diff --git a/apps/web/messages/en.json b/apps/web/messages/en.json index 14bd0e414..e4141cb0d 100644 --- a/apps/web/messages/en.json +++ b/apps/web/messages/en.json @@ -1844,6 +1844,49 @@ "guard": "active runtime gates=0; action buttons=false" } } + }, + "hostOwnerDecisionRecordDraftReviewOutcomes": { + "title": "Host Owner Decision Record Draft Review Outcome Lanes", + "subtitle": "After draft review checklist, cases can only enter these read-only outcome lanes. This shows next steps and does not mark review passed, create decision records, or open runtime gates.", + "laneLabel": "Review outcome", + "nextLabel": "Next step", + "items": { + "readyForDecisionRecordWriteup": { + "title": "Ready for decision record write-up", + "body": "When scope, scan mode, credential boundary, maintenance, rollback, validation, and runtime separation are readable, the case can only become a formal decision record write-up candidate.", + "next": "display write-up candidate; record created=false" + }, + "scopeDraftIncomplete": { + "title": "Scope draft incomplete", + "body": "When the scope draft lacks host, network, service, exclusion, or observation intent, it returns to scope draft completion.", + "next": "collect scope statement; no record creation" + }, + "scanModeAmbiguous": { + "title": "Scan mode ambiguous", + "body": "When scan mode can still be mistaken for authorization, it returns to scan mode draft and scope explanation.", + "next": "refine scan mode wording; scan authorized=false" + }, + "credentialBoundaryIncomplete": { + "title": "Credential boundary incomplete", + "body": "When credential boundary is unclear about metadata-only handling, owner, or retention, it returns to credential draft completion.", + "next": "collect metadata-only boundary; secret collection=false" + }, + "maintenanceConstraintsIncomplete": { + "title": "Maintenance constraints incomplete", + "body": "When maintenance window, constraints, or impact boundary are unreadable, the case cannot enter formal decision record write-up.", + "next": "collect constraints; host update=false" + }, + "rollbackOwnerIncomplete": { + "title": "Rollback owner incomplete", + "body": "When rollback owner, recovery path, or human contact is unreadable, the case cannot enter later approval semantics.", + "next": "collect rollback owner; approval record=false" + }, + "runtimeGateStillRequired": { + "title": "Runtime gate still required", + "body": "Any later host action must still wait for a separate runtime gate and cannot execute from draft review outcome.", + "next": "active runtime gates=0; action buttons=false" + } + } } }, "tickets": { diff --git a/apps/web/messages/zh-TW.json b/apps/web/messages/zh-TW.json index 68df91cd7..6d981284e 100644 --- a/apps/web/messages/zh-TW.json +++ b/apps/web/messages/zh-TW.json @@ -1845,6 +1845,49 @@ "guard": "active runtime gates=0；action buttons=false" } } + }, + "hostOwnerDecisionRecordDraftReviewOutcomes": { + "title": "主機 Owner Decision Record Draft Review Outcome Lanes", + "subtitle": "Draft review checklist 後只能進入這些只讀結果分流。