wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

feat(web): add iwooos pre-review checks

Browse Source
This commit is contained in:
Your Name
2026-05-24 17:02:14 +08:00
parent 46ed8a9b3c
commit 7cb09bdf69
8 changed files with 392 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/security/SECURITY-MIRROR-STATUS-ROLLUP.md
View File

@@ -61,6 +61,7 @@
| IwoooS 第一解鎖證據包 | S2.115 已在 `/iwooos` 顯示 S4.9 第一解鎖證據包：負責人判定 metadata、範圍與來源參照、脫敏聲明、收件預檢軌跡、審查接受摘要五個欄位；`iwooos_first_unlock_evidence_packet_slot_count=5`、`iwooos_first_unlock_evidence_packet_current_focus=s4_9_owner_response`、`iwooos_first_unlock_evidence_packet_filled_count=0`、`iwooos_first_unlock_evidence_packet_accepted_count=0`、`iwooos_first_unlock_evidence_packet_redacted_pointer_required=true`、`iwooos_first_unlock_evidence_packet_raw_payload_allowed=false`、`iwooos_first_unlock_evidence_packet_secret_value_allowed=false`、`iwooos_first_unlock_evidence_packet_headline_review_authorized=false`、`iwooos_first_unlock_evidence_packet_runtime_gate_opened=false`、`runtime_execution_authorized=false`、`active_runtime_gate_count=0`、`not_authorization=true`，仍不代表送件完成、回覆已收到、證據已補齊、審查已接受、headline review 授權、runtime 授權、掃描、修復、部署、GitHub 主要來源切換、Gitea 停用、Kali / SSH / 主機更新或執行期授權 |
| IwoooS 第一解鎖證據包預檢分流 | S2.116 已在 `/iwooos` 顯示第一解鎖證據包預檢結果分流：可進人工審查、要求補 owner metadata、要求補範圍參照、隔離 raw payload、拒收機密明文值、等待 reviewer 接受六條分流；`iwooos_first_unlock_evidence_packet_preflight_outcome_lane_count=6`、`iwooos_first_unlock_evidence_packet_preflight_ready_for_review_count=0`、`iwooos_first_unlock_evidence_packet_preflight_needs_supplement_count=0`、`iwooos_first_unlock_evidence_packet_preflight_quarantined_count=0`、`iwooos_first_unlock_evidence_packet_preflight_rejected_count=0`、`iwooos_first_unlock_evidence_packet_review_accepted_count=0`、`iwooos_first_unlock_evidence_packet_headline_review_authorized=false`、`iwooos_first_unlock_evidence_packet_runtime_gate_opened=false`、`runtime_execution_authorized=false`、`active_runtime_gate_count=0`、`not_authorization=true`，仍不代表證據已補齊、審查已接受、headline review 授權、runtime 授權、掃描、修復、部署、GitHub 主要來源切換、Gitea 停用、Kali / SSH / 主機更新或執行期授權 |
| IwoooS 第一解鎖證據包補件路徑 | S2.117 已在 `/iwooos` 顯示第一解鎖證據包補件路徑：補 owner metadata、補範圍參照、補脫敏聲明、補預檢軌跡、等待 reviewer queue 五步；`iwooos_first_unlock_evidence_packet_supplement_path_step_count=5`、`iwooos_first_unlock_evidence_packet_supplement_current_focus=owner_metadata_and_scope_refs`、`iwooos_first_unlock_evidence_packet_supplement_ready_count=0`、`iwooos_first_unlock_evidence_packet_supplement_submitted_count=0`、`iwooos_first_unlock_evidence_packet_supplement_accepted_count=0`、`iwooos_first_unlock_evidence_packet_supplement_request_sent=false`、`iwooos_first_unlock_evidence_packet_supplement_raw_payload_allowed=false`、`iwooos_first_unlock_evidence_packet_supplement_secret_value_allowed=false`、`runtime_execution_authorized=false`、`active_runtime_gate_count=0`、`not_authorization=true`，仍不代表 request 已送出、證據已補齊、審查已接受、headline review 授權、runtime 授權、掃描、修復、部署、GitHub 主要來源切換、Gitea 停用、Kali / SSH / 主機更新或執行期授權 |
