diff --git a/apps/web/messages/en.json b/apps/web/messages/en.json index 21b8d063b..9e78c36ee 100644 --- a/apps/web/messages/en.json +++ b/apps/web/messages/en.json @@ -2150,6 +2150,54 @@ "next": "active runtime gates=0; action buttons=false" } } + }, + "hostOwnerDecisionRecordFormalRecordQueue": { + "title": "Host Owner Decision Record Formal Record Queue Packets", + "subtitle": "Formal record queue packets only organize the data packets a future human formal-record queue would need to read. This does not enqueue, create decision records, mark accepted, create approval records, or open runtime gates.", + "packetLabel": "Queue packet", + "fieldLabel": "Queue field", + "items": { + "queueIdentityPacket": { + "title": "Queue identity packet", + "body": "Organizes candidate record id, version, owner, review scope, and trace source so a human queue can trace identity.", + "field": "identity trace; queue enqueued=0" + }, + "queueDecisionSummaryPacket": { + "title": "Queue decision summary packet", + "body": "Organizes decision summary, risk acceptance boundary, and no-execution statement without creating a formal decision record.", + "field": "decision summary; record created=false" + }, + "queueScopeExpiryPacket": { + "title": "Queue scope and expiry packet", + "body": "Organizes host, network, service, exclusion, observation intent, and expiry while remaining readable queue information only.", + "field": "scope / expiry; finalized=0" + }, + "queueScanLimitsPacket": { + "title": "Queue scan limits packet", + "body": "Organizes observe-only, future active scan, and credentialed scan limits so they cannot be mistaken for scan authorization.", + "field": "scan limits; scan authorized=false" + }, + "queueCredentialBoundaryPacket": { + "title": "Queue credential boundary packet", + "body": "Organizes metadata-only credential owner, retention, masking, and forbidden collection boundary.", + "field": "metadata-only boundary; secret collection=false" + }, + "queueMaintenanceRollbackPacket": { + "title": "Queue maintenance and rollback packet", + "body": "Organizes maintenance window, constraints, rollback owner, recovery path, and human contact.", + "field": "window / rollback; host update=false" + }, + "queueValidationRuntimeGatePacket": { + "title": "Queue validation and runtime gate packet", + "body": "Organizes validation evidence, post-check metrics, baseline pointer, and the separate runtime gate requirement.", + "field": "validation / runtime pointer; active gates=0" + }, + "queueNoExecutionAttestationPacket": { + "title": "Queue no-execution attestation packet", + "body": "Organizes the statement that nothing is executed, approved, or gate-opened so queue packets cannot be treated as authorization.", + "field": "not authorization; action buttons=false" + } + } } }, "tickets": { diff --git a/apps/web/messages/zh-TW.json b/apps/web/messages/zh-TW.json index 8c202d431..353649f45 100644 --- a/apps/web/messages/zh-TW.json +++ b/apps/web/messages/zh-TW.json @@ -1697,7 +1697,7 @@ }, "maintenanceWindowNotChange": { "title": "Maintenance window not change", - "body": "確認維護窗口只是未來候選條件，不代表可以更新 Kali 或調校主機。", + "body": "確認維護窗口只是未來候選條件，不代表可以進行 Kali 主機套件變更或主機調校。", "guard": "host update=false" }, "rollbackOwnerReadable": { @@ -2151,6 +2151,54 @@ "next": "active runtime gates=0；action buttons=false" } } + }, + "hostOwnerDecisionRecordFormalRecordQueue": { + "title": "主機 Owner Decision Record Formal Record Queue Packets", + "subtitle": "Formal record queue packets 只整理未來人工正式紀錄佇列需要看到的資料包。