 0) + if non_zero: + raise ValueError(f"{label}: result capture live counters must remain zero: {non_zero}") + if not truth.get("truth_note"): + raise ValueError(f"{label}: readback_truth.truth_note is required") + + +def _require_result_capture_fixtures(payload: dict[str, Any], label: str) -> None: + fixtures = payload.get("result_capture_readback_fixtures") or [] + required = { + "result_capture_action_required_preview", + "result_capture_no_action_review", + "result_capture_verifier_degraded_hold", + "result_capture_route_lock_review", + "result_capture_owner_acceptance_pending", + } + fixture_ids = {fixture.get("fixture_id") for fixture in fixtures} + if fixture_ids != required: + raise ValueError(f"{label}: result capture fixtures must match {sorted(required)}") + for fixture in fixtures: + fixture_id = fixture.get("fixture_id") + if fixture.get("readback_mode") != "no_write_fixture": + raise ValueError(f"{label}: fixture {fixture_id} must remain no_write_fixture") + if fixture.get("result_capture_write_enabled") is not False: + raise ValueError(f"{label}: fixture {fixture_id} must not enable result capture write") + if fixture.get("status") not in {"ready_for_owner_review", "approval_required", "blocked_by_policy"}: + raise ValueError(f"{label}: fixture {fixture_id} status is invalid") + if not fixture.get("next_manual_action") or not fixture.get("capture_lane"): + raise ValueError(f"{label}: fixture {fixture_id} must include capture lane and next manual action") + if not _is_redacted_sha256(fixture.get("evidence_hash")): + raise ValueError(f"{label}: fixture {fixture_id} must expose redacted evidence_hash") + + +def _require_capture_mappings(payload: dict[str, Any], label: str) -> None: + mappings = payload.get("capture_field_mappings") or [] + required = { + "incident_id_to_capture_key", + "repair_outcome_to_status", + "verifier_state_to_capture_verdict", + "manual_action_to_owner_note", + "learning_candidate_to_hold_reason", + } + mapping_ids = {mapping.get("mapping_id") for mapping in mappings} + if mapping_ids != required: + raise ValueError(f"{label}: capture field mappings must match {sorted(required)}") + for mapping in mappings: + mapping_id = mapping.get("mapping_id") + if mapping.get("target_capture") != _TARGET_CAPTURE: + raise ValueError(f"{label}: mapping {mapping_id} must target {_TARGET_CAPTURE}") + if mapping.get("capture_write_enabled") is not False: + raise ValueError(f"{label}: mapping {mapping_id} must not enable capture write") + if mapping.get("status") not in {"ready", "approval_required", "blocked_by_policy"}: + raise ValueError(f"{label}: mapping {mapping_id} status is invalid") + if not mapping.get("required_owner"): + raise ValueError(f"{label}: mapping {mapping_id} required_owner is required") + if not _is_redacted_sha256(mapping.get("evidence_hash")): + raise ValueError(f"{label}: mapping {mapping_id} must expose redacted evidence_hash") + + +def _require_verifier_checks(payload: dict[str, Any], label: str) -> None: + checks = payload.get("readback_verifier_checks") or [] + required = { + "no_result_capture_write_verifier", + "no_learning_write_verifier", + "no_playbook_trust_write_verifier", + "no_gateway_queue_write_verifier", + "capture_redaction_completeness_verifier", + } + verifier_ids = {check.get("verifier_id") for check in checks} + if verifier_ids != required: + raise ValueError(f"{label}: readback verifier checks must match {sorted(required)}") + for check in checks: + verifier_id = check.get("verifier_id") + if check.get("live_execution_enabled") is not False: + raise ValueError(f"{label}: verifier {verifier_id} must not enable live execution") + if check.get("status") not in {"ready", "approval_required", "blocked_by_policy"}: + raise ValueError(f"{label}: verifier {verifier_id} status is invalid") + if not check.get("verifies") or not check.get("failure_if_missing"): + raise ValueError(f"{label}: verifier {verifier_id} must include verifies and failure_if_missing") + if not _is_redacted_sha256(check.get("evidence_hash")): + raise ValueError(f"{label}: verifier {verifier_id} must expose redacted evidence_hash") + + +def _require_blockers(payload: dict[str, Any], label: str) -> None: + blockers = payload.get("blocked_result_capture_writes") or [] + required = { + "result_capture_writer_not_authorized", + "learning_write_not_authorized", + "playbook_trust_not_authorized", + "gateway_queue_not_authorized", + "production_write_not_authorized", + } + blocker_ids = {blocker.get("blocker_id") for blocker in blockers} + if blocker_ids != required: + raise ValueError(f"{label}: blocked result capture writes must match {sorted(required)}") + for blocker in blockers: + blocker_id = blocker.get("blocker_id") + if blocker.get("status") not in {"approval_required", "blocked_by_policy"}: + raise ValueError(f"{label}: blocker {blocker_id} status is invalid") + if blocker.get("severity") not in {"high", "critical"}: + raise ValueError(f"{label}: blocker {blocker_id} severity is invalid") + if not blocker.get("blocked_action") or not blocker.get("blocked_until"): + raise ValueError(f"{label}: blocker {blocker_id} must include blocked_action and blocked_until") + if not _is_redacted_sha256(blocker.get("evidence_hash")): + raise ValueError(f"{label}: blocker {blocker_id} must expose redacted evidence_hash") + + +def _require_actions(payload: dict[str, Any], label: str) -> None: + actions = payload.get("operator_actions") or [] + required = { + "review_result_capture_preview", + "verify_capture_no_write_counts", + "confirm_owner_acceptance_fields", + "check_capture_redaction_contract", + "promote_to_p2_119", + } + action_ids = {action.get("action_id") for action in actions} + if action_ids != required: + raise ValueError(f"{label}: operator actions must match {sorted(required)}") + for action in actions: + action_id = action.get("action_id") + if action.get("runtime_capture_write_allowed") is not False: + raise ValueError(f"{label}: action {action_id} must not allow runtime capture write") + if not action.get("operator_instruction"): + raise ValueError(f"{label}: action {action_id} operator_instruction is required") + + +def _require_display_redaction(payload: dict[str, Any], label: str) -> None: + contract = payload.get("display_redaction_contract") or {} + expected = { + "redaction_required": True, + "raw_prompt_display_allowed": False, + "private_reasoning_display_allowed": False, + "secret_value_display_allowed": False, + "raw_runtime_payload_display_allowed": False, + "internal_collaboration_content_display_allowed": False, + } + mismatches = _mismatches(contract, expected) + if mismatches: + raise ValueError(f"{label}: display_redaction_contract mismatch: {mismatches}") + if not contract.get("frontend_display_policy"): + raise ValueError(f"{label}: display_redaction_contract.frontend_display_policy is required") + + +def _require_rollup_consistency(payload: dict[str, Any], label: str) -> None: + rollups = payload.get("rollups") or {} + fixtures = payload.get("result_capture_readback_fixtures") or [] + mappings = payload.get("capture_field_mappings") or [] + verifiers = payload.get("readback_verifier_checks") or [] + blockers = payload.get("blocked_result_capture_writes") or [] + actions = payload.get("operator_actions") or [] + expected = { + "result_capture_readback_fixture_count": len(fixtures), + "capture_field_mapping_count": len(mappings), + "readback_verifier_check_count": len(verifiers), + "blocked_result_capture_write_count": len(blockers), + "operator_action_count": len(actions), + "approval_required_fixture_count": sum(1 for item in fixtures if item.get("status") == "approval_required"), + "blocked_fixture_count": sum(1 for item in fixtures if item.get("status") == "blocked_by_policy"), + "approval_required_mapping_count": sum(1 for item in mappings if item.get("status") == "approval_required"), + "blocked_mapping_count": sum(1 for item in mappings if item.get("status") == "blocked_by_policy"), + "approval_required_verifier_count": sum(1 for item in verifiers if item.get("status") == "approval_required"), + "critical_blocker_count": sum(1 for item in blockers if item.get("severity") == "critical"), + "owner_approval_received_count": 0, + "canonical_runtime_target_read_count": 0, + "live_query_count": 0, + "reviewer_queue_write_count": 0, + "gateway_queue_write_count": 0, + "telegram_send_count": 0, + "bot_api_call_count": 0, + "report_receipt_write_count": 0, + "result_capture_write_count": 0, + "learning_write_count": 0, + "playbook_trust_write_count": 0, + "production_write_count": 0, + "secret_read_count": 0, + "destructive_operation_count": 0, + } + mismatches = _mismatches(rollups, expected) + if mismatches: + raise ValueError(f"{label}: rollup counts mismatch: {mismatches}") + + +def _require_no_forbidden_display_terms(payload: dict[str, Any], label: str) -> None: + serialized = json.dumps(payload, ensure_ascii=False) + forbidden = { + "work_window_transcript", + "session_id", + "browser_context", + "authorization_header", + "raw Telegram payload", + "private reasoning", + "raw prompt", + "chain-of-thought", + } + hits = sorted(term for term in forbidden if term in serialized) + if hits: + raise ValueError(f"{label}: forbidden display terms present: {hits}") + + +def _is_redacted_sha256(value: Any) -> bool: + if not isinstance(value, str) or not value.startswith("sha256:"): + return False + digest = value.removeprefix("sha256:") + return len(digest) == 64 and all(char in "0123456789abcdef" for char in digest) + + +def _mismatches(payload: dict[str, Any], expected: dict[str, Any]) -> dict[str, dict[str, Any]]: + return { + key: {"expected": value, "actual": payload.get(key)} + for key, value in expected.items() + if payload.get(key) != value + } diff --git a/apps/api/tests/test_ai_agent_result_capture_no_write_readback.py b/apps/api/tests/test_ai_agent_result_capture_no_write_readback.py new file mode 100644 index 000000000..c8174bd4c --- /dev/null +++ b/apps/api/tests/test_ai_agent_result_capture_no_write_readback.py @@ -0,0 +1,112 @@ +import copy +import json +from pathlib import Path + +import pytest + +from src.services.ai_agent_result_capture_no_write_readback import ( + load_latest_ai_agent_result_capture_no_write_readback, +) + + +REPO_ROOT = Path(__file__).resolve().parents[3] +FIXTURE = REPO_ROOT / "docs/evaluations/ai_agent_result_capture_no_write_readback_2026-06-13.json" + + +def test_load_latest_ai_agent_result_capture_no_write_readback_snapshot() -> None: + data = load_latest_ai_agent_result_capture_no_write_readback() + + assert data["schema_version"] == "ai_agent_result_capture_no_write_readback_v1" + assert data["program_status"]["current_task_id"] == "P2-118" + assert data["program_status"]["next_task_id"] == "P2-119" + assert data["program_status"]["overall_completion_percent"] == 100 + assert data["program_status"]["read_only_mode"] is True + + rollups = data["rollups"] + assert rollups["result_capture_readback_fixture_count"] == 5 + assert rollups["capture_field_mapping_count"] == 5 + assert rollups["readback_verifier_check_count"] == 5 + assert rollups["blocked_result_capture_write_count"] == 5 + assert rollups["operator_action_count"] == 5 + assert rollups["approval_required_fixture_count"] == 2 + assert rollups["blocked_fixture_count"] == 2 + assert rollups["approval_required_mapping_count"] == 1 + assert rollups["blocked_mapping_count"] == 2 + assert rollups["approval_required_verifier_count"] == 2 + assert rollups["critical_blocker_count"] == 3 + + assert {mapping["target_capture"] for mapping in data["capture_field_mappings"]} == { + "result_capture_preview" + } + assert {fixture["readback_mode"] for fixture in data["result_capture_readback_fixtures"]} == { + "no_write_fixture" + } + + zero_fields = [ + "owner_approval_received_count", + "canonical_runtime_target_read_count", + "live_query_count", + "reviewer_queue_write_count", + "gateway_queue_write_count", + "telegram_send_count", + "bot_api_call_count", + "report_receipt_write_count", + "result_capture_write_count", + "learning_write_count", + "playbook_trust_write_count", + "production_write_count", + "secret_read_count", + "destructive_operation_count", + ] + for field in zero_fields: + assert rollups[field] == 0 + + +def test_result_capture_no_write_readback_rejects_capture_write_enabled(tmp_path: Path) -> None: + source = json.loads(FIXTURE.read_text(encoding="utf-8")) + source["result_capture_readback_fixtures"][0]["result_capture_write_enabled"] = True + target = tmp_path / "ai_agent_result_capture_no_write_readback_2026-06-13.json" + target.write_text(json.dumps(source), encoding="utf-8") + + with pytest.raises(ValueError, match="must not enable result capture write"): + load_latest_ai_agent_result_capture_no_write_readback(tmp_path) + + +def test_result_capture_no_write_readback_rejects_truth_write_flag(tmp_path: Path) -> None: + source = json.loads(FIXTURE.read_text(encoding="utf-8")) + source["readback_truth"]["result_capture_write_enabled"] = True + target = tmp_path / "ai_agent_result_capture_no_write_readback_2026-06-13.json" + target.write_text(json.dumps(source), encoding="utf-8") + + with pytest.raises(ValueError, match="live read/send/write flags"): + load_latest_ai_agent_result_capture_no_write_readback(tmp_path) + + +def test_result_capture_no_write_readback_rejects_target_capture_drift(tmp_path: Path) -> None: + source = json.loads(FIXTURE.read_text(encoding="utf-8")) + source["capture_field_mappings"][0]["target_capture"] = "live_result_capture" + target = tmp_path / "ai_agent_result_capture_no_write_readback_2026-06-13.json" + target.write_text(json.dumps(source), encoding="utf-8") + + with pytest.raises(ValueError, match="must target result_capture_preview"): + load_latest_ai_agent_result_capture_no_write_readback(tmp_path) + + +def test_result_capture_no_write_readback_rejects_rollup_drift(tmp_path: Path) -> None: + source = json.loads(FIXTURE.read_text(encoding="utf-8")) + source["rollups"]["result_capture_readback_fixture_count"] = 4 + target = tmp_path / "ai_agent_result_capture_no_write_readback_2026-06-13.json" + target.write_text(json.dumps(source), encoding="utf-8") + + with