| IwoooS 第一解鎖證據包補件送審前檢查 | S2.118 已在 `/iwooos` 顯示第一解鎖證據包補件送審前檢查：owner metadata 完整、範圍參照可追溯、脫敏聲明成立、預檢軌跡附上、禁止變更條款維持、reviewer queue 未開六項；`iwooos_first_unlock_evidence_packet_supplement_pre_review_check_count=6`、`iwooos_first_unlock_evidence_packet_supplement_pre_review_passed_count=0`、`iwooos_first_unlock_evidence_packet_supplement_pre_review_ready_for_review_count=0`、`iwooos_first_unlock_evidence_packet_supplement_pre_review_queue_open=false`、`iwooos_first_unlock_evidence_packet_supplement_request_sent=false`、`iwooos_first_unlock_evidence_packet_supplement_submitted_count=0`、`iwooos_first_unlock_evidence_packet_supplement_accepted_count=0`、`runtime_execution_authorized=false`、`active_runtime_gate_count=0`、`not_authorization=true`，仍不代表 request 已送出、補件已送出、證據已補齊、審查已接受、headline review 授權、runtime 授權、掃描、修復、部署、GitHub 主要來源切換、Gitea 停用、Kali / SSH / 主機更新、reviewer queue 開啟或執行期授權 |
| AwoooP approvals IwoooS owner response focus | S2.55 已把 S4.9-S4.12 owner response 下一個人工收件焦點放進 `/awooop/approvals` 只讀面板；received=0、accepted=0、active runtime gates=0、headline=58%、approval_record_created=false；仍不新增 approve、execute、deploy、primary switch、refs action 或 runtime gate |
| AwoooP contracts IwoooS security contract candidate | S2.56 已把四個 security mirror contract refs 放進 `/awooop/contracts` 只讀面板；total contracts=36、ready=33、partial=2、active runtime gates=0、contract_publish_authorized=false；仍不發布 contract revision、不改 lifecycle、不寫 platform contracts API、不新增 action button |
| AwoooP tenants IwoooS tenant scope candidate | S2.57 已把 AWOOOI first tenant、IwoooS security mirror、Kali 112 / Dev 168 / Dev 111 與 S4.9-S4.12 owner response waiting 放進 `/awooop/tenants` 只讀面板；host coverage=3、tenant policy changes=0、tenant_migration_mode_changed=false；仍不改 migration mode、不改 tenant policy、不寫 platform tenants API、不新增 action button |
@@ -263,6 +264,7 @@
| S2.115 IwoooS 第一解鎖證據包 | framework detail | 0 | 只在 `/iwooos` 顯示第一解鎖證據包，把 S4.9 要讓 58% 真正前進所需的負責人判定 metadata、範圍與來源參照、脫敏聲明、收件預檢軌跡、審查接受摘要拆成五個欄位；iwooos_first_unlock_evidence_packet_slot_count=5、iwooos_first_unlock_evidence_packet_current_focus=s4_9_owner_response、iwooos_first_unlock_evidence_packet_filled_count=0、iwooos_first_unlock_evidence_packet_accepted_count=0、iwooos_first_unlock_evidence_packet_redacted_pointer_required=true、iwooos_first_unlock_evidence_packet_raw_payload_allowed=false、iwooos_first_unlock_evidence_packet_secret_value_allowed=false、iwooos_first_unlock_evidence_packet_headline_review_authorized=false、iwooos_first_unlock_evidence_packet_runtime_gate_opened=false、runtime_execution_authorized=false、active_runtime_gate_count=0、action_buttons_allowed=false、not_authorization=true，不把證據包欄位定義當送件完成、回覆已收到、證據已補齊、審查已接受、headline review 授權、runtime 授權、審批、掃描、修復、部署、主機變更、專案庫建立、分支 / 標籤參照同步、工作流程 / 機密設定修改、主要來源切換、Gitea 停用、Kali / SSH / 主機更新或執行期授權 |