這裡顯示下一步，不會標記 review passed、不會建立 decision record、不會開 runtime gate。", + "laneLabel": "Review outcome", + "nextLabel": "下一步", + "items": { + "readyForDecisionRecordWriteup": { + "title": "Ready for decision record write-up", + "body": "scope、scan mode、credential boundary、maintenance、rollback、validation 與 runtime separation 都可讀時，只能進入正式 decision record 撰寫候選。", + "next": "顯示 write-up candidate；record created=false" + }, + "scopeDraftIncomplete": { + "title": "Scope draft incomplete", + "body": "scope 草稿缺主機、網段、服務、排除範圍或觀察目的時，回到 scope 草稿補件。", + "next": "補 scope statement；不建立 record" + }, + "scanModeAmbiguous": { + "title": "Scan mode ambiguous", + "body": "scan mode 仍可能被誤讀成授權時，回到 scan mode 草稿與 scope 說明。", + "next": "補 scan mode wording；scan authorized=false" + }, + "credentialBoundaryIncomplete": { + "title": "Credential boundary incomplete", + "body": "credential boundary 若不清楚 metadata-only、owner 或保存邊界，必須回到 credential 草稿補件。", + "next": "補 metadata-only boundary；secret collection=false" + }, + "maintenanceConstraintsIncomplete": { + "title": "Maintenance constraints incomplete", + "body": "維護窗口、限制條件或不可影響範圍不可讀時，不能進入正式決策紀錄撰寫。", + "next": "補 constraints；host update=false" + }, + "rollbackOwnerIncomplete": { + "title": "Rollback owner incomplete", + "body": "rollback owner、復原路徑或人工聯絡點不可讀時，不能建立後續批准語義。", + "next": "補 rollback owner；approval record=false" + }, + "runtimeGateStillRequired": { + "title": "Runtime gate still required", + "body": "任何後續主機動作仍要等待獨立 runtime gate，不能由 draft review outcome 執行。", + "next": "active runtime gates=0；action buttons=false" + } + } } }, "tickets": { diff --git a/apps/web/src/app/[locale]/iwooos/page.tsx b/apps/web/src/app/[locale]/iwooos/page.tsx index 8ef52ede9..2e7249bf8 100644 --- a/apps/web/src/app/[locale]/iwooos/page.tsx +++ b/apps/web/src/app/[locale]/iwooos/page.tsx @@ -172,6 +172,13 @@ type HostOwnerDecisionRecordDraftReviewItem = { tone: 'steady' | 'warn' | 'locked' } +type HostOwnerDecisionRecordDraftReviewOutcomeLane = { + key: string + lane: string + icon: typeof ShieldCheck + tone: 'steady' | 'warn' | 'locked' +} + const postureMetrics: PostureMetric[] = [ { key: 'overall', value: '58%', tone: 'warn' }, { key: 'framework', value: '80-85%', tone: 'steady' }, @@ -403,6 +410,16 @@ const hostOwnerDecisionRecordDraftReviewItems: HostOwnerDecisionRecordDraftRevie { key: 'runtimeGateStillClosed', check: 'RV7', icon: ShieldCheck, tone: 'locked' }, ] +const hostOwnerDecisionRecordDraftReviewOutcomeLanes: HostOwnerDecisionRecordDraftReviewOutcomeLane[] = [ + { key: 'readyForDecisionRecordWriteup', lane: 'DV1', icon: CheckCircle2, tone: 'steady' }, + { key: 'scopeDraftIncomplete', lane: 'DV2', icon: Radar, tone: 'warn' }, + { key: 'scanModeAmbiguous', lane: 'DV3', icon: Activity, tone: 'locked' }, + { key: 'credentialBoundaryIncomplete', lane: 'DV4', icon: Lock, tone: 'locked' }, + { key: 'maintenanceConstraintsIncomplete', lane: 'DV5', icon: Clock3, tone: 'warn' }, + { key: 'rollbackOwnerIncomplete', lane: 'DV6', icon: FileWarning, tone: 'warn' }, + { key: 'runtimeGateStillRequired', lane: 'DV7', icon: ShieldCheck, tone: 'locked' }, +] + const evidenceItems = [ 'iwooos-posture-projection.snapshot.json', 'security-rollout-policy.snapshot.json', @@ -1041,6 +1058,38 @@ function HostOwnerDecisionRecordDraftReviewCard({ item }: { item: HostOwnerDecis ) } +function HostOwnerDecisionRecordDraftReviewOutcomeCard({ + item, +}: { + item: HostOwnerDecisionRecordDraftReviewOutcomeLane +}) { + const t = useTranslations('iwooos.hostOwnerDecisionRecordDraftReviewOutcomes') + const Icon = item.icon + return ( +
+
+
+ + {t('laneLabel')} +
+ {item.lane} +
+