pytest.raises(ValueError, match="rollup counts mismatch"): + load_latest_ai_agent_result_capture_no_write_readback(tmp_path) + + +def test_result_capture_no_write_readback_rejects_forbidden_display_terms(tmp_path: Path) -> None: + source = copy.deepcopy(json.loads(FIXTURE.read_text(encoding="utf-8"))) + source["operator_actions"][0]["operator_instruction"] = "do not expose session_id" + target = tmp_path / "ai_agent_result_capture_no_write_readback_2026-06-13.json" + target.write_text(json.dumps(source), encoding="utf-8") + + with pytest.raises(ValueError, match="forbidden display terms"): + load_latest_ai_agent_result_capture_no_write_readback(tmp_path) diff --git a/apps/api/tests/test_ai_agent_result_capture_no_write_readback_api.py b/apps/api/tests/test_ai_agent_result_capture_no_write_readback_api.py new file mode 100644 index 000000000..09f228835 --- /dev/null +++ b/apps/api/tests/test_ai_agent_result_capture_no_write_readback_api.py @@ -0,0 +1,45 @@ +import pytest +from httpx import ASGITransport, AsyncClient + +from src.main import app + + +@pytest.mark.asyncio +async def test_get_agent_result_capture_no_write_readback_api() -> None: + transport = ASGITransport(app=app) + async with AsyncClient(transport=transport, base_url="http://test") as client: + response = await client.get("/api/v1/agents/agent-result-capture-no-write-readback") + + assert response.status_code == 200 + data = response.json() + assert data["schema_version"] == "ai_agent_result_capture_no_write_readback_v1" + assert data["program_status"]["current_task_id"] == "P2-118" + assert data["program_status"]["next_task_id"] == "P2-119" + assert data["program_status"]["overall_completion_percent"] == 100 + + rollups = data["rollups"] + assert rollups["result_capture_readback_fixture_count"] == 5 + assert rollups["capture_field_mapping_count"] == 5 + assert rollups["readback_verifier_check_count"] == 5 + assert rollups["blocked_result_capture_write_count"] == 5 + assert rollups["operator_action_count"] == 5 + assert rollups["critical_blocker_count"] == 3 + assert rollups["owner_approval_received_count"] == 0 + assert rollups["canonical_runtime_target_read_count"] == 0 + assert rollups["live_query_count"] == 0 + assert rollups["reviewer_queue_write_count"] == 0 + assert rollups["gateway_queue_write_count"] == 0 + assert rollups["telegram_send_count"] == 0 + assert rollups["bot_api_call_count"] == 0 + assert rollups["report_receipt_write_count"] == 0 + assert rollups["result_capture_write_count"] == 0 + assert rollups["learning_write_count"] == 0 + assert rollups["playbook_trust_write_count"] == 0 + assert rollups["production_write_count"] == 0 + + assert {mapping["target_capture"] for mapping in data["capture_field_mappings"]} == { + "result_capture_preview" + } + assert {fixture["result_capture_write_enabled"] for fixture in data["result_capture_readback_fixtures"]} == { + False + } diff --git a/apps/web/messages/en.json b/apps/web/messages/en.json index 86aac7391..b222006d4 100644 --- a/apps/web/messages/en.json +++ b/apps/web/messages/en.json @@ -5609,6 +5609,38 @@ "blockedAction": "blocked：{value}", "runtimeQueueWriteAllowed": "runtime queue write={value}" } + }, + "resultCaptureNoWriteReadback": { + "title": "P2-118 result capture no-write readback", + "source": "產生 {generated}；目前 {current}；下一步 {next}", + "priorTitle": "前一關 reviewer queue readback", + "truthTitle": "Result capture no-write truth", + "metrics": { + "overall": "完成度", + "fixtures": "Capture fixtures", + "mappings": "Field mappings", + "verifiers": "Verifiers", + "blockers": "Blocked writes", + "actions": "操作選項", + "approvalRequired": "需批准", + "blocked": "阻擋", + "liveWrites": "Live capture / write" + }, + "flags": { + "packageReady": "package ready={value}", + "mappingReady": "mapping ready={value}" + }, + "labels": { + "targetCapture": "目標 capture：{value}", + "resultWrites": "result write={value}", + "learningWrites": "learning write={value}", + "trustWrites": "trust write={value}", + "captureLane": "lane：{value}", + "captureWriteEnabled": "capture write={value}", + "requiredOwner": "owner：{value}", + "blockedAction": "blocked：{value}", + "runtimeCaptureWriteAllowed": "runtime capture write={value}" + } } } }, diff --git a/apps/web/messages/zh-TW.json b/apps/web/messages/zh-TW.json index 86aac7391..b222006d4 100644 --- a/apps/web/messages/zh-TW.json +++ b/apps/web/messages/zh-TW.json @@ -5609,6 +5609,38 @@ "blockedAction": "blocked：{value}", "runtimeQueueWriteAllowed": "runtime queue write={value}" } + }, + "resultCaptureNoWriteReadback": { + "title": "P2-118 result capture no-write readback", + "source": "產生 {generated}；目前 {current}；下一步 {next}", + "priorTitle": "前一關 reviewer queue readback", + "truthTitle": "Result capture no-write truth", + "metrics": { + "overall": "完成度", + "fixtures": "Capture fixtures", + "mappings": "Field mappings", + "verifiers": "Verifiers", + "blockers": "Blocked writes", + "actions": "操作選項", + "approvalRequired": "需批准", + "blocked": "阻擋", + "liveWrites": "Live capture / write" + }, + "flags": { + "packageReady": "package ready={value}", + "mappingReady": "mapping ready={value}" + }, + "labels": { + "targetCapture": "目標 capture：{value}", + "resultWrites": "result write={value}", + "learningWrites": "learning write={value}", + "trustWrites": "trust write={value}", + "captureLane": "lane：{value}", + "captureWriteEnabled": "capture write={value}", + "requiredOwner": "owner：{value}", + "blockedAction": "blocked：{value}", + "runtimeCaptureWriteAllowed": "runtime capture write={value}" + } } } }, diff --git a/apps/web/src/app/[locale]/governance/tabs/automation-inventory-tab.tsx b/apps/web/src/app/[locale]/governance/tabs/automation-inventory-tab.tsx index 5d51ba715..7b8735c25 100644 --- a/apps/web/src/app/[locale]/governance/tabs/automation-inventory-tab.tsx +++ b/apps/web/src/app/[locale]/governance/tabs/automation-inventory-tab.tsx @@ -65,6 +65,7 @@ import { type AiAgentCanonicalRuntimeReadbackOwnerAcceptanceSnapshot, type AiAgentFailureReceiptNoSendReplaySnapshot, type AiAgentReviewerQueueNoWriteReadbackSnapshot, + type AiAgentResultCaptureNoWriteReadbackSnapshot, type AiAgentOwnerApprovedFixturePromotionGateSnapshot, type AiAgentRuntimeWorkerShadowGateSnapshot, type AiAgentRuntimeVerifierEvidenceReviewSnapshot, @@ -452,6 +453,7 @@ export function AutomationInventoryTab() { const [canonicalRuntimeReadbackOwnerAcceptance, setCanonicalRuntimeReadbackOwnerAcceptance] = useState(null) const [failureReceiptNoSendReplay, setFailureReceiptNoSendReplay] = useState(null) const [reviewerQueueNoWriteReadback, setReviewerQueueNoWriteReadback] = useState(null) + const [resultCaptureNoWriteReadback, setResultCaptureNoWriteReadback] = useState(null) const [reportTruthActionabilityReview, setReportTruthActionabilityReview] = useState(null) const [ownerDryRunPackage, setOwnerDryRunPackage] = useState(null) const [hostStatefulInventory, setHostStatefulInventory] = useState(null) @@ -506,6 +508,7 @@ export function