feat(web): add IwoooS record queue packets

apps/web/messages/en.json

@@ -2150,6 +2150,54 @@
           "next": "active runtime gates=0; action buttons=false"
         }
       }
+    },
+    "hostOwnerDecisionRecordFormalRecordQueue": {
+      "title": "Host Owner Decision Record Formal Record Queue Packets",
+      "subtitle": "Formal record queue packets only organize the data packets a future human formal-record queue would need to read. This does not enqueue, create decision records, mark accepted, create approval records, or open runtime gates.",
+      "packetLabel": "Queue packet",
+      "fieldLabel": "Queue field",
+      "items": {
+        "queueIdentityPacket": {
+          "title": "Queue identity packet",
+          "body": "Organizes candidate record id, version, owner, review scope, and trace source so a human queue can trace identity.",
+          "field": "identity trace; queue enqueued=0"
+        },
+        "queueDecisionSummaryPacket": {
+          "title": "Queue decision summary packet",
+          "body": "Organizes decision summary, risk acceptance boundary, and no-execution statement without creating a formal decision record.",
+          "field": "decision summary; record created=false"
+        },
+        "queueScopeExpiryPacket": {
+          "title": "Queue scope and expiry packet",
+          "body": "Organizes host, network, service, exclusion, observation intent, and expiry while remaining readable queue information only.",
+          "field": "scope / expiry; finalized=0"
+        },
+        "queueScanLimitsPacket": {
+          "title": "Queue scan limits packet",
+          "body": "Organizes observe-only, future active scan, and credentialed scan limits so they cannot be mistaken for scan authorization.",
+          "field": "scan limits; scan authorized=false"
+        },
+        "queueCredentialBoundaryPacket": {
+          "title": "Queue credential boundary packet",
+          "body": "Organizes metadata-only credential owner, retention, masking, and forbidden collection boundary.",
+          "field": "metadata-only boundary; secret collection=false"
+        },
+        "queueMaintenanceRollbackPacket": {
+          "title": "Queue maintenance and rollback packet",
+          "body": "Organizes maintenance window, constraints, rollback owner, recovery path, and human contact.",
+          "field": "window / rollback; host update=false"
+        },
+        "queueValidationRuntimeGatePacket": {
+          "title": "Queue validation and runtime gate packet",
+          "body": "Organizes validation evidence, post-check metrics, baseline pointer, and the separate runtime gate requirement.",
+          "field": "validation / runtime pointer; active gates=0"
+        },
+        "queueNoExecutionAttestationPacket": {
+          "title": "Queue no-execution attestation packet",
+          "body": "Organizes the statement that nothing is executed, approved, or gate-opened so queue packets cannot be treated as authorization.",
+          "field": "not authorization; action buttons=false"
+        }
+      }
     }
   },
   "tickets": {

apps/web/messages/zh-TW.json

@@ -1697,7 +1697,7 @@
         },
         "maintenanceWindowNotChange": {
           "title": "Maintenance window not change",
-          "body": "確認維護窗口只是未來候選條件，不代表可以更新 Kali 或調校主機。",
+          "body": "確認維護窗口只是未來候選條件，不代表可以進行 Kali 主機套件變更或主機調校。",
           "guard": "host update=false"
         },
         "rollbackOwnerReadable": {
@@ -2151,6 +2151,54 @@
           "next": "active runtime gates=0；action buttons=false"
         }
       }
+    },
+    "hostOwnerDecisionRecordFormalRecordQueue": {
+      "title": "主機 Owner Decision Record Formal Record Queue Packets",
+      "subtitle": "Formal record queue packets 只整理未來人工正式紀錄佇列需要看到的資料包。這裡不 enqueue、不建立 decision record、不標記 accepted、不建立 approval record、不開 runtime gate。",
+      "packetLabel": "Queue packet",
+      "fieldLabel": "佇列欄位",
+      "items": {
+        "queueIdentityPacket": {
+          "title": "Queue identity packet",
+          "body": "整理 candidate record id、版本、owner、review scope 與 trace source，讓人工佇列能追蹤身份。",
+          "field": "identity trace；queue enqueued=0"
+        },
+        "queueDecisionSummaryPacket": {
+          "title": "Queue decision summary packet",
+          "body": "整理 decision summary、風險接受邊界與不執行聲明，但不建立正式 decision record。",
+          "field": "decision summary；record created=false"
+        },
+        "queueScopeExpiryPacket": {
+          "title": "Queue scope and expiry packet",
+          "body": "整理 host、network、service、exclusion、觀察目的與到期時間，仍只作為人工佇列可讀資訊。",
+          "field": "scope / expiry；finalized=0"
+        },
+        "queueScanLimitsPacket": {
+          "title": "Queue scan limits packet",
+          "body": "整理 observe-only、future active scan 與 credentialed scan limits，避免被誤讀成掃描授權。",
+          "field": "scan limits；scan authorized=false"
+        },
+        "queueCredentialBoundaryPacket": {
+          "title": "Queue credential boundary packet",
+          "body": "整理 metadata-only credential owner、retention、masking 與 forbidden collection 邊界。",
+          "field": "metadata-only boundary；secret collection=false"
+        },
+        "queueMaintenanceRollbackPacket": {
+          "title": "Queue maintenance and rollback packet",
+          "body": "整理維護窗口、限制條件、rollback owner、復原路徑與人工聯絡點。",
+          "field": "window / rollback；host update=false"
+        },
+        "queueValidationRuntimeGatePacket": {
+          "title": "Queue validation and runtime gate packet",
+          "body": "整理 validation evidence、post-check metrics、baseline pointer 與獨立 runtime gate 需求。",
+          "field": "validation / runtime pointer；active gates=0"
+        },
+        "queueNoExecutionAttestationPacket": {
+          "title": "Queue no-execution attestation packet",
+          "body": "整理仍不執行、不批准、不開 gate 的聲明，避免佇列資料包被當成授權。",
+          "field": "not authorization；action buttons=false"
+        }
+      }
     }
   },
   "tickets": {

apps/web/src/app/[locale]/iwooos/page.tsx

@@ -222,6 +222,13 @@ type HostOwnerDecisionRecordFormalCandidateReviewOutcomeLane = {
   tone: 'steady' | 'warn' | 'locked'
 }
 
