diff --git a/apps/web/messages/en.json b/apps/web/messages/en.json index 4940ee3eb..e1486ab44 100644 --- a/apps/web/messages/en.json +++ b/apps/web/messages/en.json @@ -17946,7 +17946,7 @@ }, "monitoring": { "title": "監控與告警設定", - "body": "已新增 60 個 monitoring / alerting / observability repo-only surface,含 13 個 alert rule、6 個 deploy / reload surface 與 11 個 write-capable surface;下一步補 live drift evidence、reload owner、receiver owner 與 route smoke。" + "body": "已新增 60 個 monitoring / alerting / observability repo-only surface,並補上告警鏈路 no-false-green 回補 Gate;目前只讀成熟度 68%,23 個 reviewer checks、12 條 outcome lanes、34 類 blocked action,receiver receipt、stale alert、silence / dedup、post-reload readback 與 false-green accepted 仍全部為 0。" } } }, diff --git a/apps/web/messages/zh-TW.json b/apps/web/messages/zh-TW.json index 4940ee3eb..e1486ab44 100644 --- a/apps/web/messages/zh-TW.json +++ b/apps/web/messages/zh-TW.json @@ -17946,7 +17946,7 @@ }, "monitoring": { "title": "監控與告警設定", - "body": "已新增 60 個 monitoring / alerting / observability repo-only surface,含 13 個 alert rule、6 個 deploy / reload surface 與 11 個 write-capable surface;下一步補 live drift evidence、reload owner、receiver owner 與 route smoke。" + "body": "已新增 60 個 monitoring / alerting / observability repo-only surface,並補上告警鏈路 no-false-green 回補 Gate;目前只讀成熟度 68%,23 個 reviewer checks、12 條 outcome lanes、34 類 blocked action,receiver receipt、stale alert、silence / dedup、post-reload readback 與 false-green accepted 仍全部為 0。" } } }, diff --git a/apps/web/src/app/[locale]/iwooos/page.tsx b/apps/web/src/app/[locale]/iwooos/page.tsx index 7967fdb59..7206bbb50 100644 --- a/apps/web/src/app/[locale]/iwooos/page.tsx +++ b/apps/web/src/app/[locale]/iwooos/page.tsx @@ -2095,7 +2095,7 @@ const highValueConfigControlCoverageItems: HighValueConfigControlCoverageItem[] { key: 'dockerSystemd', rank: 'P1-1', value: '58%', icon: Server, tone: 'warn' }, { key: 'sshNetwork', rank: 'P1-2', value: '62%', icon: Network, tone: 'warn' }, { key: 'backupRestore', rank: 'P1-3', value: '64%', icon: Database, tone: 'warn' }, - { key: 'monitoring', rank: 'P1-4', value: '62%', icon: Radar, tone: 'warn' }, + { key: 'monitoring', rank: 'P1-4', value: '68%', icon: Radar, tone: 'warn' }, ] const highValueConfigControlCoverageBoundaries = [ @@ -2246,6 +2246,17 @@ const highValueConfigControlCoverageBoundaries = [ 'monitoring_alerting_observability_inventory_reload_owner_accepted_count=0', 'monitoring_alerting_observability_inventory_receiver_owner_accepted_count=0', 'monitoring_alerting_observability_inventory_route_smoke_accepted_count=0', + 'monitoring_alerting_observability_coverage_percent=68', + 'monitoring_owner_response_acceptance_required_owner_field_count=14', + 'monitoring_owner_response_acceptance_reviewer_check_count=23', + 'monitoring_owner_response_acceptance_outcome_lane_count=12', + 'monitoring_owner_response_acceptance_blocked_action_count=34', + 'monitoring_owner_response_acceptance_false_green_risk_review_accepted_count=0', + 'monitoring_owner_response_acceptance_receiver_receipt_proof_accepted_count=0', + 'monitoring_owner_response_acceptance_stale_alert_review_accepted_count=0', + 'monitoring_owner_response_acceptance_silence_or_dedup_review_accepted_count=0', + 'monitoring_owner_response_acceptance_post_reload_readback_plan_accepted_count=0', + 'monitoring_owner_response_acceptance_runtime_gate_count=0', 'docker_compose_action_authorized=false', 'systemctl_action_authorized=false', 'repair_bot_execution_authorized=false', diff --git a/docs/security/HIGH-VALUE-CONFIG-CONTROL-COVERAGE.md b/docs/security/HIGH-VALUE-CONFIG-CONTROL-COVERAGE.md index 64a736c4e..7066a6edb 100644 --- a/docs/security/HIGH-VALUE-CONFIG-CONTROL-COVERAGE.md +++ b/docs/security/HIGH-VALUE-CONFIG-CONTROL-COVERAGE.md @@ -251,6 +251,7 @@ python3 scripts/security/iwooos-config-control-guard.py --root . | CD / Runner / Secret injection change evidence acceptance | `100%` | 已新增 `cd_runner_secret_injection_change_evidence_acceptance_v1`,5 個 candidate、4 個 C0、19 個 reviewer checks、8 條 outcome lanes、32 類 blocked action;secret metadata 成熟度 `66% -> 68%`,workflow / runner 成熟度 `70% -> 72%` | | Public / Admin / API runtime config 變更證據驗收 | `100%` | 已新增 `public_runtime_config_change_evidence_acceptance_v1` 與前台 source / messages 防洩漏 guard;6 個 candidate、5 個 C0、21 個 reviewer checks、8 條 outcome lanes、32 類 blocked action,另掃 225 個前端檔案、12 類禁字、違規 0;public/admin/API runtime config 成熟度 `62% -> 66%`,raw namespace / repo slug / 內部狀態碼 / 內部協作內容外洩列為拒收或隔離條件 | | Backup / restore / escrow owner response acceptance backfill | `100%` | 已將 `backup_restore_owner_response_acceptance_v1` 補強為 38 個 candidate、27 個 write-capable、23 個 owner 必填欄位、22 個 reviewer checks、9 條 outcome lanes、31 類 blocked action;backup / restore / credential 成熟度 `62% -> 64%` | +| Monitoring / alerting / observability owner response acceptance backfill | `100%` | 已將 `monitoring_owner_response_acceptance_v1` 補強為 60 個 candidate、11 個 write-capable、38 個 acceptance fields、23 個 reviewer checks、12 條 outcome lanes、34 類 blocked action;monitoring / alerting / observability 成熟度 `66% -> 68%` | | owner response 收件 | `0%` | 尚未收到或接受任何 owner response | | live evidence collection | `0%` | 未 SSH、未 live probe、未 active scan | | runtime gate | `0%` | 未開啟任何執行期閘門 | @@ -291,6 +292,8 @@ python3 scripts/security/iwooos-config-control-guard.py --root . 2026-06-15 再新增 `monitoring_owner_response_acceptance_v1`,把 60 份 request draft 轉成 `acceptance_candidate_count=60`、`write_capable_acceptance_candidate_count=11`、`live_evidence_required_candidate_count=60`、`required_owner_field_count=14`、`reviewer_check_count=15`、`outcome_lane_count=7`、`blocked_action_count=28` 的 owner response acceptance 只讀帳本。此更新讓 `monitoring_alerting_observability` 從 `62%` 推進到 `66%`,高價值配置平均成熟度從 `68%` 推進到 `69%`;但 owner response received / accepted / rejected、live evidence、reload、receiver route change、silence change、Telegram send、alert chain smoke、runtime gate 與 action button 仍全部為 `0`。 +2026-06-15 再補告警鏈路 no-false-green 回補欄位,將 `monitoring_owner_response_acceptance_v1` 固定為 `acceptance_field_count=38`、`reviewer_check_count=23`、`outcome_lane_count=12`、`blocked_action_count=34`。新增要求包含 incident context、alert chain health 不得只用 route 200 或 UI 可見判定、receiver receipt proof、stale alert review、silence / dedup review、false-green risk review、post-reload readback plan 與 cross-project notification ref。此更新讓 `monitoring_alerting_observability` 從 `66%` 推進到 `68%`;但 owner response received / accepted / rejected、receiver receipt accepted、stale alert review accepted、silence / dedup review accepted、false-green risk review accepted、post-reload readback accepted、reload、receiver route change、silence change、Telegram send、alert chain smoke、runtime gate 與 action button 仍全部為 `0`。 + ## 12. P0 Public Gateway Preflight 清冊更新 `public_gateway_preflight_inventory_v1` 已把 Nginx public gateway reload / route change 前置 Gate 固定成只讀清冊,共 `3` 份 source config、`14` 個 route impact、`14` 個 unique upstream、`12` 個 preflight gate,其中 `2` 個 gate 只代表 repo-only ready,`10` 個 gate 仍需 owner acceptance。此更新讓 `nginx_public_gateway` 從 `78%` 推進到 `84%`;owner response、owner-provided live conf、rendered diff、`nginx -t` evidence、route smoke、maintenance window、rollback owner、runtime gate 與 action button 仍全部為 `0`。 diff --git a/docs/security/IWOOOS-CONFIG-CONTROL-INVENTORY.md b/docs/security/IWOOOS-CONFIG-CONTROL-INVENTORY.md index 3281909ed..1d31d9839 100644 --- a/docs/security/IWOOOS-CONFIG-CONTROL-INVENTORY.md +++ b/docs/security/IWOOOS-CONFIG-CONTROL-INVENTORY.md @@ -103,6 +103,8 @@ 2026-06-15 已新增 `monitoring_owner_response_acceptance_v1`,將 60 份 owner request draft 轉成 owner response acceptance 只讀帳本。固定 `candidates=60`、`write_capable=11`、`live_evidence_required=60`、`owner_fields=14`、`reviewer_checks=15`、`outcome_lanes=7`、`blocked_actions=28`,讓 monitoring / alerting / observability 類別成熟度從 `62%` 推進到 `66%`;但 owner response received / accepted / rejected、live evidence、reload、receiver route change、silence change、Telegram send、alert chain smoke、host write、runtime gate 仍全部為 `0 / false`。 +2026-06-15 再補告警鏈路 no-false-green 回補欄位,將 `monitoring_owner_response_acceptance_v1` 固定為 `acceptance_fields=38`、`reviewer_checks=23`、`outcome_lanes=12`、`blocked_actions=34`。新增要求包含 incident context、alert chain health 不能只看 route 200、receiver receipt proof、stale alert review、silence / dedup review、false-green risk review、post-reload readback plan 與 cross-project notification ref,讓 monitoring / alerting / observability 類別成熟度從 `66%` 推進到 `68%`;但 owner response、receiver receipt、stale alert review、silence / dedup review、false-green risk review、post-reload readback、reload、Telegram send、live alert fire、alert chain smoke、host write、runtime gate 仍全部為 `0 / false`。 + ### 0.6 2026-06-12 Public Gateway Preflight repo-only 清冊 `public_gateway_preflight_inventory_v1` 已把 Nginx public gateway reload / route change 前置 Gate 固定成只讀 snapshot。清冊目前共有 `3` 份 Nginx source config、`2` 份 C0 source config、`14` 個 route impact、`14` 個 unique upstream、`10` 條 TLS certificate path、`4` 個 certificate owner 確認缺口、`7` 個 ACME challenge domain、`1` 個 admin route domain、`6` 個 WebSocket route domain 與 `12` 個 preflight gate,讓 Nginx public gateway 類別成熟度從 `78%` 推進到 `84%`。 @@ -251,7 +253,7 @@ Nginx 是目前必須最先資安控管的配置,原因是它同時控制公 | Backup / restore / escrow owner response acceptance | `100%` | 已新增並強化 `backup_restore_owner_response_acceptance_v1`,38 個 candidate、27 個 write-capable、22 個 reviewer checks、9 條 outcome lanes、31 類 blocked action;成熟度 `58% -> 64%` | | Monitoring / alerting / observability 清冊 | `100%` | 已新增 `monitoring_alerting_observability_inventory_v1`,納入 60 個 repo-only surface;成熟度 `56% -> 62%` | | Monitoring / alerting / observability owner request draft | `100%` | 已將 60 個 monitoring surface 轉成 owner request draft;request sent / received / accepted、reload、receiver route change、Telegram send、alert chain smoke 仍為 0 | -| Monitoring / alerting / observability owner response acceptance | `100%` | 已新增 `monitoring_owner_response_acceptance_v1`,60 個 candidate、11 個 write-capable、15 個 reviewer checks、7 條 outcome lanes、28 類 blocked action;成熟度 `62% -> 66%` | +| Monitoring / alerting / observability owner response acceptance | `100%` | 已新增並強化 `monitoring_owner_response_acceptance_v1`,60 個 candidate、11 個 write-capable、23 個 reviewer checks、12 條 outcome lanes、34 類 blocked action;成熟度 `62% -> 68%` | | owner packet 前台只讀接入 | `100%` | `/zh-TW/iwooos` 已顯示高價值配置 owner packet 草案、C0/C1 packet 數、request / received / accepted 仍為 0 與禁止執行邊界 | | owner response request / received / accepted | `0%` | Packet 只是草案;尚未送件、尚未收件、尚未 reviewer accepted | | agent-bounty-protocol owner request draft | `100%` | 已將 repo / refs、deployment、data classification、external agent / treasury 與 7 個 product surface 轉成 11 份 owner request draft;claim / submit、payout、cron / daemon、runtime gate 仍為 0 | diff --git a/docs/security/IWOOOS-POSTURE-PROJECTION.md b/docs/security/IWOOOS-POSTURE-PROJECTION.md index 5633c1a38..a9ea2036b 100644 --- a/docs/security/IWOOOS-POSTURE-PROJECTION.md +++ b/docs/security/IWOOOS-POSTURE-PROJECTION.md @@ -104,6 +104,7 @@ IwoooS 首版只讀取或對齊以下已提交 evidence: 57. 38 個 Backup / restore / escrow / retention repo-only inventory surfaces,顯示 backup orchestration、service backup scripts、restic retention、offsite sync、credential escrow、Velero restore drill、backup health alert 與 cold-start / DR runbook 的第一層清冊;write-capable surface `27`、restore drill surface `4`、offsite / escrow surface `8`,owner response、live evidence、restore drill、offsite sync、credential escrow、retention change、runtime gate 與 action button 仍全部為 `0`,不代表 backup、restore、offsite sync、remote delete、restic prune、escrow marker write、rclone config 或 Velero restore 已授權。 57a. 38 個 Backup / restore / escrow owner response acceptance backfill,顯示 restore recovery、freshness SLO、隔離 restore target、backup dependency map、data classification、remote delete guard、retention runway、restore observer / stop condition、credential recovery non-secret proof 與 backup health no-false-green review 收件規則;owner field `23`、reviewer check `22`、outcome lane `9`、blocked action `31`,讓 backup / restore / credential 類別成熟度從 `62%` 推進到 `64%`;owner response、freshness SLO accepted、restore target isolation accepted、remote delete guard accepted、retention runway accepted、credential recovery drill accepted、backup run、restore run、offsite sync、remote delete、retention change、secret collection、runtime gate 與 action button 仍全部為 `0`。 58. 60 個 Monitoring / alerting / observability repo-only inventory surfaces,顯示 Prometheus、Alertmanager、Grafana、SigNoz、Sentry、Langfuse、OTEL、Telegram / notification policy、deploy / reload scripts 與 alert chain smoke scripts 的第一層清冊;write-capable surface `11`、alert rule surface `13`、deploy / reload surface `6`,owner response、live evidence、reload owner、receiver owner、route smoke、runtime gate 與 action button 仍全部為 `0`,不代表 Prometheus reload、Alertmanager reload、Grafana import、SigNoz apply、Sentry deploy、Telegram send、live alert fire 或 alert chain smoke 已授權。 +58a. 60 個 Monitoring / alerting / observability owner response acceptance 候選已補告警鏈路 no-false-green 回補規則;acceptance field `38`、reviewer check `23`、outcome lane `12`、blocked action `34`,新增 incident context、alert chain health 不能只看 route 200、receiver receipt proof、stale alert review、silence / dedup review、false-green risk review、post-reload readback plan 與 cross-project notification ref,讓 monitoring / alerting / observability 類別成熟度從 `66%` 推進到 `68%`;owner response、receiver receipt、stale alert review、silence / dedup review、false-green risk review、post-reload readback、runtime gate 與 action button 仍全部為 `0`。 59. 12 個 Public Gateway Preflight repo-only gates,顯示 Nginx public gateway reload / route change 前必備的 owner、live conf、rendered diff、`nginx -t`、public / admin / WebSocket route smoke、ACME / TLS owner check、maintenance window 與 rollback owner;source config `3`、route impact `14`、repo-only ready gate `2`,owner acceptance、live conf、rendered diff、`nginx -t` evidence、route smoke、runtime gate 與 action button 仍全部為 `0`,不代表 SSH、live conf read、Nginx reload、route change、DNS / TLS probe 或 certbot renew 已授權。 ## 3.1 既有前端資安頁面整合 diff --git a/docs/security/MONITORING-OWNER-REQUEST-DRAFT.md b/docs/security/MONITORING-OWNER-REQUEST-DRAFT.md index 54876f5c6..4e4b439bf 100644 --- a/docs/security/MONITORING-OWNER-REQUEST-DRAFT.md +++ b/docs/security/MONITORING-OWNER-REQUEST-DRAFT.md @@ -130,4 +130,6 @@ python3 scripts/security/source-control-owner-response-guard.py --root . 2026-06-15 已新增 `docs/security/MONITORING-OWNER-RESPONSE-ACCEPTANCE.md` 與 `docs/security/monitoring-owner-response-acceptance.snapshot.json`,把本文件的 60 份 request draft 轉成 owner response acceptance 只讀帳本。