AutomationInventoryTab() { apiClient.getAiAgentCanonicalRuntimeReadbackOwnerAcceptance(), apiClient.getAiAgentFailureReceiptNoSendReplay(), apiClient.getAiAgentReviewerQueueNoWriteReadback(), + apiClient.getAiAgentResultCaptureNoWriteReadback(), apiClient.getAiAgentReportTruthActionabilityReview(), apiClient.getAiAgentOwnerApprovedFixtureDryRun(), apiClient.getAiAgentHostStatefulVersionInventory(), @@ -559,6 +562,7 @@ export function AutomationInventoryTab() { canonicalRuntimeReadbackOwnerAcceptanceResult, failureReceiptNoSendReplayResult, reviewerQueueNoWriteReadbackResult, + resultCaptureNoWriteReadbackResult, reportTruthActionabilityReviewResult, ownerDryRunPackageResult, hostStatefulInventoryResult, @@ -609,6 +613,7 @@ export function AutomationInventoryTab() { setCanonicalRuntimeReadbackOwnerAcceptance(canonicalRuntimeReadbackOwnerAcceptanceResult.status === 'fulfilled' ? canonicalRuntimeReadbackOwnerAcceptanceResult.value : null) setFailureReceiptNoSendReplay(failureReceiptNoSendReplayResult.status === 'fulfilled' ? failureReceiptNoSendReplayResult.value : null) setReviewerQueueNoWriteReadback(reviewerQueueNoWriteReadbackResult.status === 'fulfilled' ? reviewerQueueNoWriteReadbackResult.value : null) + setResultCaptureNoWriteReadback(resultCaptureNoWriteReadbackResult.status === 'fulfilled' ? resultCaptureNoWriteReadbackResult.value : null) setReportTruthActionabilityReview(reportTruthActionabilityReviewResult.status === 'fulfilled' ? reportTruthActionabilityReviewResult.value : null) setOwnerDryRunPackage(ownerDryRunPackageResult.status === 'fulfilled' ? ownerDryRunPackageResult.value : null) setHostStatefulInventory(hostStatefulInventoryResult.status === 'fulfilled' ? hostStatefulInventoryResult.value : null) @@ -657,6 +662,7 @@ export function AutomationInventoryTab() { canonicalRuntimeReadbackOwnerAcceptanceResult, failureReceiptNoSendReplayResult, reviewerQueueNoWriteReadbackResult, + resultCaptureNoWriteReadbackResult, reportTruthActionabilityReviewResult, ownerDryRunPackageResult, hostStatefulInventoryResult, @@ -1899,7 +1905,7 @@ export function AutomationInventoryTab() { ) } - if (error || !snapshot || !backlog || !backupTargets || !backupReadiness || !backupPolicy || !offsiteEscrow || !giteaHealth || !observabilityMatrix || !providerRouteMatrix || !deploymentLayout || !proactiveOperations || !interactionLearningProof || !liveReadModelGate || !redisDryRunGate || !learningWritebackPackage || !telegramReceiptPackage || !ownerApprovedLearningDryRun || !runtimeWriteGateReview || !postWriteVerifierPackage || !runtimeVerifierEvidenceReview || !reportAutomationReview || !reportStatusBoard || !reportRuntimeReadiness || !reportRuntimeDryRun || !reportRuntimeFixtureReadback || !runtimeWorkerShadowGate || !operationPermissionModel || !candidateOperationDryRunEvidence || !taskResultAuditTrail || !matchedPlaybookLearningGap || !criticReviewerResultCapture || !ownerApprovedResultCaptureDryRun || !ownerApprovedResultCaptureReadback || !runtimeReadbackApprovalPackage || !runtimeReadbackImplementationReview || !reportLiveDeliveryApprovalPackage || !runtimeReadbackFixtureApproval || !runtimeReadbackPromotionGate || !ownerApprovedFixturePromotionGate || !canonicalRuntimeReadbackOwnerAcceptance || !failureReceiptNoSendReplay || !reviewerQueueNoWriteReadback || !reportTruthActionabilityReview || !ownerDryRunPackage || !hostStatefulInventory || !serviceHealthGapMatrix || !serviceHealthNotificationPolicy) { + if (error || !snapshot || !backlog || !backupTargets || !backupReadiness || !backupPolicy || !offsiteEscrow || !giteaHealth || !observabilityMatrix || !providerRouteMatrix || !deploymentLayout || !proactiveOperations || !interactionLearningProof || !liveReadModelGate || !redisDryRunGate || !learningWritebackPackage || !telegramReceiptPackage || !ownerApprovedLearningDryRun || !runtimeWriteGateReview || !postWriteVerifierPackage || !runtimeVerifierEvidenceReview || !reportAutomationReview || !reportStatusBoard || !reportRuntimeReadiness || !reportRuntimeDryRun || !reportRuntimeFixtureReadback || !runtimeWorkerShadowGate || !operationPermissionModel || !candidateOperationDryRunEvidence || !taskResultAuditTrail || !matchedPlaybookLearningGap || !criticReviewerResultCapture || !ownerApprovedResultCaptureDryRun || !ownerApprovedResultCaptureReadback || !runtimeReadbackApprovalPackage || !runtimeReadbackImplementationReview || !reportLiveDeliveryApprovalPackage || !runtimeReadbackFixtureApproval || !runtimeReadbackPromotionGate || !ownerApprovedFixturePromotionGate || !canonicalRuntimeReadbackOwnerAcceptance || !failureReceiptNoSendReplay || !reviewerQueueNoWriteReadback || !resultCaptureNoWriteReadback || !reportTruthActionabilityReview || !ownerDryRunPackage || !hostStatefulInventory || !serviceHealthGapMatrix || !serviceHealthNotificationPolicy) { return (
@@ -2526,6 +2532,35 @@ export function AutomationInventoryTab() { + reviewerQueueNoWriteReadback.rollups.playbook_trust_write_count + reviewerQueueNoWriteReadback.rollups.production_write_count ) + const resultCaptureOverall = resultCaptureNoWriteReadback.program_status.overall_completion_percent + const resultCaptureFixtures = resultCaptureNoWriteReadback.rollups.result_capture_readback_fixture_count + const resultCaptureMappings = resultCaptureNoWriteReadback.rollups.capture_field_mapping_count + const resultCaptureVerifiers = resultCaptureNoWriteReadback.rollups.readback_verifier_check_count + const resultCaptureBlockers = resultCaptureNoWriteReadback.rollups.blocked_result_capture_write_count + const resultCaptureActions = resultCaptureNoWriteReadback.rollups.operator_action_count + const resultCaptureApprovalRequired = ( + resultCaptureNoWriteReadback.rollups.approval_required_fixture_count + + resultCaptureNoWriteReadback.rollups.approval_required_mapping_count + + resultCaptureNoWriteReadback.rollups.approval_required_verifier_count + ) + const resultCaptureBlocked = ( + resultCaptureNoWriteReadback.rollups.blocked_fixture_count + + resultCaptureNoWriteReadback.rollups.blocked_mapping_count + + resultCaptureNoWriteReadback.rollups.critical_blocker_count + ) + const resultCaptureLiveWrites = ( + resultCaptureNoWriteReadback.rollups.canonical_runtime_target_read_count + + resultCaptureNoWriteReadback.rollups.live_query_count + + resultCaptureNoWriteReadback.rollups.reviewer_queue_write_count + + resultCaptureNoWriteReadback.rollups.gateway_queue_write_count + + resultCaptureNoWriteReadback.rollups.telegram_send_count + + resultCaptureNoWriteReadback.rollups.bot_api_call_count + + resultCaptureNoWriteReadback.rollups.report_receipt_write_count + + resultCaptureNoWriteReadback.rollups.result_capture_write_count + + resultCaptureNoWriteReadback.rollups.learning_write_count + + resultCaptureNoWriteReadback.rollups.playbook_trust_write_count + + resultCaptureNoWriteReadback.rollups.production_write_count + ) const reportTruthOverall = reportTruthActionabilityReview.program_status.overall_completion_percent const reportTruthFindings = reportTruthActionabilityReview.rollups.zero_signal_finding_count const reportTruthCritical = reportTruthActionabilityReview.rollups.critical_finding_count @@ -6811,6 +6846,139 @@ export function AutomationInventoryTab() {
