wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

docs(security): add gitea owner response audit templates

Browse Source
This commit is contained in:
Your Name
2026-05-18 12:24:17 +08:00
parent d1c7ca66a3
commit 9f80b23db5
32 changed files with 283 additions and 50 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/security/SECURITY-FOLLOWUP-RUNTIME-GATE.md
View File

@@ -64,4 +64,4 @@ S3.4 是「批准後仍不能直接做事」的保險絲。
2026-05-17 S4.8 追加：Gitea follow-up runtime gate 已要求 S4.7 owner coverage attestation 先完成。即使未來 read-only inventory 被批准，仍要先看 public-only / local remote gap、org/user endpoint、110 adjacent source、canonical owner 與 legacy/inaccessible disposition 的 owner decision；未完成前不得執行 inventory。
2026-05-17 S4.9 追加，2026-05-18 補 request packet、template status ledger 與 collection checks：Gitea follow-up runtime gate 已要求 AwoooP 先顯示 S4.9 owner response request packet 與五個 template statuses，並用 collection checks 確認收件流程只記錄 metadata、不保存敏感值、不把 request sent 當成 accepted；owner response 通過 preflight、outcome lane 判定與基本驗收後，才可把 S4.7 owner scope decision 當成 read-only inventory 的前置 evidence。未收到或未驗收 owner response 前，不得執行 inventory，也不得標記 inventory complete。
2026-05-17 S4.9 追加，2026-05-18 補 request packet、template status ledger、audit event templates 與 collection checks：Gitea follow-up runtime gate 已要求 AwoooP 先顯示 S4.9 owner response request packet 與五個 template statuses，並用 audit event templates / collection checks 確認收件流程只記錄 metadata、不保存敏感值、不把 request sent 當成 accepted；owner response 通過 preflight、outcome lane 判定與基本驗收後，才可把 S4.7 owner scope decision 當成 read-only inventory 的前置 evidence。未收到或未驗收 owner response 前，不得執行 inventory，也不得標記 inventory complete。