feat(mcp): add isolated protocol replay verifier

docs/evaluations/gitea_workflow_runner_health_2026-06-05.json

@@ -1,6 +1,6 @@
 {
   "schema_version": "gitea_workflow_runner_health_v1",
-  "generated_at": "2026-07-15T09:57:22+08:00",
+  "generated_at": "2026-07-15T11:01:19+08:00",
   "program_status": {
     "overall_completion_percent": 100,
     "current_priority": "P1",
@@ -22,9 +22,11 @@
     ".gitea/workflows/e2e-health.yaml",
     ".gitea/workflows/harbor-110-local-repair.yaml",
     ".gitea/workflows/mcp-external-artifact-mirror.yaml",
+    ".gitea/workflows/mcp-external-replay.yaml",
     ".gitea/workflows/run-migration.yml",
     ".gitea/workflows/type-sync-check.yaml",
     "config/mcp/playwright-mcp-artifact-policy.json",
+    "config/mcp/playwright-mcp-replay-policy.json",
     "docs/evaluations/ai_agent_version_lifecycle_update_proposal_2026-07-10.json",
     "scripts/ci/check-gitea-step-env-secrets.js",
     "scripts/ci/cleanup-host-runner-workspace.sh",
@@ -34,16 +36,16 @@
     "scripts/ops/stop-stale-gitea-actions-jobs.sh"
   ],
   "rollups": {
-    "total_workflows": 14,
+    "total_workflows": 15,
     "by_workflow_status": {
-      "manifest_mapped": 14
+      "manifest_mapped": 15
     },
     "by_runner_evidence_status": {
       "non110_runner_mapped": 10,
-      "non110_host_runner_mapped": 4
+      "non110_host_runner_mapped": 5
     },
-    "workflows_with_schedule": 6,
-    "workflows_with_workflow_dispatch": 14,
+    "workflows_with_schedule": 7,
+    "workflows_with_workflow_dispatch": 15,
     "workflows_with_notify_bridge": 6,
     "workflows_with_actionable_or_failure_quiet_policy": 3,
     "workflow_ids_requiring_runner_attestation": [],
@@ -369,6 +371,36 @@
       ],
       "next_action": "維持 bounded capacity wait、獨立 verifier 與 mcp-artifact-receipts audit branch；不得啟動 artifact、寫 RAG、切 production route 或推回 deploy main。"
     },
+    {
+      "workflow_id": "mcp_external_protocol_replay",
+      "file_ref": ".gitea/workflows/mcp-external-replay.yaml",
+      "display_name": "MCP External Protocol Replay",
+      "scope": "讀取 pinned artifact receipt commit，以 immutable artifact/runtime digest 在 network none、non-root、read-only container 只執行 MCP initialize 與 tools/list；獨立 verifier 重跑後只寫專用 audit branch。",
+      "status": "manifest_mapped",
+      "risk_level": "high",
+      "triggers": [
+        "push:main",
+        "workflow_dispatch",
+        "schedule"
+      ],
+      "schedule_cadence": "每週三 10:43 Asia/Taipei；cron=43 2 * * 3 UTC；排在 artifact mirror 後。",
+      "runner_labels": [
+        "awoooi-non110-host"
+      ],
+      "runner_evidence_status": "non110_host_runner_mapped",
+      "job_count": 1,
+      "notification_policy": "read_only_no_notify",
+      "notify_bridge_calls": 0,
+      "secrets_policy_status": "只使用 workflow secret references 登入 Harbor 與 normal-push Gitea audit branch；controller/verifier 不讀取、保存或顯示 secret value。",
+      "evidence_refs": [
+        ".gitea/workflows/mcp-external-replay.yaml",
+        "config/mcp/playwright-mcp-replay-policy.json",
+        "scripts/security/external_mcp_replay_controller.py",
+        "scripts/security/verify_external_mcp_replay_receipt.py",
+        "scripts/ci/wait-host-web-build-pressure.sh"
+      ],
+      "next_action": "先取得 mcp-replay-receipts 獨立 verifier receipt；browser runtime、public-origin egress proxy、shadow、canary、Gateway adapter registration、RAG 與 production route 仍保持停用。"
+    },
     {
       "workflow_id": "run_migration",
       "file_ref": ".gitea/workflows/run-migration.yml",