+
+
+
+ + + {t('resultCaptureNoWriteReadback.title')} + +
+ +
+ +
+ } /> + } /> + } /> + } /> + } /> + } /> + } /> + } /> + } /> +
+ +
+
+ {t('resultCaptureNoWriteReadback.priorTitle')} + + {resultCaptureNoWriteReadback.prior_reviewer_queue_readback.readiness_note} + +
+ + + +
+
+ +
+ {t('resultCaptureNoWriteReadback.truthTitle')} + + {resultCaptureNoWriteReadback.readback_truth.truth_note} + +
+ + + + + + +
+
+
+ +
+ {resultCaptureNoWriteReadback.result_capture_readback_fixtures.slice(0, 3).map(fixture => ( +
+
+ + {fixture.display_name} + + +
+ + {fixture.next_manual_action} + +
+ + + +
+
+ ))} +
+ +
+ {resultCaptureNoWriteReadback.capture_field_mappings.slice(0, 5).map(mapping => ( +
+
+ + {mapping.display_name} + + +
+
+ + + +
+
+ ))} +
+ +
+ {resultCaptureNoWriteReadback.blocked_result_capture_writes.slice(0, 3).map(blocker => ( +
+
+ + {blocker.display_name} + + +
+
+ + +
+
+ ))} +
+ +
+ {resultCaptureNoWriteReadback.operator_actions.slice(0, 3).map(action => ( +
+
+ + {action.display_name} + + +
+ + {action.operator_instruction} + + +
+ ))} +
+
+
diff --git a/apps/web/src/lib/api-client.ts b/apps/web/src/lib/api-client.ts index 6d988aa2c..8f40b55cc 100644 --- a/apps/web/src/lib/api-client.ts +++ b/apps/web/src/lib/api-client.ts @@ -485,6 +485,11 @@ export const apiClient = { return handleResponse(res) }, + async getAiAgentResultCaptureNoWriteReadback() { + const res = await fetch(`${API_BASE_URL}/agents/agent-result-capture-no-write-readback`) + return handleResponse(res) + }, + async getAiAgentOwnerApprovedFixtureDryRun() { const res = await fetch(`${API_BASE_URL}/agents/agent-owner-approved-fixture-dry-run`) return handleResponse(res) @@ -5148,6 +5153,156 @@ export interface AiAgentReviewerQueueNoWriteReadbackSnapshot { } } +export interface AiAgentResultCaptureNoWriteReadbackSnapshot { + schema_version: 'ai_agent_result_capture_no_write_readback_v1' + generated_at: string + program_status: { + overall_completion_percent: number + current_priority: 'P0' | 'P1' | 'P2' | 'P3' + current_task_id: 'P2-118' + next_task_id: 'P2-119' + read_only_mode: true + runtime_authority: 'result_capture_no_write_readback_only_no_capture_or_learning_write' + status_note: string + } + source_refs: string[] + prior_reviewer_queue_readback: { + schema_version: string + reviewer_queue_readback_fixture_count: number + queue_item_mapping_count: number + readback_verifier_check_count: number + blocked_queue_write_count: number + operator_action_count: number + reviewer_queue_write_count: number + gateway_queue_write_count: number + telegram_send_count: number + bot_api_call_count: number + report_receipt_write_count: number + result_capture_write_count: number + readiness_note: string + } + readback_truth: { + p2_117_reviewer_queue_readback_loaded: boolean + result_capture_readback_package_ready: boolean + result_capture_fixture_ready: boolean + capture_field_mapping_ready: boolean + no_write_verifier_ready: boolean + operator_handoff_ready: boolean + learning_preview_ready: boolean + owner_approval_received: boolean + canonical_runtime_target_read_enabled: boolean + live_query_enabled: boolean + reviewer_queue_write_enabled: boolean + gateway_queue_write_enabled: boolean + telegram_send_enabled: boolean + bot_api_call_enabled: boolean + report_receipt_write_enabled: boolean + result_capture_write_enabled: boolean + learning_write_enabled: boolean + playbook_trust_write_enabled: boolean + production_write_enabled: boolean + secret_read_enabled: boolean + destructive_operation_enabled: boolean + owner_approval_received_count: number + canonical_runtime_target_read_count: number + live_query_count: number + reviewer_queue_write_count: number + gateway_queue_write_count: number + telegram_send_count: number + bot_api_call_count: number + report_receipt_write_count: number + result_capture_write_count: number + learning_write_count: number + playbook_trust_write_count: number + production_write_count: number + truth_note: string + } + result_capture_readback_fixtures: Array<{ + fixture_id: string + display_name: string + owner_agent: 'openclaw' | 'hermes' | 'nemotron' + source_queue_mapping_id: string + status: 'ready_for_owner_review' | 'approval_required' | 'blocked_by_policy' + capture_lane: string + readback_mode: 'no_write_fixture' + result_capture_write_enabled: false + next_manual_action: string + evidence_hash: string + }> + capture_field_mappings: Array<{ + mapping_id: string + display_name: string + status: 'ready' | 'approval_required' | 'blocked_by_policy' + source_fixture_id: string + target_capture: string + capture_write_enabled: false + required_owner: string + evidence_hash: string + }> + readback_verifier_checks: Array<{ + verifier_id: string + display_name: string + owner_agent: 'openclaw' | 'hermes' | 'nemotron' + status: 'ready' | 'approval_required' | 'blocked_by_policy' + verifies: string + failure_if_missing: string + live_execution_enabled: false + evidence_hash: string + }> + blocked_result_capture_writes: Array<{ + blocker_id: string + display_name: string + severity: 'high' | 'critical' + status: 'approval_required' | 'blocked_by_policy' + blocked_action: string + blocked_until: string + evidence_hash: string + }> + operator_actions: Array<{ + action_id: string + display_name: string + owner_agent: 'openclaw' | 'hermes' | 'nemotron' + operator_instruction: string + runtime_capture_write_allowed: false + }> + display_redaction_contract: { + redaction_required: true + raw_prompt_display_allowed: false + private_reasoning_display_allowed: false + secret_value_display_allowed: false + raw_runtime_payload_display_allowed: false + internal_collaboration_content_display_allowed: false + frontend_display_policy: string + } + rollups: { + result_capture_readback_fixture_count: number + capture_field_mapping_count: number + readback_verifier_check_count: number + blocked_result_capture_write_count: number + operator_action_count: number + approval_required_fixture_count: number + blocked_fixture_count: number + approval_required_mapping_count: number + blocked_mapping_count: number + approval_required_verifier_count: number + critical_blocker_count: number + owner_approval_received_count: number + canonical_runtime_target_read_count: number + live_query_count: number + reviewer_queue_write_count: number + gateway_queue_write_count: number + telegram_send_count: number + bot_api_call_count: number + report_receipt_write_count: number + result_capture_write_count: number + learning_write_count: number + playbook_trust_write_count: number + production_write_count: number + secret_read_count: number + destructive_operation_count: number + } +} + export interface AiAgentOwnerApprovedFixtureDryRunSnapshot { schema_version: 'ai_agent_owner_approved_fixture_dry_run_v1' generated_at: string diff --git a/docs/evaluations/ai_agent_result_capture_no_write_readback_2026-06-13.json b/docs/evaluations/ai_agent_result_capture_no_write_readback_2026-06-13.json new file mode 100644 index 000000000..b56322264 --- /dev/null +++ b/docs/evaluations/ai_agent_result_capture_no_write_readback_2026-06-13.json @@ -0,0 +1,356 @@ +{ + "schema_version": "ai_agent_result_capture_no_write_readback_v1", + "generated_at": "2026-06-13T21:05:00+08:00", + "program_status": { + "overall_completion_percent": 100, + "current_priority": "P2", + "current_task_id": "P2-118", + "next_task_id": "P2-119", + "read_only_mode": true, + "runtime_authority": "result_capture_no_write_readback_only_no_capture_or_learning_write", + "status_note": "P2-118 只把 P2-117 reviewer queue no-write readback 整理成 result capture no-write readback；不得寫 result capture、learning、PlayBook trust、Gateway queue、Telegram 或 production。" + }, + "source_refs": [ + "docs/evaluations/ai_agent_reviewer_queue_no_write_readback_2026-06-13.json", + "docs/evaluations/ai_agent_failure_receipt_no_send_replay_2026-06-13.json", + "docs/evaluations/ai_agent_critic_reviewer_result_capture_2026-06-13.json", + "docs/superpowers/specs/2026-04-15-MASTER-ai-autonomous-flywheel-v2.md#38-建立-reviewer-queue-no-write-readback" + ], + "prior_reviewer_queue_readback": { + "schema_version": "ai_agent_reviewer_queue_no_write_readback_v1", + "reviewer_queue_readback_fixture_count": 5, + "queue_item_mapping_count": 5, + "readback_verifier_check_count": 5, + "blocked_queue_write_count": 5, + "operator_action_count": 5, + "reviewer_queue_write_count": 0, + "gateway_queue_write_count": 0, + "telegram_send_count": 0, + "bot_api_call_count": 0, + "report_receipt_write_count": 0, + "result_capture_write_count": 0, + "readiness_note": "P2-117 已正式驗證 reviewer queue no-write readback；P2-118 只建立 result capture no-write readback fixture、field mapping、verifier 與人工操作選項。" + }, + "readback_truth": { + "p2_117_reviewer_queue_readback_loaded": true, + "result_capture_readback_package_ready": true, + "result_capture_fixture_ready": true, + "capture_field_mapping_ready": true, + "no_write_verifier_ready": true, + "operator_handoff_ready": true, + "learning_preview_ready": true, + "owner_approval_received": false, + "canonical_runtime_target_read_enabled": false, + "live_query_enabled": false, + "reviewer_queue_write_enabled": false, + "gateway_queue_write_enabled": false, + "telegram_send_enabled": false, + "bot_api_call_enabled": false, + "report_receipt_write_enabled": false, + "result_capture_write_enabled": false, + "learning_write_enabled": false, + "playbook_trust_write_enabled": false, + "production_write_enabled": false, + "secret_read_enabled": false, + "destructive_operation_enabled": false, + "owner_approval_received_count": 0, + "canonical_runtime_target_read_count": 0, + "live_query_count": 0, + "reviewer_queue_write_count": 0, + "gateway_queue_write_count": 0, + "telegram_send_count": 0, + "bot_api_call_count": 0, + "report_receipt_write_count": 0, + "result_capture_write_count": 0, + "learning_write_count": 0, + "playbook_trust_write_count": 0, + "production_write_count": 0, + "truth_note": "result capture readback 已可審查；真正 result capture write、learning write、PlayBook trust write、Gateway queue write 與 Telegram send 仍全部為 0。" + }, + "result_capture_readback_fixtures": [ + { + "fixture_id": "result_capture_action_required_preview", + "display_name": "Action-required result capture preview", + "owner_agent": "openclaw", + "source_queue_mapping_id": "failure_receipt_to_manual_repair_review", + "status": "ready_for_owner_review", + "capture_lane": "manual_repair_result_review", + "readback_mode": "no_write_fixture", + "result_capture_write_enabled": false, + "next_manual_action": "審查修復候選、失敗回執與 verifier 結論，確認是否可產出人工修復 result capture 草案。", + "evidence_hash": "sha256:5555555555555555555555555555555555555555555555555555555555555555" + }, + { + "fixture_id": "result_capture_no_action_review", + "display_name": "No-action result capture review", + "owner_agent": "hermes", + "source_queue_mapping_id": "no_action_to_manual_decision_review", + "status": "approval_required", + "capture_lane": "manual_no_action_result_review", + "readback_mode": "no_write_fixture", + "result_capture_write_enabled": false, + "next_manual_action": "補齊 no-action 的人工判讀理由、影響範圍與下一次觀察條件，未補齊前不得寫 capture。", + "evidence_hash": "sha256:5656565656565656565656565656565656565656565656565656565656565656" + }, + { + "fixture_id": "result_capture_verifier_degraded_hold", + "display_name": "Verifier degraded capture hold", + "owner_agent": "nemotron", + "source_queue_mapping_id": "verifier_degraded_to_rollback_review", + "status": "blocked_by_policy", + "capture_lane": "rollback_or_reverify_result_hold", + "readback_mode": "no_write_fixture", + "result_capture_write_enabled": false, + "next_manual_action": "確認 degraded verifier 是否需要 rollback、reverify 或補 MCP evidence；未完成前不得寫 result capture。", + "evidence_hash": "sha256:5757575757575757575757575757575757575757575757575757575757575757" + }, + { + "fixture_id": "result_capture_route_lock_review", + "display_name": "Route lock capture review", + "owner_agent": "openclaw", + "source_queue_mapping_id": "route_locked_to_sre_route_review", + "status": "approval_required", + "capture_lane": "sre_route_result_review", + "readback_mode": "no_write_fixture", + "result_capture_write_enabled": false, + "next_manual_action": "確認 AwoooI SRE 戰情室路由與 redaction 條件已固定，舊 bot / 舊群組不得回寫 result。", + "evidence_hash": "sha256:5858585858585858585858585858585858585858585858585858585858585858" + }, + { + "fixture_id": "result_capture_owner_acceptance_pending", + "display_name": "Owner acceptance capture pending", + "owner_agent": "nemotron", + "source_queue_mapping_id": "result_capture_to_owner_review", + "status": "blocked_by_policy", + "capture_lane": "owner_acceptance_result_hold", + "readback_mode": "no_write_fixture", + "result_capture_write_enabled": false, + "next_manual_action": "確認 result capture owner、rollback owner、redaction 與 learning 寫入邊界，未通過前不得 promotion。", + "evidence_hash": "sha256:5959595959595959595959595959595959595959595959595959595959595959" + } + ], + "capture_field_mappings": [ + { + "mapping_id": "incident_id_to_capture_key", + "display_name": "Incident ID to capture key", + "status": "ready", + "source_fixture_id": "result_capture_action_required_preview", + "target_capture": "result_capture_preview", + "capture_write_enabled": false, + "required_owner": "operator_owner", + "evidence_hash": "sha256:5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a5a" + }, + { + "mapping_id": "repair_outcome_to_status", + "display_name": "Repair outcome to status", + "status": "approval_required", + "source_fixture_id": "result_capture_no_action_review", + "target_capture": "result_capture_preview", + "capture_write_enabled": false, + "required_owner": "openclaw_reviewer", + "evidence_hash": "sha256:5b5b5b5b5b5b5b5b5b5b5b5b5b5b5b5b5b5b5b5b5b5b5b5b5b5b5b5b5b5b5b5b" + }, + { + "mapping_id": "verifier_state_to_capture_verdict", + "display_name": "Verifier state to capture verdict", + "status": "blocked_by_policy", + "source_fixture_id": "result_capture_verifier_degraded_hold", + "target_capture": "result_capture_preview", + "capture_write_enabled": false, + "required_owner": "rollback_owner", + "evidence_hash": "sha256:5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c" + }, + { + "mapping_id": "manual_action_to_owner_note", + "display_name": "Manual