這裡不 enqueue、不建立 decision record、不標記 accepted、不建立 approval record、不開 runtime gate。", + "packetLabel": "Queue packet", + "fieldLabel": "佇列欄位", + "items": { + "queueIdentityPacket": { + "title": "Queue identity packet", + "body": "整理 candidate record id、版本、owner、review scope 與 trace source，讓人工佇列能追蹤身份。", + "field": "identity trace；queue enqueued=0" + }, + "queueDecisionSummaryPacket": { + "title": "Queue decision summary packet", + "body": "整理 decision summary、風險接受邊界與不執行聲明，但不建立正式 decision record。", + "field": "decision summary；record created=false" + }, + "queueScopeExpiryPacket": { + "title": "Queue scope and expiry packet", + "body": "整理 host、network、service、exclusion、觀察目的與到期時間，仍只作為人工佇列可讀資訊。", + "field": "scope / expiry；finalized=0" + }, + "queueScanLimitsPacket": { + "title": "Queue scan limits packet", + "body": "整理 observe-only、future active scan 與 credentialed scan limits，避免被誤讀成掃描授權。", + "field": "scan limits；scan authorized=false" + }, + "queueCredentialBoundaryPacket": { + "title": "Queue credential boundary packet", + "body": "整理 metadata-only credential owner、retention、masking 與 forbidden collection 邊界。", + "field": "metadata-only boundary；secret collection=false" + }, + "queueMaintenanceRollbackPacket": { + "title": "Queue maintenance and rollback packet", + "body": "整理維護窗口、限制條件、rollback owner、復原路徑與人工聯絡點。", + "field": "window / rollback；host update=false" + }, + "queueValidationRuntimeGatePacket": { + "title": "Queue validation and runtime gate packet", + "body": "整理 validation evidence、post-check metrics、baseline pointer 與獨立 runtime gate 需求。", + "field": "validation / runtime pointer；active gates=0" + }, + "queueNoExecutionAttestationPacket": { + "title": "Queue no-execution attestation packet", + "body": "整理仍不執行、不批准、不開 gate 的聲明，避免佇列資料包被當成授權。", + "field": "not authorization；action buttons=false" + } + } } }, "tickets": { diff --git a/apps/web/src/app/[locale]/iwooos/page.tsx b/apps/web/src/app/[locale]/iwooos/page.tsx index 533ef3824..c9fb15657 100644 --- a/apps/web/src/app/[locale]/iwooos/page.tsx +++ b/apps/web/src/app/[locale]/iwooos/page.tsx @@ -222,6 +222,13 @@ type HostOwnerDecisionRecordFormalCandidateReviewOutcomeLane = { tone: 'steady' | 'warn' | 'locked' } +type HostOwnerDecisionRecordFormalRecordQueuePacket = { + key: string + packet: string + icon: typeof ShieldCheck + tone: 'steady' | 'warn' | 'locked' +} + const postureMetrics: PostureMetric[] = [ { key: 'overall', value: '58%', tone: 'warn' }, { key: 'framework', value: '80-85%', tone: 'steady' }, @@ -524,6 +531,17 @@ const hostOwnerDecisionRecordFormalCandidateReviewOutcomeLanes: HostOwnerDecisio { key: 'runtimeGateStillRequired', lane: 'FV8', icon: ShieldCheck, tone: 'locked' }, ] +const hostOwnerDecisionRecordFormalRecordQueuePackets: HostOwnerDecisionRecordFormalRecordQueuePacket[] = [ + { key: 'queueIdentityPacket', packet: 'FQ1', icon: FileText, tone: 'warn' }, + { key: 'queueDecisionSummaryPacket', packet: 'FQ2', icon: ClipboardCheck, tone: 'warn' }, + { key: 'queueScopeExpiryPacket', packet: 'FQ3', icon: Radar, tone: 'warn' }, + { key: 'queueScanLimitsPacket', packet: 'FQ4', icon: Activity, tone: 'locked' }, + { key: 'queueCredentialBoundaryPacket', packet: 'FQ5', icon: Lock, tone: 'locked' }, + { key: 'queueMaintenanceRollbackPacket', packet: 'FQ6', icon: Clock3, tone: 'warn' }, + { key: 'queueValidationRuntimeGatePacket', packet: 'FQ7', icon: ShieldCheck, tone: 'locked' }, + { key: 'queueNoExecutionAttestationPacket', packet: 'FQ8', icon: FileWarning, tone: 'locked' }, +] + const evidenceItems = [ 'iwooos-posture-projection.snapshot.json', 'security-rollout-policy.snapshot.json', @@ -1378,6 +1396,38 @@ function HostOwnerDecisionRecordFormalCandidateReviewOutcomeCard({ ) } +function HostOwnerDecisionRecordFormalRecordQueueCard({ + item, +}: { + item: HostOwnerDecisionRecordFormalRecordQueuePacket +}) { + const t = useTranslations('iwooos.hostOwnerDecisionRecordFormalRecordQueue') + const Icon = item.icon + return ( +
+
+
+ + {t('packetLabel')} +
+ {item.packet} +
+