固定 `candidates=60`、`write_capable=11`、`live_evidence_required=60`、`owner_fields=14`、`reviewer_checks=15`、`outcome_lanes=7`、`blocked_actions=28`;owner response received / accepted / rejected、live evidence、reload、receiver route change、silence change、Telegram send、alert chain smoke、host write、runtime gate 與 action button 仍全部為 `0 / false`。 +2026-06-15 後續已在 acceptance ledger 補上 no-false-green 回補欄位,最新固定為 `acceptance_fields=38`、`reviewer_checks=23`、`outcome_lanes=12`、`blocked_actions=34`;新增 incident context、alert chain health、receiver receipt、stale alert、silence / dedup、false-green risk、post-reload readback 與 cross-project notification ref。這仍不代表 owner response received / accepted、live alert chain truth、reload、Telegram send 或 runtime gate。 + 這份 acceptance ledger 只定義未來 owner response 如何收件、隔離、拒收、補件或進 monitoring reviewer review;不代表 request sent、owner response received / accepted、Prometheus reload、Alertmanager reload、Grafana import、SigNoz apply、Sentry deploy、Langfuse change、OTEL reload、receiver route change、Telegram send、live alert fire、alert chain smoke 或 runtime gate。 diff --git a/docs/security/MONITORING-OWNER-RESPONSE-ACCEPTANCE.md b/docs/security/MONITORING-OWNER-RESPONSE-ACCEPTANCE.md index 45d69144b..bf38c7cf1 100644 --- a/docs/security/MONITORING-OWNER-RESPONSE-ACCEPTANCE.md +++ b/docs/security/MONITORING-OWNER-RESPONSE-ACCEPTANCE.md @@ -12,7 +12,7 @@ ## 1. 目的 -本文件把 Monitoring / Alerting / Observability owner request draft 轉成 owner response acceptance 只讀帳本。目的不是 reload Prometheus / Alertmanager,也不是送 Telegram 或 fire alert,而是固定未來收到 owner 回覆後,必須如何做欄位完整性、脫敏證據、receiver / route smoke、noise budget、maintenance window、rollback 與 validation plan 檢查。 +本文件把 Monitoring / Alerting / Observability owner request draft 轉成 owner response acceptance 只讀帳本。目的不是 reload Prometheus / Alertmanager,也不是送 Telegram 或 fire alert,而是固定未來收到 owner 回覆後,必須如何做欄位完整性、脫敏證據、receiver receipt、stale alert、silence / dedup、no-false-green、noise budget、maintenance window、rollback 與 validation plan 檢查。 本階段仍是 metadata-only acceptance ledger:不連 live Prometheus、不 reload Alertmanager、不套用 Grafana / SigNoz、不部署 Sentry、不改 Langfuse、不 reload OTEL、不改 receiver route、不建立 silence、不送 Telegram、不 fire live alert、不跑 alert chain smoke、不 SSH、不 kubectl、不讀 secret value、不寫 production。 @@ -23,14 +23,15 @@ | acceptance candidate | `60` | 全部由 committed owner request draft 轉換 | | write-capable candidate | `11` | 可能 reload、deploy、send notification、fire alert 或 restart exporter 的 surface | | live evidence required candidate | `60` | 每份 candidate 都需要 owner 提供脫敏 live evidence ref | -| acceptance field | `30` | 每份候選固定欄位數 | +| acceptance field | `38` | 每份候選固定欄位數 | | required owner field | `14` | owner 必須補齊的欄位數 | -| reviewer check | `15` | 收件、隔離、拒收、補件與 reviewer 分流檢查 | -| outcome lane | `7` | 等待、隔離、拒收、補件、review、只讀更新、runtime gate 等結果 | -| blocked action | `28` | 驗收前全部禁止 | +| reviewer check | `23` | 收件、隔離、拒收、補件與 reviewer 分流檢查 | +| outcome lane | `12` | 等待、隔離、拒收、補件、no-false-green、receipt gap、stale / silence review、post-reload readback、只讀更新、runtime gate 等結果 | +| blocked action | `34` | 驗收前全部禁止 | | request sent / recipient confirmed | `0 / 0` | 尚未送件,收件人也未確認 | | owner response received / accepted / rejected | `0 / 0 / 0` | 不得假性拉高 | | live evidence / reload / receiver / route smoke accepted | `0 / 0 / 0 / 0` | 未授權、未執行 | +| receiver receipt / stale / silence / false-green / post-reload accepted | `0 / 0 / 0 / 0 / 0` | 未收到 reviewer record,不得用 route 200 或 UI 可見替代 | | Telegram send / alert chain smoke / runtime gate | `0 / 0 / 0` | 無發送、無實測、無執行入口 | ## 3. Reviewer 檢查 @@ -46,6 +47,14 @@ | reload owner | reload / deploy 類變更必須有 owner | | receiver owner | receiver route、Telegram receipt 與 notification policy 必須有 owner | | route smoke plan | route smoke / receipt proof 必須是計畫或脫敏證據 ref,不得直接 fire alert | +| incident context | 事故回補必須有 incident / change / outage context ref,不得只寫服務已恢復 | +| alert chain health | 告警鏈路健康不得只用 public route 200、容器 up、dashboard up 或 UI 可見判定 | +| receiver receipt | receipt proof 只能是脫敏 ref、hash、message id 或 ticket,不得貼 raw notification payload | +| stale alert | 必須確認告警是否 stale、pending、resolved 未清或資料來源停止更新 | +| silence / dedup | 必須確認 silence、mute、dedup、inhibit 或 maintenance rule 是否造成 false green | +| false-green risk | 必須列 no-false-green 判定,避免把 route up、容器 up 或 dashboard up 當作告警鏈路 up | +| post-reload readback | 若後續有 reload / deploy,必須先有 post-reload readback plan 與 stop condition | +| cross-project notification | 若影響 AwoooP、IwoooS、agent-bounty、StockPlatform、公開網站或監控,需有跨專案通知 ref | | noise budget | 告警噪音、silence、dedup 與測試通知必須有 owner | | maintenance window | reload、deploy、route change、smoke 或 notification send 必須另有窗口 | | rollback owner | rollback owner、rollback ref 或 disable path 必須存在 | @@ -83,6 +92,12 @@ runtime_gate_open raw_monitoring_payload_storage accept_secret_value_evidence mark_owner_response_accepted_without_reviewer_record +mark_route_200_as_alert_chain_healthy +mark_receiver_healthy_without_receipt +accept_silence_without_owner +accept_stale_alert_without_review +accept_reload_without_postcheck +store_raw_alert_payload add_action_button ``` @@ -95,7 +110,7 @@ python3 scripts/security/monitoring-owner-response-acceptance.py \ --root . \ --owner-request-report docs/security/monitoring-owner-request-draft.snapshot.json \ --output docs/security/monitoring-owner-response-acceptance.snapshot.json \ - --generated-at 2026-06-15T09:20:00+08:00 + --generated-at 2026-06-15T18:20:00+08:00 ``` 只讀 guard: @@ -111,6 +126,7 @@ python3 scripts/security/source-control-owner-response-guard.py --root . | 工作 | 完成度 | 說明 | |------|--------|------| | owner response acceptance artifact | `100%` | 60 份 candidate、snapshot、文件與 guard 已固定 | +| no-false-green backfill gate | `100%` | 23 個 reviewer checks、12 條 outcome lanes、34 類 blocked action 已固定 | | request dispatch | `0%` | 尚未送件,recipient 未確認 | | owner response received / accepted | `0%` | 尚未收到或接受任何 owner response | | live evidence collection | `0%` | 未讀 live monitoring stack | @@ -119,4 +135,4 @@ python3 scripts/security/source-control-owner-response-guard.py --root . ## 7. 邊界 -這份帳本不是 live alert chain truth、不是 Telegram delivery proof、不是 reload approval,也不是 monitoring runtime approval。不得把 owner response acceptance ledger、snapshot、LOGBOOK、IwoooS UI 或 AwoooP approval 解讀成 Prometheus reload、Alertmanager reload、Grafana import、SigNoz apply、Sentry deploy、Langfuse change、OTEL reload、receiver route change、silence change、Telegram send、live alert fire、alert chain smoke、SSH、kubectl、active scan、secret collection、host write 或 production write 授權。 +這份帳本不是 live alert chain truth、不是 Telegram delivery proof、不是 reload approval,也不是 monitoring runtime approval。不得把 owner response acceptance ledger、snapshot、LOGBOOK、IwoooS UI、public route 200、dashboard up、container up 或 AwoooP approval 解讀成 Prometheus reload、Alertmanager reload、Grafana import、SigNoz apply、Sentry deploy、Langfuse change、OTEL reload、receiver route change、silence change、Telegram send、live alert fire、alert chain smoke、SSH、kubectl、active scan、secret collection、host write 或 production write 授權。 diff --git a/docs/security/SECURITY-SUPPLY-CHAIN-PROGRESS.md b/docs/security/SECURITY-SUPPLY-CHAIN-PROGRESS.md index 8093657ec..3dc093a62 100644 --- a/docs/security/SECURITY-SUPPLY-CHAIN-PROGRESS.md +++ b/docs/security/SECURITY-SUPPLY-CHAIN-PROGRESS.md @@ -3,20 +3,20 @@ | 項目 | 內容 | |------|------| | 日期 | 2026-06-15 | -| 狀態 | IwoooS 64% 只讀治理推進中;高價值配置集中 guard、Package / Docker 供應鏈 repo-only baseline 與 Package / Docker 供應鏈 owner policy gate 已完成;Frontend public sensitive surface guard、Backup / Restore / Escrow owner response acceptance backfill、Monitoring / Alerting / Observability owner response acceptance、CD / Runner / Secret 注入變更證據驗收與 Public / Admin / API runtime config 變更證據驗收只讀帳本已本地完成;端口 / 防火牆變更證據驗收、主機服務事故回補與 K8s / ArgoCD GitOps 變更證據驗收已正式部署驗證;S4.9 owner response gate 仍是第一優先 | +| 狀態 | IwoooS 64% 只讀治理推進中;高價值配置集中 guard、Package / Docker 供應鏈 repo-only baseline 與 Package / Docker 供應鏈 owner policy gate 已完成;Frontend public sensitive surface guard、Backup / Restore / Escrow owner response acceptance backfill、Monitoring / Alerting / Observability no-false-green owner response acceptance、CD / Runner / Secret 注入變更證據驗收與 Public / Admin / API runtime config 變更證據驗收只讀帳本已本地完成;端口 / 防火牆變更證據驗收、主機服務事故回補與 K8s / ArgoCD GitOps 變更證據驗收已正式部署驗證;S4.9 owner response gate 仍是第一優先 | | 本階段完成 | 資安供應鏈 contract manifest + Source Control Approval Board + Draft Reconcile Plan + Ref Detail Diff + Ref Truth Classification + Source Control Ref Truth Owner Response 收件包 + GitHub Primary Readiness Gate + GitHub Primary Rollback ADR + GitHub Target Owner Decision Response 收件包 + Gitea 認證清冊匯出請求 + Gitea 認證清冊匯入驗收契約 + Gitea 清冊覆蓋 Owner Attestation + Gitea Owner Attestation Approval Lane 對齊 + Gitea Owner Attestation Response 收件包 + Workflow / Secret Name Inventory + Workflow / Secret Name Local Evidence + Workflow / Secret Name Redacted Export Request + Workflow / Secret Name Owner Response 收件包 + Source Control Owner Response Validation Rollup + Kali 112 live integration status + Security Finding contract + Kali scan scope approval package + Security Approval Queue + S3 人工批准 Gate + S3 人工決策紀錄 + S3 人工審查封包 + S3 人工決策狀態轉移 + S3 後續 runtime gate 準備契約 + 鏡像 readiness index + 鏡像接收計畫 + 鏡像事件信封 + 鏡像路由矩陣 + 鏡像驗收契約 + 鏡像隔離契約 + 鏡像 dry-run 報告契約 + 鏡像狀態彙整契約 + IwoooS 前端態勢入口 + IwoooS posture projection contract + IwoooS 既有前端資安頁面整合 + IwoooS 覆蓋與邊界矩陣 + IwoooS 只讀資安處理旅程 + IwoooS owner evidence readiness board + IwoooS host coverage view + IwoooS host action gate matrix + IwoooS host evidence readiness board + IwoooS host evidence collection order + IwoooS host evidence intake preflight + IwoooS host evidence review outcome lanes + IwoooS host evidence review handoff packets + IwoooS host evidence reviewer checklist + IwoooS host evidence reviewer outcome lanes + IwoooS host owner decision candidate packets + IwoooS host owner decision review checklist + IwoooS host owner decision review outcome lanes + IwoooS host owner decision record draft packets + IwoooS host owner decision record draft review checklist + IwoooS host owner decision record draft review outcome lanes + IwoooS host owner decision record write-up packets + IwoooS host owner decision record write-up review checklist + IwoooS host owner decision record write-up review outcome lanes + IwoooS host owner decision record formal candidate packets + IwoooS host owner decision record formal candidate review checklist + IwoooS host owner decision record formal candidate review outcome lanes + IwoooS host owner decision record formal record queue packets + IwoooS host owner decision record formal record queue review checklist + IwoooS host owner decision record formal record queue review outcome lanes + IwoooS host owner decision record human handoff readiness packets + IwoooS host owner decision record human handoff readiness review checklist + IwoooS host owner decision record human handoff readiness review outcome lanes + IwoooS host owner decision record human record owner review candidate packets + IwoooS host owner decision record human record owner review candidate checklist + IwoooS host owner decision record human record owner review candidate outcome lanes + IwoooS host owner decision record human record owner review preparation packets + IwoooS host owner decision record human record owner review preparation checklist + IwoooS progress acceleration lanes + IwoooS owner response next-action focus + IwoooS S4.9 owner response preflight + IwoooS S4.9 owner response request templates + IwoooS progress hold movement gates + IwoooS AwoooP read-only landing readiness + IwoooS AwoooP cross-session handoff packets + AwoooP 首頁 IwoooS 資安鏡像候選 + AwoooP 工作鏈路 IwoooS 資安鏡像候選 + AwoooP 審批佇列 IwoooS owner response 只讀焦點 | | 本階段追加 | AwoooP 合約儀表板 IwoooS 資安契約只讀候選 + AwoooP 租戶管理 IwoooS 資安租戶範圍只讀候選 + AwoooP 執行監控 IwoooS 執行狀態只讀候選 + 既有安全 / 合規頁面 IwoooS 只讀反向橋接 + 告警 / 錯誤 / 授權 / 治理頁面 IwoooS 只讀反向橋接 + 稽核 / 工程審查頁面 IwoooS 深色只讀反向橋接 + IwoooS 前端資安頁面連接狀態板 + IwoooS GitHub 主要來源就緒度只讀狀態板 + AwoooP 工作鏈路 GitHub 主要來源就緒度只讀工作項 + AwoooP 合約儀表板 GitHub 主要來源就緒度合約只讀候選 + AwoooP 審批佇列 GitHub 主要來源就緒度審批邊界 + AwoooP 首頁 GitHub 主要來源就緒度只讀摘要 + AwoooP 租戶管理 GitHub 主要來源就緒度租戶範圍 + AwoooP 執行監控 GitHub 主要來源就緒度執行邊界 + IwoooS / AwoooP 資安可視區塊繁體中文呈現防護檢查 + AwoooP 執行詳情 / 審批詳情繁體中文呈現防護檢查 + AwoooP 首頁負責人回覆驗收總覽 + AwoooP 工作鏈路負責人回覆驗收只讀工作項 + AwoooP 合約儀表板負責人回覆驗收契約只讀候選 + AwoooP 審批佇列負責人回覆驗收只讀審查邊界 + AwoooP 租戶管理負責人回覆驗收租戶範圍 + AwoooP 執行監控負責人回覆驗收執行邊界 + AwoooP 執行詳情負責人回覆驗收詳情邊界 + AwoooP 審批決策負責人回覆驗收審批邊界 + IwoooS AwoooP 資安入口覆蓋狀態板 + IwoooS 階段式資安收斂節奏圖 + IwoooS 下一步人工收件作戰板 + IwoooS 人工回覆安全驗收閘道 + IwoooS 人工回覆審查結果分流 + IwoooS 人工決策準備佇列 + IwoooS 人工決策紀錄草稿防誤用 + IwoooS 人工決策正式紀錄負責人指派確認準備包 + IwoooS 人工決策正式紀錄負責人指派確認清單 + IwoooS 人工決策正式紀錄負責人指派確認結果分流 + IwoooS 人工決策正式紀錄負責人指派決策準備包 + IwoooS 人工決策正式紀錄負責人指派決策檢查清單 + IwoooS S4.9 負責人回覆封套欄位 + IwoooS S4.9 負責人回覆封套送件前檢查 + IwoooS S4.9 負責人回覆封套送件前結果分流 + IwoooS S4.9 負責人回覆送件請求草稿 + IwoooS S4.9 負責人回覆送件鏈路摘要 + IwoooS 低摩擦分階段收斂主控 + IwoooS 低摩擦下一步行動邊界 + IwoooS 64% 進度移動訊號驗收條 + IwoooS 第一個進度解鎖路徑 + IwoooS 第一解鎖證據包 + IwoooS 第一解鎖證據包預檢分流 + IwoooS 第一解鎖證據包補件路徑 + IwoooS 第一解鎖證據包補件送審前檢查 + IwoooS 第一解鎖證據包補件送審結果分流 + IwoooS 第一解鎖證據包 reviewer 指派準備包 + IwoooS 第一解鎖證據包 reviewer 指派前檢查 + IwoooS 第一解鎖證據包 reviewer 指派前檢查結果分流 + IwoooS 正式只讀 landing 與 Kali 112 只讀證據進度重估 | | 本階段追加補充 | IwoooS 目前具體工作地圖 + IwoooS 目前具體交付清單 + IwoooS 目前阻塞與解除條件 + IwoooS 三軸進度與全產品套用範圍 + IwoooS 全產品分階段套用台帳 + IwoooS 全產品 rollout 波次驗收門檻 + IwoooS 全產品 rollout 驗收結果分流 + IwoooS 全產品證據接線地圖 + IwoooS 全產品證據接線預檢 + IwoooS 全產品證據接線預檢結果分流 + IwoooS 全產品預檢補件回收台帳 + IwoooS 全產品補件重試門檻 + IwoooS 全產品重試結果分流 + IwoooS 全產品人工審查候選準備 + IwoooS 全產品人工審查候選預檢 + IwoooS 全產品人工審查候選預檢結果分流 + IwoooS 全產品人工審查候選預檢補件回收台帳 + IwoooS 全產品人工審查候選預檢補件重試門檻 + IwoooS 全產品只讀套用快照 + P2-145 owner response acceptance gate 正式驗證完成 | | P0 追加 | IwoooS P0 配置控管優先序前台正式驗證完成;Nginx public gateway、DNS / TLS / certbot、K8s / ArgoCD / production manifests、Workflow / runner / secret metadata、Public / admin / API runtime config、agent-bounty runtime / treasury 六類先列為即時風險配置;高價值配置 Gate 已補上 `k8s/nginx/**`、`scripts/ops/**/*cert*`、`scripts/ops/**/*tls*`,sample 從 `matched=0 / C0=0` 收斂到 `matched=3 / C0=2`;Gate 預設工作樹 preflight 已可讀取 staged / unstaged / untracked,本地 smoke 對臨時 `k8s/nginx/*` 檔命中 C0;Owner Packet snapshot 已同步為 `packets=3 / c0=2`,Coverage snapshot 已同步最新 patterns;IwoooS / AwoooP 前台 Owner Packet 摘要已正式驗證 `packet=3 / c0=2`,feature commit `e999c16b`、deploy marker `16c6b983`、Gitea code-review `2973` / CD `2972` success;IwoooS posture projection snapshot / schema / guard 已同步 `packet=3 / c0=2`,不再保留舊 `1 / 0` 口徑;高價值配置 Owner Packet 收件預檢已新增 `checks=9 / lanes=5 / required_fields=27 / blocked_requests=16`;高價值配置 Owner Request 