action to owner note", + "status": "ready", + "source_fixture_id": "result_capture_route_lock_review", + "target_capture": "result_capture_preview", + "capture_write_enabled": false, + "required_owner": "sre_route_owner", + "evidence_hash": "sha256:5d5d5d5d5d5d5d5d5d5d5d5d5d5d5d5d5d5d5d5d5d5d5d5d5d5d5d5d5d5d5d5d" + }, + { + "mapping_id": "learning_candidate_to_hold_reason", + "display_name": "Learning candidate to hold reason", + "status": "blocked_by_policy", + "source_fixture_id": "result_capture_owner_acceptance_pending", + "target_capture": "result_capture_preview", + "capture_write_enabled": false, + "required_owner": "result_capture_owner", + "evidence_hash": "sha256:5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e5e" + } + ], + "readback_verifier_checks": [ + { + "verifier_id": "no_result_capture_write_verifier", + "display_name": "No result capture write verifier", + "owner_agent": "openclaw", + "status": "ready", + "verifies": "result_capture_write_count remains zero", + "failure_if_missing": "若 result capture write 不是 0，必須停止 promotion 並標記 unauthorized capture write。", + "live_execution_enabled": false, + "evidence_hash": "sha256:5f5f5f5f5f5f5f5f5f5f5f5f5f5f5f5f5f5f5f5f5f5f5f5f5f5f5f5f5f5f5f5f" + }, + { + "verifier_id": "no_learning_write_verifier", + "display_name": "No learning write verifier", + "owner_agent": "hermes", + "status": "ready", + "verifies": "learning_write_count remains zero", + "failure_if_missing": "若 learning write 不是 0，必須退回 owner acceptance 與 KM review gate。", + "live_execution_enabled": false, + "evidence_hash": "sha256:6060606060606060606060606060606060606060606060606060606060606060" + }, + { + "verifier_id": "no_playbook_trust_write_verifier", + "display_name": "No PlayBook trust write verifier", + "owner_agent": "nemotron", + "status": "ready", + "verifies": "playbook_trust_write_count remains zero", + "failure_if_missing": "若 PlayBook trust write 不是 0，必須封鎖 result capture readback promotion。", + "live_execution_enabled": false, + "evidence_hash": "sha256:6161616161616161616161616161616161616161616161616161616161616161" + }, + { + "verifier_id": "no_gateway_queue_write_verifier", + "display_name": "No Gateway queue write verifier", + "owner_agent": "openclaw", + "status": "approval_required", + "verifies": "gateway_queue_write_count remains zero", + "failure_if_missing": "若 Gateway queue write 不是 0，必須退回 P2-117 reviewer queue readback。", + "live_execution_enabled": false, + "evidence_hash": "sha256:6262626262626262626262626262626262626262626262626262626262626262" + }, + { + "verifier_id": "capture_redaction_completeness_verifier", + "display_name": "Capture redaction completeness verifier", + "owner_agent": "hermes", + "status": "approval_required", + "verifies": "each result capture preview has redacted evidence and manual owner", + "failure_if_missing": "若缺少 redaction 或 owner 欄位，不能進入 P2-119。", + "live_execution_enabled": false, + "evidence_hash": "sha256:6363636363636363636363636363636363636363636363636363636363636363" + } + ], + "blocked_result_capture_writes": [ + { + "blocker_id": "result_capture_writer_not_authorized", + "display_name": "Result capture writer not authorized", + "severity": "critical", + "status": "blocked_by_policy", + "blocked_action": "result_capture_write", + "blocked_until": "result_capture_owner_gate_approved", + "evidence_hash": "sha256:6464646464646464646464646464646464646464646464646464646464646464" + }, + { + "blocker_id": "learning_write_not_authorized", + "display_name": "Learning write not authorized", + "severity": "critical", + "status": "blocked_by_policy", + "blocked_action": "learning_write", + "blocked_until": "learning_writeback_gate_approved", + "evidence_hash": "sha256:6565656565656565656565656565656565656565656565656565656565656565" + }, + { + "blocker_id": "playbook_trust_not_authorized", + "display_name": "PlayBook trust not authorized", + "severity": "high", + "status": "approval_required", + "blocked_action": "playbook_trust_write", + "blocked_until": "playbook_trust_owner_gate_approved", + "evidence_hash": "sha256:6666666666666666666666666666666666666666666666666666666666666666" + }, + { + "blocker_id": "gateway_queue_not_authorized", + "display_name": "Gateway queue not authorized", + "severity": "high", + "status": "approval_required", + "blocked_action": "gateway_queue_write", + "blocked_until": "gateway_queue_writer_gate_approved", + "evidence_hash": "sha256:6767676767676767676767676767676767676767676767676767676767676767" + }, + { + "blocker_id": "production_write_not_authorized", + "display_name": "Production write not authorized", + "severity": "critical", + "status": "blocked_by_policy", + "blocked_action": "production_write", + "blocked_until": "runtime_execution_gate_approved", + "evidence_hash": "sha256:6868686868686868686868686868686868686868686868686868686868686868" + } + ], + "operator_actions": [ + { + "action_id": "review_result_capture_preview", + "display_name": "Review result capture preview", + "owner_agent": "openclaw", + "operator_instruction": "審查 5 個 result capture no-write fixture，確認每筆都有人工 owner、狀態判定與安全證據 refs。", + "runtime_capture_write_allowed": false + }, + { + "action_id": "verify_capture_no_write_counts", + "display_name": "Verify capture no-write counts", + "owner_agent": "nemotron", + "operator_instruction": "確認 result capture、learning、PlayBook trust、Gateway queue、Telegram、production 的 live counter 全部為 0。", + "runtime_capture_write_allowed": false + }, + { + "action_id": "confirm_owner_acceptance_fields", + "display_name": "Confirm owner acceptance fields", + "owner_agent": "hermes", + "operator_instruction": "確認 result capture owner、rollback owner、maintenance note、redaction note 與 next manual action 都已齊全。", + "runtime_capture_write_allowed": false + }, + { + "action_id": "check_capture_redaction_contract", + "display_name": "Check capture redaction contract", + "owner_agent": "hermes", + "operator_instruction": "確認 result capture preview 不顯示未遮蔽 payload、token、authorization header、私有推理或內部協作內容。", + "runtime_capture_write_allowed": false + }, + { + "action_id": "promote_to_p2_119", + "display_name": "Promote to P2-119", + "owner_agent": "nemotron", + "operator_instruction": "只有 no-write verifier 與 capture field mapping 都通過後，才可進入 P2-119 learning writeback no-write readiness。", + "runtime_capture_write_allowed": false + } + ], + "display_redaction_contract": { + "redaction_required": true, + "raw_prompt_display_allowed": false, + "private_reasoning_display_allowed": false, + "secret_value_display_allowed": false, + "raw_runtime_payload_display_allowed": false, + "internal_collaboration_content_display_allowed": false, + "frontend_display_policy": "只顯示 fixture id、capture lane、狀態、人工下一步、blocked action 與 redacted evidence hash；不顯示未遮蔽 payload、token、私有推理或內部協作內容。" + }, + "rollups": { + "result_capture_readback_fixture_count": 5, + "capture_field_mapping_count": 5, + "readback_verifier_check_count": 5, + "blocked_result_capture_write_count": 5, + "operator_action_count": 5, + "approval_required_fixture_count": 