+ {t(`items.${item.key}.title` as never)} +

+

+ {t(`items.${item.key}.body` as never)} +

+
+
{t('fieldLabel')}
+
+ {t(`items.${item.key}.field` as never)} +
+
+
+ ) +} + export default function IwoooSPage({ params }: { params: { locale: string } }) { const t = useTranslations('iwooos') @@ -1870,6 +1920,26 @@ export default function IwoooSPage({ params }: { params: { locale: string } }) { +
+
+

{t('hostOwnerDecisionRecordFormalRecordQueue.title')}

+

+ {t('hostOwnerDecisionRecordFormalRecordQueue.subtitle')} +

+
+
+ {hostOwnerDecisionRecordFormalRecordQueuePackets.map(item => ( + + ))} +
+
+
None: "s2_32_iwooos_host_owner_decision_record_formal_candidate_packets", "s2_33_iwooos_host_owner_decision_record_formal_candidate_review_checklist", "s2_34_iwooos_host_owner_decision_record_formal_candidate_review_outcome_lanes", + "s2_35_iwooos_host_owner_decision_record_formal_record_queue_packets", ] assert_equal( "progress_delta_ledger.delta_ids", @@ -539,6 +540,16 @@ def validate(root: Path) -> None: "host_decision_record_formal_candidate_review_maintenance_rollback_incomplete_outcome_lane", "host_decision_record_formal_candidate_review_runtime_gate_required_outcome_lane", ] + expected_iwooos_host_owner_decision_record_formal_record_queue_packet_ids = [ + "host_decision_record_formal_record_queue_identity_packet", + "host_decision_record_formal_record_queue_decision_summary_packet", + "host_decision_record_formal_record_queue_scope_expiry_packet", + "host_decision_record_formal_record_queue_scan_limits_packet", + "host_decision_record_formal_record_queue_credential_boundary_packet", + "host_decision_record_formal_record_queue_maintenance_rollback_packet", + "host_decision_record_formal_record_queue_validation_runtime_gate_packet", + "host_decision_record_formal_record_queue_no_execution_attestation_packet", + ] assert_equal( "iwooos_projection.summary.frontend_surface_coverage_group_count", iwooos_projection["summary"]["frontend_surface_coverage_group_count"], @@ -664,6 +675,11 @@ def validate(root: Path) -> None: iwooos_projection["summary"]["host_owner_decision_record_formal_candidate_review_outcome_lane_count"], len(expected_iwooos_host_owner_decision_record_formal_candidate_review_outcome_lane_ids), ) + assert_equal( + "iwooos_projection.summary.host_owner_decision_record_formal_record_queue_packet_count", + iwooos_projection["summary"]["host_owner_decision_record_formal_record_queue_packet_count"], + len(expected_iwooos_host_owner_decision_record_formal_record_queue_packet_ids), + ) iwooos_progress = iwooos_projection["progress"] assert_equal("iwooos_projection.progress.overall_percent", iwooos_progress["overall_percent"], progress["overall_percent"]) assert_equal( @@ -2352,6 +2368,92 @@ def validate(root: Path) -> None: f"iwooos_projection.host_owner_decision_record_formal_candidate_review_outcome_lanes.{item['lane_id']}.not_authorization", item["not_authorization"], ) + iwooos_host_owner_decision_record_formal_record_queue_packets = iwooos_projection[ + "host_owner_decision_record_formal_record_queue_packets" + ] + assert_equal( + "iwooos_projection.host_owner_decision_record_formal_record_queue_packets.ids", + [item["packet_id"] for item in iwooos_host_owner_decision_record_formal_record_queue_packets], + expected_iwooos_host_owner_decision_record_formal_record_queue_packet_ids, + ) + assert_equal( + "iwooos_projection.host_owner_decision_record_formal_record_queue_packets.display_order", + [item["display_order"] for item in iwooos_host_owner_decision_record_formal_record_queue_packets], + list(range(1, len(expected_iwooos_host_owner_decision_record_formal_record_queue_packet_ids) + 1)), + ) + expected_iwooos_host_owner_decision_record_formal_record_queue_fields = [ + "record_identity_queue_packet", + "decision_summary_queue_packet", + "scope_expiry_queue_packet", + "scan_limits_queue_packet", + "credential_boundary_queue_packet", + "maintenance_rollback_queue_packet", + "validation_runtime_gate_queue_packet", + "no_execution_attestation_queue_packet", + ] + assert_equal( + "iwooos_projection.host_owner_decision_record_formal_record_queue_packets.queue_fields", + [item["queue_field"] for item in iwooos_host_owner_decision_record_formal_record_queue_packets], + expected_iwooos_host_owner_decision_record_formal_record_queue_fields, + ) + for item in iwooos_host_owner_decision_record_formal_record_queue_packets: + assert_equal( + f"iwooos_projection.host_owner_decision_record_formal_record_queue_packets.