+ {t(`items.${item.key}.title` as never)} +

+

+ {t(`items.${item.key}.body` as never)} +

+
+
{t('nextLabel')}
+
+ {t(`items.${item.key}.next` as never)} +
+
+
+ ) +} + export default function IwoooSPage({ params }: { params: { locale: string } }) { const t = useTranslations('iwooos') @@ -1393,6 +1442,26 @@ export default function IwoooSPage({ params }: { params: { locale: string } }) { +
+
+

{t('hostOwnerDecisionRecordDraftReviewOutcomes.title')}

+

+ {t('hostOwnerDecisionRecordDraftReviewOutcomes.subtitle')} +

+
+
+ {hostOwnerDecisionRecordDraftReviewOutcomeLanes.map(item => ( + + ))} +
+
+
None: "s2_25_iwooos_host_owner_decision_review_outcome_lanes", "s2_26_iwooos_host_owner_decision_record_draft_packets", "s2_27_iwooos_host_owner_decision_record_draft_review_checklist", + "s2_28_iwooos_host_owner_decision_record_draft_review_outcome_lanes", ] assert_equal( "progress_delta_ledger.delta_ids", @@ -468,6 +469,15 @@ def validate(root: Path) -> None: "host_decision_record_validation_metrics_review_check", "host_decision_record_runtime_gate_review_check", ] + expected_iwooos_host_owner_decision_record_draft_review_outcome_lane_ids = [ + "host_decision_record_ready_for_writeup_outcome_lane", + "host_decision_record_scope_draft_incomplete_outcome_lane", + "host_decision_record_scan_mode_ambiguous_outcome_lane", + "host_decision_record_credential_boundary_incomplete_outcome_lane", + "host_decision_record_maintenance_constraints_incomplete_outcome_lane", + "host_decision_record_rollback_owner_incomplete_outcome_lane", + "host_decision_record_runtime_gate_required_outcome_lane", + ] assert_equal( "iwooos_projection.summary.frontend_surface_coverage_group_count", iwooos_projection["summary"]["frontend_surface_coverage_group_count"], @@ -558,6 +568,11 @@ def validate(root: Path) -> None: iwooos_projection["summary"]["host_owner_decision_record_draft_review_checklist_item_count"], len(expected_iwooos_host_owner_decision_record_draft_review_checklist_item_ids), ) + assert_equal( + "iwooos_projection.summary.host_owner_decision_record_draft_review_outcome_lane_count", + iwooos_projection["summary"]["host_owner_decision_record_draft_review_outcome_lane_count"], + len(expected_iwooos_host_owner_decision_record_draft_review_outcome_lane_ids), + ) iwooos_progress = iwooos_projection["progress"] assert_equal("iwooos_projection.progress.overall_percent", iwooos_progress["overall_percent"], progress["overall_percent"]) assert_equal( @@ -1657,6 +1672,86 @@ def validate(root: Path) -> None: f"iwooos_projection.host_owner_decision_record_draft_review_checklist_items.{item['check_id']}.not_authorization", item["not_authorization"], ) + iwooos_host_owner_decision_record_draft_review_outcome_lanes = iwooos_projection[ + "host_owner_decision_record_draft_review_outcome_lanes" + ] + assert_equal( + "iwooos_projection.host_owner_decision_record_draft_review_outcome_lanes.ids", + [item["lane_id"] for item in iwooos_host_owner_decision_record_draft_review_outcome_lanes], + expected_iwooos_host_owner_decision_record_draft_review_outcome_lane_ids, + ) + assert_equal( + "iwooos_projection.host_owner_decision_record_draft_review_outcome_lanes.display_order", + [item["display_order"] for item in iwooos_host_owner_decision_record_draft_review_outcome_lanes], + list(range(1, len(expected_iwooos_host_owner_decision_record_draft_review_outcome_lane_ids) + 1)), + ) + expected_iwooos_host_owner_decision_record_draft_review_outcome_states = [ + "candidate_decision_record_writeup_only", + "needs_scope_statement_refresh", + "needs_scan_mode_wording_refresh", + "needs_credential_boundary_metadata_refresh", + "needs_maintenance_constraints_refresh", + "needs_rollback_owner_refresh", + "waiting_separate_runtime_gate", + ] + assert_equal( + "iwooos_projection.host_owner_decision_record_draft_review_outcome_lanes.outcome_states", + [item["outcome_state"] for item in iwooos_host_owner_decision_record_draft_review_outcome_lanes], + expected_iwooos_host_owner_decision_record_draft_review_outcome_states, + ) + for item in iwooos_host_owner_decision_record_draft_review_outcome_lanes: + assert_equal( + f"iwooos_projection.host_owner_decision_record_draft_review_outcome_lanes.{item['lane_id']}.display_mode", + item["display_mode"], + "owner_decision_record_draft_review_outcome_only", + ) + assert_equal( + f"iwooos_projection.host_owner_decision_record_draft_review_outcome_lanes.{item['lane_id']}.decision_record_review_passed_count", + item["decision_record_review_passed_count"], + 0, + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_draft_review_outcome_lanes.{item['lane_id']}.decision_record_created", + item["decision_record_created"], + ) + assert_equal( + f"iwooos_projection.host_owner_decision_record_draft_review_outcome_lanes.{item['lane_id']}.owner_decision_received_count", + item["owner_decision_received_count"], + 0, + ) + assert_equal( + f"iwooos_projection.host_owner_decision_record_draft_review_outcome_lanes.{item['lane_id']}.owner_decision_accepted_count", + item["owner_decision_accepted_count"], + 0, + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_draft_review_outcome_lanes.{item['lane_id']}.owner_approval_record_created", + item["owner_approval_record_created"], + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_draft_review_outcome_lanes.{item['lane_id']}.runtime_gate_opened", + item["runtime_gate_opened"], + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_draft_review_outcome_lanes.{item['lane_id']}.raw_payload_allowed", + item["raw_payload_allowed"], + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_draft_review_outcome_lanes.{item['lane_id']}.secret_value_collection_allowed", + item["secret_value_collection_allowed"], + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_draft_review_outcome_lanes.{item['lane_id']}.runtime_execution_authorized", + item["runtime_execution_authorized"], + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_draft_review_outcome_lanes.{item['lane_id']}.action_buttons_allowed", + item["action_buttons_allowed"], + ) + assert_true( + f"iwooos_projection.host_owner_decision_record_draft_review_outcome_lanes.{item['lane_id']}.not_authorization", + item["not_authorization"], + ) assert_equal( "iwooos_projection.non_blocking_lane_ids", iwooos_projection["non_blocking_lane_ids"], @@ -1693,6 +1788,7 @@ def validate(root: Path) -> None: "display_host_owner_decision_review_outcome_lanes", "display_host_owner_decision_record_draft_packets", "display_host_owner_decision_record_draft_review_checklist", + "display_host_owner_decision_record_draft_review_outcome_lanes", "display_evidence_refs", "display_forbidden_actions", ]: @@ -1750,6 +1846,10 @@ def validate(root: Path) -> None: "mark_host_owner_decision_record_draft_review_passed", "create_host_owner_decision_record_from_draft_review", "open_runtime_gate_from_owner_decision_record_draft_review", + "treat_host_owner_decision_record_draft_review_outcome_as_approval", + "mark_host_owner_decision_record_draft_review_outcome_passed", + "create_host_owner_decision_record_from_draft_review_outcome", + "open_runtime_gate_from_owner_decision_record_draft_review_outcome", "apply_runtime_blocking_control", "switch_github_primary", "production_deploy",