草稿包已新增 `drafts=3 / handoff_fields=11 / forbidden_payloads=12 / sent=0`;Public Gateway live conf 匯出請求包已新增 `requests=3 / c0=2 / redaction_rules=8 / received=0`;Public Gateway redacted export 收件預檢已新增 `candidates=3 / c0=2 / checks=10 / rejection_guards=12 / received=0 / accepted=0`;Public Gateway rendered diff / nginx gate 草稿已新增 `candidates=3 / c0=2 / stages=7 / blocked=14 / rendered_diff=0 / runtime=0`;Public Gateway owner response acceptance 只讀帳本已新增 `candidates=3 / c0=2 / fields=33 / checks=22 / lanes=8 / blocked=28 / accepted=0 / runtime=0`,並補上手動 / 緊急 gateway 變更的 intent、approval / break-glass、route health、rollback validation 與 post-change monitoring 必填 ref;DNS / TLS / certbot Owner Confirmation Request 已新增 `requests=4 / c0=4 / fields=9 / questions=5 / guards=12 / received=0 / accepted=0`;K8s / ArgoCD manifest repo-only 清冊已新增 `files=49 / c0=36 / yaml=45 / kinds=20 / blocked=13 / runtime=0`;K8s / ArgoCD Owner Request Draft 已新增 `drafts=4 / c0=3 / fields=11 / sent=0 / runtime=0`;K8s / ArgoCD owner response acceptance 只讀帳本已新增 `candidates=4 / c0=3 / fields=11 / checks=12 / lanes=7 / blocked=18 / accepted=0 / runtime=0`;K8s / ArgoCD GitOps 變更證據驗收已新增 `candidates=4 / c0=3 / write_capable=4 / evidence_fields=18 / checks=18 / lanes=8 / blocked=28 / accepted=0 / runtime=0`;CD / Runner / Secret 注入變更證據驗收已新增 `candidates=5 / c0=4 / write_capable=5 / workflow_files=33 / secret_names=42 / runner_labels=5 / evidence_fields=19 / checks=19 / lanes=8 / blocked=32 / accepted=0 / runtime=0`;Public / Admin / API runtime config 變更證據驗收已新增 `candidates=6 / c0=5 / write_capable=6 / source_refs=20 / evidence_fields=21 / checks=21 / lanes=8 / blocked=32 / accepted=0 / runtime=0`,並把 raw namespace、repo slug、內部狀態碼與內部協作內容外洩列為拒收 / 隔離;Frontend public sensitive surface guard 已新增 `files=225 / patterns=12 / allowlisted=2 / violations=0 / runtime=0`,讓 public runtime config 成熟度 `64% -> 66%`、高價值配置平均 `69% -> 70%`;Backup / Restore / Escrow owner response acceptance 只讀帳本已更新為 `candidates=38 / write_capable=27 / fields=33 / owner_fields=23 / reviewer_checks=22 / lanes=9 / blocked=31 / accepted=0 / runtime=0`;SSH / Firewall / Network Access owner response acceptance 只讀帳本已新增 `candidates=16 / write_capable=6 / fields=13 / checks=15 / lanes=7 / blocked=22 / accepted=0 / runtime=0`;端口 / 防火牆變更證據驗收只讀帳本已新增 `candidates=14 / write_capable=6 / policy_or_exposure=5 / evidence_fields=16 / checks=16 / lanes=8 / blocked=24 / accepted=0 / runtime=0`;owner response / live evidence / runtime gate / action buttons 仍全部為 0 | | P0 agent-bounty 追加 | agent-bounty-protocol Owner Request Draft 已新增 `drafts=11 / control=4 / surface=7 / write_capable=8 / treasury=4 / mcp_a2a=5 / fields=22 / forbidden_inputs=25 / blocked=28 / sent=0 / runtime=0`;這是 repo / refs、deployment、data classification、MCP / A2A、cron / daemon、admin / treasury、webhook / traffic 的人工送件前草稿,不是 owner response、repo push、refs sync、workflow 修改、secret 收集、deploy、compose restart、DB migration、claim / submit、payout / withdrawal、cron / daemon、external send、host write 或 runtime gate | -| P1 追加 | Docker / systemd / Host Service Owner Request Draft 已新增 `drafts=9 / write_capable=3 / fields=12 / blocked=14 / sent=0 / runtime=0`;Docker / systemd / Host Service Owner Response Acceptance 已更新為 `candidates=9 / write_capable=3 / live_evidence_required=8 / fields=34 / owner_fields=18 / reviewer_checks=21 / lanes=8 / blocked=27 / accepted=0 / runtime=0`;SSH / Firewall / Network Access Owner Request Draft 已新增 `drafts=16 / write_capable=6 / fields=13 / blocked=16 / sent=0 / runtime=0`;Backup / Restore / Escrow Owner Request Draft 已新增 `drafts=38 / write_capable=27 / fields=14 / blocked=18 / sent=0 / runtime=0`;Backup / Restore / Escrow Owner Response Acceptance 已更新為 `candidates=38 / write_capable=27 / owner_fields=23 / reviewer_checks=22 / lanes=9 / blocked=31 / accepted=0 / runtime=0`;Monitoring / Alerting / Observability Owner Request Draft 已新增 `drafts=60 / write_capable=11 / fields=14 / blocked=24 / sent=0 / runtime=0`;Monitoring / Alerting / Observability Owner Response Acceptance 已新增 `candidates=60 / write_capable=11 / live_evidence_required=60 / fields=30 / owner_fields=14 / reviewer_checks=15 / lanes=7 / blocked=28 / accepted=0 / runtime=0`;上述全部仍是人工送件前草稿或只讀 acceptance 帳本,不是 owner response、live evidence、reload、restart、backup、restore、Telegram send、alert smoke、host write 或 runtime gate | +| P1 追加 | Docker / systemd / Host Service Owner Request Draft 已新增 `drafts=9 / write_capable=3 / fields=12 / blocked=14 / sent=0 / runtime=0`;Docker / systemd / Host Service Owner Response Acceptance 已更新為 `candidates=9 / write_capable=3 / live_evidence_required=8 / fields=34 / owner_fields=18 / reviewer_checks=21 / lanes=8 / blocked=27 / accepted=0 / runtime=0`;SSH / Firewall / Network Access Owner Request Draft 已新增 `drafts=16 / write_capable=6 / fields=13 / blocked=16 / sent=0 / runtime=0`;Backup / Restore / Escrow Owner Request Draft 已新增 `drafts=38 / write_capable=27 / fields=14 / blocked=18 / sent=0 / runtime=0`;Backup / Restore / Escrow Owner Response Acceptance 已更新為 `candidates=38 / write_capable=27 / owner_fields=23 / reviewer_checks=22 / lanes=9 / blocked=31 / accepted=0 / runtime=0`;Monitoring / Alerting / Observability Owner Request Draft 已新增 `drafts=60 / write_capable=11 / fields=14 / blocked=24 / sent=0 / runtime=0`;Monitoring / Alerting / Observability Owner Response Acceptance 已更新為 `candidates=60 / write_capable=11 / live_evidence_required=60 / fields=38 / owner_fields=14 / reviewer_checks=23 / lanes=12 / blocked=34 / accepted=0 / runtime=0`,並補 incident context、receiver receipt、stale alert、silence / dedup、post-reload readback 與 false-green risk review;上述全部仍是人工送件前草稿或只讀 acceptance 帳本,不是 owner response、live evidence、reload、restart、backup、restore、Telegram send、alert smoke、host write 或 runtime gate | | P2 供應鏈追加 | Package / Docker 供應鏈 repo-only baseline 已新增 `package_json=6 / pyproject=4 / requirements=2 / dockerfiles=2 / compose=6 / gaps=5 / runtime=0`;Package / Docker 供應鏈 owner policy gate 已新增 `requests=6 / c0=2 / fields=8 / checks=12 / blocked=20 / sent=0 / accepted=0 / runtime=0`;缺口為 Python lockfile 缺席、requirements 未 pin、Docker base image 未全數 digest pinning、Docker `COPY --from` 外部 image 未 digest pinning、compose image 未 digest pinning,以及 CVE / license / SBOM window 未定;目前尚未列入 36 個正式 AwoooP 消費 contract,後續若要前台消費需同步 manifest / readiness / route / rollup / dry-run / posture projection / guard count;本輪不 install、不 upgrade、不跑 CVE、不 pull / build / push image、不改 tag、不登入 registry、不部署 | | 原則 | 低摩擦分階段;文件、schema、read-only evidence 優先;不做 runtime enforcement、不切 primary | | P0 主控板 | `docs/workplans/2026-06-04-iwooos-security-governance-p0.md` | ## 0.00aaaaaa 2026-06-15 Monitoring / Alerting / Observability owner response acceptance -本輪把 Prometheus、Alertmanager、Grafana、SigNoz、Sentry、Langfuse、OTEL、receiver route、silence policy、Telegram Bot 與 alert chain smoke 從 owner request draft 推進到 owner response acceptance 只讀帳本:`monitoring_owner_response_acceptance_v1` 固定 `candidates=60`、`write_capable=11`、`live_evidence_required=60`、`acceptance_fields=30`、`owner_fields=14`、`reviewer_checks=15`、`outcome_lanes=7`、`blocked_actions=28`,並讓 `monitoring_alerting_observability` 只讀治理成熟度 `62% -> 66%`,高價值配置平均只讀成熟度 `68% -> 69%`。這是 owner response 收件驗收帳本,不是 owner response received / accepted / rejected、Prometheus reload、Alertmanager reload、Grafana import、SigNoz apply、Sentry deploy、Langfuse change、OTEL reload、receiver route change、silence change、Telegram send、live alert fire、alert chain smoke、runtime approval package 或 runtime gate。 +本輪把 Prometheus、Alertmanager、Grafana、SigNoz、Sentry、Langfuse、OTEL、receiver route、silence policy、Telegram Bot 與 alert chain smoke 從 owner request draft 推進到 owner response acceptance 只讀帳本:`monitoring_owner_response_acceptance_v1` 固定 `candidates=60`、`write_capable=11`、`live_evidence_required=60`、`acceptance_fields=38`、`owner_fields=14`、`reviewer_checks=23`、`outcome_lanes=12`、`blocked_actions=34`,並讓 `monitoring_alerting_observability` 只讀治理成熟度 `62% -> 68%`。這是 owner response 收件驗收與 no-false-green 回補帳本,不是 owner response received / accepted / rejected、Prometheus reload、Alertmanager reload、Grafana import、SigNoz apply、Sentry deploy、Langfuse change、OTEL reload、receiver route change、silence change、Telegram send、live alert fire、alert chain smoke、runtime approval package 或 runtime gate。 同步邊界:IwoooS headline 維持 `64%`,active runtime gate 維持 `0`;owner response、live evidence、reload、receiver route、silence policy、Telegram Bot、alert smoke、secret collection、host write、production write、runtime gate 與 action buttons 全部仍為 `0 / false`。本段只更新文件、snapshot、guard、覆蓋矩陣與 workplan,不讀 live conf、不改告警規則、不 reload 服務、不送 Telegram、不打 live alert、不部署。 diff --git a/docs/security/high-value-config-control-coverage.snapshot.json b/docs/security/high-value-config-control-coverage.snapshot.json index 217716e40..1b6b602a9 100644 --- a/docs/security/high-value-config-control-coverage.snapshot.json +++ b/docs/security/high-value-config-control-coverage.snapshot.json @@ -326,9 +326,9 @@ "action_buttons_allowed": false, "category_id": "monitoring_alerting_observability", "control_tier": "C1", - "coverage_percent": 66, - "coverage_status": "owner_response_acceptance_ledger_ready_needs_live_route_evidence", - "current_gap": "已固定 60 份 monitoring / alerting / observability owner response acceptance candidate;仍缺 owner response、live config hash、rule diff、receiver diff、reload owner、route smoke、receipt proof、noise budget owner 與 maintenance window。", + "coverage_percent": 68, + "coverage_status": "alert_chain_no_false_green_backfill_ready_needs_live_evidence_receipt", + "current_gap": "已固定 60 份 monitoring / alerting / observability owner response acceptance candidate,並新增告警鏈路 no-false-green 回補欄位;仍缺 owner response、live config hash、rule diff、receiver diff、receipt proof、stale / silence review、post-reload readback、noise budget owner 與 maintenance window。", "evidence_refs": [ "docs/security/IWOOOS-CONFIG-CONTROL-INVENTORY.md", "docs/security/MONITORING-ALERTING-OBSERVABILITY-INVENTORY.md", @@ -340,7 +340,7 @@ "docs/schemas/monitoring_alerting_observability_inventory_v1.schema.json" ], "label": "Prometheus / Alertmanager / Grafana / SigNoz / Sentry / Langfuse", - "next_owner_action": "補 Prometheus / Alertmanager / Grafana / SigNoz / Sentry / Langfuse / Telegram owner、live drift evidence、reload window、receiver owner、route smoke plan、noise budget、rollback owner 與 no-secret-value evidence。", + "next_owner_action": "補 Prometheus / Alertmanager / Grafana / SigNoz / Sentry / Langfuse / Telegram owner、live drift evidence、reload window、receiver owner、receipt proof、stale alert review、silence / dedup review、route smoke plan、noise budget、rollback owner 與 no-secret-value evidence。", "owner_response_accepted": false, "owner_response_received": false, "owner_response_required": true, @@ -635,8 +635,8 @@ "websocket_route_change_authorized": false, "workflow_modification_authorized": false }, - "generated_at": "2026-06-15T16:40:00+08:00", - "git_commit": "b16f4c73", + "generated_at": "2026-06-15T18:20:00+08:00", + "git_commit": "0def6daf", "lowest_coverage_categories": [ { "category_id": "docker_compose_systemd_host_config", diff --git a/docs/security/iwooos-posture-projection.snapshot.json b/docs/security/iwooos-posture-projection.snapshot.json index 9651674bd..c1fc2c19c 100644 --- a/docs/security/iwooos-posture-projection.snapshot.json +++ b/docs/security/iwooos-posture-projection.snapshot.json @@ -8401,6 +8401,8 @@ "docs/schemas/backup_restore_escrow_inventory_v1.schema.json", "docs/security/monitoring-alerting-observability-inventory.snapshot.json", "docs/security/MONITORING-ALERTING-OBSERVABILITY-INVENTORY.md", + "docs/security/monitoring-owner-response-acceptance.snapshot.json", + "docs/security/MONITORING-OWNER-RESPONSE-ACCEPTANCE.md", "docs/schemas/monitoring_alerting_observability_inventory_v1.schema.json", "docs/LOGBOOK.md", "docs/workplans/2026-06-04-iwooos-security-governance-p0.md", @@ -8756,6 +8758,19 @@ "monitoring_alerting_observability_inventory_surfaces_requiring_owner_response_count": 60, "monitoring_alerting_observability_inventory_telegram_surface_count": 3, "monitoring_alerting_observability_inventory_write_capable_surface_count": 11, + "monitoring_owner_response_acceptance_acceptance_field_count": 38, + "monitoring_owner_response_acceptance_blocked_action_count": 34, + "monitoring_owner_response_acceptance_candidate_count": 60, + "monitoring_owner_response_acceptance_cross_project_notification_accepted_count": 0, + "monitoring_owner_response_acceptance_false_green_risk_review_accepted_count": 0, + "monitoring_owner_response_acceptance_outcome_lane_count": 12, + "monitoring_owner_response_acceptance_post_reload_readback_plan_accepted_count": 0, + "monitoring_owner_response_acceptance_receiver_receipt_proof_accepted_count": 0, + "monitoring_owner_response_acceptance_reviewer_check_count": 23, + "monitoring_owner_response_acceptance_runtime_gate_count": 0, + "monitoring_owner_response_acceptance_silence_or_dedup_review_accepted_count": 0, + "monitoring_owner_response_acceptance_stale_alert_review_accepted_count": 0, + "monitoring_owner_response_acceptance_coverage_percent_after_backfill": 68, "nav_entry_added": true, "operator_journey_step_count": 6, "owner_evidence_readiness_item_count": 7, diff --git a/docs/security/monitoring-owner-response-acceptance.snapshot.json b/docs/security/monitoring-owner-response-acceptance.snapshot.json index 26cad8aea..b69a4d110 100644 --- a/docs/security/monitoring-owner-response-acceptance.snapshot.json +++ b/docs/security/monitoring-owner-response-acceptance.snapshot.json @@ -26,6 +26,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -37,6 +45,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -67,17 +77,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "prometheus_config", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "k8s_monitoring_prometheus_base", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "K8s Prometheus base config", "langfuse_config_change_authorized": false, @@ -103,6 +125,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -112,10 +139,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -153,6 +184,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -169,10 +208,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 208, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "prometheus_k8s_base_config", @@ -208,6 +251,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -219,6 +270,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -249,17 +302,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "prometheus_config", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "k8s_monitoring_prometheus_additions", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "K8s Prometheus additions", "langfuse_config_change_authorized": false, @@ -284,6 +349,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -293,10 +363,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -334,6 +408,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -350,10 +432,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 112, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "prometheus_k8s_additions_config", @@ -389,6 +475,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -400,6 +494,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -430,17 +526,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "prometheus_config", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "phase_o_prometheus_config", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Prometheus Phase O config", "langfuse_config_change_authorized": false, @@ -465,6 +573,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -474,10 +587,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -515,6 +632,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -531,10 +656,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 83, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "prometheus_phase_o_config", @@ -570,6 +699,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -581,6 +718,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -611,17 +750,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "prometheus_remote_write", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "prometheus_remote_write_signoz", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Prometheus remote write to SigNoz", "langfuse_config_change_authorized": false, @@ -647,6 +798,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -656,10 +812,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -697,6 +857,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -713,10 +881,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 89, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "prometheus_remote_write_signoz", @@ -752,6 +924,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -763,6 +943,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -793,17 +975,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "prometheus_generated_config", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "generated_scrape_targets", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Generated Prometheus scrape config", "langfuse_config_change_authorized": false, @@ -828,6 +1022,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -837,10 +1036,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -878,6 +1081,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -894,10 +1105,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 192, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "prometheus_generated_scrape_config", @@ -933,6 +1148,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -944,6 +1167,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -974,17 +1199,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "prometheus_generated_config", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "generated_blackbox_targets", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Generated blackbox targets", "langfuse_config_change_authorized": false, @@ -1009,6 +1246,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -1018,10 +1260,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -1059,6 +1305,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -1075,10 +1329,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 110, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "prometheus_generated_blackbox_targets", @@ -1114,6 +1372,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -1125,6 +1391,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -1155,17 +1423,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "monitoring_service_registry", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "monitoring_service_registry", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Monitoring service registry", "langfuse_config_change_authorized": false, @@ -1190,6 +1470,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -1199,10 +1484,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -1240,6 +1529,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -1256,10 +1553,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 830, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "monitoring_service_registry", @@ -1295,6 +1596,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -1306,6 +1615,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -1336,17 +1647,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "exporter_query_config", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "postgres_exporter_queries", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Postgres exporter query config", "langfuse_config_change_authorized": false, @@ -1371,6 +1694,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -1380,10 +1708,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -1421,6 +1753,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -1437,10 +1777,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 215, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "postgres_exporter_queries", @@ -1476,6 +1820,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -1487,6 +1839,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -1517,17 +1871,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "monitoring_runtime_compose", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "192.168.0.110_monitoring_stack", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "110 monitoring compose", "langfuse_config_change_authorized": false, @@ -1555,6 +1921,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -1564,10 +1935,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -1605,6 +1980,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -1621,10 +2004,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 148, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "monitoring_110_compose", @@ -1660,6 +2047,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -1671,6 +2066,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -1701,17 +2098,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "monitoring_runtime_compose", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "192.168.0.188_exporters", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "188 monitoring exporters compose", "langfuse_config_change_authorized": false, @@ -1736,6 +2145,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -1745,10 +2159,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -1786,6 +2204,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -1802,10 +2228,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 69, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "monitoring_exporters_compose", @@ -1841,6 +2271,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -1852,6 +2290,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -1882,17 +2322,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "alertmanager_receiver_config", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "alertmanager_routes_receivers", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Alertmanager receiver config", "langfuse_config_change_authorized": false, @@ -1919,6 +2371,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -1928,10 +2385,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -1969,6 +2430,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -1985,10 +2454,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 146, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "alertmanager_receiver_config", @@ -2024,6 +2497,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -2035,6 +2516,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -2065,17 +2548,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "prometheus_alert_rules", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "ops_prometheus_alerts", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Ops Prometheus alerts", "langfuse_config_change_authorized": false, @@ -2101,6 +2596,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -2110,10 +2610,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -2151,6 +2655,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -2167,10 +2679,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 1355, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "prometheus_alerts_ops", @@ -2206,6 +2722,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -2217,6 +2741,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -2247,17 +2773,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "prometheus_alert_rules", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "unified_prometheus_alerts", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Unified Prometheus alerts", "langfuse_config_change_authorized": false, @@ -2282,6 +2820,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -2291,10 +2834,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -2332,6 +2879,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -2348,10 +2903,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 2031, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "prometheus_alerts_unified", @@ -2387,6 +2946,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -2398,6 +2965,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -2428,17 +2997,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "prometheus_alert_rules", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "prometheus_slo_rules", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Prometheus SLO rules", "langfuse_config_change_authorized": false, @@ -2463,6 +3044,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -2472,10 +3058,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -2513,6 +3103,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -2529,10 +3127,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 257, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "prometheus_slo_rules", @@ -2568,6 +3170,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -2579,6 +3189,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -2609,17 +3221,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "prometheus_alert_rules", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "ollama_health_rules", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Ollama health alert rules", "langfuse_config_change_authorized": false, @@ -2644,6 +3268,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -2653,10 +3282,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -2694,6 +3327,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -2710,10 +3351,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 149, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "prometheus_ollama_health_rules", @@ -2749,6 +3394,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -2760,6 +3413,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -2790,17 +3445,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "prometheus_alert_rules", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "k3s_cluster_alerts", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "K3s alert rules", "langfuse_config_change_authorized": false, @@ -2825,6 +3492,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -2834,10 +3506,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -2875,6 +3551,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -2891,10 +3575,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 203, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "k8s_k3s_alerts", @@ -2930,6 +3618,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -2941,6 +3637,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -2971,17 +3669,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "prometheus_alert_rules", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "k3s_supplemental_alerts", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "K3s supplemental alert rules", "langfuse_config_change_authorized": false, @@ -3006,6 +3716,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -3015,10 +3730,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -3056,6 +3775,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -3072,10 +3799,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 290, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "k8s_k3s_supplemental_alerts", @@ -3111,6 +3842,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -3122,6 +3861,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -3152,17 +3893,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "prometheus_alert_rules", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "database_alerts", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Database alert rules", "langfuse_config_change_authorized": false, @@ -3188,6 +3941,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -3197,10 +3955,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -3238,6 +4000,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -3254,10 +4024,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 264, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "k8s_database_alerts", @@ -3293,6 +4067,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -3304,6 +4086,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -3334,17 +4118,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "prometheus_alert_rules", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "nvidia_gpu_alerts", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "NVIDIA alert rules", "langfuse_config_change_authorized": false, @@ -3369,6 +4165,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -3378,10 +4179,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -3419,6 +4224,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -3435,10 +4248,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 122, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "k8s_nvidia_alerts", @@ -3474,6 +4291,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -3485,6 +4310,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -3515,17 +4342,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "prometheus_alert_rules", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "minio_kali_alerts", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "MinIO / Kali alert rules", "langfuse_config_change_authorized": false, @@ -3551,6 +4390,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -3560,10 +4404,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -3601,6 +4449,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -3617,10 +4473,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 67, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "k8s_minio_kali_alerts", @@ -3656,6 +4516,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -3667,6 +4535,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -3697,17 +4567,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "prometheus_alert_rules", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "ai_flywheel_alerts", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "AI flywheel alert rules", "langfuse_config_change_authorized": false, @@ -3732,6 +4614,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -3741,10 +4628,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -3782,6 +4673,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -3798,10 +4697,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 219, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "k8s_flywheel_alerts", @@ -3837,6 +4740,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -3848,6 +4759,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -3878,17 +4791,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "prometheus_alert_rules", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "alert_chain_monitor", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Alert chain monitor", "langfuse_config_change_authorized": false, @@ -3913,6 +4838,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -3922,10 +4852,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -3963,6 +4897,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -3979,10 +4921,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 202, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "k8s_alert_chain_monitor", @@ -4018,6 +4964,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -4029,6 +4983,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -4059,17 +5015,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "app_alert_rule_contract", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "api_alert_rule_engine", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "API alert rule engine rules", "langfuse_config_change_authorized": false, @@ -4095,6 +5063,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -4104,10 +5077,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -4145,6 +5122,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -4161,10 +5146,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 889, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "app_alert_rules_yaml", @@ -4200,6 +5189,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -4211,6 +5208,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -4241,17 +5240,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "grafana_alert_rules", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "grafana_agent_step_latency_rules", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Grafana agent step latency rules", "langfuse_config_change_authorized": false, @@ -4276,6 +5287,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -4285,10 +5301,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -4326,6 +5346,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -4342,10 +5370,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 201, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "grafana_agent_step_latency_rules", @@ -4381,6 +5413,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -4392,6 +5432,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -4422,17 +5464,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "grafana_dashboard", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "grafana_ai_slo_dashboard", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Grafana AI SLO dashboard", "langfuse_config_change_authorized": false, @@ -4457,6 +5511,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -4466,10 +5525,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -4507,6 +5570,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -4523,10 +5594,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 496, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "grafana_ai_slo_dashboard", @@ -4562,6 +5637,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -4573,6 +5656,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -4603,17 +5688,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "grafana_dashboard", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "grafana_ollama_failover_dashboard", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Grafana Ollama failover dashboard", "langfuse_config_change_authorized": false, @@ -4638,6 +5735,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -4647,10 +5749,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -4688,6 +5794,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -4704,10 +5818,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 295, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "grafana_ollama_failover_dashboard", @@ -4743,6 +5861,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -4754,6 +5880,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -4784,17 +5912,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "grafana_dashboard", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "grafana_ai_monitoring_dashboard", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Grafana AI monitoring dashboard", "langfuse_config_change_authorized": false, @@ -4819,6 +5959,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -4828,10 +5973,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -4869,6 +6018,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -4885,10 +6042,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 347, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "grafana_ai_monitoring_dashboard", @@ -4924,6 +6085,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -4935,6 +6104,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -4965,17 +6136,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "grafana_dashboard", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "grafana_infra_monitoring_dashboard", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Grafana infra monitoring dashboard", "langfuse_config_change_authorized": false, @@ -5000,6 +6183,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -5009,10 +6197,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -5050,6 +6242,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -5066,10 +6266,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 306, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "grafana_infra_monitoring_dashboard", @@ -5105,6 +6309,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -5116,6 +6328,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -5146,17 +6360,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "grafana_dashboard", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "grafana_nvidia_nemotron_dashboard", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Grafana NVIDIA / NemoTron dashboard", "langfuse_config_change_authorized": false, @@ -5182,6 +6408,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -5191,10 +6422,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -5232,6 +6467,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -5248,10 +6491,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 1426, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "grafana_nvidia_nemotron_dashboard", @@ -5287,6 +6534,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -5298,6 +6553,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -5328,17 +6585,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "otel_collector_config", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "signoz_otel_collector_phase_o", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "SigNoz OTEL collector config", "langfuse_config_change_authorized": false, @@ -5363,6 +6632,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -5372,10 +6646,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -5413,6 +6691,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -5429,10 +6715,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 188, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "signoz_otel_collector_config", @@ -5468,6 +6758,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -5479,6 +6777,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -5509,17 +6809,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "signoz_alert_rules", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "signoz_alerting_rules", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "SigNoz alerting rules", "langfuse_config_change_authorized": false, @@ -5544,6 +6856,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -5553,10 +6870,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -5594,6 +6915,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -5610,10 +6939,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 165, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "signoz_alerting_rules", @@ -5649,6 +6982,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -5660,6 +7001,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -5690,17 +7033,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "signoz_log_rules", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "signoz_log_alert_rules", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "SigNoz log alert rules", "langfuse_config_change_authorized": false, @@ -5725,6 +7080,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -5734,10 +7094,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -5775,6 +7139,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -5791,10 +7163,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 107, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "signoz_log_rules", @@ -5830,6 +7206,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -5841,6 +7225,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -5871,17 +7257,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "sentry_runtime_compose", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "sentry_self_hosted_runtime", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Sentry self-hosted compose", "langfuse_config_change_authorized": false, @@ -5906,6 +7304,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -5915,10 +7318,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -5956,6 +7363,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -5972,10 +7387,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 49, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "sentry_self_hosted_compose", @@ -6011,6 +7430,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -6022,6 +7449,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -6052,17 +7481,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "sentry_deploy_script", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "sentry_self_hosted_deploy", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Sentry self-hosted deploy script", "langfuse_config_change_authorized": false, @@ -6088,6 +7529,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -6097,10 +7543,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -6138,6 +7588,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -6154,10 +7612,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 65, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "sentry_self_hosted_deploy", @@ -6193,6 +7655,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -6204,6 +7674,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -6234,17 +7706,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "langfuse_runtime_compose", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "langfuse_observability_runtime", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Langfuse compose", "langfuse_config_change_authorized": false, @@ -6270,6 +7754,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -6279,10 +7768,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -6320,6 +7813,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -6336,10 +7837,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 71, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "langfuse_compose", @@ -6375,6 +7880,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -6386,6 +7899,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -6416,17 +7931,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "langfuse_runbook", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "langfuse_observability_runbook", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Langfuse deployment README", "langfuse_config_change_authorized": false, @@ -6451,6 +7978,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -6460,10 +7992,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -6501,6 +8037,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -6517,10 +8061,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 69, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "langfuse_readme", @@ -6556,6 +8104,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -6567,6 +8123,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -6597,17 +8155,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "notification_policy_snapshot", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "service_health_failure_notification_policy", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Service health failure notification policy", "langfuse_config_change_authorized": false, @@ -6632,6 +8202,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -6641,10 +8216,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -6682,6 +8261,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -6698,10 +8285,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 303, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "service_health_failure_policy_snapshot", @@ -6737,6 +8328,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -6748,6 +8347,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -6778,17 +8379,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "notification_policy_snapshot", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "backup_notification_policy", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Backup notification policy", "langfuse_config_change_authorized": false, @@ -6813,6 +8426,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -6822,10 +8440,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -6863,6 +8485,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -6879,10 +8509,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 276, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "backup_notification_policy_snapshot", @@ -6918,6 +8552,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -6929,6 +8571,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -6959,17 +8603,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "observability_contract_snapshot", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "observability_contract_matrix", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Observability contract matrix", "langfuse_config_change_authorized": false, @@ -6995,6 +8651,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -7004,10 +8665,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -7045,6 +8710,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -7061,10 +8734,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 391, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "observability_contract_matrix_snapshot", @@ -7100,6 +8777,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -7111,6 +8796,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -7141,17 +8828,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "telegram_policy_snapshot", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "ai_agent_telegram_digest_policy", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Telegram action required digest policy", "langfuse_config_change_authorized": false, @@ -7176,6 +8875,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -7185,10 +8889,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -7226,6 +8934,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -7242,10 +8958,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 405, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "telegram_action_required_digest_snapshot", @@ -7281,6 +9001,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -7292,6 +9020,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -7322,17 +9052,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "telegram_policy_snapshot", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "ai_agent_telegram_receipt_policy", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Telegram receipt approval package", "langfuse_config_change_authorized": false, @@ -7357,6 +9099,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -7366,10 +9113,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -7407,6 +9158,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -7423,10 +9182,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 179, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "telegram_receipt_approval_snapshot", @@ -7462,6 +9225,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -7473,6 +9244,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -7503,17 +9276,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "telegram_runtime_sender", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "telegram_gateway_runtime_sender", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Telegram gateway service", "langfuse_config_change_authorized": false, @@ -7539,6 +9324,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -7548,10 +9338,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -7589,6 +9383,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -7605,10 +9407,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 9452, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "telegram_gateway_service", @@ -7644,6 +9450,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -7655,6 +9469,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -7685,17 +9501,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "notification_runtime_router", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "notification_runtime_routing", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Notification manager", "langfuse_config_change_authorized": false, @@ -7720,6 +9548,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -7729,10 +9562,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -7770,6 +9607,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -7786,10 +9631,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 172, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "notification_manager_service", @@ -7825,6 +9674,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -7836,6 +9693,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -7866,17 +9725,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "notification_policy_code", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "notification_matrix_policy", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Notification matrix", "langfuse_config_change_authorized": false, @@ -7901,6 +9772,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -7910,10 +9786,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -7951,6 +9831,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -7967,10 +9855,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 66, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "notification_matrix_service", @@ -8006,6 +9898,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -8017,6 +9917,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -8047,17 +9949,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "alert_metrics_service", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "alert_chain_metrics", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Alert chain metrics service", "langfuse_config_change_authorized": false, @@ -8082,6 +9996,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -8091,10 +10010,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -8132,6 +10055,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -8148,10 +10079,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 160, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "alert_chain_metrics_service", @@ -8187,6 +10122,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -8198,6 +10141,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -8228,17 +10173,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "notification_runtime_router", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "recurrence_notification_runtime", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Converged alert recurrence notifier", "langfuse_config_change_authorized": false, @@ -8264,6 +10221,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -8273,10 +10235,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -8314,6 +10280,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -8330,10 +10304,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 215, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "converged_alert_recurrence_notifier", @@ -8369,6 +10347,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -8380,6 +10366,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -8410,17 +10398,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "webhook_receiver", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "sentry_webhook_receiver", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Sentry webhook service", "langfuse_config_change_authorized": false, @@ -8446,6 +10446,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -8455,10 +10460,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -8496,6 +10505,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -8512,10 +10529,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 452, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "sentry_webhook_service", @@ -8551,6 +10572,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -8562,6 +10591,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -8592,17 +10623,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "signoz_observability_client", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "signoz_api_client", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "SigNoz client service", "langfuse_config_change_authorized": false, @@ -8628,6 +10671,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -8637,10 +10685,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -8678,6 +10730,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -8694,10 +10754,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 577, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "signoz_client_service", @@ -8733,6 +10797,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -8744,6 +10816,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -8774,17 +10848,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "sentry_observability_client", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "sentry_api_client", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Sentry service client", "langfuse_config_change_authorized": false, @@ -8810,6 +10896,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -8819,10 +10910,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -8860,6 +10955,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -8876,10 +10979,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 464, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "sentry_service_client", @@ -8915,6 +11022,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -8926,6 +11041,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -8956,17 +11073,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "langfuse_observability_client", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "langfuse_api_client", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Langfuse client service", "langfuse_config_change_authorized": false, @@ -8992,6 +11121,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -9001,10 +11135,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -9042,6 +11180,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -9058,10 +11204,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 347, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "langfuse_client_service", @@ -9097,6 +11247,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -9108,6 +11266,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -9138,17 +11298,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "reload_capable_script", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "alertmanager_config_deploy", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Alertmanager config deploy script", "langfuse_config_change_authorized": false, @@ -9173,6 +11345,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -9182,10 +11359,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -9223,6 +11404,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -9239,10 +11428,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 145, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "deploy_alertmanager_config_script", @@ -9278,6 +11471,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -9289,6 +11490,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -9319,17 +11522,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "reload_capable_script", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "prometheus_alerts_deploy", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Prometheus alerts deploy script", "langfuse_config_change_authorized": false, @@ -9354,6 +11569,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -9363,10 +11583,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -9404,6 +11628,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -9420,10 +11652,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 164, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "deploy_prometheus_alerts_script", @@ -9459,6 +11695,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -9470,6 +11714,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -9500,17 +11746,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "drift_guard_script", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "prometheus_rule_drift_guard", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Prometheus rule drift guard", "langfuse_config_change_authorized": false, @@ -9536,6 +11794,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -9545,10 +11808,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -9586,6 +11853,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -9602,10 +11877,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 149, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "prometheus_rule_drift_guard_script", @@ -9641,6 +11920,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -9652,6 +11939,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -9682,17 +11971,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "reload_capable_script", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "k8s_prometheus_config_deploy", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "K8s Prometheus config deploy script", "langfuse_config_change_authorized": false, @@ -9717,6 +12018,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -9726,10 +12032,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -9767,6 +12077,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -9783,10 +12101,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 118, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "k8s_deploy_prometheus_config_script", @@ -9822,6 +12144,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -9833,6 +12163,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -9863,17 +12195,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "reload_capable_script", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "api_prometheus_config_apply", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "API Prometheus config apply script", "langfuse_config_change_authorized": false, @@ -9898,6 +12242,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -9907,10 +12256,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -9948,6 +12301,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -9964,10 +12325,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 198, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "api_apply_prometheus_config_script", @@ -10003,6 +12368,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -10014,6 +12387,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -10044,17 +12419,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "host_deploy_script", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "monitoring_exporter_deploy", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Monitoring exporter deploy script", "langfuse_config_change_authorized": false, @@ -10079,6 +12466,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -10088,10 +12480,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -10129,6 +12525,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -10145,10 +12549,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 76, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "monitoring_exporter_deploy_script", @@ -10184,6 +12592,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -10195,6 +12611,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -10225,17 +12643,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "live_alert_sender", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "live_alert_fire_script", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Live alert firing script", "langfuse_config_change_authorized": false, @@ -10261,6 +12691,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -10270,10 +12705,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -10311,6 +12750,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -10327,10 +12774,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 369, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "fire_live_alert_script", @@ -10366,6 +12817,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -10377,6 +12836,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -10407,17 +12868,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "live_alert_sender", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "test_alert_fire_script", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Test alert firing script", "langfuse_config_change_authorized": false, @@ -10442,6 +12915,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -10451,10 +12929,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -10492,6 +12974,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -10508,10 +12998,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 318, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "fire_test_alert_script", @@ -10547,6 +13041,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -10558,6 +13060,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -10588,17 +13092,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "smoke_script", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "alert_chain_smoke", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Alert chain smoke script", "langfuse_config_change_authorized": false, @@ -10623,6 +13139,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -10632,10 +13153,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -10673,6 +13198,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -10689,10 +13222,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 1245, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "alert_chain_smoke_script", @@ -10728,6 +13265,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -10739,6 +13284,8 @@ "action_buttons_allowed": false, "active_scan_authorized": false, "affected_scope": "pending_owner_response", + "alert_chain_health_accepted": false, + "alert_chain_health_ref": null, "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "blocked_actions": [ @@ -10769,17 +13316,29 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "config_kind": "smoke_script", "control_tier": "C1", + "cross_project_notification_accepted": false, + "cross_project_notification_ref": null, "decision": "pending_owner_response", "decision_reason": "pending_owner_response", "expected_scope": "ops_alert_chain_smoke", "exporter_deploy_authorized": false, + "false_green_risk_review": "pending_owner_response", + "false_green_risk_review_accepted": false, "followup_owner": "pending_owner_response", "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, + "incident_context_accepted": false, + "incident_context_ref": null, "kubectl_action_authorized": false, "label": "Ops alert chain smoke script", "langfuse_config_change_authorized": false, @@ -10804,6 +13363,11 @@ "reject_execution_request", "request_supplement", "ready_for_monitoring_review", + "incident_recovery_backfill_required", + "no_false_green_supplement_required", + "receiver_receipt_gap_required", + "stale_or_silenced_alert_review_required", + "post_reload_readback_required", "owner_review_only_update", "waiting_runtime_gate" ], @@ -10813,10 +13377,14 @@ "owner_response_ref": null, "owner_response_rejected": false, "owner_role_or_team": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "post_reload_readback_plan_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, "receiver_owner": "pending_owner_response", "receiver_owner_accepted": false, + "receiver_receipt_proof_accepted": false, + "receiver_receipt_proof_ref": null, "receiver_route_change_authorized": false, "recipient_confirmed": false, "redacted_evidence_refs": [], @@ -10854,6 +13422,14 @@ "reload_owner_present", "receiver_owner_present", "route_smoke_plan_present", + "incident_context_present", + "alert_chain_health_not_route_only", + "receiver_receipt_proof_metadata_only", + "stale_alert_review_present", + "silence_or_dedup_review_present", + "false_green_risk_review_present", + "post_reload_readback_plan_present", + "cross_project_notification_present", "noise_budget_owner_present", "maintenance_window_present", "rollback_owner_present", @@ -10870,10 +13446,14 @@ "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, "signoz_rule_apply_authorized": false, + "silence_or_dedup_review": "pending_owner_response", + "silence_or_dedup_review_accepted": false, "silence_policy_change_authorized": false, "source_line_count": 267, "ssh_read_authorized": false, "ssh_write_authorized": false, + "stale_alert_review": "pending_owner_response", + "stale_alert_review_accepted": false, "status": "waiting_owner_response", "supplement_requested": false, "surface_id": "ops_alert_chain_smoke_script", @@ -10908,6 +13488,14 @@ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -10944,6 +13532,12 @@ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button" ], "execution_boundaries": { @@ -10952,6 +13546,7 @@ "alert_chain_smoke_authorized": false, "alertmanager_reload_authorized": false, "exporter_deploy_authorized": false, + "false_green_acceptance_authorized": false, "grafana_dashboard_apply_authorized": false, "host_write_authorized": false, "kubectl_action_authorized": false, @@ -10964,9 +13559,12 @@ "owner_response_accepted": false, "production_write_authorized": false, "prometheus_reload_authorized": false, + "raw_alert_payload_storage_allowed": false, + "receiver_health_without_receipt_accepted": false, "receiver_route_change_authorized": false, "remote_write_change_authorized": false, "request_dispatch_authorized": false, + "route_200_alert_chain_health_accepted": false, "runtime_execution_authorized": false, "secret_value_collection_allowed": false, "sentry_deploy_authorized": false, @@ -10977,8 +13575,8 @@ "telegram_send_authorized": false, "webhook_receiver_change_authorized": false }, - "generated_at": "2026-06-15T09:20:00+08:00", - "git_commit": "802c4e5a", + "generated_at": "2026-06-15T18:20:00+08:00", + "git_commit": "0def6daf", "next_steps": [ "等待 owner response;未收到前不得更新 received / accepted / rejected count。", "收到回覆後先做欄位完整性、敏感 payload 隔離、reload / send / smoke execution request 拒收。", @@ -11005,6 +13603,26 @@ "lane_id": "ready_for_monitoring_review", "meaning": "metadata 合格後,只能進 monitoring reviewer review。" }, + { + "lane_id": "incident_recovery_backfill_required", + "meaning": "事故後只看到服務恢復時,要求補 incident context、receiver receipt、stale / silence review 與 post-check refs。" + }, + { + "lane_id": "no_false_green_supplement_required", + "meaning": "只用 route 200、container up、dashboard up 或 UI 可見代表告警健康時,要求補 no-false-green 證據。" + }, + { + "lane_id": "receiver_receipt_gap_required", + "meaning": "缺 Telegram / webhook / receiver receipt proof 或 delivery state 時,不得接受告警鏈路健康。" + }, + { + "lane_id": "stale_or_silenced_alert_review_required", + "meaning": "缺 stale alert、silence、dedup、inhibit 或 maintenance rule review 時,要求補件。" + }, + { + "lane_id": "post_reload_readback_required", + "meaning": "reload / deploy / rule change 後必須有 readback、metrics、receipt 與 rollback stop condition。" + }, { "lane_id": "owner_review_only_update", "meaning": "只允許更新只讀 owner review ledger,不得 reload、send Telegram 或 fire alert。" @@ -11067,6 +13685,38 @@ "check_id": "route_smoke_plan_present", "instruction": "route smoke / receipt proof 必須是計畫或脫敏證據 ref,不得直接 fire alert。" }, + { + "check_id": "incident_context_present", + "instruction": "事故回補必須有 incident / change / outage context ref;不得只寫服務已恢復。" + }, + { + "check_id": "alert_chain_health_not_route_only", + "instruction": "告警鏈路健康不得只用 public route 200 或 UI 可見判定,必須包含 rule、state、receiver 與 receipt/ref。" + }, + { + "check_id": "receiver_receipt_proof_metadata_only", + "instruction": "receiver receipt proof 只能是脫敏 ref、hash、message id 或 ticket,不得貼 raw notification payload。" + }, + { + "check_id": "stale_alert_review_present", + "instruction": "必須確認告警是否 stale、pending、resolved 未清或資料來源停止更新。" + }, + { + "check_id": "silence_or_dedup_review_present", + "instruction": "必須確認 silence、mute、dedup、inhibit 或 maintenance rule 是否造成 false green。" + }, + { + "check_id": "false_green_risk_review_present", + "instruction": "必須列 no-false-green 判定,避免把 route up、容器 up 或 dashboard up 當作告警鏈路 up。" + }, + { + "check_id": "post_reload_readback_plan_present", + "instruction": "若後續有 reload / deploy,必須先有 post-reload readback plan 與 stop condition。" + }, + { + "check_id": "cross_project_notification_present", + "instruction": "若影響 AwoooP、IwoooS、agent-bounty、StockPlatform、公開網站或監控,需有跨專案通知 ref。" + }, { "check_id": "noise_budget_owner_present", "instruction": "告警噪音、silence、dedup 與測試通知必須有 noise budget owner。" @@ -11100,15 +13750,19 @@ "status": "owner_response_acceptance_ledger_ready_no_runtime_action", "summary": { "acceptance_candidate_count": 60, - "acceptance_field_count": 30, + "acceptance_field_count": 38, "action_button_count": 0, "active_scan_authorized_count": 0, + "alert_chain_health_accepted_count": 0, "alert_chain_smoke_authorized_count": 0, "alertmanager_reload_authorized_count": 0, - "blocked_action_count": 28, + "blocked_action_count": 34, + "cross_project_notification_accepted_count": 0, "exporter_deploy_authorized_count": 0, + "false_green_risk_review_accepted_count": 0, "grafana_dashboard_apply_authorized_count": 0, "host_write_authorized_count": 0, + "incident_context_accepted_count": 0, "kubectl_action_authorized_count": 0, "langfuse_config_change_authorized_count": 0, "live_alert_fire_authorized_count": 0, @@ -11119,32 +13773,36 @@ "noise_budget_owner_accepted_count": 0, "notification_route_change_authorized_count": 0, "otel_collector_reload_authorized_count": 0, - "outcome_lane_count": 7, + "outcome_lane_count": 12, "owner_response_accepted_count": 0, "owner_response_quarantined_count": 0, "owner_response_received_count": 0, "owner_response_rejected_count": 0, + "post_reload_readback_plan_accepted_count": 0, "production_write_authorized_count": 0, "prometheus_reload_authorized_count": 0, "receiver_owner_accepted_count": 0, + "receiver_receipt_proof_accepted_count": 0, "receiver_route_change_authorized_count": 0, "recipient_confirmed_count": 0, "reload_owner_accepted_count": 0, "remote_write_change_authorized_count": 0, "request_sent_count": 0, "required_owner_field_count": 14, - "reviewer_check_count": 15, + "reviewer_check_count": 23, "rollback_owner_accepted_count": 0, "route_smoke_accepted_count": 0, "runtime_gate_count": 0, "secret_value_collection_allowed_count": 0, "sentry_deploy_authorized_count": 0, "signoz_rule_apply_authorized_count": 0, + "silence_or_dedup_review_accepted_count": 0, "silence_policy_change_authorized_count": 0, "source_request_draft_count": 60, "source_surface_count": 60, "ssh_read_authorized_count": 0, "ssh_write_authorized_count": 0, + "stale_alert_review_accepted_count": 0, "supplement_requested_count": 0, "telegram_send_authorized_count": 0, "validation_plan_accepted_count": 0, diff --git a/scripts/security/high-value-config-control-coverage.py b/scripts/security/high-value-config-control-coverage.py index 47ae103f0..5c79bddfc 100644 --- a/scripts/security/high-value-config-control-coverage.py +++ b/scripts/security/high-value-config-control-coverage.py @@ -141,8 +141,8 @@ CONTROL_STATUS_BY_CATEGORY = { "next_owner_action": "補 repo owner、external agent owner、treasury owner、runtime gate owner、maintenance window、rollback owner 與 validation plan。", }, "monitoring_alerting_observability": { - "coverage_status": "owner_response_acceptance_ledger_ready_needs_live_route_evidence", - "coverage_percent": 66, + "coverage_status": "alert_chain_no_false_green_backfill_ready_needs_live_evidence_receipt", + "coverage_percent": 68, "evidence_refs": [ "docs/security/IWOOOS-CONFIG-CONTROL-INVENTORY.md", "docs/security/MONITORING-ALERTING-OBSERVABILITY-INVENTORY.md", @@ -153,8 +153,8 @@ CONTROL_STATUS_BY_CATEGORY = { "docs/security/monitoring-owner-response-acceptance.snapshot.json", "docs/schemas/monitoring_alerting_observability_inventory_v1.schema.json", ], - "current_gap": "已固定 60 份 monitoring / alerting / observability owner response acceptance candidate;仍缺 owner response、live config hash、rule diff、receiver diff、reload owner、route smoke、receipt proof、noise budget owner 與 maintenance window。", - "next_owner_action": "補 Prometheus / Alertmanager / Grafana / SigNoz / Sentry / Langfuse / Telegram owner、live drift evidence、reload window、receiver owner、route smoke plan、noise budget、rollback owner 與 no-secret-value evidence。", + "current_gap": "已固定 60 份 monitoring / alerting / observability owner response acceptance candidate,並新增告警鏈路 no-false-green 回補欄位;仍缺 owner response、live config hash、rule diff、receiver diff、receipt proof、stale / silence review、post-reload readback、noise budget owner 與 maintenance window。", + "next_owner_action": "補 Prometheus / Alertmanager / Grafana / SigNoz / Sentry / Langfuse / Telegram owner、live drift evidence、reload window、receiver owner、receipt proof、stale alert review、silence / dedup review、route smoke plan、noise budget、rollback owner 與 no-secret-value evidence。", }, "docker_compose_systemd_host_config": { "coverage_status": "incident_recovery_backfill_ready_needs_live_owner_evidence", @@ -382,6 +382,7 @@ def build_report(root: Path, generated_at: str | None) -> dict[str, Any]: "restore_recovery_backfill_ready_needs_owner_live_evidence", "owner_response_acceptance_ledger_ready_needs_network_owner", "owner_response_acceptance_ledger_ready_needs_live_route_evidence", + "alert_chain_no_false_green_backfill_ready_needs_live_evidence_receipt", "change_evidence_acceptance_ready_needs_network_owner_evidence", "incident_change_evidence_acceptance_ready_needs_network_owner_evidence", "policy_ready_needs_drift_evidence", diff --git a/scripts/security/iwooos-config-control-guard.py b/scripts/security/iwooos-config-control-guard.py index 47e82cf43..7f2c1e95e 100644 --- a/scripts/security/iwooos-config-control-guard.py +++ b/scripts/security/iwooos-config-control-guard.py @@ -25,7 +25,7 @@ EXPECTED_CATEGORIES = { "public_admin_api_runtime_config": 66, "backup_restore_credential": 64, "agent_bounty_protocol_runtime": 68, - "monitoring_alerting_observability": 66, + "monitoring_alerting_observability": 68, "docker_compose_systemd_host_config": 58, "ssh_firewall_network_access": 62, "ai_provider_model_routing": 60, @@ -356,16 +356,21 @@ ARTIFACT_SPECS = [ "status": "owner_response_acceptance_ledger_ready_no_runtime_action", "list_counts": { "acceptance_candidates": 60, - "blocked_actions": 28, - "reviewer_checks": 15, - "outcome_lanes": 7, + "blocked_actions": 34, + "reviewer_checks": 23, + "outcome_lanes": 12, "required_owner_fields": 14, }, "summary_counts": { "acceptance_candidate_count": 60, "write_capable_acceptance_candidate_count": 11, + "acceptance_field_count": 38, + "reviewer_check_count": 23, + "outcome_lane_count": 12, + "blocked_action_count": 34, "owner_response_received_count": 0, "owner_response_accepted_count": 0, + "false_green_risk_review_accepted_count": 0, "runtime_gate_count": 0, }, }, diff --git a/scripts/security/monitoring-owner-response-acceptance.py b/scripts/security/monitoring-owner-response-acceptance.py index 2b84b30c9..4b1824cb1 100644 --- a/scripts/security/monitoring-owner-response-acceptance.py +++ b/scripts/security/monitoring-owner-response-acceptance.py @@ -48,6 +48,14 @@ ACCEPTANCE_FIELDS = [ "reload_owner", "receiver_owner", "route_smoke_plan", + "incident_context_ref", + "alert_chain_health_ref", + "receiver_receipt_proof_ref", + "stale_alert_review", + "silence_or_dedup_review", + "false_green_risk_review", + "post_reload_readback_plan", + "cross_project_notification_ref", "maintenance_window", "rollback_owner", "validation_plan", @@ -67,6 +75,14 @@ REVIEWER_CHECKS = [ {"check_id": "reload_owner_present", "instruction": "Prometheus / Alertmanager / OTEL / Sentry 類變更必須有 reload / deploy owner。"}, {"check_id": "receiver_owner_present", "instruction": "receiver route、Telegram receipt 與 notification policy 必須有 receiver owner。"}, {"check_id": "route_smoke_plan_present", "instruction": "route smoke / receipt proof 必須是計畫或脫敏證據 ref,不得直接 fire alert。"}, + {"check_id": "incident_context_present", "instruction": "事故回補必須有 incident / change / outage context ref;不得只寫服務已恢復。"}, + {"check_id": "alert_chain_health_not_route_only", "instruction": "告警鏈路健康不得只用 public route 200 或 UI 可見判定,必須包含 rule、state、receiver 與 receipt/ref。"}, + {"check_id": "receiver_receipt_proof_metadata_only", "instruction": "receiver receipt proof 只能是脫敏 ref、hash、message id 或 ticket,不得貼 raw notification payload。"}, + {"check_id": "stale_alert_review_present", "instruction": "必須確認告警是否 stale、pending、resolved 未清或資料來源停止更新。"}, + {"check_id": "silence_or_dedup_review_present", "instruction": "必須確認 silence、mute、dedup、inhibit 或 maintenance rule 是否造成 false green。"}, + {"check_id": "false_green_risk_review_present", "instruction": "必須列 no-false-green 判定,避免把 route up、容器 up 或 dashboard up 當作告警鏈路 up。"}, + {"check_id": "post_reload_readback_plan_present", "instruction": "若後續有 reload / deploy,必須先有 post-reload readback plan 與 stop condition。"}, + {"check_id": "cross_project_notification_present", "instruction": "若影響 AwoooP、IwoooS、agent-bounty、StockPlatform、公開網站或監控,需有跨專案通知 ref。"}, {"check_id": "noise_budget_owner_present", "instruction": "告警噪音、silence、dedup 與測試通知必須有 noise budget owner。"}, {"check_id": "maintenance_window_present", "instruction": "reload、deploy、route change、smoke 或 notification send 必須另有維護窗口。"}, {"check_id": "rollback_owner_present", "instruction": "rollback owner、rollback ref 或 disable path 必須存在。"}, @@ -81,6 +97,11 @@ OUTCOME_LANES = [ {"lane_id": "reject_execution_request", "meaning": "夾帶 reload、deploy、route change、Telegram send、fire alert、SSH 或 kubectl 要求時拒收。"}, {"lane_id": "request_supplement", "meaning": "欄位不足、scope 不清、reload / receiver / route smoke / rollback / noise owner 缺失時要求補件。"}, {"lane_id": "ready_for_monitoring_review", "meaning": "metadata 合格後,只能進 monitoring reviewer review。"}, + {"lane_id": "incident_recovery_backfill_required", "meaning": "事故後只看到服務恢復時,要求補 incident context、receiver receipt、stale / silence review 與 post-check refs。"}, + {"lane_id": "no_false_green_supplement_required", "meaning": "只用 route 200、container up、dashboard up 或 UI 可見代表告警健康時,要求補 no-false-green 證據。"}, + {"lane_id": "receiver_receipt_gap_required", "meaning": "缺 Telegram / webhook / receiver receipt proof 或 delivery state 時,不得接受告警鏈路健康。"}, + {"lane_id": "stale_or_silenced_alert_review_required", "meaning": "缺 stale alert、silence、dedup、inhibit 或 maintenance rule review 時,要求補件。"}, + {"lane_id": "post_reload_readback_required", "meaning": "reload / deploy / rule change 後必須有 readback、metrics、receipt 與 rollback stop condition。"}, {"lane_id": "owner_review_only_update", "meaning": "只允許更新只讀 owner review ledger,不得 reload、send Telegram 或 fire alert。"}, {"lane_id": "waiting_runtime_gate", "meaning": "即使 owner response accepted,runtime gate 仍等待獨立人工批准。"}, ] @@ -113,6 +134,12 @@ BLOCKED_ACTIONS = [ "raw_monitoring_payload_storage", "accept_secret_value_evidence", "mark_owner_response_accepted_without_reviewer_record", + "mark_route_200_as_alert_chain_healthy", + "mark_receiver_healthy_without_receipt", + "accept_silence_without_owner", + "accept_stale_alert_without_review", + "accept_reload_without_postcheck", + "store_raw_alert_payload", "add_action_button", ] @@ -162,6 +189,14 @@ def acceptance_candidate(request: dict[str, Any]) -> dict[str, Any]: "reload_owner": "pending_owner_response", "receiver_owner": "pending_owner_response", "route_smoke_plan": "pending_owner_response", + "incident_context_ref": None, + "alert_chain_health_ref": None, + "receiver_receipt_proof_ref": None, + "stale_alert_review": "pending_owner_response", + "silence_or_dedup_review": "pending_owner_response", + "false_green_risk_review": "pending_owner_response", + "post_reload_readback_plan": "pending_owner_response", + "cross_project_notification_ref": None, "maintenance_window": "pending_owner_response", "rollback_owner": "pending_owner_response", "validation_plan": "pending_owner_response", @@ -186,6 +221,14 @@ def acceptance_candidate(request: dict[str, Any]) -> dict[str, Any]: "reload_owner_accepted": False, "receiver_owner_accepted": False, "route_smoke_accepted": False, + "incident_context_accepted": False, + "alert_chain_health_accepted": False, + "receiver_receipt_proof_accepted": False, + "stale_alert_review_accepted": False, + "silence_or_dedup_review_accepted": False, + "false_green_risk_review_accepted": False, + "post_reload_readback_plan_accepted": False, + "cross_project_notification_accepted": False, "maintenance_window_accepted": False, "rollback_owner_accepted": False, "validation_plan_accepted": False, @@ -262,6 +305,14 @@ def build_report( "reload_owner_accepted_count": 0, "receiver_owner_accepted_count": 0, "route_smoke_accepted_count": 0, + "incident_context_accepted_count": 0, + "alert_chain_health_accepted_count": 0, + "receiver_receipt_proof_accepted_count": 0, + "stale_alert_review_accepted_count": 0, + "silence_or_dedup_review_accepted_count": 0, + "false_green_risk_review_accepted_count": 0, + "post_reload_readback_plan_accepted_count": 0, + "cross_project_notification_accepted_count": 0, "maintenance_window_accepted_count": 0, "rollback_owner_accepted_count": 0, "validation_plan_accepted_count": 0, @@ -320,6 +371,10 @@ def build_report( "active_scan_authorized": False, "production_write_authorized": False, "runtime_execution_authorized": False, + "route_200_alert_chain_health_accepted": False, + "receiver_health_without_receipt_accepted": False, + "false_green_acceptance_authorized": False, + "raw_alert_payload_storage_allowed": False, "action_buttons_allowed": False, "not_authorization": True, }, diff --git a/scripts/security/security-mirror-progress-guard.py b/scripts/security/security-mirror-progress-guard.py index 62c7ed904..cf45752ff 100755 --- a/scripts/security/security-mirror-progress-guard.py +++ b/scripts/security/security-mirror-progress-guard.py @@ -3252,12 +3252,12 @@ def validate(root: Path) -> None: assert_equal( "high_value_config_coverage.coverage_categories.monitoring.coverage_percent", monitoring_category["coverage_percent"], - 66, + 68, ) assert_equal( "high_value_config_coverage.coverage_categories.monitoring.coverage_status", monitoring_category["coverage_status"], - "owner_response_acceptance_ledger_ready_needs_live_route_evidence", + "alert_chain_no_false_green_backfill_ready_needs_live_evidence_receipt", ) for evidence_ref in [ "docs/security/MONITORING-ALERTING-OBSERVABILITY-INVENTORY.md", @@ -5218,11 +5218,11 @@ def validate(root: Path) -> None: "acceptance_candidate_count": 60, "write_capable_acceptance_candidate_count": 11, "live_evidence_required_candidate_count": 60, - "acceptance_field_count": 30, + "acceptance_field_count": 38, "required_owner_field_count": 14, - "reviewer_check_count": 15, - "outcome_lane_count": 7, - "blocked_action_count": 28, + "reviewer_check_count": 23, + "outcome_lane_count": 12, + "blocked_action_count": 34, "request_sent_count": 0, "recipient_confirmed_count": 0, "owner_response_received_count": 0, @@ -5235,6 +5235,14 @@ def validate(root: Path) -> None: "reload_owner_accepted_count": 0, "receiver_owner_accepted_count": 0, "route_smoke_accepted_count": 0, + "incident_context_accepted_count": 0, + "alert_chain_health_accepted_count": 0, + "receiver_receipt_proof_accepted_count": 0, + "stale_alert_review_accepted_count": 0, + "silence_or_dedup_review_accepted_count": 0, + "false_green_risk_review_accepted_count": 0, + "post_reload_readback_plan_accepted_count": 0, + "cross_project_notification_accepted_count": 0, "maintenance_window_accepted_count": 0, "rollback_owner_accepted_count": 0, "validation_plan_accepted_count": 0, @@ -5301,23 +5309,23 @@ def validate(root: Path) -> None: assert_equal( "monitoring_owner_response_acceptance.reviewer_checks.count", len(monitoring_owner_response_acceptance["reviewer_checks"]), - 15, + 23, ) assert_equal( "monitoring_owner_response_acceptance.outcome_lanes.count", len(monitoring_owner_response_acceptance["outcome_lanes"]), - 7, + 12, ) assert_equal( "monitoring_owner_response_acceptance.blocked_actions.count", len(monitoring_owner_response_acceptance["blocked_actions"]), - 28, + 34, ) for item in monitoring_owner_response_acceptance["acceptance_candidates"]: assert_equal( f"monitoring_owner_response_acceptance.{item['acceptance_candidate_id']}.acceptance_fields", len(item["acceptance_fields"]), - 30, + 38, ) assert_equal( f"monitoring_owner_response_acceptance.{item['acceptance_candidate_id']}.required_owner_fields", @@ -5327,17 +5335,17 @@ def validate(root: Path) -> None: assert_equal( f"monitoring_owner_response_acceptance.{item['acceptance_candidate_id']}.reviewer_checks", len(item["reviewer_checks"]), - 15, + 23, ) assert_equal( f"monitoring_owner_response_acceptance.{item['acceptance_candidate_id']}.outcome_lanes", len(item["outcome_lanes"]), - 7, + 12, ) assert_equal( f"monitoring_owner_response_acceptance.{item['acceptance_candidate_id']}.blocked_actions", len(item["blocked_actions"]), - 28, + 34, ) assert_true( f"monitoring_owner_response_acceptance.{item['acceptance_candidate_id']}.not_approval", @@ -6669,6 +6677,19 @@ def validate(root: Path) -> None: "monitoring_alerting_observability_inventory_action_button_count": 0, "monitoring_alerting_observability_inventory_coverage_percent_before_inventory": 56, "monitoring_alerting_observability_inventory_coverage_percent_after_inventory": 62, + "monitoring_owner_response_acceptance_candidate_count": 60, + "monitoring_owner_response_acceptance_acceptance_field_count": 38, + "monitoring_owner_response_acceptance_reviewer_check_count": 23, + "monitoring_owner_response_acceptance_outcome_lane_count": 12, + "monitoring_owner_response_acceptance_blocked_action_count": 34, + "monitoring_owner_response_acceptance_receiver_receipt_proof_accepted_count": 0, + "monitoring_owner_response_acceptance_stale_alert_review_accepted_count": 0, + "monitoring_owner_response_acceptance_silence_or_dedup_review_accepted_count": 0, + "monitoring_owner_response_acceptance_false_green_risk_review_accepted_count": 0, + "monitoring_owner_response_acceptance_post_reload_readback_plan_accepted_count": 0, + "monitoring_owner_response_acceptance_cross_project_notification_accepted_count": 0, + "monitoring_owner_response_acceptance_runtime_gate_count": 0, + "monitoring_owner_response_acceptance_coverage_percent_after_backfill": 68, } for key, expected in expected_monitoring_alerting_observability_projection_summary.items(): assert_equal( @@ -16313,7 +16334,7 @@ def validate(root: Path) -> None: assert_text_contains( "iwooos_page.high_value_config_control_coverage_monitoring_percent", iwooos_projection_page, - "{ key: 'monitoring', rank: 'P1-4', value: '62%'", + "{ key: 'monitoring', rank: 'P1-4', value: '68%'", ) assert_text_before( "iwooos_page.high_value_config_control_coverage_before_owner_packet", @@ -16467,6 +16488,16 @@ def validate(root: Path) -> None: "monitoring_alerting_observability_inventory_reload_owner_accepted_count=0", "monitoring_alerting_observability_inventory_receiver_owner_accepted_count=0", "monitoring_alerting_observability_inventory_route_smoke_accepted_count=0", + "monitoring_alerting_observability_coverage_percent=68", + "monitoring_owner_response_acceptance_reviewer_check_count=23", + "monitoring_owner_response_acceptance_outcome_lane_count=12", + "monitoring_owner_response_acceptance_blocked_action_count=34", + "monitoring_owner_response_acceptance_false_green_risk_review_accepted_count=0", + "monitoring_owner_response_acceptance_receiver_receipt_proof_accepted_count=0", + "monitoring_owner_response_acceptance_stale_alert_review_accepted_count=0", + "monitoring_owner_response_acceptance_silence_or_dedup_review_accepted_count=0", + "monitoring_owner_response_acceptance_post_reload_readback_plan_accepted_count=0", + "monitoring_owner_response_acceptance_runtime_gate_count=0", "docker_compose_action_authorized=false", "systemctl_action_authorized=false", "repair_bot_execution_authorized=false",