{item['packet_id']}.source_lane_id", + item["source_lane_id"], + "host_decision_record_formal_candidate_review_ready_for_record_queue_outcome_lane", + ) + assert_equal( + f"iwooos_projection.host_owner_decision_record_formal_record_queue_packets.{item['packet_id']}.display_mode", + item["display_mode"], + "owner_decision_record_formal_record_queue_packet_only", + ) + assert_equal( + f"iwooos_projection.host_owner_decision_record_formal_record_queue_packets.{item['packet_id']}.formal_record_queue_enqueued_count", + item["formal_record_queue_enqueued_count"], + 0, + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_formal_record_queue_packets.{item['packet_id']}.decision_record_created", + item["decision_record_created"], + ) + assert_equal( + f"iwooos_projection.host_owner_decision_record_formal_record_queue_packets.{item['packet_id']}.owner_decision_received_count", + item["owner_decision_received_count"], + 0, + ) + assert_equal( + f"iwooos_projection.host_owner_decision_record_formal_record_queue_packets.{item['packet_id']}.owner_decision_accepted_count", + item["owner_decision_accepted_count"], + 0, + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_formal_record_queue_packets.{item['packet_id']}.owner_approval_record_created", + item["owner_approval_record_created"], + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_formal_record_queue_packets.{item['packet_id']}.runtime_gate_opened", + item["runtime_gate_opened"], + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_formal_record_queue_packets.{item['packet_id']}.raw_payload_allowed", + item["raw_payload_allowed"], + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_formal_record_queue_packets.{item['packet_id']}.secret_value_collection_allowed", + item["secret_value_collection_allowed"], + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_formal_record_queue_packets.{item['packet_id']}.runtime_execution_authorized", + item["runtime_execution_authorized"], + ) + assert_false( + f"iwooos_projection.host_owner_decision_record_formal_record_queue_packets.{item['packet_id']}.action_buttons_allowed", + item["action_buttons_allowed"], + ) + assert_true( + f"iwooos_projection.host_owner_decision_record_formal_record_queue_packets.{item['packet_id']}.not_authorization", + item["not_authorization"], + ) assert_equal( "iwooos_projection.non_blocking_lane_ids", iwooos_projection["non_blocking_lane_ids"], @@ -2395,6 +2497,7 @@ def validate(root: Path) -> None: "display_host_owner_decision_record_formal_candidate_packets", "display_host_owner_decision_record_formal_candidate_review_checklist", "display_host_owner_decision_record_formal_candidate_review_outcome_lanes", + "display_host_owner_decision_record_formal_record_queue_packets", "display_evidence_refs", "display_forbidden_actions", ]: @@ -2485,6 +2588,11 @@ def validate(root: Path) -> None: "mark_host_owner_decision_record_formal_candidate_review_outcome_finalized", "create_host_owner_decision_record_from_formal_candidate_review_outcome", "open_runtime_gate_from_owner_decision_record_formal_candidate_review_outcome", + "treat_host_owner_decision_record_formal_record_queue_packet_as_approval", + "enqueue_host_owner_decision_record_formal_record_queue_from_frontend", + "create_host_owner_decision_record_from_formal_record_queue_packet", + "accept_host_owner_decision_record_from_formal_record_queue_packet", + "open_runtime_gate_from_owner_decision_record_formal_record_queue_packet", "apply_runtime_blocking_control", "switch_github_primary", "production_deploy",