2, + "blocked_fixture_count": 2, + "approval_required_mapping_count": 1, + "blocked_mapping_count": 2, + "approval_required_verifier_count": 2, + "critical_blocker_count": 3, + "owner_approval_received_count": 0, + "canonical_runtime_target_read_count": 0, + "live_query_count": 0, + "reviewer_queue_write_count": 0, + "gateway_queue_write_count": 0, + "telegram_send_count": 0, + "bot_api_call_count": 0, + "report_receipt_write_count": 0, + "result_capture_write_count": 0, + "learning_write_count": 0, + "playbook_trust_write_count": 0, + "production_write_count": 0, + "secret_read_count": 0, + "destructive_operation_count": 0 + } +} diff --git a/docs/schemas/ai_agent_result_capture_no_write_readback_v1.schema.json b/docs/schemas/ai_agent_result_capture_no_write_readback_v1.schema.json new file mode 100644 index 000000000..4fa8b9f58 --- /dev/null +++ b/docs/schemas/ai_agent_result_capture_no_write_readback_v1.schema.json @@ -0,0 +1,347 @@ +{ + "$schema": "https://json-schema.org/draft/2020-12/schema", + "$id": "https://awoooi.wooo.work/schemas/ai_agent_result_capture_no_write_readback_v1.schema.json", + "title": "AI Agent Result Capture No-write Readback v1", + "type": "object", + "additionalProperties": false, + "required": [ + "schema_version", + "generated_at", + "program_status", + "source_refs", + "prior_reviewer_queue_readback", + "readback_truth", + "result_capture_readback_fixtures", + "capture_field_mappings", + "readback_verifier_checks", + "blocked_result_capture_writes", + "operator_actions", + "display_redaction_contract", + "rollups" + ], + "properties": { + "schema_version": { + "const": "ai_agent_result_capture_no_write_readback_v1" + }, + "generated_at": { + "type": "string", + "minLength": 1 + }, + "program_status": { + "type": "object", + "additionalProperties": false, + "required": [ + "overall_completion_percent", + "current_priority", + "current_task_id", + "next_task_id", + "read_only_mode", + "runtime_authority", + "status_note" + ], + "properties": { + "overall_completion_percent": { + "const": 100 + }, + "current_priority": { + "const": "P2" + }, + "current_task_id": { + "const": "P2-118" + }, + "next_task_id": { + "const": "P2-119" + }, + "read_only_mode": { + "const": true + }, + "runtime_authority": { + "const": "result_capture_no_write_readback_only_no_capture_or_learning_write" + }, + "status_note": { + "type": "string", + "minLength": 1 + } + } + }, + "source_refs": { + "$ref": "#/$defs/string_array" + }, + "prior_reviewer_queue_readback": { + "type": "object" + }, + "readback_truth": { + "type": "object" + }, + "result_capture_readback_fixtures": { + "type": "array", + "minItems": 5, + "items": { + "$ref": "#/$defs/result_capture_fixture" + } + }, + "capture_field_mappings": { + "type": "array", + "minItems": 5, + "items": { + "$ref": "#/$defs/capture_field_mapping" + } + }, + "readback_verifier_checks": { + "type": "array", + "minItems": 5, + "items": { + "$ref": "#/$defs/readback_verifier_check" + } + }, + "blocked_result_capture_writes": { + "type": "array", + "minItems": 5, + "items": { + "$ref": "#/$defs/blocked_result_capture_write" + } + }, + "operator_actions": { + "type": "array", + "minItems": 5, + "items": { + "$ref": "#/$defs/operator_action" + } + }, + "display_redaction_contract": { + "type": "object" + }, + "rollups": { + "type": "object" + } + }, + "$defs": { + "string_array": { + "type": "array", + "minItems": 1, + "items": { + "type": "string", + "minLength": 1 + } + }, + "hash": { + "type": "string", + "pattern": "^sha256:[0-9a-f]{64}$" + }, + "owner_agent": { + "enum": [ + "openclaw", + "hermes", + "nemotron" + ] + }, + "status": { + "enum": [ + "ready", + "ready_for_owner_review", + "approval_required", + "blocked_by_policy" + ] + }, + "severity": { + "enum": [ + "high", + "critical" + ] + }, + "result_capture_fixture": { + "type": "object", + "additionalProperties": false, + "required": [ + "fixture_id", + "display_name", + "owner_agent", + "source_queue_mapping_id", + "status", + "capture_lane", + "readback_mode", + "result_capture_write_enabled", + "next_manual_action", + "evidence_hash" + ], + "properties": { + "fixture_id": { + "type": "string" + }, + "display_name": { + "type": "string" + }, + "owner_agent": { + "$ref": "#/$defs/owner_agent" + }, + "source_queue_mapping_id": { + "type": "string" + }, + "status": { + "$ref": "#/$defs/status" + }, + "capture_lane": { + "type": "string" + }, + "readback_mode": { + "const": "no_write_fixture" + }, + "result_capture_write_enabled": { + "const": false + }, + "next_manual_action": { + "type": "string", + "minLength": 1 + }, + "evidence_hash": { + "$ref": "#/$defs/hash" + } + } + }, + "capture_field_mapping": { + "type": "object", + "additionalProperties": false, + "required": [ + "mapping_id", + "display_name", + "status", + "source_fixture_id", + "target_capture", + "capture_write_enabled", + "required_owner", + "evidence_hash" + ], + "properties": { + "mapping_id": { + "type": "string" + }, + "display_name": { + "type": "string" + }, + "status": { + "$ref": "#/$defs/status" + }, + "source_fixture_id": { + "type": "string" + }, + "target_capture": { + "const": "result_capture_preview" + }, + "capture_write_enabled": { + "const": false + }, + "required_owner": { + "type": "string" + }, + "evidence_hash": { + "$ref": "#/$defs/hash" + } + } + }, + "readback_verifier_check": { + "type": "object", + "additionalProperties": false, + "required": [ + "verifier_id", + "display_name", + "owner_agent", + "status", + "verifies", + "failure_if_missing", + "live_execution_enabled", + "evidence_hash" + ], + "properties": { + "verifier_id": { + "type": "string" + }, + "display_name": { + "type": "string" + }, + "owner_agent": { + "$ref": "#/$defs/owner_agent" + }, + "status": { + "$ref": "#/$defs/status" + }, + "verifies": { + "type": "string" + }, + "failure_if_missing": { + "type": "string" + }, + "live_execution_enabled": { + "const": false + }, + "evidence_hash": { + "$ref": "#/$defs/hash" + } + } + }, + "blocked_result_capture_write": { + "type": "object", + "additionalProperties": false, + "required": [ + "blocker_id", + "display_name", + "severity", + "status", + "blocked_action", + "blocked_until", + "evidence_hash" + ], + "properties": { + "blocker_id": { + "type": "string" + }, + "display_name": { + "type": "string" + }, + "severity": { + "$ref": "#/$defs/severity" + }, + "status": { + "$ref": "#/$defs/status" + }, + "blocked_action": { + "type": "string" + }, + "blocked_until": { + "type": "string" + }, + "evidence_hash": { + "$ref": "#/$defs/hash" + } + } + }, + "operator_action": { + "type": "object", + "additionalProperties": false, + "required": [ + "action_id", + "display_name", + "owner_agent", + "operator_instruction", + "runtime_capture_write_allowed" + ], + "properties": { + "action_id": { + "type": "string" + }, + "display_name": { + "type": "string" + }, + "owner_agent": { + "$ref": "#/$defs/owner_agent" + }, + "operator_instruction": { + "type": "string", + "minLength": 1 + }, + "runtime_capture_write_allowed": { + "const": false + } + } + } + } +}