+type HostOwnerDecisionRecordFormalRecordQueuePacket = {
+  key: string
+  packet: string
+  icon: typeof ShieldCheck
+  tone: 'steady' | 'warn' | 'locked'
+}
+
 const postureMetrics: PostureMetric[] = [
   { key: 'overall', value: '58%', tone: 'warn' },
   { key: 'framework', value: '80-85%', tone: 'steady' },
@@ -524,6 +531,17 @@ const hostOwnerDecisionRecordFormalCandidateReviewOutcomeLanes: HostOwnerDecisio
   { key: 'runtimeGateStillRequired', lane: 'FV8', icon: ShieldCheck, tone: 'locked' },
 ]
 
+const hostOwnerDecisionRecordFormalRecordQueuePackets: HostOwnerDecisionRecordFormalRecordQueuePacket[] = [
+  { key: 'queueIdentityPacket', packet: 'FQ1', icon: FileText, tone: 'warn' },
+  { key: 'queueDecisionSummaryPacket', packet: 'FQ2', icon: ClipboardCheck, tone: 'warn' },
+  { key: 'queueScopeExpiryPacket', packet: 'FQ3', icon: Radar, tone: 'warn' },
+  { key: 'queueScanLimitsPacket', packet: 'FQ4', icon: Activity, tone: 'locked' },
+  { key: 'queueCredentialBoundaryPacket', packet: 'FQ5', icon: Lock, tone: 'locked' },
+  { key: 'queueMaintenanceRollbackPacket', packet: 'FQ6', icon: Clock3, tone: 'warn' },
+  { key: 'queueValidationRuntimeGatePacket', packet: 'FQ7', icon: ShieldCheck, tone: 'locked' },
+  { key: 'queueNoExecutionAttestationPacket', packet: 'FQ8', icon: FileWarning, tone: 'locked' },
+]
+
 const evidenceItems = [
   'iwooos-posture-projection.snapshot.json',
   'security-rollout-policy.snapshot.json',
@@ -1378,6 +1396,38 @@ function HostOwnerDecisionRecordFormalCandidateReviewOutcomeCard({
   )
 }
 
+function HostOwnerDecisionRecordFormalRecordQueueCard({
+  item,
+}: {
+  item: HostOwnerDecisionRecordFormalRecordQueuePacket
+}) {
+  const t = useTranslations('iwooos.hostOwnerDecisionRecordFormalRecordQueue')
+  const Icon = item.icon
+  return (
+    <div style={{ ...band, minHeight: 190, padding: 16 }}>
+      <div style={{ display: 'flex', alignItems: 'center', justifyContent: 'space-between', gap: 12 }}>
+        <div style={{ display: 'flex', alignItems: 'center', gap: 9 }}>
+          <Icon size={18} color={toneColors[item.tone]} />
+          <span style={{ fontSize: 11, color: '#87867f' }}>{t('packetLabel')}</span>
+        </div>
+        <span style={{ fontSize: 11, color: '#9b978b' }}>{item.packet}</span>
+      </div>
+      <h2 style={{ fontSize: 14, margin: '12px 0 6px', color: '#141413' }}>
+        {t(`items.${item.key}.title` as never)}
+      </h2>
+      <p style={{ fontSize: 12, lineHeight: 1.55, color: '#6f6d66', margin: 0 }}>
+        {t(`items.${item.key}.body` as never)}
+      </p>
+      <div style={{ marginTop: 10, display: 'grid', gap: 5 }}>
+        <div style={{ fontSize: 11, color: '#87867f' }}>{t('fieldLabel')}</div>
+        <div style={{ fontSize: 11, color: toneColors[item.tone], lineHeight: 1.45 }}>
+          {t(`items.${item.key}.field` as never)}
+        </div>
+      </div>
+    </div>
+  )
+}
+
 export default function IwoooSPage({ params }: { params: { locale: string } }) {
   const t = useTranslations('iwooos')
 
@@ -1870,6 +1920,26 @@ export default function IwoooSPage({ params }: { params: { locale: string } }) {
           </div>
         </section>
 
+        <section style={{ marginBottom: 14 }}>
+          <div style={{ marginBottom: 14 }}>
+            <h2 style={{ fontSize: 16, margin: 0 }}>{t('hostOwnerDecisionRecordFormalRecordQueue.title')}</h2>
+            <p style={{ fontSize: 12, color: '#6f6d66', margin: '6px 0 0', lineHeight: 1.55 }}>
+              {t('hostOwnerDecisionRecordFormalRecordQueue.subtitle')}
+            </p>
+          </div>
+          <div
+            style={{
+              display: 'grid',
+              gridTemplateColumns: 'repeat(auto-fit, minmax(210px, 1fr))',
+              gap: 12,
+            }}
+          >
+            {hostOwnerDecisionRecordFormalRecordQueuePackets.map(item => (
+              <HostOwnerDecisionRecordFormalRecordQueueCard key={item.key} item={item} />
+            ))}
+          </div>
+        </section>
+
         <section
           style={{
             display: 'grid',