| S2.116 IwoooS 第一解鎖證據包預檢分流 | framework detail | 0 | 只在 `/iwooos` 顯示第一解鎖證據包預檢分流，把可進審查、補 owner metadata、補範圍參照、隔離 raw payload、拒收機密值、等待 reviewer 六條結果拆開；iwooos_first_unlock_evidence_packet_preflight_outcome_lane_count=6、iwooos_first_unlock_evidence_packet_preflight_ready_for_review_count=0、iwooos_first_unlock_evidence_packet_preflight_needs_supplement_count=0、iwooos_first_unlock_evidence_packet_preflight_quarantined_count=0、iwooos_first_unlock_evidence_packet_preflight_rejected_count=0、iwooos_first_unlock_evidence_packet_review_accepted_count=0、iwooos_first_unlock_evidence_packet_headline_review_authorized=false、iwooos_first_unlock_evidence_packet_runtime_gate_opened=false、runtime_execution_authorized=false、active_runtime_gate_count=0、action_buttons_allowed=false、not_authorization=true，不把預檢分流當證據已補齊、審查已接受、headline review 授權、runtime 授權、審批、掃描、修復、部署、主機變更、專案庫建立、分支 / 標籤參照同步、工作流程 / 機密設定修改、主要來源切換、Gitea 停用、Kali / SSH / 主機更新或執行期授權 |
| S2.117 IwoooS 第一解鎖證據包補件路徑 | framework detail | 0 | 只在 `/iwooos` 顯示第一解鎖證據包補件路徑，把補 owner metadata、補範圍參照、補脫敏聲明、補預檢軌跡、等待 reviewer queue 五步拆開；iwooos_first_unlock_evidence_packet_supplement_path_step_count=5、iwooos_first_unlock_evidence_packet_supplement_current_focus=owner_metadata_and_scope_refs、iwooos_first_unlock_evidence_packet_supplement_ready_count=0、iwooos_first_unlock_evidence_packet_supplement_submitted_count=0、iwooos_first_unlock_evidence_packet_supplement_accepted_count=0、iwooos_first_unlock_evidence_packet_supplement_blocked_count=0、iwooos_first_unlock_evidence_packet_supplement_quarantined_count=0、iwooos_first_unlock_evidence_packet_supplement_request_sent=false、iwooos_first_unlock_evidence_packet_supplement_raw_payload_allowed=false、iwooos_first_unlock_evidence_packet_supplement_secret_value_allowed=false、runtime_execution_authorized=false、active_runtime_gate_count=0、action_buttons_allowed=false、not_authorization=true，不把補件路徑當 request sent、證據已補齊、審查已接受、headline review 授權、runtime 授權、審批、掃描、修復、部署、主機變更、專案庫建立、分支 / 標籤參照同步、工作流程 / 機密設定修改、主要來源切換、Gitea 停用、Kali / SSH / 主機更新或執行期授權 |
| S2.118 IwoooS 第一解鎖證據包補件送審前檢查 | framework detail | 0 | 只在 `/iwooos` 顯示第一解鎖證據包補件送審前檢查，把 owner metadata 完整、範圍參照可追溯、脫敏聲明成立、預檢軌跡附上、禁止變更條款維持、reviewer queue 未開六項拆開；iwooos_first_unlock_evidence_packet_supplement_pre_review_check_count=6、iwooos_first_unlock_evidence_packet_supplement_pre_review_current_focus=supplement_pre_review、iwooos_first_unlock_evidence_packet_supplement_pre_review_passed_count=0、iwooos_first_unlock_evidence_packet_supplement_pre_review_failed_count=0、iwooos_first_unlock_evidence_packet_supplement_pre_review_ready_for_review_count=0、iwooos_first_unlock_evidence_packet_supplement_pre_review_queue_open=false、iwooos_first_unlock_evidence_packet_supplement_request_sent=false、iwooos_first_unlock_evidence_packet_supplement_submitted_count=0、iwooos_first_unlock_evidence_packet_supplement_accepted_count=0、runtime_execution_authorized=false、active_runtime_gate_count=0、action_buttons_allowed=false、not_authorization=true，不把送審前檢查當 request sent、補件已送出、證據已補齊、審查已接受、headline review 授權、runtime 授權、審批、掃描、修復、部署、主機變更、專案庫建立、分支 / 標籤參照同步、工作流程 / 機密設定修改、主要來源切換、Gitea 停用、Kali / SSH / 主機更新、reviewer queue 開啟或執行期授權 |
headline 進度要再往上，至少需要下列任一高層 gate 有實質 evidence：