docs(security): add owner response audit retention rules

This commit is contained in:
Your Name
2026-05-19 12:36:13 +08:00
parent ba034582bf
commit 7f00490c58
19 changed files with 266 additions and 40 deletions

View File

@@ -70,6 +70,7 @@
"owner_response_validation_reviewer_audit_display_section_count",
"owner_response_validation_reviewer_audit_collection_check_count",
"owner_response_validation_reviewer_audit_redaction_example_count",
"owner_response_validation_reviewer_audit_retention_rule_count",
"quarantine_required",
"primary_ready_count",
"runtime_execution_authorized",
@@ -107,6 +108,7 @@
"owner_response_validation_reviewer_audit_display_section_count": {"type": "integer", "minimum": 0},
"owner_response_validation_reviewer_audit_collection_check_count": {"type": "integer", "minimum": 0},
"owner_response_validation_reviewer_audit_redaction_example_count": {"type": "integer", "minimum": 0},
"owner_response_validation_reviewer_audit_retention_rule_count": {"type": "integer", "minimum": 0},
"quarantine_required": {"type": "boolean"},
"primary_ready_count": {"type": "integer", "minimum": 0},
"runtime_execution_authorized": {"type": "boolean", "const": false},
@@ -529,6 +531,43 @@
},
"minItems": 1
},
"owner_response_validation_reviewer_audit_retention_rules": {
"type": "array",
"description": "AwoooP reviewer audit 的只讀 metadata retention 規則;只定義可保留的安全 metadata、必須拒收的 raw payload 與 retention 邊界,不代表 production ingestion 或 runtime authorization。",
"items": {
"type": "object",
"required": [
"rule_id",
"display_order",
"title",
"retained_metadata_shape",
"retention_boundary",
"blocked_payloads",
"retention_status",
"awooop_display_mode",
"execution_authorized",
"not_approval"
],
"properties": {
"rule_id": {"type": "string"},
"display_order": {"type": "integer", "minimum": 1},
"title": {"type": "string"},
"retained_metadata_shape": {"type": "string"},
"retention_boundary": {"type": "string"},
"blocked_payloads": {
"type": "array",
"items": {"type": "string"},
"minItems": 1
},
"retention_status": {"type": "string", "enum": ["metadata_retention_rule_only"]},
"awooop_display_mode": {"type": "string", "enum": ["display_reviewer_audit_retention_rule_only"]},
"execution_authorized": {"type": "boolean", "const": false},
"not_approval": {"type": "boolean", "const": true}
},
"additionalProperties": false
},
"minItems": 1
},
"readiness_effects": {
"type": "array",
"items": {